[RESULT][VOTE] Release Apache Daffodil 3.6.0-rc2

2023-11-03 Thread Steve Lawrence

The VOTE to release Apache Daffodil 3.6.0-rc2 is now closed.

The vote passes with:

3 binding +1

The VOTE thread:

https://lists.apache.org/thread/r17wynyd7d03v4rd3j6skqk8y13rlhy5

The vote breakdown is:

+1 Steve Lawrence (binding)
+1 Mike Beckerle (binding)
+1 Dave Thompson (binding)

Thanks to everyone who voted!


RE: [VOTE] Release Apache Daffodil 3.6.0-rc2

2023-11-03 Thread Thompson, Dave
+1 (binding)

Tested on v3.6.0-rc1

- Verified/closed remaining v3.6.0 assigned JIRA tickets.
- Successfully executed Daffodil sub-module SBT Test suites on CentOS 7 and the 
following Java versions:
   - Java 8
   - Java 11
   - Java 17
   - Java 21 (Note: not officially supported yet)
- Executed the nightly performance on Java versions with no unexpected 
failures/errors:
   - Java 8
   - Java 11
   - Java 17
   - Java 21 (Note: not officially supported yet)

Tested on v3.6.0-rc2

- Verified/closed v3.6.0 assigned JIRA tickets created and resolved during 
v3.6.0-rc1 test cycle.
- Successfully executed Daffodil sub-module SBT Test suites on CentOS 7 and 
Java 17.
- Executed the nightly performance on CentOS 7 and Java 17 with no unexpected 
failures/errors:
- Executed the dfdl-regression-test suite script with no unexpected/unexplained 
failures/errors.



-Original Message-
From: Steve Lawrence  
Sent: Tuesday, October 31, 2023 10:52 AM
To: dev@daffodil.apache.org
Subject: [VOTE] Release Apache Daffodil 3.6.0-rc2

Hi all,

I'd like to call a vote to release Apache Daffodil 3.6.0-rc2.

All distribution packages, including signatures, digests, etc. can be found at:

https://dist.apache.org/repos/dist/dev/daffodil/3.6.0-rc2/

Staging artifacts can be found at:

https://repository.apache.org/content/repositories/orgapachedaffodil-1035/

This release has been signed with PGP key 36F3494B033AE661, corresponding to 
slawre...@apache.org, which is included in the KEYS file here:

https://downloads.apache.org/daffodil/KEYS

The release candidate has been tagged in git with v3.6.0-rc2.

For reference, here is a list of all resolved JIRA issues tagged with 3.6.0:

https://s.apache.org/daffodil-issues-3.6.0

For a summary of the changes in this release, see:

https://daffodil.apache.org/releases/3.6.0/

Please review and vote. The vote will be open for at least 72 hours (Friday, 3 
October 2023, 11:00 EST).

[ ] +1 approve
[ ] +0 no opinion
[ ] -1 disapprove (and reason why)


Re: [VOTE] Release Apache Daffodil 3.6.0-rc2

2023-11-03 Thread Mike Beckerle
I forgot to mention that I also checked all the file integrity and
signature aspects: log below.

gpg --verify ./daffodil-core_2.12-3.6.0.jar.asc
./daffodil-core_2.12-3.6.0.jar
gpg: Signature made Tue 31 Oct 2023 10:28:40 AM EDT
gpg:using RSA key B58C81142758101A43D5B17D36F3494B033AE661
gpg: Good signature from "Steve Lawrence " [full]
PASSED GPG Signature Check
gpg --verify ./daffodil-tdml-processor_2.12-3.6.0-sources.jar.asc
./daffodil-tdml-processor_2.12-3.6.0-sources.jar
gpg: Signature made Tue 31 Oct 2023 10:28:41 AM EDT
gpg:using RSA key B58C81142758101A43D5B17D36F3494B033AE661
gpg: Good signature from "Steve Lawrence " [full]
PASSED GPG Signature Check
gpg --verify ./daffodil-schematron_2.12-3.6.0-javadoc.jar.asc
./daffodil-schematron_2.12-3.6.0-javadoc.jar
gpg: Signature made Tue 31 Oct 2023 10:27:59 AM EDT
gpg:using RSA key B58C81142758101A43D5B17D36F3494B033AE661
gpg: Good signature from "Steve Lawrence " [full]
PASSED GPG Signature Check
gpg --verify ./daffodil-sapi_2.12-3.6.0.jar.asc
./daffodil-sapi_2.12-3.6.0.jar
gpg: Signature made Tue 31 Oct 2023 10:28:16 AM EDT
gpg:using RSA key B58C81142758101A43D5B17D36F3494B033AE661
gpg: Good signature from "Steve Lawrence " [full]
PASSED GPG Signature Check
gpg --verify ./daffodil-slf4j-logger_2.12-3.6.0-sources.jar.asc
./daffodil-slf4j-logger_2.12-3.6.0-sources.jar
gpg: Signature made Tue 31 Oct 2023 10:27:57 AM EDT
gpg:using RSA key B58C81142758101A43D5B17D36F3494B033AE661
gpg: Good signature from "Steve Lawrence " [full]
PASSED GPG Signature Check
gpg --verify ./daffodil-runtime1_2.12-3.6.0.jar.asc
./daffodil-runtime1_2.12-3.6.0.jar
gpg: Signature made Tue 31 Oct 2023 10:29:03 AM EDT
gpg:using RSA key B58C81142758101A43D5B17D36F3494B033AE661
gpg: Good signature from "Steve Lawrence " [full]
PASSED GPG Signature Check
gpg --verify ./daffodil-tdml-lib_2.12-3.6.0.jar.asc
./daffodil-tdml-lib_2.12-3.6.0.jar
gpg: Signature made Tue 31 Oct 2023 10:28:06 AM EDT
gpg:using RSA key B58C81142758101A43D5B17D36F3494B033AE661
gpg: Good signature from "Steve Lawrence " [full]
PASSED GPG Signature Check
gpg --verify ./daffodil-runtime1-layers_2.12-3.6.0-javadoc.jar.asc
./daffodil-runtime1-layers_2.12-3.6.0-javadoc.jar
gpg: Signature made Tue 31 Oct 2023 10:28:00 AM EDT
gpg:using RSA key B58C81142758101A43D5B17D36F3494B033AE661
gpg: Good signature from "Steve Lawrence " [full]
PASSED GPG Signature Check
gpg --verify ./daffodil-codegen-c_2.12-3.6.0-javadoc.jar.asc
./daffodil-codegen-c_2.12-3.6.0-javadoc.jar
gpg: Signature made Tue 31 Oct 2023 10:28:18 AM EDT
gpg:using RSA key B58C81142758101A43D5B17D36F3494B033AE661
gpg: Good signature from "Steve Lawrence " [full]
PASSED GPG Signature Check
gpg --verify ./daffodil-runtime1_2.12-3.6.0-sources.jar.asc
./daffodil-runtime1_2.12-3.6.0-sources.jar
gpg: Signature made Tue 31 Oct 2023 10:29:03 AM EDT
gpg:using RSA key B58C81142758101A43D5B17D36F3494B033AE661
gpg: Good signature from "Steve Lawrence " [full]
PASSED GPG Signature Check
gpg --verify ./daffodil-sapi_2.12-3.6.0-javadoc.jar.asc
./daffodil-sapi_2.12-3.6.0-javadoc.jar
gpg: Signature made Tue 31 Oct 2023 10:28:17 AM EDT
gpg:using RSA key B58C81142758101A43D5B17D36F3494B033AE661
gpg: Good signature from "Steve Lawrence " [full]
PASSED GPG Signature Check
gpg --verify ./daffodil-runtime1-unparser_2.12-3.6.0-javadoc.jar.asc
./daffodil-runtime1-unparser_2.12-3.6.0-javadoc.jar
gpg: Signature made Tue 31 Oct 2023 10:28:15 AM EDT
gpg:using RSA key B58C81142758101A43D5B17D36F3494B033AE661
gpg: Good signature from "Steve Lawrence " [full]
PASSED GPG Signature Check
gpg --verify ./daffodil-runtime1-unparser_2.12-3.6.0-sources.jar.asc
./daffodil-runtime1-unparser_2.12-3.6.0-sources.jar
gpg: Signature made Tue 31 Oct 2023 10:28:15 AM EDT
gpg:using RSA key B58C81142758101A43D5B17D36F3494B033AE661
gpg: Good signature from "Steve Lawrence " [full]
PASSED GPG Signature Check
gpg --verify ./daffodil-codegen-c_2.12-3.6.0-sources.jar.asc
./daffodil-codegen-c_2.12-3.6.0-sources.jar
gpg: Signature made Tue 31 Oct 2023 10:28:18 AM EDT
gpg:using RSA key B58C81142758101A43D5B17D36F3494B033AE661
gpg: Good signature from "Steve Lawrence " [full]
PASSED GPG Signature Check
gpg --verify ./daffodil-tdml-lib_2.12-3.6.0-sources.jar.asc
./daffodil-tdml-lib_2.12-3.6.0-sources.jar
gpg: Signature made Tue 31 Oct 2023 10:28:06 AM EDT
gpg:using RSA key B58C81142758101A43D5B17D36F3494B033AE661
gpg: Good signature from "Steve Lawrence " [full]
PASSED GPG Signature Check
gpg --verify ./daffodil-udf_2.12-3.6.0.jar.asc ./daffodil-udf_2.12-3.6.0.jar
gpg: Signature made Tue 31 Oct 2023 10:27:50 AM EDT
gpg:using RSA key B58C81142758101A43D5B17D36F3494B033AE661
gpg: Good signature from "Steve Lawrence " [full]
PASSED GPG Signature Check
gpg --verify ./daffodil-s

Re: [VOTE] Release Apache Daffodil 3.6.0-rc2

2023-11-03 Thread Mike Beckerle
+1 (binding)

I'm trying to make a very big DFDL multi-part schema work,and all tests
(thousands) pass save just 2.

The 2 tests that fail I believe are pilot error in the test configurations.

My only small misgiving is that I haven't got it resolved to exactly why
yet. But it feels very unlikely it has anything to do with 3.6.0-rc2.

It is a little hard to tell as I don't have a baseline of this schema's
behavior for daffodil 3.5.0, only for daffodil 3.4.0, but even then I
really don't know if these specific tests were working there. This
particular schema has various dependencies on internal entry points of
daffodil, and since the packages changed for internals of daffodil since
3.4.0 it's not easy to switch back and forth from 3.6.0-rc2 testing to
3.4.0 testing.

The somewhat bigger misgiving is that my IDE, (IntelliJ IDEA), misbehaves
working with 3.6.0-rc2. In strange ways. I am quite dependent as a
developer on this IDE, so I do have to get to the bottom of these issues.
Some junit tests, when you right-click and choose run, fail instantly with
a stack overflow while reloading a pre-compiled DFDL schema binary. Same
test works fine run from sbt. It's quite strange. There's nothing different
about these tests. They are regular TDML-based tests kicked off by a scala
junit test to drive it. The other TDML tests in the same TDML file using
the same pre-compiled schema work fine. I don't have it fully characterized
yet.

None of this happens if you run the tests via plain 'sbt test', though that
is supposedly also how IntelliJ IDEA runs them.

These issues don't seem like they could be related to anything in the
content of our 3.6.0-rc2 release. They seem like some
configuration/environment issue. But I don't have them isolated fully yet,
and haven't tried the IDE on other schemas than this very big one I'm
working with.

These issues seem sufficiently unlikely to be related to the actual
content/changes in 3.6.0-rc2 that despite these misgivings I'm in favor of
moving forward with the release. So +1 from me.







On Fri, Nov 3, 2023 at 10:13 AM Steve Lawrence  wrote:

> +1 (binding)
>
> I checked:
>
> [OK] hashes and signatures of source and helper binaries are correct
> [OK] signature of git tag is correct
> [OK] source release matches git tag (minus KEYS file)
> [OK] source compiles and all tests pass (both en_US and de_DE)
> [OK] helper tgz/zip/msi/rpm all contain the same content except where
> expected
> [OK] jars in helper binaries and the repository are exactly the same
> [OK] jars built from source are exactly the same as helper binary jars
> [OK] distributed dependencies in helper binaries are same as from maven
> [OK] src, binaries, and jars include correct LICENSE/NOTICE
> [OK] RAT check passes
> [OK] no unexpected binaries in source
> [OK] rpm and msi install and run with basic usage
> [OK] ~80 public and private DFDL schema projects pass tests
> [OK] No issues found in JavaDoc and ScalaDoc
> [OK] No open CVE's found using sbt-dependency-check plugin
> [OK] Daffodil NiFi processor builds and tests pass
>
>
> On 2023-10-31 10:51 AM, Steve Lawrence wrote:
> > Hi all,
> >
> > I'd like to call a vote to release Apache Daffodil 3.6.0-rc2.
> >
> > All distribution packages, including signatures, digests, etc. can be
> > found at:
> >
> > https://dist.apache.org/repos/dist/dev/daffodil/3.6.0-rc2/
> >
> > Staging artifacts can be found at:
> >
> >
> https://repository.apache.org/content/repositories/orgapachedaffodil-1035/
> >
> > This release has been signed with PGP key 36F3494B033AE661,
> > corresponding to slawre...@apache.org, which is included in the KEYS
> > file here:
> >
> > https://downloads.apache.org/daffodil/KEYS
> >
> > The release candidate has been tagged in git with v3.6.0-rc2.
> >
> > For reference, here is a list of all resolved JIRA issues tagged with
> > 3.6.0:
> >
> > https://s.apache.org/daffodil-issues-3.6.0
> >
> > For a summary of the changes in this release, see:
> >
> > https://daffodil.apache.org/releases/3.6.0/
> >
> > Please review and vote. The vote will be open for at least 72 hours
> > (Friday, 3 October 2023, 11:00 EST).
> >
> > [ ] +1 approve
> > [ ] +0 no opinion
> > [ ] -1 disapprove (and reason why)
>
>


Re: [VOTE] Release Apache Daffodil 3.6.0-rc2

2023-11-03 Thread Steve Lawrence

+1 (binding)

I checked:

[OK] hashes and signatures of source and helper binaries are correct
[OK] signature of git tag is correct
[OK] source release matches git tag (minus KEYS file)
[OK] source compiles and all tests pass (both en_US and de_DE)
[OK] helper tgz/zip/msi/rpm all contain the same content except where 
expected

[OK] jars in helper binaries and the repository are exactly the same
[OK] jars built from source are exactly the same as helper binary jars
[OK] distributed dependencies in helper binaries are same as from maven
[OK] src, binaries, and jars include correct LICENSE/NOTICE
[OK] RAT check passes
[OK] no unexpected binaries in source
[OK] rpm and msi install and run with basic usage
[OK] ~80 public and private DFDL schema projects pass tests
[OK] No issues found in JavaDoc and ScalaDoc
[OK] No open CVE's found using sbt-dependency-check plugin
[OK] Daffodil NiFi processor builds and tests pass


On 2023-10-31 10:51 AM, Steve Lawrence wrote:

Hi all,

I'd like to call a vote to release Apache Daffodil 3.6.0-rc2.

All distribution packages, including signatures, digests, etc. can be 
found at:


https://dist.apache.org/repos/dist/dev/daffodil/3.6.0-rc2/

Staging artifacts can be found at:

https://repository.apache.org/content/repositories/orgapachedaffodil-1035/

This release has been signed with PGP key 36F3494B033AE661, 
corresponding to slawre...@apache.org, which is included in the KEYS 
file here:


https://downloads.apache.org/daffodil/KEYS

The release candidate has been tagged in git with v3.6.0-rc2.

For reference, here is a list of all resolved JIRA issues tagged with 
3.6.0:


https://s.apache.org/daffodil-issues-3.6.0

For a summary of the changes in this release, see:

https://daffodil.apache.org/releases/3.6.0/

Please review and vote. The vote will be open for at least 72 hours 
(Friday, 3 October 2023, 11:00 EST).


[ ] +1 approve
[ ] +0 no opinion
[ ] -1 disapprove (and reason why)