Re: [ANN] Apache Shiro 1.0.0-incubating Released!
On Tue, Jun 1, 2010 at 4:42 PM, sebb wrote: > On 01/06/2010, Les Hazlewood wrote: >> Otherwise we assume the release would have been voted against. > The lack of a DISCLAIMER was reported as part of the vote. > I don't know why it was not considered blocking. Either you vote or you don't, everything else is considered advisory, you know that. The release packages that most people in practice will use contain -incubating in the file name. I don't know what could be any more explicit. Anyhow, we'll add a file for the next release. >> Why isn't there a no-frills step-by-step, no room-for-error release >> checklist that podlings can follow to guarantee that all required >> criteria are met? It seems like such a checklist would be of the >> highest priority for the Incubator to ensure that personal >> interpretation is minimized or eliminated from the release process. Maven (the project) has super clear step-by-step instructions at http://maven.apache.org/developers/release/apache-release.html for releasing with Maven (kudos to Maven guys for that!) which I followed religiously. Maybe you could write another one for Maven-based podling releases but I'm not sure it's worth it. Most of the pain we (Shiro) experienced was with the website - these rules are really not clear and there's a million different competing technologies to put together a project website. Unless incubator starts dictating the technologies to use for a podling website (which I'd be strongly against), I don't see how one could write up a *simple* checklist. It's worth an effort to clarify the http://incubator.apache.org/guides/releasemanagement.html page though. Whatever the technology, I'd much rather improve something existing than whip up yet another semi-official Confluence page. Kalle - To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
Re: [ANN] Apache Shiro 1.0.0-incubating Released!
On 01/06/2010, Les Hazlewood wrote: > > The download page links to reposity.apache.org. > > > > However repository.apache.org is not to be used for direct > > publication to end users, it is for publishing to the main maven repo. > > > This wasn't clear on the apache infrastructure page - it states that > repository.apache.org is part of the distribution infrastructure. Now > that we've been notified that this is not the case, we'll fix it as > soon as possible. Thanks! Which page? Do you mean: http://www.apache.org/dev/release-publishing.html#distribution If so, I understand that is in the process of being updated. > > > Also, the downloads page does not have a link to the KEYS file. Nor > > does it have any documentation on how to use the sigs and hashes. > > > We'll fix that. Thanks! > > > > The downloads page should only link to the ASF mirrors, see for example: > > > > http://incubator.apache.org/photark/photark-downloads.html > > > > Also, there is no DISCLAIMER in any of the archive files. > > AIUI, Incubator releases MUST contain a disclaimer: > > > The branding link only specifies that podling websites must display > that disclaimer. That exact disclaimer is the very first paragraph on > the download page. http://incubator.apache.org/guides/branding.html#disclaimers says: "Podling web sites MUST include a clear disclaimer on their website and in all documentation (including releases) stating that they are in incubation." The important part here is "(including releases)". > AIUI, there is no mandate that a DISCLAIMER file must be included in the > actual packaged distribution. There is no requirement that the disclaimer be in a file called DISCLAIMER. However it must be present, as mentioned above. It is suggested that it is placed in a separate DISCLAIMER file as this makes it more obvious, and makes it easier to drop post-incubation. > Otherwise we assume the release would have been voted against. The lack of a DISCLAIMER was reported as part of the vote. I don't know why it was not considered blocking. > > On a side note, we're doing our best to adhere to all requirements, > and we're happy to do so. But it has been *incredibly* time consuming > and frustrating to try to interpret what should be step-by-step > courses of action to adhere to these requirements. > > Why isn't there a no-frills step-by-step, no room-for-error release > checklist that podlings can follow to guarantee that all required > criteria are met? It seems like such a checklist would be of the > highest priority for the Incubator to ensure that personal > interpretation is minimized or eliminated from the release process. I agree entirely. > This release management page [1] is incredibly long and full of policy > and reasoning, which is all well and good if one wants to understand > *why* these policies exist, but podlings really need a step-by-step > *how-to* guide that references the 'why' document so we can service > our communities as efficiently as possible. The 'why' guide is > fantastic to read at our leisure, but the 'how' document would be far > more useful to podlings when release time comes. Agreed it is long-winded. Toward the end it contains the section: http://incubator.apache.org/guides/releasemanagement.html#notes-disclaimer which says: "TODO: the incubator requires that users are informed that the by including a standard disclaimer. may be include in README, RELEASE_NOTES DISCLAIMER. It is recommended that it is not included in NOTICES" This is very badly worded. But given that NOTICE must be included in releases it implies that the disclaimer must also be included in releases. - To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
Re: [ANN] Apache Shiro 1.0.0-incubating Released!
+1 on that step by step wiki guide. I'm willing to contribute/discuss as I believe our release process could be simpler. Cheers Francis On 1 Jun 2010 22:50, "Les Hazlewood" wrote: Hi Sigfried, I guess that's my point. We use M2. I bet 80% (if not more) of podlings use M2. There shouldn't have to be much thought involved to get an M2-based project released - a de facto guide should exist and podlings can deviate from it where allowed and where it makes sense for their project. Until that 'baseline' exists, we all feel unnecessary pain. Thanks for your offer to help - I personally think there should be an incubator-wide editible wiki step-by-step guide that people can contribute to (via discussion) as necessary for M2 projects since that encompasses most Incubator projects. Any help in writing such a guide would be *immensely* appreciated! Thanks, Les On Tue, Jun 1, 2010 at 1:44 PM, Siegfried Goeschl wrote: > Hi folks,...
Re: [ANN] Apache Shiro 1.0.0-incubating Released!
Hi Sigfried, I guess that's my point. We use M2. I bet 80% (if not more) of podlings use M2. There shouldn't have to be much thought involved to get an M2-based project released - a de facto guide should exist and podlings can deviate from it where allowed and where it makes sense for their project. Until that 'baseline' exists, we all feel unnecessary pain. Thanks for your offer to help - I personally think there should be an incubator-wide editible wiki step-by-step guide that people can contribute to (via discussion) as necessary for M2 projects since that encompasses most Incubator projects. Any help in writing such a guide would be *immensely* appreciated! Thanks, Les On Tue, Jun 1, 2010 at 1:44 PM, Siegfried Goeschl wrote: > Hi folks, > > congratulation for getting the release out of the door ... :-) ... and shiro > folks (aka JSecurity) did an excellent job. > > Regarding the "no-frills step-by-step, no room-for-error release" > > +) it is difficult to write > > +) different projects have different tools to release (manual, Ant, Maven) > making the stuff even more difficult > > Maybe more stuff can be done to streamline your release process using M2 - > maybe I can lend you a hand > > Cheers, > > Siegfried Goeschl > > On 01.06.10 22:26, Les Hazlewood wrote: >>> >>> The download page links to reposity.apache.org. >>> >>> However repository.apache.org is not to be used for direct >>> publication to end users, it is for publishing to the main maven repo. >> >> This wasn't clear on the apache infrastructure page - it states that >> repository.apache.org is part of the distribution infrastructure. Now >> that we've been notified that this is not the case, we'll fix it as >> soon as possible. Thanks! >> >>> Also, the downloads page does not have a link to the KEYS file. Nor >>> does it have any documentation on how to use the sigs and hashes. >> >> We'll fix that. >> >>> >>> The downloads page should only link to the ASF mirrors, see for example: >>> >>> http://incubator.apache.org/photark/photark-downloads.html >>> >>> Also, there is no DISCLAIMER in any of the archive files. >>> AIUI, Incubator releases MUST contain a disclaimer: >> >> The branding link only specifies that podling websites must display >> that disclaimer. That exact disclaimer is the very first paragraph on >> the download page. AIUI, there is no mandate that a DISCLAIMER file >> must be included in the actual packaged distribution. Otherwise we >> assume the release would have been voted against. >> >> On a side note, we're doing our best to adhere to all requirements, >> and we're happy to do so. But it has been *incredibly* time consuming >> and frustrating to try to interpret what should be step-by-step >> courses of action to adhere to these requirements. >> >> Why isn't there a no-frills step-by-step, no room-for-error release >> checklist that podlings can follow to guarantee that all required >> criteria are met? It seems like such a checklist would be of the >> highest priority for the Incubator to ensure that personal >> interpretation is minimized or eliminated from the release process. >> >> This release management page [1] is incredibly long and full of policy >> and reasoning, which is all well and good if one wants to understand >> *why* these policies exist, but podlings really need a step-by-step >> *how-to* guide that references the 'why' document so we can service >> our communities as efficiently as possible. The 'why' guide is >> fantastic to read at our leisure, but the 'how' document would be far >> more useful to podlings when release time comes. >> >> My .02, >> >> Les >> >> [1] http://incubator.apache.org/guides/releasemanagement.html >> >> - >> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org >> For additional commands, e-mail: general-h...@incubator.apache.org >> >> > > - > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > For additional commands, e-mail: general-h...@incubator.apache.org > > - To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
Re: [ANN] Apache Shiro 1.0.0-incubating Released!
Hi folks, congratulation for getting the release out of the door ... :-) ... and shiro folks (aka JSecurity) did an excellent job. Regarding the "no-frills step-by-step, no room-for-error release" +) it is difficult to write +) different projects have different tools to release (manual, Ant, Maven) making the stuff even more difficult Maybe more stuff can be done to streamline your release process using M2 - maybe I can lend you a hand Cheers, Siegfried Goeschl On 01.06.10 22:26, Les Hazlewood wrote: The download page links to reposity.apache.org. However repository.apache.org is not to be used for direct publication to end users, it is for publishing to the main maven repo. This wasn't clear on the apache infrastructure page - it states that repository.apache.org is part of the distribution infrastructure. Now that we've been notified that this is not the case, we'll fix it as soon as possible. Thanks! Also, the downloads page does not have a link to the KEYS file. Nor does it have any documentation on how to use the sigs and hashes. We'll fix that. The downloads page should only link to the ASF mirrors, see for example: http://incubator.apache.org/photark/photark-downloads.html Also, there is no DISCLAIMER in any of the archive files. AIUI, Incubator releases MUST contain a disclaimer: The branding link only specifies that podling websites must display that disclaimer. That exact disclaimer is the very first paragraph on the download page. AIUI, there is no mandate that a DISCLAIMER file must be included in the actual packaged distribution. Otherwise we assume the release would have been voted against. On a side note, we're doing our best to adhere to all requirements, and we're happy to do so. But it has been *incredibly* time consuming and frustrating to try to interpret what should be step-by-step courses of action to adhere to these requirements. Why isn't there a no-frills step-by-step, no room-for-error release checklist that podlings can follow to guarantee that all required criteria are met? It seems like such a checklist would be of the highest priority for the Incubator to ensure that personal interpretation is minimized or eliminated from the release process. This release management page [1] is incredibly long and full of policy and reasoning, which is all well and good if one wants to understand *why* these policies exist, but podlings really need a step-by-step *how-to* guide that references the 'why' document so we can service our communities as efficiently as possible. The 'why' guide is fantastic to read at our leisure, but the 'how' document would be far more useful to podlings when release time comes. My .02, Les [1] http://incubator.apache.org/guides/releasemanagement.html - To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org - To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
Re: [ANN] Apache Shiro 1.0.0-incubating Released!
> The download page links to reposity.apache.org. > > However repository.apache.org is not to be used for direct > publication to end users, it is for publishing to the main maven repo. This wasn't clear on the apache infrastructure page - it states that repository.apache.org is part of the distribution infrastructure. Now that we've been notified that this is not the case, we'll fix it as soon as possible. Thanks! > Also, the downloads page does not have a link to the KEYS file. Nor > does it have any documentation on how to use the sigs and hashes. We'll fix that. > > The downloads page should only link to the ASF mirrors, see for example: > > http://incubator.apache.org/photark/photark-downloads.html > > Also, there is no DISCLAIMER in any of the archive files. > AIUI, Incubator releases MUST contain a disclaimer: The branding link only specifies that podling websites must display that disclaimer. That exact disclaimer is the very first paragraph on the download page. AIUI, there is no mandate that a DISCLAIMER file must be included in the actual packaged distribution. Otherwise we assume the release would have been voted against. On a side note, we're doing our best to adhere to all requirements, and we're happy to do so. But it has been *incredibly* time consuming and frustrating to try to interpret what should be step-by-step courses of action to adhere to these requirements. Why isn't there a no-frills step-by-step, no room-for-error release checklist that podlings can follow to guarantee that all required criteria are met? It seems like such a checklist would be of the highest priority for the Incubator to ensure that personal interpretation is minimized or eliminated from the release process. This release management page [1] is incredibly long and full of policy and reasoning, which is all well and good if one wants to understand *why* these policies exist, but podlings really need a step-by-step *how-to* guide that references the 'why' document so we can service our communities as efficiently as possible. The 'why' guide is fantastic to read at our leisure, but the 'how' document would be far more useful to podlings when release time comes. My .02, Les [1] http://incubator.apache.org/guides/releasemanagement.html - To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
Re: [ANN] Apache Shiro 1.0.0-incubating Released!
On 01/06/2010, Les Hazlewood wrote: > Dear Apache Shiro Community, > > We are proud and excited to offer Apache Shiro's first stable release > as an Apache Incubator podling! > > Version 1.0.0-incubating is available immediately for download here: > > http://incubator.apache.org/shiro/download.html Sorry to keep going on about Shiro, but the download page does not follow standard ASF practice. The download page links to reposity.apache.org. However repository.apache.org is not to be used for direct publication to end users, it is for publishing to the main maven repo. Also, the downloads page does not have a link to the KEYS file. Nor does it have any documentation on how to use the sigs and hashes. The downloads page should only link to the ASF mirrors, see for example: http://incubator.apache.org/photark/photark-downloads.html Also, there is no DISCLAIMER in any of the archive files. AIUI, Incubator releases MUST contain a disclaimer: http://incubator.apache.org/guides/branding.html#disclaimers and http://incubator.apache.org/guides/mentor.html#documents-clean-up S. P.S. The website now makes the incubation status clear - thanks! - To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
