Re: Voting on past releases

2014-02-26 Thread Michal Mocny
Sorry to add confusion, I chose my phrasing poorly. I do understand the rationale. When I said "All-in-all I don't think this is that useful of a process to do" I meant specifically for the single step of checking the bundled zip to match the bundled hash, not the whole process of verifying the co

Re: Voting on past releases

2014-02-25 Thread sebb
On 25 February 2014 23:12, Lorin Beer wrote: > Sebb, > > I've noticed in multiple posts from you a deep confusion over how our > project operates. > > To avoid generating unhelpful noise on our list and in the middle of > important discussions, I would respectfully suggest you follow some of the >

Re: Voting on past releases

2014-02-25 Thread Lorin Beer
Sebb, I've noticed in multiple posts from you a deep confusion over how our project operates. To avoid generating unhelpful noise on our list and in the middle of important discussions, I would respectfully suggest you follow some of the links Joe Bowser has posted and educate yourself on how our

Re: Voting on past releases

2014-02-25 Thread Joe Bowser
I'm just going to leave this here: http://git-scm.com/book/en/Getting-Started-Git-Basics http://wiki.apache.org/cordova/CuttingReleases On 25 Feb 2014 14:38, "sebb" wrote: > On 25 February 2014 21:47, Michal Mocny wrote: > > Some tips, since I found this a pain to figure out. To verify the sh

Re: Voting on past releases

2014-02-25 Thread sebb
On 25 February 2014 21:47, Michal Mocny wrote: > Some tips, since I found this a pain to figure out. To verify the sha file > matches: > >> gpg --print-md SHA512 *.zip | diff - *.sha && echo "Exact match" >> gpg --print-md MD5 *.zip | diff - *.md5 && echo "Exact match" > > Oddly the output of gpg

Re: Voting on past releases

2014-02-25 Thread Joe Bowser
I'm checking Cordova JS. The process gets extremely predictable once we get into everyone using Coho. On Tue, Feb 25, 2014 at 1:47 PM, Michal Mocny wrote: > Some tips, since I found this a pain to figure out. To verify the sha file > matches: > >> gpg --print-md SHA512 *.zip | diff - *.sha && e

Re: Voting on past releases

2014-02-25 Thread Michal Mocny
Some tips, since I found this a pain to figure out. To verify the sha file matches: > gpg --print-md SHA512 *.zip | diff - *.sha && echo "Exact match" > gpg --print-md MD5 *.zip | diff - *.md5 && echo "Exact match" Oddly the output of gpg is different than that of sha512sum and md5sum so you can

Re: Voting on past releases

2014-02-25 Thread Lorin Beer
I've just submitted my +1 for a number of the past releases, and thought I'd document here what the steps I took were. Since these are past releases, some of which I helped tag and have already run, the checklist is slightly simplified: - download package - sanity check package for expected relea

Voting on past releases

2014-02-25 Thread Steven Gill
It has been brought to our attention that some of our previous releases were not voted on in accordance with the ASF by-laws. After some discussion, we've decided to call a retroactive vote on these releases. A vote is being conducted by the PMC and the results will be posted here when complete.