Big thanks to Shahar for recutting this.

+1 (binding) for PMC checks

- SVN
- in Docker installation
- Reproducible build
- Licence
- Signature
- Checksums

Regards,
Rahul Vats

On Wed, 1 Jul 2026 at 20:43, Amogh Desai <[email protected]> wrote:

> +1 binding.
>
> - Checked SVN
> - Checked reproducible package builds
> - Checked licences
> - Checked signatures
> - Checked SHA512 checks
>
> Checked the md5sum for the source code of spark provider with my
> changes and did some testing around it. Looks great still.
>
> Thanks & Regards,
> Amogh Desai
>
>
> On Wed, Jul 1, 2026 at 5:33 PM Jarek Potiuk <[email protected]> wrote:
>
> > +1 (binding)
> >
> > Thanks for re-cutting with the source artifact added. Re-ran the full
> > PMC verification on the rerun RC:
> >
> > - SVN dev folder complete - all 6 providers (wheel + sdist + .asc +
> > .sha512) plus the apache_airflow_providers-2026-06-26-source.tar.gz
> > trio that was missing before.
> > - SHA512: 13/13 OK.
> > - GPG: 13/13 good signatures, all from your key
> > (DAF549DB1C0B31D8BCE167506834BFD7959CB6D5, in KEYS), including the
> > source tarball.
> > - Reproducible build: 13/13 byte-for-byte identical, rebuilt from tag
> > providers/2026-06-26 - both the source tarball and all 12 provider
> > wheels/sdists.
> > - RAT (apache-rat 0.18) on the unpacked source: 0 Unapproved, 0 Unknown.
> >
> > The source tarball reproduces byte-identical, so this clears my -1
> > from the original vote.
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: [email protected]
> > For additional commands, e-mail: [email protected]
> >
> >
>

Reply via email to