Hello, Ran checks on licenses, built from sources, checked binary.
Here is my vote: +1 (non binding) Best, Leonard > On 6 Dec 2024, at 22:43, Bertil Chapuis <bchap...@gmail.com> wrote: > > Hello Everyone, > > Here are some of the commands I use to check the releases. I don’t use a > script as the outputs often require to be checked individually. I hope this > may help those of you who are not yet familiar with the process. > > Notice that mvn apache-rat:check should work for a freshly decompressed > archive, but may fail after building from source or after generating the > report due to the creation of additional files. > > Best, > > Bertil > > > > — Source release — > > # Download the source release > wget > https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.1-rc4/apache-baremaps-0.8.1-rc4-incubating-src.tar.gz > wget > https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.1-rc4/apache-baremaps-0.8.1-rc4-incubating-src.tar.gz.asc > wget > https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.1-rc4/apache-baremaps-0.8.1-rc4-incubating-src.tar.gz.sha512 > > # Verify the signature of the source release > gpg --verify apache-baremaps-0.8.1-rc4-incubating-src.tar.gz.asc > > # Verify the checksum of the source release > shasum -a 512 -c apache-baremaps-0.8.1-rc4-incubating-src.tar.gz.sha512 > > # Unpack the source release and navigate to the source directory > tar -xvf apache-baremaps-0.8.1-rc4-incubating-src.tar.gz > cd apache-baremaps-0.8.1-incubating-src > > # Check the license headers > mvn apache-rat:check > > # Generate the license headers report > mvn apache-rat:rat > less target/rat.txt > > # Build the project from source > mvn clean package > > > > — Binary release — > > # Download the binary release > wget > https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.1-rc4/apache-baremaps-0.8.1-rc4-incubating-bin.tar.gz > wget > https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.1-rc4/apache-baremaps-0.8.1-rc4-incubating-bin.tar.gz.asc > wget > https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.1-rc4/apache-baremaps-0.8.1-rc4-incubating-bin.tar.gz.sha512 > > # Verify the signature of the binary release > gpg --verify apache-baremaps-0.8.1-rc4-incubating-bin.tar.gz.asc > > # Verify the checksum of the binary release > shasum -a 512 -c apache-baremaps-0.8.1-rc4-incubating-bin.tar.gz.sha512 > > # Unpack the binary release and navigate to the binary directory > tar -xvf apache-baremaps-0.8.1-rc4-incubating-bin.tar.gz > cd apache-baremaps-0.8.1-incubating-bin > > # Check if the binary release works > ./bin/baremaps --version > > > > >> On 6 Dec 2024, at 15:58, Bertil Chapuis <bchap...@gmail.com> wrote: >> >> Hello Everyone, >> >> This release candidate addresses several licensing issues identified on the >> incubator mailing list. I’ve done my best to harden everything, and I’d like >> to thank you in advance for your help in assessing this release candidate. >> Let’s think of this as the liveness property of Baremaps: something good >> eventually happens 😉 >> >> You can read the release notes here: >> https://github.com/apache/incubator-baremaps/releases/tag/v0.8.1-rc4 >> >> The commit to be voted upon: >> https://github.com/apache/incubator-baremaps/tree/v0.8.1-rc4 >> >> Its tag is v0.8.1-rc4 and its hash is >> e6a24651ab7e347f336c7a8544984e998dfc0dd9. >> >> The artifacts to be voted on are located here: >> https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.1-rc4/ >> >> The hashes of the artifacts are as follows: >> 3519d3587d31923e72c374a3ab6f5684d1c3e035abf6eb20ba4c5d8e377bb749fe4f2d4c74168d931d6263b851bdb9fefa499a5f544c0f46c9a539218c9a7865 >> ./apache-baremaps-0.8.1-rc4-incubating-src.tar.gz >> 6c5b275864c58fa60fc4d13da07434ad9f411abfb879017b940832af9c37a213ab8b8e9fa435ce3dcba52b83a79978d65a01f1d0b3f41875ebd8509c1fb721f9 >> ./apache-baremaps-0.8.1-rc4-incubating-bin.tar.gz >> >> Release candidate artifacts are signed automatically with the key >> (C81AC42AF2A7CACDF4C8A4F6936E280DF16599CB) created by the INFRA team: >> https://downloads.apache.org/incubator/baremaps/KEYS >> >> The README file for the src distribution contains instructions for building >> and testing the release. >> >> Please vote on releasing this package as Apache Baremaps 0.8.1 (incubating). >> >> The vote is open for 72 hours but can be open longer if the required number >> of votes is not obtained. It passes if a majority of at least three +1 PPMC >> votes are cast. >> [ ] +1 Release this package as Apache Baremaps 0.8.1 (incubating) >> [ ] 0 I don't feel strongly about it, but I'm okay with the release >> [ ] -1 Do not release this package because... >> >> Here is my vote. >> >> +1 (non-binding): >> - checked the presence of the LICENSE, NOTICE, and DISCLAIMER files in src >> and bin; >> - checked the presence of the licenses and notices directories in src and >> bin; >> - checked the output of the rat report in the source release; >> - built from source; >> - executed the binary distribution; >> - checked the checksums; >> - checked the signatures. >> >> Best regards, >> >> Bertil > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@baremaps.apache.org > For additional commands, e-mail: dev-h...@baremaps.apache.org > --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@baremaps.apache.org For additional commands, e-mail: dev-h...@baremaps.apache.org
