Hello Everyone, Following the issue with the copyright identified in the NOTICE file, here is a second release candidate.
You can read the release notes here: https://github.com/apache/incubator-baremaps/releases/tag/v0.8.2-rc2 The commit to be voted upon: https://github.com/apache/incubator-baremaps/tree/v0.8.2-rc2 Its tag is v0.8.2-rc2 and its hash is 905719c6ec705de2abbc15a0e57e206255c79373. The artifacts to be voted on are located here: https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.2-rc2/ The hashes of the artifacts are as follows: ce8ad63320b1d3d032229ad0e3c56181b38136872dbe81c437dac861421a0ee8207f5eb42eaec2e7478c258b1a1343d13c76c16b545d3e5755752a71b0e9aaf2 ./apache-baremaps-0.8.2-rc2-incubating-src.tar.gz 5f691e5617ad45aee58e79f6695293bf84241018a379ad68c4f30eb654c43612c51107a831fb799e3cc990c02e8f324ce6a53f98d14d98feccf77b6ecca9975a ./apache-baremaps-0.8.2-rc2-incubating-bin.tar.gz Release candidate artifacts are signed automatically with the key created by the INFRA team (C81AC42AF2A7CACDF4C8A4F6936E280DF16599CB): https://downloads.apache.org/incubator/baremaps/KEYS The maven staging repository for this release is: https://repository.apache.org/content/repositories/orgapachebaremaps-1010 The maven artifacts are signed with my PGP key (16D7A0B27D5ADD52BD57932971751399FB39CB84): https://downloads.apache.org/incubator/baremaps/KEYS The README file for the src distribution contains instructions for building and testing the release. Please vote on releasing this package as Apache Baremaps 0.8.2 (incubating). The vote is open for 72 hours but can be open longer if the required number of votes is not obtained. It passes if a majority of at least three +1 PPMC votes are cast. [ ] +1 Release this package as Apache Baremaps 0.8.2 (incubating) [ ] 0 I don't feel strongly about it, but I'm okay with the release [ ] -1 Do not release this package because... Here is my vote. +1 (non-binding): - checked the presence of the LICENSE, NOTICE, and DISCLAIMER files in src and bin; - checked the copyright in the NOTICE files included in the artifacts of the release. - checked the presence of the licenses and notices directories in src and bin; - checked the output of the rat report in the source release; - built and executed from source; - executed the binary distribution; - checked the checksums; - checked the signatures; I added some of the commands I used to verify this release below. Best regards, Bertil ——— # Download the source release wget https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.2-rc2/apache-baremaps-0.8.2-rc2-incubating-src.tar.gz wget https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.2-rc2/apache-baremaps-0.8.2-rc2-incubating-src.tar.gz.asc wget https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.2-rc2/apache-baremaps-0.8.2-rc2-incubating-src.tar.gz.sha512 # Verify the signature of the source release gpg --verify apache-baremaps-0.8.2-rc2-incubating-src.tar.gz.asc # Verify the checksum of the source release shasum -a 512 -c apache-baremaps-0.8.2-rc2-incubating-src.tar.gz.sha512 # Unpack the source release and navigate to the source directory tar -xvf apache-baremaps-0.8.2-rc2-incubating-src.tar.gz cd apache-baremaps-0.8.2-incubating-src # Check the license headers mvn apache-rat:check # Generate the license headers report mvn apache-rat:rat less target/rat.txt # Build the project from source mvn clean package # Download the binary release wget https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.2-rc2/apache-baremaps-0.8.2-rc2-incubating-bin.tar.gz wget https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.2-rc2/apache-baremaps-0.8.2-rc2-incubating-bin.tar.gz.asc wget https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.2-rc2/apache-baremaps-0.8.2-rc2-incubating-bin.tar.gz.sha512 # Verify the signature of the binary release gpg --verify apache-baremaps-0.8.2-rc2-incubating-bin.tar.gz.asc # Verify the checksum of the binary release shasum -a 512 -c apache-baremaps-0.8.2-rc2-incubating-bin.tar.gz.sha512 # Unpack the binary release and navigate to the binary directory tar -xvf apache-baremaps-0.8.2-rc2-incubating-bin.tar.gz cd apache-baremaps-0.8.2-incubating-bin # Check if the binary release works ./bin/baremaps --version # Download a jar from the nexus repository wget https://repository.apache.org/content/repositories/orgapachebaremaps-1010/org/apache/baremaps/baremaps-data/0.8.2/baremaps-data-0.8.2.jar wget https://repository.apache.org/content/repositories/orgapachebaremaps-1010/org/apache/baremaps/baremaps-data/0.8.2/baremaps-data-0.8.2.jar.asc wget https://repository.apache.org/content/repositories/orgapachebaremaps-1010/org/apache/baremaps/baremaps-data/0.8.2/baremaps-data-0.8.2.jar.md5 wget https://repository.apache.org/content/repositories/orgapachebaremaps-1010/org/apache/baremaps/baremaps-data/0.8.2/baremaps-data-0.8.2.jar.sha1 # Verify the signature of the jar gpg --verify baremaps-data-0.8.2.jar.asc baremaps-data-0.8.2.jar # Verify the checksum of the jar md5sum baremaps-data-0.8.2.jar cat baremaps-data-0.8.2.jar.md5 shasum baremaps-data-0.8.2.jar cat baremaps-data-0.8.2.jar.sha1 --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@baremaps.apache.org For additional commands, e-mail: dev-h...@baremaps.apache.org
