+1 (non-binding) Best, Leonard
> On 7 Feb 2025, at 14:36, Bertil Chapuis <bchap...@gmail.com> wrote: > > Hello Everyone, > > Following the issue identified in the way NOTICE files were included in the > project, here is a new release candidate. This version also integrates the > latest contributions made to the project. > > You can read the release notes here: > https://github.com/apache/incubator-baremaps/releases/tag/v0.8.2-rc3 > > The commit to be voted upon: > https://github.com/apache/incubator-baremaps/tree/v0.8.2-rc3 > > Its tag is v0.8.2-rc3 and its hash is > 03512049ff65bc15a24f39450810c2ac578a217f. > > The artifacts to be voted on are located here: > https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.2-rc3/ > > The hashes of the artifacts are as follows: > 69e57f9aa07d32d2759efcf0d7127b6cbcb46512d2e2c46d9f15171f5a03e99f529bb8e70d0f711af2f7ecf11eff39472cf4a25b5178937567ed7794bfbfb46e > ./apache-baremaps-0.8.2-rc3-incubating-src.tar.gz > f3e75ec2b5ddd2b729f1d8c683cf30f1c4cabc0e9eb7a32b0200d1e8b82710b123809f26dc6d3b00895f520339a240b3aab05230f6a14e9fb20f1b566f7b4060 > ./apache-baremaps-0.8.2-rc3-incubating-bin.tar.gz > > Release candidate artifacts are signed automatically with the key created by > the INFRA team (C81AC42AF2A7CACDF4C8A4F6936E280DF16599CB): > https://downloads.apache.org/incubator/baremaps/KEYS > > The maven staging repository for this release is: > https://repository.apache.org/content/repositories/orgapachebaremaps-1012/ > > The maven artifacts are signed with my PGP key > (16D7A0B27D5ADD52BD57932971751399FB39CB84): > https://downloads.apache.org/incubator/baremaps/KEYS > > The README file for the src distribution contains instructions for building > and testing the release. > > Please vote on releasing this package as Apache Baremaps 0.8.2 (incubating). > > The vote is open for 72 hours but can be open longer if the required number > of votes is not obtained. It passes if a majority of at least three +1 PPMC > votes are cast. > [ ] +1 Release this package as Apache Baremaps 0.8.2 (incubating) > [ ] 0 I don't feel strongly about it, but I'm okay with the release > [ ] -1 Do not release this package because... > > Here is my vote. > +1 (non-binding): > - checked the presence of the LICENSE, NOTICE, and DISCLAIMER files in src > and bin distribution; > - checked the output of the rat report in the src distribution; > - built and executed from the src distribution; > - executed the bin distribution; > - checked the checksums; > - checked the signatures; > > I added some of the commands I used to verify this release below. > > Best regards, > > Bertil > > ——— > > # Download the source release > wget > https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.2-rc3/apache-baremaps-0.8.2-rc3-incubating-src.tar.gz > wget > https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.2-rc3/apache-baremaps-0.8.2-rc3-incubating-src.tar.gz.asc > wget > https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.2-rc3/apache-baremaps-0.8.2-rc3-incubating-src.tar.gz.sha512 > > # Verify the signature of the source release > gpg --verify apache-baremaps-0.8.2-rc3-incubating-src.tar.gz.asc > > # Verify the checksum of the source release > shasum -a 512 -c apache-baremaps-0.8.2-rc3-incubating-src.tar.gz.sha512 > > # Unpack the source release and navigate to the source directory > tar -xvf apache-baremaps-0.8.2-rc3-incubating-src.tar.gz > cd apache-baremaps-0.8.2-incubating-src > > # Check the license headers > mvn apache-rat:check > > # Generate the license headers report > mvn apache-rat:rat > less target/rat.txt > > # Build the project from source > mvn clean package > > # Download the binary release > wget > https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.2-rc3/apache-baremaps-0.8.2-rc3-incubating-bin.tar.gz > wget > https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.2-rc3/apache-baremaps-0.8.2-rc3-incubating-bin.tar.gz.asc > wget > https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.2-rc3/apache-baremaps-0.8.2-rc3-incubating-bin.tar.gz.sha512 > > # Verify the signature of the binary release > gpg --verify apache-baremaps-0.8.2-rc3-incubating-bin.tar.gz.asc > > # Verify the checksum of the binary release > shasum -a 512 -c apache-baremaps-0.8.2-rc3-incubating-bin.tar.gz.sha512 > > # Unpack the binary release and navigate to the binary directory > tar -xvf apache-baremaps-0.8.2-rc3-incubating-bin.tar.gz > cd apache-baremaps-0.8.2-incubating-bin > > # Check if the binary release works > ./bin/baremaps --version > > # Download a jar from the nexus repository > wget > https://repository.apache.org/content/repositories/orgapachebaremaps-1012/org/apache/baremaps/baremaps-data/0.8.2/baremaps-data-0.8.2.jar > wget > https://repository.apache.org/content/repositories/orgapachebaremaps-1012/org/apache/baremaps/baremaps-data/0.8.2/baremaps-data-0.8.2.jar.asc > wget > https://repository.apache.org/content/repositories/orgapachebaremaps-1012/org/apache/baremaps/baremaps-data/0.8.2/baremaps-data-0.8.2.jar.md5 > wget > https://repository.apache.org/content/repositories/orgapachebaremaps-1012/org/apache/baremaps/baremaps-data/0.8.2/baremaps-data-0.8.2.jar.sha1 > > # Verify the signature of the jar > gpg --verify baremaps-data-0.8.2.jar.asc baremaps-data-0.8.2.jar > > # Verify the checksum of the jar > md5sum baremaps-data-0.8.2.jar > cat baremaps-data-0.8.2.jar.md5 > shasum baremaps-data-0.8.2.jar > cat baremaps-data-0.8.2.jar.sha1 > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@baremaps.apache.org > For additional commands, e-mail: dev-h...@baremaps.apache.org > --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@baremaps.apache.org For additional commands, e-mail: dev-h...@baremaps.apache.org