+1 I verified the signatures of the artifacts, that the jar doesn't contain classes outside of the org/apache/beam/vendor/grpc/v1p48p1 package and I tested the artifact against our precommits using https://github.com/apache/beam/pull/22595
On Fri, Aug 5, 2022 at 1:42 PM Luke Cwik <lc...@google.com> wrote: > Please review the release of the following artifacts that we vendor: > * beam-vendor-grpc-1_48_1 > > Hi everyone, > Please review and vote on the release candidate #1 for the version 0.1, as > follows: > [ ] +1, Approve the release > [ ] -1, Do not approve the release (please provide specific comments) > > > The complete staging area is available for your review, which includes: > * the official Apache source release to be deployed to dist.apache.org > [1], which is signed with the key with fingerprint > EAD5DE293F4A03DD2E77565589E68A56E371CCA2 [2], > * all artifacts to be deployed to the Maven Central Repository [3], > * commit hash "db8db0b6ed0fe1e4891f207f0f7f811798e54db1" [4], > > The vote will be open for at least 72 hours. It is adopted by majority > approval, with at least 3 PMC affirmative votes. > > Thanks, > Release Manager > > [1] https://dist.apache.org/repos/dist/dev/beam/vendor/ > [2] https://dist.apache.org/repos/dist/release/beam/KEYS > [3] https://repository.apache.org/content/repositories/orgapachebeam-1277/ > [4] > https://github.com/apache/beam/commit/db8db0b6ed0fe1e4891f207f0f7f811798e54db1 >
