On 14/01/2008, Niall Pemberton <[EMAIL PROTECTED]> wrote:
> On Jan 14, 2008 2:30 PM, sebb <[EMAIL PROTECTED]> wrote:
> > On 13/01/2008, Niall Pemberton <[EMAIL PROTECTED]> wrote:
> > > Commons IO 1.4 release candidate 1 (RC1) is available for review. The
> > > artifacts are here:
> > > http://people.apache.org/~niallp/io-1.4-RC1/
> > >
> >
> > Just found out that SHA-1 digest files must be called .sha, not .sha1.
> >
> > See
> > http://www.apache.org/dev/release-signing.html#policy
> >
> > [The document refers to SHA rather than SHA-1 specifically, but the
> > gpg example creates an SHA-1 digest.]
> >
> > Obviously a lot of other projects have overlooked this requirement, as
> > 77% of the SHA-1 digests in www.apache.org/dist are .sha1 rather than
> > .sha ;-)
>
> Our download page generation only caters for md5 checksums - the sha1
> are only there because maven2 helpfully generated them for me. Are you
> sure that renaming them won't cause things to break - seems to me that

Renaming won't cause the ASF download pages to break.

There are already ASF products that use .sha, e.g.

Ant Ivy (has SHA digest link on download page)

Commons Codec (SHA digest does not appear on download page)

DB DdlUtils (has SHA digest link on download page)

Jackrabbit (has SHA digest link on download page)

Whether the policy applies to Maven repos or not, I don't know.

> if thats what maven generates, then for the artifacts that go in the
> maven repo its probably correct (whatever the policy says). My

Or maybe the maven repo also allows .sha ?

> instinct is to remove/leave out the sha1 files from the release unless
> the maven bods say renaming is OK.

I'd prefer to see the .sha file on the ASF dist site and download
page, but I won't vote -1 if that does not happen.

> Niall
>
> > > SVN Tag:
> > > http://svn.apache.org/viewvc/commons/proper/io/tags/commons-io-1.4-RC1/
> > >
> > > Site:
> > > http://people.apache.org/~niallp/io-1.4-RC1/site/
> > > (note m2 generates relative links, so some don't work - but the site
> > > is for info and not included in the release artifacts)
> > >
> > > Release Notes:
> > > http://people.apache.org/~niallp/io-1.4-RC1/site/upgradeto1_4.html
> > > (These are a copy of RELEASE-NOTES.txt in html form)
> > >
> > > RAT Report:
> > > http://people.apache.org/~niallp/io-1.4-RC1/site/rat-report.html
> > >
> > > CLIRR Report:
> > > http://people.apache.org/~niallp/io-1.4-RC1/site/clirr-report.html
> > >
> > > RC1 has been built with m2 - but m1 and ant builds are available - 
> > > details here:
> > > http://people.apache.org/~niallp/io-1.4-RC1/site/building.html
> > >
> > > Thanks in advance for your feedback.
> > >
> > > Niall
> > >
> >
> > > ---------------------------------------------------------------------
> > > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > > For additional commands, e-mail: [EMAIL PROTECTED]
> > >
> > >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to