>> We should release the bits that we voted on and what goes to /dist >> *is* the release. Therefore if we are going to vote on bits staged >> somewhere other than people.apache.org, we need to do something like >> what sebb describes above. If wget is used, RMs should re-verify >> hashes on p.a.o before placing the files into /dist. How do the >> other ASF projects using nexus handle this? > > I used Nexus for Jakarta BSF, but the non-Maven archives were uploaded > separately (to my pao directory). They were not part of the Maven > deploy, probably because the POM does not attach the package goal. > > So the vote was on two separate directories.
I think it should be possible to perform a wget and then check if the hashes still work. That would be easy and if hashes are ok, the files we voted on are the same as the ones the RM checked The other question is: delete non-maven stuff out or not. Compress 1.0 has everything: http://repo1.maven.org/maven2/org/apache/commons/commons-compress/1.0/ I like it, to be honest. Everything I need on one place. some other components have this too: http://repo1.maven.org/maven2/org/apache/commons/commons-email/1.2/ http://repo1.maven.org/maven2/org/apache/commons/commons-exec/1.0.1/ http://repo1.maven.org/maven2/org/apache/commons/commons-jexl/2.0.1/ http://repo1.maven.org/maven2/org/apache/commons/commons-jci-core/1.0/ some not: http://repo1.maven.org/maven2/org/apache/commons/commons-math/2.1/ http://repo1.maven.org/maven2/org/apache/commons/commons-io/1.3.2/ http://repo1.maven.org/maven2/commons-betwixt/commons-betwixt/1.0-alpha-1/ http://repo1.maven.org/maven2/commons-attributes/commons-attributes/2.1/ http://repo1.maven.org/maven2/commons-beanutils/commons-beanutils-core/1.8.3/ http://repo1.maven.org/maven2/commons-chain/commons-chain/1.2/ http://repo1.maven.org/maven2/commons-cli/commons-cli/1.2/ >From these components which do not have the -bin and -src folders inside i found out that some even don't have -sources.jar or -javadoc.jar (for example beanutils-core). This is inconsistent. I already had a project were I was forced to include all source files (medical devices) and then I had to download sources manually. Here is my +1 to release all the files with nexus without deleting anything out and here is my +1 for using wget and ask the RM to check the hashes before he goes to dist Christian --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org For additional commands, e-mail: dev-h...@commons.apache.org
