Hi,

I think we can add a new verify-release script in dev folder (similar
to check license) to verify:
- hash and signatures according to the keys
- verify artifacts (like scala version)

Thoughts ?

Regards
JB

On Tue, Apr 30, 2024 at 3:57 PM Amogh Jahagirdar <am...@tabular.io> wrote:
>
> Hey Ajantha,
>
> Yes I was just looking into this, during the release the stage-binaries.sh 
> script intermittently failed for me (I lost my wifi during the uploading of 
> one of the spark artifacts) 
> https://github.com/apache/iceberg/blob/main/dev/stage-binaries.sh .
> I restarted the script which seemed safe to do since the spark builds are 
> done with explicit Scala versions. My guess is maybe something went wrong 
> here? Just a guess though I still don't see how else this could happen.
>
> Either way, yes I think we'll need a new release. I agree we probably should 
> have a more automated mechanism to verify the staged release jars since at 
> the end of the day those are what's going out when the release passes.
>
> Thanks,
>
> Amogh Jahagirdar

Reply via email to