Hi, I think we can add a new verify-release script in dev folder (similar to check license) to verify: - hash and signatures according to the keys - verify artifacts (like scala version)
Thoughts ? Regards JB On Tue, Apr 30, 2024 at 3:57 PM Amogh Jahagirdar <am...@tabular.io> wrote: > > Hey Ajantha, > > Yes I was just looking into this, during the release the stage-binaries.sh > script intermittently failed for me (I lost my wifi during the uploading of > one of the spark artifacts) > https://github.com/apache/iceberg/blob/main/dev/stage-binaries.sh . > I restarted the script which seemed safe to do since the spark builds are > done with explicit Scala versions. My guess is maybe something went wrong > here? Just a guess though I still don't see how else this could happen. > > Either way, yes I think we'll need a new release. I agree we probably should > have a more automated mechanism to verify the staged release jars since at > the end of the day those are what's going out when the release passes. > > Thanks, > > Amogh Jahagirdar