Yes we should add a step in the guide to update the security file with the
current release when a new one goes out. Thanks Nanda for catching this. I
had been tracking updates required to the guide as part of this release
process locally but hadn't shared anything yet. I just filed HDDS-11654
<https://issues.apache.org/jira/browse/HDDS-11654> so we can keep track of
the updates we should make to the guide when the release goes out.

On Wed, Nov 6, 2024 at 10:22 AM Xi Chen <che...@apache.org> wrote:

> Hi Nanda
> Thanks for your check and suggestions
>
> Q: The code name for the release is still set to "Hot Springs" which is of
> 1.4.0, should we use a new name for 1.4.1?
>
> A: Currently, Ozone only changes the national park tag when it releases
> the master branch, The minor branch release maintains the national park tag
> unchanged. e.g. Both the national park tags for ozone-1.2 and ozone-1.2.1
> are “Glacier”.
> So ozone-1.4.1 should keep the national park tag unchanged ("Hot Springs"
> ).
>
> Q: 1.4.1 release information is missing in ·, The SECURITY.md file should
> be updated with 1.4.1 details.
>
> A: Currently we don't seem to be updating “SECURITY.md” as part of a new
> release, I can't find any steps for updating “SECURITY.md” in the
> https://ozone-site-v2.staged.apache.org/docs/developer-guide/project/release-guide/
> Last updated SECURITY.md is
> https://issues.apache.org/jira/browse/HDDS-10214
> Do we need to update “SECURITY.md” every time we release a new version? if
> so we should add this step to the Apache Release Manager Guide
>
> Xi Chen
>
>
>
> On 2024/11/05 13:37:37 Nandakumar wrote:
> > Thanx Xi Chen for driving the release.
> >
> > - Verified checksums
> > - Verified signatures
> > - Built from source
> > - Checked docs are included in the release artifact
> > - Branch structure in GitHub looks good
> > - Checked 'ozone version' output
> >     * The code name for the release is still set to "Hot Springs"
> > which is of 1.4.0, should we use a new name for 1.4.1?
> > - 1.4.1 release information is missing in SECURITY.md
> >     * The SECURITY.md file should be updated with 1.4.1 details.
> >
> > -Nanda
> >
> > On Tue, Nov 5, 2024 at 3:50 PM mrchenx <mrch...@126.com> wrote:
> > >
> > > Dear Ozone Devs,    As discussed in the last email, I am calling for a
> vote on Apache Ozone 1.4.1 RC2.
> > >     We have released 1.4.0 on Jan 19th. Now there are 223 new commits
> already landed on 1.4.1 branch, Includes Ratis upgrade (upgrade to Ratis
> 3.1.1), some bug fixes, as well as performance optimizations, and some
> necessary dependencies.    I am calling for a vote on Apache Ozone 1.4.1
> RC2.   - The RC2 tag can be found on Github at:
> > >         - https://github.com/apache/ozone/releases/tag/ozone-1.4.1-RC2
> > >    - 223 Jiras were cherry-pick for ozone-1.4.1
> > >         -
> https://issues.apache.org/jira/issues/?jql=project%20%3D%20HDDS%20AND%20fixVersion%20%3D%201.4.1
> > >    - The source and binary tarballs can be found at:
> > >         -  https://dist.apache.org/repos/dist/dev/ozone/1.4.1-rc2/
> > >    - Maven artifacts are staged at:
> > >         -
> https://repository.apache.org/content/repositories/orgapacheozone-1025
> > >    - The public key used to sign the artifacts can be found at:
> > >         - https://dist.apache.org/repos/dist/release/ozone/KEYS
> > >    - The fingerprint of the key used to sign the artifacts is:
> > >         - 0D8C19F5514E2786007936F758C87003FF9A1A38
> > >    The vote will run for 7 days, ending on Nov 12th 2024.
> > >
> > > Thanks
> > >
> > > Xi Chen
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: dev-unsubscr...@ozone.apache.org
> > For additional commands, e-mail: dev-h...@ozone.apache.org
> >
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscr...@ozone.apache.org
> For additional commands, e-mail: dev-h...@ozone.apache.org
>
>

Reply via email to