It's now fixed on dist.apache.org (the signatures are good on the Staging Maven repo).
Can you please verify? Thanks, Regards JB On Sat, May 24, 2025 at 7:37 AM Jean-Baptiste Onofré <j...@nanthrax.net> wrote: > > It seems the upload failed. Let me check. > > Le sam. 24 mai 2025 à 00:26, Russell Spitzer <russell.spit...@gmail.com> a > écrit : >> >> +1 (Binding) >> >> Checked all the normal things >> 1. Build / Test >> 2. Checksums >> 3. Smoke tested Server and Admin jars >> 4. GPG Signatures (Issues below) >> >> Only did a quick pass on Helm Licenses/Notice and Friends but all look good >> to me now. >> >> I do have one question because I seem to be having issues (if this isn't >> the case I may have to be -1). I seem to have >> problems checking the GPG signatures. >> >> The source gives me a valid signing >> >> All the other distribution files give me "Not a detached signature". >> >> ➜ 10.0-rc4 gpg --verify >> polaris-quarkus-admin-0.10.0-beta-incubating.tgz.asc >> gpg: Signature made Fri May 23 00:43:25 2025 CDT >> gpg: using RSA key 1AA8CF92D409A73393D0B736BFF2EE42C8282E76 >> gpg: Good signature from "Jean-Baptiste Onofré <jbono...@apache.org>" >> [unknown] >> gpg: WARNING: This key is not certified with a trusted signature! >> gpg: There is no indication that the signature belongs to the >> owner. >> Primary key fingerprint: 1AA8 CF92 D409 A733 93D0 B736 BFF2 EE42 C828 2E76 >> *gpg: WARNING: not a detached signature; file >> 'polaris-quarkus-admin-0.10.0-beta-incubating.tgz' was NOT verified!* >> >> On Fri, May 23, 2025 at 10:25 AM Jean-Baptiste Onofré <j...@nanthrax.net> >> wrote: >> >> > Hi everyone >> > >> > I propose that we release the following RC (RC4) as the official >> > Apache Polaris 0.10.0-beta-incubating release. Compared to RC3, RC4 fixes >> > the LICENSE/NOTICE in the Heml chart. >> > >> > * This corresponds to the tag: apache-polaris-0.10.0-beta-incubating-rc4 >> > * >> > >> > https://github.com/apache/polaris/commits/apache-polaris-0.10.0-beta-incubating-rc4 >> > * >> > >> > https://github.com/apache/polaris/tree/52e30f0378d6092880918b15a34a6c6b4d51c1f8 >> > >> > The release source distribution tarball, signature, and checksum are >> > staged here: >> > * tgz: >> > >> > https://dist.apache.org/repos/dist/dev/incubator/polaris/apache-polaris-0.10.0-beta-incubating/apache-polaris-0.10.0-beta-incubating.tar.gz >> > * sha512: >> > >> > https://dist.apache.org/repos/dist/dev/incubator/polaris/apache-polaris-0.10.0-beta-incubating/apache-polaris-0.10.0-beta-incubating.tar.gz.sha512 >> > * gpg: >> > >> > https://dist.apache.org/repos/dist/dev/incubator/polaris/apache-polaris-0.10.0-beta-incubating/apache-polaris-0.10.0-beta-incubating.tar.gz.asc >> > >> > You can find the KEYS file here: >> > * https://downloads.apache.org/incubator/polaris/KEYS >> > >> > For convenience, the following binary artifacts are available: >> > * Staging Maven repository >> > ** >> > https://repository.apache.org/content/repositories/orgapachepolaris-1019/ >> > NB: there's no uber/shade jar on the Staging Maven repository. >> > * Staging binary distributions (server and admin tool) tarball, >> > signature, and checksum: >> > ** Server: >> > *** tgz: >> > >> > https://dist.apache.org/repos/dist/dev/incubator/polaris/apache-polaris-0.10.0-beta-incubating/polaris-quarkus-server-0.10.0-beta-incubating.tgz >> > *** tgz sha512: >> > >> > https://dist.apache.org/repos/dist/dev/incubator/polaris/apache-polaris-0.10.0-beta-incubating/polaris-quarkus-server-0.10.0-beta-incubating.tgz.sha512 >> > *** tgz gpg: >> > >> > https://dist.apache.org/repos/dist/dev/incubator/polaris/apache-polaris-0.10.0-beta-incubating/polaris-quarkus-server-0.10.0-beta-incubating.tgz.asc >> > *** zip: >> > >> > https://dist.apache.org/repos/dist/dev/incubator/polaris/apache-polaris-0.10.0-beta-incubating/polaris-quarkus-server-0.10.0-beta-incubating.zip >> > *** zip sha512: >> > >> > https://dist.apache.org/repos/dist/dev/incubator/polaris/apache-polaris-0.10.0-beta-incubating/polaris-quarkus-server-0.10.0-beta-incubating.zip.sha512 >> > *** zip gpg: >> > >> > https://dist.apache.org/repos/dist/dev/incubator/polaris/apache-polaris-0.10.0-beta-incubating/polaris-quarkus-server-0.10.0-beta-incubating.zip.asc >> > ** Admin Tool: >> > *** tgz: >> > >> > https://dist.apache.org/repos/dist/dev/incubator/polaris/apache-polaris-0.10.0-beta-incubating/polaris-quarkus-admin-0.10.0-beta-incubating.tgz >> > *** tgz sha512: >> > >> > https://dist.apache.org/repos/dist/dev/incubator/polaris/apache-polaris-0.10.0-beta-incubating/polaris-quarkus-admin-0.10.0-beta-incubating.tgz.sha512 >> > *** tgz gpg: >> > >> > https://dist.apache.org/repos/dist/dev/incubator/polaris/apache-polaris-0.10.0-beta-incubating/polaris-quarkus-admin-0.10.0-beta-incubating.tgz.asc >> > *** zip: >> > >> > https://dist.apache.org/repos/dist/dev/incubator/polaris/apache-polaris-0.10.0-beta-incubating/polaris-quarkus-admin-0.10.0-beta-incubating.zip >> > *** zip sha512: >> > >> > https://dist.apache.org/repos/dist/dev/incubator/polaris/apache-polaris-0.10.0-beta-incubating/polaris-quarkus-admin-0.10.0-beta-incubating.zip.sha512 >> > *** zip gpg: >> > >> > https://dist.apache.org/repos/dist/dev/incubator/polaris/apache-polaris-0.10.0-beta-incubating/polaris-quarkus-admin-0.10.0-beta-incubating.zip.asc >> > * Staging Docker images: >> > ** Server: >> > >> > https://hub.docker.com/layers/apache/polaris/0.10.0-beta-incubating-rc4/images/sha256-6364581b39ccd1d1684044f03aebd9c3d37afbc45f9b00e610b1c2553c701b69 >> > * Helm charts: >> > ** tgz: >> > >> > https://dist.apache.org/repos/dist/dev/incubator/polaris/helm-chart/apache-polaris-helm-chart-0.10.0-beta-incubating.tar.gz >> > ** tgz sha512: >> > >> > https://dist.apache.org/repos/dist/dev/incubator/polaris/helm-chart/apache-polaris-helm-chart-0.10.0-beta-incubating.tar.gz.sha512 >> > ** tgz gpg: >> > >> > https://dist.apache.org/repos/dist/dev/incubator/polaris/helm-chart/apache-polaris-helm-chart-0.10.0-beta-incubating.tar.gz.asc >> > >> > Please download, verify, and test. >> > >> > Please vote in the next 72 hours. >> > >> > [ ] +1 Release this as Apache polaris 0.10.0-beta-incubating >> > [ ] +0 >> > [ ] -1 Do not release this because... >> > >> > Only PPMC members and mentors have binding votes, but other community >> > members are >> > encouraged to cast non-binding votes. This vote will pass if there are >> > 3 binding +1 votes and more binding +1 votes than -1 votes. >> > >> > NB: if this vote passes, a new vote has to be started on the Incubator >> > general mailing >> > list. >> > >> > Thanks >> > Regards >> > >> > JB >> >
