Hi Stepheny, Can you remove the old RCs from https://dist.apache.org/repos/dist/dev/incubator/sdap/ ?
Is the signing key in https://dist.apache.org/repos/dist/release/incubator/sdap/KEYS ? With releases, you are supposed to point users to this file not provide a link to https://keyserver.ubuntu.com On Fri, 8 Mar 2024 at 18:55, Stepheny Perez <skpe...@apache.org> wrote: > > Hello everyone, > > This is a call for a vote to release Apache SDAP (incubating) version > 1.2.0-rc4. > > The Apache SDAP community has voted to approve release of Apache SDAP > (incubating) version 1.2.0-rc4. > > We now request the Incubator PMC review and vote on this release. > > SDAP community thread: > https://lists.apache.org/thread/h9g3cdok0py2vjp1pplz1wq4ofl4sbjx > > Changes made between previous candidate (rc3) and this one (rc4) are as > follows: > - Updated SDAP to use Poetry package manager to more explicitly manage > dependencies and transitive dependencies. This was needed to ensure no GPL > license dependencies are used by the software. > - Patch for domspurge helper script > > Instructions for building docker images from source can be found here: > https://github.com/apache/incubator-sdap-nexus/blob/1.2.0-rc4/docs/build.rst > Instructions for deploying locally to test can be found here: > https://github.com/apache/incubator-sdap-nexus/blob/1.2.0-rc4/docs/quickstart.rst > The release files, including signatures, digests, etc. can be found at: > https://dist.apache.org/repos/dist/dev/incubator/sdap/apache-sdap-1.2.0-rc4/ > > For convenience, the tags we built the release artifacts to be voted on > from are 1.2.0-rc4: > > - ingester: > - URL: https://github.com/apache/incubator-sdap-ingester/tree/1.2.0-rc4 > - Commit: 5c116badfaf913734d017d41acc765ed3fd978a1 > > - nexus: > - URL: https://github.com/apache/incubator-sdap-nexus/tree/1.2.0-rc4 > - Commit: 3fce31f08b9057db446036724e8bc62dd6d1560a > > For verification, the hashes (SHA-512) of the .tar.gz artifacts we are voting > on are as follows: > > apache-sdap-ingester-1.2.0-incubating-src.tar.gz: > 7301c54e765882c45f6efe4a06463b837ace62b6eea2ae5437113357466e52f1d905c3c9d46295f1b1058b9ecf5025942f8a89b2c53a1b0d6b69cd52a8890257 > > apache-sdap-nexus-1.2.0-incubating-src.tar.gz: > 1a2907f9c36dbf0b4b25d54c095303ab0602fa9e0a9423deceae402ffd9a360e21ba832c3ea497d8eccbc6c91fedd2926b3b33181a14c22d50d0ec996282bc75 > > Release artifacts are signed with the following key: > https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x2E8418801953621FAA322169D6F360887071C194 > > Please vote on releasing this package as Apache SDAP (incubating) 1.2.0. > > The vote is open for 72 hours and passes if at least 3 +1 PMC votes are cast. > > [ ] +1 Release this package as Apache SDAP (incubating) 1.2.0 > [ ] +0 No opinion > [ ] -1 Do not release this package because ... > > Thank you, > Stepheny > > --------------------------------------------------------------------- > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > For additional commands, e-mail: general-h...@incubator.apache.org > --------------------------------------------------------------------- To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org