I guess it's fine to use that key then. Do you have the pub, uid, sub headers though? The KEYS file looks strange without them.
On Wed, 9 Oct 2024 at 23:08, Alex Porcelli <porce...@apache.org> wrote: > > PJ, > > Apache KIE has a fully automated release (we followed the requirements > from Apache security of reproducible builds etc), so we are able to > use the priv...@kie.apache.org because it was signed directly by the > pipelines. > > The KEYS file content for the priv...@kie.apache.org was provided by > Apache Infra. > > On Wed, Oct 9, 2024 at 6:03 PM PJ Fanning <fannin...@apache.org> wrote: > > > > May I also enquire about the signing key? It is usually a personal > > signing key not a shared signing key (priv...@kie.apache.org). > > > > The KEYS file is not ideal afaic. It has no header bit for that > > priv...@kie.apache.org key. Can you add that? > > https://downloads.apache.org/incubator/kie/KEYS > > > > I'm talking about the missing pub, uid, sub headers. > > > > On Wed, 9 Oct 2024 at 22:55, PJ Fanning <fannin...@apache.org> wrote: > > > > > > The names of the files in the RC directory [1] seem incorrect. > > > It is good to include the '-rc2' in the directory name but the source > > > and binary archives should omit the '-rc2' part. This is because if > > > and when the votes passes, you need to release the files that were > > > voted on. This means you can't rename them after the vote. > > > > > > -1 binding (fanningpj IPMC) > > > because the source release does not have 'incubating' in the name of > > > the file. I know it has incubating but the requirement is for it to be > > > 'incubating'. You have 'incubator-kie-10.0.0-rc2-sources.zip' > > > In fact, it is also the norm to have 'apache' in the file name too. > > > Have a look at the Apache Uniffle candidate [2] to see the format of > > > the filenames. > > > > > > The rule about 'incubating' in the name appears in our Release Guide [3] > > > > > > > > > > > > > > > [1] https://dist.apache.org/repos/dist/dev/incubator/kie/10.0.0-rc2/ > > > [2] https://dist.apache.org/repos/dist/dev/incubator/uniffle/0.9.1-rc1/ > > > [3] https://incubator.apache.org/guides/releasemanagement.html > > > > > > On Wed, 9 Oct 2024 at 22:40, Alex Porcelli <porce...@apache.org> wrote: > > > > > > > > Hello everyone, > > > > > > > > This is a call for the vote to release Apache KIE(Incubating) > > > > v10.0.0-rc2. > > > > > > > > The Apache KIE community has voted and approved the release of Apache > > > > KIE(incubating) v10.0.0-rc2. We now kindly request the IPMC members > > > > review and vote for this release. > > > > > > > > Apache KIE(incubating) - The home of the most popular business > > > > automation open-source technologies including Drools, jBPM, > > > > SonataFlow, Optaplanner, Kogito and Tools. > > > > > > > > KIE community vote thread: > > > > https://lists.apache.org/thread/t72b95d3q1qvcyd7lbqkrt8cdx2cgsp2 > > > > > > > > Vote result thread: > > > > https://lists.apache.org/thread/tjbbhlo3bo8dqqxs30f9sbj1wpxgxpyp > > > > > > > > The release candidate: > > > > https://dist.apache.org/repos/dist/dev/incubator/kie/10.0.0-rc2/ > > > > > > > > The maven staging repos for this release: > > > > - Drools: > > > > https://repository.apache.org/content/repositories/orgapachekie-1046 > > > > - Optaplanner: > > > > https://repository.apache.org/content/repositories/orgapachekie-1047 > > > > - Kogito Runtimes: > > > > https://repository.apache.org/content/repositories/orgapachekie-1048 > > > > - Kogito Apps: > > > > https://repository.apache.org/content/repositories/orgapachekie-1049 > > > > - Kogito Apps - JITExecutor Native Linux: > > > > https://repository.apache.org/content/repositories/orgapachekie-1050 > > > > - Kogito Apps - JITExecutor Native Windows: > > > > https://repository.apache.org/content/repositories/orgapachekie-1051 > > > > - Kogito Apps - JITExecutor Native MacOS: > > > > https://repository.apache.org/content/repositories/orgapachekie-1052 > > > > - KIE Tools - JBPM Quarkus DevUI: > > > > https://repository.apache.org/content/repositories/orgapachekie-1053 > > > > - KIE Tools - Sonataflow Quarkus DevUI: > > > > https://repository.apache.org/content/repositories/orgapachekie-1054 > > > > > > > > The artifacts are signed with PGP key corresponding to > > > > [priv...@kie.apache.org], found in the KEYS file: > > > > > > > > https://downloads.apache.org/incubator/kie/KEYS > > > > > > > > The vote will be open for at least 72 hours until the necessary number > > > > of votes are reached. > > > > > > > > Please vote accordingly: > > > > [ ] +1 approve > > > > [ ] +0 no opinion > > > > [ ] -1 disapprove with the reason > > > > > > > > To learn more about KIE, please see https://kie.apache.org/ > > > > > > > > Checklist for reference: > > > > > > > > [ ] Download KIE artifacts are valid. > > > > [ ] Checksums and PGP signatures are valid. > > > > [ ] Source code distributions have correct names matching the current > > > > release. > > > > [ ] LICENSE and NOTICE files are correct. > > > > [ ] All files have license headers if necessary. > > > > [ ] No compiled archives bundled in source archive. > > > > [ ] Can compile from source. > > > > > > > > For updated information on how to verify the release, please refer to: > > > > https://kie.apache.org/docs/community/verify > > > > > > > > For updated information on how to build from source zip, please refer > > > > to: > > > > https://kie.apache.org/docs/community/build > > > > > > > > Best, > > > > Alex > > > > > > > > --------------------------------------------------------------------- > > > > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > > > > For additional commands, e-mail: general-h...@incubator.apache.org > > > > --------------------------------------------------------------------- To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
