andygrove opened a new pull request, #7446:
URL: https://github.com/apache/datafusion-comet/pull/7446

   ## Which issue does this PR close?
   
   No existing issue.
   
   ## Rationale for this change
   
   ASF release policy requires every project to provide a Project Download 
Page, and requires release announcements to link to it. The page must link the 
source release through the mirror system (`closer.lua`), and the signature, 
checksum and `KEYS` files must be served from `downloads.apache.org`, not from 
a mirror.
   
   Comet has no such page. The only link to the published source release is in 
the "Building from source" user guide, and it points at the raw 
`dist.apache.org/repos/dist/release/` SVN path. It has no signature, checksum 
or `KEYS` link, and no instructions for verifying the download.
   
   ## What changes are included in this PR?
   
   - Add `docs/source/download.md`, linked from the site navigation. It lists 
the 1.2.0 source tarball (via `closer.lua`), the `.asc` and `.sha512` files and 
`KEYS` (via `downloads.apache.org`), verification instructions, a note that the 
Maven Central jars are a convenience, and a pointer to `archive.apache.org` for 
older releases.
   - Point "Using a Published Source Release" in `user-guide/latest/source.md` 
at the Download page.
   - In `release_process.md`, require the announcement email to link the 
Download page, and add a post-release step to update the page at least an hour 
after the tarball is uploaded. The version on the page is hard-coded rather 
than templated, because the docs promotion in `generate-versions.py` happens 
before the vote and the page must not link an unpublished release.
   
   The user guide links on the page (`user-guide/1.1/...`) point at 1.1 because 
the 1.2 user guide has not been promoted yet. They should be switched to 1.2 
when that happens.
   
   ## How are these changes tested?
   
   Documentation only. Prettier passes on the changed files. The docs have not 
been built with Sphinx, and the download URLs have not been fetched because 
they follow the layout produced by `dev/release/release-tarball.sh`. They 
should be checked once the page is live, in particular 
`https://downloads.apache.org/datafusion/KEYS`.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to