[VOTE] Release maven artifacts for Apache Baremaps 0.8.1-rc4 (incubating)
Hello Everyone, This is a call for a vote to release Maven artifacts for Apache Baremaps 0.8.1 (incubating), release candidate 4. This is the first time we are publishing Maven artifacts on the Nexus repository. For this reason, I decided to separate this vote from the main release process. In the future, all artifacts will be voted on in the same thread. The artifacts have been built and published with the tag v0.8.1-rc4 and the hash e6a24651ab7e347f336c7a8544984e998dfc0dd9. The maven staging repository for this release is: https://repository.apache.org/content/repositories/orgapachebaremaps-1008/ The artifacts are signed with the PGP key 16D7A0B27D5ADD52BD57932971751399FB39CB84, which is available in the KEYS file: https://downloads.apache.org/incubator/baremaps/KEYS The vote will be open for at least 72 hours until the necessary number of votes are reached. Please vote accordingly: [ ] +1 approve [ ] +0 no opinion [ ] -1 disapprove with the reason Here is my +1 (non-binding). - I have downloaded and inspected several jars manually. - I have ensured that the LICENSE and NOTICE files in the jars are the same as the ones in the source distribution. - I have verified that several jars are signed correctly with the PGP key. - I have verified that several checksums (md5 and sha256) match the jars. - I have tested the SNAPSHOT version of the jar in a project and it worked as expected. Here are a few commands I used to verify the artifacts: gpg --verify baremaps-dem-0.8.1.jar.asc baremaps-dem-0.8.1.jar md5sum baremaps-dem-0.8.1.jar shasum baremaps-dem-0.8.1.jar Here are the setting I added to my Maven settings.xml file: apache.snapshots.https MY_USERNAME MY_PASSWORD Here are the settings I added to my pom.xml files: apache.snapshots.https https://repository.apache.org/snapshots false true org.apache.baremaps baremaps-dem 0.8.1-SNAPSHOT Best regards, Bertil - To unsubscribe, e-mail: dev-unsubscr...@baremaps.apache.org For additional commands, e-mail: dev-h...@baremaps.apache.org
Re: Preliminary verification of the maven artifacts
Thanks a lot, I opened an issue and will start the vote. https://github.com/apache/incubator-baremaps/issues/907 Best, Bertil > On 14 Dec 2024, at 17:59, Julian Hyde wrote: > > I have never paid much attention to those fields. I don’t think that they > affect licensing, and therefore it’s not urgent to fix them before the > release. I would log a case and fix it for next release. > > Julian > >> On Dec 14, 2024, at 03:35, Bertil Chapuis wrote: >> >> Thanks a lot for checking the artifacts. >> >> Before starting the vote, I decided to verify everything again and noticed >> that the autogenerated META-INF/MANIFEST.MF file contains the following >> information. >> >> Manifest-Version: 1.0 >> Created-By: Maven JAR Plugin 3.3.0 >> Build-Jdk-Spec: 21 >> Specification-Title: baremaps-csv >> Specification-Version: 0.8 >> Specification-Vendor: baremaps >> Implementation-Title: baremaps-csv >> Implementation-Version: 0.8.1 >> Implementation-Vendor: baremaps >> Build-Date: 2024-11-09T13:13:45Z >> Build-Jdk: 21.0.4 >> Build-Version: 0.8.1 >> >> Is the vendor field ok with baremaps or could this compromise the vote on >> the incubator mailing list? I’d prefer to have the same commit for the >> source release and the artifacts, but I can also try to fix this after the >> release of rc4. Here is my proposition for the future manifest files, it >> will probably require to update all the pom.xml files: >> >> Manifest-Version: 1.0 >> Created-By: Maven JAR Plugin 3.3.0 >> Build-Jdk-Spec: 21 >> Specification-Title: baremaps-csv >> Specification-Version: 0.8 >> Specification-Vendor: The Apache Software Foundation >> Implementation-Title: baremaps-csv >> Implementation-Version: 0.8.1 >> Implementation-Vendor: The Apache Software Foundation >> Build-Date: 2024-11-09T13:13:45Z >> Build-Jdk: 21.0.4 >> Build-Version: 0.8.1 >> >> Best, >> >> Bertil >> >> >>> On 12 Dec 2024, at 03:45, Julian Hyde wrote: >>> >>> The maven artifacts look OK. The directory structure contains a directory >>> for each module, and each module has .jar, .-javadoc.jar, -sources.jar >>> files and appropriate hashes. >>> >>> Julian >>> >>> > On Dec 8, 2024, at 12:02 PM, Bertil Chapuis wrote: Hello Everyone, The release artifacts are now available on Nexus. Apparently, they have passed the automated checks performed by the server, but I assume there are other factors to consider. Also, a vote seems required to release them. Could someone experienced with this process have a look at them and provide a preliminary feedback before launching the vote (Martin, I guess that you may have done the same for Apache SIS at some point)? My main task when preparing the JAR files consisted in replacing the default LICENSE and NOTICE files with the ones located at the root of the baremaps repository [2]. [1] https://repository.apache.org/content/repositories/orgapachebaremaps-1008/ [2] https://infra.apache.org/publishing-maven-artifacts.html Thank you for your help and best regards, Bertil - To unsubscribe, e-mail: dev-unsubscr...@baremaps.apache.org For additional commands, e-mail: dev-h...@baremaps.apache.org >>> >>> >>> - >>> To unsubscribe, e-mail: dev-unsubscr...@baremaps.apache.org >>> For additional commands, e-mail: dev-h...@baremaps.apache.org >>> >> >> >> - >> To unsubscribe, e-mail: dev-unsubscr...@baremaps.apache.org >> For additional commands, e-mail: dev-h...@baremaps.apache.org >> > > - > To unsubscribe, e-mail: dev-unsubscr...@baremaps.apache.org > For additional commands, e-mail: dev-h...@baremaps.apache.org >
Re: [VOTE] Release maven artifacts for Apache Baremaps 0.8.1-rc4 (incubating)
+1 jhyde (IPMC member) > On Dec 15, 2024, at 6:12 AM, Bertil Chapuis wrote: > > Hello Everyone, > > This is a call for a vote to release Maven artifacts for Apache Baremaps > 0.8.1 (incubating), release candidate 4. This is the first time we are > publishing Maven artifacts on the Nexus repository. For this reason, I > decided to separate this vote from the main release process. In the future, > all artifacts will be voted on in the same thread. > > The artifacts have been built and published with the tag v0.8.1-rc4 and the > hash e6a24651ab7e347f336c7a8544984e998dfc0dd9. > > The maven staging repository for this release is: > https://repository.apache.org/content/repositories/orgapachebaremaps-1008/ > > The artifacts are signed with the PGP key > 16D7A0B27D5ADD52BD57932971751399FB39CB84, which is available in the KEYS file: > https://downloads.apache.org/incubator/baremaps/KEYS > > The vote will be open for at least 72 hours until the necessary number > of votes are reached. > > Please vote accordingly: > [ ] +1 approve > [ ] +0 no opinion > [ ] -1 disapprove with the reason > > Here is my +1 (non-binding). > - I have downloaded and inspected several jars manually. > - I have ensured that the LICENSE and NOTICE files in the jars are the same > as the ones in the source distribution. > - I have verified that several jars are signed correctly with the PGP key. > - I have verified that several checksums (md5 and sha256) match the jars. > - I have tested the SNAPSHOT version of the jar in a project and it worked as > expected. > > Here are a few commands I used to verify the artifacts: > gpg --verify baremaps-dem-0.8.1.jar.asc baremaps-dem-0.8.1.jar > md5sum baremaps-dem-0.8.1.jar > shasum baremaps-dem-0.8.1.jar > > Here are the setting I added to my Maven settings.xml file: > >apache.snapshots.https >MY_USERNAME >MY_PASSWORD > > > Here are the settings I added to my pom.xml files: > > >apache.snapshots.https >https://repository.apache.org/snapshots > >false > > >true > > > > > >org.apache.baremaps >baremaps-dem >0.8.1-SNAPSHOT > > > > Best regards, > > Bertil > > > > - > To unsubscribe, e-mail: dev-unsubscr...@baremaps.apache.org > For additional commands, e-mail: dev-h...@baremaps.apache.org > - To unsubscribe, e-mail: dev-unsubscr...@baremaps.apache.org For additional commands, e-mail: dev-h...@baremaps.apache.org
