Re: [VOTE] Apache MXNet (incubating) 1.2.0 release RC3

2018-05-19 Thread Sebastian 

Hi,

I had a look at the files and found that the key required to verify the 
signature is not contained in the KEYS file in the tar ball. It has to 
be downloaded from an external keyserver.


Not sure about the consequences of that, is it a minor thing or should a 
new RC be cut?


Best,
Sebastian

On 19.05.2018 00:14, Sergio Fernández wrote:

+1 (binding)

So far I've checked:
* signatures and digests
* source releases file layouts
* matched git tags and commit ids
* incubator suffix and disclaimer
* LICENSE & NOTICE files look good despite the many third-party code (CC-BY
files from RC2 are gone)
* no binary files in the source release
* clean build



On Tue, May 15, 2018 at 12:16 PM, Anirudh Subramanian <
anirudh2...@apache.org> wrote:


Hi all,

This is a call for releasing Apache MXNet (incubating) 1.2.0, release
candidate RC3.
As suggested by Justin and Henri, we have removed the two category b
license files: DevGuide.md from the release source tarball.

Apache MXNet (incubating) community has voted and approved the release.

Vote thread:
https://lists.apache.org/thread.html/fee7800da4b701cb62d6dd7c1b43ef
d44c94a3a386f3adb48f343d6e@%3Cdev.mxnet.apache.org%3E

Results thread:
https://lists.apache.org/thread.html/0a43205e47a02a528873e16fe0e578
9dfcfebc8a8539f17bbcde2062@%3Cdev.mxnet.apache.org%3E

The source tarball, including signatures, digests etc. can be found at:
https://dist.apache.org/repos/dist/dev/incubator/mxnet/1.2.0.rc3/

The release tag can be found here:
https://github.com/apache/incubator-mxnet/releases/tag/1.2.0.rc3


The release hash is 297c64fd2ee404612aa3ecc880b940fb2538039c and can be
found here:
https://github.com/apache/incubator-mxnet/commit/
297c64fd2ee404612aa3ecc880b940fb2538039c


Release artifacts are signed with the following key:
0D04 3D0F 92CA 7333 22A8  D131 9067 CC8E AF55 CD6D

KEYS file available:

https://dist.apache.org/repos/dist/dev/incubator/mxnet/KEYS

For information on the contents of the release see:

https://cwiki.apache.org/confluence/display/MXNET/
Apache+MXNet+%28incubating%29+1.2.0+Release+Notes

The vote will end at 1:00 PM on Friday, May 18th, PDT.

[ ] +1 Release this package as 1.2.0
[ ] +0 no opinion
[ ] -1 Do not release this package because ...


Anirudh





-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [VOTE] Apache MXNet (incubating) 1.2.0 release RC3

2018-05-19 Thread Justin Mclean 
Hi,

> I had a look at the files and found that the key required to verify the 
> signature is not contained in the KEYS file in the tar ball. 

AFAIK having the KEY file in the tar ball is not really helpful at all as it 
could be modified and republished. The KEY file needs to be stored alongside 
the release [1], hashes and KEYS are hashes not propagated on the mirror 
system. [2]

Thanks,
Justin

1. https://www.apache.org/dev/release-signing.html#keys-policy
2. http://www.apache.org/dev/release-publishing.html#distribution_dist
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [VOTE] Apache MXNet (incubating) 1.2.0 release RC3

2018-05-19 Thread Hen 
I am only reviewing the "diff -r" between RC2 and RC3.

Confirmed that the DevGuide.md is removed.

There is a fix ( https://github.com/apache/incubator-mxnet/issues/10837 )
to Dockerfiles, and a pom.xml fix adding a parent tag to the scala-package.

These seem fine and rectifies the blocking item in the previous vote.

+1.

Hen


On Tue, May 15, 2018 at 12:16 PM, Anirudh Subramanian <
anirudh2...@apache.org> wrote:

> Hi all,
>
> This is a call for releasing Apache MXNet (incubating) 1.2.0, release
> candidate RC3.
> As suggested by Justin and Henri, we have removed the two category b
> license files: DevGuide.md from the release source tarball.
>
> Apache MXNet (incubating) community has voted and approved the release.
>
> Vote thread:
> https://lists.apache.org/thread.html/fee7800da4b701cb62d6dd7c1b43ef
> d44c94a3a386f3adb48f343d6e@%3Cdev.mxnet.apache.org%3E
>
> Results thread:
> https://lists.apache.org/thread.html/0a43205e47a02a528873e16fe0e578
> 9dfcfebc8a8539f17bbcde2062@%3Cdev.mxnet.apache.org%3E
>
> The source tarball, including signatures, digests etc. can be found at:
> https://dist.apache.org/repos/dist/dev/incubator/mxnet/1.2.0.rc3/
>
> The release tag can be found here:
> https://github.com/apache/incubator-mxnet/releases/tag/1.2.0.rc3
>
> 
> The release hash is 297c64fd2ee404612aa3ecc880b940fb2538039c and can be
> found here:
> https://github.com/apache/incubator-mxnet/commit/
> 297c64fd2ee404612aa3ecc880b940fb2538039c
>
>  297c64fd2ee404612aa3ecc880b940fb2538039c>
> Release artifacts are signed with the following key:
> 0D04 3D0F 92CA 7333 22A8  D131 9067 CC8E AF55 CD6D
>
> KEYS file available:
>
> https://dist.apache.org/repos/dist/dev/incubator/mxnet/KEYS
>
> For information on the contents of the release see:
>
> https://cwiki.apache.org/confluence/display/MXNET/
> Apache+MXNet+%28incubating%29+1.2.0+Release+Notes
>
> The vote will end at 1:00 PM on Friday, May 18th, PDT.
>
> [ ] +1 Release this package as 1.2.0
> [ ] +0 no opinion
> [ ] -1 Do not release this package because ...
>
>
> Anirudh
>

Re: [VOTE] Apache MXNet (incubating) 1.2.0 release RC3

2018-05-19 Thread Sebastian 

+1

 - checked signatures
 - checked building from source under ubuntu 16

On 19.05.2018 19:25, Hen wrote:

I am only reviewing the "diff -r" between RC2 and RC3.

Confirmed that the DevGuide.md is removed.

There is a fix ( https://github.com/apache/incubator-mxnet/issues/10837 )
to Dockerfiles, and a pom.xml fix adding a parent tag to the scala-package.

These seem fine and rectifies the blocking item in the previous vote.

+1.

Hen


On Tue, May 15, 2018 at 12:16 PM, Anirudh Subramanian <
anirudh2...@apache.org> wrote:


Hi all,

This is a call for releasing Apache MXNet (incubating) 1.2.0, release
candidate RC3.
As suggested by Justin and Henri, we have removed the two category b
license files: DevGuide.md from the release source tarball.

Apache MXNet (incubating) community has voted and approved the release.

Vote thread:
https://lists.apache.org/thread.html/fee7800da4b701cb62d6dd7c1b43ef
d44c94a3a386f3adb48f343d6e@%3Cdev.mxnet.apache.org%3E

Results thread:
https://lists.apache.org/thread.html/0a43205e47a02a528873e16fe0e578
9dfcfebc8a8539f17bbcde2062@%3Cdev.mxnet.apache.org%3E

The source tarball, including signatures, digests etc. can be found at:
https://dist.apache.org/repos/dist/dev/incubator/mxnet/1.2.0.rc3/

The release tag can be found here:
https://github.com/apache/incubator-mxnet/releases/tag/1.2.0.rc3


The release hash is 297c64fd2ee404612aa3ecc880b940fb2538039c and can be
found here:
https://github.com/apache/incubator-mxnet/commit/
297c64fd2ee404612aa3ecc880b940fb2538039c


Release artifacts are signed with the following key:
0D04 3D0F 92CA 7333 22A8  D131 9067 CC8E AF55 CD6D

KEYS file available:

https://dist.apache.org/repos/dist/dev/incubator/mxnet/KEYS

For information on the contents of the release see:

https://cwiki.apache.org/confluence/display/MXNET/
Apache+MXNet+%28incubating%29+1.2.0+Release+Notes

The vote will end at 1:00 PM on Friday, May 18th, PDT.

[ ] +1 Release this package as 1.2.0
[ ] +0 no opinion
[ ] -1 Do not release this package because ...


Anirudh





-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [VOTE] Apache MXNet (incubating) 1.2.0 release RC3

2018-05-19 Thread Anirudh 
Hi,

Thank you all for voting and providing your inputs.

The vote has passed with three +1 binding votes and no -1 or 0 votes.

+1 (binding):
Sergio
Henri
Sebastian

I will follow up on Monday, on the next steps for the release.

Anirudh


On Sat, May 19, 2018 at 2:08 PM, Sebastian  wrote:

> +1
>
>  - checked signatures
>  - checked building from source under ubuntu 16
>
>
> On 19.05.2018 19:25, Hen wrote:
>
>> I am only reviewing the "diff -r" between RC2 and RC3.
>>
>> Confirmed that the DevGuide.md is removed.
>>
>> There is a fix ( https://github.com/apache/incubator-mxnet/issues/10837 )
>> to Dockerfiles, and a pom.xml fix adding a parent tag to the
>> scala-package.
>>
>> These seem fine and rectifies the blocking item in the previous vote.
>>
>> +1.
>>
>> Hen
>>
>>
>> On Tue, May 15, 2018 at 12:16 PM, Anirudh Subramanian <
>> anirudh2...@apache.org> wrote:
>>
>> Hi all,
>>>
>>> This is a call for releasing Apache MXNet (incubating) 1.2.0, release
>>> candidate RC3.
>>> As suggested by Justin and Henri, we have removed the two category b
>>> license files: DevGuide.md from the release source tarball.
>>>
>>> Apache MXNet (incubating) community has voted and approved the release.
>>>
>>> Vote thread:
>>> https://lists.apache.org/thread.html/fee7800da4b701cb62d6dd7c1b43ef
>>> d44c94a3a386f3adb48f343d6e@%3Cdev.mxnet.apache.org%3E
>>>
>>> Results thread:
>>> https://lists.apache.org/thread.html/0a43205e47a02a528873e16fe0e578
>>> 9dfcfebc8a8539f17bbcde2062@%3Cdev.mxnet.apache.org%3E
>>>
>>> The source tarball, including signatures, digests etc. can be found at:
>>> https://dist.apache.org/repos/dist/dev/incubator/mxnet/1.2.0.rc3/
>>>
>>> The release tag can be found here:
>>> https://github.com/apache/incubator-mxnet/releases/tag/1.2.0.rc3
>>>
>>> 
>>> The release hash is 297c64fd2ee404612aa3ecc880b940fb2538039c and can be
>>> found here:
>>> https://github.com/apache/incubator-mxnet/commit/
>>> 297c64fd2ee404612aa3ecc880b940fb2538039c
>>>
>>> >> 297c64fd2ee404612aa3ecc880b940fb2538039c>
>>> Release artifacts are signed with the following key:
>>> 0D04 3D0F 92CA 7333 22A8  D131 9067 CC8E AF55 CD6D
>>>
>>> KEYS file available:
>>>
>>> https://dist.apache.org/repos/dist/dev/incubator/mxnet/KEYS
>>>
>>> For information on the contents of the release see:
>>>
>>> https://cwiki.apache.org/confluence/display/MXNET/
>>> Apache+MXNet+%28incubating%29+1.2.0+Release+Notes
>>>
>>> The vote will end at 1:00 PM on Friday, May 18th, PDT.
>>>
>>> [ ] +1 Release this package as 1.2.0
>>> [ ] +0 no opinion
>>> [ ] -1 Do not release this package because ...
>>>
>>>
>>> Anirudh
>>>
>>>
>>
> -
> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
> For additional commands, e-mail: general-h...@incubator.apache.org
>
>

Re: [VOTE] Release Apache ECharts (incubating) 4.1.0.rc3

2018-05-19 Thread Willem Jiang 
Hi,

As there is only one zip file, I guess it just the src distribution.
But after went through the file, I found lot of echart js files in the dist
directory and the rat jar.

So I'm confused what's the purpose of apache-echarts-4.1.0.rc3-
incubating.zip

Normally we distribute the src and binary files separately.



Willem Jiang

Blog: http://willemjiang.blogspot.com (English)
  http://jnn.iteye.com  (Chinese)
Twitter: willemjiang
Weibo: 姜宁willem

On Thu, May 17, 2018 at 7:42 PM, SHUANG SU  wrote:

> I am pleased to be calling this vote for the release of Apache ECharts
> 4.1.0.rc3.
>
> Apache ECharts community has voted and approved the release.
>
> Vote thread:
> https://lists.apache.org/thread.html/67dffef28ecffd66689ac991ca027c
> 0868d734629949d958e7b12dd3@%3Cdev.echarts.apache.org%3E
>
> Results thread:
> https://lists.apache.org/thread.html/3a6e627a7e07d5de0856296d44bb40
> 8e17ee6795cc74ef190a7a5d23@%3Cdev.echarts.apache.org%3E
>
> The release candidate to be voted over is available at:
> https://dist.apache.org/repos/dist/dev/incubator/echarts/4.1.0.rc3/
>
> The release candidate is signed with a GPG key available at:
> https://dist.apache.org/repos/dist/dev/incubator/echarts/KEYS
>
> A tagged git repository is available for review at:
> https://github.com/apache/incubator-echarts/releases/tag/4.1.0.rc3
>
> The Git commit for this release is:
> https://gitbox.apache.org/repos/asf?p=incubator-echarts.
> git;a=commit;h=f98eb21
>
> The Release Note is available in:
> https://dist.apache.org/repos/dist/dev/incubator/echarts/4.
> 1.0.rc3/RELEASE_NOTE.txt
>
> Some shell commands for validating the release:
>
> ```shell
> # Download the release:
> curl
> https://dist.apache.org/repos/dist/dev/incubator/echarts/4.
> 1.0.rc3/apache-echarts-4.1.0.rc3-incubating.zip
> -o apache-echarts-4.1.0.rc3-incubating.zip
> unzip apache-echarts-4.1.0.rc3-incubating.zip -d
> apache-echarts-4.1.0.rc3-incubating > /dev/null
>
> # Rebuild the project:
> cd "apache-echarts-4.1.0.rc3-incubating" && npm install && cd ..
> node "apache-echarts-4.1.0.rc3-incubating/build/build.js" --release
> # (See help: `node "apache-echarts-4.1.0.rc3-incubating/build/build.js"
> --help`)
>
> # Run Apache Rat:
> java -jar "apache-echarts-4.1.0.rc3-incubating/build/rat/runrat.jar" |
> less
> # (See help: `java -jar
> "apache-echarts-4.1.0.rc3-incubating/build/rat/runrat.jar" --help`)
> ```
>
>
> Please vote on releasing this package as:
> Apache ECharts 4.1.0.rc3
>
> This vote will be open until "2018-05-20T12:33:24.955Z".
>
> [ ] +1 Release this package
> [ ] 0 I don't feel strongly about it, but don't object
> [ ] -1 Do not release this package because...
>
> Anyone can participate in testing and voting, not just committers, please
> feel free to try out the release candidate and provide your votes.
>
>
> --
>  Su Shuang (100pah)
> --
>

Re: [VOTE] Pulsar Release 2.0.0-rc1-incubating Candidate 4

2018-05-19 Thread Willem Jiang 
Hi,

As there are some License issues in the binary distribution (please check
the section4 for more information), I had to vote  -1 (binding).

Here are the verifications which I did
1. check the checksums and verify the KEY.
  These KEY are not signed by the others, so I got the warning WARNING:
This key is not certified with a trusted signature!

2. Checked the License and Notice file of the source distribution.
  It looks good.

3. Built the source with instruction of README and start the server
  It works and I can start the standalone server.
  I also checked the distribution file in the all directory, I can get the
binary and source distribution there.

4. Checked the License and Notice file of the binary distribution.
There is not version of bundled jars specified in the License file. It
could cause some trouble as the License could be changed in different
versions of jar distribution.

 Most of the bundled jars are specified in the License file, but some of
them are missed.

* com.google.errorprone-error_prone_annotations-2.0.19.jar

* com.google.instrumentation-instrumentation-api-0.4.3.jar

* com.squareup.okhttp-okhttp-2.5.0.jar

* com.squareup.okio-okio-1.6.0.jar

* org.apache.distributedlog-distributedlog-core-shaded-4.7.0.jar

The javassist jar is not CDDL license, it has multiple licenses
ASL,LGPL,MPL (we need to pick one of them).

* org.javassist-javassist-3.21.0-GA.jar


Willem Jiang


On Fri, May 18, 2018 at 11:35 AM, Matteo Merli  wrote:

> This is the fourth release candidate for Apache Pulsar, version
> 2.0.0-rc1-incubating.
>
> Pulsar is a highly scalable, low latency messaging platform running on
> commodity hardware.
> It provides simple pub-sub semantics over topics, guaranteed at-least-once
> delivery of
> messages, automatic cursor management for subscribers, and geo-replication.
>
> Link to the voting thread on pulsar dev list:
> https://lists.apache.org/thread.html/865ac7e993265a31512642c5f29e53
> e65f4199b931a5ae91d07fba77@%3Cdev.pulsar.apache.org%3E
>
> It fixes the following issues:
> https://github.com/apache/incubator-pulsar/milestone/12?closed=1
>
> *** Please download, test and vote on this release. This vote will stay
> open
> for at least 72 hours ***
>
> Note that we are voting upon the source (tag), binaries are provided for
> convenience.
>
> Source and binary files:
> https://dist.apache.org/repos/dist/dev/incubator/pulsar/
> pulsar-2.0.0-rc1-incubating-candidate-4/
>
> SHA-1 checksums:
> a959a33500508d0ba690ca177eb39cf83dddf022
> apache-pulsar-2.0.0-rc1-incubating-bin.tar.gz
> 5b9bedd2f284c5a8d95ba6dc3c70af8c266fbb3b
> apache-pulsar-2.0.0-rc1-incubating-src.tar.gz
>
> Maven staging repo:
> https://repository.apache.org/content/repositories/orgapachepulsar-1014/
>
> The tag to be voted upon:
> v2.0.0-rc1-incubating-candidate-4 (e5d3bda9607703c2e012983c7ef64f
> 5eb4118de7)
> https://github.com/apache/incubator-pulsar/releases/tag/
> v2.0.0-rc1-incubating-candidate-4
>
> Pulsar's KEYS file containing PGP keys we use to sign the release:
> https://dist.apache.org/repos/dist/release/incubator/pulsar/KEYS
>
> Please download the the source package, and follow the README to build
> and run the Pulsar standalone service.
> --
> Matteo Merli
> 
>