Shane Curcuru wrote on 7/12/23 11:47 AM:
Inspired by Sander recently, I reviewed the docs we send when onboarding
new community members. First impressions can set a tone for newcomers.
Looking at the actual ways we welcome them was a bit disappointing -
lots of jargon, minor inconsistencies, a
Abstract: Signing release artifacts using an automated release
infrastructure has been officially approved by LEGAL. This enables
projects to sign artifacts using, say, GitHub Actions.
I have been trying to overhaul the Log4j release process and make it
as frictionless as possible since last year.