Re: 1.7.6 Candidates

2012-08-13 Thread Philip Martin
Philip Martin writes: > Subversion 1.7.6 tarballs are now available for testing/signing by > committers. To obtain them please check out a working copy from > https://dist.apache.org/repos/dist/dev/subversion > > Please add your signatures to the .asc files there. We have sufficient signatures s

Re: 1.7.6 Candidates

2012-08-12 Thread Johan Corveleyn
On Sun, Aug 12, 2012 at 8:03 PM, Ben Reser wrote: > On Sun, Aug 12, 2012 at 8:22 AM, Daniel Shahaf > wrote: >> No. It makes them worse. >> >> Unless of course you expanded the tar and diff'd it --ignore-eol-style >> against the zip you had built, in which case it does make them better. > > Mayb

Re: 1.7.6 Candidates

2012-08-12 Thread Ben Reser
On Sun, Aug 12, 2012 at 8:22 AM, Daniel Shahaf wrote: > No. It makes them worse. > > Unless of course you expanded the tar and diff'd it --ignore-eol-style > against the zip you had built, in which case it does make them better. Maybe I'm being obtuse but isn't everyone signing checking the code

Re: 1.7.6 Candidates

2012-08-12 Thread Daniel Shahaf
Mark Phippard wrote on Sat, Aug 11, 2012 at 18:06:18 -0400: > On Sat, Aug 11, 2012 at 2:57 PM, Daniel Shahaf > wrote: > > Mark Phippard wrote on Fri, Aug 10, 2012 at 09:30:01 -0400: > >> On Fri, Aug 10, 2012 at 9:06 AM, Philip Martin > >> wrote: > >> > Justin Erenkrantz writes: > >> > > >> >> O

Re: 1.7.6 Candidates

2012-08-11 Thread Ben Reser
On Sat, Aug 11, 2012 at 11:57 AM, Daniel Shahaf wrote: > The idea is that a hypothetical malicious release manager could create > tar.gz and tar.bz2 correctly but a malicious .zip file. > > We could write a release.py subcommand that compares the > tar.gz/tar.bz2/zip to each other (and to the tag

Re: 1.7.6 Candidates

2012-08-11 Thread Ben Reser
On Sat, Aug 11, 2012 at 3:06 PM, Mark Phippard wrote: > But if we still require three +1's from Windows testers and three from > Unix testers does that not take care of it? Paul and I tested and > signed the Windows zip file. Doesn't it make the signatures of the > Unix tar's "better" if we also

Re: 1.7.6 Candidates

2012-08-11 Thread Ben Reser
On Wed, Aug 8, 2012 at 10:40 AM, Philip Martin wrote: > Subversion 1.7.6 tarballs are now available for testing/signing by > committers. To obtain them please check out a working copy from > https://dist.apache.org/repos/dist/dev/subversion +1 Tested on OS X 10.7.4. Dependencies: Neon 0.29.6 Al

Re: 1.7.6 Candidates

2012-08-11 Thread Mark Phippard
On Sat, Aug 11, 2012 at 2:57 PM, Daniel Shahaf wrote: > Mark Phippard wrote on Fri, Aug 10, 2012 at 09:30:01 -0400: >> On Fri, Aug 10, 2012 at 9:06 AM, Philip Martin >> wrote: >> > Justin Erenkrantz writes: >> > >> >> On Wed, Aug 8, 2012 at 1:40 PM, Philip Martin >> >> wrote: >> >>> Subversion

Re: 1.7.6 Candidates

2012-08-11 Thread Daniel Shahaf
Mark Phippard wrote on Fri, Aug 10, 2012 at 09:30:01 -0400: > On Fri, Aug 10, 2012 at 9:06 AM, Philip Martin > wrote: > > Justin Erenkrantz writes: > > > >> On Wed, Aug 8, 2012 at 1:40 PM, Philip Martin > >> wrote: > >>> Subversion 1.7.6 tarballs are now available for testing/signing by > >>> co

Re: 1.7.6 Candidates

2012-08-10 Thread Johan Corveleyn
On Wed, Aug 8, 2012 at 7:40 PM, Philip Martin wrote: > Subversion 1.7.6 tarballs are now available for testing/signing by > committers. To obtain them please check out a working copy from > https://dist.apache.org/repos/dist/dev/subversion > > Please add your signatures to the .asc files there. C

Re: 1.7.6 Candidates

2012-08-10 Thread Mark Phippard
On Fri, Aug 10, 2012 at 9:06 AM, Philip Martin wrote: > Justin Erenkrantz writes: > >> On Wed, Aug 8, 2012 at 1:40 PM, Philip Martin >> wrote: >>> Subversion 1.7.6 tarballs are now available for testing/signing by >>> committers. To obtain them please check out a working copy from >>> https://di

Re: 1.7.6 Candidates

2012-08-10 Thread Philip Martin
Justin Erenkrantz writes: > On Wed, Aug 8, 2012 at 1:40 PM, Philip Martin > wrote: >> Subversion 1.7.6 tarballs are now available for testing/signing by >> committers. To obtain them please check out a working copy from >> https://dist.apache.org/repos/dist/dev/subversion > > +1 for release. > >

Re: 1.7.6 Candidates

2012-08-10 Thread Mark Phippard
+1 to release. I committed my signature for the Windows zip -- Thanks Mark Phippard http://markphip.blogspot.com/

Re: 1.7.6 Candidates

2012-08-09 Thread Justin Erenkrantz
On Wed, Aug 8, 2012 at 1:40 PM, Philip Martin wrote: > Subversion 1.7.6 tarballs are now available for testing/signing by > committers. To obtain them please check out a working copy from > https://dist.apache.org/repos/dist/dev/subversion +1 for release. Tested on Mac OS X 10.7.4. All tests pa

Re: 1.7.6 Candidates

2012-08-09 Thread Paul Burba
On Wed, Aug 8, 2012 at 1:40 PM, Philip Martin wrote: > Subversion 1.7.6 tarballs are now available for testing/signing by > committers. To obtain them please check out a working copy from > https://dist.apache.org/repos/dist/dev/subversion > > Please add your signatures to the .asc files there. >

Re: 1.7.6 Candidates

2012-08-09 Thread C. Michael Pilato
On 08/08/2012 01:40 PM, Philip Martin wrote: > Subversion 1.7.6 tarballs are now available for testing/signing by > committers. To obtain them please check out a working copy from > https://dist.apache.org/repos/dist/dev/subversion Summary: +1 to release. Platform: Ubuntu 10.04.4 (lucid)

Re: 1.7.6 Candidates

2012-08-09 Thread C. Michael Pilato
On 08/09/2012 12:08 PM, C. Michael Pilato wrote: > On 08/08/2012 01:40 PM, Philip Martin wrote: >> Subversion 1.7.6 tarballs are now available for testing/signing by >> committers. To obtain them please check out a working copy from >> https://dist.apache.org/repos/dist/dev/subversion >> >> Please

Re: 1.7.6 Candidates

2012-08-09 Thread C. Michael Pilato
On 08/08/2012 01:40 PM, Philip Martin wrote: > Subversion 1.7.6 tarballs are now available for testing/signing by > committers. To obtain them please check out a working copy from > https://dist.apache.org/repos/dist/dev/subversion > > Please add your signatures to the .asc files there. > You can

Re: 1.7.6 Candidates

2012-08-08 Thread Hyrum K Wright
On Wed, Aug 8, 2012 at 1:40 PM, Philip Martin wrote: > Subversion 1.7.6 tarballs are now available for testing/signing by > committers. To obtain them please check out a working copy from > https://dist.apache.org/repos/dist/dev/subversion > > Please add your signatures to the .asc files there. >

1.7.6 Candidates

2012-08-08 Thread Philip Martin
Subversion 1.7.6 tarballs are now available for testing/signing by committers. To obtain them please check out a working copy from https://dist.apache.org/repos/dist/dev/subversion Please add your signatures to the .asc files there. You can use the release.py script for this: release.py sign-can