vlsi commented on issue #104: WIP: CALCITE-3158: Avatica: migrate build system to Gradle URL: https://github.com/apache/calcite-avatica/pull/104#issuecomment-540520681 > Is it normal that a simple build necessitates the PGP keys? That depends. -SNAPSHOT builds should not require signing, and it was just a bug. I've updated vlsi-release-plugins version, and it should work now. >Q1: Is it normal that a simple build necessitates the PGP keys? Technically speaking, you can pass the key via command line argument (e.g. -P...) As an alternative, I've committed `-PuseGpgCmd`, so it would use standalone gpg which you can configure as you like. See https://github.com/gradle/gradle/security/advisories/GHSA-mrm8-42q4-6rm7 > Q2: Is there another configuration where we can type the secret in console only when it is necessary? Do you absolutely need typing? It can be implemented, however I thought gpg agent should be good enough. >Q3: Where is the code/properties to configure the URLs to SVN and Nexus? Which ones? Do you mean GitBox/GitHub/dist.apache.org? The servers are pre-configured in https://github.com/vlsi/vlsi-release-plugins/blob/2fdc379e8b8f142b0baa7f240b779d6427a9d027/plugins/stage-vote-release-plugin/src/main/kotlin/com/github/vlsi/gradle/release/GitUrlConventions.kt You can flip between GitHub and GitBox with `asf.git.pushRepositoryProvider` property
---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected] With regards, Apache Git Services
