My vote is +1. I have: - verified hashes for bin/src - verified signatures for bin/src - verified LICENSE and NOTICE for bin/src - verified no binary files in src - verified unit tests and sunny profile pass - verified accumulo-examples repo builds and unit and integration tests pass using candidate
On 2025/08/15 16:25:34 Dave Marion wrote: > +1, assuming that the JQuery version number being incorrect in the LICENSE > file is not a blocker > > I did the following: > > Verified src and binary tarball signatures > Verified src and binary tarball hashes > Checked licenses, found JQuery version incorrect in LICENSE (should be > 3.7.1, not 3.6.1) > Validated no binary files exist in source release artifact except test jars > Ran integration tests with the sunny profile > > On Fri, Aug 15, 2025 at 10:42 AM Dave Marion <dmario...@gmail.com> wrote: > > > JQuery was updated to version 3.7.1 in #3754, but the LICENSE file still > > refers to version 3.6.1. It looks like the license is the same though. I > > don't know if the version number being incorrect is enough to veto this or > > not. > > > > On Thu, Aug 14, 2025 at 5:17 PM Christopher <ctubb...@apache.org> wrote: > > > >> I don't think it's a blocker, but it raised some additional questions > >> I had about how we exit, and whether or not it's even possible to exit > >> gracefully (with or without that PR). Once we figure out what we want > >> to do, we can include it in the next release candidate or release if > >> this candidate passes. > >> > >> On Wed, Aug 13, 2025 at 9:22 AM Dave Marion <dmario...@gmail.com> wrote: > >> > > >> > I just put up PR #5796 due to an issue I found in 4.0. It looks like the > >> > root cause was a change added in #5726 in the 2.1.4 release. #5796 > >> > currently targets 4.0, but can be rebased to target 2.1.4 pretty easily. > >> > Thoughts on whether this issue is important enough to fix in 2.1.4 and > >> > create another release candidate, or whether we include it in a 2.1.5 > >> > release? > >> > > >> > On Tue, Aug 12, 2025 at 9:38 PM Christopher <ctubb...@apache.org> > >> wrote: > >> > > >> > > Accumulo Developers, > >> > > > >> > > Please consider the following candidate for Apache Accumulo 2.1.4. > >> > > (note: rc1 was abandoned before an email was produced, so that's why > >> > > you didn't see it, in case you're wondering) > >> > > > >> > > Git Commit: > >> > > e557fd95fedbce9988ea95b685f13a2d469ca34c > >> > > Branch: > >> > > 2.1.4-rc2 > >> > > > >> > > If this vote passes, a gpg-signed tag will be created using: > >> > > git tag -f -s -m 'Apache Accumulo 2.1.4' rel/2.1.4 \ > >> > > e557fd95fedbce9988ea95b685f13a2d469ca34c > >> > > > >> > > Staging repo: > >> > > > >> https://repository.apache.org/content/repositories/orgapacheaccumulo-1116 > >> > > Source (official release artifact): > >> > > > >> > > > >> https://repository.apache.org/content/repositories/orgapacheaccumulo-1116/org/apache/accumulo/accumulo/2.1.4/accumulo-2.1.4-src.tar.gz > >> > > Binary: > >> > > > >> https://repository.apache.org/content/repositories/orgapacheaccumulo-1116/org/apache/accumulo/accumulo/2.1.4/accumulo-2.1.4-bin.tar.gz > >> > > > >> > > Append ".asc" to download the cryptographic signature for a given > >> artifact. > >> > > (You can also append ".sha1" or ".md5" instead in order to verify the > >> > > checksums > >> > > generated by Maven to verify the integrity of the Nexus repository > >> > > staging area.) > >> > > > >> > > Signing keys are available at > >> https://www.apache.org/dist/accumulo/KEYS > >> > > (Expected fingerprint: 8CC4F8A2B29C2B040F2B835D6F0CDAE700B6899D) > >> > > > >> > > In addition to the tarballs and their signatures, the following > >> checksum > >> > > files will be added to the dist/release SVN area after release: > >> > > accumulo-2.1.4-src.tar.gz.sha512 will contain: > >> > > SHA512 (accumulo-2.1.4-src.tar.gz) = > >> > > > >> > > > >> 2cb1c94a31ae114a571f4562ea0a4fb0b35859ead629066b9f95eb62ec2463b2893ac378997855fe119d075fa2bd9713a42a0edbd3ef5c392e15fcf57bbf9f6c > >> > > accumulo-2.1.4-bin.tar.gz.sha512 will contain: > >> > > SHA512 (accumulo-2.1.4-bin.tar.gz) = > >> > > > >> > > > >> a752ff92e711ef09e07d34d4f0e18c51de67ef0b54d39470eda31dea4c2b40769efe35ef3a64b1706264493dfcacbfc0dfd2708bd54df1e9df110ad8d403c2c6 > >> > > > >> > > Release notes (in progress) can be found at: > >> > > https://accumulo.apache.org/release/accumulo-2.1.4 > >> > > > >> > > Release testing instructions: > >> > > https://accumulo.apache.org/contributor/verifying-release > >> > > > >> > > Please vote one of: > >> > > [ ] +1 - I have verified and accept... > >> > > [ ] +0 - I have reservations, but not strong enough to vote against... > >> > > [ ] -1 - Because..., I do not accept... > >> > > ... these artifacts as the 2.1.4 release of Apache Accumulo. > >> > > > >> > > This vote will remain open until at least Sat Aug 16 02:00:00 AM UTC > >> 2025. > >> > > (Fri Aug 15 10:00:00 PM EDT 2025 / Fri Aug 15 07:00:00 PM PDT 2025) > >> > > Voting can continue after this deadline until the release manager > >> > > sends an email ending the vote. > >> > > > >> > > Thanks! > >> > > > >> > > P.S. Hint: download the whole staging repo with > >> > > wget -erobots=off -r -l inf -np -nH \ > >> > > > >> > > > >> https://repository.apache.org/content/repositories/orgapacheaccumulo-1116/ > >> > > # note the trailing slash is needed > >> > > > >> > > >
