+1 Verified the following: * Verified all md5/sha1/gpg signatures for Maven artifacts * All jars are sealed and have corresponding source and javadoc jars * Jar manifests match the git commit * Binary and source tarballs match the SHA512 and gpg signature is valid * Binary tarball contains all expected jars * Source tarball matches contents of git commit * Started Accumulo 2.1.4 using uno and performed some basic operations * Could build from source tarball using `mvn clean package -DskipTests`
I did see one test failure, which seems to be an edge case with the IdleRatioScanPrioritizer (https://github.com/apache/accumulo/issues/5809) On Tue, Aug 19, 2025 at 5:32 PM Keith Turner <ktur...@apache.org> wrote: > > +1 > > Verified tar ball hashes and signatures. > Built src tar and compared src tar to branch. > Looked at changes since rc0. > > On Tue, Aug 12, 2025 at 9:37 PM Christopher <ctubb...@apache.org> wrote: > > > Accumulo Developers, > > > > Please consider the following candidate for Apache Accumulo 2.1.4. > > (note: rc1 was abandoned before an email was produced, so that's why > > you didn't see it, in case you're wondering) > > > > Git Commit: > > e557fd95fedbce9988ea95b685f13a2d469ca34c > > Branch: > > 2.1.4-rc2 > > > > If this vote passes, a gpg-signed tag will be created using: > > git tag -f -s -m 'Apache Accumulo 2.1.4' rel/2.1.4 \ > > e557fd95fedbce9988ea95b685f13a2d469ca34c > > > > Staging repo: > > https://repository.apache.org/content/repositories/orgapacheaccumulo-1116 > > Source (official release artifact): > > > > https://repository.apache.org/content/repositories/orgapacheaccumulo-1116/org/apache/accumulo/accumulo/2.1.4/accumulo-2.1.4-src.tar.gz > > Binary: > > https://repository.apache.org/content/repositories/orgapacheaccumulo-1116/org/apache/accumulo/accumulo/2.1.4/accumulo-2.1.4-bin.tar.gz > > > > Append ".asc" to download the cryptographic signature for a given artifact. > > (You can also append ".sha1" or ".md5" instead in order to verify the > > checksums > > generated by Maven to verify the integrity of the Nexus repository > > staging area.) > > > > Signing keys are available at https://www.apache.org/dist/accumulo/KEYS > > (Expected fingerprint: 8CC4F8A2B29C2B040F2B835D6F0CDAE700B6899D) > > > > In addition to the tarballs and their signatures, the following checksum > > files will be added to the dist/release SVN area after release: > > accumulo-2.1.4-src.tar.gz.sha512 will contain: > > SHA512 (accumulo-2.1.4-src.tar.gz) = > > > > 2cb1c94a31ae114a571f4562ea0a4fb0b35859ead629066b9f95eb62ec2463b2893ac378997855fe119d075fa2bd9713a42a0edbd3ef5c392e15fcf57bbf9f6c > > accumulo-2.1.4-bin.tar.gz.sha512 will contain: > > SHA512 (accumulo-2.1.4-bin.tar.gz) = > > > > a752ff92e711ef09e07d34d4f0e18c51de67ef0b54d39470eda31dea4c2b40769efe35ef3a64b1706264493dfcacbfc0dfd2708bd54df1e9df110ad8d403c2c6 > > > > Release notes (in progress) can be found at: > > https://accumulo.apache.org/release/accumulo-2.1.4 > > > > Release testing instructions: > > https://accumulo.apache.org/contributor/verifying-release > > > > Please vote one of: > > [ ] +1 - I have verified and accept... > > [ ] +0 - I have reservations, but not strong enough to vote against... > > [ ] -1 - Because..., I do not accept... > > ... these artifacts as the 2.1.4 release of Apache Accumulo. > > > > This vote will remain open until at least Sat Aug 16 02:00:00 AM UTC 2025. > > (Fri Aug 15 10:00:00 PM EDT 2025 / Fri Aug 15 07:00:00 PM PDT 2025) > > Voting can continue after this deadline until the release manager > > sends an email ending the vote. > > > > Thanks! > > > > P.S. Hint: download the whole staging repo with > > wget -erobots=off -r -l inf -np -nH \ > > > > https://repository.apache.org/content/repositories/orgapacheaccumulo-1116/ > > # note the trailing slash is needed > >
