+1
Checked the following:
- Signature and Hash.
- Tags and Links.
- LICENSE and NOTICE.
- No unexpected binary files.
- Build and regression suite from the release tarball.
Details:
Signature and hash: the SHA512 in the .sha512 file matches the tarball. The
detached .asc verifies as a good signature from John's Apache key, imported
from https://downloads.apache.org/age/KEYS. Primary key fingerprint
4293 0603 8E35 AC05 4DBB 4B58 26B6 CD9D CD5B 0045
which matches the fingerprint given in this thread.
Tags and links: the tag PG18/v1.8.0-rc0 resolves to commit
e43dc1a12b78fba4acef9835b2b10379b8d243b4, matching the hash given above.
All release files at dist.apache.org/repos/dist/dev/age/PG18/1.8.0.rc0/
downloaded and used for everything below. The tarball is byte-identical to
the tag: 381 files on each side, no additions, no omissions. age.control and
META.json both declare 1.8.0.
LICENSE and NOTICE: both present at the top level. LICENSE is Apache 2.0 with
the appended PostgreSQL / UC Regents notice, consistent with the
PostgreSQL-derived files in src/. NOTICE credits the ASF and the original
Bitnine donation.
No unexpected binary files: no object files, shared libraries, archives, or
jars anywhere in the tarball. The only non-text files are the documentation
images under img/. drivers/jdbc ships the gradlew script with no accompanying
gradle-wrapper.jar.
Build and regression: builds clean from the release tarball against
PostgreSQL 18.4 (Debian) with no compiler warnings, and 42 of 42 regression
tests pass against the extension built from these artifacts. I excluded
age_upgrade, which needs writes into the installed sharedir.
Two non-blocking observations, both fine to fix in master after the release:
- NOTICE still reads "Copyright 2023". It is unchanged since 1.7.0, so
this is not a regression in this RC, but the year is stale.
- regress/sql/agehash.sql has no ASF license header. That file is mine,
from #2421, and I will fix it in master.
Greg Felice
