+1 (binding) This clears my -1 on RC2 - thanks for turning it around so quickly, TP.
The source release now excludes the binaries: gradle-wrapper.jar, gradlew and gradlew.bat are all gone from the tarball (they stay in the git repo, which is fine). Only the text gradle/wrapper/gradle-wrapper.properties remains, and it now carries the correct gradle-8.14.4-bin.zip SHA-256 (f1771298a70f6db5a29daf62378c4e18a17fc33c9ba6b14362e0cdf40610380d, the value Shahar pointed out) with validateDistributionUrl=true. The README's "Verifying a release" section documents regenerating the wrapper with --gradle-distribution-sha256-sum plus the checksum/signature/no-binary/tag-diff steps, which is exactly what we need for a source-only release. What I checked: - SHA-512: OK - GPG signature: good, your key (BEFDEBC05235AB910937E22C2378998B0470C0C1, in KEYS) - Source tarball matches tag java-sdk/1.0.0-beta1-rc3 (commit c50eaa4); the only files dropped vs the tag are gradle-wrapper.jar, gradlew and gradlew.bat - No binaries in the source package - LICENSE and NOTICE present in the source root I also checked the staged convenience jars on Nexus (orgapacheairflow-1009): all seven (airflow-sdk, -processor, -jpl, -jul, -log4j2, -slf4j, -gradle-plugin) now carry META-INF/LICENSE (full AL2.0) and META-INF/NOTICE, so the packaging point from RC2 is addressed as well - even though, as I noted, those convenience binaries aren't formally part of what we vote on. Thank you for being so responsive TP ! You rock! Thanks again, J. --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
