+1 (binding) Verified the full RC folder for 2026-07-22 (34 providers + source release):
* Folder complete: 34 providers x (whl + sdist + .asc + .sha512) plus the source tarball trio = 207 files, 69 .sha512 / 69 .asc. No leftover double-extension artifacts this time. * Checksums: 69/69 SHA512 OK. * Signatures: 69/69 good signatures, all from your key DAF549DB1C0B31D8BCE167506834BFD7959CB6D5 (Shahar Epstein <[email protected]>), present in the release KEYS file and not expired. * Reproducible builds: 69/69 byte-identical. Rebuilt all 34 providers (both formats) and the source tarball from tag providers/2026-07-22 (commit 8e63d9bbc77ed0b1fa1e68ca4ab8d5c9cee6a8cf, which is on main via "Prepare providers release 2026-07-22" #70256), and every artifact matched the RC bit for bit. * Licences: Apache RAT 0.18 over the source release reports 0 unapproved and 0 unknown across 9825 files, all Apache License 2.0. * No binaries in the source release (no .jar/.exe/.so/.dylib/.whl/.zip). The checks also cover clickhousedb 1.0.1, common.ai 0.7.0 and openlineage 2.20.0 release candidates, though they are excluded. Thanks Shahar! Jarek --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
