Hi, Oscar, That’s great! Thank you for adding those files. It really helps us to improve our security process.
Regards, Jun SLB-Private From: Oscar Westra van Holthe - Kind <[email protected]> Sent: Sunday, April 12, 2026 10:19 PM To: [email protected] Cc: Johan Gerhard Berge <[email protected]>; Ole Stava <[email protected]>; Jun Li <[email protected]> Subject: [Ext] Re: [REPORT] Missing .asc and .sha512 files for Avro 1.12.1 release Hi all, Sorry to reply so late. . . I've been busy with some private stuff. On Tue, 24 Mar 2026 at 19: 25, Jun Li via dev <dev@ avro. apache. org> wrote: Hi Avro team, We noticed that the 1. 12. 1 release on the official download site is missing Hi all, Sorry to reply so late... I've been busy with some private stuff. On Tue, 24 Mar 2026 at 19:25, Jun Li via dev <[email protected]<mailto:[email protected]>> wrote: Hi Avro team, We noticed that the 1.12.1 release on the official download site is missing GPG signature (.asc) and checksum (.sha512) files for all artifacts. [...] Per the Apache Release Policy (https://www.apache.org/legal/release-policy.html<https://urldefense.com/v3/__https:/www.apache.org/legal/release-policy.html__;!!Kjv0uj3L4nM6H-I!n1YQ8INayaUpgMRTnQr5Wjrg3PQaskYwTgLIvdMhTm4HNGGlwwMdfGio-84u3YzJVEVWQllqh0gP$>), all official releases must be accompanied by cryptographic signatures. Could the release manager upload the missing signature and checksum files? Oops... the files were indeed missing. I've uploaded them. Thank you for bringing this up! Kind regards, Oscar -- ✉️ Oscar Westra van Holthe - Kind <[email protected]<mailto:[email protected]>> 🌐 https://github.com/opwvhk/<https://urldefense.com/v3/__https:/github.com/opwvhk/__;!!Kjv0uj3L4nM6H-I!n1YQ8INayaUpgMRTnQr5Wjrg3PQaskYwTgLIvdMhTm4HNGGlwwMdfGio-84u3YzJVEVWQmF2MYOo$>
