Thanks for reporting this. I obviously don’t see this warning ;) Could this be related to the fact that the KEYS file need to be imported or trusted? wget https://downloads.apache.org/incubator/baremaps/KEYS gpg --import KEYS
My public key is also published here: https://keys.openpgp.org/search?q=bchapuis%40gmail.com > On 29 Aug 2023, at 16:39, Josh Fischer <j...@joshfischer.io> wrote: > > Right now I’m 0. > > I’ve not run across this before, I’m not sure if it’s an issue for the > release. See gpg output below about the key not being certified. This is > the reason my vote is 0 at the moment. > gpg --verify $FILE.asc $FILE > gpg: Signature made Thu Aug 24 07:11:17 2023 CDT > gpg: using RSA key 16D7A0B27D5ADD52BD57932971751399FB39CB84 > gpg: Good signature from "Bertil Chapuis <bchap...@gmail.com>" [unknown] > gpg: WARNING: This key is not certified with a trusted signature! > > I checked: > - Downloaded; checked hashes/signatures; checked LICENSE, NOTICE, > DISCLAIMER-WIP; compiled and ran tests on OSX, OpenJDK 17, Maven 3.8.4. > - Rat check showed 1441 unapproved licenses. However, since we are a WIP and > I think this issue is known, so we are good. > - I tried to run the example from the tar.gz binary, but the website seems to > refer to the repo - not a release. As an example, the openStreet Map example > wouldn’t work with one of our binary releases. This isn’t a blocker by any > means, just a developer experience idea that I thought about while checking > the release. > > $ cd examples/openstreetmap > $ baremaps workflow execute --file workflow.json > > Because the “examples” folder wasn’t in the binary release I wasn’t sure how > to run the example. > > - Josh > >> On Aug 28, 2023, at 3:20 PM, Bertil Chapuis <bchap...@gmail.com> wrote: >> >> Thank you Josh and Julian. There is no hurry, especially if we can increase >> the duration of the vote. >> >> As we all have busy schedule, I will probably extend future release votes to >> one week in the future. >> >> Best, >> >> Bertil >> >>> On 28 Aug 2023, at 19:07, Julian Hyde <jhyde.apa...@gmail.com> wrote: >>> >>> What Josh said. I’ll review & vote today. Apologies. >>> >>>> On Aug 28, 2023, at 7:42 AM, Josh Fischer <j...@joshfischer.io> wrote: >>>> >>>> I apologize for my absence. I will spend some time looking at it in the >>>> next 24 hours. >>>> >>>> This is one of the fun and challenging parts of working through the >>>> incubator. I’ve had votes go over two weeks before. Our best bet is to >>>> get as many binding (preferably 3) votes on the dev@baremaps list. It’s >>>> often harder to get votes on general@a.o <mailto:general@a.o>. >>>> >>>> >>>> Let’s wait a few more days to get binding votes. Open-source moves at the >>>> speed of open-source, fun! >>>> >>>>> On Aug 28, 2023, at 9:10 AM, Bertil Chapuis <bchap...@gmail.com> wrote: >>>>> >>>>> Hello Everyone, >>>>> >>>>> We don’t have enough vote for publishing our release. Can we extend the >>>>> deadline or should we start a new vote? >>>>> >>>>> I see that some projects, such as Apache Pekko, ask the incubator >>>>> mailing-list to vote for their releases. Should we try to do the same? >>>>> >>>>> Best regards, >>>>> >>>>> Bertil >>>>> >>>>> >>>>>> On 24 Aug 2023, at 14:52, Bertil Chapuis <bchap...@gmail.com> wrote: >>>>>> >>>>>> Hello Everyone, >>>>>> >>>>>> Following our online release party (thank you Leonard and Perdjesk), we >>>>>> have created a build for Apache Baremaps (incubating) 0.7.2, release >>>>>> candidate 1. >>>>>> >>>>>> Thanks to everyone who has contributed to this release. >>>>>> >>>>>> You can read the release notes here: >>>>>> https://github.com/apache/incubator-baremaps/releases/tag/v0.7.2-rc1 >>>>>> >>>>>> The commit to be voted upon: >>>>>> https://github.com/apache/incubator-baremaps/tree/v0.7.2-rc1 >>>>>> >>>>>> Its hash is e917d5b02fdb64c3f715afd449bb1fe9ca5c2f58. >>>>>> >>>>>> Its tag is v0.7.2-rc1. >>>>>> >>>>>> The artifacts to be voted on are located here: >>>>>> https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.7.2-rc1/ >>>>>> >>>>>> The hashes of the artifacts are as follows: >>>>>> d910b50ebed4200d0ef6f0c1ee3e4db0cd95ea005fe54fca66dfc4ec4dca73e96edc8913654c85c73539d6a9d27481157fea9f456a9f3aa451c178a811a89ea0 >>>>>> ./apache-baremaps-0.7.2-incubating-src.tar.gz >>>>>> fda00056b9785bbbb7f966e92cf7e118071f5b6d44f9652176a4626cec38c5b0738933b24e23efef423eafba2111bc6a22e6f00a67fda2f10b0011f9c22f3208 >>>>>> ./apache-baremaps-0.7.2-incubating-bin.tar.gz >>>>>> >>>>>> Release artifacts are signed with the following key: >>>>>> http://people.apache.org/keys/committer/bchapuis.asc >>>>>> https://downloads.apache.org/incubator/baremaps/KEYS >>>>>> >>>>>> The README file for the src distribution contains instructions for >>>>>> building and testing the release. >>>>>> >>>>>> Please vote on releasing this package as Apache Baremaps 0.7.2. >>>>>> >>>>>> The vote is open for the next 72 hours and passes if a majority of at >>>>>> least three +1 PMC votes are cast. >>>>>> >>>>>> [ ] +1 Release this package as Apache Baremaps <version> >>>>>> [ ] 0 I don't feel strongly about it, but I'm okay with the release >>>>>> [ ] -1 Do not release this package because... >>>>>> >>>>>> Here is my vote: >>>>>> >>>>>> +1 (binding): I checked the signatures and the checksums; I built the >>>>>> project from its sources; and checked the binary distribution. >>>>>> >>>>>> Best regards, >>>>>> >>>>>> Bertil Chapuis >>>>> >>>> >>> >>> >>> --------------------------------------------------------------------- >>> To unsubscribe, e-mail: dev-unsubscr...@baremaps.apache.org >>> For additional commands, e-mail: dev-h...@baremaps.apache.org >>> >> >
signature.asc
Description: Message signed with OpenPGP
