Hello Everyone, Here are some of the commands I use to check the releases. I don’t use a script as the outputs often require to be checked individually. I hope this may help those of you who are not yet familiar with the process.
Notice that mvn apache-rat:check should work for a freshly decompressed archive, but may fail after building from source or after generating the report due to the creation of additional files. Best, Bertil — Source release — # Download the source release wget https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.1-rc4/apache-baremaps-0.8.1-rc4-incubating-src.tar.gz wget https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.1-rc4/apache-baremaps-0.8.1-rc4-incubating-src.tar.gz.asc wget https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.1-rc4/apache-baremaps-0.8.1-rc4-incubating-src.tar.gz.sha512 # Verify the signature of the source release gpg --verify apache-baremaps-0.8.1-rc4-incubating-src.tar.gz.asc # Verify the checksum of the source release shasum -a 512 -c apache-baremaps-0.8.1-rc4-incubating-src.tar.gz.sha512 # Unpack the source release and navigate to the source directory tar -xvf apache-baremaps-0.8.1-rc4-incubating-src.tar.gz cd apache-baremaps-0.8.1-incubating-src # Check the license headers mvn apache-rat:check # Generate the license headers report mvn apache-rat:rat less target/rat.txt # Build the project from source mvn clean package — Binary release — # Download the binary release wget https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.1-rc4/apache-baremaps-0.8.1-rc4-incubating-bin.tar.gz wget https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.1-rc4/apache-baremaps-0.8.1-rc4-incubating-bin.tar.gz.asc wget https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.1-rc4/apache-baremaps-0.8.1-rc4-incubating-bin.tar.gz.sha512 # Verify the signature of the binary release gpg --verify apache-baremaps-0.8.1-rc4-incubating-bin.tar.gz.asc # Verify the checksum of the binary release shasum -a 512 -c apache-baremaps-0.8.1-rc4-incubating-bin.tar.gz.sha512 # Unpack the binary release and navigate to the binary directory tar -xvf apache-baremaps-0.8.1-rc4-incubating-bin.tar.gz cd apache-baremaps-0.8.1-incubating-bin # Check if the binary release works ./bin/baremaps --version > On 6 Dec 2024, at 15:58, Bertil Chapuis <bchap...@gmail.com> wrote: > > Hello Everyone, > > This release candidate addresses several licensing issues identified on the > incubator mailing list. I’ve done my best to harden everything, and I’d like > to thank you in advance for your help in assessing this release candidate. > Let’s think of this as the liveness property of Baremaps: something good > eventually happens 😉 > > You can read the release notes here: > https://github.com/apache/incubator-baremaps/releases/tag/v0.8.1-rc4 > > The commit to be voted upon: > https://github.com/apache/incubator-baremaps/tree/v0.8.1-rc4 > > Its tag is v0.8.1-rc4 and its hash is > e6a24651ab7e347f336c7a8544984e998dfc0dd9. > > The artifacts to be voted on are located here: > https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.1-rc4/ > > The hashes of the artifacts are as follows: > 3519d3587d31923e72c374a3ab6f5684d1c3e035abf6eb20ba4c5d8e377bb749fe4f2d4c74168d931d6263b851bdb9fefa499a5f544c0f46c9a539218c9a7865 > ./apache-baremaps-0.8.1-rc4-incubating-src.tar.gz > 6c5b275864c58fa60fc4d13da07434ad9f411abfb879017b940832af9c37a213ab8b8e9fa435ce3dcba52b83a79978d65a01f1d0b3f41875ebd8509c1fb721f9 > ./apache-baremaps-0.8.1-rc4-incubating-bin.tar.gz > > Release candidate artifacts are signed automatically with the key > (C81AC42AF2A7CACDF4C8A4F6936E280DF16599CB) created by the INFRA team: > https://downloads.apache.org/incubator/baremaps/KEYS > > The README file for the src distribution contains instructions for building > and testing the release. > > Please vote on releasing this package as Apache Baremaps 0.8.1 (incubating). > > The vote is open for 72 hours but can be open longer if the required number > of votes is not obtained. It passes if a majority of at least three +1 PPMC > votes are cast. > [ ] +1 Release this package as Apache Baremaps 0.8.1 (incubating) > [ ] 0 I don't feel strongly about it, but I'm okay with the release > [ ] -1 Do not release this package because... > > Here is my vote. > > +1 (non-binding): > - checked the presence of the LICENSE, NOTICE, and DISCLAIMER files in src > and bin; > - checked the presence of the licenses and notices directories in src and bin; > - checked the output of the rat report in the source release; > - built from source; > - executed the binary distribution; > - checked the checksums; > - checked the signatures. > > Best regards, > > Bertil --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@baremaps.apache.org For additional commands, e-mail: dev-h...@baremaps.apache.org
