+1 jhyde (binding, member IPMC) Downloaded; checked signatures and digests; checked NOTICE, LICENSE, README, DISCLAIMER; compiled and ran tests on Ubuntu 24.04.1, x86_64, JDK 21, Maven 3.8.1. Ran apache-rat.
Julian > On Dec 11, 2024, at 12:26 AM, Leo <leocser...@gmail.com> wrote: > > Hello, > > Ran checks on licenses, built from sources, checked binary. > > Here is my vote: > > +1 (non binding) > > Best, > Leonard > >> On 6 Dec 2024, at 22:43, Bertil Chapuis <bchap...@gmail.com> wrote: >> >> Hello Everyone, >> >> Here are some of the commands I use to check the releases. I don’t use a >> script as the outputs often require to be checked individually. I hope this >> may help those of you who are not yet familiar with the process. >> >> Notice that mvn apache-rat:check should work for a freshly decompressed >> archive, but may fail after building from source or after generating the >> report due to the creation of additional files. >> >> Best, >> >> Bertil >> >> >> >> — Source release — >> >> # Download the source release >> wget >> https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.1-rc4/apache-baremaps-0.8.1-rc4-incubating-src.tar.gz >> wget >> https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.1-rc4/apache-baremaps-0.8.1-rc4-incubating-src.tar.gz.asc >> wget >> https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.1-rc4/apache-baremaps-0.8.1-rc4-incubating-src.tar.gz.sha512 >> >> # Verify the signature of the source release >> gpg --verify apache-baremaps-0.8.1-rc4-incubating-src.tar.gz.asc >> >> # Verify the checksum of the source release >> shasum -a 512 -c apache-baremaps-0.8.1-rc4-incubating-src.tar.gz.sha512 >> >> # Unpack the source release and navigate to the source directory >> tar -xvf apache-baremaps-0.8.1-rc4-incubating-src.tar.gz >> cd apache-baremaps-0.8.1-incubating-src >> >> # Check the license headers >> mvn apache-rat:check >> >> # Generate the license headers report >> mvn apache-rat:rat >> less target/rat.txt >> >> # Build the project from source >> mvn clean package >> >> >> >> — Binary release — >> >> # Download the binary release >> wget >> https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.1-rc4/apache-baremaps-0.8.1-rc4-incubating-bin.tar.gz >> wget >> https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.1-rc4/apache-baremaps-0.8.1-rc4-incubating-bin.tar.gz.asc >> wget >> https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.1-rc4/apache-baremaps-0.8.1-rc4-incubating-bin.tar.gz.sha512 >> >> # Verify the signature of the binary release >> gpg --verify apache-baremaps-0.8.1-rc4-incubating-bin.tar.gz.asc >> >> # Verify the checksum of the binary release >> shasum -a 512 -c apache-baremaps-0.8.1-rc4-incubating-bin.tar.gz.sha512 >> >> # Unpack the binary release and navigate to the binary directory >> tar -xvf apache-baremaps-0.8.1-rc4-incubating-bin.tar.gz >> cd apache-baremaps-0.8.1-incubating-bin >> >> # Check if the binary release works >> ./bin/baremaps --version >> >> >> >> >>> On 6 Dec 2024, at 15:58, Bertil Chapuis <bchap...@gmail.com> wrote: >>> >>> Hello Everyone, >>> >>> This release candidate addresses several licensing issues identified on the >>> incubator mailing list. I’ve done my best to harden everything, and I’d >>> like to thank you in advance for your help in assessing this release >>> candidate. Let’s think of this as the liveness property of Baremaps: >>> something good eventually happens 😉 >>> >>> You can read the release notes here: >>> https://github.com/apache/incubator-baremaps/releases/tag/v0.8.1-rc4 >>> >>> The commit to be voted upon: >>> https://github.com/apache/incubator-baremaps/tree/v0.8.1-rc4 >>> >>> Its tag is v0.8.1-rc4 and its hash is >>> e6a24651ab7e347f336c7a8544984e998dfc0dd9. >>> >>> The artifacts to be voted on are located here: >>> https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.1-rc4/ >>> >>> The hashes of the artifacts are as follows: >>> 3519d3587d31923e72c374a3ab6f5684d1c3e035abf6eb20ba4c5d8e377bb749fe4f2d4c74168d931d6263b851bdb9fefa499a5f544c0f46c9a539218c9a7865 >>> ./apache-baremaps-0.8.1-rc4-incubating-src.tar.gz >>> 6c5b275864c58fa60fc4d13da07434ad9f411abfb879017b940832af9c37a213ab8b8e9fa435ce3dcba52b83a79978d65a01f1d0b3f41875ebd8509c1fb721f9 >>> ./apache-baremaps-0.8.1-rc4-incubating-bin.tar.gz >>> >>> Release candidate artifacts are signed automatically with the key >>> (C81AC42AF2A7CACDF4C8A4F6936E280DF16599CB) created by the INFRA team: >>> https://downloads.apache.org/incubator/baremaps/KEYS >>> >>> The README file for the src distribution contains instructions for building >>> and testing the release. >>> >>> Please vote on releasing this package as Apache Baremaps 0.8.1 (incubating). >>> >>> The vote is open for 72 hours but can be open longer if the required number >>> of votes is not obtained. It passes if a majority of at least three +1 PPMC >>> votes are cast. >>> [ ] +1 Release this package as Apache Baremaps 0.8.1 (incubating) >>> [ ] 0 I don't feel strongly about it, but I'm okay with the release >>> [ ] -1 Do not release this package because... >>> >>> Here is my vote. >>> >>> +1 (non-binding): >>> - checked the presence of the LICENSE, NOTICE, and DISCLAIMER files in src >>> and bin; >>> - checked the presence of the licenses and notices directories in src and >>> bin; >>> - checked the output of the rat report in the source release; >>> - built from source; >>> - executed the binary distribution; >>> - checked the checksums; >>> - checked the signatures. >>> >>> Best regards, >>> >>> Bertil >> >> >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: dev-unsubscr...@baremaps.apache.org >> For additional commands, e-mail: dev-h...@baremaps.apache.org >> > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@baremaps.apache.org > For additional commands, e-mail: dev-h...@baremaps.apache.org > --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@baremaps.apache.org For additional commands, e-mail: dev-h...@baremaps.apache.org
