Hi Bertil, I'll be making some changes over the next couple of days, mainly related to LICENSE issues.
If it's not urgent, I'd prefer to delay the release of this version. btw, is there anyone else interested in taking on the next version release? On Wed, Jan 15, 2025 at 8:04 PM Bertil Chapuis <bchap...@gmail.com> wrote: > Hello Everyone, > > Following the issue with the copyright identified in the NOTICE file, here > is a second release candidate. > > You can read the release notes here: > https://github.com/apache/incubator-baremaps/releases/tag/v0.8.2-rc2 > > The commit to be voted upon: > https://github.com/apache/incubator-baremaps/tree/v0.8.2-rc2 > > Its tag is v0.8.2-rc2 and its hash is > 905719c6ec705de2abbc15a0e57e206255c79373. > > The artifacts to be voted on are located here: > https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.2-rc2/ > > The hashes of the artifacts are as follows: > ce8ad63320b1d3d032229ad0e3c56181b38136872dbe81c437dac861421a0ee8207f5eb42eaec2e7478c258b1a1343d13c76c16b545d3e5755752a71b0e9aaf2 > ./apache-baremaps-0.8.2-rc2-incubating-src.tar.gz > 5f691e5617ad45aee58e79f6695293bf84241018a379ad68c4f30eb654c43612c51107a831fb799e3cc990c02e8f324ce6a53f98d14d98feccf77b6ecca9975a > ./apache-baremaps-0.8.2-rc2-incubating-bin.tar.gz > > Release candidate artifacts are signed automatically with the key created > by the INFRA team (C81AC42AF2A7CACDF4C8A4F6936E280DF16599CB): > https://downloads.apache.org/incubator/baremaps/KEYS > > The maven staging repository for this release is: > https://repository.apache.org/content/repositories/orgapachebaremaps-1010 > > The maven artifacts are signed with my PGP key > (16D7A0B27D5ADD52BD57932971751399FB39CB84): > https://downloads.apache.org/incubator/baremaps/KEYS > > The README file for the src distribution contains instructions for > building and testing the release. > > Please vote on releasing this package as Apache Baremaps 0.8.2 > (incubating). > > The vote is open for 72 hours but can be open longer if the required > number of votes is not obtained. It passes if a majority of at least three > +1 PPMC votes are cast. > [ ] +1 Release this package as Apache Baremaps 0.8.2 (incubating) > [ ] 0 I don't feel strongly about it, but I'm okay with the release > [ ] -1 Do not release this package because... > > Here is my vote. > +1 (non-binding): > - checked the presence of the LICENSE, NOTICE, and DISCLAIMER files in src > and bin; > - checked the copyright in the NOTICE files included in the artifacts of > the release. > - checked the presence of the licenses and notices directories in src and > bin; > - checked the output of the rat report in the source release; > - built and executed from source; > - executed the binary distribution; > - checked the checksums; > - checked the signatures; > > I added some of the commands I used to verify this release below. > > Best regards, > > Bertil > > ——— > > # Download the source release > wget > https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.2-rc2/apache-baremaps-0.8.2-rc2-incubating-src.tar.gz > wget > https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.2-rc2/apache-baremaps-0.8.2-rc2-incubating-src.tar.gz.asc > wget > https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.2-rc2/apache-baremaps-0.8.2-rc2-incubating-src.tar.gz.sha512 > > # Verify the signature of the source release > gpg --verify apache-baremaps-0.8.2-rc2-incubating-src.tar.gz.asc > > # Verify the checksum of the source release > shasum -a 512 -c apache-baremaps-0.8.2-rc2-incubating-src.tar.gz.sha512 > > # Unpack the source release and navigate to the source directory > tar -xvf apache-baremaps-0.8.2-rc2-incubating-src.tar.gz > cd apache-baremaps-0.8.2-incubating-src > > # Check the license headers > mvn apache-rat:check > > # Generate the license headers report > mvn apache-rat:rat > less target/rat.txt > > # Build the project from source > mvn clean package > > # Download the binary release > wget > https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.2-rc2/apache-baremaps-0.8.2-rc2-incubating-bin.tar.gz > wget > https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.2-rc2/apache-baremaps-0.8.2-rc2-incubating-bin.tar.gz.asc > wget > https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.8.2-rc2/apache-baremaps-0.8.2-rc2-incubating-bin.tar.gz.sha512 > > # Verify the signature of the binary release > gpg --verify apache-baremaps-0.8.2-rc2-incubating-bin.tar.gz.asc > > # Verify the checksum of the binary release > shasum -a 512 -c apache-baremaps-0.8.2-rc2-incubating-bin.tar.gz.sha512 > > # Unpack the binary release and navigate to the binary directory > tar -xvf apache-baremaps-0.8.2-rc2-incubating-bin.tar.gz > cd apache-baremaps-0.8.2-incubating-bin > > # Check if the binary release works > ./bin/baremaps --version > > # Download a jar from the nexus repository > wget > https://repository.apache.org/content/repositories/orgapachebaremaps-1010/org/apache/baremaps/baremaps-data/0.8.2/baremaps-data-0.8.2.jar > wget > https://repository.apache.org/content/repositories/orgapachebaremaps-1010/org/apache/baremaps/baremaps-data/0.8.2/baremaps-data-0.8.2.jar.asc > wget > https://repository.apache.org/content/repositories/orgapachebaremaps-1010/org/apache/baremaps/baremaps-data/0.8.2/baremaps-data-0.8.2.jar.md5 > wget > https://repository.apache.org/content/repositories/orgapachebaremaps-1010/org/apache/baremaps/baremaps-data/0.8.2/baremaps-data-0.8.2.jar.sha1 > > # Verify the signature of the jar > gpg --verify baremaps-data-0.8.2.jar.asc baremaps-data-0.8.2.jar > > # Verify the checksum of the jar > md5sum baremaps-data-0.8.2.jar > cat baremaps-data-0.8.2.jar.md5 > shasum baremaps-data-0.8.2.jar > cat baremaps-data-0.8.2.jar.sha1 > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@baremaps.apache.org > For additional commands, e-mail: dev-h...@baremaps.apache.org > > -- Best wishes！ CalvinKirs
