+1 (binding) I verified all the signatures and hashes, as well as one of the Python wheels, and that we're not shipping gradle[w] but otherwise the content matches the git repo (except a SNAPSHOT vs version change to the source).
The changes [1] look minimal compared to RC1, so most of the verification there should apply as well. [1] https://github.com/apache/beam/compare/v2.7.0-RC1...v2.7.0-RC2 On Tue, Sep 25, 2018 at 4:59 AM Charles Chen <[email protected]> wrote: > Hi everyone, > > Please review and vote on the release candidate #2 for the version 2.7.0, > as follows: > [ ] +1, Approve the release > [ ] -1, Do not approve the release (please provide specific comments) > > The complete staging area is available for your review, which includes: > * JIRA release notes [1], > * the official Apache source release to be deployed to dist.apache.org > [2], which is signed with the key with fingerprint 45C60AAAD115F560 [3], > * all artifacts to be deployed to the Maven Central Repository [4], > * source code tag "v2.7.0-RC2" [5], > * website pull request listing the release and publishing the API > reference manual [6]. > * Java artifacts were built with Gradle 4.8 and OpenJDK > 1.8.0_181-8u181-b13-1~deb9u1. > * Python artifacts are deployed along with the source release to the > dist.apache.org [2]. > > The vote will be open for at least 72 hours. It is adopted by majority > approval, with at least 3 PMC affirmative votes. > > Thanks, > Charles > > [1] > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12319527&version=12343654 > [2] https://dist.apache.org/repos/dist/dev/beam/2.7.0 > [3] https://dist.apache.org/repos/dist/dev/beam/KEYS > [4] https://repository.apache.org/content/repositories/orgapachebeam-1047/ > [5] https://github.com/apache/beam/tree/v2.7.0-RC2 > [6] https://github.com/apache/beam-site/pull/549 >
