Le jeu. 20 août 2020 à 23:15, sebb <seb...@gmail.com> a écrit :
>
> On Thu, 20 Aug 2020 at 21:54, Gilles Sadowski <gillese...@gmail.com> wrote:
> >
> > Le jeu. 20 août 2020 à 22:00, sebb <seb...@gmail.com> a écrit :
> > >
> > > AFAICT the release artifacts have only sha512 files.
> > >
> > > However the Maven jars have md5 and sha1; I don't think there's much
> > > we can do about that.
> > > This is due to Nexus and/or Maven.
> > >
> > > The hash types look OK to me.
> > >
> > > Anyway the release distribution page [1] does not relate to Maven
> > > releases AFAIK.
> >
> > OK.
> > Then, I'd suggest that we don't bloat the vote message with
> > files that don't matter.
>
> What files are you referring to?

The list that follows the line "These are the Maven artifacts and their hashes:"

As pointed out several times, we should rather have a pointer to a
script that would
 * download the files
 * download a text file in the suitable format for e.g.
    https://manpages.debian.org/jessie/coreutils/sha512sum.1.en.html

I've also wondered why this would not be done just once, by the RM.

Gilles

> > >
> > > On Thu, 20 Aug 2020 at 18:39, Gary Gregory <garydgreg...@gmail.com> wrote:
> > > >
> > > > On Thu, Aug 20, 2020 at 1:24 PM Gilles Sadowski <gillese...@gmail.com>
> > > > wrote:
> > > >
> > > > > Hi Thomas.
> > > > >
> > > > > Le jeu. 20 août 2020 à 09:14, Thomas Vandahl <t...@apache.org> a 
> > > > > écrit :
> > > > > >
> > > > > > Could I please ask for one more PMC vote?
> > > > >
> > > > > IIUC[1], this release should not ship with SHA1 or MD5 files.
> > > > >
> > > >
> > > > Correct. ONLY SHA-256 or 512.
> > > >
> > > > Gary
> > > >
> > > >
> > > > > Regards,
> > > > > Gilles
> > > > >
> > > > > [1] https://infra.apache.org/release-distribution.html#sigs-and-sums
> > > > >
> > > > > >
> > > > > > TIA
> > > > > > Bye, Thomas
> > > > > >
> > > > > > On 17.08.20 08:29, Thomas Vandahl wrote:
> > > > > > > This has been a major overhaul of JCS with many adjustments for 
> > > > > > > JDK 8+,
> > > > > > > better concurrency and logging. Finally, I would like to
> > > > > > > release Apache Commons JCS 3.0.
> > > > > > [...]
> > > > > > > Please review the release candidate and vote.
> > > > > > > This vote will close no sooner that 72 hours from now.
> > > > > > >
> > > > > > >   [ ] +1 Release these artifacts
> > > > > > >   [ ] +0 OK, but...
> > > > > > >   [ ] -0 OK, but really should fix...
> > > > > > >   [ ] -1 I oppose this release because...
> > > > > > >
> > > > > > > Thank you,
> > > > > > >
> > > > > > > Bye, Thomas
> > > > > > > Release Manager (using key 88817402)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org

Reply via email to