On Fri, 4 Sep 2020 at 00:06, Gary Gregory <garydgreg...@gmail.com> wrote:
>
> On Thu, Sep 3, 2020 at 11:43 AM Mark Thomas <ma...@apache.org> wrote:
>
> > On 03/09/2020 15:37, Gary Gregory wrote:
> > > On Thu, Sep 3, 2020 at 10:17 AM Mark Thomas <ma...@apache.org> wrote:
> > >
> > >> On 03/09/2020 14:06, Gary Gregory wrote:
> > >>> Mark,
> > >>>
> > >>> The vote email must contain SHA256 or 512 hashes for the file bin and
> > gz
> > >>> files in https://dist.apache.org/repos/dist/dev/commons/daemon/
> > >>>
> > >>> Per https://commons.apache.org/releases/prepare.html
> > >>>
> > >>> (There is no need to hash the files twice on
> > >>> https://dist.apache.org/repos/dist/dev/commons/daemon/)
> > >>
> > >> See previous Commons Daemon release vote threads for why I won't be
> > >> doing that.
> > >>
> > >
> > > Based on the search:
> > >
> > >
> > https://www.mail-archive.com/search?l=dev%40commons.apache.org&q=%5BVOTE%5D+Release+Apache+Commons+Daemon+&a=1
> > >
> > > I see that the 1.1.0 RC provided SHA1's:
> > >
> > > https://www.mail-archive.com/dev@commons.apache.org/msg60676.html
> > >
> > > But I don't see 1.2.x VOTE threads so it must have happened with
> > different
> > > worlds in the subject.
> >
> > http://markmail.org/message/agt3f3etzdyt7qjv
> > and
> > http://commons.markmail.org/thread/6ivhavlovopqrt5z
> > which expands on the topic of traceability.
> >
>
> I've always seen as I've learnt it from Sebb: Hashes in the VOTE email
> provides traceability *from *the email *to *what we are voting on.
>
> Sebb?

Yes, I think it is vital that one can tie the vote email to the artifacts.
That is easy to do if the email contains the hashes.

> Gary
>
>
> > Mark
> >
> > >
> > > Gary
> > >
> > >
> > >> Mark
> > >>
> > >>
> > >>>
> > >>> Thank you,
> > >>> Gary
> > >>>
> > >>> On Tue, Sep 1, 2020 at 2:25 PM Mark Thomas <ma...@apache.org> wrote:
> > >>>
> > >>>> Apologies for the slight delay between the tag and the vote. There was
> > >>>> an issue with the code signing service we use to sign the Windows
> > >> binaries.
> > >>>>
> > >>>> It has been almost a year since the last Commons Daemon release.
> > Notable
> > >>>> changes since 1.2.2 include:
> > >>>> - Improved debug logging for error conditions
> > >>>> - Added support for Java's Native Memory Tracing
> > >>>> - Added a procrun command to output the current configuration
> > >>>>
> > >>>> The full set of changes is in the changelog
> > >>>>
> > >>>> 1.2.3 RC1 can be obtained from (r41271)
> > >>>> https://dist.apache.org/repos/dist/dev/commons/daemon/
> > >>>>
> > >>>> The git tag is:
> > >>>> Tag: COMMONS_DAEMON_1_2_3_RC1
> > >>>> URL:
> > >>>>
> > >>>>
> > >>
> > https://gitbox.apache.org/repos/asf?p=commons-daemon.git;a=commit;h=f42d76aaa22df5f6bfa2f745ba2985bc47fe28d1
> > >>>> Hash:  f42d76aaa22df5f6bfa2f745ba2985bc47fe28d1
> > >>>>
> > >>>> The Maven Staging repo is:
> > >>>>
> > >>
> > https://repository.apache.org/content/repositories/orgapachecommons-1525/
> > >>>>
> > >>>> The Windows binaries have been signed by the DigiCert (formerly
> > >>>> Symantec) code signing service.
> > >>>>
> > >>>> Files signed with my preferred key:
> > >>>> http://people.apache.org/~markt/
> > >>>> KEYS file is standard Apache Commons keys file:
> > >>>> http://www.apache.org/dist/commons/KEYS
> > >>>>
> > >>>>
> > >>>> [ ] Approved - go ahead and release Commons Daemon 1.2.3 RC1 as 1.2.3
> > >>>> [ ] Broken   - do not release because...
> > >>>>
> > >>>> ---------------------------------------------------------------------
> > >>>> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> > >>>> For additional commands, e-mail: dev-h...@commons.apache.org
> > >>>>
> > >>>>
> > >>>
> > >>
> > >>
> > >> ---------------------------------------------------------------------
> > >> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> > >> For additional commands, e-mail: dev-h...@commons.apache.org
> > >>
> > >>
> > >
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> > For additional commands, e-mail: dev-h...@commons.apache.org
> >
> >

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org

Reply via email to