Hi Justin,
Thank you for your feedback, I have updated
apache-eventmesh-1.2.0-incubating-source.tar.gz package, removed the
compiled code, use gpg --learsign and gpg --print-md SHA512 command
update the signature .asc file and .sha512 file , please have a check
again.

Thanks,
mikexue

Justin Mclean <[email protected]> 于2021年7月6日周二 下午2:19写道:
>
> HI,
>
> There seems to be a further problem with the signing when running gpg I get 
> "gpg: WARNING: not a detached signature;”
>
> A more serious issue is that the source release contains compile code. A 
> source release shouldn't contain compiled code.
>
> These are the files:
> ./eventmesh-runtime/build/libs/eventmesh-runtime-1.2.0-release.jar
> ./eventmesh-connector-api/build/libs/eventmesh-connector-api-1.2.0-release.jar
> ./eventmesh-sdk-java/build/libs/eventmesh-sdk-java-1.2.0-release.jar
> ./dist/lib/*.jar < — lots here
> ./dist/apps/*.jar
> ./eventmesh-common/build/libs/eventmesh-common-1.2.0-release.jar
> ./eventmesh-test/build/libs/eventmesh-test-1.2.0-release.jar
> ./gradle/wrapper/gradle-wrapper.jar
> ./eventmesh-starter/build/libs/eventmesh-starter-1.2.0-release.jar
> ./eventmesh-connector-rocketmq/build/libs/eventmesh-connector-rocketmq-1.2.0-release.jar
>
> Thanks,
> Justin
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to