Hi all, Please review and vote on the release candidate #3 of Apache Fesod (Incubating) version 2.1.0-incubating.
This is an incubating podling. This vote is for the release candidate only; a separate IPMC vote will follow once this vote passes. RC3 fixes the source-release.zip content so that it matches the Git tag file-by-file (addressing the RC2 note that the staging zip did not match the tag). The source release archive was rebuilt from a clean git archive of the tagged commit and verified to match 1cd6e891 file-by-file. The release candidate to be voted on: https://dist.apache.org/repos/dist/dev/incubator/fesod/2.1.0-incubating-rc3/ Git tag to be voted on: 2.1.0-incubating-rc3 https://github.com/apache/fesod/tree/2.1.0-incubating-rc3 commit 1cd6e891316cfea2c49028091be9d6ee0409cd1e The Maven staging repository (closed): https://repository.apache.org/content/repositories/orgapachefesod-1045/ Source package (with .asc signature and .sha512 checksum): https://dist.apache.org/repos/dist/dev/incubator/fesod/2.1.0-incubating-rc3/apache-fesod-2.1.0-incubating-src.tar.gz SHA512: 4db8b55f2f0617aa0ff88b645ccfd4faaa55b8c71b06be0c07c3dcdd03932221a79bbcb5958ea525eefdabce9319346d0ed5684fc980adab7830e0adf92d0546 Source release archive (with .asc signature and .sha512 checksum): https://dist.apache.org/repos/dist/dev/incubator/fesod/2.1.0-incubating-rc3/fesod-parent-2.1.0-incubating-source-release.zip SHA512: 3656a01cfa9c60d3b48537eaf07190f11cc34a8c0f4c56908a366c4612c45db2bc125d62e417d0c9a59ca8cb2c48578bda4e66afe4434b8117d2db7e3191908d The KEYS file (used to verify the artifacts, PGP public keys): https://dist.apache.org/repos/dist/dev/incubator/fesod/KEYS To verify this release candidate: 1. Import the KEYS file and check the release signatures: $ curl -O https://dist.apache.org/repos/dist/dev/incubator/fesod/KEYS $ gpg --import KEYS $ gpg --verify apache-fesod-2.1.0-incubating-src.tar.gz.asc apache-fesod-2.1.0-incubating-src.tar.gz $ gpg --verify fesod-parent-2.1.0-incubating-source-release.zip.asc fesod-parent-2.1.0-incubating-source-release.zip 2. Verify the SHA-512 checksums (values are listed above): $ sha512sum apache-fesod-2.1.0-incubating-src.tar.gz $ sha512sum fesod-parent-2.1.0-incubating-source-release.zip 3. Verify the source-release.zip matches the Git tag 1cd6e891 exactly. 4. Verify the source package builds (JDK 8) and RAT passes, and confirm LICENSE/NOTICE/DISCLAIMER content and NOTICE copyright years. 5. Verify the artifacts in the Maven staging repository. This vote will be open for 72 hours (or until the necessary number of votes is reached). Please cast your vote: [ ] +1 approve [ ] +0 no opinion [ ] -1 disapprove (and please state the reason) Best regards, Zhe Zhang
