On Mar 4, 2008, at 11:15 AM, Guillaume Nodet wrote:
Dan Kulp just told me that this release had no javadocs / source jars associated to it which is not very friendly when debugging. This is not so big a problem, but while looking at the released artifacts, I've spotted that I forgot to sign them somehow :-( So I'd like to rebuild the source / javadoc jars from the svn tag, sign them along with the main jar and add that to the mirrored repo, unless someone is concerned about that.
I think the signatures can be added at anytime. However, if we're adding new artifacts (e.g. javadocs and source jars), then we need to vote on them. I'd use the same process you describe, just make them available for a vote, before releasing.
--kevan
