On 13/05/2010, Oleg Kalnichevski <[email protected]> wrote:
> On Thu, 2010-05-13 at 17:29 +0100, sebb wrote:
>  > On 13/05/2010, Oleg Kalnichevski <[email protected]> wrote:
>  > > On Thu, 2010-05-13 at 16:49 +0100, sebb wrote:
>  > >  > On 13/05/2010, Oleg Kalnichevski <[email protected]> wrote:
>  > >  > > On Thu, 2010-05-13 at 15:51 +0100, sebb wrote:
>  > >  > >  > On 13/05/2010, Oleg Kalnichevski <[email protected]> wrote:
>  > >  > >  > > On Thu, 2010-05-13 at 10:41 +0100, sebb wrote:
>  > >  > >  > >  > On 13/05/2010, Oleg Kalnichevski <[email protected]> wrote:
>  > >  > >  > >  > > On Thu, 2010-05-13 at 01:12 +0100, sebb wrote:
>  > >  > >  > >  > >  > On 12/05/2010, Oleg Kalnichevski <[email protected]> 
> wrote:
>  > >  > >  > >  > >  > > Please vote on releasing these packages as 
> HttpComponents Client
>  > >  > >  > >  > >  > >  4.1-alpha2. The vote is open for the next 72 hours, 
> and only votes from
>  > >  > >  > >  > >  > >  HttpComponents PMC members are binding. The vote 
> passes if at least
>  > >  > >  > >  > >  > >  three binding +1 votes are cast and there are more 
> +1 than -1 votes.
>  > >  > >  > >  > >  > >
>  > >  > >  > >  > >  > >  Packages:
>  > >  > >  > >  > >  > >  
> http://people.apache.org/~olegk/httpclient-4.1-alpha2/
>  > >  > >  > >  > >  >
>  > >  > >  > >  > >  > Please can you upload the Maven packages as well, so 
> we can vote on those too?
>  > >  > >  > >  > >  >
>  > >  > >  > >  > >  > Should be largely a formality if the main packages are 
> OK, but they do
>  > >  > >  > >  > >  > need to be voted on.
>  > >  > >  > >  > >  >
>  > >  > >  > >  > >
>  > >  > >  > >  > >
>  > >  > >  > >  > > Sebastian, we have been through that, haven't we? Only 
> source package
>  > >  > >  > >  > >  represents an official release artifact that needs to be 
> voted on.
>  > >  > >  > >  >
>  > >  > >  > >  > The Maven artifacts always include source files, either as 
> source jars
>  > >  > >  > >  > (which should be provided), if not then at least pom.xml 
> will be
>  > >  > >  > >  > included.
>  > >  > >  > >  >
>  > >  > >  > >  > >  Binary artifacts are merely byproducts. If you want to 
> verify they are
>  > >  > >  > >  > >  ok, you should build them from source.
>  > >  > >  > >  >
>  > >  > >  > >  > That's not strictly true either - binary artifacts need to 
> be
>  > >  > >  > >  > inspected to ensure that the appropriate N&L files are 
> present.
>  > >  > >  > >  >
>  > >  > >  > >
>  > >  > >  > >
>  > >  > >  > > Please see
>  > >  > >  > >  https://issues.apache.org/jira/browse/LEGAL-34
>  > >  > >  > >
>  > >  > >  >
>  > >  > >  > Which was never really resolved and anyway does not cover the 
> point
>  > >  > >  > about N&L at all.
>  > >  > >  >
>  > >  > >
>  > >  > >
>  > >  > > Precisely. Hen's statement boils down to a simple fact that there 
> is no
>  > >  > >  ASF wide policy on the matter and it is up to individual projects 
> unless
>  > >  > >  the Board rules otherwise.
>  > >  > >
>  > >  > >
>  > >  > >  > >
>  > >  > >  > >  > >  My main problem is not with uploading a bunch of files, 
> but the fact you
>  > >  > >  > >  > >  are changing an established release process in the 
> middle of a release
>  > >  > >  > >  > >  without prior discussion and a consent from other 
> committers.
>  > >  > >  > >  >
>  > >  > >  > >  > My point is that the process is IMO not following the ASF 
> standard,
>  > >  > >  > >  > and therefore needs to be fixed.
>  > >  > >  > >  >
>  > >  > >  > >
>  > >  > >  > >
>  > >  > >  > > There is no ASF standard. It is up to individual projects. 
> Please see
>  > >  > >  > >  https://issues.apache.org/jira/browse/LEGAL-34
>  > >  > >  >
>  > >  > >  > Not really relevant as source releases must be approved by the 
> PMC.
>  > >  > >  > The Maven artefacts include source, and therefore must be voted 
> on.
>  > >  > >  >
>  > >  > >
>  > >  > >
>  > >  > > Is there an official statement to that effect by the Board I could 
> have
>  > >  > >  a look at?
>  > >  > >
>  > >  >
>  > >  > No idea.
>  > >  >
>  > >  > But I hope it's agreed that source releases must be voted on by the 
> PMC.
>  > >  > Maven includes source, and is a release.
>  > >  >
>  > >  > >
>  > >  > >  > Regardless of the JIRA issue, I think the consumers of ASF 
> releases
>  > >  > >  > have a right to expect that the archives etc have been formally
>  > >  > >  > approved as part of the "quality control" applied by the ASF
>  > >  > >  > organisation.
>  > >  > >  >
>  > >  > >  > Why not just publish the Maven artefacts so we can include them 
> in the vote?
>  > >  > >  >
>  > >  > >
>  > >  > >
>  > >  > > How exactly do you suggest that I do that, as the artifacts are
>  > >  > >  generated by Maven from source at deployment time?
>  > >  >
>  > >  > This is actually quite easy, see
>  > >  > https://issues.apache.org/jira/browse/COMMONSSITE-55
>  > >  >
>  > >  > >  Besides, the release process is already is painful enough. I see 
> no good
>  > >  > >  reason for making it even more painful due to some completely 
> arbitrary
>  > >  > >  requirement.
>  > >  >
>  > >  > It's not arbitrary.
>  > >  >
>  > >
>  > >
>  > > I am sorry, Sebastian, but per comment from legal unless the Board makes
>  > >  a clear statement, it is just arbitrary
>  >
>  > Source releases still require PMC votes.
>  >
>
>
> Sure, that is why there are source packages (zip and tarball).

The Maven release includes source, but is not identical to the above,
so we need to vote on that as well.

>
>  Oleg
>
>
>  ---------------------------------------------------------------------
>  To unsubscribe, e-mail: [email protected]
>  For additional commands, e-mail: [email protected]
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to