Thank you Arturo for the check.

This looks wrong:

gpg --verify httpcomponents-core-5.5-beta1-src.zip.asc
gpg: assuming signed data in 'httpcomponents-core-5.5-beta1-src.zip'
gpg: Signature made Tue Jun  2 03:07:06 2026 EDT
gpg:                using RSA key C650FF7A0C0817441BAC320743B5E9442D51AAC6
gpg: Can't check signature: No public key

Gary

On Tue, Jun 2, 2026 at 11:55 AM Arturo Bernal <[email protected]> wrote:
>
> Hi Gary
>
> Thanks for checking.
>
> The RC folder has not been tampered with. The current repository HEAD is now
> r84927, but the RC folder itself was last changed in r84919 by me:
>
> Revision: 84927
> Last Changed Author: abernal
> Last Changed Rev: 84919
> Last Changed Date: 2026-06-02 09:13:34 +0200
>
> I also checked the diff for that path between r84919 and r84926:
>
> svn diff
> https://dist.apache.org/repos/dist/dev/httpcomponents/httpcore-5.5-beta1-RC1@84919
> https://dist.apache.org/repos/dist/dev/httpcomponents/httpcore-5.5-beta1-RC1@84926
>
> It produces no output.
>
> So the folder has not changed since it was staged. The vote email referred
> to the revision where the RC folder was committed; ViewVC is showing the
> current repository HEAD revision.
>
> Arturo
>
>
> On Tue, Jun 2, 2026 at 1:06 PM Gary Gregory <[email protected]> wrote:
>
> > On Tue, Jun 2, 2026 at 3:25 AM Arturo Bernal <[email protected]> wrote:
> > >
> > > Please vote on releasing these packages as HttpCore 5.5-beta1.
> > > The vote is open for the at least 72 hours, and only votes from
> > > HttpComponents PMC members are binding. The vote passes if at least
> > > three binding +1 votes are cast and there are more +1 than -1 votes.
> > >
> > > Release notes:
> > >
> > https://dist.apache.org/repos/dist/dev/httpcomponents/httpcore-5.5-beta1-RC1/RELEASE_NOTES-5.5.x.txt
> > >
> > > Maven artefacts:
> > >
> > https://repository.apache.org/content/repositories/orgapachehttpcomponents-1206/org/apache/httpcomponents/core5/
> > >
> > > Git Tag: 5.5-beta1-RC1
> > > https://github.com/apache/httpcomponents-core/tree/5.5-beta1-RC1
> > >
> > > Packages:
> > >
> > https://dist.apache.org/repos/dist/dev/httpcomponents/httpcore-5.5-beta1-RC1
> > > revision 84919
> >
> > The above doesn't match what I see:
> >
> > dist - Revision 84926: /dev/httpcomponents/httpcore-5.5-beta1-RC1
> >
> > Please confirm if the email is wrong or if the folder in svn was tampered
> > with.
> >
> > Gary
> >
> > >
> > > Hashes:
> > >
> > 9a36552e47f5fcb36932ae029a906b4da84f95e5b3fcb3d3c5c9a1f9fe1a5137a9ef9d77253f41780570b8ed63d1eb527c457b7893f16b1680ab46e32c6e5880
> > > *httpcomponents-core-5.5-beta1-src.tar.gz
> > >
> > cf5e5f2bb3ec52ae1f4787ac1dc44361d3edebda9f28378bd79f224a83097068c48a5320493871450ad04f0fcddeb5e400565764bf44d630ef3d6441ddbed1c7
> > > *httpcomponents-core-5.5-beta1-bin.tar.gz
> > >
> > 10cb825f9b6cdd2ef0e3d2a002fa622cf00b7c553cba604097445b050fe18f1e7afd3517fd6d5ac3e9c8e913ead50cab49e6713beeaf073e5dd82596690eccfa
> > > *httpcomponents-core-5.5-beta1-bin.zip
> > >
> > 0f0258f415c641648481742f1a456feaeb1ac69a2579ad503113a1f762fb392025eed2adf16703e0167a2c5a5d6b3852bd06913a20aa1c45bfac651ef18f90c0
> > > *httpcomponents-core-5.5-beta1-src.zip
> > >
> > > Keys:
> > > https://www.apache.org/dist/httpcomponents/httpcore/KEYS
> > > ------------------------------
> > >
> > > Vote: HttpCore 5.5-beta1 release
> > > [ ] +1 Release the packages as HttpCore 5.5-beta1.
> > > [ ] -1 I am against releasing the packages (must include a reason).
> > >
> > > Arturo
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: [email protected]
> > For additional commands, e-mail: [email protected]
> >
> >

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to