Hi folks,

some things I noticed:

1) You're using the Nexus Staging Repo ... I know most Apache projects use the 
apache SVN for officially staging the release
2) The source-repo is missing the RELEASE_NOTES which usually goes alongside 
the source bundle.
3) (this might be the most serious issue) you are using SHA1 hashes and Apache 
wants us to use SHA512 hashes (The build does provide these, but doesn't 
automatically deploy them) (https://infra.apache.org/release-distribution.html)
4) MD5 are also considered deprecated
5) Where's your KEYS file? I need that to validate the signatures.

Chris



Am 30.06.20, 07:11 schrieb "Andrew Musselman" <a...@apache.org>:

    Thanks to some great work by Chris Dutz, RC1 for 14.1 release is out!
    Please go try it out, check signatures and checksums, etc.

    Binaries:
    
https://repository.apache.org/content/repositories/orgapachemahout-1062/org/apache/mahout/apache-mahout-distribution/14.1/

    Source:
    
https://repository.apache.org/content/repositories/orgapachemahout-1062/org/apache/mahout/mahout/14.1/

    Best
    Andrew

Reply via email to