1. Interesting on the Nexux- who knows who set that up- what are the pro/cons of nexus v SVN? 2. make sure this gets added to docs 3. let's make a jira for this. 4. just drop them then. 5. https://github.com/apache/mahout/blob/trunk/distribution/KEYS
On Tue, Jun 30, 2020 at 2:42 AM Christofer Dutz <christofer.d...@c-ware.de> wrote: > Hi folks, > > some things I noticed: > > 1) You're using the Nexus Staging Repo ... I know most Apache projects use > the apache SVN for officially staging the release > 2) The source-repo is missing the RELEASE_NOTES which usually goes > alongside the source bundle. > 3) (this might be the most serious issue) you are using SHA1 hashes and > Apache wants us to use SHA512 hashes (The build does provide these, but > doesn't automatically deploy them) ( > https://infra.apache.org/release-distribution.html) > 4) MD5 are also considered deprecated > 5) Where's your KEYS file? I need that to validate the signatures. > > Chris > > > > Am 30.06.20, 07:11 schrieb "Andrew Musselman" <a...@apache.org>: > > Thanks to some great work by Chris Dutz, RC1 for 14.1 release is out! > Please go try it out, check signatures and checksums, etc. > > Binaries: > > https://repository.apache.org/content/repositories/orgapachemahout-1062/org/apache/mahout/apache-mahout-distribution/14.1/ > > Source: > > https://repository.apache.org/content/repositories/orgapachemahout-1062/org/apache/mahout/mahout/14.1/ > > Best > Andrew > >
