(1) We've always done it through Nexus, not married to the approach (2) Agreed, https://issues.apache.org/jira/browse/MAHOUT-2109 (3) Agreed, https://issues.apache.org/jira/browse/MAHOUT-2110 (4) Also https://issues.apache.org/jira/browse/MAHOUT-2110 (5) @Christofer Dutz <christofer.d...@c-ware.de> where are KEYS normally kept?
On Tue, Jun 30, 2020 at 5:47 AM Trevor Grant <trevor.d.gr...@gmail.com> wrote: > 1. Interesting on the Nexux- who knows who set that up- what are the > pro/cons of nexus v SVN? > 2. make sure this gets added to docs > 3. let's make a jira for this. > 4. just drop them then. > 5. https://github.com/apache/mahout/blob/trunk/distribution/KEYS > > > > On Tue, Jun 30, 2020 at 2:42 AM Christofer Dutz <christofer.d...@c-ware.de > > > wrote: > > > Hi folks, > > > > some things I noticed: > > > > 1) You're using the Nexus Staging Repo ... I know most Apache projects > use > > the apache SVN for officially staging the release > > 2) The source-repo is missing the RELEASE_NOTES which usually goes > > alongside the source bundle. > > 3) (this might be the most serious issue) you are using SHA1 hashes and > > Apache wants us to use SHA512 hashes (The build does provide these, but > > doesn't automatically deploy them) ( > > https://infra.apache.org/release-distribution.html) > > 4) MD5 are also considered deprecated > > 5) Where's your KEYS file? I need that to validate the signatures. > > > > Chris > > > > > > > > Am 30.06.20, 07:11 schrieb "Andrew Musselman" <a...@apache.org>: > > > > Thanks to some great work by Chris Dutz, RC1 for 14.1 release is out! > > Please go try it out, check signatures and checksums, etc. > > > > Binaries: > > > > > https://repository.apache.org/content/repositories/orgapachemahout-1062/org/apache/mahout/apache-mahout-distribution/14.1/ > > > > Source: > > > > > https://repository.apache.org/content/repositories/orgapachemahout-1062/org/apache/mahout/mahout/14.1/ > > > > Best > > Andrew > > > > >
