Hi all, well we setup things in PLC4X the same way most projects have them … so for PLC4X we stage releases here: https://dist.apache.org/repos/dist/dev/plc4x/
and as soon as they are released, they are SVN-Moved here: https://dist.apache.org/repos/dist/release/plc4x This then automatically makes all the mirror syncing of Apache make the artifacts available here: https://downloads.apache.org/plc4x/ All this SVN staging stuff is manual stuff … for PLC4X too, the release:perform uploads the source bundles to Nexus, but we don’t vote on that. We vote on the stuff that’s in SVN. Chris Von: Andrew Musselman <andrew.mussel...@gmail.com> Datum: Dienstag, 30. Juni 2020 um 16:57 An: Mahout Dev List <dev@mahout.apache.org>, Christofer Dutz <christofer.d...@c-ware.de> Betreff: Re: RC1 for 14.1 (1) We've always done it through Nexus, not married to the approach (2) Agreed, https://issues.apache.org/jira/browse/MAHOUT-2109 (3) Agreed, https://issues.apache.org/jira/browse/MAHOUT-2110 (4) Also https://issues.apache.org/jira/browse/MAHOUT-2110 (5) @Christofer Dutz<mailto:christofer.d...@c-ware.de> where are KEYS normally kept? On Tue, Jun 30, 2020 at 5:47 AM Trevor Grant <trevor.d.gr...@gmail.com<mailto:trevor.d.gr...@gmail.com>> wrote: 1. Interesting on the Nexux- who knows who set that up- what are the pro/cons of nexus v SVN? 2. make sure this gets added to docs 3. let's make a jira for this. 4. just drop them then. 5. https://github.com/apache/mahout/blob/trunk/distribution/KEYS On Tue, Jun 30, 2020 at 2:42 AM Christofer Dutz <christofer.d...@c-ware.de<mailto:christofer.d...@c-ware.de>> wrote: > Hi folks, > > some things I noticed: > > 1) You're using the Nexus Staging Repo ... I know most Apache projects use > the apache SVN for officially staging the release > 2) The source-repo is missing the RELEASE_NOTES which usually goes > alongside the source bundle. > 3) (this might be the most serious issue) you are using SHA1 hashes and > Apache wants us to use SHA512 hashes (The build does provide these, but > doesn't automatically deploy them) ( > https://infra.apache.org/release-distribution.html) > 4) MD5 are also considered deprecated > 5) Where's your KEYS file? I need that to validate the signatures. > > Chris > > > > Am 30.06.20, 07:11 schrieb "Andrew Musselman" > <a...@apache.org<mailto:a...@apache.org>>: > > Thanks to some great work by Chris Dutz, RC1 for 14.1 release is out! > Please go try it out, check signatures and checksums, etc. > > Binaries: > > https://repository.apache.org/content/repositories/orgapachemahout-1062/org/apache/mahout/apache-mahout-distribution/14.1/ > > Source: > > https://repository.apache.org/content/repositories/orgapachemahout-1062/org/apache/mahout/mahout/14.1/ > > Best > Andrew > >