On Fri, Mar 20, 2015 at 6:47 PM, Udo Schnurpfeil <[email protected]> wrote: > It seems to be very usual, to have these file. Other apache projects > also have these files. > >> Does anyone know why?
Really? I haven't seen them for the other Myfaces releases nor have I seen them on Cayenne. Unfortunately, the only thing I know in Maven is "mvn install" and how to exclude files in rat, so I can't help :) > I think the *.asc is also a file that will not be distributed over the > mirrors... Right. *.asc and *.md5 and *.sha1 are only available directly from the ASF. Otherwise the mirror sites could tamper with the releases by creating their own asc/md5/sha1 files after modifying the release. I finished evaluating the main release yesterday and everything is fine by me. But I still need to download, build, and evaluate the examples release. I'll try to get to that either tonight or Saturday morning (tomorrow for me). > Am 19.03.15 um 18:13 schrieb Mike Kienenberger: >> This is also not a release-blocker but DEPENDENCIES needs to be added >> to the exclusion list or apache rat will fail. >> I'll open an issue on this. >> >> --- tobago-2.0.7/pom.xml 2015-03-18 01:20:28.000000000 -0400 >> +++ tobago-2.0.7-modified/pom.xml 2015-03-19 13:06:10.725792204 -0400 >> @@ -972,6 +972,9 @@ >> <version>0.9</version> >> <configuration> >> <excludes> >> + <!-- This file is created during a release and needs no >> licensing text --> >> + <exclude>DEPENDENCIES</exclude> >> + >> <!-- jQuery --> >> <exclude>**/jquery*.js</exclude> >> <exclude>**/jquery*.map</exclude> >> >> >> >> On Wed, Mar 18, 2015 at 9:49 PM, Mike Kienenberger <[email protected]> >> wrote: >>> Yes, I meant 2.0.7, not 2.0.6 (copy and paste error). >>> >>> Ok. I see the tobago-assembly-2.0.7-dist.tar.gz and >>> tobago-assembly-2.0.7-dist.zip files now. Thanks! >>> >>> I'll download those, do the appropriate checks, and compare them to >>> what the source built. >>> >>> It may take me until Saturday, but I'm hoping to have it for you tomorrow. >>> >>> I'm just going to check the release requirements (builds from source, >>> signatures match, checksums match, source build matches distribution, >>> apache rat passes) rather than trying to evaluate the technical merits >>> of this Tobago Release. I'll leave the code evaluation to you guys :) >>> >>> >>> On Wed, Mar 18, 2015 at 6:44 PM, Udo Schnurpfeil <[email protected]> >>> wrote: >>>> Hi Mike, >>>> >>>> thank you for your participation. I do my annotations inline >>>> >>>> >>>> Am 18.03.15 um 21:09 schrieb Mike Kienenberger: >>>>> Just as an update, I was able to build >>>>> myfaces-tobago-2.0.6-source-release.zip easily. >>>> >>>> Great! >>>> >>>> Did you mean 2.0.6 or 2.0.7? >>>> >>>>> >>>>> On Wed, Mar 18, 2015 at 12:45 PM, Mike Kienenberger <[email protected]> >>>>> wrote: >>>>>> So I thought I'd help out with the vote for the Tobago release, which >>>>>> I haven't done before. >>>>>> >>>>>> But I'm confused by the immensity of the release artifacts at >>>>>> https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/. >>>> >>>> The dist is in subfolder "tobago-assembly" >>>> >>>> By the way: >>>> For people who have a running application using Tobago and Maven, they >>>> can add the stating repo, and only have to change the version number to >>>> test their application. >>>> >>>>>> >>>>>> What exactly is being released? Which file corresponds to what is >>>>>> going to become myfaces-tobago-2.0.7-dist.tar.gz? I see nothing with >>>>>> this name in the most obvious directories, but I haven't checked all >>>>>> 27!!! folders in the staging repository:. >>>>>> >>>>>> Along with that, what file is the source file to build >>>>>> myfaces-tobago-2.0.7-dist.tar.gz? Is it >>>>>> https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago/2.0.7/tobago-2.0.7-source-release.zip? >>>>>> >>>>>> all I have to do is unpack it and run "mvn install" on it, right? >>>>>> >>>>>> There also seems to be some unnecessary build artifacts. Not a >>>>>> show-shopper for release, but it should be cleaned up. >>>>>> >>>>>> tobago-2.0.7-source-release.zip.asc.asc >>>>>> tobago-2.0.7-source-release.zip.asc.asc.md5 >>>>>> tobago-2.0.7-source-release.zip.asc.asc.sha1 >>>>>> tobago-2.0.7-source-release.zip.asc.md5 >>>>>> tobago-2.0.7-source-release.zip.asc.sha1 >>>>>> >>>> >>>> Yes of course, I'll try to fix that in the next release. But not >>>> problem: the script to copy the release files to the release server will >>>> filter the files. >>>> >>>>>> >>>>>> Altogether, I would expect to find the following items based on the >>>>>> 2.0.6 release: >>>>>> >>>>>> myfaces-tobago-2.0.6-dist.tar.gz >>>>>> myfaces-tobago-2.0.6-dist.tar.gz.md5 >>>>>> myfaces-tobago-2.0.6-dist.tar.gz.asc >>>>>> >>>>>> myfaces-tobago-2.0.6-dist.zip >>>>>> myfaces-tobago-2.0.6-dist.zip.md5 >>>>>> myfaces-tobago-2.0.6-dist.zip.asc >>>>>> >>>>>> myfaces-tobago-2.0.6-source-release.zip >>>>>> myfaces-tobago-2.0.6-source-release.zip.md5 >>>>>> myfaces-tobago-2.0.6-source-release.zip.asc >>>>>> >>>>>> myfaces-tobago-2.0.6-example.tar.gz >>>>>> myfaces-tobago-2.0.6-example.tar.gz.md5 >>>>>> myfaces-tobago-2.0.6-example.tar.gz.asc >>>>>> >>>>>> myfaces-tobago-2.0.6-example.zip >>>>>> myfaces-tobago-2.0.6-example.zip.md5 >>>>>> myfaces-tobago-2.0.6-example.zip.asc >>>>>> >>>>>> And I would expect myfaces-tobago-2.0.6-example.zip to produce all of >>>>>> the example artifacts and myfaces-tobago-2.0.6-source-release.zip to >>>>>> produce all of the other artifacts. >>>> >>>> The example.zip only contains the most important examples. >>>>>> >>>>>> Thanks, >>>>>> -Mike >>>> >>>> Regards, >>>> >>>> Udo
