Thanks for pointing this out. I didn't see any .asc.* files in the staging repository but I'll look for them the next time there is a MyFaces Core or Cayenne vote.
On Sat, Mar 21, 2015 at 5:34 AM, Udo Schnurpfeil <[email protected]> wrote: > Yes, take a look at MyFaces Core API: > > # > http://repo.maven.apache.org/maven2/org/apache/myfaces/core/myfaces-api/2.2.7/ > > Cayenne also have it... > > > http://repo.maven.apache.org/maven2/org/apache/cayenne/cayenne-client/4.0.M2/ > > You may google that: "site:repo.maven.apache.org asc.md5" > > > > I found this issue: http://jira.codehaus.org/browse/MNG-5504 > > So it's evident, that the repo server is full of *.asc.md5 files. > > > Regards, > > Udo > > > Am 21.03.15 um 00:09 schrieb Mike Kienenberger: > > On Fri, Mar 20, 2015 at 6:47 PM, Udo Schnurpfeil <[email protected]> > wrote: > >> It seems to be very usual, to have these file. Other apache projects > >> also have these files. > >> > >>> Does anyone know why? > > > > Really? I haven't seen them for the other Myfaces releases nor have I > > seen them on Cayenne. > > Unfortunately, the only thing I know in Maven is "mvn install" and how > > to exclude files in rat, so I can't help :) > > > >> I think the *.asc is also a file that will not be distributed over the > >> mirrors... > > > > Right. *.asc and *.md5 and *.sha1 are only available directly from > > the ASF. Otherwise the mirror sites could tamper with the releases by > > creating their own asc/md5/sha1 files after modifying the release. > > > > I finished evaluating the main release yesterday and everything is > > fine by me. But I still need to download, build, and evaluate the > > examples release. I'll try to get to that either tonight or Saturday > > morning (tomorrow for me). > > > >> Am 19.03.15 um 18:13 schrieb Mike Kienenberger: > >>> This is also not a release-blocker but DEPENDENCIES needs to be added > >>> to the exclusion list or apache rat will fail. > >>> I'll open an issue on this. > >>> > >>> --- tobago-2.0.7/pom.xml 2015-03-18 01:20:28.000000000 -0400 > >>> +++ tobago-2.0.7-modified/pom.xml 2015-03-19 13:06:10.725792204 > -0400 > >>> @@ -972,6 +972,9 @@ > >>> <version>0.9</version> > >>> <configuration> > >>> <excludes> > >>> + <!-- This file is created during a release and needs no > >>> licensing text --> > >>> + <exclude>DEPENDENCIES</exclude> > >>> + > >>> <!-- jQuery --> > >>> <exclude>**/jquery*.js</exclude> > >>> <exclude>**/jquery*.map</exclude> > >>> > >>> > >>> > >>> On Wed, Mar 18, 2015 at 9:49 PM, Mike Kienenberger <[email protected]> > wrote: > >>>> Yes, I meant 2.0.7, not 2.0.6 (copy and paste error). > >>>> > >>>> Ok. I see the tobago-assembly-2.0.7-dist.tar.gz and > >>>> tobago-assembly-2.0.7-dist.zip files now. Thanks! > >>>> > >>>> I'll download those, do the appropriate checks, and compare them to > >>>> what the source built. > >>>> > >>>> It may take me until Saturday, but I'm hoping to have it for you > tomorrow. > >>>> > >>>> I'm just going to check the release requirements (builds from source, > >>>> signatures match, checksums match, source build matches distribution, > >>>> apache rat passes) rather than trying to evaluate the technical merits > >>>> of this Tobago Release. I'll leave the code evaluation to you guys :) > >>>> > >>>> > >>>> On Wed, Mar 18, 2015 at 6:44 PM, Udo Schnurpfeil <[email protected]> > wrote: > >>>>> Hi Mike, > >>>>> > >>>>> thank you for your participation. I do my annotations inline > >>>>> > >>>>> > >>>>> Am 18.03.15 um 21:09 schrieb Mike Kienenberger: > >>>>>> Just as an update, I was able to build > >>>>>> myfaces-tobago-2.0.6-source-release.zip easily. > >>>>> > >>>>> Great! > >>>>> > >>>>> Did you mean 2.0.6 or 2.0.7? > >>>>> > >>>>>> > >>>>>> On Wed, Mar 18, 2015 at 12:45 PM, Mike Kienenberger < > [email protected]> wrote: > >>>>>>> So I thought I'd help out with the vote for the Tobago release, > which > >>>>>>> I haven't done before. > >>>>>>> > >>>>>>> But I'm confused by the immensity of the release artifacts at > >>>>>>> > https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/ > . > >>>>> > >>>>> The dist is in subfolder "tobago-assembly" > >>>>> > >>>>> By the way: > >>>>> For people who have a running application using Tobago and Maven, > they > >>>>> can add the stating repo, and only have to change the version number > to > >>>>> test their application. > >>>>> > >>>>>>> > >>>>>>> What exactly is being released? Which file corresponds to what is > >>>>>>> going to become myfaces-tobago-2.0.7-dist.tar.gz? I see nothing > with > >>>>>>> this name in the most obvious directories, but I haven't checked > all > >>>>>>> 27!!! folders in the staging repository:. > >>>>>>> > >>>>>>> Along with that, what file is the source file to build > >>>>>>> myfaces-tobago-2.0.7-dist.tar.gz? Is it > >>>>>>> > https://repository.apache.org/content/repositories/orgapachemyfaces-1046/org/apache/myfaces/tobago/tobago/2.0.7/tobago-2.0.7-source-release.zip > ? > >>>>>>> > >>>>>>> all I have to do is unpack it and run "mvn install" on it, right? > >>>>>>> > >>>>>>> There also seems to be some unnecessary build artifacts. Not a > >>>>>>> show-shopper for release, but it should be cleaned up. > >>>>>>> > >>>>>>> tobago-2.0.7-source-release.zip.asc.asc > >>>>>>> tobago-2.0.7-source-release.zip.asc.asc.md5 > >>>>>>> tobago-2.0.7-source-release.zip.asc.asc.sha1 > >>>>>>> tobago-2.0.7-source-release.zip.asc.md5 > >>>>>>> tobago-2.0.7-source-release.zip.asc.sha1 > >>>>>>> > >>>>> > >>>>> Yes of course, I'll try to fix that in the next release. But not > >>>>> problem: the script to copy the release files to the release server > will > >>>>> filter the files. > >>>>> > >>>>>>> > >>>>>>> Altogether, I would expect to find the following items based on the > >>>>>>> 2.0.6 release: > >>>>>>> > >>>>>>> myfaces-tobago-2.0.6-dist.tar.gz > >>>>>>> myfaces-tobago-2.0.6-dist.tar.gz.md5 > >>>>>>> myfaces-tobago-2.0.6-dist.tar.gz.asc > >>>>>>> > >>>>>>> myfaces-tobago-2.0.6-dist.zip > >>>>>>> myfaces-tobago-2.0.6-dist.zip.md5 > >>>>>>> myfaces-tobago-2.0.6-dist.zip.asc > >>>>>>> > >>>>>>> myfaces-tobago-2.0.6-source-release.zip > >>>>>>> myfaces-tobago-2.0.6-source-release.zip.md5 > >>>>>>> myfaces-tobago-2.0.6-source-release.zip.asc > >>>>>>> > >>>>>>> myfaces-tobago-2.0.6-example.tar.gz > >>>>>>> myfaces-tobago-2.0.6-example.tar.gz.md5 > >>>>>>> myfaces-tobago-2.0.6-example.tar.gz.asc > >>>>>>> > >>>>>>> myfaces-tobago-2.0.6-example.zip > >>>>>>> myfaces-tobago-2.0.6-example.zip.md5 > >>>>>>> myfaces-tobago-2.0.6-example.zip.asc > >>>>>>> > >>>>>>> And I would expect myfaces-tobago-2.0.6-example.zip to produce all > of > >>>>>>> the example artifacts and myfaces-tobago-2.0.6-source-release.zip > to > >>>>>>> produce all of the other artifacts. > >>>>> > >>>>> The example.zip only contains the most important examples. > >>>>>>> > >>>>>>> Thanks, > >>>>>>> -Mike > >>>>> > >>>>> Regards, > >>>>> > >>>>> Udo >
