The KEYS you uploaded in SVN seems not the key to used to sign the package:
:) ./scripts/check.sh dist/apache-opendal-incubating-0.38.1-src.tar.gz > Check signature gpg: Signature made Fri 14 Jul 2023 05:14:29 PM CST gpg: using RSA key 35786239353BF1C6FF9A187094B59D89A0105979 gpg: Can't check signature: No public key :( gpg --list-key [email protected] pub rsa4096 2018-08-02 [SCEA] [expires: 2027-07-14] B1D67F3E33A2724985353B78D0E527DAFFFFFFFF uid [ultimate] Cai Lue (Cl in apache.org) <[email protected]> uid [ultimate] Cai Lue (main key) <[email protected]> uid [ultimate] ClSlaid (Cl in bupt) <[email protected]> sub rsa4096 2023-07-15 [S] [expires: 2026-07-14] Would you like to check again? Thanks. On Sat, Jul 15, 2023, at 15:49, Cai Lue wrote: > should be fixed, please try again. > > On 2023/07/15 06:38:38 Xuanwo wrote: >> Refer to >> https://opendal.apache.org/docs/contributing/reference/setup_gpg#add-your-gpg-public-key-to-the-keys-document >> for more details about adding GPG key in KEYS. >> >> On Sat, Jul 15, 2023, at 14:31, Xuanwo wrote: >> > Hi, >> > >> > Thanks for starting the VOTE! >> > >> > However, this VOTE has the following issues: >> > >> > - The signing key of 0.38.1-rc1 seems not added in KEYS: >> > >> > Only 4 keys here >> > >> > :) gpg --import /tmp/keys >> > gpg: key F063A0FE61C0B7F9: "Xuanwo <[email protected]>" not changed >> > gpg: key 2AAECF0ABFC5F308: "suyanhanx (Apache Committer) >> > <[email protected]>" not changed >> > gpg: key F172BCB57A289B20: "Zili Chen (OPENDAL CODE AUTO SIGNING KEY) >> > <[email protected]>" not changed >> > gpg: key 646F38033D700795: "Chojan Shang <[email protected]>" not >> > changed >> > gpg: Total number processed: 4 >> > gpg: unchanged: 4 >> > >> > And check failed >> > >> > :) ./scripts/check.sh dist/apache-opendal-incubating-0.38.1-src.tar.gz >> >> Check signature >> > gpg: Signature made Fri 14 Jul 2023 05:14:29 PM CST >> > gpg: using RSA key 35786239353BF1C6FF9A187094B59D89A0105979 >> > gpg: Can't check signature: No public key >> > >> > - The branch "release-0.38.1-rc1" is not exist on github. >> > >> > On Sat, Jul 15, 2023, at 13:45, 蔡略 wrote: >> >> Hello, Apache OpenDAL(incubating) Community, >> >> >> >> This is a call for a vote to release Apache OpenDAL(incubating) version >> >> 0.38.1. >> >> >> >> The tag to be voted on is 0.38.1. >> >> >> >> The release candidate: >> >> >> >> https://dist.apache.org/repos/dist/dev/incubator/opendal/0.38.1-rc1/ >> >> >> >> Keys to verify the release candidate: >> >> >> >> https://downloads.apache.org/incubator/opendal/KEYS >> >> >> >> Git branch for the release: >> >> >> >> https://github.com/apache/incubator-opendal/tree/release-0.38.1-rc1 >> >> >> >> >> >> Please download, verify, and test. >> >> >> >> The VOTE will pass after got 3 binding approve. >> >> >> >> [ ] +1 approve >> >> [ ] +0 no opinion >> >> [ ] -1 disapprove with the reason >> >> >> >> To learn more about apache opendal, please see https://opendal.apache.org/ >> >> >> >> Checklist for reference: >> >> >> >> [ ] Download links are valid. >> >> [ ] Checksums and signatures. >> >> [ ] LICENSE/NOTICE files exist >> >> [ ] No unexpected binary files >> >> [ ] All source files have ASF headers >> >> [ ] Can compile from source >> >> >> >> More detailed checklist please refer to: >> >> https://github.com/apache/incubator-opendal/tree/main/scripts >> >> >> >> To compile from source, please refer to: >> >> https://github.com/apache/incubator-opendal/blob/main/CONTRIBUTING.md >> >> >> >> Thanks >> >> >> >> Cai Lue >> > >> > -- >> > Xuanwo >> >> -- >> Xuanwo >> -- Xuanwo
