I have to vote -1 myself, I ran the verification and am posting this as an example for the other members.
I found 4 unexpected binaries (4 bun.lockb files) So what is the procedure now to abort the vote? Please hold the vote dsi have to recreate the release removing those files. [X] Download links are valid $ curl -sOJ https://dist.apache.org/repos/dist/dev/incubator/openserverless/0.9.0-incubating-RC3/openserverless-0.9.0-incubating-RC3-src.tar.gz $ curl -sOJ https://dist.apache.org/repos/dist/dev/incubator/openserverless/0.9.0-incubating-RC3/openserverless-0.9.0-incubating-RC3-src.tar.gz.asc $ curl -sOJ https://dist.apache.org/repos/dist/dev/incubator/openserverless/0.9.0-incubating-RC3/openserverless-0.9.0-incubating-RC3-src.tar.gz.sha512 $ ls -l -rw-r--r--@ 1 msciab staff 28315866 10 Sep 17:32 openserverless-0.9.0-incubating-RC3-src.tar.gz -rw-r--r--@ 1 msciab staff 870 10 Sep 17:32 openserverless-0.9.0-incubating-RC3-src.tar.gz.asc -rw-r--r--@ 1 msciab staff 177 10 Sep 17:32 openserverless-0.9.0-incubating-RC3-src.tar.gz.sha [X] Checksums and signatures are valid $ sha512 -c openserverless-0.9.0-incubating-RC3-src.tar.gz.sha512 # no news is a good news $ gpg --verify openserverless-0.9.0-incubating-RC3-src.tar.gz.asc openserverless-0.9.0-incubating-RC3-src.tar.gz gpg: Signature made Thu 10 Sep 15:45:58 2026 CEST gpg: using RSA key E64863824BDA2495CBAA57FDCEBE1A0116BE6665 gpg: Good signature from "Michele Sciabarra (Apache OpenServerless Release Key) <[email protected]>" [ultimate] [X] LICENSE/NOTICE files exist ❯ tar xzf openserverless-0.9.0-incubating-RC3-src.tar.gz ❯ ls openserverless-0.9.0-incubating-RC3/{LICENSE,NOTICE} openserverless-0.9.0-incubating-RC3/LICENSE openserverless-0.9.0-incubating-RC3/NOTICE [ ] No unexpected binary files in source $ find openserverless-0.9.0-incubating-RC3 -type f | xargs -L1 file | grep binary openserverless-0.9.0-incubating-RC3/oplugins/ide/deploy/bun.lockb: a /usr/bin/env bun script executable (binary data) openserverless-0.9.0-incubating-RC3/oplugins/util/config/configurator/bun.lockb: a /usr/bin/env bun script executable (binary data) openserverless-0.9.0-incubating-RC3/oplugins/util/upload/bun.lockb: a /usr/bin/env bun script executable (binary data) openserverless-0.9.0-incubating-RC3/oplugins/env/secrets/bun.lockb: a /usr/bin/env bun script executable (binary data) OOOPS! [ X All source files have ASF headers $ task license INFO Loading configuration from file: .licenserc.yaml INFO Totally checked 5095 files, valid: 15, invalid: 0, ignored: 5080, fixed: 0 *** Checking license headers in admin-api INFO Loading configuration from file: .licenserc.yaml INFO Totally checked 57 files, valid: 44, invalid: 0, ignored: 13, fixed: 0 *** Checking license headers in build INFO Loading configuration from file: .licenserc.yaml INFO Totally checked 1148 files, valid: 20, invalid: 0, ignored: 1128, fixed: 0 *** Checking license headers in cli INFO Loading configuration from file: .licenserc.yaml INFO Totally checked 2596 files, valid: 133, invalid: 0, ignored: 2463, fixed: 0 *** Checking license headers in devcontainer INFO Loading configuration from file: .licenserc.yaml INFO Totally checked 20 files, valid: 13, invalid: 0, ignored: 7, fixed: 0 *** Checking license headers in oplugins-op INFO Loading configuration from file: .licenserc.yaml INFO Totally checked 595 files, valid: 515, invalid: 0, ignored: 80, fixed: 0 *** Checking license headers in oplugins INFO Loading configuration from file: .licenserc.yaml INFO Totally checked 207 files, valid: 144, invalid: 0, ignored: 63, fixed: 0 *** Checking license headers in runtimes INFO Loading configuration from file: .licenserc.yaml INFO Totally checked 303 files, valid: 141, invalid: 0, ignored: 162, fixed: 0 *** Checking license headers in streamer INFO Loading configuration from file: .licenserc.yaml INFO Totally checked 29 files, valid: 20, invalid: 0, ignored: 9, fixed: 0 [X] Can compile from source $ ./build-and-test-linux.sh .... ============================================ SUCCESS ./1-deploy.sh SUCCESS ./2-ssl.sh SUCCESS ./3-sys-redis.sh SUCCESS ./4a-sys-ferretdb.sh SUCCESS ./4b-sys-postgres.sh SUCCESS ./5-sys-seaweedfs.sh SUCCESS ./6-login.sh SUCCESS ./7-static.sh SUCCESS ./8-user-redis.sh SUCCESS ./9a-user-ferretdb.sh SUCCESS ./9b-user-postgres.sh SUCCESS ./10-user-seaweedfs.sh SUCCESS ./14-runtime-testing.sh -- Michele Sciabarrà - [email protected] - linkedin.com/in/msciab Apache OpenServerless committer - reddit.com/r/openserverless Apache OpenWhisk PMC member - Author Learning Apache OpenWhisk <https://www.oreilly.com/library/view/learning-apache-openwhisk/9781492046158/> On Thu, 10 Sept 2026 at 16:46, Michele Sciabarra <[email protected]> wrote: > Hi all, > > I propose the following RC to be released as the official > Apache OpenServerless 0.9.0-incubating release. > > Apache OpenServerless is an effort undergoing incubation at The Apache > Software > Foundation (ASF), sponsored by the Apache Incubator. Incubation is required > of all newly accepted projects until a further review indicates that the > infrastructure, communications, and decision making process have stabilized > in a manner consistent with other successful ASF projects. While incubation > status is not necessarily a reflection of the completeness or stability of > the code, it does indicate that the project has yet to be fully endorsed by > the ASF. > > The artifacts for this release candidate can be found at: > > > https://dist.apache.org/repos/dist/dev/incubator/openserverless/0.9.0-incubating-RC3 > > The Git tag to be voted upon is: > > v0.9.0-incubating-RC3 > > https://github.com/apache/openserverless/releases/tag/v0.9.0-incubating-RC3 > > Release artifacts are signed with the GPG key of the release manager. > > The KEYS file is available at: > > https://dist.apache.org/repos/dist/dev/incubator/openserverless/KEYS > > Please download, verify, and test the release candidate. > > For detailed step-by-step instructions on how to verify this > release, please see the file VERIFY.md within the source > archive, or check: > > https://github.com/apache/openserverless/blob/0.9.0/VERIFY.md > > The vote will run for a minimum of 72 hours and close no earlier > than: > > 2026-09-13 16:30 UTC > > Please vote: > > [ ] +1 Release this package as Apache OpenServerless 0.9.0-incubating > [ ] +0 > [ ] -1 Do not release this package because... (reason required) > > Only PPMC members have binding votes, but community votes are > encouraged. > > Checklist for reference: > [ ] Download links are valid > [ ] Checksums and signatures are valid > [ ] LICENSE/NOTICE files exist > [ ] No unexpected binary files in source > [ ] All source files have ASF headers > [ ] Can compile from source > > On behalf of the Apache OpenServerless Podling PMC (PPMC), > -- > Michele Sciabarrà - [email protected] - linkedin.com/in/msciab > Apache OpenServerless committer - reddit.com/r/openserverless > Apache OpenWhisk PMC member - Author Learning Apache OpenWhisk > <https://www.oreilly.com/library/view/learning-apache-openwhisk/9781492046158/> > > >
