Hi I checked the source distribution and it looks good to me:
1. Signature and checksum are good 2. incubating is in the name/version 3. ASF header is present in all expected files 4. No binary or compiled files were found in the source distribution 5. LICENSE is correct (mentioning Apache OpenWhisk) 6. NOTICE is correct (note: it's not strictly required to mention OpenWhisk here as it's a Apache project and already covered by "This product includes software developed at The ASF". Also the incubator mention is not required here, it's the purpose of the DISCLAIMER). 7. DISCLAIMER is there Thanks! Regards JB On Mon, Sep 14, 2026 at 9:24 AM Michele Sciabarra <[email protected]> wrote: > > Hello everyone before I cast the vote again, please do a check if the > following is correct > > - I uploaded in the dist area, moved the keys in the right place, used > the naming with apache-openrserveler-0.9.0-incubating without RC in > the name but in a folder with RC > > https://dist.apache.org/repos/dist/dev/incubator/openserverless/0.9.0-incubating-RC5/ > > - Everyting is built from source properly tagged > > https://github.com/apache/openserverless/tree/v0.9.0-incubating-RC5 > > and the release process is documented here: > > https://github.com/apache/openserverless/blob/v0.9.0-incubating-RC5/RELEASE.md > > - top level LICENSE and NOTICE only cover the embedded sources, most > notably OpenWhisk > > https://github.com/apache/openserverless/blob/v0.9.0-incubating-RC5/LICENSE > https://github.com/apache/openserverless/blob/v0.9.0-incubating-RC5/NOTICE > > Removed all the vendored code that is actually imported as a > dependency so it is not required to be distributed > > - all the docker files instead mentions the embedded components in the image: > > https://github.com/apache/openserverless-operator/blob/c4f811e6a4aba552ac6530515bca197599f10bc5/LICENSE > https://github.com/apache/openserverless-operator/blob/c4f811e6a4aba552ac6530515bca197599f10bc5/NOTICE > > - all the files have headers, checked with Apache RAT > > This is my RAT > NFO: RAT summary: > INFO: Approved: 1638 > INFO: Archives: 1 > INFO: Binaries: 267 > INFO: Document types: 5 > INFO: Ignored: 13 > INFO: License categories: 2 > INFO: License names: 2 > INFO: Notices: 89 > INFO: Standards: 1637 > INFO: Unapproved: 0 > INFO: Unknown: 0 > > This is my exclusion > > # bun.lock is JSON-formatted - a license header would make it invalid. > **/bun.lock > # go.sum is a generated checksum database - a header breaks verification. > **/go.sum > # skip .git > **/.git > > bun.lock are json files and go.sum is a lockfile that is required but > breaks with a header - I have checked and other released apache > projects skips headers for those files > > - All the images built now carries the disclaimer, includes LICENSE > NOTICE and DISCLAIMER and the imagees have a -snapshot suffix > > https://hub.docker.com/r/apache/openserverless-operator > > - the development process is documented here: > https://github.com/apache/openserverless/blob/v0.9.0-incubating-RC5/DEVEL.md > > - the website has been updated with clear installation process that > does not recommend to download any binary and we put all the > disclaimer that this is pre releaase incubating code > > https://openserverless.apache.org/ > > - it is not required but we also documented all the dependencies and > checked they are compatible with asf licenses and collected all their > licenses > > https://github.com/apache/openserverless/tree/v0.9.0-incubating-RC5/dependencies > > > Is anything missing? Do you see any blocking? Please advise before the > cast again the vote. Thanks. > > -- > Michele Sciabarrà - [email protected] - linkedin.com/in/msciab > Apache OpenServerless committer - reddit.com/r/openserverless > Apache OpenWhisk PMC member - Author Learning Apache OpenWhisk
