Checking these artifacts is a lot trickier for this project. I have checked the runtime, codegen and scalapb-protoc-plugin jars for all scala versions, and the sbt and maven plugin jars. I have not checked the gradle plugin or the assembly jars. I have not tested them in any project.
This is not ideal, but since we're still building these on trusted hardware perhaps we can consider the artifacts sufficiently verified with that. On Sat, Oct 5, 2024 at 2:05 AM PJ Fanning <fannin...@apache.org> wrote: > > Hi everyone, > The release vote has passed. The final requirement is to validate the > Pekko gRPC 1.1.0 jars. > > I have uploaded the 1.1.0 jars to repository.apache.org staging repo. > The 1.1.0-RC1 jars are still there for comparison. > > I will leave the jars there for at least 24 hours. Our process > requires that at least 1 PMC member reviews the jars before we can > release them. > > https://repository.apache.org/content/groups/staging/org/apache/pekko/ > > Thanks, > PJ > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@pekko.apache.org > For additional commands, e-mail: dev-h...@pekko.apache.org > -- Arnout Engelen ASF Security Response Apache Pekko PMC member, ASF Member NixOS Committer Independent Open Source consultant --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@pekko.apache.org For additional commands, e-mail: dev-h...@pekko.apache.org
