Thanks Arnout. I agree that this project is the hardest to verify. I will proceed with releasing the jars.
On Thu, 10 Oct 2024 at 13:03, Arnout Engelen <enge...@apache.org> wrote: > > Checking these artifacts is a lot trickier for this project. I have > checked the runtime, codegen and scalapb-protoc-plugin jars for all > scala versions, and the sbt and maven plugin jars. I have not checked > the gradle plugin or the assembly jars. I have not tested them in any > project. > > This is not ideal, but since we're still building these on trusted > hardware perhaps we can consider the artifacts sufficiently verified > with that. > > On Sat, Oct 5, 2024 at 2:05 AM PJ Fanning <fannin...@apache.org> wrote: > > > > Hi everyone, > > The release vote has passed. The final requirement is to validate the > > Pekko gRPC 1.1.0 jars. > > > > I have uploaded the 1.1.0 jars to repository.apache.org staging repo. > > The 1.1.0-RC1 jars are still there for comparison. > > > > I will leave the jars there for at least 24 hours. Our process > > requires that at least 1 PMC member reviews the jars before we can > > release them. > > > > https://repository.apache.org/content/groups/staging/org/apache/pekko/ > > > > Thanks, > > PJ > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: dev-unsubscr...@pekko.apache.org > > For additional commands, e-mail: dev-h...@pekko.apache.org > > > > > -- > Arnout Engelen > ASF Security Response > Apache Pekko PMC member, ASF Member > NixOS Committer > Independent Open Source consultant > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@pekko.apache.org > For additional commands, e-mail: dev-h...@pekko.apache.org > --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@pekko.apache.org For additional commands, e-mail: dev-h...@pekko.apache.org