On Fri, Jan 30, 2026 at 11:51 AM <[email protected]> wrote: > https://dist.apache.org/repos/dist/dev/pekko/GRPC-2.0.0-M1-RC1 > https://release-test.apache.org/vote/pekko-grpc/2.0.0-M1 > > https://github.com/apache/pekko-grpc/tree/v2.0.0-M1-RC1 > Git commit ID: a6c34b0c153dfa01d4d9e3afc18c917cb1768e5a > > Please download, verify, and test. > > We have also staged jars in the Apache Nexus Repository. These were built > with the same code > as appears in this Source Release Candidate. We would appreciate if users > could test with these too. > If anyone finds any serious problems with these jars, please also notify > us on this thread. > > https://repository.apache.org/content/groups/staging/org/apache/pekko/ > > You can add this resolver to sbt with 'resolvers += > Resolver.ApacheMavenStagingRepo' > > The VOTE will pass if we have more positive votes than negative votes > and there must be a minimum of 3 approvals from Pekko PMC members. > Anyone voting in favour of the release, could you please provide a list of > the checks you have done? > The vote will be left open for at least 72hrs. > > [ ] +1 approve > [ ] +0 no opinion > [ ] -1 disapprove with the reason > > To learn more about Apache Pekko, please see https://pekko.apache.org/ > > Checklist for reference: > > [x] Download links are valid. > [x] Checksums and signatures. hash > 8ca6e5b0329e8f935ee88678a4ded7263d7af0192e9e59fb79edf9e641593a16c9dbf1c031479ab067ca1ffe90380b0cdf66a5a04e0d06151dccf52279dfd822 > [x] LICENSE/NOTICE files exist > [x] No unexpected binary files > [x] All source files have ASF headers > [x] Can compile from source > [ ] Can verify the binary build > > To compile from the source, please refer to: > > > https://github.com/apache/pekko-grpc/blob/main/README.md#building-from-source > > To verify the binary build, please refer to: > > > https://github.com/apache/pekko-site/wiki/Pekko-Release-Process#verifying-the-binary-build
I was unable to verify the binary build due to https://github.com/raboof/sbt-reproducible-builds/issues/279 . For this reason I don't feel comfortable approving the release for now, but I do plan to allocate time to look into https://github.com/raboof/sbt-reproducible-builds/issues/279 and fix this - hopefully before 2.0.0 GA Kind regards, -- Arnout Engelen ASF Security Response Apache Pekko PMC member, ASF Member NixOS Committer Independent Open Source consultant
