I vote +1 (binding)
I checked:
- Downloaded Artifacts and checked hash and signature
- Checked existence and Content of LICENSE, NOTICE, README; RELEASE_NOTES
- No unexpected binaries
- Built project according to readme (mvn install) (macOs Mojave 10.14.6)
Best
Julian
Am 30.03.20, 18:11 schrieb "Niklas Merz" <niklasm...@apache.org>:
I vote +1 (non-binding)
[OK] Download all staged artifacts under the url specified in the
release vote email.
[OK] Verify the signature is correct.
[OK] Check if the signature references an Apache email address.
[OK] Verify the SHA512 hashes.
[OK] Unzip the archive.
[OK] Verify the existence of LICENSE, NOTICE, README, RELEASE_NOTES
files in the extracted source bundle.
[OK] Verify the content of LICENSE, NOTICE, README, RELEASE_NOTES files
in the extracted source bundle.
[OK] Run RAT and check output.
[OK] Build the project with "mvn install" (Linux Mint 19.03).
Niklas
Am 30.03.20 um 09:27 schrieb Lukas Ott:
> +1 (binding)
>
> Lukas
>
> [OK] Download all staged artifacts under the url specified in the release
> vote email into a directory we’ll now call download-dir
> [OK] Verify the signature is correct: Additional Apache tutorial on how to
> verify downloads can be found here.
> [OK] Check if the check is successful.
> [OK] Check if the signature references an Apache email address.
> [OK] Verify the SHA512 hashes:
> [OK] Unzip the archive:
> [OK] Verify the existence of LICENSE, NOTICE, README, RELEASE_NOTES files
> in the extracted source bundle.
> [OK] Verify the content of LICENSE, NOTICE, README, RELEASE_NOTES files in
> the extracted source bundle.
> (Especially pay attention to the year in the NOTICE file if this is the
> first release of the year)
> [OK] [RM] Build the project with "mvn install" on Ubuntu 19.10
