By the way, I wrote a release guide to explain the whole process: https://polaris.apache.org/community/release-guide/
Regards JB Le ven. 30 mai 2025 à 19:55, Ryan Blue <rdb...@gmail.com> a écrit : > As long as there is a reliable process, I don't think there's a need to do > another RC. I'd recommend not deviating from the process though. That can > create issues that are more likely to end up making it through the release > process. > > On Thu, May 29, 2025 at 1:34 PM Jean-Baptiste Onofré <j...@nanthrax.net> > wrote: > > > Yes the first full build (including tests) failed due to the > > Polaris-version. I did the signature manually to speed up the process. > > It was exceptional and will not happen for future release (it was ok in > > previous release). > > > > If you prefer, I can cancel rc4, fix the test on release branch and cut a > > new rc5. > > > > Thanks > > Regards > > JB > > > > Le jeu. 29 mai 2025 à 21:50, Ryan Blue <rdb...@gmail.com> a écrit : > > > > > My question was actually regarding what exactly happened and why > > signatures > > > were not reliably generated. The linked issue appears to have a > failure. > > > Was that failure why it was necessary to take manual steps? My concern > is > > > that there is a reliable process for builds that doesn't involve manual > > > steps for important parts, like signatures. > > > > > > On Tue, May 27, 2025 at 9:27 PM Jean-Baptiste Onofré <j...@nanthrax.net> > > > wrote: > > > > > > > It was a mistake from my part while svn commit on dist due to > > > > https://github.com/apache/polaris/issues/1676: i had to re-sign > > > artifacts > > > > for dist. > > > > > > > > With 1676 fixed we will be fine for next releases. > > > > > > > > Regards > > > > JB > > > > > > > > Le mar. 27 mai 2025 à 17:44, Ryan Blue <rdb...@gmail.com> a écrit : > > > > > > > > > JB, what happened here? Is there a part of the process that is run > by > > > > hand > > > > > rather than being done in a script? I can't think of what might > have > > > > caused > > > > > this that went wrong with a script and we don't want future issues > > > since > > > > > this is likely to not be caught in the future. > > > > > > > > > > On Fri, May 23, 2025 at 10:37 PM Jean-Baptiste Onofré < > > j...@nanthrax.net > > > > > > > > > wrote: > > > > > > > > > > > It seems the upload failed. Let me check. > > > > > > > > > > > > Le sam. 24 mai 2025 à 00:26, Russell Spitzer < > > > > russell.spit...@gmail.com> > > > > > a > > > > > > écrit : > > > > > > > > > > > > > +1 (Binding) > > > > > > > > > > > > > > Checked all the normal things > > > > > > > 1. Build / Test > > > > > > > 2. Checksums > > > > > > > 3. Smoke tested Server and Admin jars > > > > > > > 4. GPG Signatures (Issues below) > > > > > > > > > > > > > > Only did a quick pass on Helm Licenses/Notice and Friends but > all > > > > look > > > > > > good > > > > > > > to me now. > > > > > > > > > > > > > > I do have one question because I seem to be having issues (if > > this > > > > > isn't > > > > > > > the case I may have to be -1). I seem to have > > > > > > > problems checking the GPG signatures. > > > > > > > > > > > > > > The source gives me a valid signing > > > > > > > > > > > > > > All the other distribution files give me "Not a detached > > > signature". > > > > > > > > > > > > > > ➜ 10.0-rc4 gpg --verify > > > > > > > polaris-quarkus-admin-0.10.0-beta-incubating.tgz.asc > > > > > > > gpg: Signature made Fri May 23 00:43:25 2025 CDT > > > > > > > gpg: using RSA key > > > > > > 1AA8CF92D409A73393D0B736BFF2EE42C8282E76 > > > > > > > gpg: Good signature from "Jean-Baptiste Onofré < > > > jbono...@apache.org > > > > >" > > > > > > > [unknown] > > > > > > > gpg: WARNING: This key is not certified with a trusted > signature! > > > > > > > gpg: There is no indication that the signature belongs > > to > > > > the > > > > > > > owner. > > > > > > > Primary key fingerprint: 1AA8 CF92 D409 A733 93D0 B736 BFF2 > EE42 > > > > C828 > > > > > > 2E76 > > > > > > > *gpg: WARNING: not a detached signature; file > > > > > > > 'polaris-quarkus-admin-0.10.0-beta-incubating.tgz' was NOT > > > verified!* > > > > > > > > > > > > > > On Fri, May 23, 2025 at 10:25 AM Jean-Baptiste Onofré < > > > > j...@nanthrax.net > > > > > > > > > > > > > wrote: > > > > > > > > > > > > > > > Hi everyone > > > > > > > > > > > > > > > > I propose that we release the following RC (RC4) as the > > official > > > > > > > > Apache Polaris 0.10.0-beta-incubating release. Compared to > RC3, > > > RC4 > > > > > > fixes > > > > > > > > the LICENSE/NOTICE in the Heml chart. > > > > > > > > > > > > > > > > * This corresponds to the tag: > > > > > > apache-polaris-0.10.0-beta-incubating-rc4 > > > > > > > > * > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > https://github.com/apache/polaris/commits/apache-polaris-0.10.0-beta-incubating-rc4 > > > > > > > > * > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > https://github.com/apache/polaris/tree/52e30f0378d6092880918b15a34a6c6b4d51c1f8 > > > > > > > > > > > > > > > > The release source distribution tarball, signature, and > > checksum > > > > are > > > > > > > > staged here: > > > > > > > > * tgz: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > https://dist.apache.org/repos/dist/dev/incubator/polaris/apache-polaris-0.10.0-beta-incubating/apache-polaris-0.10.0-beta-incubating.tar.gz > > > > > > > > * sha512: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > https://dist.apache.org/repos/dist/dev/incubator/polaris/apache-polaris-0.10.0-beta-incubating/apache-polaris-0.10.0-beta-incubating.tar.gz.sha512 > > > > > > > > * gpg: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > https://dist.apache.org/repos/dist/dev/incubator/polaris/apache-polaris-0.10.0-beta-incubating/apache-polaris-0.10.0-beta-incubating.tar.gz.asc > > > > > > > > > > > > > > > > You can find the KEYS file here: > > > > > > > > * https://downloads.apache.org/incubator/polaris/KEYS > > > > > > > > > > > > > > > > For convenience, the following binary artifacts are > available: > > > > > > > > * Staging Maven repository > > > > > > > > ** > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > https://repository.apache.org/content/repositories/orgapachepolaris-1019/ > > > > > > > > NB: there's no uber/shade jar on the Staging Maven > repository. > > > > > > > > * Staging binary distributions (server and admin tool) > tarball, > > > > > > > > signature, and checksum: > > > > > > > > ** Server: > > > > > > > > *** tgz: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > https://dist.apache.org/repos/dist/dev/incubator/polaris/apache-polaris-0.10.0-beta-incubating/polaris-quarkus-server-0.10.0-beta-incubating.tgz > > > > > > > > *** tgz sha512: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > https://dist.apache.org/repos/dist/dev/incubator/polaris/apache-polaris-0.10.0-beta-incubating/polaris-quarkus-server-0.10.0-beta-incubating.tgz.sha512 > > > > > > > > *** tgz gpg: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > https://dist.apache.org/repos/dist/dev/incubator/polaris/apache-polaris-0.10.0-beta-incubating/polaris-quarkus-server-0.10.0-beta-incubating.tgz.asc > > > > > > > > *** zip: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > https://dist.apache.org/repos/dist/dev/incubator/polaris/apache-polaris-0.10.0-beta-incubating/polaris-quarkus-server-0.10.0-beta-incubating.zip > > > > > > > > *** zip sha512: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > https://dist.apache.org/repos/dist/dev/incubator/polaris/apache-polaris-0.10.0-beta-incubating/polaris-quarkus-server-0.10.0-beta-incubating.zip.sha512 > > > > > > > > *** zip gpg: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > https://dist.apache.org/repos/dist/dev/incubator/polaris/apache-polaris-0.10.0-beta-incubating/polaris-quarkus-server-0.10.0-beta-incubating.zip.asc > > > > > > > > ** Admin Tool: > > > > > > > > *** tgz: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > https://dist.apache.org/repos/dist/dev/incubator/polaris/apache-polaris-0.10.0-beta-incubating/polaris-quarkus-admin-0.10.0-beta-incubating.tgz > > > > > > > > *** tgz sha512: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > https://dist.apache.org/repos/dist/dev/incubator/polaris/apache-polaris-0.10.0-beta-incubating/polaris-quarkus-admin-0.10.0-beta-incubating.tgz.sha512 > > > > > > > > *** tgz gpg: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > https://dist.apache.org/repos/dist/dev/incubator/polaris/apache-polaris-0.10.0-beta-incubating/polaris-quarkus-admin-0.10.0-beta-incubating.tgz.asc > > > > > > > > *** zip: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > https://dist.apache.org/repos/dist/dev/incubator/polaris/apache-polaris-0.10.0-beta-incubating/polaris-quarkus-admin-0.10.0-beta-incubating.zip > > > > > > > > *** zip sha512: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > https://dist.apache.org/repos/dist/dev/incubator/polaris/apache-polaris-0.10.0-beta-incubating/polaris-quarkus-admin-0.10.0-beta-incubating.zip.sha512 > > > > > > > > *** zip gpg: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > https://dist.apache.org/repos/dist/dev/incubator/polaris/apache-polaris-0.10.0-beta-incubating/polaris-quarkus-admin-0.10.0-beta-incubating.zip.asc > > > > > > > > * Staging Docker images: > > > > > > > > ** Server: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > https://hub.docker.com/layers/apache/polaris/0.10.0-beta-incubating-rc4/images/sha256-6364581b39ccd1d1684044f03aebd9c3d37afbc45f9b00e610b1c2553c701b69 > > > > > > > > * Helm charts: > > > > > > > > ** tgz: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > https://dist.apache.org/repos/dist/dev/incubator/polaris/helm-chart/apache-polaris-helm-chart-0.10.0-beta-incubating.tar.gz > > > > > > > > ** tgz sha512: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > https://dist.apache.org/repos/dist/dev/incubator/polaris/helm-chart/apache-polaris-helm-chart-0.10.0-beta-incubating.tar.gz.sha512 > > > > > > > > ** tgz gpg: > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > https://dist.apache.org/repos/dist/dev/incubator/polaris/helm-chart/apache-polaris-helm-chart-0.10.0-beta-incubating.tar.gz.asc > > > > > > > > > > > > > > > > Please download, verify, and test. > > > > > > > > > > > > > > > > Please vote in the next 72 hours. > > > > > > > > > > > > > > > > [ ] +1 Release this as Apache polaris 0.10.0-beta-incubating > > > > > > > > [ ] +0 > > > > > > > > [ ] -1 Do not release this because... > > > > > > > > > > > > > > > > Only PPMC members and mentors have binding votes, but other > > > > community > > > > > > > > members are > > > > > > > > encouraged to cast non-binding votes. This vote will pass if > > > there > > > > > are > > > > > > > > 3 binding +1 votes and more binding +1 votes than -1 votes. > > > > > > > > > > > > > > > > NB: if this vote passes, a new vote has to be started on the > > > > > Incubator > > > > > > > > general mailing > > > > > > > > list. > > > > > > > > > > > > > > > > Thanks > > > > > > > > Regards > > > > > > > > > > > > > > > > JB > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > >
