+1 I checked: -LICENSE exist and has the correct content (if we don't bundle any dependencies) -NOTICE exists and has the correct content and correct year -sha512 checksum correct (I did sha512sum filename) -signature correct. I downloaded the KEYS from https://dist.apache.org/repos/dist/release/rya/KEYS then gpg --import KEYS then gpg --verify rya-project-4.0.1-source-release.zip.asc rya-project-4.0.1-source-release.zip (see https://infra.apache.org/release-signing.html) -artifacts placed in https://dist.apache.org/repos/dist/dev/rya/ -no unexpected binaries in the .zip file ( find . -type f | grep -v '\/target\/\|\/test\/\|\/site\/\|\.java\|\.xml\|\.xsl\|\.groovy\|\.properties\|\.sh\|\.bat\|\.md\|\.txt\|\.xsd\|\.jj\|\.jjt\|\.ttl') -no BSD or LGPL code in source - can build from source, with most included tests passing (mvm clean install failed on some Mongo related tests as I don't have Mongo running. mvn clean install -DskipTests builds OK)
Thanks, Adina On Thu, Dec 17, 2020 at 3:51 PM David Lotts <dlo...@gmail.com> wrote: > I am pleased to be calling this vote for the source release of Apache Rya, > version 4.0.1. > > The source zip, including signature (ASC), digest (sha512) can be found at: > https://dist.apache.org/repos/dist/dev/rya/rya-4.0.1-rc1/ > > Ancillary artifacts such as poms, jars, wars, ect. can be found here: > > https://repository.apache.org/content/repositories/orgapacherya-1012/org/apache/rya/rya-project/4.0.1/ > > The Git tag is rya-4.0.1-rc1 > The Git commit ID is 447c1a4ae477f46675c4a60296db3f5eb2059b27 > > https://gitbox.apache.org/repos/asf?p=rya.git;a=commit;h=447c1a4ae477f46675c4a60296db3f5eb2059b27 > > Checksums of rya-project-4.0.1-source-release.zip: > SHA512: > 00e397b7ef6a5c43919009060db05d9040b7a760b4dad964497cb390649376f7de0d2c20dded64de12df6023e113fb949b502ba9470a68bfecb0112137c8cc6a > > > Release artifacts are signed with the following key: > https://people.apache.org/keys/committer/dlotts.asc > > KEYS file available here: > https://dist.apache.org/repos/dist/release/rya/KEYS > > Issues that were closed/resolved for this release are here: > > The following issues (RYA-xxx) can be found here: > > https://issues.apache.org/jira/projects/RYA/issues/RYA-520?filter=doneissues > Pull > requests (#xxx) can be found here: > https://github.com/apache/rya/pulls?q=is%3Apr+is%3Aclosed > RYA-526 graduation clean-up:removed DISCLAIMER file, removed incubating > name,… > #321 by adinancr > RYA-520 Update year in NOTICE > #319 by wollefitz > Dependency updates and fixes for vagrant example VM > #309 by furkanozbay #318 by DLotts > RYA-529 fixed boundless and locationtech repos in main pom in Rya v4 > #314 #313 by DLotts > [SECURITY] Use HTTPS to resolve dependencies in Maven Build > #312 by JLLeitschuh > Don't switch on null value, instead switch on valid type, use > Map.getOrDefault() > #311 by rplst8 > > The vote will be open for at least 72 hours and close after 12/20/2020 4pm > ET. > Please download the release candidate and evaluate the necessary items > including checking hashes, signatures, build from source, and test. Then > please vote: > > [ ] +1 Release this package as rya-project-4.0.1 > [ ] +0 no opinion > [ ] -1 Do not release this package because because... > -- Dr. Adina Crainiceanu Professor Computer Science Department United States Naval Academy 410-293-6822 ad...@usna.edu http://www.usna.edu/Users/cs/adina/
