The release candidate builds and the tests pass. The sigs and hashes all check out. I say we address the unsavory license issues before the next release. This release was a good opportunity to conduct an audit of where we are at from a dependency/licensing point of view. As long as we document all of the issues and address them before the next release (which will hopefully be our last before we graduate), then I don't see a problem with moving forward. In the meantime, I say we make the benchmarking project optional get another release under our belt.
Caleb A. Meier, Ph.D. Senior Software Engineer ♦ Analyst Parsons Corporation 1911 N. Fort Myer Drive, Suite 800 ♦ Arlington, VA 22209 Office: (703)797-3066 [email protected] ♦ www.parsons.com -----Original Message----- From: Brown, Jennifer [mailto:[email protected]] Sent: Thursday, September 14, 2017 4:54 PM To: [email protected] Subject: Re: [VOTE] Release Rya (Incubating) version 3.2.11 RC2 -1 (binding) The incorporation of bad licensing has the potential to limit where Rya can be deployed. I would like to see following addressed: https://urldefense.proofpoint.com/v2/url?u=https-3A__issues.apache.org_jira_browse_RYA-2D372&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=tUVMSS5-RA4P8SYHPtIv0O_HunJCeYCUUA8cBkpjr-c&s=tSGblNOoFFUgki0TfpF0NDssuPenz8zWy1dgiU9gxrE&e= Replace org.json:json library with a compatibly licensed alternative https://urldefense.proofpoint.com/v2/url?u=https-3A__issues.apache.org_jira_browse_RYA-2D373&d=CwIFAg&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=tUVMSS5-RA4P8SYHPtIv0O_HunJCeYCUUA8cBkpjr-c&s=dIWaYv9FeEgouPHZi21RFd_f4GiGk5UVnlC8wL28gQM&e= Benchmarks: JMH library cannot be distributed, make optional or replace Best Regards, Jen Jennifer Brown Project Manager, Semantic Technologies PARSONS 1911 N. Fort Myer Dr. Ste 800 Arlington, VA 22209 Phone: (703) 797-3136 Fax: (703) 522-6310 [email protected] www.parsons.com > On Sep 11, 2017, at 5:44 PM, David Lotts <[email protected]> wrote: > > I am pleased to be calling this vote for the source release of Apache > Rya (Incubating), version 3.2.11. > > The source zip, including signatures, digests, etc. can be found at: > https://urldefense.proofpoint.com/v2/url?u=https-3A__dist.apache.org_r > epos_dist_dev_incubator_rya_rya-2Dincubating-2D3.2.11-2Drc2_&d=CwIBaQ& > c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=QwnT-wJItyf76XsYIlx7lV > Wk0WP1Ot0bMlSgUFcldnw&m=fUF0PGSF1unhT49p331wXwA5SddDfIG0ajD0NmkgkwQ&s= > lxiDBOa1hiXCWqXR4OmUQe0Ty3zxslmxXVQMOoaCLUM&e= > > > Ancillary artifacts such as poms, jars, wars. can be found here: > https://urldefense.proofpoint.com/v2/url?u=https-3A__repository.apache > .org_content_repositories_orgapacherya-2D1006_org_apache_rya_rya-2Dpro > ject_3.2.11-2Dincubating_&d=CwIBaQ&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKm > rYIdfxIq10&r=QwnT-wJItyf76XsYIlx7lVWk0WP1Ot0bMlSgUFcldnw&m=fUF0PGSF1un > hT49p331wXwA5SddDfIG0ajD0NmkgkwQ&s=pHB4zyCor13rWovpCvXjcfxUQYVOVCdwkgP > 0-pQNfD8&e= > > The Git tag is rya-incubating-3.2.11-rc2 The Git commit ID is > f9e5787a4057d8fbaacc8d22e4de5d86fcb45ba8 > https://urldefense.proofpoint.com/v2/url?u=https-3A__git-2Dwip-2Dus.ap > ache.org_repos_asf-3Fp-3Dincubator-2Drya.git-3Ba-3Dcommit-3Bh-3Df9e578 > 7a4057d8fbaacc8d22e4de5d86fcb45ba8&d=CwIBaQ&c=Nwf-pp4xtYRe0sCRVM8_LWH5 > 4joYF7EKmrYIdfxIq10&r=QwnT-wJItyf76XsYIlx7lVWk0WP1Ot0bMlSgUFcldnw&m=fU > F0PGSF1unhT49p331wXwA5SddDfIG0ajD0NmkgkwQ&s=YdeCimFlxSE31qNUTQKijIvmOL > 38vb1DEPewGRzw7IU&e= > > Checksums of rya-project-3.2.11-source-release.zip: > MD5: aa4dff6ed9664fb1e06752389bebcea9 > SHA1: a801e7814bdd09f603256858e4511db4b59605b2 > SHA512: > 66ad82cf9f6c04e5ab230b609fb902f071fd77ff63989f3fa2e331ddcc343b1ad7ee7d > 3ae3bbd138b399e59c565a57457060c357c01a805c0b4bbe2cd0c34dd9 > > Release artifacts are signed with the following key: > https://urldefense.proofpoint.com/v2/url?u=https-3A__people.apache.org > _keys_committer_dlotts.asc&d=CwIBaQ&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EK > mrYIdfxIq10&r=QwnT-wJItyf76XsYIlx7lVWk0WP1Ot0bMlSgUFcldnw&m=fUF0PGSF1u > nhT49p331wXwA5SddDfIG0ajD0NmkgkwQ&s=Bxi98qN29yG6hy0i0n8FUlPSC0xUp2AEiI > 5AxK2JDFo&e= > > KEYS file available here: > https://urldefense.proofpoint.com/v2/url?u=https-3A__dist.apache.org_r > epos_dist_release_incubator_rya_KEYS&d=CwIBaQ&c=Nwf-pp4xtYRe0sCRVM8_LW > H54joYF7EKmrYIdfxIq10&r=QwnT-wJItyf76XsYIlx7lVWk0WP1Ot0bMlSgUFcldnw&m= > fUF0PGSF1unhT49p331wXwA5SddDfIG0ajD0NmkgkwQ&s=6TmgHOhCkCYfbL90CmVLsi0D > LEcAYkIKZBKevL-C4Uw&e= > > Issues that were closed/resolved for this release are here: > https://urldefense.proofpoint.com/v2/url?u=https-3A__issues.apache.org > _jira_secure_ReleaseNote.jspa-3F&d=CwIBaQ&c=Nwf-pp4xtYRe0sCRVM8_LWH54j > oYF7EKmrYIdfxIq10&r=QwnT-wJItyf76XsYIlx7lVWk0WP1Ot0bMlSgUFcldnw&m=fUF0 > PGSF1unhT49p331wXwA5SddDfIG0ajD0NmkgkwQ&s=qx2gYPUTNtogi9zHbjK0JK_Qbnp- > FmosjemzN3iPqEI&e= > projectId=12319020&version=12341279 > (Should be complete now.) > > The vote will be open for at least 72 hours starting Monday 9/11/2017 > and close at Friday 9/15/2017 10am Eastern Time USA. > Please download the release candidate and evaluate the necessary items > including checking hashes, signatures, build from source, and test. > Then please vote: > > [ ] +1 Release this package as rya-project-3.2.11 [ ] +0 no opinion [ > ] -1 Do not release this package because because...
