Hi,
The vote to release Apache Rya incubating 3.2.12 RC1 has failed.
+1 votes: Puja Valiyil (PPMC member)
Jeff Dash
-1 votes: Jen Brown (PPMC member)
Adina Crainiceanu (PPMC member)
Caleb Meier (PPMC member)
The following JIRA ticket has being created to capture the issue blocking
the release;
RYA-468 [1] Apache Giraph brings in a LGPL licensed dependency
We'll make Apache Giraph module optional for now and a new release
candidate should be available early next week.
Thank you all for testing and voting on this release candidate.
[1] https://issues.apache.org/jira/browse/RYA-468
On Fri, Feb 16, 2018 at 3:41 PM, Meier, Caleb <[email protected]>
wrote:
> -1 (binding)
>
> I agree that we should fix the licensing and build issues for this release
> so that we can move onto graduation.
>
> Caleb A. Meier, Ph.D.
> Senior Software Engineer ♦ Analyst
> Parsons Corporation
> 1911 N. Fort Myer Drive, Suite 800 ♦ Arlington, VA 22209
> Office: (703)797-3066
> [email protected] ♦ www.parsons.com
>
> -----Original Message-----
> From: Adina Crainiceanu [mailto:[email protected]]
> Sent: Friday, February 16, 2018 11:21 AM
> To: [email protected]
> Subject: Re: [VOTE] Release Apache Rya (incubating) 3.2.12 RC1
>
> -1 from me. I think we should fix the licensing, release without any
> licensing issues, and then graduate very soon :)
>
> I'll send an email to close the vote and start another release candidate.
>
> Thank you.
>
> On Fri, Feb 16, 2018 at 11:16 AM, Puja Valiyil <[email protected]> wrote:
>
> > +1 (binding).
> > There are two known issues with RC1:
> > The licensing issue with Giraph: This can be fixed in a future
> > release prior to graduation.
> > Not being able to build under Windows: Again, not clear if this is an
> > issue since no one is responding to the other thread about the issue.
> > So I will say Windows support is not a deal breaker here.
> >
> > On Thu, Feb 15, 2018 at 7:13 PM, Josh Elser <[email protected]> wrote:
> >
> > > IIRC, the findbugs-annotation artifact is dubious at best in terms
> > > of licensing. I think the "intent" was that it was compatibly
> > > licensed, but the artifacts in Maven totally had it mislabeled.
> > >
> > > Not something that needs to block your release now, but you should
> > > be taking this up to make sure are I want y'all to graduate soon :)
> > >
> > >
> > > On 2/14/18 11:29 AM, Jeff Dasch wrote:
> > >
> > >> I just dug through some emails and we did identify this in 3.2.11-RC2.
> > We
> > >> had a number of other licensing issues on that RC so it is not
> > >> clear to
> > me
> > >> if this particular finding got dropped, or was determined to be a
> > >> non-issue. Regardless, this same issue does affect the 3.2.11
> release.
> > >>
> > >> On Wed, Feb 14, 2018 at 10:57 AM, Puja Valiyil <[email protected]>
> > wrote:
> > >>
> > >> I’m confused because that project was in our previous release.
> > >> Didn’t
> > we
> > >>> upgrade the version of giraph to fix this or am I misremembering?
> > >>>
> > >>> Sent from my iPhone
> > >>>
> > >>> On Feb 14, 2018, at 10:37 AM, Jeff Dasch <[email protected]> wrote:
> > >>>>
> > >>>> Again, not sure if this license thing is a blocker. But if it
> > >>>> is, I
> > put
> > >>>>
> > >>> up
> > >>>
> > >>>> PR-274 as a fix:
> > >>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_a
> > >>>> pache_incubator-2Drya_pull_274&d=DwIFaQ&c=Nwf-pp4xtYRe0sCRVM8_LWH
> > >>>> 54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo
> > >>>> 8&m=rJpSvZFMvmPo3jFa4QbcgANvKeOpOH_KwouvUS_c3Ek&s=o6vO6bBa0jDTynG
> > >>>> HRmZ8_fDOnNOCrx-srgmEFNVLRjg&e=
> > >>>>
> > >>>>
> > >>>> On Tue, Feb 13, 2018 at 4:37 PM, Jeff Dasch <[email protected]>
> wrote:
> > >>>>>
> > >>>>> I'm not voting yet, but I did run a license check and got a hit
> > >>>>> on
> > >>>>> this:
> > >>>>> (GNU Lesser Public License) FindBugs-Annotations
> > >>>>> (com.google.code.findbugs:annotations:2.0.2 -
> > >>>>> https://urldefense.proofpoint.com/v2/url?u=http-3A__findbugs.sou
> > >>>>> rceforge.net_&d=DwIFaQ&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfx
> > >>>>> Iq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=rJpSvZFMvmP
> > >>>>> o3jFa4QbcgANvKeOpOH_KwouvUS_c3Ek&s=8crfbvCjZv-O9e6T3ASaH2-kAAFnC
> > >>>>> yKhhS5Bky8dnzA&e=)
> > >>>>>
> > >>>>> which comes from Apache Giraph
> > >>>>> [INFO] org.apache.rya:rya.giraph:jar:3.2.12-incubating
> > >>>>> [INFO] +- org.apache.giraph:giraph-core:jar:1.2.0:compile
> > >>>>> [INFO] | +-
> > >>>>> com.google.code.findbugs:annotations:jar:2.0.2:compile
> > >>>>>
> > >>>>> I'm pretty sure we ran into this during the last release. Are
> > >>>>> we
> > still
> > >>>>> good to go on this RC, or do we need to cut a new one that has a
> > giraph
> > >>>>> profile?
> > >>>>>
> > >>>>>
> > >>>>>
> > >>>>> On Mon, Feb 12, 2018 at 8:51 PM, Adina Crainiceanu
> > >>>>> <[email protected]>
> > >>>>>>
> > >>>>> wrote:
> > >>>
> > >>>>
> > >>>>>> Rya community,
> > >>>>>>
> > >>>>>> I am pleased to be calling this vote for the source release of
> > Apache
> > >>>>>>
> > >>>>> Rya
> > >>>
> > >>>> (Incubating), version 3.2.12.
> > >>>>>>
> > >>>>>> The source zip, including signatures, digests, etc. can be found
> at:
> > >>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__dist.apach
> > >>>>>> e.org_repos_dist_dev_incubator_rya_rya-2D&d=DwIFaQ&c=Nwf-pp4xtY
> > >>>>>> Re0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7Cr
> > >>>>>> MHCgeo_4WXTD0qo8&m=rJpSvZFMvmPo3jFa4QbcgANvKeOpOH_KwouvUS_c3Ek&
> > >>>>>> s=kyxk7CSfvebi0hIqyQQSZExbKVYH-sLAn0yc4O1rzlo&e=
> > >>>>>> incubating-3.2.12-rc1/
> > >>>>>>
> > >>>>>> Ancillary artifacts such as poms, jars, wars, etc. can be found
> > here:
> > >>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__repository
> > >>>>>> .apache.org_content_repositories_&d=DwIFaQ&c=Nwf-pp4xtYRe0sCRVM
> > >>>>>> 8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4
> > >>>>>> WXTD0qo8&m=rJpSvZFMvmPo3jFa4QbcgANvKeOpOH_KwouvUS_c3Ek&s=FFOOlH
> > >>>>>> 4zhftmQvn4dMu_RZBTolUFuTrI7Zxx7hhZcsk&e=
> > >>>>>> orgapacherya-1009/org/apache/rya/
> > >>>>>>
> > >>>>>> The Git tag is rya-incubating-3.2.12-rc1 The Git commit ID is
> > >>>>>> e9ecf7fae76e308cfc0d90684ce684493482266c
> > >>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__git-2Dwip-
> > >>>>>> 2Dus.apache.org_repos_asf-3Fp-3Dincubator-2Drya.git&d=DwIFaQ&c=
> > >>>>>> Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5ST
> > >>>>>> iFwDpzJ7CrMHCgeo_4WXTD0qo8&m=rJpSvZFMvmPo3jFa4QbcgANvKeOpOH_Kwo
> > >>>>>> uvUS_c3Ek&s=6WMXRAFL4uAV1zBuE3JBi6z4DW7K661FRXM80_7CY60&e=;
> > >>>>>> a=commit;h=e9ecf7fae76e308cfc0d90684ce684493482266c
> > >>>>>>
> > >>>>>>
> > >>>>>> Checksums of rya-project-3.2.12-source-release.zip:
> > >>>>>> SHA512:8059adff3a264cdcc85edb8ab1c820d87d4e2adbdfd4eebfcd7d2
> > >>>>>> 7b9a3c8c2af8cd09cb39b91ccb5170fe37159b1360078ef8e61321e7f6ca
> > >>>>>> e6141442bbf8dda
> > >>>>>> SHA1: 64296d86923dae11294dcff0719cfcb9522a744d
> > >>>>>> MD5: 9c55ae7f811afaa147ebb7f652543620
> > >>>>>>
> > >>>>>> Release artifacts are signed with the following key:
> > >>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__people.apa
> > >>>>>> che.org_keys_committer_adina.asc&d=DwIFaQ&c=Nwf-pp4xtYRe0sCRVM8
> > >>>>>> _LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4W
> > >>>>>> XTD0qo8&m=rJpSvZFMvmPo3jFa4QbcgANvKeOpOH_KwouvUS_c3Ek&s=_ki2kTf
> > >>>>>> tOJQSYq6Pt7f5GzkFqGolo4iHkKbGGWUtGRU&e=
> > >>>>>>
> > >>>>>> KEYS file available here:
> > >>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__dist.apach
> > >>>>>> e.org_repos_dist_release_incubator_rya_KEYS&d=DwIFaQ&c=Nwf-pp4x
> > >>>>>> tYRe0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7
> > >>>>>> CrMHCgeo_4WXTD0qo8&m=rJpSvZFMvmPo3jFa4QbcgANvKeOpOH_KwouvUS_c3E
> > >>>>>> k&s=Q1HNdULKboPFlazWIMKaedgUeji1weKJGKFfKIys7GM&e=
> > >>>>>>
> > >>>>>> Issues that were closed/resolved for this release are here:
> > >>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__issues.apa
> > >>>>>> che.org_jira_secure_ReleaseNote.jspa-3F&d=DwIFaQ&c=Nwf-pp4xtYRe
> > >>>>>> 0sCRVM8_LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMH
> > >>>>>> Cgeo_4WXTD0qo8&m=rJpSvZFMvmPo3jFa4QbcgANvKeOpOH_KwouvUS_c3Ek&s=
> > >>>>>> 7fQbOoUjSnSpvaD16IqHXPeTp1OrEIHFh4HDWS_fpV0&e=
> > >>>>>> projectId=12319020&version=12341570
> > >>>>>>
> > >>>>>>
> > >>>>>> The vote will be open for at least 72 hours until end of
> > >>>>>> Thursday, February 15, 2018 ET.
> > >>>>>> Please download the release candidate and evaluate the
> > >>>>>> necessary
> > items
> > >>>>>> including checking hashes, signatures, build from source, and
> test.
> > >>>>>>
> > >>>>> Then
> > >>>
> > >>>> please vote:
> > >>>>>>
> > >>>>>> [ ] +1 Release this package as rya-project-3.2.12 [ ] +0 no
> > >>>>>> opinion [ ] -1 Do not release this package because because...
> > >>>>>>
> > >>>>>>
> > >>>>>> Thank you,
> > >>>>>> Adina
> > >>>>>>
> > >>>>>> --
> > >>>>>> Dr. Adina Crainiceanu
> > >>>>>> Associate Professor
> > >>>>>> Computer Science Department
> > >>>>>> United States Naval Academy
> > >>>>>> 410-293-6822 <(410)%20293-6822> [email protected]
> > >>>>>> https://urldefense.proofpoint.com/v2/url?u=http-3A__www.usna.ed
> > >>>>>> u_Users_cs_adina_&d=DwIFaQ&c=Nwf-pp4xtYRe0sCRVM8_LWH54joYF7EKmr
> > >>>>>> YIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=rJpSv
> > >>>>>> ZFMvmPo3jFa4QbcgANvKeOpOH_KwouvUS_c3Ek&s=k2lvwUrsGftFSmgax2mkh_
> > >>>>>> eQUzsqqmMveSzRAd8Z2PM&e=
> > >>>>>>
> > >>>>>>
> > >>>>>
> > >>>>>
> > >>>
> > >>
> >
>
>
>
> --
> Dr. Adina Crainiceanu
> Associate Professor
> Computer Science Department
> United States Naval Academy
> 410-293-6822
> [email protected]
> https://urldefense.proofpoint.com/v2/url?u=http-3A__www.
> usna.edu_Users_cs_adina_&d=DwIFaQ&c=Nwf-pp4xtYRe0sCRVM8_
> LWH54joYF7EKmrYIdfxIq10&r=vuVdzYC2kksVZR5STiFwDpzJ7CrMHCgeo_4WXTD0qo8&m=
> rJpSvZFMvmPo3jFa4QbcgANvKeOpOH_KwouvUS_c3Ek&s=k2lvwUrsGftFSmgax2mkh_
> eQUzsqqmMveSzRAd8Z2PM&e=
>
--
Dr. Adina Crainiceanu
Associate Professor
Computer Science Department
United States Naval Academy
410-293-6822
[email protected]
http://www.usna.edu/Users/cs/adina/
