Hello everyone, This is the vote to approve Apache SDAP release candidate rc1 for version 1.4.0.
Changes made between previous candidate (rc0) and this one (rc1) are as follows: - Restricted Collection Manager dependency version (yarl<=1.9.4) as newer versions were causing errors on import - Some miscellaneous edits (fixed typos in docs, updated test requirements) in Nexus Instructions for building docker images from source can be found here: https://sdap-nexus.readthedocs.io/en/release-1.4.0/build.html Instructions for evaluating the images can be found here: https://sdap-nexus.readthedocs.io/en/release-1.4.0/release.html Instructions for deploying locally to test can be found here: https://sdap-nexus.readthedocs.io/en/release-1.4.0/quickstart.html Instructions for more thorough testing can be found here: https://sdap-nexus.readthedocs.io/en/release-1.4.0/test.html The release files, including signatures, digests, etc. can be found at: https://dist.apache.org/repos/dist/dev/sdap/apache-sdap-1.4.0-rc1/ For convenience, the tags we built the release artifacts to be voted on from are: - nexusproto: - URL: https://github.com/apache/sdap-nexusproto/tree/1.4.0-rc1 - Commit: 78a29ac6ee477e09716944bdc23f4db4d421590a - ingester: - URL: https://github.com/apache/sdap-ingester/tree/1.4.0-rc1 - Commit: f9191b1612ef157799db87257563aa92a4bcc1d7 - nexus: - URL: https://github.com/apache/sdap-nexus/tree/1.4.0-rc1 - Commit: c85b9d7e667ab37e220d6e0d37051799dbc93871 For verification, the hashes (SHA-512) of the .tar.gz artifacts we are voting on are as follows: apache-sdap-ingester-1.4.0-src.tar.gz: 7c6f38c94feb820995f0e9bd8b77bad92b4ded0990488e5a413ff229286fd0e944d8f677c27436f949bfee330bfa576cf64e6b4760dda62e12e20eb9806900a2 apache-sdap-nexus-1.4.0-src.tar.gz: 24925744297187d232c994913bb33249bf256597eaf1685e23aee0c0128ca244ada8a7049731ebe581f403ca49c54e19a087c22ed7ed00552950a7e28a734004 apache-sdap-nexusproto-1.4.0-src.tar.gz: 37b6befe444a6dd9e5bc008e48fcdbbb3293836b76c5897411264ef9cf7cc33f39bbf5a8b1b6685b8320960150b5fe0ad189103e2f4e098d8921d296cbf5fcec The PGP key used to sign this release can be found in: https://downloads.apache.org/sdap/KEYS Please vote on releasing this package as Apache SDAP 1.4.0. The vote is open for at least 72 hours and passes if at least 3 +1 PMC votes are cast. PLEASE NOTE: Do not reply with a vote from your work email as it can mangle the links. To vote, go to https://lists.apache.org/list.html?dev@sdap.apache.org, log in and send your reply from there. [ ] +1 Release this package as Apache SDAP 1.4.0 [ ] +0 No opinion [ ] -1 Do not release this package because ... Thank you, Riley Kuttruff