-1 (non-binding)
I verified the source and binary artifacts, checksums, signatures, Git tag,
Maven staging repository, source headers, CI runs, and source build.
The following release-blocking issues need to be fixed:
1. The NOTICE files contain:
"Copyright 2023-2025 The Apache Software Foundation"
Since this release candidate is distributed in 2026, the copyright year
should cover 2026.
2. I checked 45 Seata 2.7.0 JAR instances, representing 44 unique JAR
filenames. All of them contain META-INF/LICENSE and META-INF/NOTICE, but
their NOTICE files use:
"Copyright 2026 Apache"
The copyright owner should be:
"Copyright 2026 The Apache Software Foundation"
These NOTICE files are generated by the Apache JAR resource bundle. Its
template uses project.organization.name as the copyright owner. The current
value in build/pom.xml is:
<organization>
<name>Apache</name>
<url>https://github.com/apache</url>
</organization>
To fix this, update it to:
<organization>
<name>The Apache Software Foundation</name>
<url>https://www.apache.org/</url>
</organization>
Other checks passed:
- The SHA-512 checksums match.
- Both distribution signatures are valid and use the fingerprint:
8BE2156C95F607A13D085A8BA9D677D35D08040F
- The source archive matches tag v2.7.0 at:
49fef81747c3f7afd9ec0ae054e5a4aece83e5ac
- The license header check reports 0 invalid files.
- The source build succeeds with JDK 8 and Maven Wrapper 3.9.5.
- All three referenced CI runs succeeded for the release commit.
- The Maven staging repository is closed, and the sampled artifacts have
valid signatures.
Please fix the legal files and create a new release candidate.
On Thu, Jul 30, 2026 at 9:37 PM Minghua Xie <[email protected]> wrote:
>
> Hi Seata Community,
>
> This is a call for vote to release Apache Seata(incubating) v2.7.0.
>
> The release
> candidates:https://dist.apache.org/repos/dist/dev/incubator/seata/2.7.0/
>
> The staging
> repo:https://repository.apache.org/content/repositories/orgapacheseata-1269/
>
> Git tag for the
> release:https://github.com/apache/incubator-seata/releases/tag/v2.7.0
>
> Hash for the release tag: 49fef81747c3f7afd9ec0ae054e5a4aece83e5ac
>
> Release Notes:https://github.com/apache/incubator-seata/releases/tag/v2.7.0
>
> The artifacts have been signed with Key [ A9D677D35D08040F ], corresponding
> to [ [email protected] ]
> which can be found in the keys
> file:https://downloads.apache.org/incubator/seata/KEYS
>
> Build Environment: JDK 8+, Apache Maven 3.6.0+.
> ./mvnw clean package -DskipTests=true
>
> CI Test Workflow:
> https://github.com/apache/incubator-seata/actions/runs/30158257627
> https://github.com/apache/incubator-seata/actions/runs/30158257629
> https://github.com/apache/incubator-seata/actions/runs/30158257625
>
> The vote will be open for at least 72 hours.
>
> Please vote accordingly:
>
> [ ] +1 approve
> [ ] +0 no opinion
> [ ] -1 disapprove with the reason
>
> Checklist for reference:
>
> [ ] Download links are valid.
> [ ] Checksums and signatures.
> [ ] LICENSE/NOTICE files exist
> [ ] No unexpected binary files
> [ ] All source files have ASF headers
> [ ] Can compile from source
>
> To learn more about Apache Seata , please see https://seata.apache.org/
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
