I have to agree with Phil on this. If the source release contains files
that shouldn't be there, it's a -1.  Sorry Anatole :-(

John

On Tue, Apr 5, 2016 at 7:10 PM Anatole Tresch <[email protected]> wrote:

> 1) The files are generated as part of the distribution module. The maven
> GPG plugin calculates the hashes. I will check the sums (they should match
> the ones cheked by nexus)...
> 2) I have seen the issue with the backup poms. I added an exclusion rule to
> the dist. Background was, that I had issues with the release plugin and
> checked out, tagged and deployed the release part manually. Obviously the
> source distribution has taken up these backup files ;(
> 3) The release guide is somehow work in progress. I would not rebuild
> anything just to update the release guide. This can be done at any time as
> well and updates on the site using site:deploy...
>
> 2016-04-05 23:58 GMT+02:00 P. Ottlinger <[email protected]>:
>
> > Hi,
> >
> > Anataloe thanks for your steady work!
> >
> > Am 05.04.2016 um 21:49 schrieb Anatole Tresch:
> > >
> > >     ------------------------------------------------
> > >     [ ] +1 for community members who have reviewed the bits
> > >     [ ] +0
> > >     [ ] -1 for fatal flaws that should cause these bits not to be
> > > released, and why..............
> > >     ------------------------------------------------
> >
> > MD5HASHES
> > While clicking through the artifacts I wasn't able to verify the md5sums:
> >
> > $ md5sum apache-tamaya-0.2-incubating-distribution-src.tar.gz
> > 3d6f68a118d792bd4fbbcbb5af7893bb
> > apache-tamaya-0.2-incubating-distribution-src.tar.gz
> >
> > $ wget
> >
> >
> https://dist.apache.org/repos/dist/dev/incubator/tamaya/0.2-incubating/apache-tamaya-0.2-incubating-distribution-src.tar.gz.md5
> >
> > $ cat apache-tamaya-0.2-incubating-distribution-src.tar.gz.md5
> > a6d1ec4ae240f963c6f68e20e8385675
> >
> > How were these files generated? Am I doing sth. wrong?
> > Same goes for the binary artifact.
> >
> > SRC-ARTIFACT
> > When I unpacked above artifact I found multiple
> > pom.xml.releaseBackup - should we remove theses files or add it to
> > gitignore?
> >
> > RELEASE-DOCS
> > I assume we should use an example key/password in the documentation on
> > howto perform a release -
> > /docs/release-guide.html
> >
> >
> > Most probably this would lead to a -1 if I were a member of the PMC.
> >
> > I do really like the documentation - in contrast to other projects it
> > seems really useful to me.
> >
> > Cheers & sorry,
> > Phil
> >
> >
>
>
> --
> *Anatole Tresch*
> Java Engineer & Architect, JSR Spec Lead
> Glärnischweg 10
> CH - 8620 Wetzikon
>
> *Switzerland, Europe Zurich, GMT+1*
> *Twitter:  @atsticks*
> *Blogs: **http://javaremarkables.blogspot.ch/
> <http://javaremarkables.blogspot.ch/>*
>
> *Google: atsticksMobile  +41-76 344 62 79*
>

Reply via email to