The license file in the binary (which also comes from the src) doesn't match the jar version:
-rw-r--r-- 1 phunt staff 327135 Jan 16 23:54 commons-io-2.11.0.jar -rw-r--r-- 1 phunt staff 11359 Feb 25 00:47 commons-io-2.7.LICENSE.txt Is this something you want to fix, or not a release blocker, I can't remember how we treat this... Patrick On Fri, Feb 25, 2022 at 2:32 AM Enrico Olivelli <eolive...@gmail.com> wrote: > This is the second release candidate for 3.8.0. > > It is a major release and it introduces a lot of new features, most > notably: > - Migration of the logging framework from Apache Log4j1 to LogBack > - Read Key/trust store password from file (and other security related > improvements) > - Restored support for OSGI > - Reduced the performance impact of Prometheus metrics > - Official support for JDK17 (all tests are passing) > - Updates to all the third party dependencies to get rid of every known > CVE. > > The full release notes is available at: > > > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310801&version=12349587 > > *** Please download, test and vote by February 28th 2022, 23:59 UTC+0. *** > > Source files: > > https://dist.apache.org/repos/dist/dev/zookeeper/zookeeper-3.8.0-candidate-1/ > > Maven staging repo: > https://repository.apache.org/content/repositories/orgapachezookeeper-1073/ > > The release candidate tag in git to be voted upon: release-3.8.0-1 > https://github.com/apache/zookeeper/tree/release-3.8.0-1 > > ZooKeeper's KEYS file containing PGP keys we use to sign the release: > https://www.apache.org/dist/zookeeper/KEYS > > The staging version of the website is: > > https://dist.apache.org/repos/dist/dev/zookeeper/zookeeper-3.8.0-candidate-1/website/index.html > > > Should we release this candidate? > Enrico Olivelli >