-1 (binding) I found a release-blocking issue in the Maven staging repository `orgapachefesod-1037`.
The staged `fesod-parent-2.1.0-incubating-source-release.zip` contains release-manager working directories and generated release artifacts that are not part of the source tree, including `dist/dist-rc2/`, `dist/remote-check/`, `dist/rc2-eval/`, staging deployment logs, and `svn-rc2-wc/`. It embeds the voted source tarball three times, together with its signature, checksum, and a KEYS file. Compared with tag `2.1.0-incubating-rc2`, the ZIP has 864 extra files and omits 22 tagged files. Please clean the source-release assembly, recreate the Maven staging repository, and start a new RC vote. For completeness, the primary source artifact itself passed the checks I ran: SHA-512 and signature verification (signing fingerprint `CCCFA0EAA4BFB4A441D4D770FDD68C1D3497B880`), exact match to tag `2.1.0-incubating-rc2` at `1cd6e891316cfea2c49028091be9d6ee0409cd1e`, archive safety, LICENSE/NOTICE/DISCLAIMER, RAT and Hawkeye license-header checks, and `./mvnw clean install -DskipTests`. --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
