kou commented on PR #41131: URL: https://github.com/apache/arrow/pull/41131#issuecomment-2148742574
> I think we still need to wait on INFRA to approve [INFRA-25708](https://issues.apache.org/jira/browse/INFRA-25708) before we can merge this PR. I don't think that we need an approval from INFRA for this PR because this PR doesn't use automated signing. We sill sign manually in `dev/release/07-matlab-upload.sh`. It's same as the current our release process for our artifacts including the source archive, `.deb`/`.rpm` and so on. > To clarify, do you think we could ask INFRA for a signing key for _just_ the source tarballs? I think so. I think that we can expand automated signing targets step by step. For example, we enable automated signing only for the source archive and then enable it for `.deb` too and so on. > I was under the impression INFRA would not give out a signing key to use only for signing the source archive, but I may be mistaken. Oh, I hadn't thought of that. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
