I checked again the release source package with a clean folder.

unzip kerby-all-1.0.0-RC1-source-release.zip

In it there is a new file DEPENDENCIES that doesn't have the license info so 
failed the rat check. Maybe we just remove it and update the package?

So the good thing is we don't have to fix codes. Sorry for my bad previous 
finding.

No other issue was found. 

Below is just a simple fix to get rid of a warning. I don't think it's a must 
to have.

diff --git a/benchmark/pom.xml b/benchmark/pom.xml index ace11bf..1c43ba4 100644
--- a/benchmark/pom.xml
+++ b/benchmark/pom.xml
@@ -221,6 +221,7 @@
           <plugin>
             <groupId>org.codehaus.mojo</groupId>
             <artifactId>exec-maven-plugin</artifactId>
+            <version>1.4.0</version>
             <executions>
               <execution>
                 <id>run-benchmarks</id>

Regards,
Kai

-----Original Message-----
From: Zheng, Kai [mailto:[email protected]] 
Sent: Sunday, September 06, 2015 8:33 PM
To: [email protected]
Subject: RE: [VOTE] Release Apache Kerby 1.0.0-RC1

Ah see. Sorry I have to rerun the check in a total clean folder and hope it's 
just caused by dirty workspace. Will see the result soon. 

Regards,
Kai

-----Original Message-----
From: Emmanuel Lécharny [mailto:[email protected]] 
Sent: Sunday, September 06, 2015 8:30 PM
To: [email protected]
Subject: Re: [VOTE] Release Apache Kerby 1.0.0-RC1

Also keep in mind that this first release was mainly about checking that the 
process is ok. That we have errors andbump in the road is pretty normal. The 
good part : I was able to run the process up to teh point we can get a vote 
running.

Re-cutting a release just takes a couple of hours, most of which is about 
waiting for the commands to complete, while I can do something else on my 
computer, so it's not too demanding.

Reply via email to