szehon-ho opened a new pull request, #59811:
URL: https://github.com/apache/spark/pull/59811

   ### What changes were proposed in this pull request?
   
   Update the KEYS link in the generated release vote email and `vote.tmpl` to
   https://dist.apache.org/repos/dist/dev/spark/KEYS. Also describe the file as 
containing
   signing keys rather than signatures.
   
   ### Why are the changes needed?
   
   The [release 
instructions](https://spark.apache.org/release-process.html#update-keys-file-with-your-code-signing-key)
   tell release managers to add their signing keys to the staging KEYS file. 
The release
   copy served at `https://downloads.apache.org/spark/KEYS` is updated during 
finalization,
   after the vote passes. A new release manager's key can therefore be missing 
from the
   file linked in the vote email, preventing voters from verifying the 
candidate with it.
   
   ### Does this PR introduce _any_ user-facing change?
   
   No.
   
   ### How was this patch tested?
   
   - Ran `bash -n dev/create-release/release-build.sh`.
   - Rendered the script's email composition block and `vote.tmpl` with sample 
release
     metadata. Verified both contain the staging KEYS URL and omit the 
downloads URL.
   - Ran `git diff --check`.
   
   No permanent tests were added for this URL and wording change.
   
   ### Was this patch authored or co-authored using generative AI tooling?
   
   Generated-by: Codex (GPT-6)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to