[RESULT][VOTE] Apache StreamPipes 0.67.0 (incubating) RC2 release

2020-10-13 Thread Philipp Zehnder 
Hi all,

the vote is now closed after the 72h period has passed.
Result (as per [1], only votes from IPMC members are binding):
The vote for Core and Extensions PASSES with 6 votes +1 (5 binding/1 
non-binding) and no -1.

+1 (binding)
Patrick Wiener
Johannes Tex
Dominik Riemer
Philipp Zehnder
Christofer Dutz

+1 (non-binding)
Grainier Perera

The vote for the Installer FAILS because it still contains the .git directory.
I will create a new rc3 for the installer and start a new vote.
Once this vote is over, I will bring to the IPMC to get final approval for 
release.

The vote thread can be found here [2].

Philipp


[1] https://incubator.apache.org/guides/ppmc.html#ppmc_and_binding_votes 

[2] 
https://lists.apache.org/thread.html/rc1dee7bc8cd71be5fb3d58d7c3030a75ad95f0dc505ed8c040870828%40%3Cdev.streampipes.apache.org%3E

Re: [VOTE] Apache StreamPipes 0.67.0 (incubating) RC2 release

2020-10-11 Thread Christofer Dutz 
Ok ... here my results

Core: +1 (binding)
Extensions: +1 (binding)
Installer: -1 (binding) ... contains ".git" directory

I would say, if you repackage the installer archive, we would only have to do 
an rc3 for that the rest is ok.

Chris


Core: 
---
[OK] Download all staged artifacts under the url specified in the release vote 
email into a directory
[OK] Verify the signature is correct: Additional Apache tutorial on how to 
verify downloads can be found here
[OK] Check if the signature references an Apache email address
[OK] Verify the SHA512 hashes
[OK] Unzip the archive
[OK] Verify the existence of DISCLAIMER, LICENSE, NOTICE, README, RELEASE_NOTES 
files in the extracted source bundle
[OK] Verify the content of DISCLAIMER, LICENSE, NOTICE, README, RELEASE_NOTES 
files in the extracted source bundle
[OK] Verify the staged source README, RELEASE_NOTE files correspond to those in 
the extracted source bundle
[OK] Run RAT externally to ensure there are no surprises
[OK] Search for SNAPSHOT references
[OK] Search for Copyright references, and if they are in headers, make sure 
these files containing them are mentioned in the LICENSE file
[OK] Build the project according to the information in the README.md file

Notes:
- GPG signatures: No trust chain (Think about joining Apache Key-Signing party 
asap ... or if you have a trusted key from your visit in Vegas, use that to 
sign your own key)
- NOTICE: I think it should generally be "inception-year - current year"
- RELEASE_VALIDATION: Actually it's "incubator-streampipes-core" and not just 
"incubator-streampipes"
- The file: 
core/apache-streampipes-0.67.0-incubating/streampipes-code-generation/src/main/resources/pom
 has some strange content refering to fzi repos ...
- Build of "ui" showed: found 28 vulnerabilities (4 low, 16 moderate, 8 high)

Extensions: 
---
[OK] Download all staged artifacts under the url specified in the release vote 
email into a directory
[OK] Verify the signature is correct: Additional Apache tutorial on how to 
verify downloads can be found here
[OK] Check if the signature references an Apache email address
[OK] Verify the SHA512 hashes
[OK] Unzip the archive
[OK] Verify the existence of DISCLAIMER, LICENSE, NOTICE, README, RELEASE_NOTES 
files in the extracted source bundle
[OK] Verify the content of DISCLAIMER, LICENSE, NOTICE, README, RELEASE_NOTES 
files in the extracted source bundle
[OK] Verify the staged source README, RELEASE_NOTE files correspond to those in 
the extracted source bundle
[OK] Run RAT externally to ensure there are no surprises
[OK] Search for SNAPSHOT references
[OK] Search for Copyright references, and if they are in headers, make sure 
these files containing them are mentioned in the LICENSE file
[MINOR] Build the project according to the information in the README.md file

Notes:
- GPG signatures: No trust chain (Think about joining Apache Key-Signing party 
asap ... or if you have a trusted key from your visit in Vegas, use that to 
sign your own key)
- NOTICE: I think it should generally be "inception-year - current year
- RELEASE_VALIDATION: Actually it's "incubator-streampipes-core" and not just 
"incubator-streampipes"
- README: As there doesn't seem to be a node build, do you really need NodeJS + 
NPM?
- Build: If I go into the directory to build the extensions, it will not build, 
as it can't find the parent at the parent directory. Try adding " 
" to the parent declaration
- Build: As the README only refers to "package" and not "install" it shouldn't 
be possible to build the extenstions as they will not find the core modules. 
Perhaps adjust the README to have people run "mvn clean install" instead.

Installer: 
---
[OK] Download all staged artifacts under the url specified in the release vote 
email into a directory
[OK] Verify the signature is correct: Additional Apache tutorial on how to 
verify downloads can be found here
[OK] Check if the signature references an Apache email address
[OK] Verify the SHA512 hashes
[OK] Unzip the archive
[OK] Verify the existence of DISCLAIMER, LICENSE, NOTICE, README, RELEASE_NOTES 
files in the extracted source bundle
[MINOR] Verify the content of DISCLAIMER, LICENSE, NOTICE, README, 
RELEASE_NOTES files in the extracted source bundle
[OK] Verify the staged source README, RELEASE_NOTE files correspond to those in 
the extracted source bundle
[MAJOR] Run RAT externally to ensure there are no surprises
[OK] Search for SNAPSHOT references
[OK] Search for Copyright references, and if they are in headers, make sure 
these files containing them are mentioned in the LICENSE file
[OK] Build the project according to the information in the README.md file

Notes:
- GPG signatures: No trust chain (Think about joining Apache Key-Signing party 
asap ... or if you have a trusted key from

Re: [VOTE] Apache StreamPipes 0.67.0 (incubating) RC2 release

2020-10-08 Thread Christofer Dutz 
I hope to find the time to do the review this weekend.

Starting at my new job did sort of gobble up all free time the last few days.

Chris


Am 08.10.20, 08:25 schrieb "Dominik Riemer" :

Hi Justin,

thanks - we just thought that it might be good to have at least one +1 
binding vote before bringing this to the Incubator list - considering this is 
our first release vote under the standard disclaimer 
Do you recommend to bring the vote to the incubator list now?

Dominik

-Original Message-
From: Justin Mclean  
Sent: Thursday, October 8, 2020 8:11 AM
To: dev@streampipes.apache.org
Subject: Re: [VOTE] Apache StreamPipes 0.67.0 (incubating) RC2 release 

Hi,

On your dev list it’s PPMC votes that count not just mentors.

Thanks,
Justin

RE: [VOTE] Apache StreamPipes 0.67.0 (incubating) RC2 release

2020-10-08 Thread Dominik Riemer 
Hi Justin,

thanks - we just thought that it might be good to have at least one +1 binding 
vote before bringing this to the Incubator list - considering this is our first 
release vote under the standard disclaimer 
Do you recommend to bring the vote to the incubator list now?

Dominik

-Original Message-
From: Justin Mclean  
Sent: Thursday, October 8, 2020 8:11 AM
To: dev@streampipes.apache.org
Subject: Re: [VOTE] Apache StreamPipes 0.67.0 (incubating) RC2 release 

Hi,

On your dev list it’s PPMC votes that count not just mentors.

Thanks,
Justin

Re: [VOTE] Apache StreamPipes 0.67.0 (incubating) RC2 release

2020-10-08 Thread Justin Mclean 
Hi,

On your dev list it’s PPMC votes that count not just mentors.

Thanks,
Justin

Re: [VOTE] Apache StreamPipes 0.67.0 (incubating) RC2 release

2020-10-07 Thread Dominik Riemer 
Hi,

as we are currently missing binding votes, I'd kindly ask if some of other 
mentors could find some time to review and vote on our release candidate?

Thanks!
Dominik

On 2020/09/27 07:26:55, Philipp Zehnder  wrote: 
> Apache StreamPipes (Incubating) 0.67.0 has been staged and it’s time to vote 
> on accepting it for release. 
> If approved, we will seek final release approval from the IPMC. Voting will 
> be open for 72 hours. 
> A minimum of 3 binding +1 votes and more binding +1 than binding -1 are 
> required to pass, but everyone is welcome to vote! 
> 
> Three artifacts are relevant for this vote: 
> 
> incubator-streampipes, staged at [1], available in Nexus at [2], release tag: 
> release/0.67.0, hash for the release tag: 
> ef9ab5cc3ff9a9d39595334586ea61fce84ffa4c
> incubator-streampipes-extensions, staged at [3], release tag: release/0.67.0, 
> hash for the release tag: 0ebbb18bda1f642d0eb65aa112a9d42211f97d48
> incubator-streampipes-installer, staged at [4], release tag: release/0.67.0, 
> hash for the release tag: d87e12c25966c2736fcbbc936b8e4ed74cee0c7c
> 
> Per [5] "Before voting +1, [P]PMC members are required to download the signed 
> source code package, 
> compile it as provided, and test the resulting executable on their own 
> platform, 
> along with also verifying that the package meets the requirements of the ASF 
> policy on releases." 
> 
> A release validation guide is available at [6]. The KEYS file is available at 
> [7] 
> 
> [ ] +1 accept (indicate what you validated - e.g. performed the checklist at 
> the end of [6]) 
> [ ] -1 reject (explanation required) 
> 
> Thanks for taking your time for validating this release!
> 
> 
> [1] 
> https://dist.apache.org/repos/dist/dev/incubator/streampipes/core/0.67.0/r 
> c2
> [2] 
> https://repository.apache.org/content/repositories/orgapachestreampipes-100 
> 8
>  
> [3] 
> https://dist.apache.org/repos/dist/dev/incubator/streampipes/extensions/0.67.0/rc
>  
> 2
>  
> [4] 
> https://dist.apache.org/repos/dist/dev/incubator/streampipes/installer/0.67.0/rc
>  
> 2
>  
> [5] https://www.apache.org/dev/release.html#approving-a-release 
>  
> [6] 
> https://cwiki.apache.org/confluence/display/STREAMPIPES/Validating+a+release 
> 
>  
> [7] https://dist.apache.org/repos/dist/dev/incubator/streampipes/KEYS 
> 
> 
>

Re: [VOTE] Apache StreamPipes 0.67.0 (incubating) RC2 release

2020-09-27 Thread Grainier Perera 
+1 (non-binding)

Environment:

   - os: "mac os x", version: "10.14.6", arch: "x86_64"
   - java: v1.8.0_161-b12
   - mvn: v3.5.4
   - npm: v6.14.4
   - node: v14.3.0
   - docker: v19.03.8, build afacb8b
   - docker-compose: v1.25.5, build 8a1c60f6

Tested:
[OK] Download all staged artifacts under the url specified in the release
vote email (core+extensions+installer)
[OK] Verify the signature is correct (core+extensions+installer)
[OK] Check if the signature references an Apache email address
(core+extensions+installer)
[OK] Verify the SHA512 checksum (core+extensions+installer)
[OK] Unzip the archive (core+extensions+installer)
[OK] Check that disclaimer is present in all release artifacts
(core+extensions+installer)
[OK] Verify the existence of LICENSE, NOTICE, README, RELEASE_NOTES,
RELEASE_VALIDATION files in the extracted source bundle.
(core+extensions+installer)
[OK] Run RAT (core+extensions)
[OK] Search for SNAPSHOT dependencies  (core+extensions+installer)
[OK] Build Backend.
[OK] Build UI.
[OK] Build Extensions.
[OK] Build and Run Test system on Docker.
[OK] Installed some pipeline elements and tested several pipelines based on
Pure JVM.
[OK] Tested Rate Limit PE & UI fix from RC1.

Thanks & Regards,
Grainier Perera.


On Sun, 27 Sep 2020 at 12:56, Philipp Zehnder  wrote:

> Apache StreamPipes (Incubating) 0.67.0 has been staged and it’s time to
> vote on accepting it for release.
> If approved, we will seek final release approval from the IPMC. Voting
> will be open for 72 hours.
> A minimum of 3 binding +1 votes and more binding +1 than binding -1 are
> required to pass, but everyone is welcome to vote!
>
> Three artifacts are relevant for this vote:
>
> incubator-streampipes, staged at [1], available in Nexus at [2], release
> tag: release/0.67.0, hash for the release tag:
> ef9ab5cc3ff9a9d39595334586ea61fce84ffa4c
> incubator-streampipes-extensions, staged at [3], release tag:
> release/0.67.0, hash for the release tag:
> 0ebbb18bda1f642d0eb65aa112a9d42211f97d48
> incubator-streampipes-installer, staged at [4], release tag:
> release/0.67.0, hash for the release tag:
> d87e12c25966c2736fcbbc936b8e4ed74cee0c7c
>
> Per [5] "Before voting +1, [P]PMC members are required to download the
> signed source code package,
> compile it as provided, and test the resulting executable on their own
> platform,
> along with also verifying that the package meets the requirements of the
> ASF policy on releases."
>
> A release validation guide is available at [6]. The KEYS file is available
> at [7]
>
> [ ] +1 accept (indicate what you validated - e.g. performed the checklist
> at the end of [6])
> [ ] -1 reject (explanation required)
>
> Thanks for taking your time for validating this release!
>
>
> [1]
> https://dist.apache.org/repos/dist/dev/incubator/streampipes/core/0.67.0/r
> <
> https://dist.apache.org/repos/dist/dev/incubator/streampipes/core/0.67.0/r
> >c2
> [2]
> https://repository.apache.org/content/repositories/orgapachestreampipes-100
> <
> https://repository.apache.org/content/repositories/orgapachestreampipes-100>8
>
> [3]
> https://dist.apache.org/repos/dist/dev/incubator/streampipes/extensions/0.67.0/rc
> <
> https://dist.apache.org/repos/dist/dev/incubator/streampipes/extensions/0.67.0/rc>2
>
> [4]
> https://dist.apache.org/repos/dist/dev/incubator/streampipes/installer/0.67.0/rc
> <
> https://dist.apache.org/repos/dist/dev/incubator/streampipes/installer/0.67.0/rc>2
>
> [5] https://www.apache.org/dev/release.html#approving-a-release <
> https://www.apache.org/dev/release.html#approving-a-release>
> [6]
> https://cwiki.apache.org/confluence/display/STREAMPIPES/Validating+a+release
> <
> https://cwiki.apache.org/confluence/display/STREAMPIPES/Validating+a+release>
>
> [7] https://dist.apache.org/repos/dist/dev/incubator/streampipes/KEYS <
> https://dist.apache.org/repos/dist/dev/incubator/streampipes/KEYS>
>
>

Re: [VOTE] Apache StreamPipes 0.67.0 (incubating) RC2 release

2020-09-27 Thread Patrick Wiener 
+1 (non-binding)

my environment:

- os: macOS 10.15.6, x86_64
- java: v1.8.0_242-b08 (adoptopenjdk-8-openj9.jdk)
- mvn: v3.6.3
- npm: v6.14.4
- node: v13.13.0
- docker: v19.03.12, build fec3683
- docker-compose: v1.27.2, build 18f557f9

I checked:

[OK] Download all staged artifacts under the url specified in the release vote 
email (core+extensions+installer)
[OK] Verify the signature is correct (core+extensions+installer)
[OK] Check if the signature references an Apache email address 
(core+extensions+installer)
[OK] Verify the SHA512 checksum (core+extensions+installer)
[OK] Unzip the archive (core+extensions+installer)
[OK] Check that disclaimer is present in all release artifacts 
(core+extensions+installer)
[OK] Verify the existence of LICENSE, NOTICE, README, RELEASE_NOTES, 
RELEASE_VALIDATION files in the extracted source bundle. 
(core+extensions+installer)
[OK] Run RAT (core+extensions)
[OK] Search for SNAPSHOT dependencies  (core+extensions+installer)
[OK] Build Backend
[OK] Build UI
[OK] Build Extensions
[OK] Build and Run Test system on Docker
[OK] Installed Flink-based pipeline elements and tested several pipelines based 
on Flink and pure JVM


Cheers,
Patrick

> Am 27.09.2020 um 08:26 schrieb Philipp Zehnder :
> 
> Apache StreamPipes (Incubating) 0.67.0 has been staged and it’s time to vote 
> on accepting it for release. 
> If approved, we will seek final release approval from the IPMC. Voting will 
> be open for 72 hours. 
> A minimum of 3 binding +1 votes and more binding +1 than binding -1 are 
> required to pass, but everyone is welcome to vote! 
> 
> Three artifacts are relevant for this vote: 
> 
> incubator-streampipes, staged at [1], available in Nexus at [2], release tag: 
> release/0.67.0, hash for the release tag: 
> ef9ab5cc3ff9a9d39595334586ea61fce84ffa4c
> incubator-streampipes-extensions, staged at [3], release tag: release/0.67.0, 
> hash for the release tag: 0ebbb18bda1f642d0eb65aa112a9d42211f97d48
> incubator-streampipes-installer, staged at [4], release tag: release/0.67.0, 
> hash for the release tag: d87e12c25966c2736fcbbc936b8e4ed74cee0c7c
> 
> Per [5] "Before voting +1, [P]PMC members are required to download the signed 
> source code package, 
> compile it as provided, and test the resulting executable on their own 
> platform, 
> along with also verifying that the package meets the requirements of the ASF 
> policy on releases." 
> 
> A release validation guide is available at [6]. The KEYS file is available at 
> [7] 
> 
> [ ] +1 accept (indicate what you validated - e.g. performed the checklist at 
> the end of [6]) 
> [ ] -1 reject (explanation required) 
> 
> Thanks for taking your time for validating this release!
> 
> 
> [1] 
> https://dist.apache.org/repos/dist/dev/incubator/streampipes/core/0.67.0/r 
> c2
> [2] 
> https://repository.apache.org/content/repositories/orgapachestreampipes-100 
> 8
>  
> [3] 
> https://dist.apache.org/repos/dist/dev/incubator/streampipes/extensions/0.67.0/rc
>  
> 2
>  
> [4] 
> https://dist.apache.org/repos/dist/dev/incubator/streampipes/installer/0.67.0/rc
>  
> 2
>  
> [5] https://www.apache.org/dev/release.html#approving-a-release 
>  
> [6] 
> https://cwiki.apache.org/confluence/display/STREAMPIPES/Validating+a+release 
> 
>  
> [7] https://dist.apache.org/repos/dist/dev/incubator/streampipes/KEYS 
> 
>

[VOTE] Apache StreamPipes 0.67.0 (incubating) RC2 release

2020-09-27 Thread Philipp Zehnder 
Apache StreamPipes (Incubating) 0.67.0 has been staged and it’s time to vote on 
accepting it for release. 
If approved, we will seek final release approval from the IPMC. Voting will be 
open for 72 hours. 
A minimum of 3 binding +1 votes and more binding +1 than binding -1 are 
required to pass, but everyone is welcome to vote! 

Three artifacts are relevant for this vote: 

incubator-streampipes, staged at [1], available in Nexus at [2], release tag: 
release/0.67.0, hash for the release tag: 
ef9ab5cc3ff9a9d39595334586ea61fce84ffa4c
incubator-streampipes-extensions, staged at [3], release tag: release/0.67.0, 
hash for the release tag: 0ebbb18bda1f642d0eb65aa112a9d42211f97d48
incubator-streampipes-installer, staged at [4], release tag: release/0.67.0, 
hash for the release tag: d87e12c25966c2736fcbbc936b8e4ed74cee0c7c

Per [5] "Before voting +1, [P]PMC members are required to download the signed 
source code package, 
compile it as provided, and test the resulting executable on their own 
platform, 
along with also verifying that the package meets the requirements of the ASF 
policy on releases." 

A release validation guide is available at [6]. The KEYS file is available at 
[7] 

[ ] +1 accept (indicate what you validated - e.g. performed the checklist at 
the end of [6]) 
[ ] -1 reject (explanation required) 

Thanks for taking your time for validating this release!


[1] https://dist.apache.org/repos/dist/dev/incubator/streampipes/core/0.67.0/r 
c2
[2] https://repository.apache.org/content/repositories/orgapachestreampipes-100 
8 
[3] 
https://dist.apache.org/repos/dist/dev/incubator/streampipes/extensions/0.67.0/rc
 
2
 
[4] 
https://dist.apache.org/repos/dist/dev/incubator/streampipes/installer/0.67.0/rc
 
2
 
[5] https://www.apache.org/dev/release.html#approving-a-release 
 
[6] 
https://cwiki.apache.org/confluence/display/STREAMPIPES/Validating+a+release 
 
[7] https://dist.apache.org/repos/dist/dev/incubator/streampipes/KEYS