Re: 0.9.2 Release

[Justin Mclean]

Hi,

> The nightly builds have been SHA-512 since Feb 12, so yes 0.9.2 will be
> SHA-512 instead of MD5.

Good to hear the change has been made. [1]  However I noticed that the 
extension on the hash file is required to be “.sha512” not “.SHA-512”. [2]  I 
believe this is to do with how the hash files and mirror system interact. [3] 
(i.e. you need check the hashes directly at Apache not from the mirrors)

>  This is just more FUD from Justin.

I’m sorry you took it that way, there is certainly no intention of that. As I 
said that not everyone may not be aware of the changes to policy in this area 
or following the lists this was discussed on. As this is a public mailing list 
it would help you to be a little more respectful in your style of communication.

Thanks,
Justin

1. http://apacheroyaleci.westus2.cloudapp.azure.com:8080/job/royale-asjs/ 

2. https://www.apache.org/dev/release-distribution#sigs-and-sums 

3. https://www.apache.org/info/verification.html#Sign 

Re: 0.9.2 Release

[Dave Fisher]

Thank you sir!

> On Mar 2, 2018, at 8:36 AM, Alex Harui  wrote:
> 
> The nightly builds have been SHA-512 since Feb 12, so yes 0.9.2 will be
> SHA-512 instead of MD5.  This is just more FUD from Justin.
> 
> -Alex
> 
> On 3/2/18, 8:20 AM, "Dave Fisher"  wrote:
> 
>> Hi Justin,
>> 
>> 
>> 
>>> Also not everyone may be aware are some new considerations around
>>> hashes for releases. [2] But it is easily to comply, compared to the
>>> last release you would need to add a SHA hash file or replace the
>>> existing MD5 file with a SHA file.
>> 
>> (a) Alex is aware.
>> (b) The policy just officially changed this week. I don’t think that
>> instant compliance is expected. Henk is watching - everyone can look here
>> to see how all the projects stack up. [1]
>> 
>> Alex - are you waiting for the next release to make the SHA changes?
>> 
>> Regards,
>> Dave
>> 
>> 
>> 
>> [1] http://checker.apache.org
>> 
>>> 2. https://www.apache.org/dev/release-distribution#sigs-and-sums
>> 
> 



signature.asc
Description: Message signed with OpenPGP

Re: 0.9.2 Release

[Dave Fisher]

Hi Justin,



> Also not everyone may be aware are some new considerations around hashes for 
> releases. [2] But it is easily to comply, compared to the last release you 
> would need to add a SHA hash file or replace the existing MD5 file with a SHA 
> file.

(a) Alex is aware.
(b) The policy just officially changed this week. I don’t think that instant 
compliance is expected. Henk is watching - everyone can look here to see how 
all the projects stack up. [1]

Alex - are you waiting for the next release to make the SHA changes?

Regards,
Dave



[1] http://checker.apache.org

> 2. https://www.apache.org/dev/release-distribution#sigs-and-sums



signature.asc
Description: Message signed with OpenPGP

Re: 0.9.2 Release

[OmPrakash Muppirala]

On Mar 2, 2018 5:33 AM, "Justin Mclean"  wrote:

Hi,

> I don’t know what the text in the LICENSE file means because the data
does not seem to be the same. Is the LICENSE file out of date?

Perhaps but unlikely as the URL in the LICENSE was changed a few weeks ago
[1]. I’d guess that perhaps the URL in the LICENSE was changed but the
change to the data wasn’t checked in??


Yes, that was my mistake.  I will be fixing this up soon.

Thanks,
Om


Thanks,
Justin

1. https://github.com/apache/royale-asjs/commit/
59f83f7c65ef0d393474f7e65abd0b4759e3648b#diff-9879d6db96fd29134fc802214163b9
5a

Re: 0.9.2 Release

[Justin Mclean]

Hi,

> I don’t know what the text in the LICENSE file means because the data does 
> not seem to be the same. Is the LICENSE file out of date?

Perhaps but unlikely as the URL in the LICENSE was changed a few weeks ago [1]. 
I’d guess that perhaps the URL in the LICENSE was changed but the change to the 
data wasn’t checked in??

Thanks,
Justin

1. 
https://github.com/apache/royale-asjs/commit/59f83f7c65ef0d393474f7e65abd0b4759e3648b#diff-9879d6db96fd29134fc802214163b95a

Re: 0.9.2 Release

[Harbs]

OK. I did not notice that.

I don’t know what the text in the LICENSE file means because the data does not 
seem to be the same. Is the LICENSE file out of date?

Om, can you shed some light on this?

Thanks,
Harbs

> On Mar 2, 2018, at 2:56 PM, Justin Mclean  wrote:
> 
> Hi,
> 
>> I have no idea why you are assuming the data in MapCoords.as comes from 
>> https://commons.wikimedia.org/wiki/File:Blank_US_map_1860.svg 
>> 
> 
> Because the current LICENSE file mentions 
> https://upload.wikimedia.org/wikipedia/commons/5/59/Blank_US_map_1860.svg as 
> the source and https://commons.wikimedia.org/wiki/File:Blank_US_map_1860.svg 
> links to 
> https://upload.wikimedia.org/wikipedia/commons/5/59/Blank_US_map_1860.svg. 
> 
> Alex also raised it as a possible licensing issue in the same thread.
> 
> Thanks,
> Justin
> 

Re: 0.9.2 Release

[Harbs]

I have no idea why you are assuming the data in MapCoords.as comes from 
https://commons.wikimedia.org/wiki/File:Blank_US_map_1860.svg 


The data strings are different.

Alex already mentioned SHA.

Thanks,
Harbs

> On Mar 2, 2018, at 9:59 AM, Justin Mclean  wrote:
> 
> Hi,
> 
> AFAIK there’s still an outstanding license issue [1]. The license [3] links 
> to this [4] which doesn't look compatible with the Apache 2.0 license.
> 
> Also not everyone may be aware are some new considerations around hashes for 
> releases. [2] But it is easily to comply, compared to the last release you 
> would need to add a SHA hash file or replace the existing MD5 file with a SHA 
> file.
> 
> Thanks,
> Justin
> 
> 1. 
> https://lists.apache.org/thread.html/a23ba2777a6b2a279597a85467c30da312d765f766e7d0132671de89@%3Ccommits.royale.apache.org%3E
> 2. https://www.apache.org/dev/release-distribution#sigs-and-sums
> 3. https://github.com/apache/royale-asjs/blob/develop/LICENSE
> 4. https://commons.wikimedia.org/wiki/File:Blank_US_map_1860.svg

Re: 0.9.2 Release

[Justin Mclean]

Hi,

AFAIK there’s still an outstanding license issue [1]. The license [3] links to 
this [4] which doesn't look compatible with the Apache 2.0 license.

Also not everyone may be aware are some new considerations around hashes for 
releases. [2] But it is easily to comply, compared to the last release you 
would need to add a SHA hash file or replace the existing MD5 file with a SHA 
file.

Thanks,
Justin

1. 
https://lists.apache.org/thread.html/a23ba2777a6b2a279597a85467c30da312d765f766e7d0132671de89@%3Ccommits.royale.apache.org%3E
2. https://www.apache.org/dev/release-distribution#sigs-and-sums
3. https://github.com/apache/royale-asjs/blob/develop/LICENSE
4. https://commons.wikimedia.org/wiki/File:Blank_US_map_1860.svg

Re: 0.9.2 Release

[Piotr Zarzycki]

We are almost good with the solution in case of computation. I just need go
through all the components and apply it. Not sure if I will do this today.


2018-03-02 8:15 GMT+01:00 Alex Harui :

> What else needs to be done for MDL?
>
> It is end of Thursday here, so no way I'm going to start the release today.
>
> We need to make sure the RELEASE_NOTES are useful too.
>
> -Alex
>
> On 3/1/18, 10:59 PM, "Piotr Zarzycki"  wrote:
>
> >I thought that I will get done with MDL stuff before you cut that release,
> >but if you want got ahead!
> >
> >Thanks, Piotr
> >
> >2018-03-02 7:55 GMT+01:00 Alex Harui :
> >
> >> It is March.  I've finished the infrastructural tasks I wanted to get
> >> done.  Before I get into the emulation components, I want to cut this
> >> release.  I'm going to try to do it on Windows to see if the scripts
> >>work
> >> there.
> >>
> >> Thoughts?
> >> -Alex
> >>
> >>
> >
> >
> >--
> >
> >Piotr Zarzycki
> >
> >Patreon:
> >*https://na01.safelinks.protection.outlook.com/?url=
> https%3A%2F%2Fwww.patr
> >eon.com%2Fpiotrzarzycki=02%7C01%7Caharui%40adobe.com%
> 7Cf7eb84181b6f40
> >de929408d5800b3044%7Cfa7b1b5a7b34438794aed2c178de
> cee1%7C0%7C0%7C6365557079
> >02325721=yo04BzCBEKnkPNCyeGosHTbJWEKbzX
> yw9%2BEVUzBF4b4%3D=0
> > https%3A%2F%2Fwww.patr
> >eon.com%2Fpiotrzarzycki=02%7C01%7Caharui%40adobe.com%
> 7Cf7eb84181b6f40
> >de929408d5800b3044%7Cfa7b1b5a7b34438794aed2c178de
> cee1%7C0%7C0%7C6365557079
> >02325721=yo04BzCBEKnkPNCyeGosHTbJWEKbzX
> yw9%2BEVUzBF4b4%3D=0
> >>*
>
>


-- 

Piotr Zarzycki

Patreon: *https://www.patreon.com/piotrzarzycki
*

Re: 0.9.2 Release

[Alex Harui]

What else needs to be done for MDL?

It is end of Thursday here, so no way I'm going to start the release today.

We need to make sure the RELEASE_NOTES are useful too.

-Alex

On 3/1/18, 10:59 PM, "Piotr Zarzycki"  wrote:

>I thought that I will get done with MDL stuff before you cut that release,
>but if you want got ahead!
>
>Thanks, Piotr
>
>2018-03-02 7:55 GMT+01:00 Alex Harui :
>
>> It is March.  I've finished the infrastructural tasks I wanted to get
>> done.  Before I get into the emulation components, I want to cut this
>> release.  I'm going to try to do it on Windows to see if the scripts
>>work
>> there.
>>
>> Thoughts?
>> -Alex
>>
>>
>
>
>-- 
>
>Piotr Zarzycki
>
>Patreon: 
>*https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.patr
>eon.com%2Fpiotrzarzycki=02%7C01%7Caharui%40adobe.com%7Cf7eb84181b6f40
>de929408d5800b3044%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C6365557079
>02325721=yo04BzCBEKnkPNCyeGosHTbJWEKbzXyw9%2BEVUzBF4b4%3D=0
>eon.com%2Fpiotrzarzycki=02%7C01%7Caharui%40adobe.com%7Cf7eb84181b6f40
>de929408d5800b3044%7Cfa7b1b5a7b34438794aed2c178decee1%7C0%7C0%7C6365557079
>02325721=yo04BzCBEKnkPNCyeGosHTbJWEKbzXyw9%2BEVUzBF4b4%3D=0
>>*

Re: 0.9.2 Release

[Piotr Zarzycki]

I thought that I will get done with MDL stuff before you cut that release,
but if you want got ahead!

Thanks, Piotr

2018-03-02 7:55 GMT+01:00 Alex Harui :

> It is March.  I've finished the infrastructural tasks I wanted to get
> done.  Before I get into the emulation components, I want to cut this
> release.  I'm going to try to do it on Windows to see if the scripts work
> there.
>
> Thoughts?
> -Alex
>
>


-- 

Piotr Zarzycki

Patreon: *https://www.patreon.com/piotrzarzycki
*