Re: [VOTE] Release Apache Pekko(incubating) Core 1.0.2-RC1
On Wed, Nov 29, 2023 at 5:07 PM PJ Fanning wrote:
>
> Thanks Paul. I'm not sure if the build works on Windows. The CI is
> Linux based. Most developers on the Pekko project use MacOS or Linux
> to build. I'll log an issue in the hope that someone with a Windows
> computer could look at it.
Perhaps in the "building from source" doco, just add a note that the
build has minimal testing on Windows.
> The AddThis license comes from:
> https://github.com/addthis/stream-lib/blob/master/NOTICE.txt
Okay, fair enough. I guess an entity can have any name. :-)
> This was pulled in due to this line:
> https://github.com/apache/incubator-pekko/blob/8fefca1c81e13d089ed8db85f375eb3538089c43/remote/src/main/java/org/apache/pekko/remote/artery/compress/CountMinSketch.java#L27
>
> Which has links to
> https://github.com/addthis/stream-lib/blob/master/src/main/java/com/clearspring/analytics/stream/frequency/CountMinSketch.java
>
>
> On Wed, 29 Nov 2023 at 00:59, Paul King wrote:
> >
> > +1 (binding)
> >
> > [X] Download links are valid.
> > [X] Checksums and signatures.
> > [X] LICENSE/NOTICE files exist
> > I did notice "Copyright 2016 AddThis" in the LICENSE file wrt
> > MurmurHash3, something to fix for the next release?
> > Given the accompanying explanation in the file, I don't see this
> > as a showstopper for this release.
> > [X] No unexpected binary files
> > I didn't do an exhaustive check
> > [X] Source files have ASF headers
> > [-] Can compile from source
> > I ran "sbt compile" and "sbt package" but both had errors. A sample:
> > [error] bnd: Invalid value for Bundle-Version, HEAD+20231129-0950
> > does not match [0-9]{1,9}(\.[0-9]{1,9}(\.[0-9]{1,9}(\.[0-9A-Za-z_-]+)?)?)?
> > [error] java.util.zip.ZipException: duplicate entry:
> > META-INF/MANIFEST.MF
> > ...
> > [error]
> > D:\tmp\pekko102\apache-pekko-1.0.2-incubating-src-20231115\actor\src\main\java\org\apache\pekko\util\Unsafe.java:25:23:
> > not found: value sun
> > [error] public static final sun.misc.Unsafe instance;
> > [error] ^
> > I rarely run sbt, so this could easily be my local setup. I didn't
> > try my linux box. Maybe it would have worked there.
> >
> > I also tested the artifacts in the staging repo with a simple typed
> > actors example in Groovy:
> > https://github.com/paulk-asert/groovy-pekko-gpars/tree/main/src/main/groovy/pekko
> > I used Groovy 4.0.15, the 1.0.2-RC1 artifacts and the Scala 2.13 runtime.
> > It ran without problems.
> >
> > Cheers, Paul.
> >
> > On Sat, Nov 18, 2023 at 11:56 PM PJ Fanning wrote:
> > >
> > > Hello Incubator Community,
> > >
> > > This is a call for a vote to release Apache Pekko(incubating)
> > > Core version 1.0.2-RC1.
> > >
> > > The discussion thread:
> > > https://lists.apache.org/thread/zy84yk5gxp54bkn81ntlj5ps5o2z9w4j
> > >
> > > Pekko Vote Thread
> > > https://lists.apache.org/thread/0ojxypkm650bhk6pf53cp7h8036jgyol
> > >
> > > Pekko Result:
> > > https://lists.apache.org/thread/mh398gtjm751fq4fhss5c0xfwxnvx2xy
> > >
> > > The release candidate:
> > >
> > > https://dist.apache.org/repos/dist/dev/incubator/pekko/1.0.2-RC1/
> > >
> > > This release has been signed with a PGP key, available here:
> > >
> > > https://dist.apache.org/repos/dist/release/incubator/pekko/KEYS
> > >
> > > Git branch for the release:
> > >
> > > https://github.com/apache/incubator-pekko/tree/v1.0.2-RC1
> > > Git commit ID: 58fa510455190bd62d04f92a83c9506a7588d29c
> > >
> > > Release Notes:
> > >
> > > https://nightlies.apache.org/pekko/docs/pekko/1.0/docs/release-notes/index.html#1-0-2
> > >
> > > Please download, verify, and test.
> > >
> > > We have also staged jars in the Apache Nexus Repository. These were
> > > built with the same code
> > > as appears in this Source Release Candidate. We would appreciate if
> > > users could test with these too.
> > > If anyone finds any serious problems with these jars, please also
> > > notify us on this thread.
> > >
> > > https://repository.apache.org/content/groups/staging/org/apache/pekko/
> > >
> > > In sbt, you can add this resolver.
> > >
> > > resolvers += "Apache Pekko Staging" at
> > > "https://repository.apache.org/content/groups/staging;
> > >
> > >
> > > The vote will be left open for at least 72 hours.
> > >
> > > [ ] +1 approve
> > > [ ] +0 no opinion
> > > [ ] -1 disapprove with the reason
> > >
> > > To learn more about Apache Pekko, please see https://pekko.apache.org/
> > >
> > > Checklist for reference:
> > >
> > > [ ] Download links are valid.
> > > [ ] Checksums and signatures.
> > > [ ] LICENSE/NOTICE files exist
> > > [ ] No unexpected binary files
> > > [ ] Source files have ASF headers
> > > [ ] Can compile from source
> > >
> > > To compile from the source, please refer to:
> > >
> > > https://github.com/apache/incubator-pekko/blob/main/README.md#building-from-source
> > >
> > > Some notes about verifying downloads can be found at:
> > >
> > >
[RESULT] [VOTE] Release Apache Pekko(incubating) Core 1.0.2-RC1
The vote carries with 3 +1s (all binding). Vote Thread https://lists.apache.org/thread/8fxdmj1rjw6x6x5p9w09vn5g43wm6lzp Votes Paul King Matthew de Detrich PJ Fanning I will proceed with the release and announcements over the next few days. Thanks to everyone who participated in the development and the review of this release. - To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
Re: [VOTE] Release Apache Pekko(incubating) Core 1.0.2-RC1
Thanks Paul. I'm not sure if the build works on Windows. The CI is
Linux based. Most developers on the Pekko project use MacOS or Linux
to build. I'll log an issue in the hope that someone with a Windows
computer could look at it.
The AddThis license comes from:
https://github.com/addthis/stream-lib/blob/master/NOTICE.txt
This was pulled in due to this line:
https://github.com/apache/incubator-pekko/blob/8fefca1c81e13d089ed8db85f375eb3538089c43/remote/src/main/java/org/apache/pekko/remote/artery/compress/CountMinSketch.java#L27
Which has links to
https://github.com/addthis/stream-lib/blob/master/src/main/java/com/clearspring/analytics/stream/frequency/CountMinSketch.java
On Wed, 29 Nov 2023 at 00:59, Paul King wrote:
>
> +1 (binding)
>
> [X] Download links are valid.
> [X] Checksums and signatures.
> [X] LICENSE/NOTICE files exist
> I did notice "Copyright 2016 AddThis" in the LICENSE file wrt
> MurmurHash3, something to fix for the next release?
> Given the accompanying explanation in the file, I don't see this
> as a showstopper for this release.
> [X] No unexpected binary files
> I didn't do an exhaustive check
> [X] Source files have ASF headers
> [-] Can compile from source
> I ran "sbt compile" and "sbt package" but both had errors. A sample:
> [error] bnd: Invalid value for Bundle-Version, HEAD+20231129-0950
> does not match [0-9]{1,9}(\.[0-9]{1,9}(\.[0-9]{1,9}(\.[0-9A-Za-z_-]+)?)?)?
> [error] java.util.zip.ZipException: duplicate entry: META-INF/MANIFEST.MF
> ...
> [error]
> D:\tmp\pekko102\apache-pekko-1.0.2-incubating-src-20231115\actor\src\main\java\org\apache\pekko\util\Unsafe.java:25:23:
> not found: value sun
> [error] public static final sun.misc.Unsafe instance;
> [error] ^
> I rarely run sbt, so this could easily be my local setup. I didn't
> try my linux box. Maybe it would have worked there.
>
> I also tested the artifacts in the staging repo with a simple typed
> actors example in Groovy:
> https://github.com/paulk-asert/groovy-pekko-gpars/tree/main/src/main/groovy/pekko
> I used Groovy 4.0.15, the 1.0.2-RC1 artifacts and the Scala 2.13 runtime.
> It ran without problems.
>
> Cheers, Paul.
>
> On Sat, Nov 18, 2023 at 11:56 PM PJ Fanning wrote:
> >
> > Hello Incubator Community,
> >
> > This is a call for a vote to release Apache Pekko(incubating)
> > Core version 1.0.2-RC1.
> >
> > The discussion thread:
> > https://lists.apache.org/thread/zy84yk5gxp54bkn81ntlj5ps5o2z9w4j
> >
> > Pekko Vote Thread
> > https://lists.apache.org/thread/0ojxypkm650bhk6pf53cp7h8036jgyol
> >
> > Pekko Result:
> > https://lists.apache.org/thread/mh398gtjm751fq4fhss5c0xfwxnvx2xy
> >
> > The release candidate:
> >
> > https://dist.apache.org/repos/dist/dev/incubator/pekko/1.0.2-RC1/
> >
> > This release has been signed with a PGP key, available here:
> >
> > https://dist.apache.org/repos/dist/release/incubator/pekko/KEYS
> >
> > Git branch for the release:
> >
> > https://github.com/apache/incubator-pekko/tree/v1.0.2-RC1
> > Git commit ID: 58fa510455190bd62d04f92a83c9506a7588d29c
> >
> > Release Notes:
> >
> > https://nightlies.apache.org/pekko/docs/pekko/1.0/docs/release-notes/index.html#1-0-2
> >
> > Please download, verify, and test.
> >
> > We have also staged jars in the Apache Nexus Repository. These were
> > built with the same code
> > as appears in this Source Release Candidate. We would appreciate if
> > users could test with these too.
> > If anyone finds any serious problems with these jars, please also
> > notify us on this thread.
> >
> > https://repository.apache.org/content/groups/staging/org/apache/pekko/
> >
> > In sbt, you can add this resolver.
> >
> > resolvers += "Apache Pekko Staging" at
> > "https://repository.apache.org/content/groups/staging;
> >
> >
> > The vote will be left open for at least 72 hours.
> >
> > [ ] +1 approve
> > [ ] +0 no opinion
> > [ ] -1 disapprove with the reason
> >
> > To learn more about Apache Pekko, please see https://pekko.apache.org/
> >
> > Checklist for reference:
> >
> > [ ] Download links are valid.
> > [ ] Checksums and signatures.
> > [ ] LICENSE/NOTICE files exist
> > [ ] No unexpected binary files
> > [ ] Source files have ASF headers
> > [ ] Can compile from source
> >
> > To compile from the source, please refer to:
> >
> > https://github.com/apache/incubator-pekko/blob/main/README.md#building-from-source
> >
> > Some notes about verifying downloads can be found at:
> >
> > https://pekko.apache.org/download.html#verifying-downloads
> >
> >
> > Here is my +1 (binding).
> >
> > Thanks,
> >
> > PJ Fanning
> >
> > -
> > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
> > For additional commands, e-mail: general-h...@incubator.apache.org
> >
>
> -
> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
> For
Re: [VOTE] Release Apache Pekko(incubating) Core 1.0.2-RC1
+1 (binding)
[X] Download links are valid.
[X] Checksums and signatures.
[X] LICENSE/NOTICE files exist
I did notice "Copyright 2016 AddThis" in the LICENSE file wrt
MurmurHash3, something to fix for the next release?
Given the accompanying explanation in the file, I don't see this
as a showstopper for this release.
[X] No unexpected binary files
I didn't do an exhaustive check
[X] Source files have ASF headers
[-] Can compile from source
I ran "sbt compile" and "sbt package" but both had errors. A sample:
[error] bnd: Invalid value for Bundle-Version, HEAD+20231129-0950
does not match [0-9]{1,9}(\.[0-9]{1,9}(\.[0-9]{1,9}(\.[0-9A-Za-z_-]+)?)?)?
[error] java.util.zip.ZipException: duplicate entry: META-INF/MANIFEST.MF
...
[error]
D:\tmp\pekko102\apache-pekko-1.0.2-incubating-src-20231115\actor\src\main\java\org\apache\pekko\util\Unsafe.java:25:23:
not found: value sun
[error] public static final sun.misc.Unsafe instance;
[error] ^
I rarely run sbt, so this could easily be my local setup. I didn't
try my linux box. Maybe it would have worked there.
I also tested the artifacts in the staging repo with a simple typed
actors example in Groovy:
https://github.com/paulk-asert/groovy-pekko-gpars/tree/main/src/main/groovy/pekko
I used Groovy 4.0.15, the 1.0.2-RC1 artifacts and the Scala 2.13 runtime.
It ran without problems.
Cheers, Paul.
On Sat, Nov 18, 2023 at 11:56 PM PJ Fanning wrote:
>
> Hello Incubator Community,
>
> This is a call for a vote to release Apache Pekko(incubating)
> Core version 1.0.2-RC1.
>
> The discussion thread:
> https://lists.apache.org/thread/zy84yk5gxp54bkn81ntlj5ps5o2z9w4j
>
> Pekko Vote Thread
> https://lists.apache.org/thread/0ojxypkm650bhk6pf53cp7h8036jgyol
>
> Pekko Result:
> https://lists.apache.org/thread/mh398gtjm751fq4fhss5c0xfwxnvx2xy
>
> The release candidate:
>
> https://dist.apache.org/repos/dist/dev/incubator/pekko/1.0.2-RC1/
>
> This release has been signed with a PGP key, available here:
>
> https://dist.apache.org/repos/dist/release/incubator/pekko/KEYS
>
> Git branch for the release:
>
> https://github.com/apache/incubator-pekko/tree/v1.0.2-RC1
> Git commit ID: 58fa510455190bd62d04f92a83c9506a7588d29c
>
> Release Notes:
>
> https://nightlies.apache.org/pekko/docs/pekko/1.0/docs/release-notes/index.html#1-0-2
>
> Please download, verify, and test.
>
> We have also staged jars in the Apache Nexus Repository. These were
> built with the same code
> as appears in this Source Release Candidate. We would appreciate if
> users could test with these too.
> If anyone finds any serious problems with these jars, please also
> notify us on this thread.
>
> https://repository.apache.org/content/groups/staging/org/apache/pekko/
>
> In sbt, you can add this resolver.
>
> resolvers += "Apache Pekko Staging" at
> "https://repository.apache.org/content/groups/staging;
>
>
> The vote will be left open for at least 72 hours.
>
> [ ] +1 approve
> [ ] +0 no opinion
> [ ] -1 disapprove with the reason
>
> To learn more about Apache Pekko, please see https://pekko.apache.org/
>
> Checklist for reference:
>
> [ ] Download links are valid.
> [ ] Checksums and signatures.
> [ ] LICENSE/NOTICE files exist
> [ ] No unexpected binary files
> [ ] Source files have ASF headers
> [ ] Can compile from source
>
> To compile from the source, please refer to:
>
> https://github.com/apache/incubator-pekko/blob/main/README.md#building-from-source
>
> Some notes about verifying downloads can be found at:
>
> https://pekko.apache.org/download.html#verifying-downloads
>
>
> Here is my +1 (binding).
>
> Thanks,
>
> PJ Fanning
>
> -
> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
> For additional commands, e-mail: general-h...@incubator.apache.org
>
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org
Re: [VOTE] Release Apache Pekko(incubating) Core 1.0.2-RC1
I'll take a look. On Mon, Nov 27, 2023 at 11:46 PM PJ Fanning wrote: > > Hi everyone, > > This RC includes a security hardening change. I am wondering if any Pekko > mentors or any other Incubator PMC member might have time to review the RC > artifacts so that we can do a release. > > Thanks, > PJ > > On 2023/11/24 13:05:48 Matthew de Detrich wrote: > > Carrying over my +1 from > > https://lists.apache.org/thread/skqfzys7g32b4f4hvlby3jjj2fcct261 > > > > Regards > > > > On Sat, Nov 18, 2023 at 2:56 PM PJ Fanning wrote: > > > > > Hello Incubator Community, > > > > > > This is a call for a vote to release Apache Pekko(incubating) > > > Core version 1.0.2-RC1. > > > > > > The discussion thread: > > > https://lists.apache.org/thread/zy84yk5gxp54bkn81ntlj5ps5o2z9w4j > > > > > > Pekko Vote Thread > > > https://lists.apache.org/thread/0ojxypkm650bhk6pf53cp7h8036jgyol > > > > > > Pekko Result: > > > https://lists.apache.org/thread/mh398gtjm751fq4fhss5c0xfwxnvx2xy > > > > > > The release candidate: > > > > > > https://dist.apache.org/repos/dist/dev/incubator/pekko/1.0.2-RC1/ > > > > > > This release has been signed with a PGP key, available here: > > > > > > https://dist.apache.org/repos/dist/release/incubator/pekko/KEYS > > > > > > Git branch for the release: > > > > > > https://github.com/apache/incubator-pekko/tree/v1.0.2-RC1 > > > Git commit ID: 58fa510455190bd62d04f92a83c9506a7588d29c > > > > > > Release Notes: > > > > > > > > > https://nightlies.apache.org/pekko/docs/pekko/1.0/docs/release-notes/index.html#1-0-2 > > > > > > Please download, verify, and test. > > > > > > We have also staged jars in the Apache Nexus Repository. These were > > > built with the same code > > > as appears in this Source Release Candidate. We would appreciate if > > > users could test with these too. > > > If anyone finds any serious problems with these jars, please also > > > notify us on this thread. > > > > > > https://repository.apache.org/content/groups/staging/org/apache/pekko/ > > > > > > In sbt, you can add this resolver. > > > > > > resolvers += "Apache Pekko Staging" at > > > "https://repository.apache.org/content/groups/staging; > > > > > > > > > The vote will be left open for at least 72 hours. > > > > > > [ ] +1 approve > > > [ ] +0 no opinion > > > [ ] -1 disapprove with the reason > > > > > > To learn more about Apache Pekko, please see https://pekko.apache.org/ > > > > > > Checklist for reference: > > > > > > [ ] Download links are valid. > > > [ ] Checksums and signatures. > > > [ ] LICENSE/NOTICE files exist > > > [ ] No unexpected binary files > > > [ ] Source files have ASF headers > > > [ ] Can compile from source > > > > > > To compile from the source, please refer to: > > > > > > > > > https://github.com/apache/incubator-pekko/blob/main/README.md#building-from-source > > > > > > Some notes about verifying downloads can be found at: > > > > > > https://pekko.apache.org/download.html#verifying-downloads > > > > > > > > > Here is my +1 (binding). > > > > > > Thanks, > > > > > > PJ Fanning > > > > > > - > > > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > > > For additional commands, e-mail: general-h...@incubator.apache.org > > > > > > > > > > -- > > > > Matthew de Detrich > > > > *Aiven Deutschland GmbH* > > > > Immanuelkirchstraße 26, 10405 Berlin > > > > Alexanderufer 3-7, 10117 Berlin > > > > Amtsgericht Charlottenburg, HRB 209739 B > > > > Geschäftsführer: Oskari Saarenmaa & Hannu Valtonen > > > > *m:* +491603708037 > > > > *w:* aiven.io *e:* matthew.dedetr...@aiven.io > > > > - > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > For additional commands, e-mail: general-h...@incubator.apache.org > - To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
Re: [VOTE] Release Apache Pekko(incubating) Core 1.0.2-RC1
Hi everyone, This RC includes a security hardening change. I am wondering if any Pekko mentors or any other Incubator PMC member might have time to review the RC artifacts so that we can do a release. Thanks, PJ On 2023/11/24 13:05:48 Matthew de Detrich wrote: > Carrying over my +1 from > https://lists.apache.org/thread/skqfzys7g32b4f4hvlby3jjj2fcct261 > > Regards > > On Sat, Nov 18, 2023 at 2:56 PM PJ Fanning wrote: > > > Hello Incubator Community, > > > > This is a call for a vote to release Apache Pekko(incubating) > > Core version 1.0.2-RC1. > > > > The discussion thread: > > https://lists.apache.org/thread/zy84yk5gxp54bkn81ntlj5ps5o2z9w4j > > > > Pekko Vote Thread > > https://lists.apache.org/thread/0ojxypkm650bhk6pf53cp7h8036jgyol > > > > Pekko Result: > > https://lists.apache.org/thread/mh398gtjm751fq4fhss5c0xfwxnvx2xy > > > > The release candidate: > > > > https://dist.apache.org/repos/dist/dev/incubator/pekko/1.0.2-RC1/ > > > > This release has been signed with a PGP key, available here: > > > > https://dist.apache.org/repos/dist/release/incubator/pekko/KEYS > > > > Git branch for the release: > > > > https://github.com/apache/incubator-pekko/tree/v1.0.2-RC1 > > Git commit ID: 58fa510455190bd62d04f92a83c9506a7588d29c > > > > Release Notes: > > > > > > https://nightlies.apache.org/pekko/docs/pekko/1.0/docs/release-notes/index.html#1-0-2 > > > > Please download, verify, and test. > > > > We have also staged jars in the Apache Nexus Repository. These were > > built with the same code > > as appears in this Source Release Candidate. We would appreciate if > > users could test with these too. > > If anyone finds any serious problems with these jars, please also > > notify us on this thread. > > > > https://repository.apache.org/content/groups/staging/org/apache/pekko/ > > > > In sbt, you can add this resolver. > > > > resolvers += "Apache Pekko Staging" at > > "https://repository.apache.org/content/groups/staging; > > > > > > The vote will be left open for at least 72 hours. > > > > [ ] +1 approve > > [ ] +0 no opinion > > [ ] -1 disapprove with the reason > > > > To learn more about Apache Pekko, please see https://pekko.apache.org/ > > > > Checklist for reference: > > > > [ ] Download links are valid. > > [ ] Checksums and signatures. > > [ ] LICENSE/NOTICE files exist > > [ ] No unexpected binary files > > [ ] Source files have ASF headers > > [ ] Can compile from source > > > > To compile from the source, please refer to: > > > > > > https://github.com/apache/incubator-pekko/blob/main/README.md#building-from-source > > > > Some notes about verifying downloads can be found at: > > > > https://pekko.apache.org/download.html#verifying-downloads > > > > > > Here is my +1 (binding). > > > > Thanks, > > > > PJ Fanning > > > > - > > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > > For additional commands, e-mail: general-h...@incubator.apache.org > > > > > > -- > > Matthew de Detrich > > *Aiven Deutschland GmbH* > > Immanuelkirchstraße 26, 10405 Berlin > > Alexanderufer 3-7, 10117 Berlin > > Amtsgericht Charlottenburg, HRB 209739 B > > Geschäftsführer: Oskari Saarenmaa & Hannu Valtonen > > *m:* +491603708037 > > *w:* aiven.io *e:* matthew.dedetr...@aiven.io > - To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
Re: [VOTE] Release Apache Pekko(incubating) Core 1.0.2-RC1
Carrying over my +1 from https://lists.apache.org/thread/skqfzys7g32b4f4hvlby3jjj2fcct261 Regards On Sat, Nov 18, 2023 at 2:56 PM PJ Fanning wrote: > Hello Incubator Community, > > This is a call for a vote to release Apache Pekko(incubating) > Core version 1.0.2-RC1. > > The discussion thread: > https://lists.apache.org/thread/zy84yk5gxp54bkn81ntlj5ps5o2z9w4j > > Pekko Vote Thread > https://lists.apache.org/thread/0ojxypkm650bhk6pf53cp7h8036jgyol > > Pekko Result: > https://lists.apache.org/thread/mh398gtjm751fq4fhss5c0xfwxnvx2xy > > The release candidate: > > https://dist.apache.org/repos/dist/dev/incubator/pekko/1.0.2-RC1/ > > This release has been signed with a PGP key, available here: > > https://dist.apache.org/repos/dist/release/incubator/pekko/KEYS > > Git branch for the release: > > https://github.com/apache/incubator-pekko/tree/v1.0.2-RC1 > Git commit ID: 58fa510455190bd62d04f92a83c9506a7588d29c > > Release Notes: > > > https://nightlies.apache.org/pekko/docs/pekko/1.0/docs/release-notes/index.html#1-0-2 > > Please download, verify, and test. > > We have also staged jars in the Apache Nexus Repository. These were > built with the same code > as appears in this Source Release Candidate. We would appreciate if > users could test with these too. > If anyone finds any serious problems with these jars, please also > notify us on this thread. > > https://repository.apache.org/content/groups/staging/org/apache/pekko/ > > In sbt, you can add this resolver. > > resolvers += "Apache Pekko Staging" at > "https://repository.apache.org/content/groups/staging; > > > The vote will be left open for at least 72 hours. > > [ ] +1 approve > [ ] +0 no opinion > [ ] -1 disapprove with the reason > > To learn more about Apache Pekko, please see https://pekko.apache.org/ > > Checklist for reference: > > [ ] Download links are valid. > [ ] Checksums and signatures. > [ ] LICENSE/NOTICE files exist > [ ] No unexpected binary files > [ ] Source files have ASF headers > [ ] Can compile from source > > To compile from the source, please refer to: > > > https://github.com/apache/incubator-pekko/blob/main/README.md#building-from-source > > Some notes about verifying downloads can be found at: > > https://pekko.apache.org/download.html#verifying-downloads > > > Here is my +1 (binding). > > Thanks, > > PJ Fanning > > - > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > For additional commands, e-mail: general-h...@incubator.apache.org > > -- Matthew de Detrich *Aiven Deutschland GmbH* Immanuelkirchstraße 26, 10405 Berlin Alexanderufer 3-7, 10117 Berlin Amtsgericht Charlottenburg, HRB 209739 B Geschäftsführer: Oskari Saarenmaa & Hannu Valtonen *m:* +491603708037 *w:* aiven.io *e:* matthew.dedetr...@aiven.io
Re: [VOTE] Release Apache Pekko(incubating) Core 1.0.2-RC1
Hi, > Thanks Justin. I'll look into those files again. With this RC, it includes > a security hardening change. Akka issued a CVE for the issue but we don't > think it really needs one. At the same time, I'd like to get out a change. > > Can we delay getting a fix for the possible license issue with these test > files? Sure, it's not that the files are that interesting content-wise; they are meant to be copied. You are likely to keep their contents the same, but it needs to be clarified what their license is - at worst, it is category b. It might be possible that the owners could release them under a category A license if you ask. Kind Regards, Justin - To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
Re: [VOTE] Release Apache Pekko(incubating) Core 1.0.2-RC1
Thanks Justin. I'll look into those files again. With this RC, it includes a security hardening change. Akka issued a CVE for the issue but we don't think it really needs one. At the same time, I'd like to get out a change. Can we delay getting a fix for the possible license issue with these test files? On Thu 23 Nov 2023, 01:45 Justin Mclean, wrote: > Hi, > > > We have not modified these files since the Akka split so I do not > > think we should put Apache headers on them. > > Nor do I. 3rd party files should not have ASF headers. > > > I removed one file using > https://github.com/apache/incubator-pekko/pull/810 > > > > I cannot find any other files that appear to be based on > > https://github.com/isc-projects/bind9 > > It looks like most files in the /actor-tests/src/test/bind/etc/ directory? > See, for example, > https://wiki.debian.org/Bind9#Files_in_.2Fvar.2Flib.2Fbind.2F and > https://wiki.debian.org/Bind9#File_.2Fetc.2Fbind.2Fnamed.conf.default-zones > > These files I can find identical copies of: > /actor-tests/src/test/bind/etc/db.local > /actor-tests/src/test/bind/etc/named.conf.default-zones > /actor-tests/src/test/bind/etc/db.root > /actor-tests/src/test/bind/etc/zones.rfc1918 > /actor-tests/src/test/bind/etc/bind.keys > /actor-tests/src/test/bind/etc/db.127 > /actor-tests/src/test/bind/etc/db.empty > > But it’s unclear how these files are licensed. > > Kind Regards, > Justin > > > > - > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > For additional commands, e-mail: general-h...@incubator.apache.org > >
Re: [VOTE] Release Apache Pekko(incubating) Core 1.0.2-RC1
Hi, > We have not modified these files since the Akka split so I do not > think we should put Apache headers on them. Nor do I. 3rd party files should not have ASF headers. > I removed one file using https://github.com/apache/incubator-pekko/pull/810 > > I cannot find any other files that appear to be based on > https://github.com/isc-projects/bind9 It looks like most files in the /actor-tests/src/test/bind/etc/ directory? See, for example, https://wiki.debian.org/Bind9#Files_in_.2Fvar.2Flib.2Fbind.2F and https://wiki.debian.org/Bind9#File_.2Fetc.2Fbind.2Fnamed.conf.default-zones These files I can find identical copies of: /actor-tests/src/test/bind/etc/db.local /actor-tests/src/test/bind/etc/named.conf.default-zones /actor-tests/src/test/bind/etc/db.root /actor-tests/src/test/bind/etc/zones.rfc1918 /actor-tests/src/test/bind/etc/bind.keys /actor-tests/src/test/bind/etc/db.127 /actor-tests/src/test/bind/etc/db.empty But it’s unclear how these files are licensed. Kind Regards, Justin - To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
Re: [VOTE] Release Apache Pekko(incubating) Core 1.0.2-RC1
We have not modified these files since the Akka split so I do not think we should put Apache headers on them. I removed one file using https://github.com/apache/incubator-pekko/pull/810 I cannot find any other files that appear to be based on https://github.com/isc-projects/bind9 files Removing any other files is likely to break tests (removing them all did break a number of tests). I don't think it is a good idea to remove the tests that rely on these files. On Wed, 22 Nov 2023 at 14:36, Justin Mclean wrote: > > Hi, > > > Justin - if you are aware of more matches other than the bind.keys > > file, could you make us aware of them? > > I think there are about 1/2 a dozen files in that directory from Bind9, but > nothing outside of that I’ve found. I’ve not done an extensive check, but at > a glance, the file names and contents show similarity. They didn’t have ASF > or Pekko headers which first alerted me. > > Kind Regards, > Justin > - > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > For additional commands, e-mail: general-h...@incubator.apache.org > - To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
Re: [VOTE] Release Apache Pekko(incubating) Core 1.0.2-RC1
Hi, > Justin - if you are aware of more matches other than the bind.keys > file, could you make us aware of them? I think there are about 1/2 a dozen files in that directory from Bind9, but nothing outside of that I’ve found. I’ve not done an extensive check, but at a glance, the file names and contents show similarity. They didn’t have ASF or Pekko headers which first alerted me. Kind Regards, Justin - To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
Re: [VOTE] Release Apache Pekko(incubating) Core 1.0.2-RC1
I've raised https://github.com/apache/incubator-pekko/issues/809 to investigate. Justin - if you are aware of more matches other than the bind.keys file, could you make us aware of them? On Wed, 22 Nov 2023 at 07:28, Justin Mclean wrote: > > HI, > > I’ve not finished my review, but I may have found an issue. Some of the > content in /actor-tests/src/test/bind/etc/ seems to come from Bind9 > (https://github.com/isc-projects/bind9). The project is under a Category B > license (MPL 2.0), but given the nature of these files and their use, I’m > unsure if that license applies. Assuming it is OK to include them, something > should be mentioned LICENSE. > > Kind Regards, > Justin > > > On 19 Nov 2023, at 12:56 am, PJ Fanning wrote: > > > > Hello Incubator Community, > > > > This is a call for a vote to release Apache Pekko(incubating) > > Core version 1.0.2-RC1. > > > > The discussion thread: > > https://lists.apache.org/thread/zy84yk5gxp54bkn81ntlj5ps5o2z9w4j > > > > Pekko Vote Thread > > https://lists.apache.org/thread/0ojxypkm650bhk6pf53cp7h8036jgyol > > > > Pekko Result: > > https://lists.apache.org/thread/mh398gtjm751fq4fhss5c0xfwxnvx2xy > > > > The release candidate: > > > > https://dist.apache.org/repos/dist/dev/incubator/pekko/1.0.2-RC1/ > > > > This release has been signed with a PGP key, available here: > > > > https://dist.apache.org/repos/dist/release/incubator/pekko/KEYS > > > > Git branch for the release: > > > > https://github.com/apache/incubator-pekko/tree/v1.0.2-RC1 > > Git commit ID: 58fa510455190bd62d04f92a83c9506a7588d29c > > > > Release Notes: > > > > https://nightlies.apache.org/pekko/docs/pekko/1.0/docs/release-notes/index.html#1-0-2 > > > > Please download, verify, and test. > > > > We have also staged jars in the Apache Nexus Repository. These were > > built with the same code > > as appears in this Source Release Candidate. We would appreciate if > > users could test with these too. > > If anyone finds any serious problems with these jars, please also > > notify us on this thread. > > > > https://repository.apache.org/content/groups/staging/org/apache/pekko/ > > > > In sbt, you can add this resolver. > > > > resolvers += "Apache Pekko Staging" at > > "https://repository.apache.org/content/groups/staging; > > > > > > The vote will be left open for at least 72 hours. > > > > [ ] +1 approve > > [ ] +0 no opinion > > [ ] -1 disapprove with the reason > > > > To learn more about Apache Pekko, please see https://pekko.apache.org/ > > > > Checklist for reference: > > > > [ ] Download links are valid. > > [ ] Checksums and signatures. > > [ ] LICENSE/NOTICE files exist > > [ ] No unexpected binary files > > [ ] Source files have ASF headers > > [ ] Can compile from source > > > > To compile from the source, please refer to: > > > > https://github.com/apache/incubator-pekko/blob/main/README.md#building-from-source > > > > Some notes about verifying downloads can be found at: > > > > https://pekko.apache.org/download.html#verifying-downloads > > > > > > Here is my +1 (binding). > > > > Thanks, > > > > PJ Fanning > > > > - > > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > > For additional commands, e-mail: general-h...@incubator.apache.org > > > - To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
Re: [VOTE] Release Apache Pekko(incubating) Core 1.0.2-RC1
HI, I’ve not finished my review, but I may have found an issue. Some of the content in /actor-tests/src/test/bind/etc/ seems to come from Bind9 (https://github.com/isc-projects/bind9). The project is under a Category B license (MPL 2.0), but given the nature of these files and their use, I’m unsure if that license applies. Assuming it is OK to include them, something should be mentioned LICENSE. Kind Regards, Justin > On 19 Nov 2023, at 12:56 am, PJ Fanning wrote: > > Hello Incubator Community, > > This is a call for a vote to release Apache Pekko(incubating) > Core version 1.0.2-RC1. > > The discussion thread: > https://lists.apache.org/thread/zy84yk5gxp54bkn81ntlj5ps5o2z9w4j > > Pekko Vote Thread > https://lists.apache.org/thread/0ojxypkm650bhk6pf53cp7h8036jgyol > > Pekko Result: > https://lists.apache.org/thread/mh398gtjm751fq4fhss5c0xfwxnvx2xy > > The release candidate: > > https://dist.apache.org/repos/dist/dev/incubator/pekko/1.0.2-RC1/ > > This release has been signed with a PGP key, available here: > > https://dist.apache.org/repos/dist/release/incubator/pekko/KEYS > > Git branch for the release: > > https://github.com/apache/incubator-pekko/tree/v1.0.2-RC1 > Git commit ID: 58fa510455190bd62d04f92a83c9506a7588d29c > > Release Notes: > > https://nightlies.apache.org/pekko/docs/pekko/1.0/docs/release-notes/index.html#1-0-2 > > Please download, verify, and test. > > We have also staged jars in the Apache Nexus Repository. These were > built with the same code > as appears in this Source Release Candidate. We would appreciate if > users could test with these too. > If anyone finds any serious problems with these jars, please also > notify us on this thread. > > https://repository.apache.org/content/groups/staging/org/apache/pekko/ > > In sbt, you can add this resolver. > > resolvers += "Apache Pekko Staging" at > "https://repository.apache.org/content/groups/staging; > > > The vote will be left open for at least 72 hours. > > [ ] +1 approve > [ ] +0 no opinion > [ ] -1 disapprove with the reason > > To learn more about Apache Pekko, please see https://pekko.apache.org/ > > Checklist for reference: > > [ ] Download links are valid. > [ ] Checksums and signatures. > [ ] LICENSE/NOTICE files exist > [ ] No unexpected binary files > [ ] Source files have ASF headers > [ ] Can compile from source > > To compile from the source, please refer to: > > https://github.com/apache/incubator-pekko/blob/main/README.md#building-from-source > > Some notes about verifying downloads can be found at: > > https://pekko.apache.org/download.html#verifying-downloads > > > Here is my +1 (binding). > > Thanks, > > PJ Fanning > > - > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > For additional commands, e-mail: general-h...@incubator.apache.org >
[VOTE] Release Apache Pekko(incubating) Core 1.0.2-RC1
Hello Incubator Community, This is a call for a vote to release Apache Pekko(incubating) Core version 1.0.2-RC1. The discussion thread: https://lists.apache.org/thread/zy84yk5gxp54bkn81ntlj5ps5o2z9w4j Pekko Vote Thread https://lists.apache.org/thread/0ojxypkm650bhk6pf53cp7h8036jgyol Pekko Result: https://lists.apache.org/thread/mh398gtjm751fq4fhss5c0xfwxnvx2xy The release candidate: https://dist.apache.org/repos/dist/dev/incubator/pekko/1.0.2-RC1/ This release has been signed with a PGP key, available here: https://dist.apache.org/repos/dist/release/incubator/pekko/KEYS Git branch for the release: https://github.com/apache/incubator-pekko/tree/v1.0.2-RC1 Git commit ID: 58fa510455190bd62d04f92a83c9506a7588d29c Release Notes: https://nightlies.apache.org/pekko/docs/pekko/1.0/docs/release-notes/index.html#1-0-2 Please download, verify, and test. We have also staged jars in the Apache Nexus Repository. These were built with the same code as appears in this Source Release Candidate. We would appreciate if users could test with these too. If anyone finds any serious problems with these jars, please also notify us on this thread. https://repository.apache.org/content/groups/staging/org/apache/pekko/ In sbt, you can add this resolver. resolvers += "Apache Pekko Staging" at "https://repository.apache.org/content/groups/staging; The vote will be left open for at least 72 hours. [ ] +1 approve [ ] +0 no opinion [ ] -1 disapprove with the reason To learn more about Apache Pekko, please see https://pekko.apache.org/ Checklist for reference: [ ] Download links are valid. [ ] Checksums and signatures. [ ] LICENSE/NOTICE files exist [ ] No unexpected binary files [ ] Source files have ASF headers [ ] Can compile from source To compile from the source, please refer to: https://github.com/apache/incubator-pekko/blob/main/README.md#building-from-source Some notes about verifying downloads can be found at: https://pekko.apache.org/download.html#verifying-downloads Here is my +1 (binding). Thanks, PJ Fanning - To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
