You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@annotator.apache.org by Randall Leeds <ra...@apache.org> on 2020/03/10 04:43:35 UTC
[VOTE] Release Apache Annotator (incubating) version 0.1.0 (-rc.2)
Dear community,
I would like to propose we release Apache Annotator (incubating) 0.1.0.
This is the second release candidate. The first vote was aborted because it
was not made on this list before being brought to the incubator PMC.
This is the first release of Apache Annotator and represents a modest but
exciting step for the community. We encourage everyone to help us verify
that the release is proper and help identify and fix any critical issues
with the project's packaging or the proper functioning of the build.
The release artifacts are available here:
https://dist.apache.org/repos/dist/dev/incubator/annotator/source/0.1.0/rc.2
There you will find a tarball, a GPG signature, and SHA256/SHA512 checksums.
A KEYS file for checking the signatures can be found here:
https://dist.apache.org/repos/dist/release/incubator/annotator/KEYS
Please verify that the build is from commit
2eb484150c0fa86a144fa3f3f6811e856e761dd6, tagged as v0.1.0-rc.2, by
checking out the source tree and comparing it to the contents of the
tarball.
Please validate the release by checking that the signature and checksums
are valid for the uploaded tarball and then unpacking it and ensuring that
`make && make check` exits cleanly.
If you would like to further validate the packaging, the repository is set
up for Apache Rat to check for proper license headers and notifications. As
this is our first release, it is important to us that we get these
processes correctly in place.
If the vote passes, these artifacts will be proposed to Apache Incubator
for release as Apache Annotator (incubating) 0.1.0.
Regards,
Randall Leeds
Re: [VOTE] Release Apache Annotator (incubating) version 0.1.0 (-rc.2)
Posted by Bhanu Prakash <bh...@servelots.com>.
+1
On Tue, Mar 10, 2020, 23:09 Gerben <ge...@treora.com.invalid> wrote:
> +1
> On 10/03/2020 16:09, Benjamin Young wrote:
>
> +1 from me--with huge gratitude to Randall for making this all happen!! :D
>
> The signature and sha's all checked out fine. My local diff (on Windows) has line ending differences (which I know about...per my git config). My diff also shows the following files in the git checkout which are not in the tarball--all of which I think are fine, but wanted to confirm and/or document for future comparison/checks.
>
> Files in local git checkout which are not in the tarball include:
> - .git/ (as for Randall)
> - .nyc_output/ (probably due to a different reporter I used at some point)
> - node_modules/ (we don't ship this in the tarball...nor should we afaik)
> - packages/fragment-identifier/node_modules/ (same as above)
> - packages/fragment-identifier/src/fragment.js (...not sure about this one...)
>
> Everything else is identical (ignoring line endings--per platform differences).
>
> Any thoughts (or explanations) about the fragment.js situation?
>
> fragment.js is not source code, but generated from fragment.pegjs. It is
> created when building/running the code, just like node_modules/ and other
> folders and files (I moreover see an esm/, lib/, LICENSE and NOTICE in each
> package folder).
>
> For an easier comparison, you could make a fresh clone of your repository
> into a new folder (e.g. run `git clone incubator-annotator/
> incubator-annotator-clean/`), and compare the sameness with that one
> instead. And then perhaps build and run it to validate whether it also
> works correctly.
>
> …
>
>
Re: [VOTE] Release Apache Annotator (incubating) version 0.1.0
(-rc.2)
Posted by Gerben <ge...@treora.com.INVALID>.
+1
On 10/03/2020 16:09, Benjamin Young wrote:
> +1 from me--with huge gratitude to Randall for making this all happen!! :D
>
> The signature and sha's all checked out fine. My local diff (on Windows) has line ending differences (which I know about...per my git config). My diff also shows the following files in the git checkout which are not in the tarball--all of which I think are fine, but wanted to confirm and/or document for future comparison/checks.
>
> Files in local git checkout which are not in the tarball include:
> - .git/ (as for Randall)
> - .nyc_output/ (probably due to a different reporter I used at some point)
> - node_modules/ (we don't ship this in the tarball...nor should we afaik)
> - packages/fragment-identifier/node_modules/ (same as above)
> - packages/fragment-identifier/src/fragment.js (...not sure about this one...)
>
> Everything else is identical (ignoring line endings--per platform differences).
>
> Any thoughts (or explanations) about the fragment.js situation?
fragment.js is not source code, but generated from fragment.pegjs. It is
created when building/running the code, just like node_modules/ and
other folders and files (I moreover see an esm/, lib/, LICENSE and
NOTICE in each package folder).
For an easier comparison, you could make a fresh clone of your
repository into a new folder (e.g. run `git clone incubator-annotator/
incubator-annotator-clean/`), and compare the sameness with that one
instead. And then perhaps build and run it to validate whether it also
works correctly.
> …
Re: [VOTE] Release Apache Annotator (incubating) version 0.1.0 (-rc.2)
Posted by Randall Leeds <ra...@apache.org>.
On Wed, Mar 11, 2020 at 7:17 AM Benjamin Young <by...@bigbluehat.com>
wrote:
> Randall,
>
> Any thoughts on the fragment.js file situation? Otherwise this seems fine.
>
I believe Gerben correctly responded that fragment.js is built from
fragment.pegjs at build time and therefore it is purposely absent from the
source release.
Additionally, the advice to compare the tarball to a clean working
directory is good. There should be no differences in that case.
Re: [VOTE] Release Apache Annotator (incubating) version 0.1.0
(-rc.2)
Posted by Benjamin Young <by...@bigbluehat.com>.
Randall,
Any thoughts on the fragment.js file situation? Otherwise this seems fine.
--
http://bigbluehat.com/
http://linkedin.com/in/benjaminyoung
________________________________
From: TB Dinesh <di...@servelots.com>
Sent: Wednesday, March 11, 2020 5:22 AM
To: dev@annotator.incubator.apache.org <de...@annotator.incubator.apache.org>
Cc: Jack Park <ja...@topicquests.org>
Subject: Re: [VOTE] Release Apache Annotator (incubating) version 0.1.0 (-rc.2)
+1
+1 for Benjamin's remarks too :)
On Tue, Mar 10, 2020 at 8:39 PM Benjamin Young <by...@bigbluehat.com> wrote:
>
> +1 from me--with huge gratitude to Randall for making this all happen!! :D
>
> The signature and sha's all checked out fine. My local diff (on Windows) has line ending differences (which I know about...per my git config). My diff also shows the following files in the git checkout which are not in the tarball--all of which I think are fine, but wanted to confirm and/or document for future comparison/checks.
>
> Files in local git checkout which are not in the tarball include:
> - .git/ (as for Randall)
> - .nyc_output/ (probably due to a different reporter I used at some point)
> - node_modules/ (we don't ship this in the tarball...nor should we afaik)
> - packages/fragment-identifier/node_modules/ (same as above)
> - packages/fragment-identifier/src/fragment.js (...not sure about this one...)
>
> Everything else is identical (ignoring line endings--per platform differences).
>
> Any thoughts (or explanations) about the fragment.js situation?
>
> Otherwise this looks fabulous. Thank you!
> Benjamin
>
> --
>
> http://bigbluehat.com/
>
> http://linkedin.com/in/benjaminyoung
>
> ________________________________
> From: Jack Park <ja...@topicquests.org>
> Sent: Tuesday, March 10, 2020 10:23 AM
> To: dev@annotator.incubator.apache.org <de...@annotator.incubator.apache.org>
> Subject: Re: [VOTE] Release Apache Annotator (incubating) version 0.1.0 (-rc.2)
>
> +1
>
> On Mon, Mar 9, 2020 at 10:20 PM Randall Leeds <ra...@apache.org> wrote:
>
> > I'll kick it off.
> >
> > No differences between tarball and the git tag:
> >
> > > diff -r apache-annotator-0.1.0-incubating annotator-git
> > Only in annotator: .git
> >
> > Valid checksums:
> >
> > > sha256sum -c apache-annotator-0.1.0-rc.2-incubating.tar.gz.sha256
> > apache-annotator-0.1.0-rc.2-incubating.tar.gz: OK
> >
> > > sha512sum -c apache-annotator-0.1.0-rc.2-incubating.tar.gz.sha512
> > apache-annotator-0.1.0-rc.2-incubating.tar.gz: OK
> >
> > Valid signature (from me):
> >
> > > gpg --verify apache-annotator-0.1.0-rc.2-incubating.tar.gz.asc
> > gpg: assuming signed data in
> > 'apache-annotator-0.1.0-rc.2-incubating.tar.gz'
> > gpg: Signature made Mon 09 Mar 2020 09:36:50 PM PDT
> > gpg: using RSA key
> > 83CBD56B79A00C8693C0B919ED6455D90F33F0BB
> > gpg: Good signature from "Randall Leeds <ra...@bleeds.info>"
> > [ultimate]
> > gpg: aka "Randall Leeds <ra...@gmail.com>"
> > [ultimate]
> > gpg: aka "Randall Leeds <ra...@apache.org>" [ultimate]
> >
> > Running `make check` passes in the apache-annotator-0.1.0-incubating
> > directory unpacked from the tarball (Node.js v13.10.1, Yarn v1.22.0).
> >
> > +1 from me!
> >
> > On Mon, Mar 9, 2020 at 9:43 PM Randall Leeds <ra...@apache.org> wrote:
> >
> > > Dear community,
> > >
> > > I would like to propose we release Apache Annotator (incubating) 0.1.0.
> > >
> > > This is the second release candidate. The first vote was aborted because
> > > it was not made on this list before being brought to the incubator PMC.
> > >
> > > This is the first release of Apache Annotator and represents a modest but
> > > exciting step for the community. We encourage everyone to help us verify
> > > that the release is proper and help identify and fix any critical issues
> > > with the project's packaging or the proper functioning of the build.
> > >
> > > The release artifacts are available here:
> > >
> > >
> > >
> > https://dist.apache.org/repos/dist/dev/incubator/annotator/source/0.1.0/rc.2
> > >
> > > There you will find a tarball, a GPG signature, and SHA256/SHA512
> > > checksums.
> > >
> > > A KEYS file for checking the signatures can be found here:
> > >
> > > https://dist.apache.org/repos/dist/release/incubator/annotator/KEYS
> > >
> > > Please verify that the build is from commit
> > > 2eb484150c0fa86a144fa3f3f6811e856e761dd6, tagged as v0.1.0-rc.2, by
> > > checking out the source tree and comparing it to the contents of the
> > > tarball.
> > >
> > > Please validate the release by checking that the signature and checksums
> > > are valid for the uploaded tarball and then unpacking it and ensuring
> > that
> > > `make && make check` exits cleanly.
> > >
> > > If you would like to further validate the packaging, the repository is
> > set
> > > up for Apache Rat to check for proper license headers and notifications.
> > As
> > > this is our first release, it is important to us that we get these
> > > processes correctly in place.
> > >
> > > If the vote passes, these artifacts will be proposed to Apache Incubator
> > > for release as Apache Annotator (incubating) 0.1.0.
> > >
> > > Regards,
> > > Randall Leeds
> > >
> >
Re: [VOTE] Release Apache Annotator (incubating) version 0.1.0 (-rc.2)
Posted by TB Dinesh <di...@servelots.com>.
+1
+1 for Benjamin's remarks too :)
On Tue, Mar 10, 2020 at 8:39 PM Benjamin Young <by...@bigbluehat.com> wrote:
>
> +1 from me--with huge gratitude to Randall for making this all happen!! :D
>
> The signature and sha's all checked out fine. My local diff (on Windows) has line ending differences (which I know about...per my git config). My diff also shows the following files in the git checkout which are not in the tarball--all of which I think are fine, but wanted to confirm and/or document for future comparison/checks.
>
> Files in local git checkout which are not in the tarball include:
> - .git/ (as for Randall)
> - .nyc_output/ (probably due to a different reporter I used at some point)
> - node_modules/ (we don't ship this in the tarball...nor should we afaik)
> - packages/fragment-identifier/node_modules/ (same as above)
> - packages/fragment-identifier/src/fragment.js (...not sure about this one...)
>
> Everything else is identical (ignoring line endings--per platform differences).
>
> Any thoughts (or explanations) about the fragment.js situation?
>
> Otherwise this looks fabulous. Thank you!
> Benjamin
>
> --
>
> http://bigbluehat.com/
>
> http://linkedin.com/in/benjaminyoung
>
> ________________________________
> From: Jack Park <ja...@topicquests.org>
> Sent: Tuesday, March 10, 2020 10:23 AM
> To: dev@annotator.incubator.apache.org <de...@annotator.incubator.apache.org>
> Subject: Re: [VOTE] Release Apache Annotator (incubating) version 0.1.0 (-rc.2)
>
> +1
>
> On Mon, Mar 9, 2020 at 10:20 PM Randall Leeds <ra...@apache.org> wrote:
>
> > I'll kick it off.
> >
> > No differences between tarball and the git tag:
> >
> > > diff -r apache-annotator-0.1.0-incubating annotator-git
> > Only in annotator: .git
> >
> > Valid checksums:
> >
> > > sha256sum -c apache-annotator-0.1.0-rc.2-incubating.tar.gz.sha256
> > apache-annotator-0.1.0-rc.2-incubating.tar.gz: OK
> >
> > > sha512sum -c apache-annotator-0.1.0-rc.2-incubating.tar.gz.sha512
> > apache-annotator-0.1.0-rc.2-incubating.tar.gz: OK
> >
> > Valid signature (from me):
> >
> > > gpg --verify apache-annotator-0.1.0-rc.2-incubating.tar.gz.asc
> > gpg: assuming signed data in
> > 'apache-annotator-0.1.0-rc.2-incubating.tar.gz'
> > gpg: Signature made Mon 09 Mar 2020 09:36:50 PM PDT
> > gpg: using RSA key
> > 83CBD56B79A00C8693C0B919ED6455D90F33F0BB
> > gpg: Good signature from "Randall Leeds <ra...@bleeds.info>"
> > [ultimate]
> > gpg: aka "Randall Leeds <ra...@gmail.com>"
> > [ultimate]
> > gpg: aka "Randall Leeds <ra...@apache.org>" [ultimate]
> >
> > Running `make check` passes in the apache-annotator-0.1.0-incubating
> > directory unpacked from the tarball (Node.js v13.10.1, Yarn v1.22.0).
> >
> > +1 from me!
> >
> > On Mon, Mar 9, 2020 at 9:43 PM Randall Leeds <ra...@apache.org> wrote:
> >
> > > Dear community,
> > >
> > > I would like to propose we release Apache Annotator (incubating) 0.1.0.
> > >
> > > This is the second release candidate. The first vote was aborted because
> > > it was not made on this list before being brought to the incubator PMC.
> > >
> > > This is the first release of Apache Annotator and represents a modest but
> > > exciting step for the community. We encourage everyone to help us verify
> > > that the release is proper and help identify and fix any critical issues
> > > with the project's packaging or the proper functioning of the build.
> > >
> > > The release artifacts are available here:
> > >
> > >
> > >
> > https://dist.apache.org/repos/dist/dev/incubator/annotator/source/0.1.0/rc.2
> > >
> > > There you will find a tarball, a GPG signature, and SHA256/SHA512
> > > checksums.
> > >
> > > A KEYS file for checking the signatures can be found here:
> > >
> > > https://dist.apache.org/repos/dist/release/incubator/annotator/KEYS
> > >
> > > Please verify that the build is from commit
> > > 2eb484150c0fa86a144fa3f3f6811e856e761dd6, tagged as v0.1.0-rc.2, by
> > > checking out the source tree and comparing it to the contents of the
> > > tarball.
> > >
> > > Please validate the release by checking that the signature and checksums
> > > are valid for the uploaded tarball and then unpacking it and ensuring
> > that
> > > `make && make check` exits cleanly.
> > >
> > > If you would like to further validate the packaging, the repository is
> > set
> > > up for Apache Rat to check for proper license headers and notifications.
> > As
> > > this is our first release, it is important to us that we get these
> > > processes correctly in place.
> > >
> > > If the vote passes, these artifacts will be proposed to Apache Incubator
> > > for release as Apache Annotator (incubating) 0.1.0.
> > >
> > > Regards,
> > > Randall Leeds
> > >
> >
Re: [VOTE] Release Apache Annotator (incubating) version 0.1.0
(-rc.2)
Posted by Benjamin Young <by...@bigbluehat.com>.
+1 from me--with huge gratitude to Randall for making this all happen!! :D
The signature and sha's all checked out fine. My local diff (on Windows) has line ending differences (which I know about...per my git config). My diff also shows the following files in the git checkout which are not in the tarball--all of which I think are fine, but wanted to confirm and/or document for future comparison/checks.
Files in local git checkout which are not in the tarball include:
- .git/ (as for Randall)
- .nyc_output/ (probably due to a different reporter I used at some point)
- node_modules/ (we don't ship this in the tarball...nor should we afaik)
- packages/fragment-identifier/node_modules/ (same as above)
- packages/fragment-identifier/src/fragment.js (...not sure about this one...)
Everything else is identical (ignoring line endings--per platform differences).
Any thoughts (or explanations) about the fragment.js situation?
Otherwise this looks fabulous. Thank you!
Benjamin
--
http://bigbluehat.com/
http://linkedin.com/in/benjaminyoung
________________________________
From: Jack Park <ja...@topicquests.org>
Sent: Tuesday, March 10, 2020 10:23 AM
To: dev@annotator.incubator.apache.org <de...@annotator.incubator.apache.org>
Subject: Re: [VOTE] Release Apache Annotator (incubating) version 0.1.0 (-rc.2)
+1
On Mon, Mar 9, 2020 at 10:20 PM Randall Leeds <ra...@apache.org> wrote:
> I'll kick it off.
>
> No differences between tarball and the git tag:
>
> > diff -r apache-annotator-0.1.0-incubating annotator-git
> Only in annotator: .git
>
> Valid checksums:
>
> > sha256sum -c apache-annotator-0.1.0-rc.2-incubating.tar.gz.sha256
> apache-annotator-0.1.0-rc.2-incubating.tar.gz: OK
>
> > sha512sum -c apache-annotator-0.1.0-rc.2-incubating.tar.gz.sha512
> apache-annotator-0.1.0-rc.2-incubating.tar.gz: OK
>
> Valid signature (from me):
>
> > gpg --verify apache-annotator-0.1.0-rc.2-incubating.tar.gz.asc
> gpg: assuming signed data in
> 'apache-annotator-0.1.0-rc.2-incubating.tar.gz'
> gpg: Signature made Mon 09 Mar 2020 09:36:50 PM PDT
> gpg: using RSA key
> 83CBD56B79A00C8693C0B919ED6455D90F33F0BB
> gpg: Good signature from "Randall Leeds <ra...@bleeds.info>"
> [ultimate]
> gpg: aka "Randall Leeds <ra...@gmail.com>"
> [ultimate]
> gpg: aka "Randall Leeds <ra...@apache.org>" [ultimate]
>
> Running `make check` passes in the apache-annotator-0.1.0-incubating
> directory unpacked from the tarball (Node.js v13.10.1, Yarn v1.22.0).
>
> +1 from me!
>
> On Mon, Mar 9, 2020 at 9:43 PM Randall Leeds <ra...@apache.org> wrote:
>
> > Dear community,
> >
> > I would like to propose we release Apache Annotator (incubating) 0.1.0.
> >
> > This is the second release candidate. The first vote was aborted because
> > it was not made on this list before being brought to the incubator PMC.
> >
> > This is the first release of Apache Annotator and represents a modest but
> > exciting step for the community. We encourage everyone to help us verify
> > that the release is proper and help identify and fix any critical issues
> > with the project's packaging or the proper functioning of the build.
> >
> > The release artifacts are available here:
> >
> >
> >
> https://dist.apache.org/repos/dist/dev/incubator/annotator/source/0.1.0/rc.2
> >
> > There you will find a tarball, a GPG signature, and SHA256/SHA512
> > checksums.
> >
> > A KEYS file for checking the signatures can be found here:
> >
> > https://dist.apache.org/repos/dist/release/incubator/annotator/KEYS
> >
> > Please verify that the build is from commit
> > 2eb484150c0fa86a144fa3f3f6811e856e761dd6, tagged as v0.1.0-rc.2, by
> > checking out the source tree and comparing it to the contents of the
> > tarball.
> >
> > Please validate the release by checking that the signature and checksums
> > are valid for the uploaded tarball and then unpacking it and ensuring
> that
> > `make && make check` exits cleanly.
> >
> > If you would like to further validate the packaging, the repository is
> set
> > up for Apache Rat to check for proper license headers and notifications.
> As
> > this is our first release, it is important to us that we get these
> > processes correctly in place.
> >
> > If the vote passes, these artifacts will be proposed to Apache Incubator
> > for release as Apache Annotator (incubating) 0.1.0.
> >
> > Regards,
> > Randall Leeds
> >
>
Re: [VOTE] Release Apache Annotator (incubating) version 0.1.0 (-rc.2)
Posted by Jack Park <ja...@topicquests.org>.
+1
On Mon, Mar 9, 2020 at 10:20 PM Randall Leeds <ra...@apache.org> wrote:
> I'll kick it off.
>
> No differences between tarball and the git tag:
>
> > diff -r apache-annotator-0.1.0-incubating annotator-git
> Only in annotator: .git
>
> Valid checksums:
>
> > sha256sum -c apache-annotator-0.1.0-rc.2-incubating.tar.gz.sha256
> apache-annotator-0.1.0-rc.2-incubating.tar.gz: OK
>
> > sha512sum -c apache-annotator-0.1.0-rc.2-incubating.tar.gz.sha512
> apache-annotator-0.1.0-rc.2-incubating.tar.gz: OK
>
> Valid signature (from me):
>
> > gpg --verify apache-annotator-0.1.0-rc.2-incubating.tar.gz.asc
> gpg: assuming signed data in
> 'apache-annotator-0.1.0-rc.2-incubating.tar.gz'
> gpg: Signature made Mon 09 Mar 2020 09:36:50 PM PDT
> gpg: using RSA key
> 83CBD56B79A00C8693C0B919ED6455D90F33F0BB
> gpg: Good signature from "Randall Leeds <ra...@bleeds.info>"
> [ultimate]
> gpg: aka "Randall Leeds <ra...@gmail.com>"
> [ultimate]
> gpg: aka "Randall Leeds <ra...@apache.org>" [ultimate]
>
> Running `make check` passes in the apache-annotator-0.1.0-incubating
> directory unpacked from the tarball (Node.js v13.10.1, Yarn v1.22.0).
>
> +1 from me!
>
> On Mon, Mar 9, 2020 at 9:43 PM Randall Leeds <ra...@apache.org> wrote:
>
> > Dear community,
> >
> > I would like to propose we release Apache Annotator (incubating) 0.1.0.
> >
> > This is the second release candidate. The first vote was aborted because
> > it was not made on this list before being brought to the incubator PMC.
> >
> > This is the first release of Apache Annotator and represents a modest but
> > exciting step for the community. We encourage everyone to help us verify
> > that the release is proper and help identify and fix any critical issues
> > with the project's packaging or the proper functioning of the build.
> >
> > The release artifacts are available here:
> >
> >
> >
> https://dist.apache.org/repos/dist/dev/incubator/annotator/source/0.1.0/rc.2
> >
> > There you will find a tarball, a GPG signature, and SHA256/SHA512
> > checksums.
> >
> > A KEYS file for checking the signatures can be found here:
> >
> > https://dist.apache.org/repos/dist/release/incubator/annotator/KEYS
> >
> > Please verify that the build is from commit
> > 2eb484150c0fa86a144fa3f3f6811e856e761dd6, tagged as v0.1.0-rc.2, by
> > checking out the source tree and comparing it to the contents of the
> > tarball.
> >
> > Please validate the release by checking that the signature and checksums
> > are valid for the uploaded tarball and then unpacking it and ensuring
> that
> > `make && make check` exits cleanly.
> >
> > If you would like to further validate the packaging, the repository is
> set
> > up for Apache Rat to check for proper license headers and notifications.
> As
> > this is our first release, it is important to us that we get these
> > processes correctly in place.
> >
> > If the vote passes, these artifacts will be proposed to Apache Incubator
> > for release as Apache Annotator (incubating) 0.1.0.
> >
> > Regards,
> > Randall Leeds
> >
>
Re: [VOTE] Release Apache Annotator (incubating) version 0.1.0
(-rc.2)
Posted by Kurt E Fendt <fe...@mit.edu>.
+1
> On Mar 10, 2020, at 01:20, Randall Leeds <ra...@apache.org> wrote:
>
> I'll kick it off.
>
> No differences between tarball and the git tag:
>
>> diff -r apache-annotator-0.1.0-incubating annotator-git
> Only in annotator: .git
>
> Valid checksums:
>
>> sha256sum -c apache-annotator-0.1.0-rc.2-incubating.tar.gz.sha256
> apache-annotator-0.1.0-rc.2-incubating.tar.gz: OK
>
>> sha512sum -c apache-annotator-0.1.0-rc.2-incubating.tar.gz.sha512
> apache-annotator-0.1.0-rc.2-incubating.tar.gz: OK
>
> Valid signature (from me):
>
>> gpg --verify apache-annotator-0.1.0-rc.2-incubating.tar.gz.asc
> gpg: assuming signed data in
> 'apache-annotator-0.1.0-rc.2-incubating.tar.gz'
> gpg: Signature made Mon 09 Mar 2020 09:36:50 PM PDT
> gpg: using RSA key 83CBD56B79A00C8693C0B919ED6455D90F33F0BB
> gpg: Good signature from "Randall Leeds <ra...@bleeds.info>" [ultimate]
> gpg: aka "Randall Leeds <ra...@gmail.com>"
> [ultimate]
> gpg: aka "Randall Leeds <ra...@apache.org>" [ultimate]
>
> Running `make check` passes in the apache-annotator-0.1.0-incubating
> directory unpacked from the tarball (Node.js v13.10.1, Yarn v1.22.0).
>
> +1 from me!
>
> On Mon, Mar 9, 2020 at 9:43 PM Randall Leeds <ra...@apache.org> wrote:
>
>> Dear community,
>>
>> I would like to propose we release Apache Annotator (incubating) 0.1.0.
>>
>> This is the second release candidate. The first vote was aborted because
>> it was not made on this list before being brought to the incubator PMC.
>>
>> This is the first release of Apache Annotator and represents a modest but
>> exciting step for the community. We encourage everyone to help us verify
>> that the release is proper and help identify and fix any critical issues
>> with the project's packaging or the proper functioning of the build.
>>
>> The release artifacts are available here:
>>
>>
>> https://dist.apache.org/repos/dist/dev/incubator/annotator/source/0.1.0/rc.2
>>
>> There you will find a tarball, a GPG signature, and SHA256/SHA512
>> checksums.
>>
>> A KEYS file for checking the signatures can be found here:
>>
>> https://dist.apache.org/repos/dist/release/incubator/annotator/KEYS
>>
>> Please verify that the build is from commit
>> 2eb484150c0fa86a144fa3f3f6811e856e761dd6, tagged as v0.1.0-rc.2, by
>> checking out the source tree and comparing it to the contents of the
>> tarball.
>>
>> Please validate the release by checking that the signature and checksums
>> are valid for the uploaded tarball and then unpacking it and ensuring that
>> `make && make check` exits cleanly.
>>
>> If you would like to further validate the packaging, the repository is set
>> up for Apache Rat to check for proper license headers and notifications. As
>> this is our first release, it is important to us that we get these
>> processes correctly in place.
>>
>> If the vote passes, these artifacts will be proposed to Apache Incubator
>> for release as Apache Annotator (incubating) 0.1.0.
>>
>> Regards,
>> Randall Leeds
>>
Re: [VOTE] Release Apache Annotator (incubating) version 0.1.0 (-rc.2)
Posted by Randall Leeds <ra...@apache.org>.
I'll kick it off.
No differences between tarball and the git tag:
> diff -r apache-annotator-0.1.0-incubating annotator-git
Only in annotator: .git
Valid checksums:
> sha256sum -c apache-annotator-0.1.0-rc.2-incubating.tar.gz.sha256
apache-annotator-0.1.0-rc.2-incubating.tar.gz: OK
> sha512sum -c apache-annotator-0.1.0-rc.2-incubating.tar.gz.sha512
apache-annotator-0.1.0-rc.2-incubating.tar.gz: OK
Valid signature (from me):
> gpg --verify apache-annotator-0.1.0-rc.2-incubating.tar.gz.asc
gpg: assuming signed data in
'apache-annotator-0.1.0-rc.2-incubating.tar.gz'
gpg: Signature made Mon 09 Mar 2020 09:36:50 PM PDT
gpg: using RSA key 83CBD56B79A00C8693C0B919ED6455D90F33F0BB
gpg: Good signature from "Randall Leeds <ra...@bleeds.info>" [ultimate]
gpg: aka "Randall Leeds <ra...@gmail.com>"
[ultimate]
gpg: aka "Randall Leeds <ra...@apache.org>" [ultimate]
Running `make check` passes in the apache-annotator-0.1.0-incubating
directory unpacked from the tarball (Node.js v13.10.1, Yarn v1.22.0).
+1 from me!
On Mon, Mar 9, 2020 at 9:43 PM Randall Leeds <ra...@apache.org> wrote:
> Dear community,
>
> I would like to propose we release Apache Annotator (incubating) 0.1.0.
>
> This is the second release candidate. The first vote was aborted because
> it was not made on this list before being brought to the incubator PMC.
>
> This is the first release of Apache Annotator and represents a modest but
> exciting step for the community. We encourage everyone to help us verify
> that the release is proper and help identify and fix any critical issues
> with the project's packaging or the proper functioning of the build.
>
> The release artifacts are available here:
>
>
> https://dist.apache.org/repos/dist/dev/incubator/annotator/source/0.1.0/rc.2
>
> There you will find a tarball, a GPG signature, and SHA256/SHA512
> checksums.
>
> A KEYS file for checking the signatures can be found here:
>
> https://dist.apache.org/repos/dist/release/incubator/annotator/KEYS
>
> Please verify that the build is from commit
> 2eb484150c0fa86a144fa3f3f6811e856e761dd6, tagged as v0.1.0-rc.2, by
> checking out the source tree and comparing it to the contents of the
> tarball.
>
> Please validate the release by checking that the signature and checksums
> are valid for the uploaded tarball and then unpacking it and ensuring that
> `make && make check` exits cleanly.
>
> If you would like to further validate the packaging, the repository is set
> up for Apache Rat to check for proper license headers and notifications. As
> this is our first release, it is important to us that we get these
> processes correctly in place.
>
> If the vote passes, these artifacts will be proposed to Apache Incubator
> for release as Apache Annotator (incubating) 0.1.0.
>
> Regards,
> Randall Leeds
>