You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@jena.apache.org by Rob Vesse <rv...@dotnetrdf.org> on 2014/06/02 13:33:33 UTC
[VOTE] Release Jena 2.11.2
Hi,
Here is a vote on a release build for Jena 2.11.2 (with Fuseki artifact
1.0.2).
Everyone, not just committers, is invited to test and vote.
(We do need at least 3 PMC +1's but the more it's tested, the better.)
Staging repository:
https://repository.apache.org/content/repositories/orgapachejena-1002/
Proposed dist/ area:
http://people.apache.org/~rvesse/jena-2.11.2/
Keys:
https://svn.apache.org/repos/asf/jena/dist/KEYS
SVN tag:
https://svn.apache.org/repos/asf/jena/tags/jena-2.11.2
Dependency Changes since previous release:
jena-parent:
- new: org.apache.httpcomponents.httpclient-cache (tracks httpclient
version)
- Apache parent 13 -> 14
- slf4j 1.6.4 -> 1.7.6
- log4j 1.2.16 -> 1.2.17
- jsonld-java 0.3 -> 0.4
- httpclient 4.2.3 -> 4.2.6
- Lucene/solr 4.3.1 -> 4.6.1 (was in jena-text, now in jena-parent)
jena-spatial:
- com.spatial4j 0.3 -> 0.4
jena-fuseki:
- jetty 8.1.11.v20130520 -> 8.1.14.v20131031
Please vote to approve this release:
[ ] +1 Approve the release
[ ] 0 Don't care
[ ] -1 Don't release, because ...
This vote will be open to the end of
Thursday, 5th June 2014, 23:59 UTC
(72 hours from the same hour tonight UTC).
Rob
Checking needed:
+ does everything work on MS Windows?
+ does everything work on OS X?
+ is the GPG signature fine?
+ are the checksums correct?
+ is there a source archive?
+ can the source archive really be built?
+ is there a correct LICENSE and NOTICE file in each artifact
(both source and binary artifacts)?
+ does the NOTICE file contain all necessary attributions?
+ have any licenses of dependencies changed due to upgrades? if so have
LICENSE and NOTICE been upgraded appropriately?
+ does the tag in the SCM contain reproducible sources?
Re: [VOTE] Release Jena 2.11.2
Posted by Andy Seaborne <an...@apache.org>.
On 05/06/14 00:57, Ian Dickinson wrote:
> I can't vote yet, because I don't have Rob's key in my keyring so I
> can't verify the signing. And I've forgotten now how to do the arcane
> gpg dance to solve that problem. Anyone remind me?
>
> Thanks,
> Ian
>
It's
gpg --import KEYS
or
pgp < KEYS
Andy
Re: [VOTE] Release Jena 2.11.2
Posted by Ian Dickinson <i....@gmail.com>.
Doh, yes, thanks both. I should have realised that I needed to
reimport the KEYS file, since it now contains Rob's key.
I was getting confused with the complicated bee dance you're supposed
to go through to sign someone else's key to verify their identity
(someone once declined to sign mine since I didn't have my passport
with me at the time).
Ian
Re: [VOTE] Release Jena 2.11.2
Posted by Rob Vesse <rv...@dotnetrdf.org>.
Ian
I assume you get a "Public Key Not Found" error as described at
http://www.apache.org/dev/release-signing#public-key-not-found
You need to download the Jena KEYS file (which is linked in the vote
email) and import it to your key ring:
> gpg --import KEYS
Hope this helps,
Rob
On 05/06/2014 00:57, "Ian Dickinson" <i....@gmail.com> wrote:
>I can't vote yet, because I don't have Rob's key in my keyring so I
>can't verify the signing. And I've forgotten now how to do the arcane
>gpg dance to solve that problem. Anyone remind me?
>
>Thanks,
>Ian
Re: [VOTE] Release Jena 2.11.2
Posted by Ian Dickinson <i....@gmail.com>.
I can't vote yet, because I don't have Rob's key in my keyring so I
can't verify the signing. And I've forgotten now how to do the arcane
gpg dance to solve that problem. Anyone remind me?
Thanks,
Ian
Re: [VOTE] Release Jena 2.11.2
Posted by Rob Vesse <rv...@dotnetrdf.org>.
My vote is a +1
--------------------
Checking carried out
+ does everything work on MS Windows?
Not tested
+ does everything work on OS X?
Tested as working
+ is the GPG signature fine?
Yes for all artifacts
+ are the checksums correct?
Yes for all artifacts
+ is there a source archive?
Yes
+ can the source archive really be built?
Yes
+ is there a correct LICENSE and NOTICE file in each artifact
(both source and binary artifacts)?
Yes, both source and binary artifacts checked
+ does the NOTICE file contain all necessary attributions?
Yes all necessary attributions are present
+ have any licenses of dependencies changed due to upgrades? if so have
LICENSE and NOTICE been upgraded appropriately?
All dependencies with changes remain under ASLv2 or ASF Category A
approved licenses and are already noted in L&N where appropriate.
Therefore our L&N are good
+ does the tag in the SCM contain reproducible sources?
Yes, successfully built from check out of tag
Rob
On 02/06/2014 12:33, "Rob Vesse" <rv...@dotnetrdf.org> wrote:
>Hi,
>
>Here is a vote on a release build for Jena 2.11.2 (with Fuseki artifact
>1.0.2).
>
>Everyone, not just committers, is invited to test and vote.
>(We do need at least 3 PMC +1's but the more it's tested, the better.)
>
>Staging repository:
>https://repository.apache.org/content/repositories/orgapachejena-1002/
>
>Proposed dist/ area:
>http://people.apache.org/~rvesse/jena-2.11.2/
>
>Keys:
>https://svn.apache.org/repos/asf/jena/dist/KEYS
>
>SVN tag:
>https://svn.apache.org/repos/asf/jena/tags/jena-2.11.2
>
>Dependency Changes since previous release:
>
>jena-parent:
>- new: org.apache.httpcomponents.httpclient-cache (tracks httpclient
>version)
>- Apache parent 13 -> 14
>- slf4j 1.6.4 -> 1.7.6
>- log4j 1.2.16 -> 1.2.17
>- jsonld-java 0.3 -> 0.4
>- httpclient 4.2.3 -> 4.2.6
>- Lucene/solr 4.3.1 -> 4.6.1 (was in jena-text, now in jena-parent)
>
>jena-spatial:
>- com.spatial4j 0.3 -> 0.4
>
>jena-fuseki:
>- jetty 8.1.11.v20130520 -> 8.1.14.v20131031
>
>Please vote to approve this release:
>
> [ ] +1 Approve the release
> [ ] 0 Don't care
> [ ] -1 Don't release, because ...
>
>This vote will be open to the end of
>
> Thursday, 5th June 2014, 23:59 UTC
>
>(72 hours from the same hour tonight UTC).
>
>Rob
>
>
>Checking needed:
>
>+ does everything work on MS Windows?
>+ does everything work on OS X?
>+ is the GPG signature fine?
>+ are the checksums correct?
>+ is there a source archive?
>+ can the source archive really be built?
>+ is there a correct LICENSE and NOTICE file in each artifact
> (both source and binary artifacts)?
>+ does the NOTICE file contain all necessary attributions?
>+ have any licenses of dependencies changed due to upgrades? if so have
>LICENSE and NOTICE been upgraded appropriately?
>+ does the tag in the SCM contain reproducible sources?
>
>
Re: [VOTE] Release Jena 2.11.2
Posted by Ian Dickinson <i....@gmail.com>.
On Mon, Jun 2, 2014 at 12:33 PM, Rob Vesse <rv...@dotnetrdf.org> wrote:
> Hi,
>
> Here is a vote on a release build for Jena 2.11.2 (with Fuseki artifact
> 1.0.2).
>
> Everyone, not just committers, is invited to test and vote.
> (We do need at least 3 PMC +1's but the more it's tested, the better.)
Slightly late, sorry, but +1. Tested on Ubuntu 14.04
Ian
Re: [VOTE] Release Jena 2.11.2
Posted by Andy Seaborne <an...@apache.org>.
> Please vote to approve this release:
>
> [ ] +1 Approve the release
> [ ] 0 Don't care
> [ ] -1 Don't release, because ...
>
> This vote will be open to the end of
>
> Thursday, 5th June 2014, 23:59 UTC
>
> (72 hours from the same hour tonight UTC).
+1
---------------
+ does everything work on MS Windows?
Jenkins can build it.
+ does everything work on OS X?
??
+ is the GPG signature fine?
yes
+ are the checksums correct?
yes
+ is there a source archive?
yes
+ can the source archive really be built?
Yes
+ is there a correct LICENSE and NOTICE file in each artifact
(both source and binary artifacts)?
Yes
+ does the NOTICE file contain all necessary attributions?
Yes
+ have any licenses of dependencies changed due to upgrades? if so have
LICENSE and NOTICE been upgraded appropriately?
L&N look OK
+ does the tag in the SCM contain reproducible sources?
Yes
Re: [VOTE] Release Jena 2.11.2
Posted by Stephen Allen <sa...@apache.org>.
+1
On Mon, Jun 2, 2014 at 7:33 AM, Rob Vesse <rv...@dotnetrdf.org> wrote:
> Hi,
>
> Here is a vote on a release build for Jena 2.11.2 (with Fuseki artifact
> 1.0.2).
>
> Everyone, not just committers, is invited to test and vote.
> (We do need at least 3 PMC +1's but the more it's tested, the better.)
>
> Staging repository:
> https://repository.apache.org/content/repositories/orgapachejena-1002/
>
> Proposed dist/ area:
> http://people.apache.org/~rvesse/jena-2.11.2/
>
> Keys:
> https://svn.apache.org/repos/asf/jena/dist/KEYS
>
> SVN tag:
> https://svn.apache.org/repos/asf/jena/tags/jena-2.11.2
>
> Dependency Changes since previous release:
>
> jena-parent:
> - new: org.apache.httpcomponents.httpclient-cache (tracks httpclient
> version)
> - Apache parent 13 -> 14
> - slf4j 1.6.4 -> 1.7.6
> - log4j 1.2.16 -> 1.2.17
> - jsonld-java 0.3 -> 0.4
> - httpclient 4.2.3 -> 4.2.6
> - Lucene/solr 4.3.1 -> 4.6.1 (was in jena-text, now in jena-parent)
>
> jena-spatial:
> - com.spatial4j 0.3 -> 0.4
>
> jena-fuseki:
> - jetty 8.1.11.v20130520 -> 8.1.14.v20131031
>
> Please vote to approve this release:
>
> [ ] +1 Approve the release
> [ ] 0 Don't care
> [ ] -1 Don't release, because ...
>
> This vote will be open to the end of
>
> Thursday, 5th June 2014, 23:59 UTC
>
> (72 hours from the same hour tonight UTC).
>
> Rob
>
>
> Checking needed:
>
> + does everything work on MS Windows?
>
Yes
> + does everything work on OS X?
> + is the GPG signature fine?
> + are the checksums correct?
> + is there a source archive?
> + can the source archive really be built?
>
Yes
> + is there a correct LICENSE and NOTICE file in each artifact
> (both source and binary artifacts)?
>
Yes
> + does the NOTICE file contain all necessary attributions?
>
Yes
> + have any licenses of dependencies changed due to upgrades? if so have
> LICENSE and NOTICE been upgraded appropriately?
> + does the tag in the SCM contain reproducible sources?
>
>
Yes