You are viewing a plain text version of this content. The canonical link for it is here.
Posted to legal-discuss@apache.org by "Roman Shaposhnik (Jira)" <ji...@apache.org> on 2022/05/09 13:29:00 UTC

[jira] [Closed] (LEGAL-612) Using the GitHub "Release" feature

     [ https://issues.apache.org/jira/browse/LEGAL-612?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Roman Shaposhnik closed LEGAL-612.
----------------------------------

> Using the GitHub "Release" feature
> ----------------------------------
>
>                 Key: LEGAL-612
>                 URL: https://issues.apache.org/jira/browse/LEGAL-612
>             Project: Legal Discuss
>          Issue Type: Question
>            Reporter: Richard Eckart de Castilho
>            Priority: Major
>
> GitHub has a feature to attach release notes to a release tag.
> https://docs.github.com/en/repositories/releasing-projects-on-github/about-releases
> Now, it is always nice to have additional channels to publicize release notes and using this feature generates a notification to project watchers. Also, its nice to have the release notes in the same repo as the code.
> That said, creating a release on GitHub also automatically adds a "sources" ZIP to the release which includes the contents of the repo at the git tag of the release.
> Now, the [release policy|https://www.apache.org/legal/release-policy.html#where-do-releases-go] is specific that releases must go to {{downloads.apache.org}} - but it also includes information on publishing release artifacts through {{repository.apache.org}} (even artifacts that are **not** otherwise released via {{downloads.apache.org}}).
> So... since GitHub these days is part of an "extended ASF development landscape", what about the "Releases" feature. 
> Can it be used or is it off-limits? 
> Maybe if the release notes include a warning about the GitHub-generated ZIP?
> In principle, the source release of the project is essentially an export of the repo at the tag - which is what GitHub also auto-generates... but the source ZIP build on the release managers' machine (which gets signed) and the one build by GitHub likely won't be exactly the same.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)

---------------------------------------------------------------------
To unsubscribe, e-mail: legal-discuss-unsubscribe@apache.org
For additional commands, e-mail: legal-discuss-help@apache.org