You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by Sidney Markowitz <si...@apache.org> on 2022/12/14 08:22:58 UTC
[VOTE] Release of 4.0.0 - vote will close on Saturday, December 17, 2022 09:00am UTC
[This email is bcc'd to the Apache PMC to ensure they notice it]
Hello everyone,
Calling for a vote on the release of Apache SpamAssassin 4.0.0
I noticed that the official guidelines on the release process
https://www.apache.org/legal/release-policy.html#policy say that they
encourage the votes include the dev community. It also says that
making the release files available to readers of the developer
mailing list does not violate the rules against publishing them prior
to the release vote.
Only votes from members of the PMC will be binding, but everyone is
encouraged to thoroughly test that these files properly install and
pass the make test checks on your platform and any other tests that
you can perform.
Here are the files that will be released as Apache SpamAssassin 4.0.0
if there are at least three binding +1 votes and more +1 votes
than -1 binding votes at the end of the 72 hour voting period,
Saturday, December 17, 2022 09:00am UTC.
Note that the policy on voting for releases is not the same as for
voting for code committing where a single binding -1 is a veto.
Files are in https://people.apache.org/~sidney/devel/
The only code change since the release of 4.0.0-rc4 has been the
commit in Bug 8087 https://svn.apache.org/viewvc?view=rev&rev=1905867
As per https://www.apache.org/legal/release-policy.html#release-approval
please download and check the files on your platform(s) before voting
+1 if you approve the release, or -1 and state a technical reason why
these files are not ready for release.
The current draft of the release announcement can be seen at
https://svn.apache.org/repos/asf/spamassassin/trunk/build/announcements/4.0.0.txt
I vote +1 for the release after checking on Ubuntu 22.04, macOS 13,
macOS 12, and Windows 10.
sha256sum of archive files:
e5aa17050a30bc72baa86afdc6048cadea4d1ec2ecc61d787717a059b8319e88 Mail-SpamAssassin-4.0.0.tar.bz2
65979da7d103e3c37563f23a1a24f470090afb33664348968a00bf3d09a84f36 Mail-SpamAssassin-4.0.0.tar.gz
063d59ab2c7a67c1707b5b6a6063f97bdc9e3e8ae1246f1d43aa3dd32bf35d06 Mail-SpamAssassin-4.0.0.zip
ae4ffbb917ebc7fefa7240fc5bb5151dda663f8e4059161ad7c9b42eed1bac6d Mail-SpamAssassin-rules-4.0.0.r1905950.tgz
sha512sum of archive files:
a0fe5f6953c9df355bfa011e8a617101687eb156831a057504656921fe76c2a4eb37b5383861aac579e66a20c4454068e81a39826a35eb0266148771567bad5f Mail-SpamAssassin-4.0.0.tar.bz2
db8e5d0249d9fabfa89bc4c7309a7eafd103ae07617ed9bd32e6b35473c5efc05b1a913b4a3d4bb0ff19093400e3510ae602bf9e96290c63e7946a1d0df6de47 Mail-SpamAssassin-4.0.0.tar.gz
d907d59fd6af1560b0817d5397affeb096feaffd01614481b22a172976798f0ab438a7fb4d6878dfbb8338961f888dd69c2f7d9e743a48164e2842fa6f804571 Mail-SpamAssassin-4.0.0.zip
8ff0e68e18dc52a88fec83239bb9dc3a1d34f2dcb4c03cd6c566b97fa91242e3c8d006612aeb4df0acf43929eaaa59d542eb5cf904498343adf5eadefcb89255 Mail-SpamAssassin-rules-4.0.0.r1905950.tgz
Regards,
Sidney Markowitz
Chair, Apache SpamAssassin PMC
sidney@apache.org
sidney@sidney.com
Re: [VOTE] Release of 4.0.0 - vote will close on Saturday, December 17, 2022 09:00am UTC
Posted by "Kevin A. McGrail" <km...@apache.org>.
Always appreciate your insight, Michael, but the voting procedures at
Apache don't support this. Recommend you open a bug which might be
considered for 4.0.1 for any changes.
Unless there are more binding -1's than +1's, the release is official on
the 17th.
Regards,
KAM
On 12/14/2022 12:28 PM, Michael Peddemors wrote:
> Oops.. a little late for mentioning this ;)
> (Congrats everyone btw)
>
> 4.0 would have been a good time to increase the default scanning size..
>
> Computers are a lot better and faster than in the old days, where SA
> only scanned files smaller than 1MG.. and spammers still like sending
> just above that limit. Suggest a max of 4 MG is a lot more reasonable
> default for todays world..
>
> (we still limit body part scan size of course)
>
> body_part_scan_size 200000
> rawbody_part_scan_size 200000
>
> I know, I haven't had time to be as involved in 4.0 as I would have
> liked this year, but I did watch..
>
> Now, really only poking my nose in to say Merry Xmas and happy
> holidays...
>
> It is a time for rest and relaxation, so you MAY want to delay 4.0
> release until after the holidays ;)
>
>
> On 2022-12-14 08:40, Kevin A. McGrail wrote:
>> +1 for the release. (Binding)
>> Tested as non-root user with the tar.bz2 on CentOS 7.9.2009 and the
>> sha256 sig passed.
>> All tests successful.
>> Files=210, Tests=3823, 925 wallclock secs ( 1.41 usr 0.38 sys +
>> 290.36 cusr 37.64 csys = 329.79 CPU)
>> Result: PASS
>>
>> We have also been running rc4 + patches in production and previous
>> RCs/Trunk in production for years. It's production ready and amazing.
>> Regards,
>> KAM
>> --
>> Kevin A. McGrail
>> Member, Apache Software Foundation
>> Chair Emeritus Apache SpamAssassin Project
>> https://www.linkedin.com/in/kmcgrail
>> <https://www.linkedin.com/in/kmcgrail> - 703.798.0171
>>
>>
>> On Wed, Dec 14, 2022 at 5:42 AM Giovanni Bechis <giovanni@paclan.it
>> <ma...@paclan.it>> wrote:
>>
>> On Wed, Dec 14, 2022 at 09:22:58PM +1300, Sidney Markowitz wrote:
>> > [This email is bcc'd to the Apache PMC to ensure they notice it]
>> >
>> > Hello everyone,
>> >
>> > Calling for a vote on the release of Apache SpamAssassin 4.0.0
>> >
>> > I noticed that the official guidelines on the release process
>> > https://www.apache.org/legal/release-policy.html#policy
>> <https://www.apache.org/legal/release-policy.html#policy> say that they
>> > encourage the votes include the dev community. It also says that
>> > making the release files available to readers of the developer
>> > mailing list does not violate the rules against publishing
>> them prior
>> > to the release vote.
>> >
>> > Only votes from members of the PMC will be binding, but
>> everyone is
>> > encouraged to thoroughly test that these files properly
>> install and
>> > pass the make test checks on your platform and any other tests
>> that
>> > you can perform.
>> >
>> > Here are the files that will be released as Apache
>> SpamAssassin 4.0.0
>> > if there are at least three binding +1 votes and more +1 votes
>> > than -1 binding votes at the end of the 72 hour voting period,
>> > Saturday, December 17, 2022 09:00am UTC.
>> >
>> > Note that the policy on voting for releases is not the same as
>> for
>> > voting for code committing where a single binding -1 is a veto.
>> >
>> > Files are in https://people.apache.org/~sidney/devel/
>> <https://people.apache.org/~sidney/devel/>
>> >
>> > The only code change since the release of 4.0.0-rc4 has been the
>> > commit in Bug 8087
>> https://svn.apache.org/viewvc?view=rev&rev=1905867
>> <https://svn.apache.org/viewvc?view=rev&rev=1905867>
>> >
>> > As per
>> https://www.apache.org/legal/release-policy.html#release-approval
>> <https://www.apache.org/legal/release-policy.html#release-approval>
>> > please download and check the files on your platform(s) before
>> voting
>> > +1 if you approve the release, or -1 and state a technical
>> reason why
>> > these files are not ready for release.
>> >
>> > The current draft of the release announcement can be seen at
>> >
>> https://svn.apache.org/repos/asf/spamassassin/trunk/build/announcements/4.0.0.txt
>> <https://svn.apache.org/repos/asf/spamassassin/trunk/build/announcements/4.0.0.txt>
>>
>> >
>> > I vote +1 for the release after checking on Ubuntu 22.04,
>> macOS 13,
>> > macOS 12, and Windows 10.
>> >
>> +1 for the release,
>> checked on CentOS7, CentOS8-Stream, AlmaLinux8, RHEL7 and
>> OpenBSD 7.2.
>>
>> Giovanni
>>
>
>
--
Kevin A. McGrail
KMcGrail@Apache.org
Member, Apache Software Foundation
Chair Emeritus Apache SpamAssassin Project
https://www.linkedin.com/in/kmcgrail - 703.798.0171
Re: [VOTE] Release of 4.0.0 - vote will close on Saturday, December 17, 2022 09:00am UTC
Posted by Sidney Markowitz <si...@sidney.com>.
Michael Peddemors wrote on 15/12/22 6:28 am:
> It is a time for rest and relaxation, so you MAY want to delay 4.0
> release until after the holidays ;)
This way everyone can install the new version while all the mail servers
are shut down for their annual solstice to New Year break :)
Re: [VOTE] Release of 4.0.0 - vote will close on Saturday, December 17, 2022 09:00am UTC
Posted by Michael Peddemors <mi...@linuxmagic.com>.
Oops.. a little late for mentioning this ;)
(Congrats everyone btw)
4.0 would have been a good time to increase the default scanning size..
Computers are a lot better and faster than in the old days, where SA
only scanned files smaller than 1MG.. and spammers still like sending
just above that limit. Suggest a max of 4 MG is a lot more reasonable
default for todays world..
(we still limit body part scan size of course)
body_part_scan_size 200000
rawbody_part_scan_size 200000
I know, I haven't had time to be as involved in 4.0 as I would have
liked this year, but I did watch..
Now, really only poking my nose in to say Merry Xmas and happy holidays...
It is a time for rest and relaxation, so you MAY want to delay 4.0
release until after the holidays ;)
On 2022-12-14 08:40, Kevin A. McGrail wrote:
> +1 for the release. (Binding)
> Tested as non-root user with the tar.bz2 on CentOS 7.9.2009 and the
> sha256 sig passed.
> All tests successful.
> Files=210, Tests=3823, 925 wallclock secs ( 1.41 usr 0.38 sys + 290.36
> cusr 37.64 csys = 329.79 CPU)
> Result: PASS
>
> We have also been running rc4 + patches in production and previous
> RCs/Trunk in production for years. It's production ready and amazing.
> Regards,
> KAM
> --
> Kevin A. McGrail
> Member, Apache Software Foundation
> Chair Emeritus Apache SpamAssassin Project
> https://www.linkedin.com/in/kmcgrail
> <https://www.linkedin.com/in/kmcgrail> - 703.798.0171
>
>
> On Wed, Dec 14, 2022 at 5:42 AM Giovanni Bechis <giovanni@paclan.it
> <ma...@paclan.it>> wrote:
>
> On Wed, Dec 14, 2022 at 09:22:58PM +1300, Sidney Markowitz wrote:
> > [This email is bcc'd to the Apache PMC to ensure they notice it]
> >
> > Hello everyone,
> >
> > Calling for a vote on the release of Apache SpamAssassin 4.0.0
> >
> > I noticed that the official guidelines on the release process
> > https://www.apache.org/legal/release-policy.html#policy
> <https://www.apache.org/legal/release-policy.html#policy> say that they
> > encourage the votes include the dev community. It also says that
> > making the release files available to readers of the developer
> > mailing list does not violate the rules against publishing them prior
> > to the release vote.
> >
> > Only votes from members of the PMC will be binding, but everyone is
> > encouraged to thoroughly test that these files properly install and
> > pass the make test checks on your platform and any other tests that
> > you can perform.
> >
> > Here are the files that will be released as Apache SpamAssassin 4.0.0
> > if there are at least three binding +1 votes and more +1 votes
> > than -1 binding votes at the end of the 72 hour voting period,
> > Saturday, December 17, 2022 09:00am UTC.
> >
> > Note that the policy on voting for releases is not the same as for
> > voting for code committing where a single binding -1 is a veto.
> >
> > Files are in https://people.apache.org/~sidney/devel/
> <https://people.apache.org/~sidney/devel/>
> >
> > The only code change since the release of 4.0.0-rc4 has been the
> > commit in Bug 8087
> https://svn.apache.org/viewvc?view=rev&rev=1905867
> <https://svn.apache.org/viewvc?view=rev&rev=1905867>
> >
> > As per
> https://www.apache.org/legal/release-policy.html#release-approval
> <https://www.apache.org/legal/release-policy.html#release-approval>
> > please download and check the files on your platform(s) before voting
> > +1 if you approve the release, or -1 and state a technical reason why
> > these files are not ready for release.
> >
> > The current draft of the release announcement can be seen at
> >
> https://svn.apache.org/repos/asf/spamassassin/trunk/build/announcements/4.0.0.txt <https://svn.apache.org/repos/asf/spamassassin/trunk/build/announcements/4.0.0.txt>
> >
> > I vote +1 for the release after checking on Ubuntu 22.04, macOS 13,
> > macOS 12, and Windows 10.
> >
> +1 for the release,
> checked on CentOS7, CentOS8-Stream, AlmaLinux8, RHEL7 and
> OpenBSD 7.2.
>
> Giovanni
>
--
"Catch the Magic of Linux..."
------------------------------------------------------------------------
Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.
------------------------------------------------------------------------
604-682-0300 Beautiful British Columbia, Canada
This email and any electronic data contained are confidential and intended
solely for the use of the individual or entity to which they are addressed.
Please note that any views or opinions presented in this email are solely
those of the author and are not intended to represent those of the company.
Re: [VOTE] Release of 4.0.0 - vote will close on Saturday, December 17, 2022 09:00am UTC
Posted by "Kevin A. McGrail" <km...@apache.org>.
+1 for the release. (Binding)
Tested as non-root user with the tar.bz2 on CentOS 7.9.2009 and the sha256
sig passed.
All tests successful.
Files=210, Tests=3823, 925 wallclock secs ( 1.41 usr 0.38 sys + 290.36
cusr 37.64 csys = 329.79 CPU)
Result: PASS
We have also been running rc4 + patches in production and previous
RCs/Trunk in production for years. It's production ready and amazing.
Regards,
KAM
--
Kevin A. McGrail
Member, Apache Software Foundation
Chair Emeritus Apache SpamAssassin Project
https://www.linkedin.com/in/kmcgrail - 703.798.0171
On Wed, Dec 14, 2022 at 5:42 AM Giovanni Bechis <gi...@paclan.it> wrote:
> On Wed, Dec 14, 2022 at 09:22:58PM +1300, Sidney Markowitz wrote:
> > [This email is bcc'd to the Apache PMC to ensure they notice it]
> >
> > Hello everyone,
> >
> > Calling for a vote on the release of Apache SpamAssassin 4.0.0
> >
> > I noticed that the official guidelines on the release process
> > https://www.apache.org/legal/release-policy.html#policy say that they
> > encourage the votes include the dev community. It also says that
> > making the release files available to readers of the developer
> > mailing list does not violate the rules against publishing them prior
> > to the release vote.
> >
> > Only votes from members of the PMC will be binding, but everyone is
> > encouraged to thoroughly test that these files properly install and
> > pass the make test checks on your platform and any other tests that
> > you can perform.
> >
> > Here are the files that will be released as Apache SpamAssassin 4.0.0
> > if there are at least three binding +1 votes and more +1 votes
> > than -1 binding votes at the end of the 72 hour voting period,
> > Saturday, December 17, 2022 09:00am UTC.
> >
> > Note that the policy on voting for releases is not the same as for
> > voting for code committing where a single binding -1 is a veto.
> >
> > Files are in https://people.apache.org/~sidney/devel/
> >
> > The only code change since the release of 4.0.0-rc4 has been the
> > commit in Bug 8087 https://svn.apache.org/viewvc?view=rev&rev=1905867
> >
> > As per https://www.apache.org/legal/release-policy.html#release-approval
> > please download and check the files on your platform(s) before voting
> > +1 if you approve the release, or -1 and state a technical reason why
> > these files are not ready for release.
> >
> > The current draft of the release announcement can be seen at
> >
> https://svn.apache.org/repos/asf/spamassassin/trunk/build/announcements/4.0.0.txt
> >
> > I vote +1 for the release after checking on Ubuntu 22.04, macOS 13,
> > macOS 12, and Windows 10.
> >
> +1 for the release,
> checked on CentOS7, CentOS8-Stream, AlmaLinux8, RHEL7 and
> OpenBSD 7.2.
>
> Giovanni
>
Re: [VOTE] Release of 4.0.0 - vote will close on Saturday, December 17, 2022 09:00am UTC
Posted by Giovanni Bechis <gi...@paclan.it>.
On Wed, Dec 14, 2022 at 09:22:58PM +1300, Sidney Markowitz wrote:
> [This email is bcc'd to the Apache PMC to ensure they notice it]
>
> Hello everyone,
>
> Calling for a vote on the release of Apache SpamAssassin 4.0.0
>
> I noticed that the official guidelines on the release process
> https://www.apache.org/legal/release-policy.html#policy say that they
> encourage the votes include the dev community. It also says that
> making the release files available to readers of the developer
> mailing list does not violate the rules against publishing them prior
> to the release vote.
>
> Only votes from members of the PMC will be binding, but everyone is
> encouraged to thoroughly test that these files properly install and
> pass the make test checks on your platform and any other tests that
> you can perform.
>
> Here are the files that will be released as Apache SpamAssassin 4.0.0
> if there are at least three binding +1 votes and more +1 votes
> than -1 binding votes at the end of the 72 hour voting period,
> Saturday, December 17, 2022 09:00am UTC.
>
> Note that the policy on voting for releases is not the same as for
> voting for code committing where a single binding -1 is a veto.
>
> Files are in https://people.apache.org/~sidney/devel/
>
> The only code change since the release of 4.0.0-rc4 has been the
> commit in Bug 8087 https://svn.apache.org/viewvc?view=rev&rev=1905867
>
> As per https://www.apache.org/legal/release-policy.html#release-approval
> please download and check the files on your platform(s) before voting
> +1 if you approve the release, or -1 and state a technical reason why
> these files are not ready for release.
>
> The current draft of the release announcement can be seen at
> https://svn.apache.org/repos/asf/spamassassin/trunk/build/announcements/4.0.0.txt
>
> I vote +1 for the release after checking on Ubuntu 22.04, macOS 13,
> macOS 12, and Windows 10.
>
+1 for the release,
checked on CentOS7, CentOS8-Stream, AlmaLinux8, RHEL7 and
OpenBSD 7.2.
Giovanni
Re: [VOTE] Release of 4.0.0 - vote will close on Saturday, December 17, 2022 09:00am UTC
Posted by Bill Cole <sa...@billmail.scconsult.com>.
On 2022-12-14 at 03:22:58 UTC-0500 (Wed, 14 Dec 2022 21:22:58 +1300)
Sidney Markowitz <si...@apache.org>
is rumored to have said:
> [This email is bcc'd to the Apache PMC to ensure they notice it]
>
> Hello everyone,
>
> Calling for a vote on the release of Apache SpamAssassin 4.0.0
I vote +1 for releasing 4.0.0.
> Files are in https://people.apache.org/~sidney/devel/
I have verified that all 3 archives match the GPG signatures and both hashes.
I have verified that all 3 archives expand to a source tree with identical contents.
I have verified that the unpacked source builds and tests cleanly on OS X El Capitan (v10.11.6/Darwin 15.6/Perl 5.34) and macOS Catalina (v10.15.7/Darwin 19.6/Perl 5.34) using the Makefile.PL arguments and build environment of MacPorts (i.e. /opt/local/ prefix et al.)
I have been running trunk in production for weeks without incident.
> The only code change since the release of 4.0.0-rc4 has been the
> commit in Bug 8087 https://svn.apache.org/viewvc?view=rev&rev=1905867
>
> As per https://www.apache.org/legal/release-policy.html#release-approval
> please download and check the files on your platform(s) before voting
> +1 if you approve the release, or -1 and state a technical reason why
> these files are not ready for release.
>
> The current draft of the release announcement can be seen at
> https://svn.apache.org/repos/asf/spamassassin/trunk/build/announcements/4.0.0.txt
>
> I vote +1 for the release after checking on Ubuntu 22.04, macOS 13,
> macOS 12, and Windows 10.
>
> sha256sum of archive files:
>
> e5aa17050a30bc72baa86afdc6048cadea4d1ec2ecc61d787717a059b8319e88 Mail-SpamAssassin-4.0.0.tar.bz2
> 65979da7d103e3c37563f23a1a24f470090afb33664348968a00bf3d09a84f36 Mail-SpamAssassin-4.0.0.tar.gz
> 063d59ab2c7a67c1707b5b6a6063f97bdc9e3e8ae1246f1d43aa3dd32bf35d06 Mail-SpamAssassin-4.0.0.zip
> ae4ffbb917ebc7fefa7240fc5bb5151dda663f8e4059161ad7c9b42eed1bac6d Mail-SpamAssassin-rules-4.0.0.r1905950.tgz
>
> sha512sum of archive files:
>
> a0fe5f6953c9df355bfa011e8a617101687eb156831a057504656921fe76c2a4eb37b5383861aac579e66a20c4454068e81a39826a35eb0266148771567bad5f Mail-SpamAssassin-4.0.0.tar.bz2
> db8e5d0249d9fabfa89bc4c7309a7eafd103ae07617ed9bd32e6b35473c5efc05b1a913b4a3d4bb0ff19093400e3510ae602bf9e96290c63e7946a1d0df6de47 Mail-SpamAssassin-4.0.0.tar.gz
> d907d59fd6af1560b0817d5397affeb096feaffd01614481b22a172976798f0ab438a7fb4d6878dfbb8338961f888dd69c2f7d9e743a48164e2842fa6f804571 Mail-SpamAssassin-4.0.0.zip
> 8ff0e68e18dc52a88fec83239bb9dc3a1d34f2dcb4c03cd6c566b97fa91242e3c8d006612aeb4df0acf43929eaaa59d542eb5cf904498343adf5eadefcb89255 Mail-SpamAssassin-rules-4.0.0.r1905950.tgz
>
> Regards,
>
> Sidney Markowitz
> Chair, Apache SpamAssassin PMC
> sidney@apache.org
> sidney@sidney.com
--
Bill Cole
bill@scconsult.com or billcole@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire
Re: [VOTE] Release of 4.0.0 - vote will close on Saturday, December 17, 2022 09:00am UTC
Posted by Noah Meyerhans <fr...@morgul.net>.
On Wed, Dec 14, 2022 at 09:22:58PM +1300, Sidney Markowitz wrote:
> Only votes from members of the PMC will be binding, but everyone is
> encouraged to thoroughly test that these files properly install and
> pass the make test checks on your platform and any other tests that
> you can perform.
+1 non-binding. I maintain SpamAssassin in Debian and have been
publishing the RCs to Debian's unstable and testing branches. Feedback
from the community, though limited, has been positive. My own
experiences on my mail infrastructure have also been positive.
Ship it.
noah
Re: [VOTE] Release of 4.0.0 - vote will close on Saturday, December 17, 2022 09:00am UTC
Posted by Mark Martinec <Ma...@ijs.si>.
> Calling for a vote on the release of Apache SpamAssassin 4.0.0
+1 for a long-awaited release
and thanks to everyone for making it happen!
Have been running trunk for months in production, and relying on
normalize_charset (which now became a default) since a long time.
It makes writing rules to match properly decoded non-ASCII text
(Subject, display name, body, ...) so much easier simply in UTF-8,
compared to previous hacking with hex-coded bytes!
FreeBSD 13.1, perl 5.36
Mark
[RESULT] [VOTE] Release of 4.0.0 - vote will close on Saturday, December 17, 2022 09:00am UTC
Posted by Sidney Markowitz <si...@apache.org>.
With five +1, no 0, and no -1 binding votes, the vote to release Apache
SpamAssassin 4.0.0 has PASSED.
I will now commence the remainder of the release process.
Thank you everyone who has helped with coding, testing, and bug
reporting in the almost eight years since we split off the 3.4 branch in
svn to start parallel work towards a 4.0 release.
Sidney Markowitz
Chair, Apache SpamAssassin PMC
sidney@apache.org