You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@daffodil.apache.org by Mike Beckerle <mb...@apache.org> on 2021/12/20 18:22:31 UTC
[VOTE] Release Apache Daffodil 3.2.1 (Urgent Patch Release) (RC2)
(This is the re-vote for 3.2.1-rc2, as rc1 vote was cancelled.)
Hi all,
I'd like to call a vote to release Apache Daffodil 3.2.1 (RC2) and to do so
with an abbreviated approval cycle (to be used only for urgent patch
releases).
Your vote covers the release as usual, but also due to the urgency of
this patch release, you are also voting on these 4 deltas from our more
usual release process:
* You agree the patch release is urgent and this abbreviated approval
cycle is warranted and appropriate.
* The DISCUSS email thread will be superseded by this (and prior) VOTE thread.
* Shortened 48 hours of work-day time for lazy consensus on the VOTE
* A minimum of three +1 and zero -1 binding votes are needed
For a summary of the changes in this release, see the release notes page:
https://daffodil.apache.org/releases/3.2.1/
All distribution packages, including signatures, digests, etc. can be found at:
https://dist.apache.org/repos/dist/dev/daffodil/3.2.1-rc2/
Staging artifacts can be found at:
https://repository.apache.org/content/repositories/orgapachedaffodil-1026/
This release has been signed with PGP key 274B8F1413A680AF, corresponding
to mbeckerle@apache.org, which is included in the KEYS file here:
https://downloads.apache.org/daffodil/KEYS
The release candidate has been tagged in git with v3.2.1-rc2.
For reference, here is a list of all closed JIRAs tagged with 3.2.1:
https://s.apache.org/daffodil-issues-3.2.1
Please review and vote.
Per the abbreviated process, the vote will be open for 48 hours.
(Until Wednesday 22 December 2021 13:30 EST.US).
[ ] +1 approve the release, and this abbreviated release process
[ ] +0 no opinion
[ ] -1 disapprove of the release, or of this abbreviated release
process (and reason why)
[RESULT] [VOTE] Release Apache Daffodil 3.2.1 (Urgent Patch Release) (RC2)
Posted by Mike Beckerle <mb...@apache.org>.
The vote passes with 4 +1 votes and no -1 votes.
Vote thread: https://lists.apache.org/thread/dclp867j38ttqtbtmtvmwokoyslnh59j
Thanks to all who evaluated the release candidate and voted.
I will now continue to finalize the release.
On Tue, Dec 21, 2021 at 10:21 AM Thompson, Dave
<dt...@owlcyberdefense.com> wrote:
>
> +1
>
> - Verified v3.2.1 JIRA tickets have been verified/closed.
> - Executed all daffodil sub-project SBT test suites on supported Java versions 8 and 17 without error.
> - Executed compile/save each nightly run schema on supported Java versions 8 and 17 without error.
> - Executed the nightly performance test suite on supported Java versions 8 and 17 without error.
> - Executed dfdl-schema repo sub-module SBT test suite on supported Java versions 8 and 17 without errors .
>
> -----Original Message-----
> From: Mike Beckerle
> Sent: Monday, December 20, 2021 1:23 PM
> To: dev@daffodil.apache.org
> Subject: [VOTE] Release Apache Daffodil 3.2.1 (Urgent Patch Release) (RC2)
>
> (This is the re-vote for 3.2.1-rc2, as rc1 vote was cancelled.)
>
> Hi all,
>
> I'd like to call a vote to release Apache Daffodil 3.2.1 (RC2) and to do so with an abbreviated approval cycle (to be used only for urgent patch releases).
>
> Your vote covers the release as usual, but also due to the urgency of this patch release, you are also voting on these 4 deltas from our more usual release process:
>
> * You agree the patch release is urgent and this abbreviated approval
> cycle is warranted and appropriate.
>
> * The DISCUSS email thread will be superseded by this (and prior) VOTE thread.
>
> * Shortened 48 hours of work-day time for lazy consensus on the VOTE
>
> * A minimum of three +1 and zero -1 binding votes are needed
>
> For a summary of the changes in this release, see the release notes page:
>
> https://daffodil.apache.org/releases/3.2.1/
>
> All distribution packages, including signatures, digests, etc. can be found at:
>
> https://dist.apache.org/repos/dist/dev/daffodil/3.2.1-rc2/
>
> Staging artifacts can be found at:
>
> https://repository.apache.org/content/repositories/orgapachedaffodil-1026/
>
> This release has been signed with PGP key 274B8F1413A680AF, corresponding to mbeckerle@apache.org, which is included in the KEYS file here:
>
> https://downloads.apache.org/daffodil/KEYS
>
> The release candidate has been tagged in git with v3.2.1-rc2.
>
> For reference, here is a list of all closed JIRAs tagged with 3.2.1:
>
> https://s.apache.org/daffodil-issues-3.2.1
>
> Please review and vote.
>
> Per the abbreviated process, the vote will be open for 48 hours.
> (Until Wednesday 22 December 2021 13:30 EST.US).
>
> [ ] +1 approve the release, and this abbreviated release process [ ] +0 no opinion [ ] -1 disapprove of the release, or of this abbreviated release
> process (and reason why)
RE: [VOTE] Release Apache Daffodil 3.2.1 (Urgent Patch Release) (RC2)
Posted by "Thompson, Dave" <dt...@owlcyberdefense.com>.
+1
- Verified v3.2.1 JIRA tickets have been verified/closed.
- Executed all daffodil sub-project SBT test suites on supported Java versions 8 and 17 without error.
- Executed compile/save each nightly run schema on supported Java versions 8 and 17 without error.
- Executed the nightly performance test suite on supported Java versions 8 and 17 without error.
- Executed dfdl-schema repo sub-module SBT test suite on supported Java versions 8 and 17 without errors .
-----Original Message-----
From: Mike Beckerle
Sent: Monday, December 20, 2021 1:23 PM
To: dev@daffodil.apache.org
Subject: [VOTE] Release Apache Daffodil 3.2.1 (Urgent Patch Release) (RC2)
(This is the re-vote for 3.2.1-rc2, as rc1 vote was cancelled.)
Hi all,
I'd like to call a vote to release Apache Daffodil 3.2.1 (RC2) and to do so with an abbreviated approval cycle (to be used only for urgent patch releases).
Your vote covers the release as usual, but also due to the urgency of this patch release, you are also voting on these 4 deltas from our more usual release process:
* You agree the patch release is urgent and this abbreviated approval
cycle is warranted and appropriate.
* The DISCUSS email thread will be superseded by this (and prior) VOTE thread.
* Shortened 48 hours of work-day time for lazy consensus on the VOTE
* A minimum of three +1 and zero -1 binding votes are needed
For a summary of the changes in this release, see the release notes page:
https://daffodil.apache.org/releases/3.2.1/
All distribution packages, including signatures, digests, etc. can be found at:
https://dist.apache.org/repos/dist/dev/daffodil/3.2.1-rc2/
Staging artifacts can be found at:
https://repository.apache.org/content/repositories/orgapachedaffodil-1026/
This release has been signed with PGP key 274B8F1413A680AF, corresponding to mbeckerle@apache.org, which is included in the KEYS file here:
https://downloads.apache.org/daffodil/KEYS
The release candidate has been tagged in git with v3.2.1-rc2.
For reference, here is a list of all closed JIRAs tagged with 3.2.1:
https://s.apache.org/daffodil-issues-3.2.1
Please review and vote.
Per the abbreviated process, the vote will be open for 48 hours.
(Until Wednesday 22 December 2021 13:30 EST.US).
[ ] +1 approve the release, and this abbreviated release process [ ] +0 no opinion [ ] -1 disapprove of the release, or of this abbreviated release
process (and reason why)
Re: [VOTE] Release Apache Daffodil 3.2.1 (Urgent Patch Release) (RC2)
Posted by Mike Beckerle <mb...@apache.org>.
+1
I repeated all the same tests I did for rc1.
I ran a script that downloads all the artifacts and checks the hashes.
I verified that 61 DFDL schemas still pass all their tests, which
includes PCAP and EthernetIP which compute IPv4 packet checksums.
I verified that 13 DFDL schemas still run on IBM DFDL, which verifies
that 3.2.1-rc2 works properly with the IBM cross-test rig, and the
schemas remain portable DFDL.
On Mon, Dec 20, 2021 at 1:22 PM Mike Beckerle <mb...@apache.org> wrote:
>
> (This is the re-vote for 3.2.1-rc2, as rc1 vote was cancelled.)
>
> Hi all,
>
> I'd like to call a vote to release Apache Daffodil 3.2.1 (RC2) and to do so
> with an abbreviated approval cycle (to be used only for urgent patch
> releases).
>
> Your vote covers the release as usual, but also due to the urgency of
> this patch release, you are also voting on these 4 deltas from our more
> usual release process:
>
> * You agree the patch release is urgent and this abbreviated approval
> cycle is warranted and appropriate.
>
> * The DISCUSS email thread will be superseded by this (and prior) VOTE thread.
>
> * Shortened 48 hours of work-day time for lazy consensus on the VOTE
>
> * A minimum of three +1 and zero -1 binding votes are needed
>
> For a summary of the changes in this release, see the release notes page:
>
> https://daffodil.apache.org/releases/3.2.1/
>
> All distribution packages, including signatures, digests, etc. can be found at:
>
> https://dist.apache.org/repos/dist/dev/daffodil/3.2.1-rc2/
>
> Staging artifacts can be found at:
>
> https://repository.apache.org/content/repositories/orgapachedaffodil-1026/
>
> This release has been signed with PGP key 274B8F1413A680AF, corresponding
> to mbeckerle@apache.org, which is included in the KEYS file here:
>
> https://downloads.apache.org/daffodil/KEYS
>
> The release candidate has been tagged in git with v3.2.1-rc2.
>
> For reference, here is a list of all closed JIRAs tagged with 3.2.1:
>
> https://s.apache.org/daffodil-issues-3.2.1
>
> Please review and vote.
>
> Per the abbreviated process, the vote will be open for 48 hours.
> (Until Wednesday 22 December 2021 13:30 EST.US).
>
> [ ] +1 approve the release, and this abbreviated release process
> [ ] +0 no opinion
> [ ] -1 disapprove of the release, or of this abbreviated release
> process (and reason why)
Re: [VOTE] Release Apache Daffodil 3.2.1 (Urgent Patch Release) (RC2)
Posted by Steve Lawrence <sl...@apache.org>.
+1 (binding)
I did slightly different verification than I normally do due to the very
minor differences with rc2. I checked:
[OK] hashes and signatures of source and helper binaries are correct
[OK] signature of git tag is correct
[OK] source release matches git tag (minus KEYS file)
[OK] source release is exactly the same as rc1, except for log4j dep
[OK] helper binaries are exactly the same as rc1, except for log4j jar
[OK] source compiles and all tests pass
[OK] rpm and msi install and run with basic usage
[OK] ~60 public and private DFDL schema projects pass tests
[OK] no open CVE's found using sbt-dependency-check plugin
On 12/20/21 1:22 PM, Mike Beckerle wrote:
> (This is the re-vote for 3.2.1-rc2, as rc1 vote was cancelled.)
>
> Hi all,
>
> I'd like to call a vote to release Apache Daffodil 3.2.1 (RC2) and to do so
> with an abbreviated approval cycle (to be used only for urgent patch
> releases).
>
> Your vote covers the release as usual, but also due to the urgency of
> this patch release, you are also voting on these 4 deltas from our more
> usual release process:
>
> * You agree the patch release is urgent and this abbreviated approval
> cycle is warranted and appropriate.
>
> * The DISCUSS email thread will be superseded by this (and prior) VOTE thread.
>
> * Shortened 48 hours of work-day time for lazy consensus on the VOTE
>
> * A minimum of three +1 and zero -1 binding votes are needed
>
> For a summary of the changes in this release, see the release notes page:
>
> https://daffodil.apache.org/releases/3.2.1/
>
> All distribution packages, including signatures, digests, etc. can be found at:
>
> https://dist.apache.org/repos/dist/dev/daffodil/3.2.1-rc2/
>
> Staging artifacts can be found at:
>
> https://repository.apache.org/content/repositories/orgapachedaffodil-1026/
>
> This release has been signed with PGP key 274B8F1413A680AF, corresponding
> to mbeckerle@apache.org, which is included in the KEYS file here:
>
> https://downloads.apache.org/daffodil/KEYS
>
> The release candidate has been tagged in git with v3.2.1-rc2.
>
> For reference, here is a list of all closed JIRAs tagged with 3.2.1:
>
> https://s.apache.org/daffodil-issues-3.2.1
>
> Please review and vote.
>
> Per the abbreviated process, the vote will be open for 48 hours.
> (Until Wednesday 22 December 2021 13:30 EST.US).
>
> [ ] +1 approve the release, and this abbreviated release process
> [ ] +0 no opinion
> [ ] -1 disapprove of the release, or of this abbreviated release
> process (and reason why)
>
RE: [VOTE] Release Apache Daffodil 3.2.1 (Urgent Patch Release) (RC2)
Posted by "Interrante, John A (GE Research, US)" <Jo...@ge.com>.
I'm on vacation, so I'm unable to check rc2 at this time. However, here's my +1 if no one else offers a third +1 since the only difference in rc2 should be a newer log4j jar than all the jars that were in rc1.
John
-----Original Message-----
From: Mike Beckerle <mb...@apache.org>
Sent: Monday, December 20, 2021 10:23 AM
To: dev@daffodil.apache.org
Subject: EXT: [VOTE] Release Apache Daffodil 3.2.1 (Urgent Patch Release) (RC2)
WARNING: This email originated from outside of GE. Please validate the sender's email address before clicking on links or attachments as they may not be safe.
(This is the re-vote for 3.2.1-rc2, as rc1 vote was cancelled.)
Hi all,
I'd like to call a vote to release Apache Daffodil 3.2.1 (RC2) and to do so with an abbreviated approval cycle (to be used only for urgent patch releases).
Your vote covers the release as usual, but also due to the urgency of this patch release, you are also voting on these 4 deltas from our more usual release process:
* You agree the patch release is urgent and this abbreviated approval
cycle is warranted and appropriate.
* The DISCUSS email thread will be superseded by this (and prior) VOTE thread.
* Shortened 48 hours of work-day time for lazy consensus on the VOTE
* A minimum of three +1 and zero -1 binding votes are needed
For a summary of the changes in this release, see the release notes page:
https://daffodil.apache.org/releases/3.2.1/
All distribution packages, including signatures, digests, etc. can be found at:
https://dist.apache.org/repos/dist/dev/daffodil/3.2.1-rc2/
Staging artifacts can be found at:
https://repository.apache.org/content/repositories/orgapachedaffodil-1026/
This release has been signed with PGP key 274B8F1413A680AF, corresponding to mbeckerle@apache.org, which is included in the KEYS file here:
https://downloads.apache.org/daffodil/KEYS
The release candidate has been tagged in git with v3.2.1-rc2.
For reference, here is a list of all closed JIRAs tagged with 3.2.1:
https://s.apache.org/daffodil-issues-3.2.1
Please review and vote.
Per the abbreviated process, the vote will be open for 48 hours.
(Until Wednesday 22 December 2021 13:30 EST.US).
[ ] +1 approve the release, and this abbreviated release process [ ] +0 no opinion [ ] -1 disapprove of the release, or of this abbreviated release
process (and reason why)