You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@tooling.apache.org by "sbp (via GitHub)" <gi...@apache.org> on 2026/07/10 18:52:00 UTC
[I] Do not allow arbitrary committers to publish to SVN (tooling-trusted-releases)
sbp opened a new issue, #1392:
URL: https://github.com/apache/tooling-trusted-releases/issues/1392
> By default, only PMC members can publish release artifacts to https://dist.apache.org/repos/dist/release/. If your project wishes to allow non-PMC member committers to publish release artifacts, please open a Jira ticket for Infra with your request. Note that there are only two options: only PMC members can publish release artifacts, or all the project's Committers can publish release artifacts.
https://infra.apache.org/release-publishing.html#the-release-manager
Currently we allow any participant to release after a successful vote. We should change this to PMC member or designated committer release manager, which is the closest analogue in ATR to the above.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@tooling.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Do not allow arbitrary committers to publish to SVN (tooling-trusted-releases)
Posted by "sbp (via GitHub)" <gi...@apache.org>.
sbp commented on issue #1392:
URL: https://github.com/apache/tooling-trusted-releases/issues/1392#issuecomment-4939018765
Resolved by 5289b06dff3bf9f2e31490f33230ad0e9fcbdd56, and applied to `release-test.apache.org`.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@tooling.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Do not allow arbitrary committers to publish to SVN (tooling-trusted-releases)
Posted by "sbp (via GitHub)" <gi...@apache.org>.
sbp closed issue #1392: Do not allow arbitrary committers to publish to SVN
URL: https://github.com/apache/tooling-trusted-releases/issues/1392
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@tooling.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Do not allow arbitrary committers to publish to SVN (tooling-trusted-releases)
Posted by "dave2wave (via GitHub)" <gi...@apache.org>.
dave2wave commented on issue #1392:
URL: https://github.com/apache/tooling-trusted-releases/issues/1392#issuecomment-4938686447
The Finish phase should already be protected. The KEYS file write should already be limited to PMC members.
What endpoints are of concern?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@tooling.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Do not allow arbitrary committers to publish to SVN (tooling-trusted-releases)
Posted by "sbp (via GitHub)" <gi...@apache.org>.
sbp commented on issue #1392:
URL: https://github.com/apache/tooling-trusted-releases/issues/1392#issuecomment-4939013639
In a meeting we determined that this needed an immediate hotfix.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@tooling.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org