You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@geode.apache.org by Swapnil Bawaskar <sb...@pivotal.io> on 2018/01/23 22:32:14 UTC

[VOTE] Apache Geode release - 1.4.0 RC1

This is the first release candidate for Apache Geode, version 1.4.0.
Thanks to all the community members for their contributions to this
release!

*** Please download, test and vote by Friday, January 26, 1200 hrs
US Pacific. ***

It fixes 277 issues. release notes can be found at:
https://issues.apache.org/jira/projects/GEODE/versions/12341842

Note that we are voting upon the source tags: rel/v1.4.0.RC1
https://github.com/apache/geode/tree/rel/v1.4.0.RC1
https://github.com/apache/geode-examples/tree/rel/v1.4.0.RC1

Commit ID:
7dbb280fbff0320efd427c5553a6e666328bc50c (geode)
ced35f88173b04ac8e104b9cae10cc38289675fa (geode-examples)

Source and binary files:
https://dist.apache.org/repos/dist/dev/geode/1.4.0.RC1

Maven staging repo:
https://repository.apache.org/content/repositories/orgapachegeode-1036


Geode's KEYS file containing PGP keys we use to sign the release:
https://github.com/apache/geode/blob/develop/KEYS

Release Signed with Key: pub 4096R/18F902DB 2016-04-07
Fingerprint: E1B1 ABE3 4753 E7BA 8097 4285 8F8F 2BCC 18F9 02DB

Re: [VOTE] Apache Geode release - 1.4.0 RC1

Posted by Anthony Baker <ab...@pivotal.io>.

Reviewed:

- tags
- maven repo
- builds from source, also geode-examples
- checked for binaries

The pom added this dependency:

 <dependency>
       <groupId>org.slf4j</groupId>
       <artifactId>slf4j-api</artifactId>
       <version>1.7.24</version>
       <scope>runtime</scope>
     </dependency>
<dependency>

and then this exclusion for the the log4j-slf4j-impl dependency:

<dependency>
      <groupId>org.apache.logging.log4j</groupId>
      <artifactId>log4j-slf4j-impl</artifactId>
      <version>2.8.2</version>
      <scope>runtime</scope>
      <exclusions>
        <exclusion>
          <artifactId>slf4j-api</artifactId>
          <groupId>*</groupId>
        </exclusion>
      </exclusions>
      <optional>true</optional>
</dependency>


Is that correct?  See https://github.com/apache/geode/commit/61ba3b69b3ec3093ae0610f428de62c57499b123.


Anthony
 

> On Jan 23, 2018, at 2:32 PM, Swapnil Bawaskar <sb...@pivotal.io> wrote:
> 
> This is the first release candidate for Apache Geode, version 1.4.0.
> Thanks to all the community members for their contributions to this
> release!
> 
> *** Please download, test and vote by Friday, January 26, 1200 hrs
> US Pacific. ***
> 
> It fixes 277 issues. release notes can be found at:
> https://issues.apache.org/jira/projects/GEODE/versions/12341842
> 
> Note that we are voting upon the source tags: rel/v1.4.0.RC1
> https://github.com/apache/geode/tree/rel/v1.4.0.RC1
> https://github.com/apache/geode-examples/tree/rel/v1.4.0.RC1
> 
> Commit ID:
> 7dbb280fbff0320efd427c5553a6e666328bc50c (geode)
> ced35f88173b04ac8e104b9cae10cc38289675fa (geode-examples)
> 
> Source and binary files:
> https://dist.apache.org/repos/dist/dev/geode/1.4.0.RC1
> 
> Maven staging repo:
> https://repository.apache.org/content/repositories/orgapachegeode-1036
> 
> 
> Geode's KEYS file containing PGP keys we use to sign the release:
> https://github.com/apache/geode/blob/develop/KEYS
> 
> Release Signed with Key: pub 4096R/18F902DB 2016-04-07
> Fingerprint: E1B1 ABE3 4753 E7BA 8097 4285 8F8F 2BCC 18F9 02DB

Re: [VOTE] Apache Geode release - 1.4.0 RC1

Posted by Dan Smith <ds...@pivotal.io>.

This release candidate does have the rmi-io changes. I think we need to
sort out if we are creating insecure sockets due to those changes - if so
we need to fix that before releasing.

-Dan

On Tue, Jan 23, 2018 at 2:32 PM, Swapnil Bawaskar <sb...@pivotal.io>
wrote:

> This is the first release candidate for Apache Geode, version 1.4.0.
> Thanks to all the community members for their contributions to this
> release!
>
> *** Please download, test and vote by Friday, January 26, 1200 hrs
> US Pacific. ***
>
> It fixes 277 issues. release notes can be found at:
> https://issues.apache.org/jira/projects/GEODE/versions/12341842
>
> Note that we are voting upon the source tags: rel/v1.4.0.RC1
> https://github.com/apache/geode/tree/rel/v1.4.0.RC1
> https://github.com/apache/geode-examples/tree/rel/v1.4.0.RC1
>
> Commit ID:
> 7dbb280fbff0320efd427c5553a6e666328bc50c (geode)
> ced35f88173b04ac8e104b9cae10cc38289675fa (geode-examples)
>
> Source and binary files:
> https://dist.apache.org/repos/dist/dev/geode/1.4.0.RC1
>
> Maven staging repo:
> https://repository.apache.org/content/repositories/orgapachegeode-1036
>
>
> Geode's KEYS file containing PGP keys we use to sign the release:
> https://github.com/apache/geode/blob/develop/KEYS
>
> Release Signed with Key: pub 4096R/18F902DB 2016-04-07
> Fingerprint: E1B1 ABE3 4753 E7BA 8097 4285 8F8F 2BCC 18F9 02DB
>

Re: [VOTE] Apache Geode release - 1.4.0 RC1

Posted by Dan Smith <ds...@pivotal.io>.

-1 due to to the security risks introduced by GEODE-4131 (using rmi-io for
deploying jars).

-Dan

On Wed, Jan 24, 2018 at 8:08 AM, Anthony Baker <ab...@pivotal.io> wrote:

> Here’s a better URL for release notes that doesn’t require logging in:
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?
> projectId=12318420&version=12341842 <https://issues.apache.org/
> jira/secure/ReleaseNote.jspa?projectId=12318420&version=12341842>
>
> Let’s start crowd-sourcing a condensed version here:
> https://cwiki.apache.org/confluence/display/GEODE/
> Release+Notes#ReleaseNotes-1.4.0 <https://cwiki.apache.org/
> confluence/display/GEODE/Release+Notes#ReleaseNotes-1.4.0>
>
>
> Thanks,
> Anthony
>
>
> > On Jan 23, 2018, at 2:32 PM, Swapnil Bawaskar <sb...@pivotal.io>
> wrote:
> >
> > This is the first release candidate for Apache Geode, version 1.4.0.
> > Thanks to all the community members for their contributions to this
> > release!
> >
> > *** Please download, test and vote by Friday, January 26, 1200 hrs
> > US Pacific. ***
> >
> > It fixes 277 issues. release notes can be found at:
> > https://issues.apache.org/jira/projects/GEODE/versions/12341842
> >
> > Note that we are voting upon the source tags: rel/v1.4.0.RC1
> > https://github.com/apache/geode/tree/rel/v1.4.0.RC1
> > https://github.com/apache/geode-examples/tree/rel/v1.4.0.RC1
> >
> > Commit ID:
> > 7dbb280fbff0320efd427c5553a6e666328bc50c (geode)
> > ced35f88173b04ac8e104b9cae10cc38289675fa (geode-examples)
> >
> > Source and binary files:
> > https://dist.apache.org/repos/dist/dev/geode/1.4.0.RC1
> >
> > Maven staging repo:
> > https://repository.apache.org/content/repositories/orgapachegeode-1036
> >
> >
> > Geode's KEYS file containing PGP keys we use to sign the release:
> > https://github.com/apache/geode/blob/develop/KEYS
> >
> > Release Signed with Key: pub 4096R/18F902DB 2016-04-07
> > Fingerprint: E1B1 ABE3 4753 E7BA 8097 4285 8F8F 2BCC 18F9 02DB
>
>

Re: [VOTE] Apache Geode release - 1.4.0 RC1

Posted by Swapnil Bawaskar <sb...@pivotal.io>.

This vote is now cancelled. I will send a vote thread for RC2 when this
issue is resolved.

On Thu, Jan 25, 2018 at 7:40 AM Bruce Schuchardt <bs...@pivotal.io>
wrote:

> -1 based on Dan's findings
>
>
> On 1/24/18 8:08 AM, Anthony Baker wrote:
> > Here’s a better URL for release notes that doesn’t require logging in:
> >
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12318420&version=12341842
> <
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12318420&version=12341842
> >
> >
> > Let’s start crowd-sourcing a condensed version here:
> >
> https://cwiki.apache.org/confluence/display/GEODE/Release+Notes#ReleaseNotes-1.4.0
> <
> https://cwiki.apache.org/confluence/display/GEODE/Release+Notes#ReleaseNotes-1.4.0
> >
> >
> >
> > Thanks,
> > Anthony
> >
> >
> >> On Jan 23, 2018, at 2:32 PM, Swapnil Bawaskar <sb...@pivotal.io>
> wrote:
> >>
> >> This is the first release candidate for Apache Geode, version 1.4.0.
> >> Thanks to all the community members for their contributions to this
> >> release!
> >>
> >> *** Please download, test and vote by Friday, January 26, 1200 hrs
> >> US Pacific. ***
> >>
> >> It fixes 277 issues. release notes can be found at:
> >> https://issues.apache.org/jira/projects/GEODE/versions/12341842
> >>
> >> Note that we are voting upon the source tags: rel/v1.4.0.RC1
> >> https://github.com/apache/geode/tree/rel/v1.4.0.RC1
> >> https://github.com/apache/geode-examples/tree/rel/v1.4.0.RC1
> >>
> >> Commit ID:
> >> 7dbb280fbff0320efd427c5553a6e666328bc50c (geode)
> >> ced35f88173b04ac8e104b9cae10cc38289675fa (geode-examples)
> >>
> >> Source and binary files:
> >> https://dist.apache.org/repos/dist/dev/geode/1.4.0.RC1
> >>
> >> Maven staging repo:
> >> https://repository.apache.org/content/repositories/orgapachegeode-1036
> >>
> >>
> >> Geode's KEYS file containing PGP keys we use to sign the release:
> >> https://github.com/apache/geode/blob/develop/KEYS
> >>
> >> Release Signed with Key: pub 4096R/18F902DB 2016-04-07
> >> Fingerprint: E1B1 ABE3 4753 E7BA 8097 4285 8F8F 2BCC 18F9 02DB
> >
>
>

Re: [VOTE] Apache Geode release - 1.4.0 RC1

Posted by Bruce Schuchardt <bs...@pivotal.io>.

-1 based on Dan's findings


On 1/24/18 8:08 AM, Anthony Baker wrote:
> Here’s a better URL for release notes that doesn’t require logging in:
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12318420&version=12341842 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12318420&version=12341842>
>
> Let’s start crowd-sourcing a condensed version here:
> https://cwiki.apache.org/confluence/display/GEODE/Release+Notes#ReleaseNotes-1.4.0 <https://cwiki.apache.org/confluence/display/GEODE/Release+Notes#ReleaseNotes-1.4.0>
>
>
> Thanks,
> Anthony
>
>
>> On Jan 23, 2018, at 2:32 PM, Swapnil Bawaskar <sb...@pivotal.io> wrote:
>>
>> This is the first release candidate for Apache Geode, version 1.4.0.
>> Thanks to all the community members for their contributions to this
>> release!
>>
>> *** Please download, test and vote by Friday, January 26, 1200 hrs
>> US Pacific. ***
>>
>> It fixes 277 issues. release notes can be found at:
>> https://issues.apache.org/jira/projects/GEODE/versions/12341842
>>
>> Note that we are voting upon the source tags: rel/v1.4.0.RC1
>> https://github.com/apache/geode/tree/rel/v1.4.0.RC1
>> https://github.com/apache/geode-examples/tree/rel/v1.4.0.RC1
>>
>> Commit ID:
>> 7dbb280fbff0320efd427c5553a6e666328bc50c (geode)
>> ced35f88173b04ac8e104b9cae10cc38289675fa (geode-examples)
>>
>> Source and binary files:
>> https://dist.apache.org/repos/dist/dev/geode/1.4.0.RC1
>>
>> Maven staging repo:
>> https://repository.apache.org/content/repositories/orgapachegeode-1036
>>
>>
>> Geode's KEYS file containing PGP keys we use to sign the release:
>> https://github.com/apache/geode/blob/develop/KEYS
>>
>> Release Signed with Key: pub 4096R/18F902DB 2016-04-07
>> Fingerprint: E1B1 ABE3 4753 E7BA 8097 4285 8F8F 2BCC 18F9 02DB
>

Re: [VOTE] Apache Geode release - 1.4.0 RC1

Posted by Anthony Baker <ab...@pivotal.io>.

Here’s a better URL for release notes that doesn’t require logging in:
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12318420&version=12341842 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12318420&version=12341842>

Let’s start crowd-sourcing a condensed version here:
https://cwiki.apache.org/confluence/display/GEODE/Release+Notes#ReleaseNotes-1.4.0 <https://cwiki.apache.org/confluence/display/GEODE/Release+Notes#ReleaseNotes-1.4.0>


Thanks,
Anthony


> On Jan 23, 2018, at 2:32 PM, Swapnil Bawaskar <sb...@pivotal.io> wrote:
> 
> This is the first release candidate for Apache Geode, version 1.4.0.
> Thanks to all the community members for their contributions to this
> release!
> 
> *** Please download, test and vote by Friday, January 26, 1200 hrs
> US Pacific. ***
> 
> It fixes 277 issues. release notes can be found at:
> https://issues.apache.org/jira/projects/GEODE/versions/12341842
> 
> Note that we are voting upon the source tags: rel/v1.4.0.RC1
> https://github.com/apache/geode/tree/rel/v1.4.0.RC1
> https://github.com/apache/geode-examples/tree/rel/v1.4.0.RC1
> 
> Commit ID:
> 7dbb280fbff0320efd427c5553a6e666328bc50c (geode)
> ced35f88173b04ac8e104b9cae10cc38289675fa (geode-examples)
> 
> Source and binary files:
> https://dist.apache.org/repos/dist/dev/geode/1.4.0.RC1
> 
> Maven staging repo:
> https://repository.apache.org/content/repositories/orgapachegeode-1036
> 
> 
> Geode's KEYS file containing PGP keys we use to sign the release:
> https://github.com/apache/geode/blob/develop/KEYS
> 
> Release Signed with Key: pub 4096R/18F902DB 2016-04-07
> Fingerprint: E1B1 ABE3 4753 E7BA 8097 4285 8F8F 2BCC 18F9 02DB