You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@maven.apache.org by Arnaud HERITIER <ah...@gmail.com> on 2006/03/27 07:55:14 UTC

Re: [aheritier] java-repository/maven/plugins/maven-pmd-plugin-1.8.jar

Hi Henk,

  Sorry about that.

  I didn't know (and I'm not sure I'm the only one in our team) we needed to
do it from now. I'll fix it ASAP.

cheers

Arnaud


On 27 Mar 2006 01:02:40 -0000, Henk Penning <he...@apache.org> wrote:
>
> Hi Arnaud Heritier,
>
>   I see you published some files on www.apache.org/dist, in
>
>     java-repository/maven/plugins/maven-pmd-plugin-1.8.jar
>
>   Please provide PGP signatures for these files as required
>   by apache.org policy
>
>     http://www.apache.org/dev/mirror-step-by-step.html
>
>   For a list of your unsigned files, see
>
>     http://people.apache.org/~henkp/checker/sig.html#aheritier
>
>   A signing-how-to can be found here:
>
>     http://www.apache.org/dev/release-signing.html
>
>   Please note that the java-repository should only contain
>   recent versions of software ; so cleanup your old stuff
>   before you add signatures.
>
>   Thanks a lot,
>
>   Regards,
>
>   Henk Penning -- apache.org infrastructure
>
> ----------------------------------------------------------------   _
> Henk P. Penning, Computer Systems Group       R Uithof CGN-A232  _/ _
> Dept of Computer Science, Utrecht University  T +31 30 253 4106 / _/
> Padualaan 14, 3584CH Utrecht, the Netherlands F +31 30 251 3791 _/ _/
> http://www.cs.uu.nl/staff/henkp.html          M penning@cs.uu.nl  _/
>

Re: [aheritier] java-repository/maven/plugins/maven-pmd-plugin-1.8.jar

Posted by Carlos Sanchez <ca...@apache.org>.
It's not a problem removing stuff from apache repo, it'll still be
available from ibiblio.

On 3/30/06, Arnaud HERITIER <ah...@gmail.com> wrote:
> Hi Henk,
>
>   It's now fixed for me. I created and added a key. I signed my jars.
>   I think we never discussed in our team about to remove old distributions
> (saved in archive.apache.org).
>   Personnally I agree with you and we can remove them.
>
>   For the plugins in the repository, I don't know if we can follow the same
> rules but I think that it's not a problem because our central repository is
> stored in ibiblio.org.
>
>   What the others think ?
>
> Arnaud
>
> On 3/27/06, Henk P. Penning <he...@cs.uu.nl> wrote:
> >
> > On Mon, 27 Mar 2006, Arnaud HERITIER wrote:
> >
> > > Date: Mon, 27 Mar 2006 07:55:14 +0200
> > > From: Arnaud HERITIER <ah...@gmail.com>
> > > To: Henk Penning <he...@apache.org>,
> > >      Maven Developers List <de...@maven.apache.org>
> > > Subject: Re: [aheritier]
> > >     java-repository/maven/plugins/maven-pmd-plugin-1.8.jar
> > >
> > > Hi Henk,
> > >
> > >   Sorry about that.
> > >
> > >   I didn't know (and I'm not sure I'm the only one in our team) we
> > needed to
> > > do it from now. I'll fix it ASAP.
> >
> > Arnaud,
> >
> >   thanks for the quick response ; as you can see in the list
> >
> >     http://people.apache.org/~henkp/checker/sig.html
> >
> >   there 63 release managers with unsigned stuff ; almost all
> >   the unsigned stuff (1101 of 1233) is in 'java-repository'.
> >
> >   Release managers should remove old versions of software
> >   (obsoleted by newer versions), and sign the rest.
> >
> >   Please note that
> >
> >   -- everything in 'dist/java-repository' is copied to hundreds
> >      of official apache mirrors and countless unofficial mirrors.
> >      Keeping the repository 'clean' saves us bandwidth, is easier
> >      for our mirrors, and is less confusing for downloaders.
> >
> >   -- everything in 'dist/java-repository' is automatically archived in
> >
> >        'http://archive.apache.org/dist/java-repository'
> >
> >   -- you can point downloaders to the archive with a file
> >
> >        README.html
> >
> >      containing urls to the 'old stuff'.
> >
> > > Arnaud
> >
> >   Regards,
> >
> >   Henk Penning -- apache.org infrastructure
> >
> > ----------------------------------------------------------------   _
> > Henk P. Penning, Computer Systems Group       R Uithof CGN-A232  _/ \_
> > Dept of Computer Science, Utrecht University  T +31 30 253 4106 / \_/ \
> > Padualaan 14, 3584CH Utrecht, the Netherlands F +31 30 251 3791 \_/ \_/
> > http://www.cs.uu.nl/staff/henkp.html          M penning@cs.uu.nl  \_/
> >
> >
>
>


--
I could give you my word as a Spaniard.
No good. I've known too many Spaniards.
                             -- The Princess Bride

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org


Re: [aheritier] java-repository/maven/plugins/maven-pmd-plugin-1.8.jar

Posted by Arnaud HERITIER <ah...@gmail.com>.
Hi Henk,

  It's now fixed for me. I created and added a key. I signed my jars.
  I think we never discussed in our team about to remove old distributions
(saved in archive.apache.org).
  Personnally I agree with you and we can remove them.

  For the plugins in the repository, I don't know if we can follow the same
rules but I think that it's not a problem because our central repository is
stored in ibiblio.org.

  What the others think ?

Arnaud

On 3/27/06, Henk P. Penning <he...@cs.uu.nl> wrote:
>
> On Mon, 27 Mar 2006, Arnaud HERITIER wrote:
>
> > Date: Mon, 27 Mar 2006 07:55:14 +0200
> > From: Arnaud HERITIER <ah...@gmail.com>
> > To: Henk Penning <he...@apache.org>,
> >      Maven Developers List <de...@maven.apache.org>
> > Subject: Re: [aheritier]
> >     java-repository/maven/plugins/maven-pmd-plugin-1.8.jar
> >
> > Hi Henk,
> >
> >   Sorry about that.
> >
> >   I didn't know (and I'm not sure I'm the only one in our team) we
> needed to
> > do it from now. I'll fix it ASAP.
>
> Arnaud,
>
>   thanks for the quick response ; as you can see in the list
>
>     http://people.apache.org/~henkp/checker/sig.html
>
>   there 63 release managers with unsigned stuff ; almost all
>   the unsigned stuff (1101 of 1233) is in 'java-repository'.
>
>   Release managers should remove old versions of software
>   (obsoleted by newer versions), and sign the rest.
>
>   Please note that
>
>   -- everything in 'dist/java-repository' is copied to hundreds
>      of official apache mirrors and countless unofficial mirrors.
>      Keeping the repository 'clean' saves us bandwidth, is easier
>      for our mirrors, and is less confusing for downloaders.
>
>   -- everything in 'dist/java-repository' is automatically archived in
>
>        'http://archive.apache.org/dist/java-repository'
>
>   -- you can point downloaders to the archive with a file
>
>        README.html
>
>      containing urls to the 'old stuff'.
>
> > Arnaud
>
>   Regards,
>
>   Henk Penning -- apache.org infrastructure
>
> ----------------------------------------------------------------   _
> Henk P. Penning, Computer Systems Group       R Uithof CGN-A232  _/ \_
> Dept of Computer Science, Utrecht University  T +31 30 253 4106 / \_/ \
> Padualaan 14, 3584CH Utrecht, the Netherlands F +31 30 251 3791 \_/ \_/
> http://www.cs.uu.nl/staff/henkp.html          M penning@cs.uu.nl  \_/
>
>

Re: [aheritier] java-repository/maven/plugins/maven-pmd-plugin-1.8.jar

Posted by "Henk P. Penning" <he...@cs.uu.nl>.
On Mon, 27 Mar 2006, Arnaud HERITIER wrote:

> Date: Mon, 27 Mar 2006 07:55:14 +0200
> From: Arnaud HERITIER <ah...@gmail.com>
> To: Henk Penning <he...@apache.org>,
>      Maven Developers List <de...@maven.apache.org>
> Subject: Re: [aheritier]
>     java-repository/maven/plugins/maven-pmd-plugin-1.8.jar
>
> Hi Henk,
>
>   Sorry about that.
>
>   I didn't know (and I'm not sure I'm the only one in our team) we needed to
> do it from now. I'll fix it ASAP.

Arnaud,

  thanks for the quick response ; as you can see in the list

    http://people.apache.org/~henkp/checker/sig.html

  there 63 release managers with unsigned stuff ; almost all
  the unsigned stuff (1101 of 1233) is in 'java-repository'.

  Release managers should remove old versions of software
  (obsoleted by newer versions), and sign the rest.

  Please note that

  -- everything in 'dist/java-repository' is copied to hundreds
     of official apache mirrors and countless unofficial mirrors.
     Keeping the repository 'clean' saves us bandwidth, is easier
     for our mirrors, and is less confusing for downloaders.

  -- everything in 'dist/java-repository' is automatically archived in

       'http://archive.apache.org/dist/java-repository'

  -- you can point downloaders to the archive with a file

       README.html

     containing urls to the 'old stuff'.

> Arnaud

  Regards,

  Henk Penning -- apache.org infrastructure

----------------------------------------------------------------   _
Henk P. Penning, Computer Systems Group       R Uithof CGN-A232  _/ \_
Dept of Computer Science, Utrecht University  T +31 30 253 4106 / \_/ \
Padualaan 14, 3584CH Utrecht, the Netherlands F +31 30 251 3791 \_/ \_/
http://www.cs.uu.nl/staff/henkp.html          M penning@cs.uu.nl  \_/


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org