You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ofbiz.apache.org by Jacopo Cappellato <ja...@gmail.com> on 2024/02/13 08:34:23 UTC
[VOTE] [RELEASE] Apache OFBiz 18.12.12 - third attempt
This is the vote thread, third attempt, to publish "Apache OFBiz
18.12.12", twelfth
release from the release18.12 branch.
The release files can be downloaded from here:
https://dist.apache.org/repos/dist/dev/ofbiz/
and are:
* apache-ofbiz-18.12.12.zip
* KEYS: text file with keys
* apache-ofbiz-18.12.12.zip.asc: the detached signature file
* apache-ofbiz-18.12.12.zip.sha512: checksum file
Please download and test the zip file and its signatures (for
instructions on testing the signatures see
http://www.apache.org/info/verification.html).
Vote:
[ +1] release as Apache OFBiz 18.12.12
[ -1] do not release
This vote is open for at least 5 days.
For more details about this process please refer to
http://www.apache.org/foundation/voting.html
RE: [VOTE] [RELEASE] Apache OFBiz 18.12.12 - third attempt
Posted by Swapnil Shah <sw...@hotwaxsystems.com>.
+1
Regards,
Swapnil
-----Original Message-----
From: Jacopo Cappellato <ja...@gmail.com>
Sent: 13 February 2024 02:04 PM
To: Dev list <de...@ofbiz.apache.org>
Subject: [VOTE] [RELEASE] Apache OFBiz 18.12.12 - third attempt
This is the vote thread, third attempt, to publish "Apache OFBiz 18.12.12",
twelfth release from the release18.12 branch.
The release files can be downloaded from here:
https://dist.apache.org/repos/dist/dev/ofbiz/
and are:
* apache-ofbiz-18.12.12.zip
* KEYS: text file with keys
* apache-ofbiz-18.12.12.zip.asc: the detached signature file
* apache-ofbiz-18.12.12.zip.sha512: checksum file
Please download and test the zip file and its signatures (for instructions
on testing the signatures see http://www.apache.org/info/verification.html).
Vote:
[ +1] release as Apache OFBiz 18.12.12
[ -1] do not release
This vote is open for at least 5 days.
For more details about this process please refer to
http://www.apache.org/foundation/voting.html
Re: [VOTE] [RELEASE] Apache OFBiz 18.12.12 - third attempt
Posted by Jacopo Cappellato <ja...@gmail.com>.
+1
Jacopo
On Tue, Feb 13, 2024 at 9:34 AM Jacopo Cappellato
<ja...@gmail.com> wrote:
>
> This is the vote thread, third attempt, to publish "Apache OFBiz
> 18.12.12", twelfth
> release from the release18.12 branch.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
> and are:
> * apache-ofbiz-18.12.12.zip
> * KEYS: text file with keys
> * apache-ofbiz-18.12.12.zip.asc: the detached signature file
> * apache-ofbiz-18.12.12.zip.sha512: checksum file
>
> Please download and test the zip file and its signatures (for
> instructions on testing the signatures see
> http://www.apache.org/info/verification.html).
>
> Vote:
> [ +1] release as Apache OFBiz 18.12.12
> [ -1] do not release
>
> This vote is open for at least 5 days.
>
> For more details about this process please refer to
> http://www.apache.org/foundation/voting.html
Re: [VOTE] [RELEASE] Apache OFBiz 18.12.12 - third attempt
Posted by Jacques Le Roux <ja...@les7arts.com>.
Thanks Michael,
I agree, I see this error message for long in Git Bash (WIn7). When you compare it's OK.
I thought got a real compare Issue in WIn7. I did not reproduce in Ubuntu 20.04. I also get there the checksum error message with the script where the
values compare well.
Another issue is the Jacopo's signature that I reproduce everywhere. We ever got a message in the security ML about that.
Jacopo don't reproduce this issue. Maybe because he is the author? Do you reproduce the issue?
Jacques
Le 26/02/2024 à 12:27, Michael Brohl a écrit :
> Hi Jacopo,
>
> I think this is a false error message. If you compare the sha sums manually, there is no mismatch.
>
> I have to check why the script shows an error but I think it should be no issue to prevent a release.
>
> Best regards,
>
> Michael Brohl
>
> ecomify GmbH - www.ecomify.de
>
> Am 25.02.24 um 19:11 schrieb Jacopo Cappellato:
>> apache-ofbiz-18.12.12.zip: 67AA5932 53FFF35F 3AA89DC9 73951B33 8396F95D
>> ECF26EBD 1DB58C66 50EE37E5 D053CD02 C9CB3FC4 B06D8CCC 747FAAA1 45B251CA
>> 5F95A606 B1CC6C1A A8CBC42C
>> apache-ofbiz-18.12.12.zip: 67AA5932 53FFF35F 3AA89DC9 73951B33 8396F95D
>> ECF26EBD 1DB58C66 50EE37E5 D053CD02 C9CB3FC4 B06D8CCC 747FAAA1 45B251CA
>> 5F95A606 B1CC6C1A A8CBC42C
Re: [VOTE] [RELEASE] Apache OFBiz 18.12.12 - third attempt
Posted by Michael Brohl <mi...@ecomify.de>.
Hi Jacopo,
I think this is a false error message. If you compare the sha sums
manually, there is no mismatch.
I have to check why the script shows an error but I think it should be
no issue to prevent a release.
Best regards,
Michael Brohl
ecomify GmbH - www.ecomify.de
Am 25.02.24 um 19:11 schrieb Jacopo Cappellato:
> apache-ofbiz-18.12.12.zip: 67AA5932 53FFF35F 3AA89DC9 73951B33 8396F95D
> ECF26EBD 1DB58C66 50EE37E5 D053CD02 C9CB3FC4 B06D8CCC 747FAAA1 45B251CA
> 5F95A606 B1CC6C1A A8CBC42C
> apache-ofbiz-18.12.12.zip: 67AA5932 53FFF35F 3AA89DC9 73951B33 8396F95D
> ECF26EBD 1DB58C66 50EE37E5 D053CD02 C9CB3FC4 B06D8CCC 747FAAA1 45B251CA
> 5F95A606 B1CC6C1A A8CBC42C
Re: [VOTE] [RELEASE] Apache OFBiz 18.12.12 - third attempt
Posted by Jacopo Cappellato <ja...@gmail.com>.
Did anyone else experience similar issues? I'd like to make sure the
signatures and digest work fine before publishing the release.
Thanks
Jacopo
On Wed, Feb 14, 2024 at 8:57 AM Jacques Le Roux
<ja...@les7arts.com> wrote:
>
> Hi,
>
> And this is what get on Ubuntu 20.04, better for SHA512 (but not right it seems), weird for GPG. All that was working before, notably with last
> versions of apache-ofbiz-18.12.12.
>
> jacques@jacques-VirtualBox:~/ofbiz-tools$ ./verify-ofbiz-release.sh -v apache-ofbiz-18.12.12 2>&1 | tee verify.log
> Processing files for release: apache-ofbiz-18.12.12...
> Verifying files...
> sha check of file: apache-ofbiz-18.12.12.zip
> Using sha file: apache-ofbiz-18.12.12.zip.sha512
> apache-ofbiz-18.12.12.zip: 67AA5932 53FFF35F 3AA89DC9 73951B33 8396F95D ECF26EBD 1DB58C66 50EE37E5 D053CD02 C9CB3FC4 B06D8CCC 747FAAA1 45B251CA
> 5F95A606 B1CC6C1A A8CBC42C
> apache-ofbiz-18.12.12.zip: 67AA5932 53FFF35F 3AA89DC9 73951B33 8396F95D ECF26EBD 1DB58C66 50EE37E5 D053CD02 C9CB3FC4 B06D8CCC 747FAAA1 45B251CA
> 5F95A606 B1CC6C1A A8CBC42C
> sha sums mismatch!
>
> GPG verification output
> gpg: Signature made jeu. 08 févr. 2024 11:03:49 CET
> gpg: using RSA key 3545C5E31CC2D029B2CCAD067A580908847AF9E0
> gpg: Can't check signature: No public key
>
> Done processing files for release apache-ofbiz-18.12.12
>
> "sha sums mismatch!" sounds weird to me as the two lines compare
>
> Also I don't understand what's going on with GPG since I have both KEYS and apache-ofbiz-18.12.12.zip.asc
>
> Do I miss something?
>
> Jacques
>
>
> Le 13/02/2024 à 14:09, Jacques Le Roux a écrit :
> > Since I'm on win7 using PowerShell:
> >
> > PS C:\projectsASF\Git\ofbiz-framework\tools> Get-Filehash apache-ofbiz-18.12.12.zip -a SHA512
> > Algorithm Hash Path
> > --------- ---- ----
> > SHA512 D6CC35969BD53A4C34E267A9221AE76AF416E2A0D442A2195B16227F2A431B2CBDC... C:\projectsASF\Git\ofbiz-framework\tools\apache-ofbiz-18.12.12.zip
> >
> > PS C:\projectsASF\Git\ofbiz-framework\tools> Get-Filehash apache-ofbiz-18.12.12.zip.sha512 -a SHA512
> > Algorithm Hash Path
> > --------- ---- ----
> > SHA512 EB5E9CEAF12777750D1D78BE0ADC9F729BCDBB90646EBFC7434F47EAEE73BCF5008...
> > C:\projectsASF\Git\ofbiz-framework\tools\apache-ofbiz-18.12.12.zip.sha512
> >
> > Not sure why it's different from verify-ofbiz-release.sh result :/
> >
> > Le 13/02/2024 à 13:51, Jacques Le Roux a écrit :
> >> Hi Jacopo,
> >>
> >> It seems there is at least a hash issue:
> >>
> >> sha check of file: apache-ofbiz-18.12.12.zip
> >> Using sha file: apache-ofbiz-18.12.12.zip.sha512
> >> apache-ofbiz-18.12.12.zip: D6CC3596 9BD53A4C 34E267A9 221AE76A F416E2A0 D442A219 5B16227F 2A431B2C BDCB0E05 87C334C6 19DB5EE4 ED0D1F21 5EC90253
> >> 88AB6487 DC5B71E7 5BA97A17
> >> apache-ofbiz-18.12.12.zip: 67AA5932 53FFF35F 3AA89DC9 73951B33 8396F95D ECF26EBD 1DB58C66 50EE37E5 D053CD02 C9CB3FC4 B06D8CCC 747FAAA1 45B251CA
> >> 5F95A606 B1CC6C1A A8CBC42C
> >> sha sums mismatch!
> >>
> >> Thanks
> >>
> >> Jacques
> >>
> >> Le 13/02/2024 à 09:34, Jacopo Cappellato a écrit :
> >>> This is the vote thread, third attempt, to publish "Apache OFBiz
> >>> 18.12.12", twelfth
> >>> release from the release18.12 branch.
> >>>
> >>> The release files can be downloaded from here:
> >>> https://dist.apache.org/repos/dist/dev/ofbiz/
> >>> and are:
> >>> * apache-ofbiz-18.12.12.zip
> >>> * KEYS: text file with keys
> >>> * apache-ofbiz-18.12.12.zip.asc: the detached signature file
> >>> * apache-ofbiz-18.12.12.zip.sha512: checksum file
> >>>
> >>> Please download and test the zip file and its signatures (for
> >>> instructions on testing the signatures see
> >>> http://www.apache.org/info/verification.html).
> >>>
> >>> Vote:
> >>> [ +1] release as Apache OFBiz 18.12.12
> >>> [ -1] do not release
> >>>
> >>> This vote is open for at least 5 days.
> >>>
> >>> For more details about this process please refer to
> >>> http://www.apache.org/foundation/voting.html
Re: [VOTE] [RELEASE] Apache OFBiz 18.12.12 - third attempt
Posted by Giulio Speri - MpStyle Srl <gi...@mpstyle.it>.
Hi Jacopo,
+1
BUILD SUCCESSFUL in 35m 59s
30 actionable tasks: 25 executed, 5 up-to-date
Done processing files for release apache-ofbiz-18.12.12
Linux/Ubuntu 22.04.03 LTS, OpenJDK Runtime Environment (build
17.0.9+9-Ubuntu-122.04)
Thanks,
Giulio
Il giorno mer 14 feb 2024 alle ore 08:56 Jacques Le Roux <
jacques.le.roux@les7arts.com> ha scritto:
> Hi,
>
> And this is what get on Ubuntu 20.04, better for SHA512 (but not right it
> seems), weird for GPG. All that was working before, notably with last
> versions of apache-ofbiz-18.12.12.
>
> jacques@jacques-VirtualBox:~/ofbiz-tools$ ./verify-ofbiz-release.sh -v
> apache-ofbiz-18.12.12 2>&1 | tee verify.log
> Processing files for release: apache-ofbiz-18.12.12...
> Verifying files...
> sha check of file: apache-ofbiz-18.12.12.zip
> Using sha file: apache-ofbiz-18.12.12.zip.sha512
> apache-ofbiz-18.12.12.zip: 67AA5932 53FFF35F 3AA89DC9 73951B33 8396F95D
> ECF26EBD 1DB58C66 50EE37E5 D053CD02 C9CB3FC4 B06D8CCC 747FAAA1 45B251CA
> 5F95A606 B1CC6C1A A8CBC42C
> apache-ofbiz-18.12.12.zip: 67AA5932 53FFF35F 3AA89DC9 73951B33 8396F95D
> ECF26EBD 1DB58C66 50EE37E5 D053CD02 C9CB3FC4 B06D8CCC 747FAAA1 45B251CA
> 5F95A606 B1CC6C1A A8CBC42C
> sha sums mismatch!
>
> GPG verification output
> gpg: Signature made jeu. 08 févr. 2024 11:03:49 CET
> gpg: using RSA key 3545C5E31CC2D029B2CCAD067A580908847AF9E0
> gpg: Can't check signature: No public key
>
> Done processing files for release apache-ofbiz-18.12.12
>
> "sha sums mismatch!" sounds weird to me as the two lines compare
>
> Also I don't understand what's going on with GPG since I have both KEYS
> and apache-ofbiz-18.12.12.zip.asc
>
> Do I miss something?
>
> Jacques
>
>
> Le 13/02/2024 à 14:09, Jacques Le Roux a écrit :
> > Since I'm on win7 using PowerShell:
> >
> > PS C:\projectsASF\Git\ofbiz-framework\tools> Get-Filehash
> apache-ofbiz-18.12.12.zip -a SHA512
> > Algorithm Hash Path
> > --------- ---- ----
> > SHA512
> D6CC35969BD53A4C34E267A9221AE76AF416E2A0D442A2195B16227F2A431B2CBDC...
> C:\projectsASF\Git\ofbiz-framework\tools\apache-ofbiz-18.12.12.zip
> >
> > PS C:\projectsASF\Git\ofbiz-framework\tools> Get-Filehash
> apache-ofbiz-18.12.12.zip.sha512 -a SHA512
> > Algorithm Hash Path
> > --------- ---- ----
> > SHA512
> EB5E9CEAF12777750D1D78BE0ADC9F729BCDBB90646EBFC7434F47EAEE73BCF5008...
> > C:\projectsASF\Git\ofbiz-framework\tools\apache-ofbiz-18.12.12.zip.sha512
> >
> > Not sure why it's different from verify-ofbiz-release.sh result :/
> >
> > Le 13/02/2024 à 13:51, Jacques Le Roux a écrit :
> >> Hi Jacopo,
> >>
> >> It seems there is at least a hash issue:
> >>
> >> sha check of file: apache-ofbiz-18.12.12.zip
> >> Using sha file: apache-ofbiz-18.12.12.zip.sha512
> >> apache-ofbiz-18.12.12.zip: D6CC3596 9BD53A4C 34E267A9 221AE76A F416E2A0
> D442A219 5B16227F 2A431B2C BDCB0E05 87C334C6 19DB5EE4 ED0D1F21 5EC90253
> >> 88AB6487 DC5B71E7 5BA97A17
> >> apache-ofbiz-18.12.12.zip: 67AA5932 53FFF35F 3AA89DC9 73951B33 8396F95D
> ECF26EBD 1DB58C66 50EE37E5 D053CD02 C9CB3FC4 B06D8CCC 747FAAA1 45B251CA
> >> 5F95A606 B1CC6C1A A8CBC42C
> >> sha sums mismatch!
> >>
> >> Thanks
> >>
> >> Jacques
> >>
> >> Le 13/02/2024 à 09:34, Jacopo Cappellato a écrit :
> >>> This is the vote thread, third attempt, to publish "Apache OFBiz
> >>> 18.12.12", twelfth
> >>> release from the release18.12 branch.
> >>>
> >>> The release files can be downloaded from here:
> >>> https://dist.apache.org/repos/dist/dev/ofbiz/
> >>> and are:
> >>> * apache-ofbiz-18.12.12.zip
> >>> * KEYS: text file with keys
> >>> * apache-ofbiz-18.12.12.zip.asc: the detached signature file
> >>> * apache-ofbiz-18.12.12.zip.sha512: checksum file
> >>>
> >>> Please download and test the zip file and its signatures (for
> >>> instructions on testing the signatures see
> >>> http://www.apache.org/info/verification.html).
> >>>
> >>> Vote:
> >>> [ +1] release as Apache OFBiz 18.12.12
> >>> [ -1] do not release
> >>>
> >>> This vote is open for at least 5 days.
> >>>
> >>> For more details about this process please refer to
> >>> http://www.apache.org/foundation/voting.html
>
--
Giulio Speri
Full Stack Web Developer
*Mp Styl**e Srl*
via Antonio Meucci, 37
41019 Limidi di Soliera (MO)
T 059/684916
M 347/0965506
www.mpstyle.it
Re: [VOTE] [RELEASE] Apache OFBiz 18.12.12 - third attempt
Posted by Jacques Le Roux <ja...@les7arts.com>.
Hi,
And this is what get on Ubuntu 20.04, better for SHA512 (but not right it seems), weird for GPG. All that was working before, notably with last
versions of apache-ofbiz-18.12.12.
jacques@jacques-VirtualBox:~/ofbiz-tools$ ./verify-ofbiz-release.sh -v apache-ofbiz-18.12.12 2>&1 | tee verify.log
Processing files for release: apache-ofbiz-18.12.12...
Verifying files...
sha check of file: apache-ofbiz-18.12.12.zip
Using sha file: apache-ofbiz-18.12.12.zip.sha512
apache-ofbiz-18.12.12.zip: 67AA5932 53FFF35F 3AA89DC9 73951B33 8396F95D ECF26EBD 1DB58C66 50EE37E5 D053CD02 C9CB3FC4 B06D8CCC 747FAAA1 45B251CA
5F95A606 B1CC6C1A A8CBC42C
apache-ofbiz-18.12.12.zip: 67AA5932 53FFF35F 3AA89DC9 73951B33 8396F95D ECF26EBD 1DB58C66 50EE37E5 D053CD02 C9CB3FC4 B06D8CCC 747FAAA1 45B251CA
5F95A606 B1CC6C1A A8CBC42C
sha sums mismatch!
GPG verification output
gpg: Signature made jeu. 08 févr. 2024 11:03:49 CET
gpg: using RSA key 3545C5E31CC2D029B2CCAD067A580908847AF9E0
gpg: Can't check signature: No public key
Done processing files for release apache-ofbiz-18.12.12
"sha sums mismatch!" sounds weird to me as the two lines compare
Also I don't understand what's going on with GPG since I have both KEYS and apache-ofbiz-18.12.12.zip.asc
Do I miss something?
Jacques
Le 13/02/2024 à 14:09, Jacques Le Roux a écrit :
> Since I'm on win7 using PowerShell:
>
> PS C:\projectsASF\Git\ofbiz-framework\tools> Get-Filehash apache-ofbiz-18.12.12.zip -a SHA512
> Algorithm Hash Path
> --------- ---- ----
> SHA512 D6CC35969BD53A4C34E267A9221AE76AF416E2A0D442A2195B16227F2A431B2CBDC... C:\projectsASF\Git\ofbiz-framework\tools\apache-ofbiz-18.12.12.zip
>
> PS C:\projectsASF\Git\ofbiz-framework\tools> Get-Filehash apache-ofbiz-18.12.12.zip.sha512 -a SHA512
> Algorithm Hash Path
> --------- ---- ----
> SHA512 EB5E9CEAF12777750D1D78BE0ADC9F729BCDBB90646EBFC7434F47EAEE73BCF5008...
> C:\projectsASF\Git\ofbiz-framework\tools\apache-ofbiz-18.12.12.zip.sha512
>
> Not sure why it's different from verify-ofbiz-release.sh result :/
>
> Le 13/02/2024 à 13:51, Jacques Le Roux a écrit :
>> Hi Jacopo,
>>
>> It seems there is at least a hash issue:
>>
>> sha check of file: apache-ofbiz-18.12.12.zip
>> Using sha file: apache-ofbiz-18.12.12.zip.sha512
>> apache-ofbiz-18.12.12.zip: D6CC3596 9BD53A4C 34E267A9 221AE76A F416E2A0 D442A219 5B16227F 2A431B2C BDCB0E05 87C334C6 19DB5EE4 ED0D1F21 5EC90253
>> 88AB6487 DC5B71E7 5BA97A17
>> apache-ofbiz-18.12.12.zip: 67AA5932 53FFF35F 3AA89DC9 73951B33 8396F95D ECF26EBD 1DB58C66 50EE37E5 D053CD02 C9CB3FC4 B06D8CCC 747FAAA1 45B251CA
>> 5F95A606 B1CC6C1A A8CBC42C
>> sha sums mismatch!
>>
>> Thanks
>>
>> Jacques
>>
>> Le 13/02/2024 à 09:34, Jacopo Cappellato a écrit :
>>> This is the vote thread, third attempt, to publish "Apache OFBiz
>>> 18.12.12", twelfth
>>> release from the release18.12 branch.
>>>
>>> The release files can be downloaded from here:
>>> https://dist.apache.org/repos/dist/dev/ofbiz/
>>> and are:
>>> * apache-ofbiz-18.12.12.zip
>>> * KEYS: text file with keys
>>> * apache-ofbiz-18.12.12.zip.asc: the detached signature file
>>> * apache-ofbiz-18.12.12.zip.sha512: checksum file
>>>
>>> Please download and test the zip file and its signatures (for
>>> instructions on testing the signatures see
>>> http://www.apache.org/info/verification.html).
>>>
>>> Vote:
>>> [ +1] release as Apache OFBiz 18.12.12
>>> [ -1] do not release
>>>
>>> This vote is open for at least 5 days.
>>>
>>> For more details about this process please refer to
>>> http://www.apache.org/foundation/voting.html
Re: [VOTE] [RELEASE] Apache OFBiz 18.12.12 - third attempt
Posted by Jacques Le Roux <ja...@les7arts.com>.
Since I'm on win7 using PowerShell:
PS C:\projectsASF\Git\ofbiz-framework\tools> Get-Filehash apache-ofbiz-18.12.12.zip -a SHA512
Algorithm Hash Path
--------- ---- ----
SHA512 D6CC35969BD53A4C34E267A9221AE76AF416E2A0D442A2195B16227F2A431B2CBDC... C:\projectsASF\Git\ofbiz-framework\tools\apache-ofbiz-18.12.12.zip
PS C:\projectsASF\Git\ofbiz-framework\tools> Get-Filehash apache-ofbiz-18.12.12.zip.sha512 -a SHA512
Algorithm Hash Path
--------- ---- ----
SHA512 EB5E9CEAF12777750D1D78BE0ADC9F729BCDBB90646EBFC7434F47EAEE73BCF5008...
C:\projectsASF\Git\ofbiz-framework\tools\apache-ofbiz-18.12.12.zip.sha512
Not sure why it's different from verify-ofbiz-release.sh result :/
Le 13/02/2024 à 13:51, Jacques Le Roux a écrit :
> Hi Jacopo,
>
> It seems there is at least a hash issue:
>
> sha check of file: apache-ofbiz-18.12.12.zip
> Using sha file: apache-ofbiz-18.12.12.zip.sha512
> apache-ofbiz-18.12.12.zip: D6CC3596 9BD53A4C 34E267A9 221AE76A F416E2A0 D442A219 5B16227F 2A431B2C BDCB0E05 87C334C6 19DB5EE4 ED0D1F21 5EC90253
> 88AB6487 DC5B71E7 5BA97A17
> apache-ofbiz-18.12.12.zip: 67AA5932 53FFF35F 3AA89DC9 73951B33 8396F95D ECF26EBD 1DB58C66 50EE37E5 D053CD02 C9CB3FC4 B06D8CCC 747FAAA1 45B251CA
> 5F95A606 B1CC6C1A A8CBC42C
> sha sums mismatch!
>
> Thanks
>
> Jacques
>
> Le 13/02/2024 à 09:34, Jacopo Cappellato a écrit :
>> This is the vote thread, third attempt, to publish "Apache OFBiz
>> 18.12.12", twelfth
>> release from the release18.12 branch.
>>
>> The release files can be downloaded from here:
>> https://dist.apache.org/repos/dist/dev/ofbiz/
>> and are:
>> * apache-ofbiz-18.12.12.zip
>> * KEYS: text file with keys
>> * apache-ofbiz-18.12.12.zip.asc: the detached signature file
>> * apache-ofbiz-18.12.12.zip.sha512: checksum file
>>
>> Please download and test the zip file and its signatures (for
>> instructions on testing the signatures see
>> http://www.apache.org/info/verification.html).
>>
>> Vote:
>> [ +1] release as Apache OFBiz 18.12.12
>> [ -1] do not release
>>
>> This vote is open for at least 5 days.
>>
>> For more details about this process please refer to
>> http://www.apache.org/foundation/voting.html
Re: [VOTE] [RELEASE] Apache OFBiz 18.12.12 - third attempt
Posted by Jacques Le Roux <ja...@les7arts.com>.
Hi Jacopo,
It seems there is at least a hash issue:
sha check of file: apache-ofbiz-18.12.12.zip
Using sha file: apache-ofbiz-18.12.12.zip.sha512
apache-ofbiz-18.12.12.zip: D6CC3596 9BD53A4C 34E267A9 221AE76A F416E2A0 D442A219 5B16227F 2A431B2C BDCB0E05 87C334C6 19DB5EE4 ED0D1F21 5EC90253
88AB6487 DC5B71E7 5BA97A17
apache-ofbiz-18.12.12.zip: 67AA5932 53FFF35F 3AA89DC9 73951B33 8396F95D ECF26EBD 1DB58C66 50EE37E5 D053CD02 C9CB3FC4 B06D8CCC 747FAAA1 45B251CA
5F95A606 B1CC6C1A A8CBC42C
sha sums mismatch!
Thanks
Jacques
Le 13/02/2024 à 09:34, Jacopo Cappellato a écrit :
> This is the vote thread, third attempt, to publish "Apache OFBiz
> 18.12.12", twelfth
> release from the release18.12 branch.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
> and are:
> * apache-ofbiz-18.12.12.zip
> * KEYS: text file with keys
> * apache-ofbiz-18.12.12.zip.asc: the detached signature file
> * apache-ofbiz-18.12.12.zip.sha512: checksum file
>
> Please download and test the zip file and its signatures (for
> instructions on testing the signatures see
> http://www.apache.org/info/verification.html).
>
> Vote:
> [ +1] release as Apache OFBiz 18.12.12
> [ -1] do not release
>
> This vote is open for at least 5 days.
>
> For more details about this process please refer to
> http://www.apache.org/foundation/voting.html
[VOTE] [RESULT] [RELEASE] Apache OFBiz 18.12.12 - third attempt
Posted by Jacopo Cappellato <ja...@gmail.com>.
The vote was successful with 4 positive votes (all binding) and no
negative votes.
Thank you,
Jacopo
On Tue, Feb 13, 2024 at 9:34 AM Jacopo Cappellato
<ja...@gmail.com> wrote:
>
> This is the vote thread, third attempt, to publish "Apache OFBiz
> 18.12.12", twelfth
> release from the release18.12 branch.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
> and are:
> * apache-ofbiz-18.12.12.zip
> * KEYS: text file with keys
> * apache-ofbiz-18.12.12.zip.asc: the detached signature file
> * apache-ofbiz-18.12.12.zip.sha512: checksum file
>
> Please download and test the zip file and its signatures (for
> instructions on testing the signatures see
> http://www.apache.org/info/verification.html).
>
> Vote:
> [ +1] release as Apache OFBiz 18.12.12
> [ -1] do not release
>
> This vote is open for at least 5 days.
>
> For more details about this process please refer to
> http://www.apache.org/foundation/voting.html
Re: [VOTE] [RELEASE] Apache OFBiz 18.12.12 - third attempt
Posted by Daniel Watford <da...@foomoo.co.uk>.
Hi Jacopo,
The tag on the ofbiz-framework repository triggered a non-snapshot build of
the docker container image as I had hoped for, so I'm pleased with that.
The build doesn't currently take tags on the ofbiz-plugins directory into
account when pulling plugins sources, so there is no need to set tags there
for the moment.
Unfortunately the builds triggered by tags are not able to download
plugins. This appears to be due to pullAllPluginsSource.sh assuming that a
branch has been checked out, which is not the case when building from a
tag. We'll need a bit more thinking on how to handle this situation.
Thanks,
Dan.
On Fri, 16 Feb 2024 at 08:07, Jacopo Cappellato <ja...@gmail.com>
wrote:
> Hi Daniel,
>
> I have created the two tags (one for the ofbiz-framework and one for
> the ofbiz-plugins). Please have a look when you can and let me know if
> you want me to modify them.
> As a side note, if you want, I can also create the ones missing for
> the previous releases.
>
> Thanks,
>
> Jacopo
>
> PS: did anyone else experience the same issues that Jacques is
> reporting about the hash and signature?
>
> On Thu, Feb 15, 2024 at 8:09 PM Daniel Watford <da...@foomoo.co.uk> wrote:
> >
> > +1
> >
> > Jacopo, please could you try tagging the commit you used for
> > the release sources as 'release18.12.12'. That should then trigger the
> > building of a non-snapshot docker container image.
> >
> > Building of docker container images is not an official release channel
> for
> > OFBiz, so no need to publicise that any such images exist. But it would
> be
> > good to test that images are getting built by GitHub actions in response
> to
> > tagging releases in case we want to highlight the availability of docker
> > images in future.
> >
> > If this vote fails, we should be able to 'move' the release tag for the
> > next release attempt, prompting the build of the next non-snapshot docker
> > image.
> >
> > Thanks,
> >
> > Dan.
> >
> > On Tue, 13 Feb 2024 at 08:35, Jacopo Cappellato <
> jacopo.cappellato@gmail.com>
> > wrote:
> >
> > > This is the vote thread, third attempt, to publish "Apache OFBiz
> > > 18.12.12", twelfth
> > > release from the release18.12 branch.
> > >
> > > The release files can be downloaded from here:
> > > https://dist.apache.org/repos/dist/dev/ofbiz/
> > > and are:
> > > * apache-ofbiz-18.12.12.zip
> > > * KEYS: text file with keys
> > > * apache-ofbiz-18.12.12.zip.asc: the detached signature file
> > > * apache-ofbiz-18.12.12.zip.sha512: checksum file
> > >
> > > Please download and test the zip file and its signatures (for
> > > instructions on testing the signatures see
> > > http://www.apache.org/info/verification.html).
> > >
> > > Vote:
> > > [ +1] release as Apache OFBiz 18.12.12
> > > [ -1] do not release
> > >
> > > This vote is open for at least 5 days.
> > >
> > > For more details about this process please refer to
> > > http://www.apache.org/foundation/voting.html
> > >
> >
> >
> > --
> > Daniel Watford
>
--
Daniel Watford
Re: [VOTE] [RELEASE] Apache OFBiz 18.12.12 - third attempt
Posted by Jacopo Cappellato <ja...@gmail.com>.
Hi Daniel,
I have created the two tags (one for the ofbiz-framework and one for
the ofbiz-plugins). Please have a look when you can and let me know if
you want me to modify them.
As a side note, if you want, I can also create the ones missing for
the previous releases.
Thanks,
Jacopo
PS: did anyone else experience the same issues that Jacques is
reporting about the hash and signature?
On Thu, Feb 15, 2024 at 8:09 PM Daniel Watford <da...@foomoo.co.uk> wrote:
>
> +1
>
> Jacopo, please could you try tagging the commit you used for
> the release sources as 'release18.12.12'. That should then trigger the
> building of a non-snapshot docker container image.
>
> Building of docker container images is not an official release channel for
> OFBiz, so no need to publicise that any such images exist. But it would be
> good to test that images are getting built by GitHub actions in response to
> tagging releases in case we want to highlight the availability of docker
> images in future.
>
> If this vote fails, we should be able to 'move' the release tag for the
> next release attempt, prompting the build of the next non-snapshot docker
> image.
>
> Thanks,
>
> Dan.
>
> On Tue, 13 Feb 2024 at 08:35, Jacopo Cappellato <ja...@gmail.com>
> wrote:
>
> > This is the vote thread, third attempt, to publish "Apache OFBiz
> > 18.12.12", twelfth
> > release from the release18.12 branch.
> >
> > The release files can be downloaded from here:
> > https://dist.apache.org/repos/dist/dev/ofbiz/
> > and are:
> > * apache-ofbiz-18.12.12.zip
> > * KEYS: text file with keys
> > * apache-ofbiz-18.12.12.zip.asc: the detached signature file
> > * apache-ofbiz-18.12.12.zip.sha512: checksum file
> >
> > Please download and test the zip file and its signatures (for
> > instructions on testing the signatures see
> > http://www.apache.org/info/verification.html).
> >
> > Vote:
> > [ +1] release as Apache OFBiz 18.12.12
> > [ -1] do not release
> >
> > This vote is open for at least 5 days.
> >
> > For more details about this process please refer to
> > http://www.apache.org/foundation/voting.html
> >
>
>
> --
> Daniel Watford
Re: [VOTE] [RELEASE] Apache OFBiz 18.12.12 - third attempt
Posted by Daniel Watford <da...@foomoo.co.uk>.
+1
Jacopo, please could you try tagging the commit you used for
the release sources as 'release18.12.12'. That should then trigger the
building of a non-snapshot docker container image.
Building of docker container images is not an official release channel for
OFBiz, so no need to publicise that any such images exist. But it would be
good to test that images are getting built by GitHub actions in response to
tagging releases in case we want to highlight the availability of docker
images in future.
If this vote fails, we should be able to 'move' the release tag for the
next release attempt, prompting the build of the next non-snapshot docker
image.
Thanks,
Dan.
On Tue, 13 Feb 2024 at 08:35, Jacopo Cappellato <ja...@gmail.com>
wrote:
> This is the vote thread, third attempt, to publish "Apache OFBiz
> 18.12.12", twelfth
> release from the release18.12 branch.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
> and are:
> * apache-ofbiz-18.12.12.zip
> * KEYS: text file with keys
> * apache-ofbiz-18.12.12.zip.asc: the detached signature file
> * apache-ofbiz-18.12.12.zip.sha512: checksum file
>
> Please download and test the zip file and its signatures (for
> instructions on testing the signatures see
> http://www.apache.org/info/verification.html).
>
> Vote:
> [ +1] release as Apache OFBiz 18.12.12
> [ -1] do not release
>
> This vote is open for at least 5 days.
>
> For more details about this process please refer to
> http://www.apache.org/foundation/voting.html
>
--
Daniel Watford