You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@maka.apache.org by "M4n5ter (via GitHub)" <gi...@apache.org> on 2026/08/20 02:19:57 UTC
[I] release: publish ASF-compliant Desktop convenience artifacts [maka]
M4n5ter opened a new issue, #3276:
URL: https://github.com/apache/maka/issues/3276
<details open>
<summary>English</summary>
Part of #2974 — G9: Desktop convenience artifacts.
## Outcome
Publish the supported Maka Desktop artifacts as ASF-compliant convenience
binaries built from the exact IPMC-approved Apache Maka source release.
## Exit criteria
- [ ] Define the first-release platform and artifact matrix, including the
intended macOS arm64 and Windows x64 installers/archives.
- [ ] Build every Desktop artifact from the approved source archive and bind it
to the same version, commit, and release identity.
- [ ] Remove bundled GPLv2 Git and all other Category X bytes from every
convenience artifact; relying on a separately installed tool must follow the
applicable ASF optional-dependency guidance.
- [ ] Audit each platform artifact's dependency closure and provide
artifact-specific `LICENSE`, `NOTICE`, `DISCLAIMER-WIP`, and required
prominent Category B labels/notices.
- [ ] Produce detached PGP signatures and SHA-512 hashes for every downloadable
artifact, in addition to platform code signing where applicable.
- [ ] Complete macOS Developer ID signing, notarization, stapling, and
browser-download acceptance.
- [ ] Sign Windows artifacts or obtain an explicit mentor/IPMC determination
for any proposed unsigned artifact before the vote.
- [ ] Display the full Incubator disclaimer and source-release link on the
GitHub release/download surface.
- [ ] Keep release candidates marked as prereleases and unadvertised; publish
convenience artifacts only after the source release is approved.
- [ ] Independently verify installation, launch, upgrade/uninstall, and the
representative supported functionality on each target platform.
## Existing work
- `.github/workflows/release-desktop.yml` builds the current product artifacts,
but it does not implement the ASF source-release binding, PGP/SHA-512 matrix,
or Category X exclusion required here.
- #3222 partially unifies Desktop/CLI product release identity, but does not
remove bundled Git or complete this issue's ASF compliance criteria.
- #3146 and its associated work concern duplicate Desktop dependencies and may
reduce the binary audit surface, but do not close this gate.
## Out of scope
- Publishing an ASF Desktop convenience binary that still contains bundled Git.
- Treating Desktop artifacts as a substitute for the official source release.
- Unrelated Desktop product features.
## References
- [Incubator distribution guidelines — GitHub](https://incubator.apache.org/guides/distribution.html#github)
- [ASF release policy](https://www.apache.org/legal/release-policy.html)
- [ASF third-party license policy](https://www.apache.org/legal/resolved.html)
## Ownership
Leave this issue unassigned until someone explicitly owns the complete ASF
Desktop distribution outcome. Partial release PRs do not transfer the wider
licensing and vote scope to their authors.
</details>
<details>
<summary>简体中文</summary>
#2974 的一部分——G9：Desktop convenience artifacts。
## 目标结果
将支持平台的 Maka Desktop artifacts 作为符合 ASF 要求的 convenience binaries 发布，
并确保它们由 IPMC 批准的同一 Apache Maka 源码 release 构建。
## 完成条件
- [ ] 定义第一次发版的平台和 artifact 矩阵，包括计划支持的 macOS arm64 与 Windows
x64 安装包/归档。
- [ ] 从获批源码归档构建每个 Desktop artifact，并绑定同一版本、commit 和发版身份。
- [ ] 从所有 convenience artifacts 中移除 bundled GPLv2 Git 和其他 Category X 字节；
如果依赖用户另行安装的工具，必须符合适用的 ASF optional-dependency 指南。
- [ ] 审计每个平台 artifact 的依赖闭包，提供针对 artifact 的 `LICENSE`、`NOTICE`、
`DISCLAIMER-WIP`，以及 Category B 所需的显著标签/notices。
- [ ] 除适用的平台代码签名外，为每个可下载 artifact 生成 detached PGP signature 和
SHA-512。
- [ ] 完成 macOS Developer ID 签名、公证、stapling 和浏览器下载验收。
- [ ] 对 Windows artifacts 完成签名；如果计划发布未签名 artifact，必须在投票前取得
mentors/IPMC 的明确判断。
- [ ] 在 GitHub release/download 界面展示完整 Incubator disclaimer 和源码 release 链接。
- [ ] 将 RC 标记为 prerelease 且不面向公众宣传；只有源码 release 获批后才发布
convenience artifacts。
- [ ] 在每个目标平台独立验证安装、启动、升级/卸载和代表性的支持功能。
## 已有工作
- `.github/workflows/release-desktop.yml` 构建当前产品 artifacts，但没有实现本 issue
所需的 ASF 源码 release 绑定、PGP/SHA-512 矩阵或 Category X 排除。
- #3222 部分统一了 Desktop/CLI 产品发版身份，但没有移除 bundled Git，也没有完成本
issue 的 ASF 合规条件。
- #3146 及相关工作处理 Desktop 重复依赖，可能减少二进制审计面，但不能关闭这一 gate。
## 不在范围内
- 发布仍包含 bundled Git 的 ASF Desktop convenience binary。
- 用 Desktop artifacts 替代 ASF 官方源码 release。
- 无关的 Desktop 产品功能。
## 参考资料
- [Incubator 分发指南——GitHub](https://incubator.apache.org/guides/distribution.html#github)
- [ASF 发版政策](https://www.apache.org/legal/release-policy.html)
- [ASF 第三方许可证政策](https://www.apache.org/legal/resolved.html)
## 负责人边界
在有人明确负责完整 ASF Desktop 分发结果前保持 unassigned。部分 release PR 不会把更宽
的许可证和投票范围转移给其作者。
</details>
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@maka.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@maka.apache.org
For additional commands, e-mail: commits-help@maka.apache.org
Re: [I] release: publish ASF-compliant Desktop convenience artifacts [maka]
Posted by "Astro-Han (via GitHub)" <gi...@apache.org>.
Astro-Han commented on issue #3276:
URL: https://github.com/apache/maka/issues/3276#issuecomment-5549784436
Desktop convenience artifacts are no longer planned for 0.2.0, so I’m closing this tracker. Existing Nightly builds and the reproducibility improvements remain in place. This can be reopened for a future release.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@maka.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@maka.apache.org
For additional commands, e-mail: commits-help@maka.apache.org
Re: [I] release: publish ASF-compliant Desktop convenience artifacts [maka]
Posted by "Astro-Han (via GitHub)" <gi...@apache.org>.
Astro-Han commented on issue #3276:
URL: https://github.com/apache/maka/issues/3276#issuecomment-5489315563
<details open>
<summary>English</summary>
## Correction: the INFRA tickets for #3414 were already filed
My previous comment said #3414 "is still waiting on INFRA tickets that can now be filed". That was wrong. Both were filed before I commented:
- **INFRA-28301** — ASF Apple Developer Program access for the named release managers. **Waiting for Infra** since 2026-08-30.
- **INFRA-28302** — ssl.com eSigner access for the named release managers. Accepted and queued, acknowledged 2026-08-27, no date given.
I could not read them because the INFRA project is not open to anonymous access, and I reported that as "not filed" rather than "cannot verify". Details are on #3414.
Everything else in that comment stands: this issue has no movement since 2026-08-23, it does not gate RC1, and the Windows signing requirement still conflicts between this issue and `.github/RELEASE_CHECKLIST.md`.
</details>
<details>
<summary>简体中文</summary>
## 更正：#3414 的 INFRA 工单早已提交
我上一条评论说 #3414「仍在等待 INFRA 工单，而这些工单现在可以提交」。这是错的。两张都在我评论之前就已提交：
- **INFRA-28301** —— 为指定的 release manager 申请 ASF Apple Developer Program 权限。自 2026-08-30 起为 **Waiting for Infra**。
- **INFRA-28302** —— 为指定的 release manager 申请 ssl.com eSigner 权限。已受理并排队，2026-08-27 确认收到，未给出时间。
我读不到它们，是因为 INFRA 项目不对匿名开放，而我把这种情况报告成了「未提交」，本应报告为「无法核实」。详情见 #3414。
该评论其余内容不变：本 issue 自 2026-08-23 起无进展，不构成 RC1 的门槛，且 Windows 签名要求在本 issue 与 `.github/RELEASE_CHECKLIST.md` 之间仍然冲突。
</details>
---
Drafted with help from Claude Code. I reviewed the final text and take responsibility for posting it.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@maka.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@maka.apache.org
For additional commands, e-mail: commits-help@maka.apache.org
Re: [I] release: publish ASF-compliant Desktop convenience artifacts [maka]
Posted by "Astro-Han (via GitHub)" <gi...@apache.org>.
Astro-Han commented on issue #3276:
URL: https://github.com/apache/maka/issues/3276#issuecomment-5489197311
<details open>
<summary>English</summary>
## Status: unchanged, and now explicitly outside the source-release path
No movement since 2026-08-23. The issue remains unassigned by design, and #3414 — its external prerequisite — is still waiting on INFRA tickets that can now be filed, since the Release Managers are named (`astrohan` primary, `wyt` backup).
#2974 has been restructured. Convenience artifacts were already out of scope for the source release; the tracking issue now states that explicitly and lists this issue in its non-blocking table. Nothing here gates RC1, and the release vote does not approve these bytes.
Two things worth recording while this waits:
**The Windows signing requirement conflicts with the product checklist.** This issue requires eSigner signing or an explicit mentor/IPMC determination for any proposed unsigned artifact before the vote. `.github/RELEASE_CHECKLIST.md` Phase 1 requires the unsigned Windows x64 installer and ZIP, and records that Windows stays unsigned until an Authenticode policy and certificate exist. One of the two has to change. Raised in more detail on #3414.
**These artifacts are on the critical path for the Windows upgrade gate.** `scripts/windows-upgrade-baseline.json` needs a Windows installer that stays downloadable. Every pre-incubation GitHub Release is gone (see #3274), so #4412 repinned the baseline to a Desktop Nightly prerelease, which is ephemeral by design. The first durable replacement is the convenience installer this issue produces — which lands after both release votes. That argues for decoupling the CI gate from the release lifecycle rather than waiting; the options are on #3274.
</details>
<details>
<summary>简体中文</summary>
## 进展：无变化，且现已明确位于源码发布路径之外
自 2026-08-23 起无进展。本 issue 按设计仍未指派负责人；其外部前置 #3414 仍在等待 INFRA 工单，而由于 Release Manager 已确定（`astrohan` 为正、`wyt` 为备），这些工单现在可以提交了。
#2974 已重构。convenience artifacts 本就不在源码发布范围内；跟踪 issue 现在明确写出了这一点，并把本 issue 列入其非阻塞表。这里没有任何内容构成 RC1 的门槛，发布投票也不批准这些字节。
等待期间有两件事值得记录：
**Windows 签名要求与产品检查表冲突。** 本 issue 要求通过 eSigner 签名，或在投票前就任何拟发布的未签名产物取得导师/IPMC 的明确裁定。而 `.github/RELEASE_CHECKLIST.md` 的 Phase 1 要求未签名的 Windows x64 安装包与 ZIP，并记录 Windows 在补齐 Authenticode 策略和证书之前保持未签名。两者必须改其一。详细讨论已提在 #3414。
**这些产物位于 Windows 升级门禁的关键路径上。** `scripts/windows-upgrade-baseline.json` 需要一个能持续下载到的 Windows 安装包。入孵前的 GitHub Release 已全部消失（见 #3274），因此 #4412 把基线重新固定到了 Desktop Nightly 预发布，而后者按设计是易失的。第一个持久替代品就是本 issue 产出的 convenience 安装包——它落在两轮发布投票之后。这说明应当把该 CI 门禁与发布生命周期解耦，而不是等待；备选方案在 #3274。
</details>
---
Drafted with help from Claude Code. I reviewed the final text and take responsibility for posting it.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@maka.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@maka.apache.org
For additional commands, e-mail: commits-help@maka.apache.org
Re: [I] release: publish ASF-compliant Desktop convenience artifacts [maka]
Posted by "Astro-Han (via GitHub)" <gi...@apache.org>.
Astro-Han closed issue #3276: release: publish ASF-compliant Desktop convenience artifacts
URL: https://github.com/apache/maka/issues/3276
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@maka.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@maka.apache.org
For additional commands, e-mail: commits-help@maka.apache.org