You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@commons.apache.org by Rob Tompkins <ch...@gmail.com> on 2017/06/08 00:27:46 UTC
[CANCEL][VOTE] Release Commons Fileupload 1.3.3 based on RC5
> On Jun 7, 2017, at 8:20 PM, Gary Gregory <ga...@gmail.com> wrote:
>
> The ASC does not seem to have a public key.:
>
> gpg --verify commons-fileupload-1.3.3-source-release.zip.asc
> gpg: assuming signed data in 'commons-fileupload-1.3.3-source-release.zip'
> gpg: Signature made 12/04/16 05:15:02 Pacific Standard Time using DSA key
> ID 7188601C
> *gpg: Can't check signature: No public key*
>
>
Curious. I'll re-roll.
> Also, the file naming should be consistent,
> https://dist.apache.org/repos/dist/dev/commons/fileupload/source/ has both
> "source-release" and "src". Not sure how you can end up with the
> differences beyond just the file extension.
>
> Gary
>
>
>> On Tue, Jun 6, 2017 at 11:20 AM, Rob Tompkins <ch...@apache.org> wrote:
>>
>> Hello all,
>>
>> This is a [VOTE] for releasing Apache Commons Fileupload 1.3.3 (from RC5).
>>
>> Tag name:
>> commons-fileupload-1.3.3-RC5 (signature can be checked from git using
>> 'git tag -v')
>>
>> Tag URL:
>> https://git-wip-us.apache.org/repos/asf?p=commons-
>> fileupload.git;a=commit;h=dd2238b1671644cfead0e87c24a8ac61b4039084
>>
>> Commit ID the tag points at:
>> dd2238b1671644cfead0e87c24a8ac61b4039084
>>
>> Site:
>> http://home.apache.org/~chtompki/commons-fileupload-1.3.3-RC5
>>
>> Distribution files (committed at revision 19901):
>> https://dist.apache.org/repos/dist/dev/commons/fileupload/
>>
>> Distribution files hashes (SHA1):
>> commons-fileupload-1.3.3-bin.tar.gz
>> (SHA1: 2f4a9672168641ff726974a3b7cc68b97d1212fa)
>> commons-fileupload-1.3.3-bin.zip
>> (SHA1: b66e2c434ddbda90dfc9e92af4775d9777524bfa)
>> commons-fileupload-1.3.3-src.tar.gz
>> (SHA1: 71294a7d737a8ced04934c222ae6dfb16e4d8d73)
>> commons-fileupload-1.3.3-src.zip
>> (SHA1: 661172a2f62b460c4b754b7a0f04d412afabde52)
>>
>> These are the Maven artifacts and their hashes:
>> commons-fileupload-1.3.3-javadoc.jar
>> (SHA1: 92d2fc371379d64a822150ca3882157564dd3f99)
>> commons-fileupload-1.3.3-sources.jar
>> (SHA1: c8c7bcb851fb5af0b19e4ea845cf2fc03de6f673)
>> commons-fileupload-1.3.3-test-sources.jar
>> (SHA1: 5e0d8c621d38694e0f2960ab2899ee1d67f2b708)
>> commons-fileupload-1.3.3-tests.jar
>> (SHA1: 20510147958fc759582e6ede789ccf31d056b232)
>> commons-fileupload-1.3.3.jar
>> (SHA1: fd754c7518772453aea1d5ffc32cb5ce0ebc0e40)
>> commons-fileupload-1.3.3.pom
>> (SHA1: 97d781eafc190f4fee3abf11f9ec8076f5f7b58c)
>>
>> KEYS file to check signatures:
>> http://www.apache.org/dist/commons/KEYS
>>
>> Maven artifacts:
>> https://repository.apache.org/content/repositories/
>> orgapachecommons-1249
>>
>> Please select one of the following options[1]:
>> [ ] +1 Release it.
>> [ ] +0 Go ahead; I don't care.
>> [ ] -0 There are a few minor glitches: ...
>> [ ] -1 No, do not release it because ...
>>
>> This vote will be open at least 72 hours, i.e. until
>> 2017-06-09T19:00:00Z
>> (this is UTC time).
>> --------
>>
>> Cheers,
>> -Rob
>>
>> [1] http://apache.org/foundation/voting.html
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
>> For additional commands, e-mail: dev-help@commons.apache.org
>>
>>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
For additional commands, e-mail: dev-help@commons.apache.org
Re: [CANCEL][VOTE] Release Commons Fileupload 1.3.3 based on RC5
Posted by Rob Tompkins <ch...@gmail.com>.
> On Jun 8, 2017, at 5:46 AM, sebb <se...@gmail.com> wrote:
>
> On 8 June 2017 at 01:36, Rob Tompkins <chtompki@gmail.com <ma...@gmail.com>> wrote:
>>
>>
>>> On Jun 7, 2017, at 8:31 PM, Gary Gregory <ga...@gmail.com> wrote:
>>>
>>>> On Wed, Jun 7, 2017 at 5:30 PM, Gary Gregory <ga...@gmail.com> wrote:
>>>>
>>>>
>>>>
>>>>> On Wed, Jun 7, 2017 at 5:27 PM, Rob Tompkins <ch...@gmail.com> wrote:
>>>>>
>>>>>
>>>>>
>>>>>> On Jun 7, 2017, at 8:20 PM, Gary Gregory <ga...@gmail.com>
>>>>> wrote:
>>>>>>
>>>>>> The ASC does not seem to have a public key.:
>>>>>>
>>>>>> gpg --verify commons-fileupload-1.3.3-source-release.zip.asc
>>>>>> gpg: assuming signed data in 'commons-fileupload-1.3.3-sour
>>>>> ce-release.zip'
>>>>>> gpg: Signature made 12/04/16 05:15:02 Pacific Standard Time using DSA
>>>>> key
>>>>>> ID 7188601C
>>>>>> *gpg: Can't check signature: No public key*
>>>>>>
>>>>>>
>>>>>
>>>>> Curious. I'll re-roll.
>>>>>
>>>>
>>> I wonder if this VOTE should be canceled or if properly signing the files
>>> can be done "in-line" to this VOTE?
>>
>> Indeed I was wondering if I re-built from the tag if that would warrant an RC6.
>
> I'm not sure I understand why the code needs to be rebuilt if the only
> problem is that the public signing key is not in KEYS.
>
> Surely you just need to ensure that the public key is added to the KEYS file?
>
> Or am I missing something here?
I think I missed pushing the src.zip artifacts properly to svn.
Gary, can you try again?
Thanks,
-Rob
>
>>>
>>> Gary
>>>
>>>
>>>> Just FYI, I re-imported http://www.apache.org/dist/commons/KEYS. Just in
>>>> case. Didn't help.
>>>>
>>>> Gary
>>>>
>>>>
>>>>>
>>>>>> Also, the file naming should be consistent,
>>>>>> https://dist.apache.org/repos/dist/dev/commons/fileupload/source/ has
>>>>> both
>>>>>> "source-release" and "src". Not sure how you can end up with the
>>>>>> differences beyond just the file extension.
>>>>>>
>>>>>> Gary
>>>>>>
>>>>>>
>>>>>>> On Tue, Jun 6, 2017 at 11:20 AM, Rob Tompkins <ch...@apache.org>
>>>>> wrote:
>>>>>>>
>>>>>>> Hello all,
>>>>>>>
>>>>>>> This is a [VOTE] for releasing Apache Commons Fileupload 1.3.3 (from
>>>>> RC5).
>>>>>>>
>>>>>>> Tag name:
>>>>>>> commons-fileupload-1.3.3-RC5 (signature can be checked from git using
>>>>>>> 'git tag -v')
>>>>>>>
>>>>>>> Tag URL:
>>>>>>> https://git-wip-us.apache.org/repos/asf?p=commons-
>>>>>>> fileupload.git;a=commit;h=dd2238b1671644cfead0e87c24a8ac61b4039084
>>>>>>>
>>>>>>> Commit ID the tag points at:
>>>>>>> dd2238b1671644cfead0e87c24a8ac61b4039084
>>>>>>>
>>>>>>> Site:
>>>>>>> http://home.apache.org/~chtompki/commons-fileupload-1.3.3-RC5
>>>>>>>
>>>>>>> Distribution files (committed at revision 19901):
>>>>>>> https://dist.apache.org/repos/dist/dev/commons/fileupload/
>>>>>>>
>>>>>>> Distribution files hashes (SHA1):
>>>>>>> commons-fileupload-1.3.3-bin.tar.gz
>>>>>>> (SHA1: 2f4a9672168641ff726974a3b7cc68b97d1212fa)
>>>>>>> commons-fileupload-1.3.3-bin.zip
>>>>>>> (SHA1: b66e2c434ddbda90dfc9e92af4775d9777524bfa)
>>>>>>> commons-fileupload-1.3.3-src.tar.gz
>>>>>>> (SHA1: 71294a7d737a8ced04934c222ae6dfb16e4d8d73)
>>>>>>> commons-fileupload-1.3.3-src.zip
>>>>>>> (SHA1: 661172a2f62b460c4b754b7a0f04d412afabde52)
>>>>>>>
>>>>>>> These are the Maven artifacts and their hashes:
>>>>>>> commons-fileupload-1.3.3-javadoc.jar
>>>>>>> (SHA1: 92d2fc371379d64a822150ca3882157564dd3f99)
>>>>>>> commons-fileupload-1.3.3-sources.jar
>>>>>>> (SHA1: c8c7bcb851fb5af0b19e4ea845cf2fc03de6f673)
>>>>>>> commons-fileupload-1.3.3-test-sources.jar
>>>>>>> (SHA1: 5e0d8c621d38694e0f2960ab2899ee1d67f2b708)
>>>>>>> commons-fileupload-1.3.3-tests.jar
>>>>>>> (SHA1: 20510147958fc759582e6ede789ccf31d056b232)
>>>>>>> commons-fileupload-1.3.3.jar
>>>>>>> (SHA1: fd754c7518772453aea1d5ffc32cb5ce0ebc0e40)
>>>>>>> commons-fileupload-1.3.3.pom
>>>>>>> (SHA1: 97d781eafc190f4fee3abf11f9ec8076f5f7b58c)
>>>>>>>
>>>>>>> KEYS file to check signatures:
>>>>>>> http://www.apache.org/dist/commons/KEYS
>>>>>>>
>>>>>>> Maven artifacts:
>>>>>>> https://repository.apache.org/content/repositories/
>>>>>>> orgapachecommons-1249
>>>>>>>
>>>>>>> Please select one of the following options[1]:
>>>>>>> [ ] +1 Release it.
>>>>>>> [ ] +0 Go ahead; I don't care.
>>>>>>> [ ] -0 There are a few minor glitches: ...
>>>>>>> [ ] -1 No, do not release it because ...
>>>>>>>
>>>>>>> This vote will be open at least 72 hours, i.e. until
>>>>>>> 2017-06-09T19:00:00Z
>>>>>>> (this is UTC time).
>>>>>>> --------
>>>>>>>
>>>>>>> Cheers,
>>>>>>> -Rob
>>>>>>>
>>>>>>> [1] http://apache.org/foundation/voting.html
>>>>>>> ---------------------------------------------------------------------
>>>>>>> To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
>>>>>>> For additional commands, e-mail: dev-help@commons.apache.org
>>>>>>>
>>>>>>>
>>>>>
>>>>> ---------------------------------------------------------------------
>>>>> To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
>>>>> For additional commands, e-mail: dev-help@commons.apache.org
>>>>>
>>>>>
>>>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org <ma...@commons.apache.org>
>> For additional commands, e-mail: dev-help@commons.apache.org <ma...@commons.apache.org>
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org <ma...@commons.apache.org>
> For additional commands, e-mail: dev-help@commons.apache.org <ma...@commons.apache.org>
Re: [CANCEL][VOTE] Release Commons Fileupload 1.3.3 based on RC5
Posted by sebb <se...@gmail.com>.
On 8 June 2017 at 01:36, Rob Tompkins <ch...@gmail.com> wrote:
>
>
>> On Jun 7, 2017, at 8:31 PM, Gary Gregory <ga...@gmail.com> wrote:
>>
>>> On Wed, Jun 7, 2017 at 5:30 PM, Gary Gregory <ga...@gmail.com> wrote:
>>>
>>>
>>>
>>>> On Wed, Jun 7, 2017 at 5:27 PM, Rob Tompkins <ch...@gmail.com> wrote:
>>>>
>>>>
>>>>
>>>>> On Jun 7, 2017, at 8:20 PM, Gary Gregory <ga...@gmail.com>
>>>> wrote:
>>>>>
>>>>> The ASC does not seem to have a public key.:
>>>>>
>>>>> gpg --verify commons-fileupload-1.3.3-source-release.zip.asc
>>>>> gpg: assuming signed data in 'commons-fileupload-1.3.3-sour
>>>> ce-release.zip'
>>>>> gpg: Signature made 12/04/16 05:15:02 Pacific Standard Time using DSA
>>>> key
>>>>> ID 7188601C
>>>>> *gpg: Can't check signature: No public key*
>>>>>
>>>>>
>>>>
>>>> Curious. I'll re-roll.
>>>>
>>>
>> I wonder if this VOTE should be canceled or if properly signing the files
>> can be done "in-line" to this VOTE?
>
> Indeed I was wondering if I re-built from the tag if that would warrant an RC6.
I'm not sure I understand why the code needs to be rebuilt if the only
problem is that the public signing key is not in KEYS.
Surely you just need to ensure that the public key is added to the KEYS file?
Or am I missing something here?
>>
>> Gary
>>
>>
>>> Just FYI, I re-imported http://www.apache.org/dist/commons/KEYS. Just in
>>> case. Didn't help.
>>>
>>> Gary
>>>
>>>
>>>>
>>>>> Also, the file naming should be consistent,
>>>>> https://dist.apache.org/repos/dist/dev/commons/fileupload/source/ has
>>>> both
>>>>> "source-release" and "src". Not sure how you can end up with the
>>>>> differences beyond just the file extension.
>>>>>
>>>>> Gary
>>>>>
>>>>>
>>>>>> On Tue, Jun 6, 2017 at 11:20 AM, Rob Tompkins <ch...@apache.org>
>>>> wrote:
>>>>>>
>>>>>> Hello all,
>>>>>>
>>>>>> This is a [VOTE] for releasing Apache Commons Fileupload 1.3.3 (from
>>>> RC5).
>>>>>>
>>>>>> Tag name:
>>>>>> commons-fileupload-1.3.3-RC5 (signature can be checked from git using
>>>>>> 'git tag -v')
>>>>>>
>>>>>> Tag URL:
>>>>>> https://git-wip-us.apache.org/repos/asf?p=commons-
>>>>>> fileupload.git;a=commit;h=dd2238b1671644cfead0e87c24a8ac61b4039084
>>>>>>
>>>>>> Commit ID the tag points at:
>>>>>> dd2238b1671644cfead0e87c24a8ac61b4039084
>>>>>>
>>>>>> Site:
>>>>>> http://home.apache.org/~chtompki/commons-fileupload-1.3.3-RC5
>>>>>>
>>>>>> Distribution files (committed at revision 19901):
>>>>>> https://dist.apache.org/repos/dist/dev/commons/fileupload/
>>>>>>
>>>>>> Distribution files hashes (SHA1):
>>>>>> commons-fileupload-1.3.3-bin.tar.gz
>>>>>> (SHA1: 2f4a9672168641ff726974a3b7cc68b97d1212fa)
>>>>>> commons-fileupload-1.3.3-bin.zip
>>>>>> (SHA1: b66e2c434ddbda90dfc9e92af4775d9777524bfa)
>>>>>> commons-fileupload-1.3.3-src.tar.gz
>>>>>> (SHA1: 71294a7d737a8ced04934c222ae6dfb16e4d8d73)
>>>>>> commons-fileupload-1.3.3-src.zip
>>>>>> (SHA1: 661172a2f62b460c4b754b7a0f04d412afabde52)
>>>>>>
>>>>>> These are the Maven artifacts and their hashes:
>>>>>> commons-fileupload-1.3.3-javadoc.jar
>>>>>> (SHA1: 92d2fc371379d64a822150ca3882157564dd3f99)
>>>>>> commons-fileupload-1.3.3-sources.jar
>>>>>> (SHA1: c8c7bcb851fb5af0b19e4ea845cf2fc03de6f673)
>>>>>> commons-fileupload-1.3.3-test-sources.jar
>>>>>> (SHA1: 5e0d8c621d38694e0f2960ab2899ee1d67f2b708)
>>>>>> commons-fileupload-1.3.3-tests.jar
>>>>>> (SHA1: 20510147958fc759582e6ede789ccf31d056b232)
>>>>>> commons-fileupload-1.3.3.jar
>>>>>> (SHA1: fd754c7518772453aea1d5ffc32cb5ce0ebc0e40)
>>>>>> commons-fileupload-1.3.3.pom
>>>>>> (SHA1: 97d781eafc190f4fee3abf11f9ec8076f5f7b58c)
>>>>>>
>>>>>> KEYS file to check signatures:
>>>>>> http://www.apache.org/dist/commons/KEYS
>>>>>>
>>>>>> Maven artifacts:
>>>>>> https://repository.apache.org/content/repositories/
>>>>>> orgapachecommons-1249
>>>>>>
>>>>>> Please select one of the following options[1]:
>>>>>> [ ] +1 Release it.
>>>>>> [ ] +0 Go ahead; I don't care.
>>>>>> [ ] -0 There are a few minor glitches: ...
>>>>>> [ ] -1 No, do not release it because ...
>>>>>>
>>>>>> This vote will be open at least 72 hours, i.e. until
>>>>>> 2017-06-09T19:00:00Z
>>>>>> (this is UTC time).
>>>>>> --------
>>>>>>
>>>>>> Cheers,
>>>>>> -Rob
>>>>>>
>>>>>> [1] http://apache.org/foundation/voting.html
>>>>>> ---------------------------------------------------------------------
>>>>>> To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
>>>>>> For additional commands, e-mail: dev-help@commons.apache.org
>>>>>>
>>>>>>
>>>>
>>>> ---------------------------------------------------------------------
>>>> To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
>>>> For additional commands, e-mail: dev-help@commons.apache.org
>>>>
>>>>
>>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
> For additional commands, e-mail: dev-help@commons.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
For additional commands, e-mail: dev-help@commons.apache.org
Re: [CANCEL][VOTE] Release Commons Fileupload 1.3.3 based on RC5
Posted by Rob Tompkins <ch...@gmail.com>.
> On Jun 7, 2017, at 8:31 PM, Gary Gregory <ga...@gmail.com> wrote:
>
>> On Wed, Jun 7, 2017 at 5:30 PM, Gary Gregory <ga...@gmail.com> wrote:
>>
>>
>>
>>> On Wed, Jun 7, 2017 at 5:27 PM, Rob Tompkins <ch...@gmail.com> wrote:
>>>
>>>
>>>
>>>> On Jun 7, 2017, at 8:20 PM, Gary Gregory <ga...@gmail.com>
>>> wrote:
>>>>
>>>> The ASC does not seem to have a public key.:
>>>>
>>>> gpg --verify commons-fileupload-1.3.3-source-release.zip.asc
>>>> gpg: assuming signed data in 'commons-fileupload-1.3.3-sour
>>> ce-release.zip'
>>>> gpg: Signature made 12/04/16 05:15:02 Pacific Standard Time using DSA
>>> key
>>>> ID 7188601C
>>>> *gpg: Can't check signature: No public key*
>>>>
>>>>
>>>
>>> Curious. I'll re-roll.
>>>
>>
> I wonder if this VOTE should be canceled or if properly signing the files
> can be done "in-line" to this VOTE?
Indeed I was wondering if I re-built from the tag if that would warrant an RC6.
>
> Gary
>
>
>> Just FYI, I re-imported http://www.apache.org/dist/commons/KEYS. Just in
>> case. Didn't help.
>>
>> Gary
>>
>>
>>>
>>>> Also, the file naming should be consistent,
>>>> https://dist.apache.org/repos/dist/dev/commons/fileupload/source/ has
>>> both
>>>> "source-release" and "src". Not sure how you can end up with the
>>>> differences beyond just the file extension.
>>>>
>>>> Gary
>>>>
>>>>
>>>>> On Tue, Jun 6, 2017 at 11:20 AM, Rob Tompkins <ch...@apache.org>
>>> wrote:
>>>>>
>>>>> Hello all,
>>>>>
>>>>> This is a [VOTE] for releasing Apache Commons Fileupload 1.3.3 (from
>>> RC5).
>>>>>
>>>>> Tag name:
>>>>> commons-fileupload-1.3.3-RC5 (signature can be checked from git using
>>>>> 'git tag -v')
>>>>>
>>>>> Tag URL:
>>>>> https://git-wip-us.apache.org/repos/asf?p=commons-
>>>>> fileupload.git;a=commit;h=dd2238b1671644cfead0e87c24a8ac61b4039084
>>>>>
>>>>> Commit ID the tag points at:
>>>>> dd2238b1671644cfead0e87c24a8ac61b4039084
>>>>>
>>>>> Site:
>>>>> http://home.apache.org/~chtompki/commons-fileupload-1.3.3-RC5
>>>>>
>>>>> Distribution files (committed at revision 19901):
>>>>> https://dist.apache.org/repos/dist/dev/commons/fileupload/
>>>>>
>>>>> Distribution files hashes (SHA1):
>>>>> commons-fileupload-1.3.3-bin.tar.gz
>>>>> (SHA1: 2f4a9672168641ff726974a3b7cc68b97d1212fa)
>>>>> commons-fileupload-1.3.3-bin.zip
>>>>> (SHA1: b66e2c434ddbda90dfc9e92af4775d9777524bfa)
>>>>> commons-fileupload-1.3.3-src.tar.gz
>>>>> (SHA1: 71294a7d737a8ced04934c222ae6dfb16e4d8d73)
>>>>> commons-fileupload-1.3.3-src.zip
>>>>> (SHA1: 661172a2f62b460c4b754b7a0f04d412afabde52)
>>>>>
>>>>> These are the Maven artifacts and their hashes:
>>>>> commons-fileupload-1.3.3-javadoc.jar
>>>>> (SHA1: 92d2fc371379d64a822150ca3882157564dd3f99)
>>>>> commons-fileupload-1.3.3-sources.jar
>>>>> (SHA1: c8c7bcb851fb5af0b19e4ea845cf2fc03de6f673)
>>>>> commons-fileupload-1.3.3-test-sources.jar
>>>>> (SHA1: 5e0d8c621d38694e0f2960ab2899ee1d67f2b708)
>>>>> commons-fileupload-1.3.3-tests.jar
>>>>> (SHA1: 20510147958fc759582e6ede789ccf31d056b232)
>>>>> commons-fileupload-1.3.3.jar
>>>>> (SHA1: fd754c7518772453aea1d5ffc32cb5ce0ebc0e40)
>>>>> commons-fileupload-1.3.3.pom
>>>>> (SHA1: 97d781eafc190f4fee3abf11f9ec8076f5f7b58c)
>>>>>
>>>>> KEYS file to check signatures:
>>>>> http://www.apache.org/dist/commons/KEYS
>>>>>
>>>>> Maven artifacts:
>>>>> https://repository.apache.org/content/repositories/
>>>>> orgapachecommons-1249
>>>>>
>>>>> Please select one of the following options[1]:
>>>>> [ ] +1 Release it.
>>>>> [ ] +0 Go ahead; I don't care.
>>>>> [ ] -0 There are a few minor glitches: ...
>>>>> [ ] -1 No, do not release it because ...
>>>>>
>>>>> This vote will be open at least 72 hours, i.e. until
>>>>> 2017-06-09T19:00:00Z
>>>>> (this is UTC time).
>>>>> --------
>>>>>
>>>>> Cheers,
>>>>> -Rob
>>>>>
>>>>> [1] http://apache.org/foundation/voting.html
>>>>> ---------------------------------------------------------------------
>>>>> To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
>>>>> For additional commands, e-mail: dev-help@commons.apache.org
>>>>>
>>>>>
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
>>> For additional commands, e-mail: dev-help@commons.apache.org
>>>
>>>
>>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
For additional commands, e-mail: dev-help@commons.apache.org
Re: [CANCEL][VOTE] Release Commons Fileupload 1.3.3 based on RC5
Posted by Gary Gregory <ga...@gmail.com>.
On Wed, Jun 7, 2017 at 5:30 PM, Gary Gregory <ga...@gmail.com> wrote:
>
>
> On Wed, Jun 7, 2017 at 5:27 PM, Rob Tompkins <ch...@gmail.com> wrote:
>
>>
>>
>> > On Jun 7, 2017, at 8:20 PM, Gary Gregory <ga...@gmail.com>
>> wrote:
>> >
>> > The ASC does not seem to have a public key.:
>> >
>> > gpg --verify commons-fileupload-1.3.3-source-release.zip.asc
>> > gpg: assuming signed data in 'commons-fileupload-1.3.3-sour
>> ce-release.zip'
>> > gpg: Signature made 12/04/16 05:15:02 Pacific Standard Time using DSA
>> key
>> > ID 7188601C
>> > *gpg: Can't check signature: No public key*
>> >
>> >
>>
>> Curious. I'll re-roll.
>>
>
I wonder if this VOTE should be canceled or if properly signing the files
can be done "in-line" to this VOTE?
Gary
> Just FYI, I re-imported http://www.apache.org/dist/commons/KEYS. Just in
> case. Didn't help.
>
> Gary
>
>
>>
>> > Also, the file naming should be consistent,
>> > https://dist.apache.org/repos/dist/dev/commons/fileupload/source/ has
>> both
>> > "source-release" and "src". Not sure how you can end up with the
>> > differences beyond just the file extension.
>> >
>> > Gary
>> >
>> >
>> >> On Tue, Jun 6, 2017 at 11:20 AM, Rob Tompkins <ch...@apache.org>
>> wrote:
>> >>
>> >> Hello all,
>> >>
>> >> This is a [VOTE] for releasing Apache Commons Fileupload 1.3.3 (from
>> RC5).
>> >>
>> >> Tag name:
>> >> commons-fileupload-1.3.3-RC5 (signature can be checked from git using
>> >> 'git tag -v')
>> >>
>> >> Tag URL:
>> >> https://git-wip-us.apache.org/repos/asf?p=commons-
>> >> fileupload.git;a=commit;h=dd2238b1671644cfead0e87c24a8ac61b4039084
>> >>
>> >> Commit ID the tag points at:
>> >> dd2238b1671644cfead0e87c24a8ac61b4039084
>> >>
>> >> Site:
>> >> http://home.apache.org/~chtompki/commons-fileupload-1.3.3-RC5
>> >>
>> >> Distribution files (committed at revision 19901):
>> >> https://dist.apache.org/repos/dist/dev/commons/fileupload/
>> >>
>> >> Distribution files hashes (SHA1):
>> >> commons-fileupload-1.3.3-bin.tar.gz
>> >> (SHA1: 2f4a9672168641ff726974a3b7cc68b97d1212fa)
>> >> commons-fileupload-1.3.3-bin.zip
>> >> (SHA1: b66e2c434ddbda90dfc9e92af4775d9777524bfa)
>> >> commons-fileupload-1.3.3-src.tar.gz
>> >> (SHA1: 71294a7d737a8ced04934c222ae6dfb16e4d8d73)
>> >> commons-fileupload-1.3.3-src.zip
>> >> (SHA1: 661172a2f62b460c4b754b7a0f04d412afabde52)
>> >>
>> >> These are the Maven artifacts and their hashes:
>> >> commons-fileupload-1.3.3-javadoc.jar
>> >> (SHA1: 92d2fc371379d64a822150ca3882157564dd3f99)
>> >> commons-fileupload-1.3.3-sources.jar
>> >> (SHA1: c8c7bcb851fb5af0b19e4ea845cf2fc03de6f673)
>> >> commons-fileupload-1.3.3-test-sources.jar
>> >> (SHA1: 5e0d8c621d38694e0f2960ab2899ee1d67f2b708)
>> >> commons-fileupload-1.3.3-tests.jar
>> >> (SHA1: 20510147958fc759582e6ede789ccf31d056b232)
>> >> commons-fileupload-1.3.3.jar
>> >> (SHA1: fd754c7518772453aea1d5ffc32cb5ce0ebc0e40)
>> >> commons-fileupload-1.3.3.pom
>> >> (SHA1: 97d781eafc190f4fee3abf11f9ec8076f5f7b58c)
>> >>
>> >> KEYS file to check signatures:
>> >> http://www.apache.org/dist/commons/KEYS
>> >>
>> >> Maven artifacts:
>> >> https://repository.apache.org/content/repositories/
>> >> orgapachecommons-1249
>> >>
>> >> Please select one of the following options[1]:
>> >> [ ] +1 Release it.
>> >> [ ] +0 Go ahead; I don't care.
>> >> [ ] -0 There are a few minor glitches: ...
>> >> [ ] -1 No, do not release it because ...
>> >>
>> >> This vote will be open at least 72 hours, i.e. until
>> >> 2017-06-09T19:00:00Z
>> >> (this is UTC time).
>> >> --------
>> >>
>> >> Cheers,
>> >> -Rob
>> >>
>> >> [1] http://apache.org/foundation/voting.html
>> >> ---------------------------------------------------------------------
>> >> To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
>> >> For additional commands, e-mail: dev-help@commons.apache.org
>> >>
>> >>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
>> For additional commands, e-mail: dev-help@commons.apache.org
>>
>>
>
Re: [CANCEL][VOTE] Release Commons Fileupload 1.3.3 based on RC5
Posted by Gary Gregory <ga...@gmail.com>.
On Wed, Jun 7, 2017 at 5:27 PM, Rob Tompkins <ch...@gmail.com> wrote:
>
>
> > On Jun 7, 2017, at 8:20 PM, Gary Gregory <ga...@gmail.com> wrote:
> >
> > The ASC does not seem to have a public key.:
> >
> > gpg --verify commons-fileupload-1.3.3-source-release.zip.asc
> > gpg: assuming signed data in 'commons-fileupload-1.3.3-
> source-release.zip'
> > gpg: Signature made 12/04/16 05:15:02 Pacific Standard Time using DSA key
> > ID 7188601C
> > *gpg: Can't check signature: No public key*
> >
> >
>
> Curious. I'll re-roll.
>
Just FYI, I re-imported http://www.apache.org/dist/commons/KEYS. Just in
case. Didn't help.
Gary
>
> > Also, the file naming should be consistent,
> > https://dist.apache.org/repos/dist/dev/commons/fileupload/source/ has
> both
> > "source-release" and "src". Not sure how you can end up with the
> > differences beyond just the file extension.
> >
> > Gary
> >
> >
> >> On Tue, Jun 6, 2017 at 11:20 AM, Rob Tompkins <ch...@apache.org>
> wrote:
> >>
> >> Hello all,
> >>
> >> This is a [VOTE] for releasing Apache Commons Fileupload 1.3.3 (from
> RC5).
> >>
> >> Tag name:
> >> commons-fileupload-1.3.3-RC5 (signature can be checked from git using
> >> 'git tag -v')
> >>
> >> Tag URL:
> >> https://git-wip-us.apache.org/repos/asf?p=commons-
> >> fileupload.git;a=commit;h=dd2238b1671644cfead0e87c24a8ac61b4039084
> >>
> >> Commit ID the tag points at:
> >> dd2238b1671644cfead0e87c24a8ac61b4039084
> >>
> >> Site:
> >> http://home.apache.org/~chtompki/commons-fileupload-1.3.3-RC5
> >>
> >> Distribution files (committed at revision 19901):
> >> https://dist.apache.org/repos/dist/dev/commons/fileupload/
> >>
> >> Distribution files hashes (SHA1):
> >> commons-fileupload-1.3.3-bin.tar.gz
> >> (SHA1: 2f4a9672168641ff726974a3b7cc68b97d1212fa)
> >> commons-fileupload-1.3.3-bin.zip
> >> (SHA1: b66e2c434ddbda90dfc9e92af4775d9777524bfa)
> >> commons-fileupload-1.3.3-src.tar.gz
> >> (SHA1: 71294a7d737a8ced04934c222ae6dfb16e4d8d73)
> >> commons-fileupload-1.3.3-src.zip
> >> (SHA1: 661172a2f62b460c4b754b7a0f04d412afabde52)
> >>
> >> These are the Maven artifacts and their hashes:
> >> commons-fileupload-1.3.3-javadoc.jar
> >> (SHA1: 92d2fc371379d64a822150ca3882157564dd3f99)
> >> commons-fileupload-1.3.3-sources.jar
> >> (SHA1: c8c7bcb851fb5af0b19e4ea845cf2fc03de6f673)
> >> commons-fileupload-1.3.3-test-sources.jar
> >> (SHA1: 5e0d8c621d38694e0f2960ab2899ee1d67f2b708)
> >> commons-fileupload-1.3.3-tests.jar
> >> (SHA1: 20510147958fc759582e6ede789ccf31d056b232)
> >> commons-fileupload-1.3.3.jar
> >> (SHA1: fd754c7518772453aea1d5ffc32cb5ce0ebc0e40)
> >> commons-fileupload-1.3.3.pom
> >> (SHA1: 97d781eafc190f4fee3abf11f9ec8076f5f7b58c)
> >>
> >> KEYS file to check signatures:
> >> http://www.apache.org/dist/commons/KEYS
> >>
> >> Maven artifacts:
> >> https://repository.apache.org/content/repositories/
> >> orgapachecommons-1249
> >>
> >> Please select one of the following options[1]:
> >> [ ] +1 Release it.
> >> [ ] +0 Go ahead; I don't care.
> >> [ ] -0 There are a few minor glitches: ...
> >> [ ] -1 No, do not release it because ...
> >>
> >> This vote will be open at least 72 hours, i.e. until
> >> 2017-06-09T19:00:00Z
> >> (this is UTC time).
> >> --------
> >>
> >> Cheers,
> >> -Rob
> >>
> >> [1] http://apache.org/foundation/voting.html
> >> ---------------------------------------------------------------------
> >> To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
> >> For additional commands, e-mail: dev-help@commons.apache.org
> >>
> >>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
> For additional commands, e-mail: dev-help@commons.apache.org
>
>