You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@opendal.apache.org by "tisonkun (via GitHub)" <gi...@apache.org> on 2026/09/29 21:48:32 UTC

[PR] chore: align project metadata with Apache Reqsign [reqsign]

tisonkun opened a new pull request, #889:
URL: https://github.com/apache/reqsign/pull/889

   Reqsign is now an independent Apache top-level project, but project branding, notification routing, security contacts, and release instructions still identify it as OpenDAL Reqsign. Update these references following the [migration announcement](https://github.com/apache/reqsign/discussions/821#discussioncomment-18574696) and the [ASF committee registry](https://whimsy.apache.org/public/committee-info.json).
   
   - Use Apache Reqsign in the READMEs, shared NOTICE, repository description, maintainer guidance, security documents, and generated crate reservations. Correct the obsolete subproject description while preserving OpenDAL integration boundaries.
   - Route GitHub notifications and Discussion thread lookup to `dev@reqsign.apache.org`, add subscription/archive links, and send vulnerability reports to `private@reqsign.apache.org`. All public notifications share the confirmed development list; a separate `commits@reqsign.apache.org` list has not been verified.
   - Update release names, community/PMC references, dist paths, and KEYS URLs to Reqsign. Require dist and KEYS provisioning before the first independent release and retain a link to historical OpenDAL releases.
   - Accept the exact historical placeholder description during bootstrap audits so previously published reservations can still resume without republishing. New reservations use the current name; unrelated descriptions remain rejected.
   
   The new website and Reqsign dist roots returned HTTP 404 during verification. Keep the working docs.rs homepage and document the dist/KEYS prerequisite under [INFRA-28423](https://issues.apache.org/jira/browse/INFRA-28423). Existing cloud test resource identifiers and immutable published repository metadata remain valid and are preserved.
   
   Validation:
   
   - Release helper unit tests: 34 passed, including historical-placeholder recovery and rejection of an unrelated reservation.
   - `cargo fmt --all -- --check`, `hawkeye check`, and `git diff --check` passed.
   - `cargo metadata --no-deps` verified the canonical repository URL and updated shared NOTICE for all 15 workspace crates.
   - Parsed the ASF and Discussion workflow YAML, verified matching mailing-list targets, and checked the embedded JavaScript syntax with Node.
   
   No Rust implementation changes; live notification delivery and dist provisioning are not exercised by local checks.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@opendal.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [PR] chore: align project metadata with Apache Reqsign [reqsign]

Posted by "tisonkun (via GitHub)" <gi...@apache.org>.
tisonkun commented on code in PR #889:
URL: https://github.com/apache/reqsign/pull/889#discussion_r4138703876


##########
.github/scripts/release_rust/test_bootstrap.py:
##########
@@ -418,25 +418,48 @@ def publish(project_dir, package, token):
 
     def test_partial_placeholder_resumes_without_republishing(self):
         planned = PlannedCrate("reqsign-new", "services/new")
-        client = FakeClient(
-            planned.name,
-            metadata(planned.name, version=PLACEHOLDER_VERSION),
-        )
+        for description in (
+            PLACEHOLDER_DESCRIPTION,
+            "Namespace reservation for a crate planned by Apache OpenDAL reqsign.",

Review Comment:
   Why not reuse `LEGACY_PLACEHOLDER_DESCRIPTION`?



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@opendal.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [PR] chore: align project metadata with Apache Reqsign [reqsign]

Posted by "tisonkun (via GitHub)" <gi...@apache.org>.
tisonkun commented on code in PR #889:
URL: https://github.com/apache/reqsign/pull/889#discussion_r4138721784


##########
.asf.yaml:
##########
@@ -87,7 +87,7 @@ github:
       restrict_deletion: true
       restrict_force_push: true
 notifications:
-  commits: commits@opendal.apache.org
-  issues: commits@opendal.apache.org
-  pullrequests: commits@opendal.apache.org
-  discussions: dev@opendal.apache.org
+  commits: dev@reqsign.apache.org
+  issues: dev@reqsign.apache.org
+  pullrequests: dev@reqsign.apache.org

Review Comment:
   ```suggestion
     commits: commits@reqsign.apache.org
     issues: commits@reqsign.apache.org
     pullrequests: commits@reqsign.apache.org
   ```



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@opendal.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [PR] chore: align project metadata with Apache Reqsign [reqsign]

Posted by "tisonkun (via GitHub)" <gi...@apache.org>.
tisonkun merged PR #889:
URL: https://github.com/apache/reqsign/pull/889


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@opendal.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [PR] chore: align project metadata with Apache Reqsign [reqsign]

Posted by "tisonkun (via GitHub)" <gi...@apache.org>.
tisonkun commented on code in PR #889:
URL: https://github.com/apache/reqsign/pull/889#discussion_r4138727775


##########
THREAT_MODEL.md:
##########
@@ -587,8 +587,8 @@ We will revisit this threat model when any of the following changes:
 
 ## 10. Relationship To OpenDAL And Other Hosts
 
-Reqsign is a sub-project related to Apache OpenDAL, and OpenDAL is the primary
-integration this model expects maintainers to consider. Reqsign is still a
+Apache Reqsign is an independent Apache top-level project. OpenDAL remains the

Review Comment:
   ```suggestion
   Apache Reqsign is a top-level ASF project. OpenDAL remains the
   ```



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@opendal.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org