You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@jena.apache.org by Andy Seaborne <an...@apache.org> on 2019/09/24 19:12:59 UTC
[CANCELLED] [VOTE] Apache Jena 3.13.0 RC 1
Due to missing files in the source-release.
Andy
On 24/09/2019 13:51, Andy Seaborne wrote:
> Hi,
>
> Here is a vote on a release of Apache Jena 3.13.0.
> This is the first proposed release candidate.
>
> There was a last minute upgrade of Jackson jars (core and databind) to
> 2.9.10 due to an alert from the GitHub security scan.
>
> The deadline for the vote is Friday, 27th Sept, 2019 at 20:00 UTC
>
> ==== Release changes:
>
> == Major items
>
> JENA-1733: A SHACL engine
> JENA-1693: Add Aggregate Function MEDIAN and MODE (from Marco)
> JENA-1731: Fuseki endpoint configuration
> JENA-1695: DB storage refactoring
> JENA-1718: Remove jena-spatial from the build
> JENA-1760: Retire jena-maven-tools
>
> == JIRA
>
> Other JIRA:
> https://s.apache.org/jena-3.13.0-jira
>
> == Updates
>
> FasterXML jackson:: 2.9.9 -> 2.9.10
>
> jsonld-java :: 0.12.3 -> 0.12.5
>
> JENA-1754: Apache Commons Compress :: 1.18 -> 1.19 (Brad Hards)
>
> JENA-1756: Dependency updates.
> micrometer :: 1.1.3->1.2.1
> Apache Commons Lang3 :: 3.4->3.9
> Apache Commons CSV :: 1.5 -> 1.7
> Apache HttpClient :: 4.5.5 -> 4.5.10
> Apache Commons Collections4 :: 4.1 -> 4.4
>
> ==== Release Vote
>
> Everyone, not just committers, is invited to test and vote.
> Please download and test the proposed release.
>
> Staging repository:
> https://repository.apache.org/content/repositories/orgapachejena-1032
>
> Proposed dist/ area:
> https://dist.apache.org/repos/dist/dev/jena/
>
> Keys:
> https://svn.apache.org/repos/asf/jena/dist/KEYS
>
> Git commit (browser URL):
> https://github.com/apache/jena/commit/756447a1
>
> Git Commit Hash:
> 756447a17ee2b150503db6e2b342a276a2865b18
>
> Git Commit Tag:
> jena-3.13.0
>
> Please vote to approve this release:
>
> [ ] +1 Approve the release
> [ ] 0 Don't care
> [ ] -1 Don't release, because ...
>
> This vote will be open until at least
>
> Friday, 27th Sept, 2019 at 20:00 UTC
>
> If you expect to check the release but the time limit does not work
> for you, please email within the schedule above with an expected time
> and we can extend the vote period.
>
> Thanks,
>
> Andy
>
> Checking needed:
>
> + are the GPG signatures fine?
> + are the checksums correct?
> + is there a source archive?
>
> + can the source archive really be built?
> (NB This requires a "mvn install" first time)
> + is there a correct LICENSE and NOTICE file in each artifact
> (both source and binary artifacts)?
> + does the NOTICE file contain all necessary attributions?
> + have any licenses of dependencies changed due to upgrades?
> if so have LICENSE and NOTICE been upgraded appropriately?
> + does the tag/commit in the SCM contain reproducible sources?
Re: [CANCELLED] [VOTE] Apache Jena 3.13.0 RC 1
Posted by Andy Seaborne <an...@apache.org>.
It turns out that any file or directory outside the maven structure with
a name containing the substring "target" is not packed by the
source-release goal.
"oh"
Moved under src/test/resources (but for URI resolution reasons, still
read as files)
Andy
On 24/09/2019 20:50, Aaron Coburn wrote:
> I can also confirm this: the build succeeds from the git tag but not from
> the source artifact (due to the missing file in the SHACL module)
>
> Aaron
>
> On Tue, 24 Sep 2019 at 15:13, Andy Seaborne <an...@apache.org> wrote:
>
>> Due to missing files in the source-release.
>>
>> Andy
>>
>> On 24/09/2019 13:51, Andy Seaborne wrote:
>>> Hi,
>>>
>>> Here is a vote on a release of Apache Jena 3.13.0.
>>> This is the first proposed release candidate.
>>>
>>> There was a last minute upgrade of Jackson jars (core and databind) to
>>> 2.9.10 due to an alert from the GitHub security scan.
>>>
>>> The deadline for the vote is Friday, 27th Sept, 2019 at 20:00 UTC
>>>
>>> ==== Release changes:
>>>
>>> == Major items
>>>
>>> JENA-1733: A SHACL engine
>>> JENA-1693: Add Aggregate Function MEDIAN and MODE (from Marco)
>>> JENA-1731: Fuseki endpoint configuration
>>> JENA-1695: DB storage refactoring
>>> JENA-1718: Remove jena-spatial from the build
>>> JENA-1760: Retire jena-maven-tools
>>>
>>> == JIRA
>>>
>>> Other JIRA:
>>> https://s.apache.org/jena-3.13.0-jira
>>>
>>> == Updates
>>>
>>> FasterXML jackson:: 2.9.9 -> 2.9.10
>>>
>>> jsonld-java :: 0.12.3 -> 0.12.5
>>>
>>> JENA-1754: Apache Commons Compress :: 1.18 -> 1.19 (Brad Hards)
>>>
>>> JENA-1756: Dependency updates.
>>> micrometer :: 1.1.3->1.2.1
>>> Apache Commons Lang3 :: 3.4->3.9
>>> Apache Commons CSV :: 1.5 -> 1.7
>>> Apache HttpClient :: 4.5.5 -> 4.5.10
>>> Apache Commons Collections4 :: 4.1 -> 4.4
>>>
>>> ==== Release Vote
>>>
>>> Everyone, not just committers, is invited to test and vote.
>>> Please download and test the proposed release.
>>>
>>> Staging repository:
>>> https://repository.apache.org/content/repositories/orgapachejena-1032
>>>
>>> Proposed dist/ area:
>>> https://dist.apache.org/repos/dist/dev/jena/
>>>
>>> Keys:
>>> https://svn.apache.org/repos/asf/jena/dist/KEYS
>>>
>>> Git commit (browser URL):
>>> https://github.com/apache/jena/commit/756447a1
>>>
>>> Git Commit Hash:
>>> 756447a17ee2b150503db6e2b342a276a2865b18
>>>
>>> Git Commit Tag:
>>> jena-3.13.0
>>>
>>> Please vote to approve this release:
>>>
>>> [ ] +1 Approve the release
>>> [ ] 0 Don't care
>>> [ ] -1 Don't release, because ...
>>>
>>> This vote will be open until at least
>>>
>>> Friday, 27th Sept, 2019 at 20:00 UTC
>>>
>>> If you expect to check the release but the time limit does not work
>>> for you, please email within the schedule above with an expected time
>>> and we can extend the vote period.
>>>
>>> Thanks,
>>>
>>> Andy
>>>
>>> Checking needed:
>>>
>>> + are the GPG signatures fine?
>>> + are the checksums correct?
>>> + is there a source archive?
>>>
>>> + can the source archive really be built?
>>> (NB This requires a "mvn install" first time)
>>> + is there a correct LICENSE and NOTICE file in each artifact
>>> (both source and binary artifacts)?
>>> + does the NOTICE file contain all necessary attributions?
>>> + have any licenses of dependencies changed due to upgrades?
>>> if so have LICENSE and NOTICE been upgraded appropriately?
>>> + does the tag/commit in the SCM contain reproducible sources?
>>
>
Re: [CANCELLED] [VOTE] Apache Jena 3.13.0 RC 1
Posted by Aaron Coburn <ac...@apache.org>.
I can also confirm this: the build succeeds from the git tag but not from
the source artifact (due to the missing file in the SHACL module)
Aaron
On Tue, 24 Sep 2019 at 15:13, Andy Seaborne <an...@apache.org> wrote:
> Due to missing files in the source-release.
>
> Andy
>
> On 24/09/2019 13:51, Andy Seaborne wrote:
> > Hi,
> >
> > Here is a vote on a release of Apache Jena 3.13.0.
> > This is the first proposed release candidate.
> >
> > There was a last minute upgrade of Jackson jars (core and databind) to
> > 2.9.10 due to an alert from the GitHub security scan.
> >
> > The deadline for the vote is Friday, 27th Sept, 2019 at 20:00 UTC
> >
> > ==== Release changes:
> >
> > == Major items
> >
> > JENA-1733: A SHACL engine
> > JENA-1693: Add Aggregate Function MEDIAN and MODE (from Marco)
> > JENA-1731: Fuseki endpoint configuration
> > JENA-1695: DB storage refactoring
> > JENA-1718: Remove jena-spatial from the build
> > JENA-1760: Retire jena-maven-tools
> >
> > == JIRA
> >
> > Other JIRA:
> > https://s.apache.org/jena-3.13.0-jira
> >
> > == Updates
> >
> > FasterXML jackson:: 2.9.9 -> 2.9.10
> >
> > jsonld-java :: 0.12.3 -> 0.12.5
> >
> > JENA-1754: Apache Commons Compress :: 1.18 -> 1.19 (Brad Hards)
> >
> > JENA-1756: Dependency updates.
> > micrometer :: 1.1.3->1.2.1
> > Apache Commons Lang3 :: 3.4->3.9
> > Apache Commons CSV :: 1.5 -> 1.7
> > Apache HttpClient :: 4.5.5 -> 4.5.10
> > Apache Commons Collections4 :: 4.1 -> 4.4
> >
> > ==== Release Vote
> >
> > Everyone, not just committers, is invited to test and vote.
> > Please download and test the proposed release.
> >
> > Staging repository:
> > https://repository.apache.org/content/repositories/orgapachejena-1032
> >
> > Proposed dist/ area:
> > https://dist.apache.org/repos/dist/dev/jena/
> >
> > Keys:
> > https://svn.apache.org/repos/asf/jena/dist/KEYS
> >
> > Git commit (browser URL):
> > https://github.com/apache/jena/commit/756447a1
> >
> > Git Commit Hash:
> > 756447a17ee2b150503db6e2b342a276a2865b18
> >
> > Git Commit Tag:
> > jena-3.13.0
> >
> > Please vote to approve this release:
> >
> > [ ] +1 Approve the release
> > [ ] 0 Don't care
> > [ ] -1 Don't release, because ...
> >
> > This vote will be open until at least
> >
> > Friday, 27th Sept, 2019 at 20:00 UTC
> >
> > If you expect to check the release but the time limit does not work
> > for you, please email within the schedule above with an expected time
> > and we can extend the vote period.
> >
> > Thanks,
> >
> > Andy
> >
> > Checking needed:
> >
> > + are the GPG signatures fine?
> > + are the checksums correct?
> > + is there a source archive?
> >
> > + can the source archive really be built?
> > (NB This requires a "mvn install" first time)
> > + is there a correct LICENSE and NOTICE file in each artifact
> > (both source and binary artifacts)?
> > + does the NOTICE file contain all necessary attributions?
> > + have any licenses of dependencies changed due to upgrades?
> > if so have LICENSE and NOTICE been upgraded appropriately?
> > + does the tag/commit in the SCM contain reproducible sources?
>