You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@dubbo.apache.org by "hufeng@apache" <hu...@apache.org> on 2021/07/04 07:56:55 UTC
[VOTE]: Release Apache dubbo-js v4.0.0
Hello Dubbo/Dubbo Js Community,
This is a call for vote to release Apache dubbo-js version v4.0.0.
The release candidates:
https://dist.apache.org/repos/dist/dev/dubbo/dubbo-js/4.0.0
Git tag for the release:
https://github.com/apache/dubbo-js/blob/v4.0.0/CHANGE.md
Hash for the release tag:
d7d415afbefc529a197052c33d73b2996c19c472
The artifacts have been signed with Key :35F44C444B811C10, which can be
found in the keys file:
https://dist.apache.org/repos/dist/dev/dubbo/KEYS
The vote will be open for at least 72 hours or until the necessary number
of
votes are reached.
Please vote accordingly:
[ ] +1 approve
[ ] +0 no opinion
[ ] -1 disapprove with the reason
Thanks,
The Apache Dubbo-js Team
Re: [VOTE]: Release Apache dubbo-js v4.0.0
Posted by 胡锋 <fe...@gmail.com>.
We’ve received 3 +1 binding votes:
+1 binding, Jun Liu
+1 binding, YunKun Huang
+1 binding, joezou
I will start to release today.
Best regards,
The Apache DubboJs Team
joezou <jo...@apache.org> 于2021年7月18日周日 上午12:54写道：
> +1 binding
>
> Checked
> [√] All uts passed.
> [√] CHANGE.md .
> [√] License headers .
> [√] Download links are fine.
>
> YunKun Huang <ht...@gmail.com> 于2021年7月17日周六 下午11:06写道：
>
> > +1
> >
> > I have checked:
> > 1.NOTICE and LICENSE file exist
> > 2.release note looks ok
> > 3.sha512 is correct
> > 4.git tag is correct
> > 5.source code can build in my PC with nodejs 10
> >
> > one small issue: I can see __MACOSX and .DS_Store in zip ,those should
> > not be included in here.
> >
> > On Fri, Jul 16, 2021 at 2:37 PM 胡锋 <fe...@gmail.com> wrote:
> > >
> > > Hi,
> > >
> > > I have updated the latest keys file and uploaded it to the svn
> > repository.
> > >
> > > Key :6C763D903EC3BDC3
> > >
> > > Jun Liu <li...@apache.org> 于2021年7月12日周一 上午10:56写道：
> > >
> > > > Hi,
> > > >
> > > > The newly added signature cannot be verified for the following
> reason:
> > > >
> > > > gpg --verify apache-dubbo-js-4.0.0-source-release.zip.asc
> > > > apache-dubbo-js-4.0.0-source-release.zip
> > > > gpg: Signature made Tue Jul 6 23:32:10 2021 CST using RSA key ID
> > 3EC3BDC3
> > > > gpg: Can't check signature: No public key
> > > >
> > > > > The artifacts have been signed with Key :35F44C444B811C10, which
> can
> > be
> > > > > found in the keys file:
> > > > >
> > > > > https://dist.apache.org/repos/dist/dev/dubbo/KEYS
> > > >
> > > > Seems like the key actually used is not the one stated in the voting
> > > > thread?
> > > >
> > > > Jun
> > > >
> > > > > On Jul 6, 2021, at 11:38 PM, 胡锋 <fe...@gmail.com> wrote:
> > > > >
> > > > > Hi,
> > > > >
> > > > > I have fixed this problem and svn uploaded the signature file
> > > > >
> > > > > hufeng
> > > > >
> > > > > Justin Mclean <ju...@classsoftware.com> 于2021年7月6日周二 下午8:42写道：
> > > > >
> > > > >> Hi,
> > > > >>
> > > > >>> There’s no signature file under this directory.
> > > > >>
> > > > >> But that curl be easily fixed and the voting continue.
> > > > >>
> > > > >> Kind Regards,
> > > > >> Justin
> > > >
> > > >
> >
>
Re: [VOTE]: Release Apache dubbo-js v4.0.0
Posted by joezou <jo...@apache.org>.
+1 binding
Checked
[√] All uts passed.
[√] CHANGE.md .
[√] License headers .
[√] Download links are fine.
YunKun Huang <ht...@gmail.com> 于2021年7月17日周六 下午11:06写道：
> +1
>
> I have checked:
> 1.NOTICE and LICENSE file exist
> 2.release note looks ok
> 3.sha512 is correct
> 4.git tag is correct
> 5.source code can build in my PC with nodejs 10
>
> one small issue: I can see __MACOSX and .DS_Store in zip ,those should
> not be included in here.
>
> On Fri, Jul 16, 2021 at 2:37 PM 胡锋 <fe...@gmail.com> wrote:
> >
> > Hi,
> >
> > I have updated the latest keys file and uploaded it to the svn
> repository.
> >
> > Key :6C763D903EC3BDC3
> >
> > Jun Liu <li...@apache.org> 于2021年7月12日周一 上午10:56写道：
> >
> > > Hi,
> > >
> > > The newly added signature cannot be verified for the following reason:
> > >
> > > gpg --verify apache-dubbo-js-4.0.0-source-release.zip.asc
> > > apache-dubbo-js-4.0.0-source-release.zip
> > > gpg: Signature made Tue Jul 6 23:32:10 2021 CST using RSA key ID
> 3EC3BDC3
> > > gpg: Can't check signature: No public key
> > >
> > > > The artifacts have been signed with Key :35F44C444B811C10, which can
> be
> > > > found in the keys file:
> > > >
> > > > https://dist.apache.org/repos/dist/dev/dubbo/KEYS
> > >
> > > Seems like the key actually used is not the one stated in the voting
> > > thread?
> > >
> > > Jun
> > >
> > > > On Jul 6, 2021, at 11:38 PM, 胡锋 <fe...@gmail.com> wrote:
> > > >
> > > > Hi,
> > > >
> > > > I have fixed this problem and svn uploaded the signature file
> > > >
> > > > hufeng
> > > >
> > > > Justin Mclean <ju...@classsoftware.com> 于2021年7月6日周二 下午8:42写道：
> > > >
> > > >> Hi,
> > > >>
> > > >>> There’s no signature file under this directory.
> > > >>
> > > >> But that curl be easily fixed and the voting continue.
> > > >>
> > > >> Kind Regards,
> > > >> Justin
> > >
> > >
>
Re: [VOTE]: Release Apache dubbo-js v4.0.0
Posted by YunKun Huang <ht...@gmail.com>.
+1
I have checked:
1.NOTICE and LICENSE file exist
2.release note looks ok
3.sha512 is correct
4.git tag is correct
5.source code can build in my PC with nodejs 10
one small issue: I can see __MACOSX and .DS_Store in zip ,those should
not be included in here.
On Fri, Jul 16, 2021 at 2:37 PM 胡锋 <fe...@gmail.com> wrote:
>
> Hi,
>
> I have updated the latest keys file and uploaded it to the svn repository.
>
> Key :6C763D903EC3BDC3
>
> Jun Liu <li...@apache.org> 于2021年7月12日周一 上午10:56写道：
>
> > Hi,
> >
> > The newly added signature cannot be verified for the following reason:
> >
> > gpg --verify apache-dubbo-js-4.0.0-source-release.zip.asc
> > apache-dubbo-js-4.0.0-source-release.zip
> > gpg: Signature made Tue Jul 6 23:32:10 2021 CST using RSA key ID 3EC3BDC3
> > gpg: Can't check signature: No public key
> >
> > > The artifacts have been signed with Key :35F44C444B811C10, which can be
> > > found in the keys file:
> > >
> > > https://dist.apache.org/repos/dist/dev/dubbo/KEYS
> >
> > Seems like the key actually used is not the one stated in the voting
> > thread?
> >
> > Jun
> >
> > > On Jul 6, 2021, at 11:38 PM, 胡锋 <fe...@gmail.com> wrote:
> > >
> > > Hi,
> > >
> > > I have fixed this problem and svn uploaded the signature file
> > >
> > > hufeng
> > >
> > > Justin Mclean <ju...@classsoftware.com> 于2021年7月6日周二 下午8:42写道：
> > >
> > >> Hi,
> > >>
> > >>> There’s no signature file under this directory.
> > >>
> > >> But that curl be easily fixed and the voting continue.
> > >>
> > >> Kind Regards,
> > >> Justin
> >
> >
Re: [VOTE]: Release Apache dubbo-js v4.0.0
Posted by Jun Liu <ke...@gmail.com>.
I change my vote to +1 binding
I have checked the latest files, key and the following:
* Signature and hash are good
* Release note looks fine
* Release hash matches with tag
* LICENSE and NOTICE exit
* All files have LICENSE header except for several demo purpose
configuration files which seems to be fine to fix later
* Dependencies fine
On Fri, Jul 16, 2021 at 2:37 PM 胡锋 <fe...@gmail.com> wrote:
> Hi,
>
> I have updated the latest keys file and uploaded it to the svn repository.
>
> Key :6C763D903EC3BDC3
>
> Jun Liu <li...@apache.org> 于2021年7月12日周一 上午10:56写道：
>
> > Hi,
> >
> > The newly added signature cannot be verified for the following reason:
> >
> > gpg --verify apache-dubbo-js-4.0.0-source-release.zip.asc
> > apache-dubbo-js-4.0.0-source-release.zip
> > gpg: Signature made Tue Jul 6 23:32:10 2021 CST using RSA key ID
> 3EC3BDC3
> > gpg: Can't check signature: No public key
> >
> > > The artifacts have been signed with Key :35F44C444B811C10, which can be
> > > found in the keys file:
> > >
> > > https://dist.apache.org/repos/dist/dev/dubbo/KEYS
> >
> > Seems like the key actually used is not the one stated in the voting
> > thread?
> >
> > Jun
> >
> > > On Jul 6, 2021, at 11:38 PM, 胡锋 <fe...@gmail.com> wrote:
> > >
> > > Hi,
> > >
> > > I have fixed this problem and svn uploaded the signature file
> > >
> > > hufeng
> > >
> > > Justin Mclean <ju...@classsoftware.com> 于2021年7月6日周二 下午8:42写道：
> > >
> > >> Hi,
> > >>
> > >>> There’s no signature file under this directory.
> > >>
> > >> But that curl be easily fixed and the voting continue.
> > >>
> > >> Kind Regards,
> > >> Justin
> >
> >
>
Re: [VOTE]: Release Apache dubbo-js v4.0.0
Posted by 胡锋 <fe...@gmail.com>.
Hi,
I have updated the latest keys file and uploaded it to the svn repository.
Key :6C763D903EC3BDC3
Jun Liu <li...@apache.org> 于2021年7月12日周一 上午10:56写道：
> Hi,
>
> The newly added signature cannot be verified for the following reason:
>
> gpg --verify apache-dubbo-js-4.0.0-source-release.zip.asc
> apache-dubbo-js-4.0.0-source-release.zip
> gpg: Signature made Tue Jul 6 23:32:10 2021 CST using RSA key ID 3EC3BDC3
> gpg: Can't check signature: No public key
>
> > The artifacts have been signed with Key :35F44C444B811C10, which can be
> > found in the keys file:
> >
> > https://dist.apache.org/repos/dist/dev/dubbo/KEYS
>
> Seems like the key actually used is not the one stated in the voting
> thread?
>
> Jun
>
> > On Jul 6, 2021, at 11:38 PM, 胡锋 <fe...@gmail.com> wrote:
> >
> > Hi,
> >
> > I have fixed this problem and svn uploaded the signature file
> >
> > hufeng
> >
> > Justin Mclean <ju...@classsoftware.com> 于2021年7月6日周二 下午8:42写道：
> >
> >> Hi,
> >>
> >>> There’s no signature file under this directory.
> >>
> >> But that curl be easily fixed and the voting continue.
> >>
> >> Kind Regards,
> >> Justin
>
>
Re: [VOTE]: Release Apache dubbo-js v4.0.0
Posted by Jun Liu <li...@apache.org>.
Hi,
The newly added signature cannot be verified for the following reason:
gpg --verify apache-dubbo-js-4.0.0-source-release.zip.asc apache-dubbo-js-4.0.0-source-release.zip
gpg: Signature made Tue Jul 6 23:32:10 2021 CST using RSA key ID 3EC3BDC3
gpg: Can't check signature: No public key
> The artifacts have been signed with Key :35F44C444B811C10, which can be
> found in the keys file:
>
> https://dist.apache.org/repos/dist/dev/dubbo/KEYS
Seems like the key actually used is not the one stated in the voting thread?
Jun
> On Jul 6, 2021, at 11:38 PM, 胡锋 <fe...@gmail.com> wrote:
>
> Hi,
>
> I have fixed this problem and svn uploaded the signature file
>
> hufeng
>
> Justin Mclean <ju...@classsoftware.com> 于2021年7月6日周二 下午8:42写道：
>
>> Hi,
>>
>>> There’s no signature file under this directory.
>>
>> But that curl be easily fixed and the voting continue.
>>
>> Kind Regards,
>> Justin
Re: [VOTE]: Release Apache dubbo-js v4.0.0
Posted by 胡锋 <fe...@gmail.com>.
Hi,
I have fixed this problem and svn uploaded the signature file
hufeng
Justin Mclean <ju...@classsoftware.com> 于2021年7月6日周二 下午8:42写道：
> Hi,
>
> > There’s no signature file under this directory.
>
> But that curl be easily fixed and the voting continue.
>
> Kind Regards,
> Justin
Re: [VOTE]: Release Apache dubbo-js v4.0.0
Posted by Justin Mclean <ju...@classsoftware.com>.
Hi,
> There’s no signature file under this directory.
But that curl be easily fixed and the voting continue.
Kind Regards,
Justin
Re: [VOTE]: Release Apache dubbo-js v4.0.0
Posted by Jun Liu <li...@apache.org>.
-1 binding
> The release candidates:
> https://dist.apache.org/repos/dist/dev/dubbo/dubbo-js/4.0.0
There’s no signature file under this directory.
Jun
> On Jul 4, 2021, at 3:56 PM, hufeng@apache <hu...@apache.org> wrote:
>
> Hello Dubbo/Dubbo Js Community,
>
> This is a call for vote to release Apache dubbo-js version v4.0.0.
>
> The release candidates:
> https://dist.apache.org/repos/dist/dev/dubbo/dubbo-js/4.0.0
>
> Git tag for the release:
> https://github.com/apache/dubbo-js/blob/v4.0.0/CHANGE.md
>
> Hash for the release tag:
> d7d415afbefc529a197052c33d73b2996c19c472
>
> The artifacts have been signed with Key :35F44C444B811C10, which can be
> found in the keys file:
>
> https://dist.apache.org/repos/dist/dev/dubbo/KEYS
>
> The vote will be open for at least 72 hours or until the necessary number
> of
> votes are reached.
>
>
> Please vote accordingly:
>
> [ ] +1 approve
>
> [ ] +0 no opinion
>
> [ ] -1 disapprove with the reason
>
>
> Thanks,
>
> The Apache Dubbo-js Team