[VOTE] Apache Commons VFS 2.1 rc2

classic Classic list List threaded Threaded
15 messages Options
Reply | Threaded
Open this post in threaded view
|

[VOTE] Apache Commons VFS 2.1 rc2

Josh Elser
All,

Please consider the following for Apache Commons VFS2 version 2.1 (rc2).

Maven repository:
https://repository.apache.org/content/repositories/orgapachecommons-1166
Artifacts: https://dist.apache.org/repos/dist/dev/commons/vfs/ r13608

MD5  commons-vfs-distribution-2.1-bin.tar.gz
8cc35a3169e1faee727c5af94c7dd904
SHA1 commons-vfs-distribution-2.1-bin.tar.gz
72b7557c4e8b1789b8aa0a9c1e0cb2c9daecec30
MD5  commons-vfs-distribution-2.1-src.tar.gz
a182ac642874e85fbc7d1086f7663482
SHA1 commons-vfs-distribution-2.1-src.tar.gz
e42ac2053deb314277213e43f6f1d6b43eff3de9

MD5  commons-vfs-distribution-2.1-bin.zip b512a45c63d824eef826f174fd7a9245
SHA1 commons-vfs-distribution-2.1-bin.zip
886cb5a430da58b3a68e2abf297b6f735d3ffaf0
MD5  commons-vfs-distribution-2.1-src.zip 29645a0ad091c15b2cf76b619c33069f
SHA1 commons-vfs-distribution-2.1-src.zip
5824cf4d802865b5e93ff62c90affa58df6c4384

Signed with 4677D66C from
https://dist.apache.org/repos/dist/release/commons/KEYS

SVN tag is available at
https://svn.apache.org/repos/asf/commons/proper/vfs/tags/commons-vfs2-project-2.1-rc2/ 
r1743451

Staged Maven website:
http://home.apache.org/~elserj/commons/commons-vfs-2.1/

All reports are available in the provided staged Maven site (see "Project
Reports" at the root-level as well as under each sub-module). JIRA-generated
release notes are available in the dist.a.o "Artifacts" repository. Unit
tests pass and the RC was built util JDK6.

(For Sebb) A direct Clirr link
http://home.apache.org/~elserj/commons/commons-vfs-2.1/commons-vfs2/clirr-report.html

Changes since rc1:

* Fixed more compatibility concerns against 2.0 (thanks, Greg)
* Improved release notes (thanks, Sebb)

This vote will be open for 72-hours, 2016/05/14 0400 UTC.

   [ ] +1 Release these artifacts as version 2.1
   [ ] 0  OK, but...
   [ ] -1 I oppose these artifacts as version 2.1 because..

- Josh

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Re: [VOTE] Apache Commons VFS 2.1 rc2

garydgregory
Thank you for rolling this out. I'll go through the RC tonight.

Gary

On Wed, May 11, 2016 at 8:29 PM, Josh Elser <[hidden email]> wrote:

> All,
>
> Please consider the following for Apache Commons VFS2 version 2.1 (rc2).
>
> Maven repository:
> https://repository.apache.org/content/repositories/orgapachecommons-1166
> Artifacts: https://dist.apache.org/repos/dist/dev/commons/vfs/ r13608
>
> MD5  commons-vfs-distribution-2.1-bin.tar.gz
> 8cc35a3169e1faee727c5af94c7dd904
> SHA1 commons-vfs-distribution-2.1-bin.tar.gz
> 72b7557c4e8b1789b8aa0a9c1e0cb2c9daecec30
> MD5  commons-vfs-distribution-2.1-src.tar.gz
> a182ac642874e85fbc7d1086f7663482
> SHA1 commons-vfs-distribution-2.1-src.tar.gz
> e42ac2053deb314277213e43f6f1d6b43eff3de9
>
> MD5  commons-vfs-distribution-2.1-bin.zip b512a45c63d824eef826f174fd7a9245
> SHA1 commons-vfs-distribution-2.1-bin.zip
> 886cb5a430da58b3a68e2abf297b6f735d3ffaf0
> MD5  commons-vfs-distribution-2.1-src.zip 29645a0ad091c15b2cf76b619c33069f
> SHA1 commons-vfs-distribution-2.1-src.zip
> 5824cf4d802865b5e93ff62c90affa58df6c4384
>
> Signed with 4677D66C from
> https://dist.apache.org/repos/dist/release/commons/KEYS
>
> SVN tag is available at
>
> https://svn.apache.org/repos/asf/commons/proper/vfs/tags/commons-vfs2-project-2.1-rc2/
> r1743451
>
> Staged Maven website:
> http://home.apache.org/~elserj/commons/commons-vfs-2.1/
>
> All reports are available in the provided staged Maven site (see "Project
> Reports" at the root-level as well as under each sub-module).
> JIRA-generated
> release notes are available in the dist.a.o "Artifacts" repository. Unit
> tests pass and the RC was built util JDK6.
>
> (For Sebb) A direct Clirr link
>
> http://home.apache.org/~elserj/commons/commons-vfs-2.1/commons-vfs2/clirr-report.html
>
> Changes since rc1:
>
> * Fixed more compatibility concerns against 2.0 (thanks, Greg)
> * Improved release notes (thanks, Sebb)
>
> This vote will be open for 72-hours, 2016/05/14 0400 UTC.
>
>   [ ] +1 Release these artifacts as version 2.1
>   [ ] 0  OK, but...
>   [ ] -1 I oppose these artifacts as version 2.1 because..
>
> - Josh
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [hidden email]
> For additional commands, e-mail: [hidden email]
>
>


--
E-Mail: [hidden email] | [hidden email]
Java Persistence with Hibernate, Second Edition
<http://www.manning.com/bauer3/>
JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
Spring Batch in Action <http://www.manning.com/templier/>
Blog: http://garygregory.wordpress.com
Home: http://garygregory.com/
Tweet! http://twitter.com/GaryGregory
Reply | Threaded
Open this post in threaded view
|

Re: [VOTE] Apache Commons VFS 2.1 rc2

Sean Busbey
In reply to this post by Josh Elser
-1 (non-binding)

bad:

* LICENSE/NOTICE file is missing a bundled third party reference[1]

maybe fine:

* source artifacts mostly match source tag[2]
* build / test from source works[3]

fine:
* verified signatures and checksums[4]

[1]:

core/src/test/java/org/apache/commons/vfs2/provider/webdav/test/JcrUtils.java

says it is copied from Apache Jackrabbit 2.4.0, which has a NOTICE.txt file.

there is no mention of this in the source repo NOTICE (I would presume the
related test jar would also be wrong).

[2]:

The source tag contains an additional module 'sandbox' that is not in the source artifact.

I am not sure if this is intentional, but it looks like it is.

[3]:

Related to [2], if you run `mvn verify` things are fine, but if you use the sandbox profile,
via `mvn -Pinclude-sandbox verify`, things fall over because the above mentioned module
is missing.

[4]:

everything properly checks out, but the format of the md5 file was different for the artifacts in
dist.apache compared to repository.apache.

On 2016-05-11 20:29, Josh Elser <[hidden email]> wrote:

> All,
>
> Please consider the following for Apache Commons VFS2 version 2.1 (rc2).
>
> Maven repository:
> https://repository.apache.org/content/repositories/orgapachecommons-1166
> Artifacts: https://dist.apache.org/repos/dist/dev/commons/vfs/ r13608
>
> MD5  commons-vfs-distribution-2.1-bin.tar.gz
> 8cc35a3169e1faee727c5af94c7dd904
> SHA1 commons-vfs-distribution-2.1-bin.tar.gz
> 72b7557c4e8b1789b8aa0a9c1e0cb2c9daecec30
> MD5  commons-vfs-distribution-2.1-src.tar.gz
> a182ac642874e85fbc7d1086f7663482
> SHA1 commons-vfs-distribution-2.1-src.tar.gz
> e42ac2053deb314277213e43f6f1d6b43eff3de9
>
> MD5  commons-vfs-distribution-2.1-bin.zip b512a45c63d824eef826f174fd7a9245
> SHA1 commons-vfs-distribution-2.1-bin.zip
> 886cb5a430da58b3a68e2abf297b6f735d3ffaf0
> MD5  commons-vfs-distribution-2.1-src.zip 29645a0ad091c15b2cf76b619c33069f
> SHA1 commons-vfs-distribution-2.1-src.zip
> 5824cf4d802865b5e93ff62c90affa58df6c4384
>
> Signed with 4677D66C from
> https://dist.apache.org/repos/dist/release/commons/KEYS
>
> SVN tag is available at
> https://svn.apache.org/repos/asf/commons/proper/vfs/tags/commons-vfs2-project-2.1-rc2/ 
> r1743451
>
> Staged Maven website:
> http://home.apache.org/~elserj/commons/commons-vfs-2.1/
>
> All reports are available in the provided staged Maven site (see "Project
> Reports" at the root-level as well as under each sub-module). JIRA-generated
> release notes are available in the dist.a.o "Artifacts" repository. Unit
> tests pass and the RC was built util JDK6.
>
> (For Sebb) A direct Clirr link
> http://home.apache.org/~elserj/commons/commons-vfs-2.1/commons-vfs2/clirr-report.html
>
> Changes since rc1:
>
> * Fixed more compatibility concerns against 2.0 (thanks, Greg)
> * Improved release notes (thanks, Sebb)
>
> This vote will be open for 72-hours, 2016/05/14 0400 UTC.
>
>    [ ] +1 Release these artifacts as version 2.1
>    [ ] 0  OK, but...
>    [ ] -1 I oppose these artifacts as version 2.1 because..
>
> - Josh
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [hidden email]
> For additional commands, e-mail: [hidden email]
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Re: [VOTE] Apache Commons VFS 2.1 rc2

Josh Elser
Hey Sean,

#1 sounds like you're right here. I hadn't done a close enough over the
codebase. I will defer to PMC members with more history than the few
weeks I have...

#2/3 about the sandbox is intentional. There is code in the sandbox
which is not "fit to be released" (see so previous conversation on this,
around rc0 iirc).

#4 I had to manually create the xsums, the release process doesn't do it
(and I didn't have any interest in making this work automated). That's
why the format is different (obviously the hashes should still be equal).

Sean Busbey wrote:

> -1 (non-binding)
>
> bad:
>
> * LICENSE/NOTICE file is missing a bundled third party reference[1]
>
> maybe fine:
>
> * source artifacts mostly match source tag[2]
> * build / test from source works[3]
>
> fine:
> * verified signatures and checksums[4]
>
> [1]:
>
> core/src/test/java/org/apache/commons/vfs2/provider/webdav/test/JcrUtils.java
>
> says it is copied from Apache Jackrabbit 2.4.0, which has a NOTICE.txt file.
>
> there is no mention of this in the source repo NOTICE (I would presume the
> related test jar would also be wrong).
>
> [2]:
>
> The source tag contains an additional module 'sandbox' that is not in the source artifact.
>
> I am not sure if this is intentional, but it looks like it is.
>
> [3]:
>
> Related to [2], if you run `mvn verify` things are fine, but if you use the sandbox profile,
> via `mvn -Pinclude-sandbox verify`, things fall over because the above mentioned module
> is missing.
>
> [4]:
>
> everything properly checks out, but the format of the md5 file was different for the artifacts in
> dist.apache compared to repository.apache.
>
> On 2016-05-11 20:29, Josh Elser<[hidden email]>  wrote:
>> All,
>>
>> Please consider the following for Apache Commons VFS2 version 2.1 (rc2).
>>
>> Maven repository:
>> https://repository.apache.org/content/repositories/orgapachecommons-1166
>> Artifacts: https://dist.apache.org/repos/dist/dev/commons/vfs/ r13608
>>
>> MD5  commons-vfs-distribution-2.1-bin.tar.gz
>> 8cc35a3169e1faee727c5af94c7dd904
>> SHA1 commons-vfs-distribution-2.1-bin.tar.gz
>> 72b7557c4e8b1789b8aa0a9c1e0cb2c9daecec30
>> MD5  commons-vfs-distribution-2.1-src.tar.gz
>> a182ac642874e85fbc7d1086f7663482
>> SHA1 commons-vfs-distribution-2.1-src.tar.gz
>> e42ac2053deb314277213e43f6f1d6b43eff3de9
>>
>> MD5  commons-vfs-distribution-2.1-bin.zip b512a45c63d824eef826f174fd7a9245
>> SHA1 commons-vfs-distribution-2.1-bin.zip
>> 886cb5a430da58b3a68e2abf297b6f735d3ffaf0
>> MD5  commons-vfs-distribution-2.1-src.zip 29645a0ad091c15b2cf76b619c33069f
>> SHA1 commons-vfs-distribution-2.1-src.zip
>> 5824cf4d802865b5e93ff62c90affa58df6c4384
>>
>> Signed with 4677D66C from
>> https://dist.apache.org/repos/dist/release/commons/KEYS
>>
>> SVN tag is available at
>> https://svn.apache.org/repos/asf/commons/proper/vfs/tags/commons-vfs2-project-2.1-rc2/
>> r1743451
>>
>> Staged Maven website:
>> http://home.apache.org/~elserj/commons/commons-vfs-2.1/
>>
>> All reports are available in the provided staged Maven site (see "Project
>> Reports" at the root-level as well as under each sub-module). JIRA-generated
>> release notes are available in the dist.a.o "Artifacts" repository. Unit
>> tests pass and the RC was built util JDK6.
>>
>> (For Sebb) A direct Clirr link
>> http://home.apache.org/~elserj/commons/commons-vfs-2.1/commons-vfs2/clirr-report.html
>>
>> Changes since rc1:
>>
>> * Fixed more compatibility concerns against 2.0 (thanks, Greg)
>> * Improved release notes (thanks, Sebb)
>>
>> This vote will be open for 72-hours, 2016/05/14 0400 UTC.
>>
>>     [ ] +1 Release these artifacts as version 2.1
>>     [ ] 0  OK, but...
>>     [ ] -1 I oppose these artifacts as version 2.1 because..
>>
>> - Josh
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: [hidden email]
>> For additional commands, e-mail: [hidden email]
>>
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [hidden email]
> For additional commands, e-mail: [hidden email]
>

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Re: [VOTE] Apache Commons VFS 2.1 rc2

garydgregory
In reply to this post by Sean Busbey
Wow, good catch on #1. I had not seen it. Aside from that, it looks good
(MD5, SHA1, ASC, reports, build). So another RC and we should be good to go.

Gary

On Thu, May 12, 2016 at 5:24 PM, Sean Busbey <[hidden email]> wrote:

> -1 (non-binding)
>
> bad:
>
> * LICENSE/NOTICE file is missing a bundled third party reference[1]
>
> maybe fine:
>
> * source artifacts mostly match source tag[2]
> * build / test from source works[3]
>
> fine:
> * verified signatures and checksums[4]
>
> [1]:
>
>
> core/src/test/java/org/apache/commons/vfs2/provider/webdav/test/JcrUtils.java
>
> says it is copied from Apache Jackrabbit 2.4.0, which has a NOTICE.txt
> file.
>
> there is no mention of this in the source repo NOTICE (I would presume the
> related test jar would also be wrong).
>
> [2]:
>
> The source tag contains an additional module 'sandbox' that is not in the
> source artifact.
>
> I am not sure if this is intentional, but it looks like it is.
>
> [3]:
>
> Related to [2], if you run `mvn verify` things are fine, but if you use
> the sandbox profile,
> via `mvn -Pinclude-sandbox verify`, things fall over because the above
> mentioned module
> is missing.
>
> [4]:
>
> everything properly checks out, but the format of the md5 file was
> different for the artifacts in
> dist.apache compared to repository.apache.
>
> On 2016-05-11 20:29, Josh Elser <[hidden email]> wrote:
> > All,
> >
> > Please consider the following for Apache Commons VFS2 version 2.1 (rc2).
> >
> > Maven repository:
> > https://repository.apache.org/content/repositories/orgapachecommons-1166
> > Artifacts: https://dist.apache.org/repos/dist/dev/commons/vfs/ r13608
> >
> > MD5  commons-vfs-distribution-2.1-bin.tar.gz
> > 8cc35a3169e1faee727c5af94c7dd904
> > SHA1 commons-vfs-distribution-2.1-bin.tar.gz
> > 72b7557c4e8b1789b8aa0a9c1e0cb2c9daecec30
> > MD5  commons-vfs-distribution-2.1-src.tar.gz
> > a182ac642874e85fbc7d1086f7663482
> > SHA1 commons-vfs-distribution-2.1-src.tar.gz
> > e42ac2053deb314277213e43f6f1d6b43eff3de9
> >
> > MD5  commons-vfs-distribution-2.1-bin.zip
> b512a45c63d824eef826f174fd7a9245
> > SHA1 commons-vfs-distribution-2.1-bin.zip
> > 886cb5a430da58b3a68e2abf297b6f735d3ffaf0
> > MD5  commons-vfs-distribution-2.1-src.zip
> 29645a0ad091c15b2cf76b619c33069f
> > SHA1 commons-vfs-distribution-2.1-src.zip
> > 5824cf4d802865b5e93ff62c90affa58df6c4384
> >
> > Signed with 4677D66C from
> > https://dist.apache.org/repos/dist/release/commons/KEYS
> >
> > SVN tag is available at
> >
> https://svn.apache.org/repos/asf/commons/proper/vfs/tags/commons-vfs2-project-2.1-rc2/
> > r1743451
> >
> > Staged Maven website:
> > http://home.apache.org/~elserj/commons/commons-vfs-2.1/
> >
> > All reports are available in the provided staged Maven site (see "Project
> > Reports" at the root-level as well as under each sub-module).
> JIRA-generated
> > release notes are available in the dist.a.o "Artifacts" repository. Unit
> > tests pass and the RC was built util JDK6.
> >
> > (For Sebb) A direct Clirr link
> >
> http://home.apache.org/~elserj/commons/commons-vfs-2.1/commons-vfs2/clirr-report.html
> >
> > Changes since rc1:
> >
> > * Fixed more compatibility concerns against 2.0 (thanks, Greg)
> > * Improved release notes (thanks, Sebb)
> >
> > This vote will be open for 72-hours, 2016/05/14 0400 UTC.
> >
> >    [ ] +1 Release these artifacts as version 2.1
> >    [ ] 0  OK, but...
> >    [ ] -1 I oppose these artifacts as version 2.1 because..
> >
> > - Josh
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: [hidden email]
> > For additional commands, e-mail: [hidden email]
> >
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [hidden email]
> For additional commands, e-mail: [hidden email]
>
>


--
E-Mail: [hidden email] | [hidden email]
Java Persistence with Hibernate, Second Edition
<http://www.manning.com/bauer3/>
JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
Spring Batch in Action <http://www.manning.com/templier/>
Blog: http://garygregory.wordpress.com
Home: http://garygregory.com/
Tweet! http://twitter.com/GaryGregory
Reply | Threaded
Open this post in threaded view
|

Re: [VOTE] Apache Commons VFS 2.1 rc2

sebb-2-2
In reply to this post by Josh Elser
On 13 May 2016 at 03:18, Josh Elser <[hidden email]> wrote:

> Hey Sean,
>
> #1 sounds like you're right here. I hadn't done a close enough over the
> codebase. I will defer to PMC members with more history than the few weeks I
> have...
>
> #2/3 about the sandbox is intentional. There is code in the sandbox which is
> not "fit to be released" (see so previous conversation on this, around rc0
> iirc).
>
> #4 I had to manually create the xsums, the release process doesn't do it
> (and I didn't have any interest in making this work automated). That's why
> the format is different (obviously the hashes should still be equal).

The format can be fixed manually if necessary, but it looks OK to me;
it should be usable by many hash check programs.

What command(s) did you use to create the RC?

I just tried:

$ mvn deploy -Prelease -Ptest-deploy -DskipTests

and the md5 and sha1 files were created alongside the asc files under

target/deploy/org/apache/commons/commons-vfs2/2.1-SNAPSHOT

However there are only sigs under

target/

This is normal behaviour, as Maven only creates hashes as part of deployment.

Note that there are hashes on Nexus, e.g.

https://repository.apache.org/content/repositories/orgapachecommons-1166/org/apache/commons/commons-vfs2-distribution/2.1/

There is a script to download the non-Maven archives from Nexus (and
then delete them) but it does not work for multi-module builds as yet:

https://svn.apache.org/repos/asf/commons/scripts/Nexus2DistDev.sh

>
> Sean Busbey wrote:
>>
>> -1 (non-binding)
>>
>> bad:
>>
>> * LICENSE/NOTICE file is missing a bundled third party reference[1]
>>
>> maybe fine:
>>
>> * source artifacts mostly match source tag[2]
>> * build / test from source works[3]
>>
>> fine:
>> * verified signatures and checksums[4]
>>
>> [1]:
>>
>>
>> core/src/test/java/org/apache/commons/vfs2/provider/webdav/test/JcrUtils.java
>>
>> says it is copied from Apache Jackrabbit 2.4.0, which has a NOTICE.txt
>> file.
>>
>> there is no mention of this in the source repo NOTICE (I would presume the
>> related test jar would also be wrong).
>>
>> [2]:
>>
>> The source tag contains an additional module 'sandbox' that is not in the
>> source artifact.
>>
>> I am not sure if this is intentional, but it looks like it is.
>>
>> [3]:
>>
>> Related to [2], if you run `mvn verify` things are fine, but if you use
>> the sandbox profile,
>> via `mvn -Pinclude-sandbox verify`, things fall over because the above
>> mentioned module
>> is missing.
>>
>> [4]:
>>
>> everything properly checks out, but the format of the md5 file was
>> different for the artifacts in
>> dist.apache compared to repository.apache.
>>
>> On 2016-05-11 20:29, Josh Elser<[hidden email]>  wrote:
>>>
>>> All,
>>>
>>> Please consider the following for Apache Commons VFS2 version 2.1 (rc2).
>>>
>>> Maven repository:
>>> https://repository.apache.org/content/repositories/orgapachecommons-1166
>>> Artifacts: https://dist.apache.org/repos/dist/dev/commons/vfs/ r13608
>>>
>>> MD5  commons-vfs-distribution-2.1-bin.tar.gz
>>> 8cc35a3169e1faee727c5af94c7dd904
>>> SHA1 commons-vfs-distribution-2.1-bin.tar.gz
>>> 72b7557c4e8b1789b8aa0a9c1e0cb2c9daecec30
>>> MD5  commons-vfs-distribution-2.1-src.tar.gz
>>> a182ac642874e85fbc7d1086f7663482
>>> SHA1 commons-vfs-distribution-2.1-src.tar.gz
>>> e42ac2053deb314277213e43f6f1d6b43eff3de9
>>>
>>> MD5  commons-vfs-distribution-2.1-bin.zip
>>> b512a45c63d824eef826f174fd7a9245
>>> SHA1 commons-vfs-distribution-2.1-bin.zip
>>> 886cb5a430da58b3a68e2abf297b6f735d3ffaf0
>>> MD5  commons-vfs-distribution-2.1-src.zip
>>> 29645a0ad091c15b2cf76b619c33069f
>>> SHA1 commons-vfs-distribution-2.1-src.zip
>>> 5824cf4d802865b5e93ff62c90affa58df6c4384
>>>
>>> Signed with 4677D66C from
>>> https://dist.apache.org/repos/dist/release/commons/KEYS
>>>
>>> SVN tag is available at
>>>
>>> https://svn.apache.org/repos/asf/commons/proper/vfs/tags/commons-vfs2-project-2.1-rc2/
>>> r1743451
>>>
>>> Staged Maven website:
>>> http://home.apache.org/~elserj/commons/commons-vfs-2.1/
>>>
>>> All reports are available in the provided staged Maven site (see "Project
>>> Reports" at the root-level as well as under each sub-module).
>>> JIRA-generated
>>> release notes are available in the dist.a.o "Artifacts" repository. Unit
>>> tests pass and the RC was built util JDK6.
>>>
>>> (For Sebb) A direct Clirr link
>>>
>>> http://home.apache.org/~elserj/commons/commons-vfs-2.1/commons-vfs2/clirr-report.html
>>>
>>> Changes since rc1:
>>>
>>> * Fixed more compatibility concerns against 2.0 (thanks, Greg)
>>> * Improved release notes (thanks, Sebb)
>>>
>>> This vote will be open for 72-hours, 2016/05/14 0400 UTC.
>>>
>>>     [ ] +1 Release these artifacts as version 2.1
>>>     [ ] 0  OK, but...
>>>     [ ] -1 I oppose these artifacts as version 2.1 because..
>>>
>>> - Josh
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: [hidden email]
>>> For additional commands, e-mail: [hidden email]
>>>
>>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: [hidden email]
>> For additional commands, e-mail: [hidden email]
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [hidden email]
> For additional commands, e-mail: [hidden email]
>

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Re: [VOTE] Apache Commons VFS 2.1 rc2

sebb-2-2
In reply to this post by Sean Busbey
On 13 May 2016 at 01:24, Sean Busbey <[hidden email]> wrote:

> -1 (non-binding)
>
> bad:
>
> * LICENSE/NOTICE file is missing a bundled third party reference[1]
>
> maybe fine:
>
> * source artifacts mostly match source tag[2]
> * build / test from source works[3]
>
> fine:
> * verified signatures and checksums[4]
>
> [1]:
>
> core/src/test/java/org/apache/commons/vfs2/provider/webdav/test/JcrUtils.java
>
> says it is copied from Apache Jackrabbit 2.4.0, which has a NOTICE.txt file.

i.e.

http://svn.apache.org/repos/asf/jackrabbit/tags/2.4.0/NOTICE.txt

> there is no mention of this in the source repo NOTICE (I would presume the
> related test jar would also be wrong).

Whether that is needed or not depends on whether the specific file was
part of the original source code from Day.

The file was added as a part of fixing VFS-392

@Gary: can you advise which source files you used to create JcrUtils?

> [2]:
>
> The source tag contains an additional module 'sandbox' that is not in the source artifact.
>
> I am not sure if this is intentional, but it looks like it is.
>
> [3]:
>
> Related to [2], if you run `mvn verify` things are fine, but if you use the sandbox profile,
> via `mvn -Pinclude-sandbox verify`, things fall over because the above mentioned module
> is missing.
>
> [4]:
>
> everything properly checks out, but the format of the md5 file was different for the artifacts in
> dist.apache compared to repository.apache.
>
> On 2016-05-11 20:29, Josh Elser <[hidden email]> wrote:
>> All,
>>
>> Please consider the following for Apache Commons VFS2 version 2.1 (rc2).
>>
>> Maven repository:
>> https://repository.apache.org/content/repositories/orgapachecommons-1166
>> Artifacts: https://dist.apache.org/repos/dist/dev/commons/vfs/ r13608
>>
>> MD5  commons-vfs-distribution-2.1-bin.tar.gz
>> 8cc35a3169e1faee727c5af94c7dd904
>> SHA1 commons-vfs-distribution-2.1-bin.tar.gz
>> 72b7557c4e8b1789b8aa0a9c1e0cb2c9daecec30
>> MD5  commons-vfs-distribution-2.1-src.tar.gz
>> a182ac642874e85fbc7d1086f7663482
>> SHA1 commons-vfs-distribution-2.1-src.tar.gz
>> e42ac2053deb314277213e43f6f1d6b43eff3de9
>>
>> MD5  commons-vfs-distribution-2.1-bin.zip b512a45c63d824eef826f174fd7a9245
>> SHA1 commons-vfs-distribution-2.1-bin.zip
>> 886cb5a430da58b3a68e2abf297b6f735d3ffaf0
>> MD5  commons-vfs-distribution-2.1-src.zip 29645a0ad091c15b2cf76b619c33069f
>> SHA1 commons-vfs-distribution-2.1-src.zip
>> 5824cf4d802865b5e93ff62c90affa58df6c4384
>>
>> Signed with 4677D66C from
>> https://dist.apache.org/repos/dist/release/commons/KEYS
>>
>> SVN tag is available at
>> https://svn.apache.org/repos/asf/commons/proper/vfs/tags/commons-vfs2-project-2.1-rc2/
>> r1743451
>>
>> Staged Maven website:
>> http://home.apache.org/~elserj/commons/commons-vfs-2.1/
>>
>> All reports are available in the provided staged Maven site (see "Project
>> Reports" at the root-level as well as under each sub-module). JIRA-generated
>> release notes are available in the dist.a.o "Artifacts" repository. Unit
>> tests pass and the RC was built util JDK6.
>>
>> (For Sebb) A direct Clirr link
>> http://home.apache.org/~elserj/commons/commons-vfs-2.1/commons-vfs2/clirr-report.html
>>
>> Changes since rc1:
>>
>> * Fixed more compatibility concerns against 2.0 (thanks, Greg)
>> * Improved release notes (thanks, Sebb)
>>
>> This vote will be open for 72-hours, 2016/05/14 0400 UTC.
>>
>>    [ ] +1 Release these artifacts as version 2.1
>>    [ ] 0  OK, but...
>>    [ ] -1 I oppose these artifacts as version 2.1 because..
>>
>> - Josh
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: [hidden email]
>> For additional commands, e-mail: [hidden email]
>>
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [hidden email]
> For additional commands, e-mail: [hidden email]
>

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Re: [VOTE] Apache Commons VFS 2.1 rc2

garydgregory
On Fri, May 13, 2016 at 3:13 AM, sebb <[hidden email]> wrote:

> On 13 May 2016 at 01:24, Sean Busbey <[hidden email]> wrote:
> > -1 (non-binding)
> >
> > bad:
> >
> > * LICENSE/NOTICE file is missing a bundled third party reference[1]
> >
> > maybe fine:
> >
> > * source artifacts mostly match source tag[2]
> > * build / test from source works[3]
> >
> > fine:
> > * verified signatures and checksums[4]
> >
> > [1]:
> >
> >
> core/src/test/java/org/apache/commons/vfs2/provider/webdav/test/JcrUtils.java
> >
> > says it is copied from Apache Jackrabbit 2.4.0, which has a NOTICE.txt
> file.
>
> i.e.
>
> http://svn.apache.org/repos/asf/jackrabbit/tags/2.4.0/NOTICE.txt
>
> > there is no mention of this in the source repo NOTICE (I would presume
> the
> > related test jar would also be wrong).
>
> Whether that is needed or not depends on whether the specific file was
> part of the original source code from Day.
>
> The file was added as a part of fixing VFS-392
>
> @Gary: can you advise which source files you used to create JcrUtils?
>

No idea, that was a long time ago. All I can say for sure is that I was
looking at the Jackrabbit 1.6.5 or earlier sources.

Gary

>
> > [2]:
> >
> > The source tag contains an additional module 'sandbox' that is not in
> the source artifact.
> >
> > I am not sure if this is intentional, but it looks like it is.
> >
> > [3]:
> >
> > Related to [2], if you run `mvn verify` things are fine, but if you use
> the sandbox profile,
> > via `mvn -Pinclude-sandbox verify`, things fall over because the above
> mentioned module
> > is missing.
> >
> > [4]:
> >
> > everything properly checks out, but the format of the md5 file was
> different for the artifacts in
> > dist.apache compared to repository.apache.
> >
> > On 2016-05-11 20:29, Josh Elser <[hidden email]> wrote:
> >> All,
> >>
> >> Please consider the following for Apache Commons VFS2 version 2.1 (rc2).
> >>
> >> Maven repository:
> >>
> https://repository.apache.org/content/repositories/orgapachecommons-1166
> >> Artifacts: https://dist.apache.org/repos/dist/dev/commons/vfs/ r13608
> >>
> >> MD5  commons-vfs-distribution-2.1-bin.tar.gz
> >> 8cc35a3169e1faee727c5af94c7dd904
> >> SHA1 commons-vfs-distribution-2.1-bin.tar.gz
> >> 72b7557c4e8b1789b8aa0a9c1e0cb2c9daecec30
> >> MD5  commons-vfs-distribution-2.1-src.tar.gz
> >> a182ac642874e85fbc7d1086f7663482
> >> SHA1 commons-vfs-distribution-2.1-src.tar.gz
> >> e42ac2053deb314277213e43f6f1d6b43eff3de9
> >>
> >> MD5  commons-vfs-distribution-2.1-bin.zip
> b512a45c63d824eef826f174fd7a9245
> >> SHA1 commons-vfs-distribution-2.1-bin.zip
> >> 886cb5a430da58b3a68e2abf297b6f735d3ffaf0
> >> MD5  commons-vfs-distribution-2.1-src.zip
> 29645a0ad091c15b2cf76b619c33069f
> >> SHA1 commons-vfs-distribution-2.1-src.zip
> >> 5824cf4d802865b5e93ff62c90affa58df6c4384
> >>
> >> Signed with 4677D66C from
> >> https://dist.apache.org/repos/dist/release/commons/KEYS
> >>
> >> SVN tag is available at
> >>
> https://svn.apache.org/repos/asf/commons/proper/vfs/tags/commons-vfs2-project-2.1-rc2/
> >> r1743451
> >>
> >> Staged Maven website:
> >> http://home.apache.org/~elserj/commons/commons-vfs-2.1/
> >>
> >> All reports are available in the provided staged Maven site (see
> "Project
> >> Reports" at the root-level as well as under each sub-module).
> JIRA-generated
> >> release notes are available in the dist.a.o "Artifacts" repository. Unit
> >> tests pass and the RC was built util JDK6.
> >>
> >> (For Sebb) A direct Clirr link
> >>
> http://home.apache.org/~elserj/commons/commons-vfs-2.1/commons-vfs2/clirr-report.html
> >>
> >> Changes since rc1:
> >>
> >> * Fixed more compatibility concerns against 2.0 (thanks, Greg)
> >> * Improved release notes (thanks, Sebb)
> >>
> >> This vote will be open for 72-hours, 2016/05/14 0400 UTC.
> >>
> >>    [ ] +1 Release these artifacts as version 2.1
> >>    [ ] 0  OK, but...
> >>    [ ] -1 I oppose these artifacts as version 2.1 because..
> >>
> >> - Josh
> >>
> >> ---------------------------------------------------------------------
> >> To unsubscribe, e-mail: [hidden email]
> >> For additional commands, e-mail: [hidden email]
> >>
> >>
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: [hidden email]
> > For additional commands, e-mail: [hidden email]
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [hidden email]
> For additional commands, e-mail: [hidden email]
>
>


--
E-Mail: [hidden email] | [hidden email]
Java Persistence with Hibernate, Second Edition
<http://www.manning.com/bauer3/>
JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
Spring Batch in Action <http://www.manning.com/templier/>
Blog: http://garygregory.wordpress.com
Home: http://garygregory.com/
Tweet! http://twitter.com/GaryGregory
Reply | Threaded
Open this post in threaded view
|

Re: [VOTE] Apache Commons VFS 2.1 rc2

Josh Elser
In reply to this post by Sean Busbey
Sean,

Circling back around on the discussions today about Jackrabbit's NOTICE
file, this would change your -1 vote, yes?

Sean Busbey wrote:

> -1 (non-binding)
>
> bad:
>
> * LICENSE/NOTICE file is missing a bundled third party reference[1]
>
> maybe fine:
>
> * source artifacts mostly match source tag[2]
> * build / test from source works[3]
>
> fine:
> * verified signatures and checksums[4]
>
> [1]:
>
> core/src/test/java/org/apache/commons/vfs2/provider/webdav/test/JcrUtils.java
>
> says it is copied from Apache Jackrabbit 2.4.0, which has a NOTICE.txt file.
>
> there is no mention of this in the source repo NOTICE (I would presume the
> related test jar would also be wrong).
>
> [2]:
>
> The source tag contains an additional module 'sandbox' that is not in the source artifact.
>
> I am not sure if this is intentional, but it looks like it is.
>
> [3]:
>
> Related to [2], if you run `mvn verify` things are fine, but if you use the sandbox profile,
> via `mvn -Pinclude-sandbox verify`, things fall over because the above mentioned module
> is missing.
>
> [4]:
>
> everything properly checks out, but the format of the md5 file was different for the artifacts in
> dist.apache compared to repository.apache.
>
> On 2016-05-11 20:29, Josh Elser<[hidden email]>  wrote:
>> All,
>>
>> Please consider the following for Apache Commons VFS2 version 2.1 (rc2).
>>
>> Maven repository:
>> https://repository.apache.org/content/repositories/orgapachecommons-1166
>> Artifacts: https://dist.apache.org/repos/dist/dev/commons/vfs/ r13608
>>
>> MD5  commons-vfs-distribution-2.1-bin.tar.gz
>> 8cc35a3169e1faee727c5af94c7dd904
>> SHA1 commons-vfs-distribution-2.1-bin.tar.gz
>> 72b7557c4e8b1789b8aa0a9c1e0cb2c9daecec30
>> MD5  commons-vfs-distribution-2.1-src.tar.gz
>> a182ac642874e85fbc7d1086f7663482
>> SHA1 commons-vfs-distribution-2.1-src.tar.gz
>> e42ac2053deb314277213e43f6f1d6b43eff3de9
>>
>> MD5  commons-vfs-distribution-2.1-bin.zip b512a45c63d824eef826f174fd7a9245
>> SHA1 commons-vfs-distribution-2.1-bin.zip
>> 886cb5a430da58b3a68e2abf297b6f735d3ffaf0
>> MD5  commons-vfs-distribution-2.1-src.zip 29645a0ad091c15b2cf76b619c33069f
>> SHA1 commons-vfs-distribution-2.1-src.zip
>> 5824cf4d802865b5e93ff62c90affa58df6c4384
>>
>> Signed with 4677D66C from
>> https://dist.apache.org/repos/dist/release/commons/KEYS
>>
>> SVN tag is available at
>> https://svn.apache.org/repos/asf/commons/proper/vfs/tags/commons-vfs2-project-2.1-rc2/
>> r1743451
>>
>> Staged Maven website:
>> http://home.apache.org/~elserj/commons/commons-vfs-2.1/
>>
>> All reports are available in the provided staged Maven site (see "Project
>> Reports" at the root-level as well as under each sub-module). JIRA-generated
>> release notes are available in the dist.a.o "Artifacts" repository. Unit
>> tests pass and the RC was built util JDK6.
>>
>> (For Sebb) A direct Clirr link
>> http://home.apache.org/~elserj/commons/commons-vfs-2.1/commons-vfs2/clirr-report.html
>>
>> Changes since rc1:
>>
>> * Fixed more compatibility concerns against 2.0 (thanks, Greg)
>> * Improved release notes (thanks, Sebb)
>>
>> This vote will be open for 72-hours, 2016/05/14 0400 UTC.
>>
>>     [ ] +1 Release these artifacts as version 2.1
>>     [ ] 0  OK, but...
>>     [ ] -1 I oppose these artifacts as version 2.1 because..
>>
>> - Josh
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: [hidden email]
>> For additional commands, e-mail: [hidden email]
>>
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [hidden email]
> For additional commands, e-mail: [hidden email]
>

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Re: [VOTE] Apache Commons VFS 2.1 rc2

Jörg Schaible
In reply to this post by Josh Elser
Hi,

built this version from source the tarball. IBM JDK' still fail, but it
seems caused by a test making wrong assumptions (see VFS-500). Built with
JDK 9 fails because of failure with jar plugin. However, all tests pass
previously.

Therefore: +1

Cheers,
Jörg

Josh Elser wrote:

> All,
>
> Please consider the following for Apache Commons VFS2 version 2.1 (rc2).
>
> Maven repository:
> https://repository.apache.org/content/repositories/orgapachecommons-1166
> Artifacts: https://dist.apache.org/repos/dist/dev/commons/vfs/ r13608
>
> MD5  commons-vfs-distribution-2.1-bin.tar.gz
> 8cc35a3169e1faee727c5af94c7dd904
> SHA1 commons-vfs-distribution-2.1-bin.tar.gz
> 72b7557c4e8b1789b8aa0a9c1e0cb2c9daecec30
> MD5  commons-vfs-distribution-2.1-src.tar.gz
> a182ac642874e85fbc7d1086f7663482
> SHA1 commons-vfs-distribution-2.1-src.tar.gz
> e42ac2053deb314277213e43f6f1d6b43eff3de9
>
> MD5  commons-vfs-distribution-2.1-bin.zip b512a45c63d824eef826f174fd7a9245
> SHA1 commons-vfs-distribution-2.1-bin.zip
> 886cb5a430da58b3a68e2abf297b6f735d3ffaf0
> MD5  commons-vfs-distribution-2.1-src.zip 29645a0ad091c15b2cf76b619c33069f
> SHA1 commons-vfs-distribution-2.1-src.zip
> 5824cf4d802865b5e93ff62c90affa58df6c4384
>
> Signed with 4677D66C from
> https://dist.apache.org/repos/dist/release/commons/KEYS
>
> SVN tag is available at
> https://svn.apache.org/repos/asf/commons/proper/vfs/tags/commons-vfs2-project-2.1-rc2/
> r1743451
>
> Staged Maven website:
> http://home.apache.org/~elserj/commons/commons-vfs-2.1/
>
> All reports are available in the provided staged Maven site (see "Project
> Reports" at the root-level as well as under each sub-module).
> JIRA-generated release notes are available in the dist.a.o "Artifacts"
> repository. Unit tests pass and the RC was built util JDK6.
>
> (For Sebb) A direct Clirr link
> http://home.apache.org/~elserj/commons/commons-vfs-2.1/commons-vfs2/clirr-report.html
>
> Changes since rc1:
>
> * Fixed more compatibility concerns against 2.0 (thanks, Greg)
> * Improved release notes (thanks, Sebb)
>
> This vote will be open for 72-hours, 2016/05/14 0400 UTC.
>
>    [ ] +1 Release these artifacts as version 2.1
>    [ ] 0  OK, but...
>    [ ] -1 I oppose these artifacts as version 2.1 because..
>
> - Josh



---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Re: [VOTE] Apache Commons VFS 2.1 rc2

Bernd Eckenfels
In reply to this post by Josh Elser
Hello,

Thanks Josh!

This is a binding +1

(however I have some minor optional points which could be fixed in another
RC or before releasing the repo):


2016-05-12 5:29 GMT+02:00 Josh Elser <[hidden email]>:

> All,
>
> Please consider the following for Apache Commons VFS2 version 2.1 (rc2).
>
> Maven repository:
> https://repository.apache.org/content/repositories/orgapachecommons-1166


- The files *.asc.md5 and *.asc.sha1 are normally deleted according to
commons procedure (not sure why). I think you can do that before the repo
is submitted.

+ all *.sha1, *.md5 and *.asc verified in
orgapachecommons-1166/org/apache/commons/commons-vfs2-distribution/2.1/


>
> Artifacts: https://dist.apache.org/repos/dist/dev/commons/vfs/ r13608
>

> MD5  commons-vfs-distribution-2.1-bin.tar.gz
> 8cc35a3169e1faee727c5af94c7dd904
> SHA1 commons-vfs-distribution-2.1-bin.tar.gz
> 72b7557c4e8b1789b8aa0a9c1e0cb2c9daecec30
> MD5  commons-vfs-distribution-2.1-src.tar.gz
> a182ac642874e85fbc7d1086f7663482
> SHA1 commons-vfs-distribution-2.1-src.tar.gz
> e42ac2053deb314277213e43f6f1d6b43eff3de9
>
> MD5  commons-vfs-distribution-2.1-bin.zip b512a45c63d824eef826f174fd7a9245
> SHA1 commons-vfs-distribution-2.1-bin.zip
> 886cb5a430da58b3a68e2abf297b6f735d3ffaf0
> MD5  commons-vfs-distribution-2.1-src.zip 29645a0ad091c15b2cf76b619c33069f
> SHA1 commons-vfs-distribution-2.1-src.zip
> 5824cf4d802865b5e93ff62c90affa58df6c4384
>
> + verified


> Signed with 4677D66C from
> https://dist.apache.org/repos/dist/release/commons/KEYS


+ verified
- PGP signature is SHA1 but I guess it is (still) fine
- Cant verify the key on a trusted path, but thats not a Commons
requirement.


>
>
> SVN tag is available at
>
> https://svn.apache.org/repos/asf/commons/proper/vfs/tags/commons-vfs2-project-2.1-rc2/
> r1743451
>
> Staged Maven website:
> http://home.apache.org/~elserj/commons/commons-vfs-2.1/
>
> All reports are available in the provided staged Maven site (see "Project
> Reports" at the root-level as well as under each sub-module).
> JIRA-generated
> release notes are available in the dist.a.o "Artifacts" repository. Unit
> tests pass and the RC was built util JDK6.
>
> (For Sebb) A direct Clirr link
>
> http://home.apache.org/~elserj/commons/commons-vfs-2.1/commons-vfs2/clirr-report.html
>
> Changes since rc1:
>
> * Fixed more compatibility concerns against 2.0 (thanks, Greg)
> * Improved release notes (thanks, Sebb)
>
> This vote will be open for 72-hours, 2016/05/14 0400 UTC.
>
>   [X ] +1 Release these artifacts as version 2.1
>   [ ] 0  OK, but...
>   [ ] -1 I oppose these artifacts as version 2.1 because..
>
> - Josh
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [hidden email]
> For additional commands, e-mail: [hidden email]
>
>
Reply | Threaded
Open this post in threaded view
|

Re: [VOTE] Apache Commons VFS 2.1 rc2

sebb-2-2
On 17 May 2016 at 17:57, Bernd <[hidden email]> wrote:

> Hello,
>
> Thanks Josh!
>
> This is a binding +1
>
> (however I have some minor optional points which could be fixed in another
> RC or before releasing the repo):
>
>
> 2016-05-12 5:29 GMT+02:00 Josh Elser <[hidden email]>:
>
>> All,
>>
>> Please consider the following for Apache Commons VFS2 version 2.1 (rc2).
>>
>> Maven repository:
>> https://repository.apache.org/content/repositories/orgapachecommons-1166
>
>
> - The files *.asc.md5 and *.asc.sha1 are normally deleted according to
> commons procedure (not sure why).

Because they serve no purpose; they are just clutter.
A .asc file is its own validator - if it is mangled, it won't be
usable as a sig file.
It is equivalent to creating *.md5.sha1 files.

> I think you can do that before the repo
> is submitted.

Hopefully.

Note that Maven did not create these hashes for the NET and Validator
releases I created recently.
It would be worth knowing what Maven version was used for the release.

> + all *.sha1, *.md5 and *.asc verified in
> orgapachecommons-1166/org/apache/commons/commons-vfs2-distribution/2.1/
>
>
>>
>> Artifacts: https://dist.apache.org/repos/dist/dev/commons/vfs/ r13608
>>
>
>> MD5  commons-vfs-distribution-2.1-bin.tar.gz
>> 8cc35a3169e1faee727c5af94c7dd904
>> SHA1 commons-vfs-distribution-2.1-bin.tar.gz
>> 72b7557c4e8b1789b8aa0a9c1e0cb2c9daecec30
>> MD5  commons-vfs-distribution-2.1-src.tar.gz
>> a182ac642874e85fbc7d1086f7663482
>> SHA1 commons-vfs-distribution-2.1-src.tar.gz
>> e42ac2053deb314277213e43f6f1d6b43eff3de9
>>
>> MD5  commons-vfs-distribution-2.1-bin.zip b512a45c63d824eef826f174fd7a9245
>> SHA1 commons-vfs-distribution-2.1-bin.zip
>> 886cb5a430da58b3a68e2abf297b6f735d3ffaf0
>> MD5  commons-vfs-distribution-2.1-src.zip 29645a0ad091c15b2cf76b619c33069f
>> SHA1 commons-vfs-distribution-2.1-src.zip
>> 5824cf4d802865b5e93ff62c90affa58df6c4384
>>
>> + verified
>
>
>> Signed with 4677D66C from
>> https://dist.apache.org/repos/dist/release/commons/KEYS
>
>
> + verified
> - PGP signature is SHA1 but I guess it is (still) fine
> - Cant verify the key on a trusted path, but thats not a Commons
> requirement.

The KEYS file is stored in SVN, which gives traceability of who added what key.

>
>
>>
>>
>> SVN tag is available at
>>
>> https://svn.apache.org/repos/asf/commons/proper/vfs/tags/commons-vfs2-project-2.1-rc2/
>> r1743451
>>
>> Staged Maven website:
>> http://home.apache.org/~elserj/commons/commons-vfs-2.1/
>>
>> All reports are available in the provided staged Maven site (see "Project
>> Reports" at the root-level as well as under each sub-module).
>> JIRA-generated
>> release notes are available in the dist.a.o "Artifacts" repository. Unit
>> tests pass and the RC was built util JDK6.
>>
>> (For Sebb) A direct Clirr link
>>
>> http://home.apache.org/~elserj/commons/commons-vfs-2.1/commons-vfs2/clirr-report.html
>>
>> Changes since rc1:
>>
>> * Fixed more compatibility concerns against 2.0 (thanks, Greg)
>> * Improved release notes (thanks, Sebb)
>>
>> This vote will be open for 72-hours, 2016/05/14 0400 UTC.
>>
>>   [X ] +1 Release these artifacts as version 2.1
>>   [ ] 0  OK, but...
>>   [ ] -1 I oppose these artifacts as version 2.1 because..
>>
>> - Josh
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: [hidden email]
>> For additional commands, e-mail: [hidden email]
>>
>>

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Re: [VOTE] Apache Commons VFS 2.1 rc2

Josh Elser
Thanks Bernd and Jörg for your votes so far!

By my tally, we're one (binding) vote away from passing this!

Gary or Sebb, any chance either of you could cast a vote (I assume this
fell by the wayside when we thought there were issues with the NOTICE file)?

sebb wrote:

> On 17 May 2016 at 17:57, Bernd<[hidden email]>  wrote:
>> Hello,
>>
>> Thanks Josh!
>>
>> This is a binding +1
>>
>> (however I have some minor optional points which could be fixed in another
>> RC or before releasing the repo):
>>
>>
>> 2016-05-12 5:29 GMT+02:00 Josh Elser<[hidden email]>:
>>
>>> All,
>>>
>>> Please consider the following for Apache Commons VFS2 version 2.1 (rc2).
>>>
>>> Maven repository:
>>> https://repository.apache.org/content/repositories/orgapachecommons-1166
>>
>> - The files *.asc.md5 and *.asc.sha1 are normally deleted according to
>> commons procedure (not sure why).
>
> Because they serve no purpose; they are just clutter.
> A .asc file is its own validator - if it is mangled, it won't be
> usable as a sig file.
> It is equivalent to creating *.md5.sha1 files.
>
>> I think you can do that before the repo
>> is submitted.
>
> Hopefully.
>
> Note that Maven did not create these hashes for the NET and Validator
> releases I created recently.
> It would be worth knowing what Maven version was used for the release.
>
>> + all *.sha1, *.md5 and *.asc verified in
>> orgapachecommons-1166/org/apache/commons/commons-vfs2-distribution/2.1/
>>
>>
>>> Artifacts: https://dist.apache.org/repos/dist/dev/commons/vfs/ r13608
>>>
>>> MD5  commons-vfs-distribution-2.1-bin.tar.gz
>>> 8cc35a3169e1faee727c5af94c7dd904
>>> SHA1 commons-vfs-distribution-2.1-bin.tar.gz
>>> 72b7557c4e8b1789b8aa0a9c1e0cb2c9daecec30
>>> MD5  commons-vfs-distribution-2.1-src.tar.gz
>>> a182ac642874e85fbc7d1086f7663482
>>> SHA1 commons-vfs-distribution-2.1-src.tar.gz
>>> e42ac2053deb314277213e43f6f1d6b43eff3de9
>>>
>>> MD5  commons-vfs-distribution-2.1-bin.zip b512a45c63d824eef826f174fd7a9245
>>> SHA1 commons-vfs-distribution-2.1-bin.zip
>>> 886cb5a430da58b3a68e2abf297b6f735d3ffaf0
>>> MD5  commons-vfs-distribution-2.1-src.zip 29645a0ad091c15b2cf76b619c33069f
>>> SHA1 commons-vfs-distribution-2.1-src.zip
>>> 5824cf4d802865b5e93ff62c90affa58df6c4384
>>>
>>> + verified
>>
>>> Signed with 4677D66C from
>>> https://dist.apache.org/repos/dist/release/commons/KEYS
>>
>> + verified
>> - PGP signature is SHA1 but I guess it is (still) fine
>> - Cant verify the key on a trusted path, but thats not a Commons
>> requirement.
>
> The KEYS file is stored in SVN, which gives traceability of who added what key.
>
>>
>>>
>>> SVN tag is available at
>>>
>>> https://svn.apache.org/repos/asf/commons/proper/vfs/tags/commons-vfs2-project-2.1-rc2/
>>> r1743451
>>>
>>> Staged Maven website:
>>> http://home.apache.org/~elserj/commons/commons-vfs-2.1/
>>>
>>> All reports are available in the provided staged Maven site (see "Project
>>> Reports" at the root-level as well as under each sub-module).
>>> JIRA-generated
>>> release notes are available in the dist.a.o "Artifacts" repository. Unit
>>> tests pass and the RC was built util JDK6.
>>>
>>> (For Sebb) A direct Clirr link
>>>
>>> http://home.apache.org/~elserj/commons/commons-vfs-2.1/commons-vfs2/clirr-report.html
>>>
>>> Changes since rc1:
>>>
>>> * Fixed more compatibility concerns against 2.0 (thanks, Greg)
>>> * Improved release notes (thanks, Sebb)
>>>
>>> This vote will be open for 72-hours, 2016/05/14 0400 UTC.
>>>
>>>    [X ] +1 Release these artifacts as version 2.1
>>>    [ ] 0  OK, but...
>>>    [ ] -1 I oppose these artifacts as version 2.1 because..
>>>
>>> - Josh
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: [hidden email]
>>> For additional commands, e-mail: [hidden email]
>>>
>>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [hidden email]
> For additional commands, e-mail: [hidden email]
>

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Re: [VOTE] Apache Commons VFS 2.1 rc2

Sean Busbey-2
In reply to this post by Josh Elser
Yes, that's correct.

I'm now +1 (non-binding)

--
Sean Busbey
On May 16, 2016 13:44, "Josh Elser" <[hidden email]> wrote:

> Sean,
>
> Circling back around on the discussions today about Jackrabbit's NOTICE
> file, this would change your -1 vote, yes?
>
> Sean Busbey wrote:
>
>> -1 (non-binding)
>>
>> bad:
>>
>> * LICENSE/NOTICE file is missing a bundled third party reference[1]
>>
>> maybe fine:
>>
>> * source artifacts mostly match source tag[2]
>> * build / test from source works[3]
>>
>> fine:
>> * verified signatures and checksums[4]
>>
>> [1]:
>>
>>
>> core/src/test/java/org/apache/commons/vfs2/provider/webdav/test/JcrUtils.java
>>
>> says it is copied from Apache Jackrabbit 2.4.0, which has a NOTICE.txt
>> file.
>>
>> there is no mention of this in the source repo NOTICE (I would presume the
>> related test jar would also be wrong).
>>
>> [2]:
>>
>> The source tag contains an additional module 'sandbox' that is not in the
>> source artifact.
>>
>> I am not sure if this is intentional, but it looks like it is.
>>
>> [3]:
>>
>> Related to [2], if you run `mvn verify` things are fine, but if you use
>> the sandbox profile,
>> via `mvn -Pinclude-sandbox verify`, things fall over because the above
>> mentioned module
>> is missing.
>>
>> [4]:
>>
>> everything properly checks out, but the format of the md5 file was
>> different for the artifacts in
>> dist.apache compared to repository.apache.
>>
>> On 2016-05-11 20:29, Josh Elser<[hidden email]>  wrote:
>>
>>> All,
>>>
>>> Please consider the following for Apache Commons VFS2 version 2.1 (rc2).
>>>
>>> Maven repository:
>>> https://repository.apache.org/content/repositories/orgapachecommons-1166
>>> Artifacts: https://dist.apache.org/repos/dist/dev/commons/vfs/ r13608
>>>
>>> MD5  commons-vfs-distribution-2.1-bin.tar.gz
>>> 8cc35a3169e1faee727c5af94c7dd904
>>> SHA1 commons-vfs-distribution-2.1-bin.tar.gz
>>> 72b7557c4e8b1789b8aa0a9c1e0cb2c9daecec30
>>> MD5  commons-vfs-distribution-2.1-src.tar.gz
>>> a182ac642874e85fbc7d1086f7663482
>>> SHA1 commons-vfs-distribution-2.1-src.tar.gz
>>> e42ac2053deb314277213e43f6f1d6b43eff3de9
>>>
>>> MD5  commons-vfs-distribution-2.1-bin.zip
>>> b512a45c63d824eef826f174fd7a9245
>>> SHA1 commons-vfs-distribution-2.1-bin.zip
>>> 886cb5a430da58b3a68e2abf297b6f735d3ffaf0
>>> MD5  commons-vfs-distribution-2.1-src.zip
>>> 29645a0ad091c15b2cf76b619c33069f
>>> SHA1 commons-vfs-distribution-2.1-src.zip
>>> 5824cf4d802865b5e93ff62c90affa58df6c4384
>>>
>>> Signed with 4677D66C from
>>> https://dist.apache.org/repos/dist/release/commons/KEYS
>>>
>>> SVN tag is available at
>>>
>>> https://svn.apache.org/repos/asf/commons/proper/vfs/tags/commons-vfs2-project-2.1-rc2/
>>> r1743451
>>>
>>> Staged Maven website:
>>> http://home.apache.org/~elserj/commons/commons-vfs-2.1/
>>>
>>> All reports are available in the provided staged Maven site (see "Project
>>> Reports" at the root-level as well as under each sub-module).
>>> JIRA-generated
>>> release notes are available in the dist.a.o "Artifacts" repository. Unit
>>> tests pass and the RC was built util JDK6.
>>>
>>> (For Sebb) A direct Clirr link
>>>
>>> http://home.apache.org/~elserj/commons/commons-vfs-2.1/commons-vfs2/clirr-report.html
>>>
>>> Changes since rc1:
>>>
>>> * Fixed more compatibility concerns against 2.0 (thanks, Greg)
>>> * Improved release notes (thanks, Sebb)
>>>
>>> This vote will be open for 72-hours, 2016/05/14 0400 UTC.
>>>
>>>     [ ] +1 Release these artifacts as version 2.1
>>>     [ ] 0  OK, but...
>>>     [ ] -1 I oppose these artifacts as version 2.1 because..
>>>
>>> - Josh
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: [hidden email]
>>> For additional commands, e-mail: [hidden email]
>>>
>>>
>>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: [hidden email]
>> For additional commands, e-mail: [hidden email]
>>
>>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [hidden email]
> For additional commands, e-mail: [hidden email]
>
>
Reply | Threaded
Open this post in threaded view
|

Re: [VOTE] Apache Commons VFS 2.1 rc2

garydgregory
In reply to this post by Josh Elser
+1

Gary

On Wed, May 11, 2016 at 8:29 PM, Josh Elser <[hidden email]> wrote:

> All,
>
> Please consider the following for Apache Commons VFS2 version 2.1 (rc2).
>
> Maven repository:
> https://repository.apache.org/content/repositories/orgapachecommons-1166
> Artifacts: https://dist.apache.org/repos/dist/dev/commons/vfs/ r13608
>
> MD5  commons-vfs-distribution-2.1-bin.tar.gz
> 8cc35a3169e1faee727c5af94c7dd904
> SHA1 commons-vfs-distribution-2.1-bin.tar.gz
> 72b7557c4e8b1789b8aa0a9c1e0cb2c9daecec30
> MD5  commons-vfs-distribution-2.1-src.tar.gz
> a182ac642874e85fbc7d1086f7663482
> SHA1 commons-vfs-distribution-2.1-src.tar.gz
> e42ac2053deb314277213e43f6f1d6b43eff3de9
>
> MD5  commons-vfs-distribution-2.1-bin.zip b512a45c63d824eef826f174fd7a9245
> SHA1 commons-vfs-distribution-2.1-bin.zip
> 886cb5a430da58b3a68e2abf297b6f735d3ffaf0
> MD5  commons-vfs-distribution-2.1-src.zip 29645a0ad091c15b2cf76b619c33069f
> SHA1 commons-vfs-distribution-2.1-src.zip
> 5824cf4d802865b5e93ff62c90affa58df6c4384
>
> Signed with 4677D66C from
> https://dist.apache.org/repos/dist/release/commons/KEYS
>
> SVN tag is available at
>
> https://svn.apache.org/repos/asf/commons/proper/vfs/tags/commons-vfs2-project-2.1-rc2/
> r1743451
>
> Staged Maven website:
> http://home.apache.org/~elserj/commons/commons-vfs-2.1/
>
> All reports are available in the provided staged Maven site (see "Project
> Reports" at the root-level as well as under each sub-module).
> JIRA-generated
> release notes are available in the dist.a.o "Artifacts" repository. Unit
> tests pass and the RC was built util JDK6.
>
> (For Sebb) A direct Clirr link
>
> http://home.apache.org/~elserj/commons/commons-vfs-2.1/commons-vfs2/clirr-report.html
>
> Changes since rc1:
>
> * Fixed more compatibility concerns against 2.0 (thanks, Greg)
> * Improved release notes (thanks, Sebb)
>
> This vote will be open for 72-hours, 2016/05/14 0400 UTC.
>
>   [ ] +1 Release these artifacts as version 2.1
>   [ ] 0  OK, but...
>   [ ] -1 I oppose these artifacts as version 2.1 because..
>
> - Josh
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [hidden email]
> For additional commands, e-mail: [hidden email]
>
>


--
E-Mail: [hidden email] | [hidden email]
Java Persistence with Hibernate, Second Edition
<http://www.manning.com/bauer3/>
JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
Spring Batch in Action <http://www.manning.com/templier/>
Blog: http://garygregory.wordpress.com
Home: http://garygregory.com/
Tweet! http://twitter.com/GaryGregory