Hi Dave, Thank you very much for providing these feedback. We are working on resolving these issues.
For now, we will close this vote and prepare an rc2 with all the mentioned issues fix for next vote. On Fri, Aug 17, 2018 at 9:07 AM Ning Wang <[email protected]> wrote: > Thanks a lot Dave, That's super helpful to us! > > > > > > On Wed, Aug 15, 2018 at 4:25 PM Dave Fisher <[email protected]> wrote: > > > Hi - > > > > Thanks for providing this. Some key items are missing. I have to VOTE -1 > > (While I am not on this PPMC I am giving you a head start with an IPMC > > binding vote.) > > > > (1) A detached signature is required in the directory that has the > release > > package. > > (2) A KEYS file needs to be present which contains the public key of the > > release manager who signed this release. > > (3) A brand new policy is that SHA-1 is compromised and new releases need > > an SHA-256 or SHA-512. > > > > See https://www.apache.org/dev/release-distribution#sigs-and-sums and > > > http://www.apache.org/legal/release-policy.html#what-must-every-release-contain > > > > I looked at the following: > > DISCLAIMER > > LICENSE > > NOTICE > > These look OK. > > > > Many files are missing license headers in the source. > > Please provide a way to run a release audit tool to check on licenses in > > the source files. > > See https://creadur.apache.org/rat/ > > > > Binaries cannot be included in source packages: > > A discussion is needed about the third_party directory. Binary files > > cannot be included. E.G. cereal-1.2.1.tar.gz. > > > > In the website directory there are binaries for the logo source. I wonder > > why you need ai, eps, psd and pdf versions of the logo in your source > > release. This is branding information and the project should control when > > these are given out. > > For branding policy see > http://www.apache.org/foundation/marks/#guidelines > > , http://www.apache.org/foundation/marks/faq/#poweredby , and > > https://www.apache.org/foundation/press/kit/ > > > > The icomoon font in the tools/ui has licenses that are incompatible with > > Apache releases. I would not block this release for this, but these will > > need to be replaced. > > > > I did not do any builds …. > > > > Regards, > > Dave > > > > > > On Aug 15, 2018, at 3:14 PM, Neng Lu <[email protected]> wrote: > > > > Hi All, > > > > This is the first release candidate for Apache Heron, version > > 0.20.0-incubating. > > > > It is the starting poiont of Heron and contains heron's main features, > such > > as streaming > > processing, stateful processing, streamlet api, api server, eco support, > > etc. > > > > Full list of changes and fixes are available: > > > > > https://github.com/apache/incubator-heron/compare/0.17.5.1-rc...release/v-0.20.0-incubating > > > > *** Please download, test and vote on this release. This vote will stay > > open > > for at least 72 hours *** > > > > Source files: > > > > > https://dist.apache.org/repos/dist/dev/incubator/heron/heron-0.20.0-incubating-candidate-1/ > > > > SHA-1 checksums: > > 9a42c828f2264eb6c0e49ae52c8ba525f0e1c4ee > > ./incubator-heron-v-0.20.0-incubating-candidate-1.tar.gz > > > > The tag to be voted upon: > > v0.20.0-incubating-candidate-1 (d2946ce0cfb3a6fe230a93d9f16550d7f46d2cf3) > > > > > https://github.com/apache/incubator-heron/releases/tag/v-0.20.0-incubating-candidate-1 > > > > Please download the the source package, and follow the compiling guide( > > > > > https://apache.github.io/incubator-heron/docs/developers/compiling/compiling/ > > ) > > to build > > and run the Heron locally. > > > > Best Regards, > > Neng Lu > > > > > > >
