On 05/10/2021 08:49, Mark Thomas wrote:
On 05/10/2021 08:12, Mark Thomas wrote:
On 05/10/2021 01:32, Christopher Schultz wrote:
All,
I'm sorry about this release. The VOTE has officially passed, but I
fear I may have to re-roll the release as the Maven artifacts were
not signed properly at the time. I'm trying to decide what to do
about it.
I can re-roll the release under the same version number, but I'll
have to re-generate everything. I can't guarantee it will be
byte-for-byte identical for a few reasons, so I'm not sure how
comfortable everyone will be with their votes standing.
Asking for a re-vote on a release is a little odd and may actually
not be okay ASF-wise. So I'm thinking maybe I should cancel the vote
and use a new version number which is source-identical to 8.5.72 and
call for a new vote with the new artifacts.
I apologize for the confusion; I didn't notice the missing Maven
items at the time, and cleared-away everything after uploading
everything to svn.
I might have a way to fix this. Given em an hour or two...
I believe this is fixed. The Maven repository is now closed and the
staging repository in the original VOTE is available:
https://repository.apache.org/content/repositories/orgapachetomcat-1337
The files that were in the repository are unchanged. All I have done is
signed the files that were missing signatures (*.jar, *.zip, *.tar.gz
and *.pom) and the closed the repository.
I suggest allowing 24 hours for anyone who voted to change their vote if
they wish and then either complete the release if the votes remain
unchanged or create a 8.5.73 release if there are any -1 votes.
One additional piece of information. I have checked all the binaries and
they are identical to those available at dist.a.o. I haven't checked the
-sources.jar files.
Mark
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
