Mark,
On 10/5/21 03:49, Mark Thomas wrote:
On 05/10/2021 08:12, Mark Thomas wrote:
On 05/10/2021 01:32, Christopher Schultz wrote:
All,
I'm sorry about this release. The VOTE has officially passed, but I
fear I may have to re-roll the release as the Maven artifacts were
not signed properly at the time. I'm trying to decide what to do
about it.
I can re-roll the release under the same version number, but I'll
have to re-generate everything. I can't guarantee it will be
byte-for-byte identical for a few reasons, so I'm not sure how
comfortable everyone will be with their votes standing.
Asking for a re-vote on a release is a little odd and may actually
not be okay ASF-wise. So I'm thinking maybe I should cancel the vote
and use a new version number which is source-identical to 8.5.72 and
call for a new vote with the new artifacts.
I apologize for the confusion; I didn't notice the missing Maven
items at the time, and cleared-away everything after uploading
everything to svn.
I might have a way to fix this. Given em an hour or two...
I believe this is fixed. The Maven repository is now closed and the
staging repository in the original VOTE is available:
https://repository.apache.org/content/repositories/orgapachetomcat-1337
What sorcery did you apply, here?
The files that were in the repository are unchanged. All I have done is
signed the files that were missing signatures (*.jar, *.zip, *.tar.gz
and *.pom) and the closed the repository.
There were so many files I wasn't sure where to begin. Were you able to
get a comprehensive listing of the files in there in order to download
them? I also don't know the mechanism for uploading them (it's all done
by the build script, which presumably you wrote).
I suggest allowing 24 hours for anyone who voted to change their vote if
they wish and then either complete the release if the votes remain
unchanged or create a 8.5.73 release if there are any -1 votes.
So the files were produced by me but signed by you. That shouldn't be a
problem unless someone wants to claim that a Tomcat release must be done
by a single person, which is of course completely untrue.
Thanks for doing this. I'd love the details so I can recover in the
future if necessary.
-chris
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
