Releases are invariably created from a particular commit from the source control system (usually a git commit these days). I think it’s important to check that the contents of the source tarball match the contents of the source control system at that commit. (To do this, I unpack the tar file in one directory, checkout the source tree in another directory, and do a “diff -r” command.) We rely on the source control system for the provenance of the release, but this process is broken if we don’t check that two are in sync.
This process also catches cases where the release manager has accidentally included generated files not under source control. So, I think this should be added to the check list. Julian > On Sep 10, 2018, at 1:31 AM, Pierre Smits <pierresm...@apache.org> wrote: > > Hi, > > I regard a wiki as good as an svn or git repo as it also has > version-control. > > > Best regards, > > Pierre Smits > > *Apache Trafodion <https://trafodion.apache.org>, Vice President* > *Apache Directory <https://directory.apache.org>, PMC Member* > Apache Incubator <https://incubator.apache.org>, committer > *Apache OFBiz <https://ofbiz.apache.org>, contributor (without privileges) > since 2008* > Apache Steve <https://steve.apache.org>, committer > > On Mon, Sep 10, 2018 at 10:10 AM, Justin Mclean <jus...@classsoftware.com> > wrote: > >> Hi, >> >>> So there are not somewhere in an incubator repo? Only here in the ml? >> >> I’m not sure where they would live, if you can find a place please suggest >> it. >> >> Perhaps the wiki would be a better place? >> >> Thanks, >> Justin >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org >> For additional commands, e-mail: general-h...@incubator.apache.org >> >> --------------------------------------------------------------------- To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org