Re: Passwords in Maven settings file [Was: Release process WAS [VOTE] Release Apache Commons Codec 1.5-RC1]

2011-04-05 Thread Henri Yandell
On Tue, Apr 5, 2011 at 2:37 AM, sebb wrote: > On 5 April 2011 09:32, Jochen Wiedmann wrote: >> On Tue, Apr 5, 2011 at 10:22 AM, Henri Yandell wrote: >> >>> [Side note; this is insane: >>> http://maven.apache.org/guides/mini/guide-encryption.html - I vomit >>> every time it's implied I should put

Passwords in Maven settings file [Was: Release process WAS [VOTE] Release Apache Commons Codec 1.5-RC1]

2011-04-05 Thread sebb
On 5 April 2011 09:32, Jochen Wiedmann wrote: > On Tue, Apr 5, 2011 at 10:22 AM, Henri Yandell wrote: > >> [Side note; this is insane: >> http://maven.apache.org/guides/mini/guide-encryption.html - I vomit >> every time it's implied I should put passwords in the Maven settings >> file] > > Totall

Re: Release process WAS [VOTE] Release Apache Commons Codec 1.5-RC1

2011-04-05 Thread Jochen Wiedmann
On Tue, Apr 5, 2011 at 10:22 AM, Henri Yandell wrote: > Very late, but I've been a tad busy in the new-parent department. You didn't publish a POM yet, did you? ;-) > What I do care about is releasing often. Which is farcical given how > few times I've released. I want to release every month.

Re: Release process WAS [VOTE] Release Apache Commons Codec 1.5-RC1

2011-04-05 Thread Henri Yandell
Very late, but I've been a tad busy in the new-parent department. Generally I agree with Phil's email. I don't really care though - I recognize that my main pain with Nexus is a) the experience to know not to trust magical systems & b) not being full of energy to follow yet another build system ch

Re: Release process WAS [VOTE] Release Apache Commons Codec 1.5-RC1

2011-03-31 Thread Jochen Wiedmann
On Thu, Mar 31, 2011 at 5:46 PM, sebb wrote: > If they are left in Nexus staging, AFAIK they end up in Maven Central > when promoted. And your point is? -- I Am What I Am And That's All What I Yam (Popeye) - To unsubscribe,

Re: Release process WAS [VOTE] Release Apache Commons Codec 1.5-RC1

2011-03-31 Thread Ralph Goers
On Mar 31, 2011, at 8:49 AM, sebb wrote: > On 31 March 2011 12:08, Jochen Wiedmann wrote: >> On Thu, Mar 31, 2011 at 2:38 AM, Phil Steitz wrote: >> >>> And then you need to check the hashes and sigs again since you are >>> now working with downloaded copies of the files that we voted on. >>> S

Re: Release process WAS [VOTE] Release Apache Commons Codec 1.5-RC1

2011-03-31 Thread sebb
On 31 March 2011 12:08, Jochen Wiedmann wrote: > On Thu, Mar 31, 2011 at 2:38 AM, Phil Steitz wrote: > >> And then you need to check the hashes and sigs again since you are >> now working with downloaded copies of the files that we voted on. >> Seems much easier and more correct to me to just scp

Re: Release process WAS [VOTE] Release Apache Commons Codec 1.5-RC1

2011-03-31 Thread sebb
On 31 March 2011 12:05, Jochen Wiedmann wrote: > On Thu, Mar 31, 2011 at 1:36 AM, sebb wrote: > >> AFAIK, wget alone won't do, as the files also have to be deleted. > > Why? There's no problem with leaving them where they are. If they are left in Nexus staging, AFAIK they end up in Maven Central

Re: Release process WAS [VOTE] Release Apache Commons Codec 1.5-RC1

2011-03-31 Thread Jochen Wiedmann
On Thu, Mar 31, 2011 at 2:38 AM, Phil Steitz wrote: > And then you need to check the hashes and sigs again since you are > now working with downloaded copies of the files that we voted on. > Seems much easier and more correct to me to just scp the files to > p.a.o., let people vote on them and *m

Re: Release process WAS [VOTE] Release Apache Commons Codec 1.5-RC1

2011-03-31 Thread Jochen Wiedmann
On Thu, Mar 31, 2011 at 1:36 AM, sebb wrote: > AFAIK, wget alone won't do, as the files also have to be deleted. Why? There's no problem with leaving them where they are. > Also, it would be best if that part of the process could be done from > the users system, rather than having to login to

Re: Release process WAS [VOTE] Release Apache Commons Codec 1.5-RC1

2011-03-31 Thread sebb
On 31 March 2011 04:00, Phil Steitz wrote: > On 3/30/11 6:57 PM, sebb wrote: >> On 31 March 2011 01:38, Phil Steitz wrote: >>> On 3/30/11 4:22 PM, Jochen Wiedmann wrote: On Tue, Mar 29, 2011 at 5:52 PM, Phil Steitz wrote: > I disagree with this.  The most important artifacts are th

Re: Release process WAS [VOTE] Release Apache Commons Codec 1.5-RC1

2011-03-30 Thread Phil Steitz
On 3/30/11 7:07 PM, Ralph Goers wrote: > I'm seeing a lot of complaining on these threads but no actual proposal. I started the thread with a proposal, which was to standardize on the process documented on the web site. I know you don't like that process and I am not going to insist that we force

Re: Release process WAS [VOTE] Release Apache Commons Codec 1.5-RC1

2011-03-30 Thread Phil Steitz
On 3/30/11 6:57 PM, sebb wrote: > On 31 March 2011 01:38, Phil Steitz wrote: >> On 3/30/11 4:22 PM, Jochen Wiedmann wrote: >>> On Tue, Mar 29, 2011 at 5:52 PM, Phil Steitz wrote: >>> I disagree with this. The most important artifacts are the zips/tars that go to dist/. These *are* the

Re: Release process WAS [VOTE] Release Apache Commons Codec 1.5-RC1

2011-03-30 Thread Ralph Goers
I'm seeing a lot of complaining on these threads but no actual proposal. If the proposal is to move away from Maven/Nexus for a release for all of commons I'll vote -1. OTOH, If some release managers want to do the release some other way I'm not going to force them to use Maven/Nexus. Ralph

Re: Release process WAS [VOTE] Release Apache Commons Codec 1.5-RC1

2011-03-30 Thread sebb
On 31 March 2011 01:38, Phil Steitz wrote: > On 3/30/11 4:22 PM, Jochen Wiedmann wrote: >> On Tue, Mar 29, 2011 at 5:52 PM, Phil Steitz wrote: >> >>> I disagree with this.  The most important artifacts are the >>> zips/tars that go to dist/.  These *are* the ASF release.  Nexus >>> makes it *hard

Re: Release process WAS [VOTE] Release Apache Commons Codec 1.5-RC1

2011-03-30 Thread Phil Steitz
On 3/30/11 4:22 PM, Jochen Wiedmann wrote: > On Tue, Mar 29, 2011 at 5:52 PM, Phil Steitz wrote: > >> I disagree with this. The most important artifacts are the >> zips/tars that go to dist/. These *are* the ASF release. Nexus >> makes it *harder* IMO to maintain provenance of these artifacts.

Re: Release process WAS [VOTE] Release Apache Commons Codec 1.5-RC1

2011-03-30 Thread sebb
On 31 March 2011 00:22, Jochen Wiedmann wrote: > On Tue, Mar 29, 2011 at 5:52 PM, Phil Steitz wrote: > >> I disagree with this.  The most important artifacts are the >> zips/tars that go to dist/.  These *are* the ASF release.  Nexus >> makes it *harder* IMO to maintain provenance of these artifa

Re: Release process WAS [VOTE] Release Apache Commons Codec 1.5-RC1

2011-03-30 Thread Jochen Wiedmann
On Tue, Mar 29, 2011 at 5:52 PM, Phil Steitz wrote: > I disagree with this.  The most important artifacts are the > zips/tars that go to dist/.  These *are* the ASF release.  Nexus > makes it *harder* IMO to maintain provenance of these artifacts. These artifacts are present in Nexus. Pulling th

Re: Release process WAS [VOTE] Release Apache Commons Codec 1.5-RC1

2011-03-29 Thread Niall Pemberton
On Tue, Mar 29, 2011 at 10:23 PM, sebb wrote: > On 29 March 2011 20:56, Niall Pemberton wrote: >> On Tue, Mar 29, 2011 at 8:08 PM, sebb wrote: >>> On 29 March 2011 18:33, Niall Pemberton wrote: On Tue, Mar 29, 2011 at 5:18 PM, sebb wrote: > On 29 March 2011 16:52, Phil Steitz wrote:

Re: Release process WAS [VOTE] Release Apache Commons Codec 1.5-RC1

2011-03-29 Thread sebb
On 29 March 2011 20:56, Niall Pemberton wrote: > On Tue, Mar 29, 2011 at 8:08 PM, sebb wrote: >> On 29 March 2011 18:33, Niall Pemberton wrote: >>> On Tue, Mar 29, 2011 at 5:18 PM, sebb wrote: On 29 March 2011 16:52, Phil Steitz wrote: > On 3/29/11 8:33 AM, sebb wrote: >> On 29 Ma

Re: Release process WAS [VOTE] Release Apache Commons Codec 1.5-RC1

2011-03-29 Thread Niall Pemberton
On Tue, Mar 29, 2011 at 8:08 PM, sebb wrote: > On 29 March 2011 18:33, Niall Pemberton wrote: >> On Tue, Mar 29, 2011 at 5:18 PM, sebb wrote: >>> On 29 March 2011 16:52, Phil Steitz wrote: On 3/29/11 8:33 AM, sebb wrote: > On 29 March 2011 16:20, Matt Benson wrote: >> On Tue, Mar

Re: Release process WAS [VOTE] Release Apache Commons Codec 1.5-RC1

2011-03-29 Thread sebb
On 29 March 2011 18:33, Niall Pemberton wrote: > On Tue, Mar 29, 2011 at 5:18 PM, sebb wrote: >> On 29 March 2011 16:52, Phil Steitz wrote: >>> On 3/29/11 8:33 AM, sebb wrote: On 29 March 2011 16:20, Matt Benson wrote: > On Tue, Mar 29, 2011 at 10:08 AM, sebb wrote: >> On 29 March

Re: Release process WAS [VOTE] Release Apache Commons Codec 1.5-RC1

2011-03-29 Thread Niall Pemberton
On Tue, Mar 29, 2011 at 5:18 PM, sebb wrote: > On 29 March 2011 16:52, Phil Steitz wrote: >> On 3/29/11 8:33 AM, sebb wrote: >>> On 29 March 2011 16:20, Matt Benson wrote: On Tue, Mar 29, 2011 at 10:08 AM, sebb wrote: > On 29 March 2011 16:02, Niall Pemberton wrote: >> On Tue, Mar

Re: Release process WAS [VOTE] Release Apache Commons Codec 1.5-RC1

2011-03-29 Thread sebb
On 29 March 2011 16:52, Phil Steitz wrote: > On 3/29/11 8:33 AM, sebb wrote: >> On 29 March 2011 16:20, Matt Benson wrote: >>> On Tue, Mar 29, 2011 at 10:08 AM, sebb wrote: On 29 March 2011 16:02, Niall Pemberton wrote: > On Tue, Mar 29, 2011 at 3:50 PM, Phil Steitz > wrote:

Re: Release process WAS [VOTE] Release Apache Commons Codec 1.5-RC1

2011-03-29 Thread Phil Steitz
On 3/29/11 8:33 AM, sebb wrote: > On 29 March 2011 16:20, Matt Benson wrote: >> On Tue, Mar 29, 2011 at 10:08 AM, sebb wrote: >>> On 29 March 2011 16:02, Niall Pemberton wrote: On Tue, Mar 29, 2011 at 3:50 PM, Phil Steitz wrote: > After another nightmare by an RM who has not cut a rel

Re: Release process WAS [VOTE] Release Apache Commons Codec 1.5-RC1

2011-03-29 Thread sebb
On 29 March 2011 16:20, Matt Benson wrote: > On Tue, Mar 29, 2011 at 10:08 AM, sebb wrote: >> On 29 March 2011 16:02, Niall Pemberton wrote: >>> On Tue, Mar 29, 2011 at 3:50 PM, Phil Steitz wrote:  After another nightmare by an RM who has not cut a release in a while, I think we need

Re: Release process WAS [VOTE] Release Apache Commons Codec 1.5-RC1

2011-03-29 Thread Ralph Goers
On Mar 29, 2011, at 8:08 AM, sebb wrote: >> > > Yes, that is true. > > Also, had the [net] release been using Nexus, it would have required 2 > additional manual stages to close and then release the Maven > artifacts. > It is impossible to accidentally release Maven artifacts using Maven > com

Re: Release process WAS [VOTE] Release Apache Commons Codec 1.5-RC1

2011-03-29 Thread Matt Benson
On Tue, Mar 29, 2011 at 10:08 AM, sebb wrote: > On 29 March 2011 16:02, Niall Pemberton wrote: >> On Tue, Mar 29, 2011 at 3:50 PM, Phil Steitz wrote: >>>  After another nightmare by an RM who has not cut a release in a >>> while, I think we need to do something.  The documentation on the >>> Com

Re: Release process WAS [VOTE] Release Apache Commons Codec 1.5-RC1

2011-03-29 Thread sebb
On 29 March 2011 16:02, Niall Pemberton wrote: > On Tue, Mar 29, 2011 at 3:50 PM, Phil Steitz wrote: >>  After another nightmare by an RM who has not cut a release in a >> while, I think we need to do something.  The documentation on the >> Commons web pages describes a process that works.  I sug

Re: Release process WAS [VOTE] Release Apache Commons Codec 1.5-RC1

2011-03-29 Thread Niall Pemberton
On Tue, Mar 29, 2011 at 3:50 PM, Phil Steitz wrote: >  After another nightmare by an RM who has not cut a release in a > while, I think we need to do something.  The documentation on the > Commons web pages describes a process that works.  I suggest that we > standardize on that process, adding so

Release process WAS [VOTE] Release Apache Commons Codec 1.5-RC1

2011-03-29 Thread Phil Steitz
After another nightmare by an RM who has not cut a release in a while, I think we need to do something. The documentation on the Commons web pages describes a process that works. I suggest that we standardize on that process, adding some simple automation scripts that RMs can choose to use or no