From uima-dev-return-5127-apmail-incubator-uima-dev-archive=incubator.apache.org@incubator.apache.org Fri Dec 21 13:01:26 2007 Return-Path: Delivered-To: apmail-incubator-uima-dev-archive@locus.apache.org Received: (qmail 19525 invoked from network); 21 Dec 2007 13:01:26 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 21 Dec 2007 13:01:26 -0000 Received: (qmail 13058 invoked by uid 500); 21 Dec 2007 13:01:15 -0000 Delivered-To: apmail-incubator-uima-dev-archive@incubator.apache.org Received: (qmail 13042 invoked by uid 500); 21 Dec 2007 13:01:15 -0000 Mailing-List: contact uima-dev-help@incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: uima-dev@incubator.apache.org Delivered-To: mailing list uima-dev@incubator.apache.org Received: (qmail 13033 invoked by uid 99); 21 Dec 2007 13:01:15 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 21 Dec 2007 05:01:15 -0800 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of robertburrelldonkin@gmail.com designates 209.85.146.180 as permitted sender) Received: from [209.85.146.180] (HELO wa-out-1112.google.com) (209.85.146.180) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 21 Dec 2007 13:00:53 +0000 Received: by wa-out-1112.google.com with SMTP id n4so1341475wag.6 for ; Fri, 21 Dec 2007 05:00:57 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; bh=3/Ac8yNQLT84BrEiJh3NUJO6ovJy2x1ErU/FqvijlFA=; b=oRzmFyBG8TBT0zA3Zp8bSgmLHEHQbXUymX5sI67inyKZ+W0CQZBpqy67ZBsyRuVmT5Ya7oMc9gNFoK0Qv+QKqSwklHNGuxe3iYSpBvaOdO8+bVlYow8DJ1L8EqvFv2rbyBzy0nxX7wJ/XoId3u1ijSIbrx2HxXrS82YDzJ1nZG4= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=A1eemER1FN2vDeylpjD4gM2E+E3pIyzayJTILSrOfGhQcdtCRRHHTxwV9fZFgzb0hvTKTyZmPuZlTvcOBuoM6GBXKx0au/2+Hf0FtFmxuc7aeIqrH7u8oQ2xM/0nRKv1AYqcwQNNVV6TdEWxbTmculkm4YPYuR7G/aoTyZiUilc= Received: by 10.114.152.17 with SMTP id z17mr1382466wad.128.1198242057188; Fri, 21 Dec 2007 05:00:57 -0800 (PST) Received: by 10.114.89.5 with HTTP; Fri, 21 Dec 2007 05:00:57 -0800 (PST) Message-ID: Date: Fri, 21 Dec 2007 13:00:57 +0000 From: "Robert Burrell Donkin" To: uima-dev@incubator.apache.org Subject: Re: Release Upload In-Reply-To: <476AA17C.3060906@schor.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <476AA17C.3060906@schor.com> X-Virus-Checked: Checked by ClamAV on apache.org On Dec 20, 2007 5:08 PM, Marshall Schor wrote: > Robert Burrell Donkin wrote: > > /dist/incubator/uima now exists on people. feel free to upload the > > latest release, sums, sigs, KEYS and documentation. the release > > shouldn't be announced until the mirroring script is done and tests > > but there's no need for the upload to wait on the script. > > > > NB > > > > 1. ***NEVER*** alter any document placed in dist > > > Robert - several of the projects we see have a file "KEYS" at the top > level. As new people join the set of code-signers, I presume this file > would be altered? In dist/httpd, the date of the KEYS file is quite recent. > > So - is a KEYS file an exception to #1 above? yes > If so, what is the underlying principal for #1? specifically the released artifacts should never be changed. (for security, release artifacts in dist are scanned for changes.) if any problems are found with a release after it's been uploaded to dist, a new release should be cut with a new release number rather than replacing the old one. - robert