From b3f1debc967965bbcdcbcc9e1359f43be30f729c Mon Sep 17 00:00:00 2001 From: David Pursehouse Date: Fri, 30 Jun 2017 13:37:11 +0900 Subject: [PATCH] dev-release: Add step to sign the announcement mail At the same time, remove redundant bullet points from the section. Change-Id: I67ebc1da54a97b0b5e985d9d54f863e037afd4b4 --- Documentation/dev-release-deploy-config.txt | 2 +- Documentation/dev-release.txt | 14 ++++++++------ 2 files changed, 9 insertions(+), 7 deletions(-) diff --git a/Documentation/dev-release-deploy-config.txt b/Documentation/dev-release-deploy-config.txt index eba5b5882b..5f95cb326c 100644 --- a/Documentation/dev-release-deploy-config.txt +++ b/Documentation/dev-release-deploy-config.txt @@ -39,7 +39,7 @@ permission by commenting on the same issue. * Generate and publish a PGP key + A PGP key is needed to be able to sign the release artifacts before -the upload to Maven Central. +the upload to Maven Central, and to sign the release announcement email. + Generate and publish a PGP key as described in link:http://central.sonatype.org/pages/working-with-pgp-signatures.html[ diff --git a/Documentation/dev-release.txt b/Documentation/dev-release.txt index 464d90ba50..ce89aa2e3e 100644 --- a/Documentation/dev-release.txt +++ b/Documentation/dev-release.txt @@ -326,12 +326,14 @@ because `Status=Submitted` is considered a closed issue. [[announce]] ==== Announce on Mailing List -* Send an email to the mailing list to announce the release, consider -including some or all of the following in the email: -** A link to the release and the release notes -** A link to the docs -** Describe the type of release (stable, bug fix, RC) -** Hash values (SHA1, SHA256, MD5) for the release WAR file. +Send an email, signed with the same PGP key used to sign the release +artifacts, to the mailing list to announce the release. + +Consider including some or all of the following in the email: +* A link to the release and the release notes +* A link to the docs +* Describe the type of release (stable, bug fix, RC) +* Hash values (SHA1, SHA256, MD5) for the release WAR file. + The SHA1 and MD5 can be taken from the artifact page on Sonatype. The SHA256 can be generated with