A lot of this is automated in scripts/asf-release.sh

Guidelines

DOs

• Include full name (with version) in name of top level folder in release zip
• Include [VOTE] and [DISCUSS] tags in thread subject, and cleanly separate the two
• Ensure only one [VOTE] and one [DISCUSS] thread
• Use the template below for the [VOTE] thread email
• When voting on dev@allura, include details of what was tested. E.g.:
  • Sums and sigs OK (log below).
  • Build from source tarball succeeds and passes tests on [list platforms].
  • Extended tests pass on [list platforms].
  • RAT build target passes.
  • Expanded tarball matches version control tag exactly (diff log below).
  • LICENSE and NOTICE assembled according to http://www.apache.org/dev/licensing-howto.html per discussion at [link].
  • LICENSE and NOTICE up-to-date, as no dependencies have been added since initial assembly.
  • All copyleft dependencies purged as documented at [issue].
  • Copyright date in NOTICE is current.
  • CHANGES entry is current.
  • Issue tracker clean (no open issues for this release).
• After successful vote
  • send a [RESULT] [VOTE] email
  • move release files from /dev/ to /release/
  • Remove old release (it is automatically archived)
  • wait for release to show up on a few mirrors
  • Update download links (allura.apache.org (https://svn.apache.org/repos/asf/allura/site/trunk/), wiki [Home], http://en.wikipedia.org/wiki/Apache_Allura, https://sourceforge.net/projects/allura/files/)
  • make a tracker milestone for the release and move the relevant closed tickets from "unreleased" into the new milestone for the release
  • Announce (to dev@allura.a.o and users@allura.a.o and announce@a.o)

DON'Ts

[VOTE] Thread Template

Hello,

This is a call for a vote on Apache Allura {{VERSION}}.

Source tarball and signature are available at:
  https://dist.apache.org/repos/dist/dev/allura/allura-{{VERSION}}.tar.gz
  https://dist.apache.org/repos/dist/dev/allura/allura-{{VERSION}}.tar.gz.asc

Checksums:
  MD5:    {{MD5_CHECKSUM}}  allura-{{VERSION}}.tar.gz
  SHA1:   {{SHA1_CHECKSUM}}  allura-{{VERSION}}.tar.gz
  SHA512: {{SHA512_CHECKSUM}}  allura-{{VERSION}}.tar.gz

The KEYS file can be found at:
  http://www.apache.org/dist/allura/KEYS

The release has been signed with keys (9BB3CE70 and 449C78B1):
  http://pgp.mit.edu:11371/pks/lookup?op=vindex&search=0x56F0526F9BB3CE70
  http://pgp.mit.edu:11371/pks/lookup?op=vindex&search=0xDB6E071B449C78B1

Source corresponding to this release can be found at:
  Commit: {{COMMIT_SHA}}
  Tag:    asf_release_{{VERSION}}
  Browse: https://git-wip-us.apache.org/repos/asf?p=allura.git;a=shortlog;h=refs/tags/asf_release_{{VERSION}}

The RAT report is available at:
  {{RAT_BUILD_LOG_PASTEBIN}}

Vote will be open for at least 72 hours ({{CLOSE_DATE}} 12PM IST).

[ ] +1 approve
[ ] +0 no opinion
[ ] -1 disapprove (and reason why)

Thanks & Regards