...
- place the artifact in /www/www.apache.org/dist/incubator/vcl on people.apache.org
- ensure the artifact has permissions 664 and is owned by the incubator group
- wait 24 hours for the artifact to propagate to the mirrors before announcing the release
- ideally, a test download should be done from the mirror and a check of the sums and signatures should be done
- After successfully performing a test download from the mirror, announcements should be made
- on the vcl-dev@ list
- on the vcl-user@ list
- update currently listed version and download link on confluence Index page
- (update this list as the community grows)
IMPORTANT: Once a release is copied to the dist location, it must not be modified. This can signal that an attack is being performed. If an error is found, a new .Z release should be made.