Gdal

Latest version: v3.8.5

Safety actively analyzes 619212 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 8

15.3

a) cd $BUILD_DIR/swig/python/gdal-utils

b) python3 setup.py bdist_wheel

c) Check the output:
twine check dist/gdal_utils-*.whl

c) For trial :
twine upload dist/gdal_utils-*.whl -r pypitest

d) For real :
twine upload dist/gdal_utils-*.whl

16) Generate signed maven artifacts with GPG for Java bindings.
This step is required in order to deploy the
maven artifacts to the central Maven repository. Before this step can
proceed you must set up a signing key as described here:

http://central.sonatype.org/pages/working-with-pgp-signatures.html

a) Each developer can use their own signing key although it is usually best to
avoid constantly using a different key for releases as users will need to
import the public key in order to verify the artifacts.

Here are a quick set of steps to generate a signing key key.

gpg --gen-key
gpg --list-keys (and note the key id)
gpg --keyserver hkp://pool.sks-keyservers.net --send-keys <key id>

See the above link for more details.

b) Run CMake with the following variables:

1. GPG_KEY: the identifier for the signing keys
2. GPG_PASS: the passphrase for the signing key (optional)

c) Build the bindings: make java_binding

Upon success you should see a file named "swig/java/build/maven/bundle.jar"
that contains all the maven artifacts with signatures. This file is what
will be uploaded to maven central. See the next step.

17) Deploy maven artifacts to Maven central.

NOTE: Before you can deploy to maven central you must set up an account
in Sonatype JIRA. That can be done here:

https://issues.sonatype.org/secure/Signup!default.jspa

Once you have an account set up you must be associated with the gdal
project. Create a ticket here asking to be associated with the project:

https://issues.sonatype.org/browse/OSSRH

The entire deployment process is described in detail here:

http://central.sonatype.org/pages/manual-staging-bundle-creation-and-deployment.html
http://central.sonatype.org/pages/releasing-the-deployment.html

The following steps summarize the process.

a) Log into the Sonatype repository manager at https://oss.sonatype.org. Use the
same credentials as your Sonatype JIRA account.

b) Once log in select "Staging Upload" on the left hand side.

c) Select "Artifact Bundle" under "Upload Mode" and then choose the "bundle.jar"
created in the previous Step 22. Finally "Upload Bundle" to start the upload.

d) When the upload has been completed you will be notified that a staging
repository has been created. Note the name of the repository. It should look
something like "orggdal-100x".

e) From the left hand menu navigate to "Staging Repositories". In the search
box look for the staging repository name you noted from the previous section.
Or just search for "gdal". It should be obvious which repository is the
current one.

f) Select the staging repository. If all is well You should see the option to
"Release" (Located as a button near the top of the page). If not it means
there was an issue with the bundle. Consult the "Activity" tab at the bottom
of the page to find out why.

e) Click the "Release" button and that is it! The release should be available in
Maven Central shortly. You can verify this by going to search.maven.org and
searching for "gdal".

18) Create a release on GitHub
Go to https://github.com/OSGeo/gdal/releases/new
And create a release for the vX.Y.Z tag
Attach the following files:
- gdal-X.Y.Z.tar.gz
- gdal-X.Y.Z.tar.gz.sig
- gdal-X.Y.Z.tar.gz.md5
- gdalXYZ.zip
- gdalXYZ.zip.sig
- gdalXYZ.zip.md5
- gdalautotest-X.Y.Z.zip

19) Regenerate Docker images

e.g
./docker/build-all.sh --with-multi-arch --release --tag 3.3.1 --gdal v3.3.1 --proj 8.1.0 --platform linux/arm64,linux/amd64 --push

and update docker/README.md with the latest release

20) Announce release to :
- major release: gdal-devlists.osgeo.org, gdal-announcelists.osgeo.org, news_itemosgeo.org.
- bugfix release: gdal-devlists.osgeo.org, gdal-announcelists.osgeo.org

Example:
- bugfix release: https://lists.osgeo.org/pipermail/gdal-dev/2019-July/050543.html
- feature release: https://lists.osgeo.org/pipermail/gdal-dev/2020-May/052117.html

Note: gdal-announce is moderated. Make sure that your email address is approved
('mod' tick disabled in https://lists.osgeo.org/mailman/admin/gdal-announce/members),
or your message manually approved, with an administrator of the list.

21) For a feature release: after it has been done, in the master branch, update
the VERSION to the next one and in gcore/gdal_version.h.in, update
GDAL_VERSION_MAJOR/_MINOR, GDAL_RELEASE_NAME (with a dev suffix, like "3.7.0dev"),
and set GDAL_RELEASE_DATE to a date like {YEAR}9999.
Update swig/python/gdal-utils/osgeo_utils/__init__.py to something like (3, 6, 99, 0)
if master is 3.7.0dev

15.2

a) Create a build directory if not already done. Go to it and run cmake

b) cd $BUILD_DIR/swig/python

c) python3 setup.py sdist

d) Check the output:
twine check dist/GDAL-*.gz

e) For trial :
twine upload dist/GDAL-*.gz -r pypitest

f) For real :
twine upload dist/GDAL-*.gz

15.1

a) Install twine https://pypi.org/project/twine/

b) Create a $HOME/.pypirc file :

[distutils] this tells distutils what package indexes you can push to
index-servers = pypi
pypitest

[pypi] authentication details for live PyPI
repository: https://upload.pypi.org/legacy/
username: yourlogin
password: yourpassword

[pypitest] authentication details for test PyPI
repository: https://test.pypi.org/legacy/
username: yourlogin
password: yourpassword

11.2

Remove the RC suffixes for the final RC, like:
mv gdal-3.8.3rc1.tar.xz gdal-3.8.3.tar.xz
mv gdal-3.8.3rc1.tar.xz.md5 gdal-3.8.3.tar.xz.md5
mv gdal-3.8.3rc1.tar.xz.sig gdal-3.8.3.tar.xz.sig
mv gdal-3.8.3rc1.tar.gz gdal-3.8.3.tar.gz
mv gdal-3.8.3rc1.tar.gz.md5 gdal-3.8.3.tar.gz.md5
mv gdal-3.8.3rc1.tar.gz.sig gdal-3.8.3.tar.gz.sig
mv gdal383rc1.zip gdal383.zip
mv gdal383rc1.zip.md5 gdal383.zip.md5
mv gdal383rc1.zip.sig gdal383.zip.sig
mv gdalautotest-3.8.3rc1.tar.gz gdalautotest-3.8.3.tar.gz
mv gdalautotest-3.8.3rc1.zip gdalautotest-3.8.3.zip

And edit the .md5 file to remove the reference to RC in the names they contain
vim gdal-3.8.3.tar.gz.md5
vim gdal-3.8.3.tar.xz.md5
vim gdal383.zip.md5

Check that everything is fine:
md5sum -c *.md5

11.3) In /osgeo/download/gdal, add a symlink from X.Y.Z to CURRENT (except for stable releases in a "old" branch).

% ln -sf X.Y.Z CURRENT

12) (Removed)

13) Update doc/source/about_no_title.rst and doc/source/download.rst to advertise the new release and link to the release notes

14) Update GitHub to close the release milestone.
Then create a new milestone for the next release.

15) Upload the new Python bindings to Pypi (requires upload rights to
the GDAL package by one of the current owners : HowardB/FrankW/EvenR)
( procedure taken from http://peterdowns.com/posts/first-time-with-pypi.html )

11.1

git checkout v3.1.0RC1
git tag -a -m "Create tag v3.1.0" v3.1.0
git push origin v3.1.0

8.3

in /osgeo/download/gdal/X.Y.Z (where X.Y.Z is the version number)

with ~/.ssh/config containing:

Host osgeo7-*
ProxyCommand ssh rouaultdownload.osgeo.org -W $(sed -e "s/^osgeo7-//;s/$/.lxd/" <<< "%h"):%p


9) Announce the release candidate availability to gdal-dev
Example: https://lists.osgeo.org/pipermail/gdal-dev/2019-June/050509.html

10) If new RC is needed, update gcore/gdal_version.h.in with the new date
and update NEWS,and go to 7)

If no new RC is needed, after a few days, raise a motion to gdal-dev for approval

11) Once the vote has positively completed,

Page 1 of 8

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.