[tor-bugs] #13166 [metrics-lib]: Release metrics-lib version 1.0.0

[Tor Bug Tracker & Wiki]

#13166: Release metrics-lib version 1.0.0
-------------------------+------------------------------
 Reporter:  karsten      |          Owner:  karsten
     Type:  enhancement  |         Status:  needs_review
 Priority:  Medium       |      Milestone:
Component:  metrics-lib  |        Version:
 Severity:  Normal       |     Resolution:
 Keywords:               |  Actual Points:
Parent ID:               |         Points:
  Sponsor:               |
-------------------------+------------------------------

Comment (by karsten):

 Okay, let's see.  I just added another commit that produces a sources jar
 and that signs both jars.  Please take a look at my
 [https://gitweb.torproject.org/user/karsten/metrics-
 lib.git/log/?h=task-13166 updated branch].

 I also produced signed jars and a signed tarball for testing purposes
 only.  Here's how you can try them out:

 {{{
 wget https://people.torproject.org/~karsten/volatile/descriptor-1.0.0.jar
 wget
 https://people.torproject.org/~karsten/volatile/descriptor-1.0.0-sources.jar
 wget
 https://people.torproject.org/~karsten/volatile/descriptor-1.0.0-sources.tar.bz2
 wget
 https://people.torproject.org/~karsten/volatile/descriptor-1.0.0-sources.tar.bz2.asc
 wget https://people.torproject.org/~karsten/volatile/karsten.cer
 wget https://people.torproject.org/~karsten/volatile/karsten.cer.asc
 gpg --keyserver pgp.mit.edu --recv-key 0x4EFD4FDC3F46D41E
 gpg --verify karsten.cer.asc
 keytool -importcert -alias karsten -file karsten.cer
 jarsigner -verify descriptor-1.0.0.jar
 jarsigner -verify descriptor-1.0.0-sources.jar
 gpg --verify descriptor-1.0.0-sources.tar.bz2.asc
 }}}

 Regarding external libraries, those are not contained in either jars or
 tar.  Should we fix that?  And if so, why?

 As always, thanks!

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13166#comment:16>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online