arrow: Update to 23.0.1

[raulcd]

No description provided.

[raulcd]

This should use the official download URL recommended by ASF not the GitHub one. This is the same type of URL used on Arrow. See more details here:
apache/arrow-adbc#3947

[raulcd]

I've had to update the sha256sum. It seems to be related to the issue that was raised on the Arrow mailing list about ADBC's GitHub sha having changed and being different than the official one. For more details on the issue see this thread:
https://lists.apache.org/thread/3z30djzt18fogozj1klotxgqmnx12v18

I've downloaded form https://www.apache.org/dyn/closer.lua which should be the download URL used with stable checksum instead of GitHub and I've validated this is the correct one. Pinging other ARROW PMC members FYI: @lidavidm @amoeba

[raulcd]

Weird, I've added the signature check for ADBC and it is rejecting @lidavidm signature:

   ==> Verifying source file signatures with gpg...
      apache-arrow-adbc-22.tar.gz ... FAILED (unknown public key 9CBA4EF977CA20B8)
  ==> ERROR: One or more PGP signatures could not be verified!

I've validated this is the signature on the KEYS file (https://dlcdn.apache.org/arrow/KEYS):

pub   rsa4096 2022-12-12 [SC]
      BE7EF45DBAD38E4EECED390E9CBA4EF977CA20B8
uid           [ultimate] David Li (CODE SIGNING KEY) <lidavidm@apache.org>
sig 3        9CBA4EF977CA20B8 2022-12-12  David Li (CODE SIGNING KEY) <lidavidm@apache.org>
sig 3        45127976E1E825D4 2022-12-14  Andrew A Lamb (https://github.com/alamb) <andrew@nerdnetworks.org>
sub   rsa4096 2022-12-12 [E]
sig          9CBA4EF977CA20B8 2022-12-12  David Li (CODE SIGNING KEY) <lidavidm@apache.org>

-----BEGIN PGP PUBLIC KEY BLOCK-----

Maybe I should remove the addition of the .asc file?

Key is valid here:
https://keyserver.ubuntu.com/pks/lookup?search=9CBA4EF977CA20B8&fingerprint=on&op=index

[mmuetzel]

Afaict, you'd need to add a line like the following in the PKGBUILD file:

validpgpkeys=('E7EF45DBAD38E4EECED390E9CBA4EF977CA20B8')  # David Li (CODE SIGNING KEY)

Preferably just above the sha256sums.

[raulcd]

Thanks @mmuetzel I've learnt something new :)

[lazka]

thanks