[ANN] Apache Maven 3.9.5 released
The Apache Maven team is pleased to announce the release of the
Apache Maven 3.9.5
Apache Maven is a software project management and comprehension tool. Based
on the concept of a project object model (POM), Maven can manage a
project's build, reporting and documentation from a central piece of
information.
Maven 3.9.5 is available via https://maven.apache.org/download.cgi
The core release is independent of plugin releases. Further releases of
plugins will be made separately.
If you have any questions, please consult:
- the web site: https://maven.apache.org/
- the maven-user mailing list: https://maven.apache.org/mailing-lists.html
- the reference documentation: https://maven.apache.org/ref/3.9.5/
For more information read
https://maven.apache.org/docs/3.9.5/release-notes.html
Release Notes - Maven - Version 3.9.5
** Bug
* [MNG-7851] - Error message when modelVersion is 4.0 is confusing
** Improvement
* [MNG-7875] - Colorize transfer messages
* [MNG-7895] - Support ${project.basedir} in file profile activation
** Task
* [MNG-7856] - Maven Resolver Provider classes ctor change
* [MNG-7870] - Undeprecate wrongly deprecated repository metadata
* [MNG-7872] - Deprecate
org.apache.maven.repository.internal.MavenResolverModule
* [MNG-7874] - maven-resolver-provider: introduce NAME constants.
** Dependency upgrade
* [MNG-7859] - Update to Resolver 1.9.16
Have fun!
- The Maven Team
[RESULT][VOTE] Release Apache Maven 3.9.5
Howdy, The vote has passed with the following result: +1: Michael, Karl-Heinz, Slawomir, Arnaud, Herve, Sylwester +1nb: Romain, Henning PMC quorum: reached I will promote the source release zip file to the Apache distribution area and the artifacts to the central repo. T
Re: [VOTE] Release Apache Maven 3.9.5
Howdy,
Thanks Herve, but Karl was talking about SHA512 checksums, albeit unclear
is it bin or src...
And the signature probably changed probably due TS
(as what was signed and by whom was signed was byte-wise same, only when
was signed differs)
T
On Wed, Oct 4, 2023 at 8:10 AM Hervé Boutemy wrote:
> I updated my svn and ran:
>
> for f in *
> do
> rm $f
> wget
> https://repository.apache.org/content/repositories/maven-1996/org/apache/maven/apache-maven/3.9.5/$f
> done
>
> both in source and binaries: this resulted in .asc change in source only,
> everything else was ok
>
> I committed the update
>
> now we have:
> ❯ svn log
>
> r64327 | hboutemy | 2023-10-03 23:37:28 +0200 (Tue, 03 Oct 2023) | 1 line
>
> update signature with new staging content
>
> r64300 | cstamas | 2023-10-02 20:06:52 +0200 (Mon, 02 Oct 2023) | 2 lines
>
> Updated Maven 3.9.5 bin bundles
>
>
> r64283 | cstamas | 2023-10-01 20:44:52 +0200 (Sun, 01 Oct 2023) | 3 lines
>
> Apache Maven 3.9.5
>
> Regards,
>
> Hervé
>
> Le mardi 3 octobre 2023, 23:23:06 CEST Tamás Cservenák a écrit :
> > Karl,
> >
> > Are you sure your SVN checkout is up to date?
> > As I did change archives along with signatures and checksums, and they
> > should be OK
> >
> > This is the commit email of my change:
> > https://lists.apache.org/thread/7wn1sgd7hbcndtgypvjz4qzx0d2brobx
> >
> > Can someone else verify this?
> >
> > Thanks
> > T
> >
> > On Tue, Oct 3, 2023 at 1:05 PM Karl Heinz Marbaise
> >
> > wrote:
> > > Hi,
> > >
> > > the permissions in the .tar.gz archive are Ok now.
> > >
> > > Please update the SHA512 because it's the previous one..(I've checked
> > > the .tar.gz) but I assume that the SHA512 for the -bin.zip has changed
> > > also)...
> > >
> > > https://dist.apache.org/repos/dist/dev/maven/maven-3/3.9.5/binaries/
> > >
> > > Kind regards
> > > Karl Heinz Marbaise
> > >
> > > On 02.10.23 11:10, Tamás Cservenák wrote:
> > > > Bah,
> > > >
> > > > This is the same problem as before... but originally it happened on
> my
> > > > desktop. This time the release was done from my laptop :(
> > > >
> > > > I believe the fix is the same as before: I should rebuild from the
> tag,
> > > > after I fixed my local repository, as source bundles we vote on are
> > > > unchanged...
> > > >
> > > > T
> > > >
> > > >
> > > > On Mon, Oct 2, 2023 at 9:14 AM Herve Boutemy
> > >
> > > wrote:
> > > >> thinking twice, I need to change to -1: this may impact users that
> > >
> > > expect
> > >
> > > >> to use the group permissions to use Maven binaries
> > > >>
> > > >> sorry
> > > >> I don't know what tests you are doing with permissions on your
> > > >> environment, but these tests leak releases :(
> > > >>
> > > >> Regards,
> > > >>
> > > >> Hervé
> > > >>
> > > >> On 2023/10/02 07:11:02 Herve Boutemy wrote:
> > > >>> +1
> > > >>>
> > > >>> but Reproducible not fully ok: reference build done with JDK 17 on
> > > >>> *nix
> > > >>
> > > >> and umask 022
> > > >>
> > > >>> apache-maven-3.9.5-bin.zip and .tar.gz suffer from weird umask
> (go-r)
> > >
> > > on
> > >
> > > >> wagon jars:
> > > >>> $ diffoscope
> > > >>
> > > >> target/reference/org.apache.maven/apache-maven-3.9.5-bin.zip
> > > >> apache-maven/target/apache-maven-3.9.5-bin.zip
> > > >>
> > > >>> --- target/reference/org.apache.maven/apache-maven-3.9.5-bin.zip
> > > >>> +++ apache-maven/target/apache-maven-3.9.5-bin.zip
> > > >>> │┄ Archive contents identical but files differ, possibly due to
> > > >>
> > > >> different compression levels. Falling back to binary comparison.
> > > >>
> > > >>> ├── zipinfo {}
> > > >>> │ @@ -81,21 +81,21 @@
> > > >>> │ -rw-r--r-- 2.0 unx74345 b- defN 23-Oct-01 18:38
> > > >>
> > > >> apache-maven-3.9.5/lib/maven-resolver-provider-3.9.5.jar
> > > >>
> > > >>> │ -rw-r--r-- 2.0 unx 317619 b- defN 23-Oct-01 18:38
> > > >>
> > > >> apache-maven-3.9.5/lib/maven-resolver-impl-1.9.16.jar
> > > >>
> > > >>> │ -rw-r--r-- 2.0 unx37757 b- defN 23-Oct-01 18:38
> > > >>
> > > >> apache-maven-3.9.5/lib/maven-resolver-named-locks-1.9.16.jar
> > > >>
> > > >>> │ -rw-r--r-- 2.0 unx51503 b- defN 23-Oct-01 18:38
> > > >>
> > > >> apache-maven-3.9.5/lib/maven-resolver-spi-1.9.16.jar
> > > >>
> > > >>> │ -rw-r--r-- 2.0 unx 379348 b- defN 23-Oct-01 18:38
> > > >>
> > > >> apache-maven-3.9.5/lib/org.eclipse.sisu.inject-0.3.5.jar
> > > >>
> > > >>> │ -rw-r--r-- 2.0 unx 4225 b- defN 23-Oct-01 18:38
> > > >>
> > > >> apache-maven-3.9.5/lib/plexus-component-annotations-2.1.0.jar
> > > >>
> > > >>> │ -rw-r--r-- 2.0 unx 289577 b- defN 23-Oct-01 18:38
> > > >>
> > > >> apache-maven-3.9.5/lib/maven-compat-3.9.5.jar
> > > >>
> > > >>> │ --rw--- 2.0 unx55101 b- defN 23-Oct-01 18:38
> > > >>
> > > >>
Re: [VOTE] Release Maven Site Plugin version 4.0.0-M10
+1 Reproducible Builds ok: reference build done with JDK 8 on Windows and umask 022 Regards, Hervé Le mardi 3 octobre 2023, 11:12:36 CEST Michael Osipov a écrit : > Hi, > > IMPORTANT: Requires Doxia Sitetools 2.0.0-M12, Maven Reporting Impl > 4.0.0-M10, Maven Reporting Exec 2.0.0-M10 vote/staging repo! > > we solved 6 issues: > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317923 > rsion=12353491 > > There are still a couple of issues left in JIRA: > https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSITE%20AND%20res > olution%20%3D%20Unresolved > > Staging repo: > https://repository.apache.org/content/repositories/maven-1998/ > https://repository.apache.org/content/repositories/maven-1998/org/apache/mav > en/plugins/maven-site-plugin/4.0.0-M10/maven-site-plugin-4.0.0-M10-source-re > lease.zip > > Source release checksum(s): > maven-site-plugin-4.0.0-M10-source-release.zip > sha512: > 48441222e9d8cc310592e6cab56224dc87d442c9a7ba77c48d6659dbf02799c83e0d8481f146 > 6a039ce44ed6795283960e7b5341e8270785f3a488b00bc9ccdb > > Staging site: > https://maven.apache.org/plugins-archives/maven-site-plugin-LATEST/ > > Guide to testing staged releases: > https://maven.apache.org/guides/development/guide-testing-releases.html > > Vote open for 72 hours. > > [ ] +1 > [ ] +0 > [ ] -1 > > - > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org > For additional commands, e-mail: dev-h...@maven.apache.org - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
Re: [VOTE] Release Apache Maven Reporting Exec version 2.0.0-M10
+1 Reproducible Builds ok: reference build done with JDK 8 on Windows and umask 022 Regards, Hervé Le mardi 3 octobre 2023, 00:14:52 CEST Michael Osipov a écrit : > Hi, > > IMPORTANT: Requires Doxia Sitetools 2.0.0-M12, Maven Reporting Impl > 4.0.0-M10 vote/staging repo! > > we solved 3 issues: > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317922 > rsion=12353680 > > There are still a couple of issues left in JIRA: > https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20r > esolution%20%3D%20Unresolved%20AND%20component%20%3D%20maven-reporting-exec > > Staging repo: > https://repository.apache.org/content/repositories/maven-1997/ > https://repository.apache.org/content/repositories/maven-1997/org/apache/mav > en/reporting/maven-reporting-exec/2.0.0-M10/maven-reporting-exec-2.0.0-M10-s > ource-release.zip > > Source release checksum(s): > maven-reporting-exec-2.0.0-M10-source-release.zip > sha512: > c8ec8bdd9696656d5d1f66b2abc3f6d25c52b14df234c87f23fddd13dbd29cf4d93b23e5ab97 > 47e85b75f9eef03da0ee714bfd9ffb80254f13e05004ae5f46bc > > Staging site: > https://maven.apache.org/shared-archives/maven-reporting-exec-LATEST/ > > Guide to testing staged releases: > https://maven.apache.org/guides/development/guide-testing-releases.html > > Vote open for 72 hours. > > [ ] +1 > [ ] +0 > [ ] -1 > > - > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org > For additional commands, e-mail: dev-h...@maven.apache.org - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
Re: [VOTE] Release Apache Maven 3.9.5
I updated my svn and ran:
for f in *
do
rm $f
wget
https://repository.apache.org/content/repositories/maven-1996/org/apache/maven/apache-maven/3.9.5/$f
done
both in source and binaries: this resulted in .asc change in source only,
everything else was ok
I committed the update
now we have:
❯ svn log
r64327 | hboutemy | 2023-10-03 23:37:28 +0200 (Tue, 03 Oct 2023) | 1 line
update signature with new staging content
r64300 | cstamas | 2023-10-02 20:06:52 +0200 (Mon, 02 Oct 2023) | 2 lines
Updated Maven 3.9.5 bin bundles
r64283 | cstamas | 2023-10-01 20:44:52 +0200 (Sun, 01 Oct 2023) | 3 lines
Apache Maven 3.9.5
Regards,
Hervé
Le mardi 3 octobre 2023, 23:23:06 CEST Tamás Cservenák a écrit :
> Karl,
>
> Are you sure your SVN checkout is up to date?
> As I did change archives along with signatures and checksums, and they
> should be OK
>
> This is the commit email of my change:
> https://lists.apache.org/thread/7wn1sgd7hbcndtgypvjz4qzx0d2brobx
>
> Can someone else verify this?
>
> Thanks
> T
>
> On Tue, Oct 3, 2023 at 1:05 PM Karl Heinz Marbaise
>
> wrote:
> > Hi,
> >
> > the permissions in the .tar.gz archive are Ok now.
> >
> > Please update the SHA512 because it's the previous one..(I've checked
> > the .tar.gz) but I assume that the SHA512 for the -bin.zip has changed
> > also)...
> >
> > https://dist.apache.org/repos/dist/dev/maven/maven-3/3.9.5/binaries/
> >
> > Kind regards
> > Karl Heinz Marbaise
> >
> > On 02.10.23 11:10, Tamás Cservenák wrote:
> > > Bah,
> > >
> > > This is the same problem as before... but originally it happened on my
> > > desktop. This time the release was done from my laptop :(
> > >
> > > I believe the fix is the same as before: I should rebuild from the tag,
> > > after I fixed my local repository, as source bundles we vote on are
> > > unchanged...
> > >
> > > T
> > >
> > >
> > > On Mon, Oct 2, 2023 at 9:14 AM Herve Boutemy
> >
> > wrote:
> > >> thinking twice, I need to change to -1: this may impact users that
> >
> > expect
> >
> > >> to use the group permissions to use Maven binaries
> > >>
> > >> sorry
> > >> I don't know what tests you are doing with permissions on your
> > >> environment, but these tests leak releases :(
> > >>
> > >> Regards,
> > >>
> > >> Hervé
> > >>
> > >> On 2023/10/02 07:11:02 Herve Boutemy wrote:
> > >>> +1
> > >>>
> > >>> but Reproducible not fully ok: reference build done with JDK 17 on
> > >>> *nix
> > >>
> > >> and umask 022
> > >>
> > >>> apache-maven-3.9.5-bin.zip and .tar.gz suffer from weird umask (go-r)
> >
> > on
> >
> > >> wagon jars:
> > >>> $ diffoscope
> > >>
> > >> target/reference/org.apache.maven/apache-maven-3.9.5-bin.zip
> > >> apache-maven/target/apache-maven-3.9.5-bin.zip
> > >>
> > >>> --- target/reference/org.apache.maven/apache-maven-3.9.5-bin.zip
> > >>> +++ apache-maven/target/apache-maven-3.9.5-bin.zip
> > >>> │┄ Archive contents identical but files differ, possibly due to
> > >>
> > >> different compression levels. Falling back to binary comparison.
> > >>
> > >>> ├── zipinfo {}
> > >>> │ @@ -81,21 +81,21 @@
> > >>> │ -rw-r--r-- 2.0 unx74345 b- defN 23-Oct-01 18:38
> > >>
> > >> apache-maven-3.9.5/lib/maven-resolver-provider-3.9.5.jar
> > >>
> > >>> │ -rw-r--r-- 2.0 unx 317619 b- defN 23-Oct-01 18:38
> > >>
> > >> apache-maven-3.9.5/lib/maven-resolver-impl-1.9.16.jar
> > >>
> > >>> │ -rw-r--r-- 2.0 unx37757 b- defN 23-Oct-01 18:38
> > >>
> > >> apache-maven-3.9.5/lib/maven-resolver-named-locks-1.9.16.jar
> > >>
> > >>> │ -rw-r--r-- 2.0 unx51503 b- defN 23-Oct-01 18:38
> > >>
> > >> apache-maven-3.9.5/lib/maven-resolver-spi-1.9.16.jar
> > >>
> > >>> │ -rw-r--r-- 2.0 unx 379348 b- defN 23-Oct-01 18:38
> > >>
> > >> apache-maven-3.9.5/lib/org.eclipse.sisu.inject-0.3.5.jar
> > >>
> > >>> │ -rw-r--r-- 2.0 unx 4225 b- defN 23-Oct-01 18:38
> > >>
> > >> apache-maven-3.9.5/lib/plexus-component-annotations-2.1.0.jar
> > >>
> > >>> │ -rw-r--r-- 2.0 unx 289577 b- defN 23-Oct-01 18:38
> > >>
> > >> apache-maven-3.9.5/lib/maven-compat-3.9.5.jar
> > >>
> > >>> │ --rw--- 2.0 unx55101 b- defN 23-Oct-01 18:38
> > >>
> > >> apache-maven-3.9.5/lib/wagon-provider-api-3.5.3.jar
> > >>
> > >>> │ +-rw-r--r-- 2.0 unx55101 b- defN 23-Oct-01 18:38
> > >>
> > >> apache-maven-3.9.5/lib/wagon-provider-api-3.5.3.jar
> > >>
> > >>> │ -rw-r--r-- 2.0 unx 205307 b- defN 23-Oct-01 18:38
> > >>
> > >> apache-maven-3.9.5/lib/org.eclipse.sisu.plexus-0.3.5.jar
> > >>
> > >>> │ -rw-r--r-- 2.0 unx58284 b- defN 23-Oct-01 18:38
> > >>
> > >> apache-maven-3.9.5/lib/commons-cli-1.5.0.jar
> > >>
> > >>> │ --rw--- 2.0 unx 9405 b- defN 23-Oct-01 18:38
> > >>
> > >> apache-maven-3.9.5/lib/wagon-http-3.5.3.jar
> >
