Re: [CANCELED][VOTE] Release Apache Maven 3.9.4

2023-07-31 Thread Tamás Cservenák
Howdy,

It turns out source bundles (by SHA512) were ok and are unchanged, it was
the binary bundle that had flakey maven-resolver-api 1.9.14 JAR embedded,
as Herve detected.

Again,
- source bundles are _unchanged_.
- binary bundles are _fixed_.

Will respin "take two" vote for 3.9.4, as everything is restaged.

Thanks
T

On Mon, Jul 31, 2023 at 12:07 AM Tamás Cservenák 
wrote:

> But that's the thing (as I wrote on Slack):
> - I have desktop (Fedora 38) and one laptop (Fedora 38) and one macbook
> - but all the releases I did do this week happened on desktop (Fedora 38)
> ONLY
> - on desktop I do use MRM, but as resolver release placed JARs in my local
> repository, they were probably overwritten (as you say, by another install)
> - I am unsure and am actually troubled here, when and how did I "mvn
> install" from tag checked out sources (target/checkout from release
> directory)? While building site? As I have _separate_ places/checkouts
> even, once for "work" and one for "release" that is not even added to any
> IDE...
>
> T
>
> On Sun, Jul 30, 2023 at 11:59 PM Hervé Boutemy 
> wrote:
>
>> you probably rebuilt the release with "mvn install" = what you need to
>> avoid
>> and it seems the rebuild was done with an environment that did not give
>> you the same output as the reference build
>>
>> FYI, I was able to rebuild Maven Resolver 1.9.14 with the same output as
>> you
>>
>> https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/apache/maven/resolver/maven-resolver/README.md
>>
>> AFAIK, there is no reproduciblity issue nowadays with recent Bnd and/or
>> Felix Bundle plugin
>>
>> Regards,
>>
>> Hervé
>>
>> Le samedi 29 juillet 2023, 15:19:12 CEST Tamás Cservenák a écrit :
>> > Sure,
>> >
>> > Will do that, thanks.
>> >
>> > What I don't understand is how I got 2 different jars in the first
>> place,
>> > as i did not release twice (nor build from tag two times)...
>> >
>> > T
>> >
>> > On Sat, Jul 29, 2023, 11:58 Herve Boutemy  wrote:
>> > > notice that you don't need to go to 3.9.5: rebuilding 3.9.4 from a
>> clean
>> > > local repository and Git checkout from tag with `mvn -Papache-release
>> > > deploy` will do the job that has to be re-done
>> > >
>> > > Regards,
>> > >
>> > > Hervé
>> > >
>> > > On 2023/07/29 08:47:48 Tamás Cservenák wrote:
>> > > > Am cancelling the vote due Herve -1
>> > > >
>> > > > Will need to figure out how this happened.
>> > > >
>> > > > T
>> > >
>> > > -
>> > > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
>> > > For additional commands, e-mail: dev-h...@maven.apache.org
>>
>>
>>
>>
>>
>> -
>> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
>> For additional commands, e-mail: dev-h...@maven.apache.org
>>
>>


Re: [CANCELED][VOTE] Release Apache Maven 3.9.4

2023-07-30 Thread Tamás Cservenák
But that's the thing (as I wrote on Slack):
- I have desktop (Fedora 38) and one laptop (Fedora 38) and one macbook
- but all the releases I did do this week happened on desktop (Fedora 38)
ONLY
- on desktop I do use MRM, but as resolver release placed JARs in my local
repository, they were probably overwritten (as you say, by another install)
- I am unsure and am actually troubled here, when and how did I "mvn
install" from tag checked out sources (target/checkout from release
directory)? While building site? As I have _separate_ places/checkouts
even, once for "work" and one for "release" that is not even added to any
IDE...

T

On Sun, Jul 30, 2023 at 11:59 PM Hervé Boutemy 
wrote:

> you probably rebuilt the release with "mvn install" = what you need to
> avoid
> and it seems the rebuild was done with an environment that did not give
> you the same output as the reference build
>
> FYI, I was able to rebuild Maven Resolver 1.9.14 with the same output as
> you
>
> https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/apache/maven/resolver/maven-resolver/README.md
>
> AFAIK, there is no reproduciblity issue nowadays with recent Bnd and/or
> Felix Bundle plugin
>
> Regards,
>
> Hervé
>
> Le samedi 29 juillet 2023, 15:19:12 CEST Tamás Cservenák a écrit :
> > Sure,
> >
> > Will do that, thanks.
> >
> > What I don't understand is how I got 2 different jars in the first place,
> > as i did not release twice (nor build from tag two times)...
> >
> > T
> >
> > On Sat, Jul 29, 2023, 11:58 Herve Boutemy  wrote:
> > > notice that you don't need to go to 3.9.5: rebuilding 3.9.4 from a
> clean
> > > local repository and Git checkout from tag with `mvn -Papache-release
> > > deploy` will do the job that has to be re-done
> > >
> > > Regards,
> > >
> > > Hervé
> > >
> > > On 2023/07/29 08:47:48 Tamás Cservenák wrote:
> > > > Am cancelling the vote due Herve -1
> > > >
> > > > Will need to figure out how this happened.
> > > >
> > > > T
> > >
> > > -
> > > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> > > For additional commands, e-mail: dev-h...@maven.apache.org
>
>
>
>
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> For additional commands, e-mail: dev-h...@maven.apache.org
>
>


Re: [CANCELED][VOTE] Release Apache Maven 3.9.4

2023-07-30 Thread Hervé Boutemy
you probably rebuilt the release with "mvn install" = what you need to avoid
and it seems the rebuild was done with an environment that did not give you the 
same output as the reference build

FYI, I was able to rebuild Maven Resolver 1.9.14 with the same output as you
https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/apache/maven/resolver/maven-resolver/README.md

AFAIK, there is no reproduciblity issue nowadays with recent Bnd and/or Felix 
Bundle plugin

Regards,

Hervé

Le samedi 29 juillet 2023, 15:19:12 CEST Tamás Cservenák a écrit :
> Sure,
> 
> Will do that, thanks.
> 
> What I don't understand is how I got 2 different jars in the first place,
> as i did not release twice (nor build from tag two times)...
> 
> T
> 
> On Sat, Jul 29, 2023, 11:58 Herve Boutemy  wrote:
> > notice that you don't need to go to 3.9.5: rebuilding 3.9.4 from a clean
> > local repository and Git checkout from tag with `mvn -Papache-release
> > deploy` will do the job that has to be re-done
> > 
> > Regards,
> > 
> > Hervé
> > 
> > On 2023/07/29 08:47:48 Tamás Cservenák wrote:
> > > Am cancelling the vote due Herve -1
> > > 
> > > Will need to figure out how this happened.
> > > 
> > > T
> > 
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> > For additional commands, e-mail: dev-h...@maven.apache.org





-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



Re: [CANCELED][VOTE] Release Apache Maven 3.9.4

2023-07-29 Thread Gary Gregory
Or a Set.

Gary

On Sat, Jul 29, 2023, 11:37 AM Gary Gregory  wrote:

> Sounds like a Java Map implementation is used that does not preserve
> insertion order.
>
> Gary
>
>
> On Sat, Jul 29, 2023, 11:03 AM Tamás Cservenák 
> wrote:
>
>> Yes, you are right.
>>
>> Seems only the /META-INF/MANIFEST.MF differs, only the Export-Package and
>> Import-Package entries like their ordering is different?
>>
>>
>>
>> T
>>
>> On Sat, Jul 29, 2023, 15:28 Gary Gregory  wrote:
>>
>> > Maybe figuring out the exact difference between the jars will give you a
>> > hint?
>> >
>> > Gary
>> >
>> > On Sat, Jul 29, 2023, 9:19 AM Tamás Cservenák 
>> wrote:
>> >
>> > > Sure,
>> > >
>> > > Will do that, thanks.
>> > >
>> > > What I don't understand is how I got 2 different jars in the first
>> place,
>> > > as i did not release twice (nor build from tag two times)...
>> > >
>> > > T
>> > >
>> > > On Sat, Jul 29, 2023, 11:58 Herve Boutemy 
>> wrote:
>> > >
>> > > > notice that you don't need to go to 3.9.5: rebuilding 3.9.4 from a
>> > clean
>> > > > local repository and Git checkout from tag with `mvn
>> -Papache-release
>> > > > deploy` will do the job that has to be re-done
>> > > >
>> > > > Regards,
>> > > >
>> > > > Hervé
>> > > >
>> > > > On 2023/07/29 08:47:48 Tamás Cservenák wrote:
>> > > > > Am cancelling the vote due Herve -1
>> > > > >
>> > > > > Will need to figure out how this happened.
>> > > > >
>> > > > > T
>> > > > >
>> > > >
>> > > >
>> -
>> > > > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
>> > > > For additional commands, e-mail: dev-h...@maven.apache.org
>> > > >
>> > > >
>> > >
>> >
>>
>


Re: [CANCELED][VOTE] Release Apache Maven 3.9.4

2023-07-29 Thread Gary Gregory
Sounds like a Java Map implementation is used that does not preserve
insertion order.

Gary


On Sat, Jul 29, 2023, 11:03 AM Tamás Cservenák  wrote:

> Yes, you are right.
>
> Seems only the /META-INF/MANIFEST.MF differs, only the Export-Package and
> Import-Package entries like their ordering is different?
>
>
>
> T
>
> On Sat, Jul 29, 2023, 15:28 Gary Gregory  wrote:
>
> > Maybe figuring out the exact difference between the jars will give you a
> > hint?
> >
> > Gary
> >
> > On Sat, Jul 29, 2023, 9:19 AM Tamás Cservenák 
> wrote:
> >
> > > Sure,
> > >
> > > Will do that, thanks.
> > >
> > > What I don't understand is how I got 2 different jars in the first
> place,
> > > as i did not release twice (nor build from tag two times)...
> > >
> > > T
> > >
> > > On Sat, Jul 29, 2023, 11:58 Herve Boutemy  wrote:
> > >
> > > > notice that you don't need to go to 3.9.5: rebuilding 3.9.4 from a
> > clean
> > > > local repository and Git checkout from tag with `mvn -Papache-release
> > > > deploy` will do the job that has to be re-done
> > > >
> > > > Regards,
> > > >
> > > > Hervé
> > > >
> > > > On 2023/07/29 08:47:48 Tamás Cservenák wrote:
> > > > > Am cancelling the vote due Herve -1
> > > > >
> > > > > Will need to figure out how this happened.
> > > > >
> > > > > T
> > > > >
> > > >
> > > > -
> > > > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> > > > For additional commands, e-mail: dev-h...@maven.apache.org
> > > >
> > > >
> > >
> >
>


Re: [CANCELED][VOTE] Release Apache Maven 3.9.4

2023-07-29 Thread Tamás Cservenák
Yes, you are right.

Seems only the /META-INF/MANIFEST.MF differs, only the Export-Package and
Import-Package entries like their ordering is different?



T

On Sat, Jul 29, 2023, 15:28 Gary Gregory  wrote:

> Maybe figuring out the exact difference between the jars will give you a
> hint?
>
> Gary
>
> On Sat, Jul 29, 2023, 9:19 AM Tamás Cservenák  wrote:
>
> > Sure,
> >
> > Will do that, thanks.
> >
> > What I don't understand is how I got 2 different jars in the first place,
> > as i did not release twice (nor build from tag two times)...
> >
> > T
> >
> > On Sat, Jul 29, 2023, 11:58 Herve Boutemy  wrote:
> >
> > > notice that you don't need to go to 3.9.5: rebuilding 3.9.4 from a
> clean
> > > local repository and Git checkout from tag with `mvn -Papache-release
> > > deploy` will do the job that has to be re-done
> > >
> > > Regards,
> > >
> > > Hervé
> > >
> > > On 2023/07/29 08:47:48 Tamás Cservenák wrote:
> > > > Am cancelling the vote due Herve -1
> > > >
> > > > Will need to figure out how this happened.
> > > >
> > > > T
> > > >
> > >
> > > -
> > > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> > > For additional commands, e-mail: dev-h...@maven.apache.org
> > >
> > >
> >
>


Re: [CANCELED][VOTE] Release Apache Maven 3.9.4

2023-07-29 Thread Gary Gregory
Maybe figuring out the exact difference between the jars will give you a
hint?

Gary

On Sat, Jul 29, 2023, 9:19 AM Tamás Cservenák  wrote:

> Sure,
>
> Will do that, thanks.
>
> What I don't understand is how I got 2 different jars in the first place,
> as i did not release twice (nor build from tag two times)...
>
> T
>
> On Sat, Jul 29, 2023, 11:58 Herve Boutemy  wrote:
>
> > notice that you don't need to go to 3.9.5: rebuilding 3.9.4 from a clean
> > local repository and Git checkout from tag with `mvn -Papache-release
> > deploy` will do the job that has to be re-done
> >
> > Regards,
> >
> > Hervé
> >
> > On 2023/07/29 08:47:48 Tamás Cservenák wrote:
> > > Am cancelling the vote due Herve -1
> > >
> > > Will need to figure out how this happened.
> > >
> > > T
> > >
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> > For additional commands, e-mail: dev-h...@maven.apache.org
> >
> >
>


Re: [CANCELED][VOTE] Release Apache Maven 3.9.4

2023-07-29 Thread Tamás Cservenák
Sure,

Will do that, thanks.

What I don't understand is how I got 2 different jars in the first place,
as i did not release twice (nor build from tag two times)...

T

On Sat, Jul 29, 2023, 11:58 Herve Boutemy  wrote:

> notice that you don't need to go to 3.9.5: rebuilding 3.9.4 from a clean
> local repository and Git checkout from tag with `mvn -Papache-release
> deploy` will do the job that has to be re-done
>
> Regards,
>
> Hervé
>
> On 2023/07/29 08:47:48 Tamás Cservenák wrote:
> > Am cancelling the vote due Herve -1
> >
> > Will need to figure out how this happened.
> >
> > T
> >
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> For additional commands, e-mail: dev-h...@maven.apache.org
>
>


Re: [CANCELED][VOTE] Release Apache Maven 3.9.4

2023-07-29 Thread Herve Boutemy
notice that you don't need to go to 3.9.5: rebuilding 3.9.4 from a clean local 
repository and Git checkout from tag with `mvn -Papache-release deploy` will do 
the job that has to be re-done

Regards,

Hervé

On 2023/07/29 08:47:48 Tamás Cservenák wrote:
> Am cancelling the vote due Herve -1
> 
> Will need to figure out how this happened.
> 
> T
> 

-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



[CANCELED][VOTE] Release Apache Maven 3.9.4

2023-07-29 Thread Tamás Cservenák
Am cancelling the vote due Herve -1

Will need to figure out how this happened.

T