[RESULT][VOTE] Release Apache Maven 3.9.4 -- take two

[Tamás Cservenák]

Howdy,

The vote has passed with the following result:

+1b: Herve, Arnaud, Karl-Heinz, Olivier, Guillaume, Romain, Slawomir
+1nb: Tony, Delany

PMC quorum: reached

I will promote the source release zip file to the Apache distribution area
and the artifacts to the central repo.

Thanks
T

Re: [VOTE] Release Apache Maven 3.9.4 -- take two

[Romain Manni-Bucau]

+1

Romain Manni-Bucau
@rmannibucau  |  Blog
 | Old Blog
 | Github  |
LinkedIn  | Book



Le mer. 2 août 2023 à 11:43, Guillaume Nodet  a écrit :

> +1
>
> Le lun. 31 juil. 2023 à 12:29, Tamás Cservenák  a
> écrit :
>
> > Howdy,
> >
> > We solved 3 issues:
> >
> >
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316922=12353369
> >
> > There are still a couple of issues left in JIRA:
> >
> >
> https://issues.apache.org/jira/issues/?jql=project%20%3D%20MNG%20AND%20resolution%20%3D%20Unresolved
> >
> > Staging repo (NEW, old was maven-1982):
> > https://repository.apache.org/content/repositories/maven-1983
> >
> > Dev dist directory (binary bundles updated):
> > https://dist.apache.org/repos/dist/dev/maven/maven-3/3.9.4/
> >
> > Source release checksums:
> > apache-maven-3.9.4-src.zip sha512 (UNCHANGED):
> >
> >
> 7a45cfd1f50e51246bbbeef769bf0c61ec08320ac260eed6b54ffce060a3186c99e902b3407ed9aa98fe02ad9b618b1bd2741275c05c7cdac24f0bc799d324e0
> >
> > apache-maven-3.9.4-src.tar.gz sha512 (UNCHANGED):
> >
> >
> 7a77f7e19c5165be8dd886ae06a52c6d6a94b1419917d2e035e937114c7cff5aea19d8ea3614485c1876185e70f4fbdd80b673f56f7d344fae75e51d62f3100c
> >
> > Binary release checksums:
> > apache-maven-3.9.4-bin.tar.gz - SHA-512 :
> >
> >
> deaa39e16b2cf20f8cd7d232a1306344f04020e1f0fb28d35492606f647a60fe729cc40d3cba33e093a17aed41bd161fe1240556d0f1b80e773abd408686217e
> >
> > apache-maven-3.9.4-bin.zip - SHA-512 :
> >
> >
> 755e7b757ea011621d704b9d2bee8fc344b77c13117077caa71abea560f20926a2bc8c96f990ed298f2dfc14bdba376566ee11c66c547f2594579f9cb3c50e1c
> >
> > Staged site:
> > https://maven.apache.org/ref/3-LATEST/
> >
> > Draft for release notes:
> > https://github.com/apache/maven-site/pull/442
> >
> > Guide to testing staged releases:
> > http://maven.apache.org/guides/development/guide-testing-releases.html
> >
> > Vote open for 72h
> >
> > [ ] +1
> > [ ] +0
> > [ ] -1
> >
>
>
> --
> 
> Guillaume Nodet
>

Re: [VOTE] Release Apache Maven 3.9.4 -- take two

[Guillaume Nodet]

+1

Le lun. 31 juil. 2023 à 12:29, Tamás Cservenák  a
écrit :

> Howdy,
>
> We solved 3 issues:
>
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316922=12353369
>
> There are still a couple of issues left in JIRA:
>
> https://issues.apache.org/jira/issues/?jql=project%20%3D%20MNG%20AND%20resolution%20%3D%20Unresolved
>
> Staging repo (NEW, old was maven-1982):
> https://repository.apache.org/content/repositories/maven-1983
>
> Dev dist directory (binary bundles updated):
> https://dist.apache.org/repos/dist/dev/maven/maven-3/3.9.4/
>
> Source release checksums:
> apache-maven-3.9.4-src.zip sha512 (UNCHANGED):
>
> 7a45cfd1f50e51246bbbeef769bf0c61ec08320ac260eed6b54ffce060a3186c99e902b3407ed9aa98fe02ad9b618b1bd2741275c05c7cdac24f0bc799d324e0
>
> apache-maven-3.9.4-src.tar.gz sha512 (UNCHANGED):
>
> 7a77f7e19c5165be8dd886ae06a52c6d6a94b1419917d2e035e937114c7cff5aea19d8ea3614485c1876185e70f4fbdd80b673f56f7d344fae75e51d62f3100c
>
> Binary release checksums:
> apache-maven-3.9.4-bin.tar.gz - SHA-512 :
>
> deaa39e16b2cf20f8cd7d232a1306344f04020e1f0fb28d35492606f647a60fe729cc40d3cba33e093a17aed41bd161fe1240556d0f1b80e773abd408686217e
>
> apache-maven-3.9.4-bin.zip - SHA-512 :
>
> 755e7b757ea011621d704b9d2bee8fc344b77c13117077caa71abea560f20926a2bc8c96f990ed298f2dfc14bdba376566ee11c66c547f2594579f9cb3c50e1c
>
> Staged site:
> https://maven.apache.org/ref/3-LATEST/
>
> Draft for release notes:
> https://github.com/apache/maven-site/pull/442
>
> Guide to testing staged releases:
> http://maven.apache.org/guides/development/guide-testing-releases.html
>
> Vote open for 72h
>
> [ ] +1
> [ ] +0
> [ ] -1
>


-- 

Guillaume Nodet

Re: [VOTE] Release Apache Maven 3.9.4 -- take two

[Olivier Lamy]

+1

On Mon, 31 Jul 2023 at 20:29, Tamás Cservenák  wrote:
>
> Howdy,
>
> We solved 3 issues:
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316922=12353369
>
> There are still a couple of issues left in JIRA:
> https://issues.apache.org/jira/issues/?jql=project%20%3D%20MNG%20AND%20resolution%20%3D%20Unresolved
>
> Staging repo (NEW, old was maven-1982):
> https://repository.apache.org/content/repositories/maven-1983
>
> Dev dist directory (binary bundles updated):
> https://dist.apache.org/repos/dist/dev/maven/maven-3/3.9.4/
>
> Source release checksums:
> apache-maven-3.9.4-src.zip sha512 (UNCHANGED):
> 7a45cfd1f50e51246bbbeef769bf0c61ec08320ac260eed6b54ffce060a3186c99e902b3407ed9aa98fe02ad9b618b1bd2741275c05c7cdac24f0bc799d324e0
>
> apache-maven-3.9.4-src.tar.gz sha512 (UNCHANGED):
> 7a77f7e19c5165be8dd886ae06a52c6d6a94b1419917d2e035e937114c7cff5aea19d8ea3614485c1876185e70f4fbdd80b673f56f7d344fae75e51d62f3100c
>
> Binary release checksums:
> apache-maven-3.9.4-bin.tar.gz - SHA-512 :
> deaa39e16b2cf20f8cd7d232a1306344f04020e1f0fb28d35492606f647a60fe729cc40d3cba33e093a17aed41bd161fe1240556d0f1b80e773abd408686217e
>
> apache-maven-3.9.4-bin.zip - SHA-512 :
> 755e7b757ea011621d704b9d2bee8fc344b77c13117077caa71abea560f20926a2bc8c96f990ed298f2dfc14bdba376566ee11c66c547f2594579f9cb3c50e1c
>
> Staged site:
> https://maven.apache.org/ref/3-LATEST/
>
> Draft for release notes:
> https://github.com/apache/maven-site/pull/442
>
> Guide to testing staged releases:
> http://maven.apache.org/guides/development/guide-testing-releases.html
>
> Vote open for 72h
>
> [ ] +1
> [ ] +0
> [ ] -1

-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org

Re: [VOTE] Release Apache Maven 3.9.4 -- take two

[Karl Heinz Marbaise]

Hi,

+1 from me.

Kind regards
Karl Heinz Marbaise
On 31.07.23 12:29, Tamás Cservenák wrote:

Howdy,

We solved 3 issues:
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316922=12353369

There are still a couple of issues left in JIRA:
https://issues.apache.org/jira/issues/?jql=project%20%3D%20MNG%20AND%20resolution%20%3D%20Unresolved

Staging repo (NEW, old was maven-1982):
https://repository.apache.org/content/repositories/maven-1983

Dev dist directory (binary bundles updated):
https://dist.apache.org/repos/dist/dev/maven/maven-3/3.9.4/

Source release checksums:
apache-maven-3.9.4-src.zip sha512 (UNCHANGED):
7a45cfd1f50e51246bbbeef769bf0c61ec08320ac260eed6b54ffce060a3186c99e902b3407ed9aa98fe02ad9b618b1bd2741275c05c7cdac24f0bc799d324e0

apache-maven-3.9.4-src.tar.gz sha512 (UNCHANGED):
7a77f7e19c5165be8dd886ae06a52c6d6a94b1419917d2e035e937114c7cff5aea19d8ea3614485c1876185e70f4fbdd80b673f56f7d344fae75e51d62f3100c

Binary release checksums:
apache-maven-3.9.4-bin.tar.gz - SHA-512 :
deaa39e16b2cf20f8cd7d232a1306344f04020e1f0fb28d35492606f647a60fe729cc40d3cba33e093a17aed41bd161fe1240556d0f1b80e773abd408686217e

apache-maven-3.9.4-bin.zip - SHA-512 :
755e7b757ea011621d704b9d2bee8fc344b77c13117077caa71abea560f20926a2bc8c96f990ed298f2dfc14bdba376566ee11c66c547f2594579f9cb3c50e1c

Staged site:
https://maven.apache.org/ref/3-LATEST/

Draft for release notes:
https://github.com/apache/maven-site/pull/442

Guide to testing staged releases:
http://maven.apache.org/guides/development/guide-testing-releases.html

Vote open for 72h

[ ] +1
[ ] +0
[ ] -1




-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org

Re: [VOTE] Release Apache Maven 3.9.4 -- take two

[Arnaud Héritier]

+1

Le lun. 31 juil. 2023 à 12:29, Tamás Cservenák  a
écrit :

> Howdy,
>
> We solved 3 issues:
>
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316922=12353369
>
> There are still a couple of issues left in JIRA:
>
> https://issues.apache.org/jira/issues/?jql=project%20%3D%20MNG%20AND%20resolution%20%3D%20Unresolved
>
> Staging repo (NEW, old was maven-1982):
> https://repository.apache.org/content/repositories/maven-1983
>
> Dev dist directory (binary bundles updated):
> https://dist.apache.org/repos/dist/dev/maven/maven-3/3.9.4/
>
> Source release checksums:
> apache-maven-3.9.4-src.zip sha512 (UNCHANGED):
>
> 7a45cfd1f50e51246bbbeef769bf0c61ec08320ac260eed6b54ffce060a3186c99e902b3407ed9aa98fe02ad9b618b1bd2741275c05c7cdac24f0bc799d324e0
>
> apache-maven-3.9.4-src.tar.gz sha512 (UNCHANGED):
>
> 7a77f7e19c5165be8dd886ae06a52c6d6a94b1419917d2e035e937114c7cff5aea19d8ea3614485c1876185e70f4fbdd80b673f56f7d344fae75e51d62f3100c
>
> Binary release checksums:
> apache-maven-3.9.4-bin.tar.gz - SHA-512 :
>
> deaa39e16b2cf20f8cd7d232a1306344f04020e1f0fb28d35492606f647a60fe729cc40d3cba33e093a17aed41bd161fe1240556d0f1b80e773abd408686217e
>
> apache-maven-3.9.4-bin.zip - SHA-512 :
>
> 755e7b757ea011621d704b9d2bee8fc344b77c13117077caa71abea560f20926a2bc8c96f990ed298f2dfc14bdba376566ee11c66c547f2594579f9cb3c50e1c
>
> Staged site:
> https://maven.apache.org/ref/3-LATEST/
>
> Draft for release notes:
> https://github.com/apache/maven-site/pull/442
>
> Guide to testing staged releases:
> http://maven.apache.org/guides/development/guide-testing-releases.html
>
> Vote open for 72h
>
> [ ] +1
> [ ] +0
> [ ] -1
>
-- 
Arnaud Héritier
Twitter/GitHub/... : aheritier

Re: [VOTE] Release Apache Maven 3.9.4 -- take two

[Herve Boutemy]

thanks for re-doing the release

+1

Reproducible Builds ok: reference build done with JDK 17 on *nix
No bad content from local repository environment went in this time :)
Lesson learned: when rebuilding a release, never "mvn install"

Regards,

Hervé

On 2023/07/31 10:29:11 Tamás Cservenák wrote:
> Howdy,
> 
> We solved 3 issues:
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316922=12353369
> 
> There are still a couple of issues left in JIRA:
> https://issues.apache.org/jira/issues/?jql=project%20%3D%20MNG%20AND%20resolution%20%3D%20Unresolved
> 
> Staging repo (NEW, old was maven-1982):
> https://repository.apache.org/content/repositories/maven-1983
> 
> Dev dist directory (binary bundles updated):
> https://dist.apache.org/repos/dist/dev/maven/maven-3/3.9.4/
> 
> Source release checksums:
> apache-maven-3.9.4-src.zip sha512 (UNCHANGED):
> 7a45cfd1f50e51246bbbeef769bf0c61ec08320ac260eed6b54ffce060a3186c99e902b3407ed9aa98fe02ad9b618b1bd2741275c05c7cdac24f0bc799d324e0
> 
> apache-maven-3.9.4-src.tar.gz sha512 (UNCHANGED):
> 7a77f7e19c5165be8dd886ae06a52c6d6a94b1419917d2e035e937114c7cff5aea19d8ea3614485c1876185e70f4fbdd80b673f56f7d344fae75e51d62f3100c
> 
> Binary release checksums:
> apache-maven-3.9.4-bin.tar.gz - SHA-512 :
> deaa39e16b2cf20f8cd7d232a1306344f04020e1f0fb28d35492606f647a60fe729cc40d3cba33e093a17aed41bd161fe1240556d0f1b80e773abd408686217e
> 
> apache-maven-3.9.4-bin.zip - SHA-512 :
> 755e7b757ea011621d704b9d2bee8fc344b77c13117077caa71abea560f20926a2bc8c96f990ed298f2dfc14bdba376566ee11c66c547f2594579f9cb3c50e1c
> 
> Staged site:
> https://maven.apache.org/ref/3-LATEST/
> 
> Draft for release notes:
> https://github.com/apache/maven-site/pull/442
> 
> Guide to testing staged releases:
> http://maven.apache.org/guides/development/guide-testing-releases.html
> 
> Vote open for 72h
> 
> [ ] +1
> [ ] +0
> [ ] -1
> 

-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org

Re: [VOTE] Release Apache Maven 3.9.4 -- take two

[Tamás Cservenák]

Howdy,

Given we vote for source releases, and this is a vote about same (SHA512
wise) source bundle as in initial vote thread, let me list votes happened
so far (on 1st thread):

+1b: Tamas, Slawomir
+1nb: Tony, Delany

T

On Mon, Jul 31, 2023 at 12:29 PM Tamás Cservenák 
wrote:

> Howdy,
>
> We solved 3 issues:
>
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316922=12353369
>
> There are still a couple of issues left in JIRA:
>
> https://issues.apache.org/jira/issues/?jql=project%20%3D%20MNG%20AND%20resolution%20%3D%20Unresolved
>
> Staging repo (NEW, old was maven-1982):
> https://repository.apache.org/content/repositories/maven-1983
>
> Dev dist directory (binary bundles updated):
> https://dist.apache.org/repos/dist/dev/maven/maven-3/3.9.4/
>
> Source release checksums:
> apache-maven-3.9.4-src.zip sha512 (UNCHANGED):
>
> 7a45cfd1f50e51246bbbeef769bf0c61ec08320ac260eed6b54ffce060a3186c99e902b3407ed9aa98fe02ad9b618b1bd2741275c05c7cdac24f0bc799d324e0
>
> apache-maven-3.9.4-src.tar.gz sha512 (UNCHANGED):
>
> 7a77f7e19c5165be8dd886ae06a52c6d6a94b1419917d2e035e937114c7cff5aea19d8ea3614485c1876185e70f4fbdd80b673f56f7d344fae75e51d62f3100c
>
> Binary release checksums:
> apache-maven-3.9.4-bin.tar.gz - SHA-512 :
> deaa39e16b2cf20f8cd7d232a1306344f04020e1f0fb28d35492606f647a60fe729cc40d3cba33e093a17aed41bd161fe1240556d0f1b80e773abd408686217e
>
> apache-maven-3.9.4-bin.zip - SHA-512 :
> 755e7b757ea011621d704b9d2bee8fc344b77c13117077caa71abea560f20926a2bc8c96f990ed298f2dfc14bdba376566ee11c66c547f2594579f9cb3c50e1c
>
> Staged site:
> https://maven.apache.org/ref/3-LATEST/
>
> Draft for release notes:
> https://github.com/apache/maven-site/pull/442
>
> Guide to testing staged releases:
> http://maven.apache.org/guides/development/guide-testing-releases.html
>
> Vote open for 72h
>
> [ ] +1
> [ ] +0
> [ ] -1
>
>

[VOTE] Release Apache Maven 3.9.4 -- take two

[Tamás Cservenák]

Howdy,

We solved 3 issues:
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316922=12353369

There are still a couple of issues left in JIRA:
https://issues.apache.org/jira/issues/?jql=project%20%3D%20MNG%20AND%20resolution%20%3D%20Unresolved

Staging repo (NEW, old was maven-1982):
https://repository.apache.org/content/repositories/maven-1983

Dev dist directory (binary bundles updated):
https://dist.apache.org/repos/dist/dev/maven/maven-3/3.9.4/

Source release checksums:
apache-maven-3.9.4-src.zip sha512 (UNCHANGED):
7a45cfd1f50e51246bbbeef769bf0c61ec08320ac260eed6b54ffce060a3186c99e902b3407ed9aa98fe02ad9b618b1bd2741275c05c7cdac24f0bc799d324e0

apache-maven-3.9.4-src.tar.gz sha512 (UNCHANGED):
7a77f7e19c5165be8dd886ae06a52c6d6a94b1419917d2e035e937114c7cff5aea19d8ea3614485c1876185e70f4fbdd80b673f56f7d344fae75e51d62f3100c

Binary release checksums:
apache-maven-3.9.4-bin.tar.gz - SHA-512 :
deaa39e16b2cf20f8cd7d232a1306344f04020e1f0fb28d35492606f647a60fe729cc40d3cba33e093a17aed41bd161fe1240556d0f1b80e773abd408686217e

apache-maven-3.9.4-bin.zip - SHA-512 :
755e7b757ea011621d704b9d2bee8fc344b77c13117077caa71abea560f20926a2bc8c96f990ed298f2dfc14bdba376566ee11c66c547f2594579f9cb3c50e1c

Staged site:
https://maven.apache.org/ref/3-LATEST/

Draft for release notes:
https://github.com/apache/maven-site/pull/442

Guide to testing staged releases:
http://maven.apache.org/guides/development/guide-testing-releases.html

Vote open for 72h

[ ] +1
[ ] +0
[ ] -1

Re: [CANCELED][VOTE] Release Apache Maven 3.9.4

[Tamás Cservenák]

Howdy,

It turns out source bundles (by SHA512) were ok and are unchanged, it was
the binary bundle that had flakey maven-resolver-api 1.9.14 JAR embedded,
as Herve detected.

Again,
- source bundles are _unchanged_.
- binary bundles are _fixed_.

Will respin "take two" vote for 3.9.4, as everything is restaged.

Thanks
T

On Mon, Jul 31, 2023 at 12:07 AM Tamás Cservenák 
wrote:

> But that's the thing (as I wrote on Slack):
> - I have desktop (Fedora 38) and one laptop (Fedora 38) and one macbook
> - but all the releases I did do this week happened on desktop (Fedora 38)
> ONLY
> - on desktop I do use MRM, but as resolver release placed JARs in my local
> repository, they were probably overwritten (as you say, by another install)
> - I am unsure and am actually troubled here, when and how did I "mvn
> install" from tag checked out sources (target/checkout from release
> directory)? While building site? As I have _separate_ places/checkouts
> even, once for "work" and one for "release" that is not even added to any
> IDE...
>
> T
>
> On Sun, Jul 30, 2023 at 11:59 PM Hervé Boutemy 
> wrote:
>
>> you probably rebuilt the release with "mvn install" = what you need to
>> avoid
>> and it seems the rebuild was done with an environment that did not give
>> you the same output as the reference build
>>
>> FYI, I was able to rebuild Maven Resolver 1.9.14 with the same output as
>> you
>>
>> https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/apache/maven/resolver/maven-resolver/README.md
>>
>> AFAIK, there is no reproduciblity issue nowadays with recent Bnd and/or
>> Felix Bundle plugin
>>
>> Regards,
>>
>> Hervé
>>
>> Le samedi 29 juillet 2023, 15:19:12 CEST Tamás Cservenák a écrit :
>> > Sure,
>> >
>> > Will do that, thanks.
>> >
>> > What I don't understand is how I got 2 different jars in the first
>> place,
>> > as i did not release twice (nor build from tag two times)...
>> >
>> > T
>> >
>> > On Sat, Jul 29, 2023, 11:58 Herve Boutemy  wrote:
>> > > notice that you don't need to go to 3.9.5: rebuilding 3.9.4 from a
>> clean
>> > > local repository and Git checkout from tag with `mvn -Papache-release
>> > > deploy` will do the job that has to be re-done
>> > >
>> > > Regards,
>> > >
>> > > Hervé
>> > >
>> > > On 2023/07/29 08:47:48 Tamás Cservenák wrote:
>> > > > Am cancelling the vote due Herve -1
>> > > >
>> > > > Will need to figure out how this happened.
>> > > >
>> > > > T
>> > >
>> > > -
>> > > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
>> > > For additional commands, e-mail: dev-h...@maven.apache.org
>>
>>
>>
>>
>>
>> -
>> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
>> For additional commands, e-mail: dev-h...@maven.apache.org
>>
>>

Re: [CANCELED][VOTE] Release Apache Maven 3.9.4

[Tamás Cservenák]

But that's the thing (as I wrote on Slack):
- I have desktop (Fedora 38) and one laptop (Fedora 38) and one macbook
- but all the releases I did do this week happened on desktop (Fedora 38)
ONLY
- on desktop I do use MRM, but as resolver release placed JARs in my local
repository, they were probably overwritten (as you say, by another install)
- I am unsure and am actually troubled here, when and how did I "mvn
install" from tag checked out sources (target/checkout from release
directory)? While building site? As I have _separate_ places/checkouts
even, once for "work" and one for "release" that is not even added to any
IDE...

T

On Sun, Jul 30, 2023 at 11:59 PM Hervé Boutemy 
wrote:

> you probably rebuilt the release with "mvn install" = what you need to
> avoid
> and it seems the rebuild was done with an environment that did not give
> you the same output as the reference build
>
> FYI, I was able to rebuild Maven Resolver 1.9.14 with the same output as
> you
>
> https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/apache/maven/resolver/maven-resolver/README.md
>
> AFAIK, there is no reproduciblity issue nowadays with recent Bnd and/or
> Felix Bundle plugin
>
> Regards,
>
> Hervé
>
> Le samedi 29 juillet 2023, 15:19:12 CEST Tamás Cservenák a écrit :
> > Sure,
> >
> > Will do that, thanks.
> >
> > What I don't understand is how I got 2 different jars in the first place,
> > as i did not release twice (nor build from tag two times)...
> >
> > T
> >
> > On Sat, Jul 29, 2023, 11:58 Herve Boutemy  wrote:
> > > notice that you don't need to go to 3.9.5: rebuilding 3.9.4 from a
> clean
> > > local repository and Git checkout from tag with `mvn -Papache-release
> > > deploy` will do the job that has to be re-done
> > >
> > > Regards,
> > >
> > > Hervé
> > >
> > > On 2023/07/29 08:47:48 Tamás Cservenák wrote:
> > > > Am cancelling the vote due Herve -1
> > > >
> > > > Will need to figure out how this happened.
> > > >
> > > > T
> > >
> > > -
> > > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> > > For additional commands, e-mail: dev-h...@maven.apache.org
>
>
>
>
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> For additional commands, e-mail: dev-h...@maven.apache.org
>
>

Re: [CANCELED][VOTE] Release Apache Maven 3.9.4

[Hervé Boutemy]

you probably rebuilt the release with "mvn install" = what you need to avoid
and it seems the rebuild was done with an environment that did not give you the 
same output as the reference build

FYI, I was able to rebuild Maven Resolver 1.9.14 with the same output as you
https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/apache/maven/resolver/maven-resolver/README.md

AFAIK, there is no reproduciblity issue nowadays with recent Bnd and/or Felix 
Bundle plugin

Regards,

Hervé

Le samedi 29 juillet 2023, 15:19:12 CEST Tamás Cservenák a écrit :
> Sure,
> 
> Will do that, thanks.
> 
> What I don't understand is how I got 2 different jars in the first place,
> as i did not release twice (nor build from tag two times)...
> 
> T
> 
> On Sat, Jul 29, 2023, 11:58 Herve Boutemy  wrote:
> > notice that you don't need to go to 3.9.5: rebuilding 3.9.4 from a clean
> > local repository and Git checkout from tag with `mvn -Papache-release
> > deploy` will do the job that has to be re-done
> > 
> > Regards,
> > 
> > Hervé
> > 
> > On 2023/07/29 08:47:48 Tamás Cservenák wrote:
> > > Am cancelling the vote due Herve -1
> > > 
> > > Will need to figure out how this happened.
> > > 
> > > T
> > 
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> > For additional commands, e-mail: dev-h...@maven.apache.org





-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org

Re: [CANCELED][VOTE] Release Apache Maven 3.9.4

[Gary Gregory]

Or a Set.

Gary

On Sat, Jul 29, 2023, 11:37 AM Gary Gregory  wrote:

> Sounds like a Java Map implementation is used that does not preserve
> insertion order.
>
> Gary
>
>
> On Sat, Jul 29, 2023, 11:03 AM Tamás Cservenák 
> wrote:
>
>> Yes, you are right.
>>
>> Seems only the /META-INF/MANIFEST.MF differs, only the Export-Package and
>> Import-Package entries like their ordering is different?
>>
>>
>>
>> T
>>
>> On Sat, Jul 29, 2023, 15:28 Gary Gregory  wrote:
>>
>> > Maybe figuring out the exact difference between the jars will give you a
>> > hint?
>> >
>> > Gary
>> >
>> > On Sat, Jul 29, 2023, 9:19 AM Tamás Cservenák 
>> wrote:
>> >
>> > > Sure,
>> > >
>> > > Will do that, thanks.
>> > >
>> > > What I don't understand is how I got 2 different jars in the first
>> place,
>> > > as i did not release twice (nor build from tag two times)...
>> > >
>> > > T
>> > >
>> > > On Sat, Jul 29, 2023, 11:58 Herve Boutemy 
>> wrote:
>> > >
>> > > > notice that you don't need to go to 3.9.5: rebuilding 3.9.4 from a
>> > clean
>> > > > local repository and Git checkout from tag with `mvn
>> -Papache-release
>> > > > deploy` will do the job that has to be re-done
>> > > >
>> > > > Regards,
>> > > >
>> > > > Hervé
>> > > >
>> > > > On 2023/07/29 08:47:48 Tamás Cservenák wrote:
>> > > > > Am cancelling the vote due Herve -1
>> > > > >
>> > > > > Will need to figure out how this happened.
>> > > > >
>> > > > > T
>> > > > >
>> > > >
>> > > >
>> -
>> > > > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
>> > > > For additional commands, e-mail: dev-h...@maven.apache.org
>> > > >
>> > > >
>> > >
>> >
>>
>

Re: [CANCELED][VOTE] Release Apache Maven 3.9.4

[Gary Gregory]

Sounds like a Java Map implementation is used that does not preserve
insertion order.

Gary


On Sat, Jul 29, 2023, 11:03 AM Tamás Cservenák  wrote:

> Yes, you are right.
>
> Seems only the /META-INF/MANIFEST.MF differs, only the Export-Package and
> Import-Package entries like their ordering is different?
>
>
>
> T
>
> On Sat, Jul 29, 2023, 15:28 Gary Gregory  wrote:
>
> > Maybe figuring out the exact difference between the jars will give you a
> > hint?
> >
> > Gary
> >
> > On Sat, Jul 29, 2023, 9:19 AM Tamás Cservenák 
> wrote:
> >
> > > Sure,
> > >
> > > Will do that, thanks.
> > >
> > > What I don't understand is how I got 2 different jars in the first
> place,
> > > as i did not release twice (nor build from tag two times)...
> > >
> > > T
> > >
> > > On Sat, Jul 29, 2023, 11:58 Herve Boutemy  wrote:
> > >
> > > > notice that you don't need to go to 3.9.5: rebuilding 3.9.4 from a
> > clean
> > > > local repository and Git checkout from tag with `mvn -Papache-release
> > > > deploy` will do the job that has to be re-done
> > > >
> > > > Regards,
> > > >
> > > > Hervé
> > > >
> > > > On 2023/07/29 08:47:48 Tamás Cservenák wrote:
> > > > > Am cancelling the vote due Herve -1
> > > > >
> > > > > Will need to figure out how this happened.
> > > > >
> > > > > T
> > > > >
> > > >
> > > > -
> > > > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> > > > For additional commands, e-mail: dev-h...@maven.apache.org
> > > >
> > > >
> > >
> >
>

Re: [CANCELED][VOTE] Release Apache Maven 3.9.4

[Tamás Cservenák]

Yes, you are right.

Seems only the /META-INF/MANIFEST.MF differs, only the Export-Package and
Import-Package entries like their ordering is different?



T

On Sat, Jul 29, 2023, 15:28 Gary Gregory  wrote:

> Maybe figuring out the exact difference between the jars will give you a
> hint?
>
> Gary
>
> On Sat, Jul 29, 2023, 9:19 AM Tamás Cservenák  wrote:
>
> > Sure,
> >
> > Will do that, thanks.
> >
> > What I don't understand is how I got 2 different jars in the first place,
> > as i did not release twice (nor build from tag two times)...
> >
> > T
> >
> > On Sat, Jul 29, 2023, 11:58 Herve Boutemy  wrote:
> >
> > > notice that you don't need to go to 3.9.5: rebuilding 3.9.4 from a
> clean
> > > local repository and Git checkout from tag with `mvn -Papache-release
> > > deploy` will do the job that has to be re-done
> > >
> > > Regards,
> > >
> > > Hervé
> > >
> > > On 2023/07/29 08:47:48 Tamás Cservenák wrote:
> > > > Am cancelling the vote due Herve -1
> > > >
> > > > Will need to figure out how this happened.
> > > >
> > > > T
> > > >
> > >
> > > -
> > > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> > > For additional commands, e-mail: dev-h...@maven.apache.org
> > >
> > >
> >
>

Re: [CANCELED][VOTE] Release Apache Maven 3.9.4

[Gary Gregory]

Maybe figuring out the exact difference between the jars will give you a
hint?

Gary

On Sat, Jul 29, 2023, 9:19 AM Tamás Cservenák  wrote:

> Sure,
>
> Will do that, thanks.
>
> What I don't understand is how I got 2 different jars in the first place,
> as i did not release twice (nor build from tag two times)...
>
> T
>
> On Sat, Jul 29, 2023, 11:58 Herve Boutemy  wrote:
>
> > notice that you don't need to go to 3.9.5: rebuilding 3.9.4 from a clean
> > local repository and Git checkout from tag with `mvn -Papache-release
> > deploy` will do the job that has to be re-done
> >
> > Regards,
> >
> > Hervé
> >
> > On 2023/07/29 08:47:48 Tamás Cservenák wrote:
> > > Am cancelling the vote due Herve -1
> > >
> > > Will need to figure out how this happened.
> > >
> > > T
> > >
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> > For additional commands, e-mail: dev-h...@maven.apache.org
> >
> >
>

Re: [CANCELED][VOTE] Release Apache Maven 3.9.4

[Tamás Cservenák]

Sure,

Will do that, thanks.

What I don't understand is how I got 2 different jars in the first place,
as i did not release twice (nor build from tag two times)...

T

On Sat, Jul 29, 2023, 11:58 Herve Boutemy  wrote:

> notice that you don't need to go to 3.9.5: rebuilding 3.9.4 from a clean
> local repository and Git checkout from tag with `mvn -Papache-release
> deploy` will do the job that has to be re-done
>
> Regards,
>
> Hervé
>
> On 2023/07/29 08:47:48 Tamás Cservenák wrote:
> > Am cancelling the vote due Herve -1
> >
> > Will need to figure out how this happened.
> >
> > T
> >
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> For additional commands, e-mail: dev-h...@maven.apache.org
>
>

Re: [CANCELED][VOTE] Release Apache Maven 3.9.4

[Herve Boutemy]

notice that you don't need to go to 3.9.5: rebuilding 3.9.4 from a clean local 
repository and Git checkout from tag with `mvn -Papache-release deploy` will do 
the job that has to be re-done

Regards,

Hervé

On 2023/07/29 08:47:48 Tamás Cservenák wrote:
> Am cancelling the vote due Herve -1
> 
> Will need to figure out how this happened.
> 
> T
> 

-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org

[CANCELED][VOTE] Release Apache Maven 3.9.4

[Tamás Cservenák]

Am cancelling the vote due Herve -1

Will need to figure out how this happened.

T

Re: [VOTE] Release Apache Maven 3.9.4

[Herve Boutemy]

-1

Reproducible Build not ok: the binary release ships with a 
lib/maven-resolver-api-1.9.14.jar
 that is not the same as the reference one published on Maven Central
(surprisingly, other resolver jar are ok...)

Regards,

Hervé

On 2023/07/26 10:08:53 Tamás Cservenák wrote:
> Howdy,
> 
> We solved 3 issues:
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316922=12353369
> 
> There are still a couple of issues left in JIRA:
> https://issues.apache.org/jira/issues/?jql=project%20%3D%20MNG%20AND%20resolution%20%3D%20Unresolved
> 
> Staging repo:
> https://repository.apache.org/content/repositories/maven-1982
> 
> Dev dist directory:
> https://dist.apache.org/repos/dist/dev/maven/maven-3/3.9.4/
> 
> Source release checksums:
> apache-maven-3.9.4-src.zip sha512:
> 7a45cfd1f50e51246bbbeef769bf0c61ec08320ac260eed6b54ffce060a3186c99e902b3407ed9aa98fe02ad9b618b1bd2741275c05c7cdac24f0bc799d324e0
> 
> apache-maven-3.9.4-src.tar.gz sha512:
> 7a77f7e19c5165be8dd886ae06a52c6d6a94b1419917d2e035e937114c7cff5aea19d8ea3614485c1876185e70f4fbdd80b673f56f7d344fae75e51d62f3100c
> 
> Binary release checksums:
> apache-maven-3.9.4-bin.zip sha512:
> a72b9fa0da103f7ec432fcd548a67fe17006dfda459060ecace8935562aae59443eb96d373b7db9bf17c0876bb77650615507bab1f0ac8c0d830aaeea9743b9e
> 
> apache-maven-3.9.4-bin.tar.gz sha512:
> 0638f3410b6dc8fef4ced4e12098b455516802f6924add63362a6642f2531cf6c150f32f7adcbd1a46609b9919090a0f53a3a8835cbb31d65b600358cf2399f9
> 
> Staged site:
> https://maven.apache.org/ref/3-LATEST/
> 
> Draft for release notes:
> https://github.com/apache/maven-site/pull/442
> 
> Guide to testing staged releases:
> http://maven.apache.org/guides/development/guide-testing-releases.html
> 
> Vote open for 72h
> 
> [ ] +1
> [ ] +0
> [ ] -1
> 

-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org

Re: [VOTE] Release Apache Maven 3.9.4

[Delany]

+1

Delany


On Wed, 26 Jul 2023 at 12:09, Tamás Cservenák  wrote:

> Howdy,
>
> We solved 3 issues:
>
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316922=12353369
>
> There are still a couple of issues left in JIRA:
>
> https://issues.apache.org/jira/issues/?jql=project%20%3D%20MNG%20AND%20resolution%20%3D%20Unresolved
>
> Staging repo:
> https://repository.apache.org/content/repositories/maven-1982
>
> Dev dist directory:
> https://dist.apache.org/repos/dist/dev/maven/maven-3/3.9.4/
>
> Source release checksums:
> apache-maven-3.9.4-src.zip sha512:
>
> 7a45cfd1f50e51246bbbeef769bf0c61ec08320ac260eed6b54ffce060a3186c99e902b3407ed9aa98fe02ad9b618b1bd2741275c05c7cdac24f0bc799d324e0
>
> apache-maven-3.9.4-src.tar.gz sha512:
>
> 7a77f7e19c5165be8dd886ae06a52c6d6a94b1419917d2e035e937114c7cff5aea19d8ea3614485c1876185e70f4fbdd80b673f56f7d344fae75e51d62f3100c
>
> Binary release checksums:
> apache-maven-3.9.4-bin.zip sha512:
>
> a72b9fa0da103f7ec432fcd548a67fe17006dfda459060ecace8935562aae59443eb96d373b7db9bf17c0876bb77650615507bab1f0ac8c0d830aaeea9743b9e
>
> apache-maven-3.9.4-bin.tar.gz sha512:
>
> 0638f3410b6dc8fef4ced4e12098b455516802f6924add63362a6642f2531cf6c150f32f7adcbd1a46609b9919090a0f53a3a8835cbb31d65b600358cf2399f9
>
> Staged site:
> https://maven.apache.org/ref/3-LATEST/
>
> Draft for release notes:
> https://github.com/apache/maven-site/pull/442
>
> Guide to testing staged releases:
> http://maven.apache.org/guides/development/guide-testing-releases.html
>
> Vote open for 72h
>
> [ ] +1
> [ ] +0
> [ ] -1
>

Re: [VOTE] Release Apache Maven 3.9.4

[Slawomir Jaranowski]

+1

śr., 26 lip 2023 o 12:09 Tamás Cservenák  napisał(a):

> Howdy,
>
> We solved 3 issues:
>
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316922=12353369
>
> There are still a couple of issues left in JIRA:
>
> https://issues.apache.org/jira/issues/?jql=project%20%3D%20MNG%20AND%20resolution%20%3D%20Unresolved
>
> Staging repo:
> https://repository.apache.org/content/repositories/maven-1982
>
> Dev dist directory:
> https://dist.apache.org/repos/dist/dev/maven/maven-3/3.9.4/
>
> Source release checksums:
> apache-maven-3.9.4-src.zip sha512:
>
> 7a45cfd1f50e51246bbbeef769bf0c61ec08320ac260eed6b54ffce060a3186c99e902b3407ed9aa98fe02ad9b618b1bd2741275c05c7cdac24f0bc799d324e0
>
> apache-maven-3.9.4-src.tar.gz sha512:
>
> 7a77f7e19c5165be8dd886ae06a52c6d6a94b1419917d2e035e937114c7cff5aea19d8ea3614485c1876185e70f4fbdd80b673f56f7d344fae75e51d62f3100c
>
> Binary release checksums:
> apache-maven-3.9.4-bin.zip sha512:
>
> a72b9fa0da103f7ec432fcd548a67fe17006dfda459060ecace8935562aae59443eb96d373b7db9bf17c0876bb77650615507bab1f0ac8c0d830aaeea9743b9e
>
> apache-maven-3.9.4-bin.tar.gz sha512:
>
> 0638f3410b6dc8fef4ced4e12098b455516802f6924add63362a6642f2531cf6c150f32f7adcbd1a46609b9919090a0f53a3a8835cbb31d65b600358cf2399f9
>
> Staged site:
> https://maven.apache.org/ref/3-LATEST/
>
> Draft for release notes:
> https://github.com/apache/maven-site/pull/442
>
> Guide to testing staged releases:
> http://maven.apache.org/guides/development/guide-testing-releases.html
>
> Vote open for 72h
>
> [ ] +1
> [ ] +0
> [ ] -1
>


-- 
Sławomir Jaranowski

Re: [VOTE] Release Apache Maven 3.9.4

[Tamás Cservenák]

+1

On Wed, Jul 26, 2023 at 12:08 PM Tamás Cservenák 
wrote:

> Howdy,
>
> We solved 3 issues:
>
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316922=12353369
>
> There are still a couple of issues left in JIRA:
>
> https://issues.apache.org/jira/issues/?jql=project%20%3D%20MNG%20AND%20resolution%20%3D%20Unresolved
>
> Staging repo:
> https://repository.apache.org/content/repositories/maven-1982
>
> Dev dist directory:
> https://dist.apache.org/repos/dist/dev/maven/maven-3/3.9.4/
>
> Source release checksums:
> apache-maven-3.9.4-src.zip sha512:
>
> 7a45cfd1f50e51246bbbeef769bf0c61ec08320ac260eed6b54ffce060a3186c99e902b3407ed9aa98fe02ad9b618b1bd2741275c05c7cdac24f0bc799d324e0
>
> apache-maven-3.9.4-src.tar.gz sha512:
>
> 7a77f7e19c5165be8dd886ae06a52c6d6a94b1419917d2e035e937114c7cff5aea19d8ea3614485c1876185e70f4fbdd80b673f56f7d344fae75e51d62f3100c
>
> Binary release checksums:
> apache-maven-3.9.4-bin.zip sha512:
>
> a72b9fa0da103f7ec432fcd548a67fe17006dfda459060ecace8935562aae59443eb96d373b7db9bf17c0876bb77650615507bab1f0ac8c0d830aaeea9743b9e
>
> apache-maven-3.9.4-bin.tar.gz sha512:
>
> 0638f3410b6dc8fef4ced4e12098b455516802f6924add63362a6642f2531cf6c150f32f7adcbd1a46609b9919090a0f53a3a8835cbb31d65b600358cf2399f9
>
> Staged site:
> https://maven.apache.org/ref/3-LATEST/
>
> Draft for release notes:
> https://github.com/apache/maven-site/pull/442
>
> Guide to testing staged releases:
> http://maven.apache.org/guides/development/guide-testing-releases.html
>
> Vote open for 72h
>
> [ ] +1
> [ ] +0
> [ ] -1
>

Re: [VOTE] Release Apache Maven 3.9.4

[Tony Chemit]

+1 (non-binding)

Tested on several projects, looks good to me.

Thanks

Tony.
Le mer. 26 juil. 2023 à 12:08, Tamás Cservenák  
a écrit :

Howdy,

We solved 3 issues:
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316922=12353369

There are still a couple of issues left in JIRA:
https://issues.apache.org/jira/issues/?jql=project%20%3D%20MNG%20AND%20resolution%20%3D%20Unresolved

Staging repo:
https://repository.apache.org/content/repositories/maven-1982

Dev dist directory:
https://dist.apache.org/repos/dist/dev/maven/maven-3/3.9.4/

Source release checksums:
apache-maven-3.9.4-src.zip sha512:
7a45cfd1f50e51246bbbeef769bf0c61ec08320ac260eed6b54ffce060a3186c99e902b3407ed9aa98fe02ad9b618b1bd2741275c05c7cdac24f0bc799d324e0

apache-maven-3.9.4-src.tar.gz sha512:
7a77f7e19c5165be8dd886ae06a52c6d6a94b1419917d2e035e937114c7cff5aea19d8ea3614485c1876185e70f4fbdd80b673f56f7d344fae75e51d62f3100c

Binary release checksums:
apache-maven-3.9.4-bin.zip sha512:
a72b9fa0da103f7ec432fcd548a67fe17006dfda459060ecace8935562aae59443eb96d373b7db9bf17c0876bb77650615507bab1f0ac8c0d830aaeea9743b9e

apache-maven-3.9.4-bin.tar.gz sha512:
0638f3410b6dc8fef4ced4e12098b455516802f6924add63362a6642f2531cf6c150f32f7adcbd1a46609b9919090a0f53a3a8835cbb31d65b600358cf2399f9

Staged site:
https://maven.apache.org/ref/3-LATEST/

Draft for release notes:
https://github.com/apache/maven-site/pull/442

Guide to testing staged releases:
http://maven.apache.org/guides/development/guide-testing-releases.html

Vote open for 72h

[ ] +1
[ ] +0
[ ] -1

[VOTE] Release Apache Maven 3.9.4

[Tamás Cservenák]

Howdy,

We solved 3 issues:
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316922=12353369

There are still a couple of issues left in JIRA:
https://issues.apache.org/jira/issues/?jql=project%20%3D%20MNG%20AND%20resolution%20%3D%20Unresolved

Staging repo:
https://repository.apache.org/content/repositories/maven-1982

Dev dist directory:
https://dist.apache.org/repos/dist/dev/maven/maven-3/3.9.4/

Source release checksums:
apache-maven-3.9.4-src.zip sha512:
7a45cfd1f50e51246bbbeef769bf0c61ec08320ac260eed6b54ffce060a3186c99e902b3407ed9aa98fe02ad9b618b1bd2741275c05c7cdac24f0bc799d324e0

apache-maven-3.9.4-src.tar.gz sha512:
7a77f7e19c5165be8dd886ae06a52c6d6a94b1419917d2e035e937114c7cff5aea19d8ea3614485c1876185e70f4fbdd80b673f56f7d344fae75e51d62f3100c

Binary release checksums:
apache-maven-3.9.4-bin.zip sha512:
a72b9fa0da103f7ec432fcd548a67fe17006dfda459060ecace8935562aae59443eb96d373b7db9bf17c0876bb77650615507bab1f0ac8c0d830aaeea9743b9e

apache-maven-3.9.4-bin.tar.gz sha512:
0638f3410b6dc8fef4ced4e12098b455516802f6924add63362a6642f2531cf6c150f32f7adcbd1a46609b9919090a0f53a3a8835cbb31d65b600358cf2399f9

Staged site:
https://maven.apache.org/ref/3-LATEST/

Draft for release notes:
https://github.com/apache/maven-site/pull/442

Guide to testing staged releases:
http://maven.apache.org/guides/development/guide-testing-releases.html

Vote open for 72h

[ ] +1
[ ] +0
[ ] -1