[RESULT][VOTE] Release Apache Maven 3.9.5

2023-10-04 Thread Tamás Cservenák
Howdy, The vote has passed with the following result: +1: Michael, Karl-Heinz, Slawomir, Arnaud, Herve, Sylwester +1nb: Romain, Henning PMC quorum: reached I will promote the source release zip file to the Apache distribution area and the artifacts to the central repo. T

Re: [VOTE] Release Apache Maven 3.9.5

2023-10-04 Thread Tamás Cservenák
Howdy, Thanks Herve, but Karl was talking about SHA512 checksums, albeit unclear is it bin or src... And the signature probably changed probably due TS (as what was signed and by whom was signed was byte-wise same, only when was signed differs) T On Wed, Oct 4, 2023 at 8:10 AM Hervé Boutemy

Re: [VOTE] Release Apache Maven 3.9.5

2023-10-04 Thread Hervé Boutemy
I updated my svn and ran: for f in * do rm $f wget https://repository.apache.org/content/repositories/maven-1996/org/apache/maven/apache-maven/3.9.5/$f done both in source and binaries: this resulted in .asc change in source only, everything else was ok I committed the update now we

Re: [VOTE] Release Apache Maven 3.9.5

2023-10-03 Thread Sylwester Lachiewicz
+1 pon., 2 paź 2023, 23:50 użytkownik Herve Boutemy napisał: > +1 > > Reproducible Builds now ok: reference build done with JDK 17 on *nix and > umask 022 > > and dist area in sync > > thank you > > Hervé > > On 2023/10/02 17:37:26 Tamás Cservenák wrote: > > Howdy, > > > > The vote continues,

Re: [VOTE] Release Apache Maven 3.9.5

2023-10-03 Thread Tamás Cservenák
Karl, Are you sure your SVN checkout is up to date? As I did change archives along with signatures and checksums, and they should be OK This is the commit email of my change: https://lists.apache.org/thread/7wn1sgd7hbcndtgypvjz4qzx0d2brobx Can someone else verify this? Thanks T On Tue, Oct 3,

Re: [VOTE] Release Apache Maven 3.9.5

2023-10-03 Thread Karl Heinz Marbaise
Hi, the permissions in the .tar.gz archive are Ok now. Please update the SHA512 because it's the previous one..(I've checked the .tar.gz) but I assume that the SHA512 for the -bin.zip has changed also)... https://dist.apache.org/repos/dist/dev/maven/maven-3/3.9.5/binaries/ Kind regards Karl

Re: [VOTE] Release Apache Maven 3.9.5

2023-10-02 Thread Olivier Lamy
+1 tested with various projects no issue found. thanks! On Mon, 2 Oct 2023 at 05:07, Tamás Cservenák wrote: > > Howdy, > > Note: This release completes the main goals of Maven 3.9.x lineage, among > others moving to Java 8 and transition to latest Resolver 1.9.x features > (new robust

Re: [VOTE] Release Apache Maven 3.9.5

2023-10-02 Thread Henning Schmiedehausen
+1 Eyeballed it and did some basic testing on MacOS. All seems good here. -h On Sun, Oct 1, 2023 at 12:07 PM Tamás Cservenák wrote: > Howdy, > > Note: This release completes the main goals of Maven 3.9.x lineage, among > others moving to Java 8 and transition to latest Resolver 1.9.x

Re: [VOTE] Release Apache Maven 3.9.5

2023-10-02 Thread Herve Boutemy
+1 Reproducible Builds now ok: reference build done with JDK 17 on *nix and umask 022 and dist area in sync thank you Hervé On 2023/10/02 17:37:26 Tamás Cservenák wrote: > Howdy, > > The vote continues, as Herve -1 was ONLY about binaries, while the vote is > about source bundles. > > The

Re: [VOTE] Release Apache Maven 3.9.5

2023-10-02 Thread Arnaud Héritier
+1 On Mon, Oct 2, 2023 at 8:03 PM Slawomir Jaranowski wrote: > +1 > > Now permissions in binary distributions look ok. > Please also update in dist/dev > > pon., 2 paź 2023 o 19:38 Tamás Cservenák napisał(a): > > > Howdy, > > > > The vote continues, as Herve -1 was ONLY about binaries, while

Re: [VOTE] Release Apache Maven 3.9.5

2023-10-02 Thread Slawomir Jaranowski
+1 Now permissions in binary distributions look ok. Please also update in dist/dev pon., 2 paź 2023 o 19:38 Tamás Cservenák napisał(a): > Howdy, > > The vote continues, as Herve -1 was ONLY about binaries, while the vote is > about source bundles. > > The "take two" repository staged: >

Re: [VOTE] Release Apache Maven 3.9.5

2023-10-02 Thread Tamás Cservenák
Howdy, The vote continues, as Herve -1 was ONLY about binaries, while the vote is about source bundles. The "take two" repository staged: https://repository.apache.org/content/repositories/maven-1996/ That repositository is identical to maven-1995, ONLY changes are the fixed binaries (hence,

Re: [VOTE] Release Apache Maven 3.9.5

2023-10-02 Thread Hervé Boutemy
yes, you can drop the staging repository and re-deploy: only the 2 -bin archives will be different Regards Hervé Le lundi 2 octobre 2023, 11:10:36 CEST Tamás Cservenák a écrit : > Bah, > > This is the same problem as before... but originally it happened on my > desktop. This time the release

Re: [VOTE] Release Apache Maven 3.9.5

2023-10-02 Thread Karl Heinz Marbaise
Hi, +1 from me... with the exceptions as Hervé mentioned (permissions on the wagon jars and httpclient jar)... and the points Gary mentioned. Kind regards Karl Heinz Marbaise On 01.10.23 21:07, Tamás Cservenák wrote: Howdy, Note: This release completes the main goals of Maven 3.9.x

Re: [VOTE] Release Apache Maven 3.9.5

2023-10-02 Thread Tamás Cservenák
Bah, This is the same problem as before... but originally it happened on my desktop. This time the release was done from my laptop :( I believe the fix is the same as before: I should rebuild from the tag, after I fixed my local repository, as source bundles we vote on are unchanged... T On

Re: [VOTE] Release Apache Maven 3.9.5

2023-10-02 Thread Herve Boutemy
thinking twice, I need to change to -1: this may impact users that expect to use the group permissions to use Maven binaries sorry I don't know what tests you are doing with permissions on your environment, but these tests leak releases :( Regards, Hervé On 2023/10/02 07:11:02 Herve Boutemy

Re: [VOTE] Release Apache Maven 3.9.5

2023-10-02 Thread Herve Boutemy
+1 but Reproducible not fully ok: reference build done with JDK 17 on *nix and umask 022 apache-maven-3.9.5-bin.zip and .tar.gz suffer from weird umask (go-r) on wagon jars: $ diffoscope target/reference/org.apache.maven/apache-maven-3.9.5-bin.zip

Re: [VOTE] Release Apache Maven 3.9.5

2023-10-01 Thread Romain Manni-Bucau
+1 (works on tested projects and aligned with discussions) Le lun. 2 oct. 2023 à 00:32, Gary Gregory a écrit : > Understood and thank you for the clarification. Seeing the original in a > VOTE thread gave it top much attention IMO. > > Gary > > On Sun, Oct 1, 2023, 4:13 PM Tamás Cservenák

Re: [VOTE] Release Apache Maven 3.9.5

2023-10-01 Thread Gary Gregory
Understood and thank you for the clarification. Seeing the original in a VOTE thread gave it top much attention IMO. Gary On Sun, Oct 1, 2023, 4:13 PM Tamás Cservenák wrote: > Howdy, > > Yes, I agree. > > To rephrase, i meant more like "our focus should be Maven4", meaning, that > IMHO we

Re: [VOTE] Release Apache Maven 3.9.5

2023-10-01 Thread Tamás Cservenák
Howdy, Yes, I agree. To rephrase, i meant more like "our focus should be Maven4", meaning, that IMHO we should not push new features into 3 anymore (similarly in resolver, all the new features like HTTP/2 are "parked" for resolver 2 [to be used with Maven 4]). I did not say "no more 3.x

Re: [VOTE] Release Apache Maven 3.9.5

2023-10-01 Thread Gary Gregory
>From the peanut gallery, it feels odd to call anything 3.x in maintenance mode when there is not a 4.0. Gary On Sun, Oct 1, 2023, 3:08 PM Tamás Cservenák wrote: > Howdy, > > Note: This release completes the main goals of Maven 3.9.x lineage, among > others moving to Java 8 and transition to

Re: [VOTE] Release Apache Maven 3.9.5

2023-10-01 Thread Michael Osipov
Am 2023-10-01 um 21:07 schrieb Tamás Cservenák: Howdy, Note: This release completes the main goals of Maven 3.9.x lineage, among others moving to Java 8 and transition to latest Resolver 1.9.x features (new robust transports, local repository locking, provided checksums, remote repository

[VOTE] Release Apache Maven 3.9.5

2023-10-01 Thread Tamás Cservenák
Howdy, Note: This release completes the main goals of Maven 3.9.x lineage, among others moving to Java 8 and transition to latest Resolver 1.9.x features (new robust transports, local repository locking, provided checksums, remote repository filtering and more). Maven Resolver 1.9.x lineage is