All of the reproducibility issues can be explained per previous problems (i.e. lower groovy version on forge, etc). My verifications passed locally.
+1 (binding) On Mon, Aug 3, 2026 at 6:14 AM Mattias Reichel <[email protected]> wrote: > > Created https://github.com/apache/grails-core/pull/16090 for > backporting that reproducibility fix. > > Den mån 3 aug. 2026 kl 12:08 skrev Mattias Reichel <[email protected]>: > > > > My mistake, I used Java 21 to verify. > > > > Using Java 17 I get this instead, so I don't think > > https://github.com/apache/grails-core/pull/15978 was backported. > > > > Checking jar grails-profiles-base-7.0.15.jar... > > Extracting grails-profiles-base-7.0.15.jar > > Looking for build artifact grails-profiles-base-7.0.15.jar in > > /home/mattias/Projects/tmp/grails-core/download/grails/etc/bin/results > > ✅ First Artifact Found @ > > /home/mattias/Projects/tmp/grails-core/download/grails/etc/bin/results/first/grails-profiles-base-7.0.15.jar > > ✅ Second Artifact Found @ > > /home/mattias/Projects/tmp/grails-core/download/grails/etc/bin/results/second/grails-profiles-base-7.0.15.jar > > Extracting grails-profiles-base-7.0.15.jar from first to > > /home/mattias/Projects/tmp/grails-core/download/grails/etc/bin/results/firstArtifact > > ✅ First Artifact Extracted > > Extracting grails-profiles-base-7.0.15.jar from second to > > /home/mattias/Projects/tmp/grails-core/download/grails/etc/bin/results/secondArtifact > > ✅ Second Artifact Extracted > > ✅ Extracted grails-profiles-base-7.0.15.jar to firstArtifact and > > secondArtifact directories. > > Decompiling grails-profiles-base-7.0.15.jar class files... > > ❌ Verification failed. ❌ > > ❌ Verification failed. ❌ > > ❌ Reproducible Build verification failed (exit 1) > > > > Den mån 3 aug. 2026 kl 11:38 skrev Mattias Reichel <[email protected]>: > > > > > > +1 (binding) > > > > > > Got this that I'm not sure if I have seen before: > > > > > > Checking jar grails-cli-7.0.15-all.jar... > > > Extracting grails-cli-7.0.15-all.jar > > > Looking for build artifact grails-cli-7.0.15-all.jar in > > > /home/mattias/Projects/tmp/grails-core/download/grails/etc/bin/results > > > ✅ First Artifact Found @ > > > /home/mattias/Projects/tmp/grails-core/download/grails/etc/bin/results/first/grails-cli-7.0.15-all.jar > > > ✅ Second Artifact Found @ > > > /home/mattias/Projects/tmp/grails-core/download/grails/etc/bin/results/first/grails-cli-7.0.15-all.jar > > > Extracting grails-cli-7.0.15-all.jar from first to > > > /home/mattias/Projects/tmp/grails-core/download/grails/etc/bin/results/firstArtifact > > > ✅ First Artifact Extracted > > > Extracting grails-cli-7.0.15-all.jar from second to > > > /home/mattias/Projects/tmp/grails-core/download/grails/etc/bin/results/secondArtifact > > > ✅ Second Artifact Extracted > > > ✅ Extracted grails-cli-7.0.15-all.jar to firstArtifact and > > > secondArtifact directories. > > > Decompiling grails-cli-7.0.15-all.jar class files... > > > ❌ Verification failed. ❌ > > > ❌ Verification failed. ❌ > > > ❌ Reproducible Build verification failed (exit 1) > > > > > > > > > Den mån 3 aug. 2026 kl 01:42 skrev James Fredley > > > <[email protected]>: > > > > > > > > > > > > Hi Everyone, > > > > > > > > I am happy to start the VOTE thread to release Apache Grails 7.0.15! > > > > > > > > > > > > Release notes for the release are here: > > > > https://github.com/apache/grails-core/releases/tag/v7.0.15 > > > > > > > > The tag for this release is: > > > > https://github.com/apache/grails-core/releases/tag/v7.0.15 > > > > Tag commit id: 8c6476c17e39ff85a3c4057dbc928049e45f2a9d > > > > > > > > The artifacts to be voted on are located as follows (r86463): > > > > Source release: > > > > https://dist.apache.org/repos/dist/dev/grails/core/7.0.15/sources > > > > Binary distributions: > > > > https://dist.apache.org/repos/dist/dev/grails/core/7.0.15/distribution > > > > > > > > Release artifacts are signed with a key from the following file: > > > > https://dist.apache.org/repos/dist/release/grails/KEYS > > > > > > > > Please vote on releasing this package as: Apache Grails 7.0.15. > > > > > > > > Reminder on ASF release approval requirements for PMC members: > > > > https://www.apache.org/legal/release-policy.html#release-approval > > > > > > > > Hints on validating checksums/signatures (but replace md5sum with > > > > sha512sum): > > > > https://www.apache.org/info/verification.html > > > > > > > > Details of our release process are documented at: > > > > https://github.com/apache/grails-core/blob/HEAD/RELEASE.md > > > > > > > > As a reminder, most of our tools support an env `GRAILS_REPO_URL` so > > > > that the tools can work with staged artefacts. Set it to the staging > > > > repo like this: `export > > > > GRAILS_REPO_URL=https://repository.apache.org/content/groups/staging` > > > > > > > > The vote is open for a minimum of 72 hours and passes if a majority > > > > of at least > > > > three +1 PMC votes are cast. > > > > > > > > [ ] +1 Release Apache Grails 7.0.15 > > > > [ ] 0 I don't have a strong opinion about this, but I assume it's ok > > > > [ ] -1 Do not release Apache Grails 7.0.15 because... > > > > > > > > Here is my vote: > > > > > > > > +1 (binding) > > > > > > > > James Fredley
