Hi Gary, On 21.11.2025 14:31, Gary Gregory wrote: > Please review the release candidate and vote. > This vote will close no sooner than 72 hours from now. > > [ ] +1 Release these artifacts > [ ] +0 OK, but... > [ ] -0 OK, but really should fix... > [ ] -1 I oppose this release because...
+1 (binding), release the artifacts. I've performed the following checks: - Checksums: All verified successfully. - Signatures: All valid, but signed with your GPG key 86FDC7E2A11262CB, not the one mentioned in the email. - Unit tests: All tests pass. - Reproducibility: Verified using JDK 21 and TZ=UTC. Binaries reproduce correctly, but the SBOM lists incorrect checksums for commons- lang3:3.20.0, commons-codec:1.20.0, and commons-io:2.21.0. Maybe you have previous RCs installed on the machine used for releases? - Japicmp report: All API changes are reflected in the changelog. > Gary Gregory, > Release Manager (using key 530AA5F25C25011F) Could you update the email footer to reference key 86FDC7E2A11262CB, which you are effectively using? Best, Piotr --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
