On 2025/11/26 09:25:34 "Piotr P. Karwasz" wrote: > Hi Gary, > > On 21.11.2025 14:31, Gary Gregory wrote: > > Please review the release candidate and vote. > > This vote will close no sooner than 72 hours from now. > > > > [ ] +1 Release these artifacts > > [ ] +0 OK, but... > > [ ] -0 OK, but really should fix... > > [ ] -1 I oppose this release because... > > > +1 (binding), release the artifacts. > > I've performed the following checks: > > - Checksums: All verified successfully. > - Signatures: All valid, but signed with your GPG key 86FDC7E2A11262CB, > not the one mentioned in the email.
Hi Piotr, Thank you for the heads up. I fixed my local setup to use my current (stronger) key. Gary > - Unit tests: All tests pass. > - Reproducibility: Verified using JDK 21 and TZ=UTC. Binaries reproduce > correctly, but the SBOM lists incorrect checksums for commons- > lang3:3.20.0, commons-codec:1.20.0, and commons-io:2.21.0. > > Maybe you have previous RCs installed on the machine used for > releases? > - Japicmp report: All API changes are reflected in the changelog. > > > > Gary Gregory, > > Release Manager (using key 530AA5F25C25011F) > > Could you update the email footer to reference key 86FDC7E2A11262CB, > which you are effectively using? > > Best, > Piotr > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > > --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
