On Fri, Dec 5, 2025 at 12:38 AM Piotr P. Karwasz <[email protected]> wrote: > > Hi Gary, > > On 4.12.2025 17:06, Gary Gregory wrote: > > Please review the release candidate and vote. > > This vote will close no sooner than 72 hours from now. > > > > [ ] +1 Release these artifacts > > [ ] +0 OK, but... > > [ ] -0 OK, but really should fix... > > [ ] -1 I oppose this release because... > > > I performed the following checks: > > - Verified the checksums of the artifacts. > - Verified the signatures on the artifacts. > - Ran the test suite: > Tests run: 1838 > Failures: 0 > Errors: 0 > Skipped: 3 > - Verified reproducibility with JDK 25 and timezone set to UTC. The > binaries are reproducible, but the SBOM contains incorrect checksums > for `commons-lang3` version `3.20.0`, likely due to a trailing RC in > your local Maven repository.
Do you think the only way to fix that is to delete my whole local Maven repo before an RC? > - Verified the japicmp report against the release notes. A small note: > `RELEASE-NOTES.txt` is served as ISO-8859-1 (the HTTP default), so the > Hangul characters in 김민재’s name appear distorted. Yeah, not sure what to do there. > - Verified the RAT report: the three files with unapproved licenses are > two binary fuzzing blobs and a CSV file. The latter could potentially > receive a license. Fixed in git master. TY! Gary > > Overall, +1: release the artifacts. > > Piotr > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
