+0 could not rebuild the release and get the exact same output, as previous releases https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/apache/commons/commons-daemon/README.md
not a blocker, I'll just ask a few questions on key differences between reference output and my build output, so we can define if there is some easy change to do in the future: 1. reference commons-daemon-1.5.1-native-src.tar.gz (and other sources) contain │ │ --rwx------ 0 root (0) root (0) 49482 2025-12-11 12:00:00.000000 commons-daemon-1.5.1-native-src/unix/support/config.guess │ │ --rwx------ 0 root (0) root (0) 35406 2025-12-11 12:00:00.000000 commons-daemon-1.5.1-native-src/unix/support/config.sub │ │ --rwxr-xr-x 0 root (0) root (0) 147746 2025-12-11 12:00:00.000000 commons-daemon-1.5.1-native-src/unix/configure are these 3 files expected to be in the archive, they are not in Git: https://github.com/apache/commons-daemon/tree/master/src/native/unix 2. commons-daemon-1.5.1-javadoc.jar contain legal/ADDITIONAL_LICENSE_INFO and legal/LICENSE that I don't have in my rebuild: is there a way to get them built? a Maven profile? 3. commons-daemon-1.5.1-bin-windows.zip contain: │ --rwxr-xr-x 2.0 unx 155544 b- defN 25-Dec-11 12:00 amd64/prunsrv.exe │ --rwxr-xr-x 2.0 unx 186776 b- defN 25-Dec-11 12:00 prunmgr.exe │ --rwxr-xr-x 2.0 unx 127896 b- defN 25-Dec-11 12:00 prunsrv.exe that i don't get in my rebuild: is there a way to get them built? a Maven profile? nothing blocker, just the right time during the vote to see what is just an improvement of build instructions, what is just a future small fix Regards, Hervé On 2025/12/11 15:13:25 Mark Thomas wrote: > The binaries for windows included with Apache Commons Daemon 1.5.0 had > an unexpected dependency on the Visual C Runtime so I would like to > release Apache Commons Daemon 1.5.1 which fixes the build issue that > caused the dependency. > > Apache Commons Daemon 1.5.1 RC1 is available for review here: > https://dist.apache.org/repos/dist/dev/commons/daemon/1.5.1-RC1 > (svn revision 81311) > > The Git tag commons-daemon-1.5.1-RC1 commit for this RC is > 875c32118cb3b4d467c2660de076b36452f14e76 which you can browse here: > > https://gitbox.apache.org/repos/asf?p=commons-daemon.git;a=commit;h=875c32118cb3b4d467c2660de076b36452f14e76 > You may checkout this tag using: > git clone https://gitbox.apache.org/repos/asf/commons-daemon.git > --branch commons-daemon-1.5.1-RC1 commons-daemon-1.5.1-RC1 > > Maven artifacts are here: > > https://repository.apache.org/content/repositories/orgapachecommons-1889/commons-daemon/commons-daemon/1.5.1/ > > These are the artifacts and their hashes: > > #Release SHA-512s > #Thu Dec 11 14:35:15 GMT 2025 > commons-daemon-1.5.1-bin-windows.zip=26cef55a0237aab449d2133e56815393729c3965c6fd063326bccdb569be91ddfe500b247ba3df3e9baac511452825d3d0333d165abd24932717a372a294a463 > commons-daemon-1.5.1-bin.tar.gz=740b832b8a7b5df8f2aa8029cf6ee88b8be6f4f5e42e34587a70bbf2cbe5b7e7dd75da375d2f3f1f7f2e6a5d89b5ceba5433499773852df67e8bbeb88b466786 > commons-daemon-1.5.1-bin.zip=06d9037425d3e4bd417a5f86e6613f04ce0aa246714e169ad51a3118977e4c22badd97311683631c5a55c54011bf797cf355a6dc805d5aef4125f244dc1e8141 > commons-daemon-1.5.1-bom.json=0af0d4fabfbfe615329217a9c9b882f3af194632b7ce2e0cd8e9495b70f62896c196a3c5eaf506fc391a0b21acf58d76cfa145425a794cc082e50f208ac88bee > commons-daemon-1.5.1-bom.xml=a03b6604c0da38166e56bd0ba575abbc68017f810cd47b80447f92e6553c541abf7ac08322a2e366d212fba8cc4703f22c936971fa03ff5becbce49fdb1af4d2 > commons-daemon-1.5.1-javadoc.jar=2a5676fce651f3c1e1ed01c8fc6b68631bcca1b28ebe0f474ef0646aa9526d549c4c6594e6de5a714148395da532726b28aa979227f23a5be32a5c4b33ebdcfd > commons-daemon-1.5.1-native-src.tar.gz=ced2238b4fb47a208e7c9aa435e7981b5d42fd9e07d11d7f72da2b7239c388a3b7d6b7ce3424624aecfbe7a8471ee316cdd46a040fadb129096705fa3325129b > commons-daemon-1.5.1-native-src.zip=8666be98b466fa9176e46d0a515f303714f274830df012dc69372ef8dc83d8b99511b518601f266fb851333cba4ca4cc8b98998f20655347f1cc9a21809d1f9d > commons-daemon-1.5.1-sources.jar=1b0b7c1a904efe9922e13617931f7391170ea53898218a8b59233c8d6833002755b741fcbb4fa662b8f31c75fa577d97d2a4075d6bd5b0b0cc11ddc6b06ee306 > commons-daemon-1.5.1-src.tar.gz=7d2b0c8a4ac8241b2f561e12f3731ecd7d7b828242fdeafa509653d92f4838fe24a0a7b6b361684b7f707eb3044ded79d789878bbe89e04b883c2197f5a36652 > commons-daemon-1.5.1-src.zip=15f0567570ec8ea2532b23e161be9813dcb774b7227c9478369cd53c6a872c290fbb7008756aedd2ae2efbf820aa131c4f99f47713df9f7d5a0f4bd5ed9a8add > commons-daemon-1.5.1-test-sources.jar=1c584611730284565d67a6533194023e10479bdcec17a47a413e2f2992e4cbeff234826a79e3b964cb11f158fe5bf93f80819101f5f90832cae7053d5859b123 > commons-daemon-1.5.1-tests.jar=f826ef79b5f2b1d4e82ac96ff042f7b05759c217c5491515a919826cd5a596d539c01da18baf97a6bbbe5215f50c24bad490e1630c90d125b27c62d395b4c960 > commons-daemon_commons-daemon-1.5.1.spdx.json=13d9c97b162cbe71ab8360f3b58ae2556becdab7a13de5ecb0ad307cb3e6b8e0f30b4e0cf5faca8e1b7f0090c65765e22b13ce095a95b5fdddcaccb638a5b812 > > > Details of changes since 1.5.0 are in the release notes: > > https://dist.apache.org/repos/dist/dev/commons/daemon/1.5.1-RC1/RELEASE-NOTES.txt > > https://dist.apache.org/repos/dist/dev/commons/daemon/1.5.1-RC1/site/changes.html > > Site: > > https://dist.apache.org/repos/dist/dev/commons/daemon/1.5.1-RC1/site/index.html > (note some *relative* links are broken and the 1.5.1 directories > are not yet created - these will be OK once the site is deployed.) > > JApiCmp Report (compared to 1.5.0): > > https://dist.apache.org/repos/dist/dev/commons/daemon/1.5.1-RC1/site/japicmp.html > > RAT Report: > > https://dist.apache.org/repos/dist/dev/commons/daemon/1.5.1-RC1/site/rat-report.html > > KEYS: > https://downloads.apache.org/commons/KEYS > > Please review the release candidate and vote. > This vote will close no sooner than 72 hours from now. > > [ ] +1 Release these artifacts > [ ] +0 OK, but... > [ ] -0 OK, but really should fix... > [ ] -1 I oppose this release because... > > Thank you, > > Mark Thomas, > Release Manager (using key 10C01C5A2F6059E7) > > > > The following is intended as a helper and refresher for reviewers. > > Validating a release candidate > ============================== > > These guidelines are NOT complete. > > Requirements: Git, Java, and Maven. > > You can validate a release from a release candidate (RC) tag as follows. > > 1a) Download and decompress the source archive from: > > https://dist.apache.org/repos/dist/dev/commons/daemon/1.5.1-RC1/source > > 1b) Check out the RC tag from git (optional) > > This is optional, as a reviewer must check source distributions as a > minimum. > > git clone https://gitbox.apache.org/repos/asf/commons-daemon.git > --branch commons-daemon-1.5.1-RC1 commons-daemon-1.5.1-RC1 > cd commons-daemon-1.5.1-RC1 > > 2) Checking the build > > All components should include a default Maven goal, such that you can > run 'mvn' from the command line by itself. > > 2) Check Apache licenses > > This step is not required if the site includes a RAT report page which > you then must check. > This check should be included in the default Maven build, but you can > check it with: > > mvn apache-rat:check > > 3) Check binary compatibility > > This step is not required if the site includes a JApiCmp report page > which you then must check. > This check should be included in the default Maven build, but you can > check it with: > > mvn verify -DskipTests -P japicmp japicmp:cmp > > 4) Build the package > > This check should be included in the default Maven build, but you can > check it with: > > mvn -V clean package > > You can record the Maven and Java version produced by -V in your VOTE reply. > To gather OS information from a command line: > Windows: ver > Linux: uname -a > > 4b) Check reproducibility > > To check that a build is reproducible, run: > > mvn clean verify artifact:compare -DskipTests > -Dreference.repo=https://repository.apache.org/content/repositories/staging/ > '-Dbuildinfo.ignore=*/*.spdx.json' > > Note that this excludes SPDX files from the check. > > 5) Build the site for a single module project > > Note: Some plugins require the components to be installed instead of > packaged. > > mvn site > Check the site reports in: > - Windows: target\site\index.html > - Linux: target/site/index.html > > 6) Build the site for a multi-module project > > mvn site > mvn site:stage > Check the site reports in: > - Windows: target\site\index.html > - Linux: target/site/index.html > > Note that the project reports are created for each module. > Modules can be accessed using the 'Project Modules' link under > the 'Project Information' menu (see <path-to-site>/modules.html). > > -the end- > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > > --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
