We have fixed a few bugs and added enhancements since the release of
Apache Commons Codec 1.21.0, so I would like to release Apache Commons
Codec 1.22.0.
Apache Commons Codec 1.22.0 RC1 is available for review here:
https://dist.apache.org/repos/dist/dev/commons/codec/1.22.0-RC1
(svn revision 83910)
The Git tag commons-codec-1.22.0-RC1 commit for this RC is
81a6295f071df5819893422a397d94bc396f2edd, which you can browse here:
https://gitbox.apache.org/repos/asf?p=commons-codec.git;a=commit;h=81a6295f071df5819893422a397d94bc396f2edd
You may checkout this tag using:
git clone https://gitbox.apache.org/repos/asf/commons-codec.git
--branch commons-codec-1.22.0-RC1 commons-codec-1.22.0-RC1
Maven artifacts are here:
https://repository.apache.org/content/repositories/orgapachecommons-1929/commons-codec/commons-codec/1.22.0/
These are the artifacts and their hashes:
#Release SHA-512s
#Sun Apr 19 11:13:26 UTC 2026
commons-codec-1.22.0-bin.tar.gz=926f4ba7f156c5128855c554d513777a657df89dcf61a2cf3d8c56c73e1564e7fced4fd6cf3fcf23457108ab26daa54f8e279a47308dde881d69562aa83b298e
commons-codec-1.22.0-bin.zip=82c0a2a9b29e667e05b704b793fd7e60de1802104f056247d375f38027fff5c443844daf66da5339505c7b199b89248b7dfe2021e620f6a02e492003c9f6e292
commons-codec-1.22.0-bom.json=e718d66ec18330e97a874e2983b095b62742f10200bab720e015a353552579d3819112ef76ecce465ed86981e2c828d5bc9fae3da673ba79f505152bab9bc123
commons-codec-1.22.0-bom.xml=7e784fd9c9db8e9da4aa0a0f5fb2fa861c15db00b47b3713f8b629ee28cf795487a8c30ad8077756cc37130f089e1a2bb4dd54418ea7947bbcd481fe89db2637
commons-codec-1.22.0-javadoc.jar=c752d80e89367112d7cd937be337cbcc3f47032f4a416ed451773ffc1f868c5986044e252692753f6521641e6700f2dfb2927c07f480b42be54bfdec821b1d12
commons-codec-1.22.0-sources.jar=b53b8a9dec9a49cf2e5d3760845e58c1f5d16bd5285bc1c0d3dc19aa28457880b4de52c1775e13f678d3bb78520e79c617d2c8a03247310eec32ba2ed749cc44
commons-codec-1.22.0-src.tar.gz=480c1058c26bb376faf1f3acd91eae786be2ecf4fc363b99479db4cbe31c2be0777cba020afde1e64e07f7be8514b4b2cf18591e44bb93d8232551817be368ef
commons-codec-1.22.0-src.zip=ffe398f9c5d83051350e5d5d5066224264b69554e4ccbd950f20f83cd16f1cd593afdbe242a62141bfd4c2c1101b67ffbb2f979f593ca21e0f84e8d95bc10ff8
commons-codec-1.22.0-test-sources.jar=c19285601971bfe273a2d68a18ff7f59f592bfcdb510ff26ccc21e4437aa3c71e5bf99a3fe075938229aff212170ea7348a01908215a24f51da6fa051acc097b
commons-codec-1.22.0-tests.jar=028fcbbe6003630dcd26d0ab425b35a2d057b76bc0bb367959c2a6622ac1e54e715e052d968b18c46a74db8e887e03a5e4c7eb3722a3f92ab7addfc6e0aa8bcb
commons-codec_commons-codec-1.22.0.spdx.json=7a276fae79dbc53b11e8604da5e3c0b5abf5e519bff57cf827dce320605e8d49b6b14bb2e4dd92482ea05c399854d39fd00b9fc4e5783d8212463f418f820775
I have tested this with 'mvn' and 'mvn clean install site' using:
openjdk version "21.0.10" 2026-01-20
OpenJDK Runtime Environment Homebrew (build 21.0.10)
OpenJDK 64-Bit Server VM Homebrew (build 21.0.10, mixed mode, sharing)
Apache Maven 3.9.15 (98b2cdbfdb5f1ac8781f537ea9acccaed7922349)
Maven home: /opt/homebrew/Cellar/maven/3.9.15/libexec
Java version: 21.0.10, vendor: Homebrew, runtime:
/opt/homebrew/Cellar/openjdk@21/21.0.10/libexec/openjdk.jdk/Contents/Home
Default locale: en_US, platform encoding: UTF-8
OS name: "mac os x", version: "26.4.1", arch: "aarch64", family: "mac"
Darwin Garys-MacBook-Pro.local 25.4.0 Darwin Kernel Version 25.4.0:
Thu Mar 19 19:33:25 PDT 2026;
root:xnu-12377.101.15~1/RELEASE_ARM64_T6041 arm64
Docker version 29.4.0, build 9d7ad9f
Details of changes since 1.21.0 are in the release notes:
https://dist.apache.org/repos/dist/dev/commons/codec/1.22.0-RC1/RELEASE-NOTES.txt
https://dist.apache.org/repos/dist/dev/commons/codec/1.22.0-RC1/site/changes.html
Site:
https://dist.apache.org/repos/dist/dev/commons/codec/1.22.0-RC1/site/index.html
(Note some *relative* links are broken and the 1.22.0 directories
are not yet created - these will be OK once the site is deployed.)
JApiCmp Report (compared to 1.21.0):
https://dist.apache.org/repos/dist/dev/commons/codec/1.22.0-RC1/site/japicmp.html
RAT Report:
https://dist.apache.org/repos/dist/dev/commons/codec/1.22.0-RC1/site/rat-report.html
KEYS:
https://downloads.apache.org/commons/KEYS
Please review the release candidate and vote.
This vote will close no sooner than 72 hours from now.
[ ] +1 Release these artifacts
[ ] +0 OK, but...
[ ] -0 OK, but really should fix...
[ ] -1 I oppose this release because...
Thank you,
Gary Gregory,
Release Manager (using key 530AA5F25C25011F)
The following is intended as a helper and refresher for reviewers.
Validating a release candidate
==============================
These guidelines are NOT complete.
Requirements: Git, Java, and Maven.
You can validate a release from a release candidate (RC) tag as follows.
1a) Download and decompress the source archive from:
https://dist.apache.org/repos/dist/dev/commons/codec/1.22.0-RC1/source
1b) Check out the RC tag from git (optional)
This is optional, as a reviewer must at least check source distributions.
git clone https://gitbox.apache.org/repos/asf/commons-codec.git
--branch commons-codec-1.22.0-RC1 commons-codec-1.22.0-RC1
cd commons-codec-1.22.0-RC1
2) Checking the build
All components should include a default Maven goal, such that you can
run 'mvn' from the command line by itself.
2) Check Apache licenses
This step is not required if the site includes a RAT report page,
which you then must check.
This check should be included in the default Maven build, but you can
check it with:
mvn apache-rat:check
3) Check binary compatibility
This step is not required if the site includes a JApiCmp report page,
which you then must check.
This check should be included in the default Maven build, but you can
check it with:
mvn verify -DskipTests -P japicmp japicmp:cmp
4) Build the package
This check should be included in the default Maven build, but you can
check it with:
mvn -V clean package
You can record the Maven and Java version produced by -V in your VOTE reply.
To gather OS information from a command line:
Windows: ver
Linux: uname -a
4b) Check reproducibility
To check that a build is reproducible, run:
mvn clean verify artifact:compare -DskipTests
-Dreference.repo=https://repository.apache.org/content/repositories/staging/
'-Dbuildinfo.ignore=*/*.spdx.json'
Note that this excludes SPDX files from the check.
5) Build the site for a single module project
Note: Some plugins require the components to be installed instead of packaged.
mvn site
Check the site reports in:
- Windows: target\site\index.html
- Linux: target/site/index.html
-the end-
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
