My +1 Gary
On Sun, Apr 19, 2026, 07:19 Gary Gregory <[email protected]> wrote: > We have fixed a few bugs and added enhancements since the release of > Apache Commons Codec 1.21.0, so I would like to release Apache Commons > Codec 1.22.0. > > Apache Commons Codec 1.22.0 RC1 is available for review here: > https://dist.apache.org/repos/dist/dev/commons/codec/1.22.0-RC1 > (svn revision 83910) > > The Git tag commons-codec-1.22.0-RC1 commit for this RC is > 81a6295f071df5819893422a397d94bc396f2edd, which you can browse here: > > https://gitbox.apache.org/repos/asf?p=commons-codec.git;a=commit;h=81a6295f071df5819893422a397d94bc396f2edd > You may checkout this tag using: > git clone https://gitbox.apache.org/repos/asf/commons-codec.git > --branch <https://gitbox.apache.org/repos/asf/commons-codec.git--branch> > commons-codec-1.22.0-RC1 commons-codec-1.22.0-RC1 > > Maven artifacts are here: > > https://repository.apache.org/content/repositories/orgapachecommons-1929/commons-codec/commons-codec/1.22.0/ > > These are the artifacts and their hashes: > > #Release SHA-512s > #Sun Apr 19 11:13:26 UTC 2026 > > commons-codec-1.22.0-bin.tar.gz=926f4ba7f156c5128855c554d513777a657df89dcf61a2cf3d8c56c73e1564e7fced4fd6cf3fcf23457108ab26daa54f8e279a47308dde881d69562aa83b298e > > commons-codec-1.22.0-bin.zip=82c0a2a9b29e667e05b704b793fd7e60de1802104f056247d375f38027fff5c443844daf66da5339505c7b199b89248b7dfe2021e620f6a02e492003c9f6e292 > > commons-codec-1.22.0-bom.json=e718d66ec18330e97a874e2983b095b62742f10200bab720e015a353552579d3819112ef76ecce465ed86981e2c828d5bc9fae3da673ba79f505152bab9bc123 > > commons-codec-1.22.0-bom.xml=7e784fd9c9db8e9da4aa0a0f5fb2fa861c15db00b47b3713f8b629ee28cf795487a8c30ad8077756cc37130f089e1a2bb4dd54418ea7947bbcd481fe89db2637 > > commons-codec-1.22.0-javadoc.jar=c752d80e89367112d7cd937be337cbcc3f47032f4a416ed451773ffc1f868c5986044e252692753f6521641e6700f2dfb2927c07f480b42be54bfdec821b1d12 > > commons-codec-1.22.0-sources.jar=b53b8a9dec9a49cf2e5d3760845e58c1f5d16bd5285bc1c0d3dc19aa28457880b4de52c1775e13f678d3bb78520e79c617d2c8a03247310eec32ba2ed749cc44 > > commons-codec-1.22.0-src.tar.gz=480c1058c26bb376faf1f3acd91eae786be2ecf4fc363b99479db4cbe31c2be0777cba020afde1e64e07f7be8514b4b2cf18591e44bb93d8232551817be368ef > > commons-codec-1.22.0-src.zip=ffe398f9c5d83051350e5d5d5066224264b69554e4ccbd950f20f83cd16f1cd593afdbe242a62141bfd4c2c1101b67ffbb2f979f593ca21e0f84e8d95bc10ff8 > > commons-codec-1.22.0-test-sources.jar=c19285601971bfe273a2d68a18ff7f59f592bfcdb510ff26ccc21e4437aa3c71e5bf99a3fe075938229aff212170ea7348a01908215a24f51da6fa051acc097b > > commons-codec-1.22.0-tests.jar=028fcbbe6003630dcd26d0ab425b35a2d057b76bc0bb367959c2a6622ac1e54e715e052d968b18c46a74db8e887e03a5e4c7eb3722a3f92ab7addfc6e0aa8bcb > > commons-codec_commons-codec-1.22.0.spdx.json=7a276fae79dbc53b11e8604da5e3c0b5abf5e519bff57cf827dce320605e8d49b6b14bb2e4dd92482ea05c399854d39fd00b9fc4e5783d8212463f418f820775 > > > I have tested this with 'mvn' and 'mvn clean install site' using: > > openjdk version "21.0.10" 2026-01-20 > OpenJDK Runtime Environment Homebrew (build 21.0.10) > OpenJDK 64-Bit Server VM Homebrew (build 21.0.10, mixed mode, sharing) > > Apache Maven 3.9.15 (98b2cdbfdb5f1ac8781f537ea9acccaed7922349) > Maven home: /opt/homebrew/Cellar/maven/3.9.15/libexec > Java version: 21.0.10, vendor: Homebrew, runtime: > /opt/homebrew/Cellar/openjdk@21/21.0.10/libexec/openjdk.jdk/Contents/Home > Default locale: en_US, platform encoding: UTF-8 > OS name: "mac os x", version: "26.4.1", arch: "aarch64", family: "mac" > > Darwin Garys-MacBook-Pro.local 25.4.0 Darwin Kernel Version 25.4.0: > Thu Mar 19 19:33:25 PDT 2026; > root:xnu-12377.101.15~1/RELEASE_ARM64_T6041 arm64 > > Docker version 29.4.0, build 9d7ad9f > > > Details of changes since 1.21.0 are in the release notes: > > https://dist.apache.org/repos/dist/dev/commons/codec/1.22.0-RC1/RELEASE-NOTES.txt > > https://dist.apache.org/repos/dist/dev/commons/codec/1.22.0-RC1/site/changes.html > > Site: > > https://dist.apache.org/repos/dist/dev/commons/codec/1.22.0-RC1/site/index.html > (Note some *relative* links are broken and the 1.22.0 directories > are not yet created - these will be OK once the site is deployed.) > > JApiCmp Report (compared to 1.21.0): > > https://dist.apache.org/repos/dist/dev/commons/codec/1.22.0-RC1/site/japicmp.html > > RAT Report: > > https://dist.apache.org/repos/dist/dev/commons/codec/1.22.0-RC1/site/rat-report.html > > KEYS: > https://downloads.apache.org/commons/KEYS > > Please review the release candidate and vote. > This vote will close no sooner than 72 hours from now. > > [ ] +1 Release these artifacts > [ ] +0 OK, but... > [ ] -0 OK, but really should fix... > [ ] -1 I oppose this release because... > > Thank you, > > Gary Gregory, > Release Manager (using key 530AA5F25C25011F) > > The following is intended as a helper and refresher for reviewers. > > Validating a release candidate > ============================== > > These guidelines are NOT complete. > > Requirements: Git, Java, and Maven. > > You can validate a release from a release candidate (RC) tag as follows. > > 1a) Download and decompress the source archive from: > > https://dist.apache.org/repos/dist/dev/commons/codec/1.22.0-RC1/source > > 1b) Check out the RC tag from git (optional) > > This is optional, as a reviewer must at least check source distributions. > > git clone https://gitbox.apache.org/repos/asf/commons-codec.git > --branch commons-codec-1.22.0-RC1 commons-codec-1.22.0-RC1 > cd commons-codec-1.22.0-RC1 > > 2) Checking the build > > All components should include a default Maven goal, such that you can > run 'mvn' from the command line by itself. > > 2) Check Apache licenses > > This step is not required if the site includes a RAT report page, > which you then must check. > This check should be included in the default Maven build, but you can > check it with: > > mvn apache-rat:check > > 3) Check binary compatibility > > This step is not required if the site includes a JApiCmp report page, > which you then must check. > This check should be included in the default Maven build, but you can > check it with: > > mvn verify -DskipTests -P japicmp japicmp:cmp > > 4) Build the package > > This check should be included in the default Maven build, but you can > check it with: > > mvn -V clean package > > You can record the Maven and Java version produced by -V in your VOTE > reply. > To gather OS information from a command line: > Windows: ver > Linux: uname -a > > 4b) Check reproducibility > > To check that a build is reproducible, run: > > mvn clean verify artifact:compare -DskipTests > -Dreference.repo= > https://repository.apache.org/content/repositories/staging/ > '-Dbuildinfo.ignore=*/*.spdx.json' > > Note that this excludes SPDX files from the check. > > 5) Build the site for a single module project > > Note: Some plugins require the components to be installed instead of > packaged. > > mvn site > Check the site reports in: > - Windows: target\site\index.html > - Linux: target/site/index.html > > -the end- >
