+1 paulk (binding) I checked: * "incubating" in distribution file names * NOTICE, LICENSE and DISCLAIMER files exist * No unexpected binary files in src zip * Verified signatures and checksums for all zips * Gradle bootstrap for src zip using: "gradle -p gradle-bootstrap" (I used gradle 8.11)
Some things to fix for next time if you want the ability to run verify.sh locally: * KEYS wasn't in expected location automatically * verify.sh still uses gradlew to bootstrap gradlew * verify.sh assumes etc/bin is in the path when calling verify-reproducible.sh Cheers, Paul. On Tue, Aug 5, 2025 at 2:58 AM James Daugherty <jdaughe...@apache.org> wrote: > Hi Everyone, > > August 4th has arrived! Per previous weekly meetings, I am happy to > start the VOTE thread for the Apache Grails (incubating) release of > version 7.0.0-RC1! > > Please note that several fixes have landed from Groovy 4.0.28 that > helped the build reproducibility. Here are the current file > differences & why they differ on rebuild: > > 1. grails-cli-7.0.0-RC1-all.jar # caused by extension module merge > from the shadowJar (need to strip date from property file) & the > plugin.xml signature is being included on accident > - Created https://github.com/apache/grails-core/issues/14951 to > address this in a future release > 2. grails-converters-7.0.0-RC1.jar # contents identical on decompile > 3. grails-datamapping-core-test-7.0.0-RC1-tests.jar # contents > identical on decompile > 4. grails-datamapping-tck-7.0.0-RC1.jar # contents identical on decompile > 5. grails-forge-core-7.0.0-RC1-javadoc.jar # due to groovy 3 in forge, > we need to update to groovy 4 to fix this > > Given that these differences are known, explainable, and immaterial, > we are moving forward with a release vote. > > Release notes for the release are here: > https://github.com/apache/grails-core/releases/tag/v7.0.0-RC1 > > The tag for this release is: > https://github.com/apache/grails-core/releases/tag/v7.0.0-RC1 > Tag commit id: 9f5c12131ce29fc676feeca6d3c9a64e66cd485b > > The artifacts to be voted on are located as follows (r78548): > Source release: > > https://dist.apache.org/repos/dist/dev/incubator/grails/core/7.0.0-RC1/sources > Binary distributions: > > https://dist.apache.org/repos/dist/dev/incubator/grails/core/7.0.0-RC1/distribution > > Release artifacts are signed with a key from the following file: > https://dist.apache.org/repos/dist/release/incubator/grails/KEYS > > Please vote on releasing this package as Apache Grails (incubating) > 7.0.0-RC1. > > Reminder on ASF release approval requirements for PPMC members: > https://www.apache.org/legal/release-policy.html#release-approval > > Hints on validating checksums/signatures (but replace md5sum with > sha512sum): > https://www.apache.org/info/verification.html > > Details of our release process are documented at: > https://github.com/apache/grails-core/blob/HEAD/RELEASE.md > > As a reminder, most of our tools support an env `GRAILS_REPO_URL` so > that the tools can be used from the staging location. Set it to the > staging repo like this: `export > GRAILS_REPO_URL=https://repository.apache.org/content/groups/staging` > <https://repository.apache.org/content/groups/staging> > > The vote is open for the next 72 hours and passes if a majority of at least > three +1 PPMC votes are cast. > > [ ] +1 Release Apache Grails (incubating) 7.0.0-RC1 > [ ] 0 I don't have a strong opinion about this, but I assume it's ok > [ ] -1 Do not release Apache Grails (incubating) 7.0.0-RC1 because... > > Here is my vote: > > +1 (binding) >
