Should the SBOM/CycloneDX files be part of the distribution folder as well? https://dist.apache.org/repos/dist/dev/logging/log4j-tools/
On Wed, Nov 15, 2023, at 16:03, Volkan Yazıcı wrote: > This is a vote to release the Apache Log4j Tools 0.6.0. > > Website: https://logging.staged.apache.org/log4j/tools > GitHub: https://github.com/apache/logging-log4j-tools > Commit: 18425d95a4d150de905929d55bf55545d70f3d91 > Distribution: https://dist.apache.org/repos/dist/dev/logging/log4j-tools > Nexus: > https://repository.apache.org/content/repositories/orgapachelogging-1233 > Signing key: 0x077e8893a6dcc33dd4a4d5b256e73ba9a0b592d0 > > Please download, test, and cast your votes on this mailing list. > > [ ] +1, release the artifacts > [ ] -1, don't release, because... > > This vote is open for 72 hours and will pass unless getting a > net negative vote count. All votes are welcome and we encourage > everyone to test the release, but only the Logging Services PMC > votes are officially counted. At least 3 +1 votes and more > positive than negative votes are required. > > === Release Notes > > This minor release contains various bug fixes and improvements. > > ==== Added > > * Started generating CycloneDX SBOM with the recent update of > `logging-parent` to version `10.4.0` > > ==== Changed > > * Update `org.apache.logging:logging-parent` to version `10.4.0` > > ==== Fixed > > * `log4j-tools-bom` was broken due to removed `parent` during > flattening. This is automatically fixed by the recent `logging-parent` > version `10.4.0` update.
