Doh! As you stated [in your DM], `build.yaml` still contains the deprecated `distribution-attachment-filepath-pattern`, which doesn't match against SBOMs.
I am cancelling this vote. I will issue an RC2 promptly. On Fri, Nov 17, 2023 at 9:36 AM Piotr P. Karwasz <piotr.karw...@gmail.com> wrote: > > Hi Volkan, > > On Fri, 17 Nov 2023 at 09:22, Volkan Yazıcı <vol...@yazi.ci> wrote: > > > > They are. See `*-bin.zip`. > > > > On Fri, Nov 17, 2023 at 9:13 AM Christian Grobmeier > > <grobme...@apache.org> wrote: > > > > > > Should the SBOM/CycloneDX files be part of the distribution folder as > > > well? > > > https://dist.apache.org/repos/dist/dev/logging/log4j-tools/ > > I can't find them either: the `log4j-jmx-gui` archive contains the > SBOMs, but the `log4j-tools` archive doesn't. > > Piotr
