I need 2 +1's from PMC members to make this release happen. We are on the 5th day and I am still yet to hear a reaction. I also shared the commands PMC members need to run to review the release. Is there anything else I need to provide? Could you help by voting, please?
On Thu, Feb 1, 2024 at 11:31 AM Volkan Yazıcı <vol...@yazi.ci> wrote: > This is a vote to release the Apache Log4j Scala 13.1.0. > > Website: https://logging.staged.apache.org/log4j/scala > GitHub: https://github.com/apache/logging-log4j-scala > Commit: abf3b13d3692b45d221dc78202c34f00f8f9124f > Distribution: https://dist.apache.org/repos/dist/dev/logging/log4j-scala > Nexus: > https://repository.apache.org/content/repositories/orgapachelogging-1257 > Signing key: 0x077e8893a6dcc33dd4a4d5b256e73ba9a0b592d0 > > Please download, test, and cast your votes on this mailing list. > > [ ] +1, release the artifacts > [ ] -1, don't release, because... > > This vote is open for 72 hours and will pass unless getting a > net negative vote count. All votes are welcome and we encourage > everyone to test the release, but only the Logging Services PMC > votes are officially counted. At least 3 +1 votes and more > positive than negative votes are required. > > === Reproducibility > > As was the case in the previous `13.0.0` release, the > `log4j-api-scala_3.jar` artifact targeting Scala 3 in this > release is also not reproducible due to a bug in the > Scala 3 compiler. See `13.0.0` vote email[1] for details > and how to verify the reproducibility by working around > the Scala 3 compiler issue. > > [1] https://lists.apache.org/thread/3rrg3xj2sk6m3chx82k8kpx6nbdqb8oz > > === Review kit > > The minimum set of steps needed to review the uploaded distribution > files in the Subversion repository can be summarized as follows: > > # Check out the distribution > svn co https://dist.apache.org/repos/... && cd $_ > > # Verify checksums > shasum --check *.sha512 > > # Verify signatures > wget -O - https://downloads.apache.org/logging/KEYS | gpg --import > for sigFile in *.asc; do gpg --verify $sigFile; done > > # Verify reproduciblity > umask 0022 > unzip *-src.zip -d src > cd src > export NEXUS_REPO=https://repository.apache.org/content/... > sh mvnw -Prelease verify artifact:compare -Dreference.repo=$NEXUS_REPO > > === Release notes > > This minor release contains a bug fix, Software Bill of Materials > (SBOM) generation, and some dependency updates. > > ==== Added > > * Start generating CycloneDX SBOM > > ==== Fixed > > * Fix recursive inlining issues in Scala 3 macros (#40) > > ==== Updated > > * Update `org.apache.logging.log4j:log4j-bom` to version `2.22.1` (#43) > * Update `org.apache.logging:logging-parent` to version `10.6.0` (#44) >
