Using the review kit, running:

sh mvnw -Prelease verify artifact:compare -Dreference.repo=$NEXUS_REPO

I get:

[INFO] --- artifact:3.5.0:compare (default-cli) @ log4j-api-kotlin-parent ---
Downloading from reference:
https://repository.apache.org/content/repositories/orgapachelogging-1290/org/apache/logging/log4j/log4j-api-kotlin-parent/1.4.0/log4j-api-kotlin-parent-1.4.0.buildinfo
[INFO] Reference buildinfo file not found: it will be generated from
downloaded reference artifacts
Downloading from reference:
https://repository.apache.org/content/repositories/orgapachelogging-1290/org/apache/logging/log4j/log4j-api-kotlin-parent/1.4.0/log4j-api-kotlin-parent-1.4.0.pom
[WARNING] Reference artifact not found
org.apache.logging.log4j:log4j-api-kotlin-parent:pom:1.4.0
Downloading from reference:
https://repository.apache.org/content/repositories/orgapachelogging-1290/org/apache/logging/log4j/log4j-api-kotlin-parent/1.4.0/log4j-api-kotlin-parent-1.4.0-cyclonedx.xml
[WARNING] Reference artifact not found
org.apache.logging.log4j:log4j-api-kotlin-parent:xml:cyclonedx:1.4.0
[INFO] Minimal buildinfo generated from downloaded artifacts:
/Users/garydgregory/rc/log4j-kotlin/src/target/reference/log4j-api-kotlin-parent-1.4.0.buildinfo
[ERROR] size mismatch log4j-api-kotlin-parent-1.4.0.pom: investigate
with diffoscope
target/reference/org.apache.logging.log4j/log4j-api-kotlin-parent-1.4.0.pom
.flattened-pom.xml
[ERROR] size mismatch log4j-api-kotlin-parent-1.4.0-cyclonedx.xml:
investigate with diffoscope
target/reference/org.apache.logging.log4j/log4j-api-kotlin-parent-1.4.0-cyclonedx.xml
target/bom.xml
[ERROR] Reproducible Build output summary: 0 files ok, 2 different
[ERROR] see diff
target/reference/log4j-api-kotlin-parent-1.4.0.buildinfo
target/log4j-api-kotlin-parent-1.4.0.buildinfo
[ERROR] see also
https://maven.apache.org/guides/mini/guide-reproducible-builds.html
[INFO] Reproducible Build output comparison saved to
/Users/garydgregory/rc/log4j-kotlin/src/target/log4j-api-kotlin-parent-1.4.0.buildcompare
[INFO] Aggregate buildcompare copied to
/Users/garydgregory/rc/log4j-kotlin/src/target/log4j-api-kotlin-parent-1.4.0.buildcompare
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary for Apache Log4j Kotlin API Parent 1.4.0:
[INFO]
[INFO] Apache Log4j Kotlin API Parent ..................... FAILURE [ 28.636 s]
[INFO] Apache Log4j Kotlin API ............................ SKIPPED
[INFO] Apache Log4j Kotlin API samples .................... SKIPPED
[INFO] log4j-api-kotlin-benchmark ......................... SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  32.610 s
[INFO] Finished at: 2024-08-03T17:45:38-04:00
[INFO] ------------------------------------------------------------------------

Ideas?

Gary

On Sat, Aug 3, 2024 at 1:23 PM Volkan Yazıcı <vol...@yazi.ci.invalid> wrote:
>
> This is a vote to release the Apache Log4j Kotlin API `1.5.0`.
>
> Website: https://logging.staged.apache.org/log4j/kotlin-1.5.0
> GitHub: https://github.com/apache/logging-log4j-kotlin
> Commit: 57bc699b9e91a94a7df279f226e4f0ae86769062
> Distribution: https://dist.apache.org/repos/dist/dev/logging/log4j-kotlin
> Nexus:
> https://repository.apache.org/content/repositories/orgapachelogging-1290
> Signing key: 0x077e8893a6dcc33dd4a4d5b256e73ba9a0b592d0
>
> Please download, test, and cast your votes on this mailing list.
>
> [ ] +1, release the artifacts
> [ ] -1, don't release, because...
>
> This vote is open for 72 hours and will pass unless getting a
> net negative vote count. All votes are welcome and we encourage
> everyone to test the release, but only the Logging Services PMC
> votes are officially counted. At least 3 +1 votes and more
> positive than negative votes are required.
>
> == Review kit
>
> The minimum set of steps needed to review the uploaded distribution
> files in the Subversion repository can be summarized as follows:
>
>     # Check out the distribution
>     svn co https://dist.apache.org/repos/dist/dev/logging/log4j-kotlin &&
> cd $_
>
>     # Verify checksums
>     shasum --check *.sha512
>
>     # Verify signatures
>     wget -O - https://downloads.apache.org/logging/KEYS | gpg --import
>     for sigFile in *.asc; do gpg --verify $sigFile; done
>
>     # Verify reproduciblity
>     umask 0022
>     unzip *-src.zip -d src
>     cd src
>     export NEXUS_REPO=
> https://repository.apache.org/content/repositories/orgapachelogging-1290
>     sh mvnw -Prelease verify artifact:compare -Dreference.repo=$NEXUS_REPO
>     # If preferred, augment `mvnw` with `-DskipTests` to speed things up
>
> == Release Notes
>
> This release contains improvements to Kotlin coroutine integration.
>
> === Added
>
> * Add convenience functions for managing logging context in coroutines (#65)
>
> === Changed
>
> * Migrate website to Antora (apache/logging-log4j2#2443)
>
> === Updated
>
> * Update `org.apache.logging.log4j:log4j-bom` to version `2.23.1` (#70)

Reply via email to