+1
but Reproducible not fully ok: reference build done with JDK 17 on *nix and
umask 022
apache-maven-3.9.5-bin.zip and .tar.gz suffer from weird umask (go-r) on wagon
jars:
$ diffoscope target/reference/org.apache.maven/apache-maven-3.9.5-bin.zip
apache-maven/target/apache-maven-3.9.5-bin.zip
--- target/reference/org.apache.maven/apache-maven-3.9.5-bin.zip
+++ apache-maven/target/apache-maven-3.9.5-bin.zip
│┄ Archive contents identical but files differ, possibly due to different
compression levels. Falling back to binary comparison.
├── zipinfo {}
│ @@ -81,21 +81,21 @@
│ -rw-r--r-- 2.0 unx 74345 b- defN 23-Oct-01 18:38
apache-maven-3.9.5/lib/maven-resolver-provider-3.9.5.jar
│ -rw-r--r-- 2.0 unx 317619 b- defN 23-Oct-01 18:38
apache-maven-3.9.5/lib/maven-resolver-impl-1.9.16.jar
│ -rw-r--r-- 2.0 unx 37757 b- defN 23-Oct-01 18:38
apache-maven-3.9.5/lib/maven-resolver-named-locks-1.9.16.jar
│ -rw-r--r-- 2.0 unx 51503 b- defN 23-Oct-01 18:38
apache-maven-3.9.5/lib/maven-resolver-spi-1.9.16.jar
│ -rw-r--r-- 2.0 unx 379348 b- defN 23-Oct-01 18:38
apache-maven-3.9.5/lib/org.eclipse.sisu.inject-0.3.5.jar
│ -rw-r--r-- 2.0 unx 4225 b- defN 23-Oct-01 18:38
apache-maven-3.9.5/lib/plexus-component-annotations-2.1.0.jar
│ -rw-r--r-- 2.0 unx 289577 b- defN 23-Oct-01 18:38
apache-maven-3.9.5/lib/maven-compat-3.9.5.jar
│ --rw------- 2.0 unx 55101 b- defN 23-Oct-01 18:38
apache-maven-3.9.5/lib/wagon-provider-api-3.5.3.jar
│ +-rw-r--r-- 2.0 unx 55101 b- defN 23-Oct-01 18:38
apache-maven-3.9.5/lib/wagon-provider-api-3.5.3.jar
│ -rw-r--r-- 2.0 unx 205307 b- defN 23-Oct-01 18:38
apache-maven-3.9.5/lib/org.eclipse.sisu.plexus-0.3.5.jar
│ -rw-r--r-- 2.0 unx 58284 b- defN 23-Oct-01 18:38
apache-maven-3.9.5/lib/commons-cli-1.5.0.jar
│ --rw------- 2.0 unx 9405 b- defN 23-Oct-01 18:38
apache-maven-3.9.5/lib/wagon-http-3.5.3.jar
│ --rw------- 2.0 unx 40832 b- defN 23-Oct-01 18:38
apache-maven-3.9.5/lib/wagon-http-shared-3.5.3.jar
│ --rw------- 2.0 unx 785639 b- defN 23-Oct-01 18:38
apache-maven-3.9.5/lib/httpclient-4.5.14.jar
│ --rw------- 2.0 unx 11350 b- defN 23-Oct-01 18:38
apache-maven-3.9.5/lib/wagon-file-3.5.3.jar
│ +-rw-r--r-- 2.0 unx 9405 b- defN 23-Oct-01 18:38
apache-maven-3.9.5/lib/wagon-http-3.5.3.jar
│ +-rw-r--r-- 2.0 unx 40832 b- defN 23-Oct-01 18:38
apache-maven-3.9.5/lib/wagon-http-shared-3.5.3.jar
│ +-rw-r--r-- 2.0 unx 785639 b- defN 23-Oct-01 18:38
apache-maven-3.9.5/lib/httpclient-4.5.14.jar
│ +-rw-r--r-- 2.0 unx 11350 b- defN 23-Oct-01 18:38
apache-maven-3.9.5/lib/wagon-file-3.5.3.jar
│ -rw-r--r-- 2.0 unx 16555 b- defN 23-Oct-01 18:38
apache-maven-3.9.5/lib/jcl-over-slf4j-1.7.36.jar
│ -rw-r--r-- 2.0 unx 40277 b- defN 23-Oct-01 18:38
apache-maven-3.9.5/lib/maven-resolver-connector-basic-1.9.16.jar
│ -rw-r--r-- 2.0 unx 16249 b- defN 23-Oct-01 18:38
apache-maven-3.9.5/lib/maven-resolver-transport-file-1.9.16.jar
│ -rw-r--r-- 2.0 unx 55689 b- defN 23-Oct-01 18:38
apache-maven-3.9.5/lib/maven-resolver-transport-http-1.9.16.jar
│ -rw-r--r-- 2.0 unx 327891 b- defN 23-Oct-01 18:38
apache-maven-3.9.5/lib/httpcore-4.4.16.jar
│ -rw-r--r-- 2.0 unx 360738 b- defN 23-Oct-01 18:38
apache-maven-3.9.5/lib/commons-codec-1.16.0.jar
│ -rw-r--r-- 2.0 unx 32488 b- defN 23-Oct-01 18:38
apache-maven-3.9.5/lib/maven-resolver-transport-wagon-1.9.16.jar
│ --- target/reference/org.apache.maven/apache-maven-3.9.5-bin.zip
Regards,
Hervé
On 2023/10/01 19:07:05 Tamás Cservenák wrote:
> Howdy,
>
> Note: This release completes the main goals of Maven 3.9.x lineage, among
> others moving to Java 8 and transition to latest Resolver 1.9.x features
> (new robust transports, local repository locking, provided checksums,
> remote repository filtering and more). Maven Resolver 1.9.x lineage is
> already in "bugfix only" (no new features) maintenance mode, and this makes
> Maven 3.9.x lineage getting into this maintenance mode as well. I do
> foresee some more Maven 3.9.x releases with usual fluff (bug fixes,
> lifecycle plugin updates), but the focus should move to upcoming Maven 4,
> Resolver 2 and mvnd (at least when "core" is considered).
>
> ---
>
> We solved 8 issues:
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316922&version=12353460
>
> There are still a couple of issues left in JIRA:
> https://issues.apache.org/jira/issues/?jql=project%20%3D%20MNG%20AND%20resolution%20%3D%20Unresolved
>
> Staging repo:
> https://repository.apache.org/content/repositories/maven-1995
>
> Dev dist directory (binary bundles updated):
> https://dist.apache.org/repos/dist/dev/maven/maven-3/3.9.5/
>
> Source release checksums:
> apache-maven-3.9.5-src.zip sha512:
> f1e7f36a6423c4f6d98e599120ede3a9f9f62448edeb2d49ffbdc05e36548190049bc83aae4f49e3305da1060d7b8e49477a55cb78b938951fd41ab3d360995f
>
> apache-maven-3.9.5-src.tar.gz sha512:
> fd8f9c4f3c6af001d11146102ba491b248163cd45d8be16907f7dcdc763eef4a081a02286b28a74de7f48c3f377a0a4491d2fa9155c906466aa3c831a5b4ef8e
>
> Staged site:
> https://maven.apache.org/ref/3-LATEST/
>
> Draft for release notes:
> https://github.com/apache/maven-site/pull/458
>
> Guide to testing staged releases:
> http://maven.apache.org/guides/development/guide-testing-releases.html
>
> Vote open for 72h
>
> [ ] +1
> [ ] +0
> [ ] -1
>
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]