thinking twice, I need to change to -1: this may impact users that expect to
use the group permissions to use Maven binaries
sorry
I don't know what tests you are doing with permissions on your environment, but
these tests leak releases :(
Regards,
Hervé
On 2023/10/02 07:11:02 Herve Boutemy wrote:
> +1
>
> but Reproducible not fully ok: reference build done with JDK 17 on *nix and
> umask 022
> apache-maven-3.9.5-bin.zip and .tar.gz suffer from weird umask (go-r) on
> wagon jars:
>
> $ diffoscope target/reference/org.apache.maven/apache-maven-3.9.5-bin.zip
> apache-maven/target/apache-maven-3.9.5-bin.zip
> --- target/reference/org.apache.maven/apache-maven-3.9.5-bin.zip
> +++ apache-maven/target/apache-maven-3.9.5-bin.zip
> │┄ Archive contents identical but files differ, possibly due to different
> compression levels. Falling back to binary comparison.
> ├── zipinfo {}
> │ @@ -81,21 +81,21 @@
> │ -rw-r--r-- 2.0 unx 74345 b- defN 23-Oct-01 18:38
> apache-maven-3.9.5/lib/maven-resolver-provider-3.9.5.jar
> │ -rw-r--r-- 2.0 unx 317619 b- defN 23-Oct-01 18:38
> apache-maven-3.9.5/lib/maven-resolver-impl-1.9.16.jar
> │ -rw-r--r-- 2.0 unx 37757 b- defN 23-Oct-01 18:38
> apache-maven-3.9.5/lib/maven-resolver-named-locks-1.9.16.jar
> │ -rw-r--r-- 2.0 unx 51503 b- defN 23-Oct-01 18:38
> apache-maven-3.9.5/lib/maven-resolver-spi-1.9.16.jar
> │ -rw-r--r-- 2.0 unx 379348 b- defN 23-Oct-01 18:38
> apache-maven-3.9.5/lib/org.eclipse.sisu.inject-0.3.5.jar
> │ -rw-r--r-- 2.0 unx 4225 b- defN 23-Oct-01 18:38
> apache-maven-3.9.5/lib/plexus-component-annotations-2.1.0.jar
> │ -rw-r--r-- 2.0 unx 289577 b- defN 23-Oct-01 18:38
> apache-maven-3.9.5/lib/maven-compat-3.9.5.jar
> │ --rw------- 2.0 unx 55101 b- defN 23-Oct-01 18:38
> apache-maven-3.9.5/lib/wagon-provider-api-3.5.3.jar
> │ +-rw-r--r-- 2.0 unx 55101 b- defN 23-Oct-01 18:38
> apache-maven-3.9.5/lib/wagon-provider-api-3.5.3.jar
> │ -rw-r--r-- 2.0 unx 205307 b- defN 23-Oct-01 18:38
> apache-maven-3.9.5/lib/org.eclipse.sisu.plexus-0.3.5.jar
> │ -rw-r--r-- 2.0 unx 58284 b- defN 23-Oct-01 18:38
> apache-maven-3.9.5/lib/commons-cli-1.5.0.jar
> │ --rw------- 2.0 unx 9405 b- defN 23-Oct-01 18:38
> apache-maven-3.9.5/lib/wagon-http-3.5.3.jar
> │ --rw------- 2.0 unx 40832 b- defN 23-Oct-01 18:38
> apache-maven-3.9.5/lib/wagon-http-shared-3.5.3.jar
> │ --rw------- 2.0 unx 785639 b- defN 23-Oct-01 18:38
> apache-maven-3.9.5/lib/httpclient-4.5.14.jar
> │ --rw------- 2.0 unx 11350 b- defN 23-Oct-01 18:38
> apache-maven-3.9.5/lib/wagon-file-3.5.3.jar
> │ +-rw-r--r-- 2.0 unx 9405 b- defN 23-Oct-01 18:38
> apache-maven-3.9.5/lib/wagon-http-3.5.3.jar
> │ +-rw-r--r-- 2.0 unx 40832 b- defN 23-Oct-01 18:38
> apache-maven-3.9.5/lib/wagon-http-shared-3.5.3.jar
> │ +-rw-r--r-- 2.0 unx 785639 b- defN 23-Oct-01 18:38
> apache-maven-3.9.5/lib/httpclient-4.5.14.jar
> │ +-rw-r--r-- 2.0 unx 11350 b- defN 23-Oct-01 18:38
> apache-maven-3.9.5/lib/wagon-file-3.5.3.jar
> │ -rw-r--r-- 2.0 unx 16555 b- defN 23-Oct-01 18:38
> apache-maven-3.9.5/lib/jcl-over-slf4j-1.7.36.jar
> │ -rw-r--r-- 2.0 unx 40277 b- defN 23-Oct-01 18:38
> apache-maven-3.9.5/lib/maven-resolver-connector-basic-1.9.16.jar
> │ -rw-r--r-- 2.0 unx 16249 b- defN 23-Oct-01 18:38
> apache-maven-3.9.5/lib/maven-resolver-transport-file-1.9.16.jar
> │ -rw-r--r-- 2.0 unx 55689 b- defN 23-Oct-01 18:38
> apache-maven-3.9.5/lib/maven-resolver-transport-http-1.9.16.jar
> │ -rw-r--r-- 2.0 unx 327891 b- defN 23-Oct-01 18:38
> apache-maven-3.9.5/lib/httpcore-4.4.16.jar
> │ -rw-r--r-- 2.0 unx 360738 b- defN 23-Oct-01 18:38
> apache-maven-3.9.5/lib/commons-codec-1.16.0.jar
> │ -rw-r--r-- 2.0 unx 32488 b- defN 23-Oct-01 18:38
> apache-maven-3.9.5/lib/maven-resolver-transport-wagon-1.9.16.jar
> │ --- target/reference/org.apache.maven/apache-maven-3.9.5-bin.zip
>
> Regards,
>
> Hervé
>
>
> On 2023/10/01 19:07:05 Tamás Cservenák wrote:
> > Howdy,
> >
> > Note: This release completes the main goals of Maven 3.9.x lineage, among
> > others moving to Java 8 and transition to latest Resolver 1.9.x features
> > (new robust transports, local repository locking, provided checksums,
> > remote repository filtering and more). Maven Resolver 1.9.x lineage is
> > already in "bugfix only" (no new features) maintenance mode, and this makes
> > Maven 3.9.x lineage getting into this maintenance mode as well. I do
> > foresee some more Maven 3.9.x releases with usual fluff (bug fixes,
> > lifecycle plugin updates), but the focus should move to upcoming Maven 4,
> > Resolver 2 and mvnd (at least when "core" is considered).
> >
> > ---
> >
> > We solved 8 issues:
> > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316922&version=12353460
> >
> > There are still a couple of issues left in JIRA:
> > https://issues.apache.org/jira/issues/?jql=project%20%3D%20MNG%20AND%20resolution%20%3D%20Unresolved
> >
> > Staging repo:
> > https://repository.apache.org/content/repositories/maven-1995
> >
> > Dev dist directory (binary bundles updated):
> > https://dist.apache.org/repos/dist/dev/maven/maven-3/3.9.5/
> >
> > Source release checksums:
> > apache-maven-3.9.5-src.zip sha512:
> > f1e7f36a6423c4f6d98e599120ede3a9f9f62448edeb2d49ffbdc05e36548190049bc83aae4f49e3305da1060d7b8e49477a55cb78b938951fd41ab3d360995f
> >
> > apache-maven-3.9.5-src.tar.gz sha512:
> > fd8f9c4f3c6af001d11146102ba491b248163cd45d8be16907f7dcdc763eef4a081a02286b28a74de7f48c3f377a0a4491d2fa9155c906466aa3c831a5b4ef8e
> >
> > Staged site:
> > https://maven.apache.org/ref/3-LATEST/
> >
> > Draft for release notes:
> > https://github.com/apache/maven-site/pull/458
> >
> > Guide to testing staged releases:
> > http://maven.apache.org/guides/development/guide-testing-releases.html
> >
> > Vote open for 72h
> >
> > [ ] +1
> > [ ] +0
> > [ ] -1
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> For additional commands, e-mail: dev-h...@maven.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org
