Re: [CANCELED][VOTE] Release Apache Maven 3.9.4
Howdy, It turns out source bundles (by SHA512) were ok and are unchanged, it was the binary bundle that had flakey maven-resolver-api 1.9.14 JAR embedded, as Herve detected. Again, - source bundles are _unchanged_. - binary bundles are _fixed_. Will respin "take two" vote for 3.9.4, as everything is restaged. Thanks T On Mon, Jul 31, 2023 at 12:07 AM Tamás Cservenák wrote: > But that's the thing (as I wrote on Slack): > - I have desktop (Fedora 38) and one laptop (Fedora 38) and one macbook > - but all the releases I did do this week happened on desktop (Fedora 38) > ONLY > - on desktop I do use MRM, but as resolver release placed JARs in my local > repository, they were probably overwritten (as you say, by another install) > - I am unsure and am actually troubled here, when and how did I "mvn > install" from tag checked out sources (target/checkout from release > directory)? While building site? As I have _separate_ places/checkouts > even, once for "work" and one for "release" that is not even added to any > IDE... > > T > > On Sun, Jul 30, 2023 at 11:59 PM Hervé Boutemy > wrote: > >> you probably rebuilt the release with "mvn install" = what you need to >> avoid >> and it seems the rebuild was done with an environment that did not give >> you the same output as the reference build >> >> FYI, I was able to rebuild Maven Resolver 1.9.14 with the same output as >> you >> >> https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/apache/maven/resolver/maven-resolver/README.md >> >> AFAIK, there is no reproduciblity issue nowadays with recent Bnd and/or >> Felix Bundle plugin >> >> Regards, >> >> Hervé >> >> Le samedi 29 juillet 2023, 15:19:12 CEST Tamás Cservenák a écrit : >> > Sure, >> > >> > Will do that, thanks. >> > >> > What I don't understand is how I got 2 different jars in the first >> place, >> > as i did not release twice (nor build from tag two times)... >> > >> > T >> > >> > On Sat, Jul 29, 2023, 11:58 Herve Boutemy wrote: >> > > notice that you don't need to go to 3.9.5: rebuilding 3.9.4 from a >> clean >> > > local repository and Git checkout from tag with `mvn -Papache-release >> > > deploy` will do the job that has to be re-done >> > > >> > > Regards, >> > > >> > > Hervé >> > > >> > > On 2023/07/29 08:47:48 Tamás Cservenák wrote: >> > > > Am cancelling the vote due Herve -1 >> > > > >> > > > Will need to figure out how this happened. >> > > > >> > > > T >> > > >> > > - >> > > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org >> > > For additional commands, e-mail: dev-h...@maven.apache.org >> >> >> >> >> >> - >> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org >> For additional commands, e-mail: dev-h...@maven.apache.org >> >>
Re: [CANCELED][VOTE] Release Apache Maven 3.9.4
But that's the thing (as I wrote on Slack): - I have desktop (Fedora 38) and one laptop (Fedora 38) and one macbook - but all the releases I did do this week happened on desktop (Fedora 38) ONLY - on desktop I do use MRM, but as resolver release placed JARs in my local repository, they were probably overwritten (as you say, by another install) - I am unsure and am actually troubled here, when and how did I "mvn install" from tag checked out sources (target/checkout from release directory)? While building site? As I have _separate_ places/checkouts even, once for "work" and one for "release" that is not even added to any IDE... T On Sun, Jul 30, 2023 at 11:59 PM Hervé Boutemy wrote: > you probably rebuilt the release with "mvn install" = what you need to > avoid > and it seems the rebuild was done with an environment that did not give > you the same output as the reference build > > FYI, I was able to rebuild Maven Resolver 1.9.14 with the same output as > you > > https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/apache/maven/resolver/maven-resolver/README.md > > AFAIK, there is no reproduciblity issue nowadays with recent Bnd and/or > Felix Bundle plugin > > Regards, > > Hervé > > Le samedi 29 juillet 2023, 15:19:12 CEST Tamás Cservenák a écrit : > > Sure, > > > > Will do that, thanks. > > > > What I don't understand is how I got 2 different jars in the first place, > > as i did not release twice (nor build from tag two times)... > > > > T > > > > On Sat, Jul 29, 2023, 11:58 Herve Boutemy wrote: > > > notice that you don't need to go to 3.9.5: rebuilding 3.9.4 from a > clean > > > local repository and Git checkout from tag with `mvn -Papache-release > > > deploy` will do the job that has to be re-done > > > > > > Regards, > > > > > > Hervé > > > > > > On 2023/07/29 08:47:48 Tamás Cservenák wrote: > > > > Am cancelling the vote due Herve -1 > > > > > > > > Will need to figure out how this happened. > > > > > > > > T > > > > > > - > > > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org > > > For additional commands, e-mail: dev-h...@maven.apache.org > > > > > > - > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org > For additional commands, e-mail: dev-h...@maven.apache.org > >
Re: [CANCELED][VOTE] Release Apache Maven 3.9.4
you probably rebuilt the release with "mvn install" = what you need to avoid and it seems the rebuild was done with an environment that did not give you the same output as the reference build FYI, I was able to rebuild Maven Resolver 1.9.14 with the same output as you https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/apache/maven/resolver/maven-resolver/README.md AFAIK, there is no reproduciblity issue nowadays with recent Bnd and/or Felix Bundle plugin Regards, Hervé Le samedi 29 juillet 2023, 15:19:12 CEST Tamás Cservenák a écrit : > Sure, > > Will do that, thanks. > > What I don't understand is how I got 2 different jars in the first place, > as i did not release twice (nor build from tag two times)... > > T > > On Sat, Jul 29, 2023, 11:58 Herve Boutemy wrote: > > notice that you don't need to go to 3.9.5: rebuilding 3.9.4 from a clean > > local repository and Git checkout from tag with `mvn -Papache-release > > deploy` will do the job that has to be re-done > > > > Regards, > > > > Hervé > > > > On 2023/07/29 08:47:48 Tamás Cservenák wrote: > > > Am cancelling the vote due Herve -1 > > > > > > Will need to figure out how this happened. > > > > > > T > > > > - > > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org > > For additional commands, e-mail: dev-h...@maven.apache.org - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
Re: [CANCELED][VOTE] Release Apache Maven 3.9.4
Or a Set. Gary On Sat, Jul 29, 2023, 11:37 AM Gary Gregory wrote: > Sounds like a Java Map implementation is used that does not preserve > insertion order. > > Gary > > > On Sat, Jul 29, 2023, 11:03 AM Tamás Cservenák > wrote: > >> Yes, you are right. >> >> Seems only the /META-INF/MANIFEST.MF differs, only the Export-Package and >> Import-Package entries like their ordering is different? >> >> >> >> T >> >> On Sat, Jul 29, 2023, 15:28 Gary Gregory wrote: >> >> > Maybe figuring out the exact difference between the jars will give you a >> > hint? >> > >> > Gary >> > >> > On Sat, Jul 29, 2023, 9:19 AM Tamás Cservenák >> wrote: >> > >> > > Sure, >> > > >> > > Will do that, thanks. >> > > >> > > What I don't understand is how I got 2 different jars in the first >> place, >> > > as i did not release twice (nor build from tag two times)... >> > > >> > > T >> > > >> > > On Sat, Jul 29, 2023, 11:58 Herve Boutemy >> wrote: >> > > >> > > > notice that you don't need to go to 3.9.5: rebuilding 3.9.4 from a >> > clean >> > > > local repository and Git checkout from tag with `mvn >> -Papache-release >> > > > deploy` will do the job that has to be re-done >> > > > >> > > > Regards, >> > > > >> > > > Hervé >> > > > >> > > > On 2023/07/29 08:47:48 Tamás Cservenák wrote: >> > > > > Am cancelling the vote due Herve -1 >> > > > > >> > > > > Will need to figure out how this happened. >> > > > > >> > > > > T >> > > > > >> > > > >> > > > >> - >> > > > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org >> > > > For additional commands, e-mail: dev-h...@maven.apache.org >> > > > >> > > > >> > > >> > >> >
Re: [CANCELED][VOTE] Release Apache Maven 3.9.4
Sounds like a Java Map implementation is used that does not preserve insertion order. Gary On Sat, Jul 29, 2023, 11:03 AM Tamás Cservenák wrote: > Yes, you are right. > > Seems only the /META-INF/MANIFEST.MF differs, only the Export-Package and > Import-Package entries like their ordering is different? > > > > T > > On Sat, Jul 29, 2023, 15:28 Gary Gregory wrote: > > > Maybe figuring out the exact difference between the jars will give you a > > hint? > > > > Gary > > > > On Sat, Jul 29, 2023, 9:19 AM Tamás Cservenák > wrote: > > > > > Sure, > > > > > > Will do that, thanks. > > > > > > What I don't understand is how I got 2 different jars in the first > place, > > > as i did not release twice (nor build from tag two times)... > > > > > > T > > > > > > On Sat, Jul 29, 2023, 11:58 Herve Boutemy wrote: > > > > > > > notice that you don't need to go to 3.9.5: rebuilding 3.9.4 from a > > clean > > > > local repository and Git checkout from tag with `mvn -Papache-release > > > > deploy` will do the job that has to be re-done > > > > > > > > Regards, > > > > > > > > Hervé > > > > > > > > On 2023/07/29 08:47:48 Tamás Cservenák wrote: > > > > > Am cancelling the vote due Herve -1 > > > > > > > > > > Will need to figure out how this happened. > > > > > > > > > > T > > > > > > > > > > > > > - > > > > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org > > > > For additional commands, e-mail: dev-h...@maven.apache.org > > > > > > > > > > > > > >
Re: [CANCELED][VOTE] Release Apache Maven 3.9.4
Yes, you are right. Seems only the /META-INF/MANIFEST.MF differs, only the Export-Package and Import-Package entries like their ordering is different? T On Sat, Jul 29, 2023, 15:28 Gary Gregory wrote: > Maybe figuring out the exact difference between the jars will give you a > hint? > > Gary > > On Sat, Jul 29, 2023, 9:19 AM Tamás Cservenák wrote: > > > Sure, > > > > Will do that, thanks. > > > > What I don't understand is how I got 2 different jars in the first place, > > as i did not release twice (nor build from tag two times)... > > > > T > > > > On Sat, Jul 29, 2023, 11:58 Herve Boutemy wrote: > > > > > notice that you don't need to go to 3.9.5: rebuilding 3.9.4 from a > clean > > > local repository and Git checkout from tag with `mvn -Papache-release > > > deploy` will do the job that has to be re-done > > > > > > Regards, > > > > > > Hervé > > > > > > On 2023/07/29 08:47:48 Tamás Cservenák wrote: > > > > Am cancelling the vote due Herve -1 > > > > > > > > Will need to figure out how this happened. > > > > > > > > T > > > > > > > > > > - > > > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org > > > For additional commands, e-mail: dev-h...@maven.apache.org > > > > > > > > >
Re: [CANCELED][VOTE] Release Apache Maven 3.9.4
Maybe figuring out the exact difference between the jars will give you a hint? Gary On Sat, Jul 29, 2023, 9:19 AM Tamás Cservenák wrote: > Sure, > > Will do that, thanks. > > What I don't understand is how I got 2 different jars in the first place, > as i did not release twice (nor build from tag two times)... > > T > > On Sat, Jul 29, 2023, 11:58 Herve Boutemy wrote: > > > notice that you don't need to go to 3.9.5: rebuilding 3.9.4 from a clean > > local repository and Git checkout from tag with `mvn -Papache-release > > deploy` will do the job that has to be re-done > > > > Regards, > > > > Hervé > > > > On 2023/07/29 08:47:48 Tamás Cservenák wrote: > > > Am cancelling the vote due Herve -1 > > > > > > Will need to figure out how this happened. > > > > > > T > > > > > > > - > > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org > > For additional commands, e-mail: dev-h...@maven.apache.org > > > > >
Re: [CANCELED][VOTE] Release Apache Maven 3.9.4
Sure, Will do that, thanks. What I don't understand is how I got 2 different jars in the first place, as i did not release twice (nor build from tag two times)... T On Sat, Jul 29, 2023, 11:58 Herve Boutemy wrote: > notice that you don't need to go to 3.9.5: rebuilding 3.9.4 from a clean > local repository and Git checkout from tag with `mvn -Papache-release > deploy` will do the job that has to be re-done > > Regards, > > Hervé > > On 2023/07/29 08:47:48 Tamás Cservenák wrote: > > Am cancelling the vote due Herve -1 > > > > Will need to figure out how this happened. > > > > T > > > > - > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org > For additional commands, e-mail: dev-h...@maven.apache.org > >
Re: [CANCELED][VOTE] Release Apache Maven 3.9.4
notice that you don't need to go to 3.9.5: rebuilding 3.9.4 from a clean local repository and Git checkout from tag with `mvn -Papache-release deploy` will do the job that has to be re-done Regards, Hervé On 2023/07/29 08:47:48 Tamás Cservenák wrote: > Am cancelling the vote due Herve -1 > > Will need to figure out how this happened. > > T > - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
[CANCELED][VOTE] Release Apache Maven 3.9.4
Am cancelling the vote due Herve -1 Will need to figure out how this happened. T