Re: [VOTE] Release Apache Commons Logging 1.3.0 based on RC1
+1 signatures; reports; site; release-notes; builds java: 8, 11, 17, and 21 all good. Thanks Gary!! Happy thanksgiving Cheers, -Rob > On Nov 26, 2023, at 4:46 PM, Gary Gregory wrote: > > We have fixed a few bugs and added some enhancements since Apache > Commons Logging 1.2 was released, so I would like to release Apache > Commons Logging 1.3.0. > > Apache Commons Logging 1.3.0 RC1 is available for review here: >https://dist.apache.org/repos/dist/dev/commons/logging/1.3.0-RC1 > (svn revision 65553) > > The Git tag commons-logging-1.3.0-RC1 commit for this RC is > e0255a5845814802586b91c889ab3e9fc4bf9d68 which you can browse here: > > https://gitbox.apache.org/repos/asf?p=commons-logging.git;a=commit;h=e0255a5845814802586b91c889ab3e9fc4bf9d68 > You may checkout this tag using: >git clone https://gitbox.apache.org/repos/asf/commons-logging.git > --branch commons-logging-1.3.0-RC1 commons-logging-1.3.0-RC1 > > Maven artifacts are here: > > https://repository.apache.org/content/repositories/orgapachecommons-1676/commons-logging/commons-logging/1.3.0/ > > These are the artifacts and their hashes: > > #Release SHA-512s > #Sun Nov 26 16:38:45 EST 2023 > commons-logging-1.3.0-adapters.jar=0b67e5fbca807b3d00ab5569cfac9fd14e268302ef514dee52eb1272762b35211d602045aefa71731108b900f6e0b7c78c3df39a989f3b86736e95a471b342c6 > commons-logging-1.3.0-api.jar=d801af15997767abfbf0168651b19a55b8958e3b8c0106e054bdfd0098fdcb198c8dad0c123bd91448d0cb7b81851d4606319e43fed102c976b47143e481f371 > commons-logging-1.3.0-bin.tar.gz=1fb9e4537fc59b75baf83b72a8e484604e6124ff7969b6f82955b29beeb5b86d9d115a494a6687e9a89a0b274f1ae9c226f289a7531334cc0451a3d4d5c2e3dc > commons-logging-1.3.0-bin.zip=43291b189957da5882eaf753792a041cd25f599b7fb6d960a16799ae450ae3cde59197fe4a664d59243a44c0cdd067eb9979ef2a225b762b0f56264a871c325c > commons-logging-1.3.0-bom.json=07580d9d52d4f93bf2a79e41388549a4f6f814cfcc5d6e05832036e480d0364e0bce212b79cc4e921d55587a00e0d1d1a1bcf8b3195fe9765e94f38294b60170 > commons-logging-1.3.0-bom.xml=48a60112f79f6809a515a525837094b16e0ebff7daeeb561f20b639f18d47b3585f8e21595c469229caca9a0f2287649dbd8ce70105baa7d36bd621b68f42af7 > commons-logging-1.3.0-javadoc.jar=73abbcf238b831d33fdb5c62406b6066183e3dce603535203b6fb0abc34c6aad9605eec2a5ca11981a2544b81447f8580f27a26f66e564f308c35152391c2cd7 > commons-logging-1.3.0-sources.jar=ca39a42b2380c2c85800368546d8903b72e13f62bec665dd52db16f21dc214ecf81ff8a51f4739b5393b1d31326668e4ad5d0402eb4570728ad2a4321aeb6aa1 > commons-logging-1.3.0-src.tar.gz=20cc40c7d7848da618801a86333f3984151d3089f806e5d7a1e92c83c1f90d330f1c7ded5d0ae70e48dd9de684f2e5da32de24fa2c406f6b419f77704c0e74f8 > commons-logging-1.3.0-src.zip=516db2b8854846cf4c2bf5f4f3f4b7fc132183a7003eed0cff291f53f7f0a35d0dc4cc7eb362cd99ad5bf619620f16f7079e3015a7e01bda9e8802eca04a3fa3 > commons-logging-1.3.0-test-sources.jar=159ec27c4343f926fe1cdc8977138b5200ef6f1284a3361ae3cd19520d3e7b117e418272a4534b768859f1229e8ff7cd3555bed4f292c27e583a92fe9f2f > commons-logging-1.3.0-tests.jar=fb1d052e16ec83f9c6002a44ef79b84c08ad04b9ac3d378060e6adcf6d98860f4411c114837cca872427b1e5c663060a77f7157aabadf81fac1979ea34b44055 > commons-logging_commons-logging-1.3.0.spdx.json=a416b9ae6d632f0638eb1c90184ecbe85bb91ce641b5ccea6ed64a144a6af80b20decaeb5d369aabb5e1cedd266d966fec5bc7517465414ab68036c526f9cb21 > > I have tested this with > > mvn -V -Prelease -Ptest-deploy -P jacoco -P japicmp clean package site deploy > > using: > > Apache Maven 3.9.5 (57804ffe001d7215b5e7bcb531cf83df38f93546) > Maven home: /usr/local/Cellar/maven/3.9.5/libexec > Java version: 21.0.1, vendor: Homebrew, runtime: > /usr/local/Cellar/openjdk/21.0.1/libexec/openjdk.jdk/Contents/Home > Default locale: en_US, platform encoding: UTF-8 > OS name: "mac os x", version: "14.1.1", arch: "x86_64", family: "mac" > > Darwin 23.1.0 Darwin Kernel Version 23.1.0: Mon Oct 9 21:27:27 > PDT 2023; root:xnu-10002.41.9~6/RELEASE_X86_64 x86_64 > > Details of changes since 1.2 are in the release notes: > > https://dist.apache.org/repos/dist/dev/commons/logging/1.3.0-RC1/RELEASE-NOTES.txt > > https://dist.apache.org/repos/dist/dev/commons/logging/1.3.0-RC1/site/changes-report.html > > Site: > > https://dist.apache.org/repos/dist/dev/commons/logging/1.3.0-RC1/site/index.html >(note some *relative* links are broken and the 1.3.0 directories > are not yet created - these will be OK once the site is deployed.) > > JApiCmp Report (compared to 1.2): > > https://dist.apache.org/repos/dist/dev/commons/logging/1.3.0-RC1/site/japicmp.html >Note that this report contains false-positives regarding generics: > Generics are erased at compile-time, so can't be binary incompatible. > > RAT Report: > > https://dist.apache.org/repos/dist/dev/commons/logging/1.3.0-RC1/site/rat-report.html > > KEYS: > https://downloads.apache.org/commons/KEYS > > Please review the release candidate and vote. > This vote will close no sooner than 72 hours from now. > > [
Re: [VOTE] Release Apache Commons IO 2.15.1 based on RC1
+1 Struggled a little with the SPDX stuff, but all in all it looks good. Reports all look correct (RAT included), all tests run appropriately across java 8, 11, 17, and 21 Signatures all check out. Send it! > On Nov 24, 2023, at 11:38 AM, Gary Gregory wrote: > > We have fixed quite one important bug and added some enhancements > since Apache Commons IO 2.15.0 was released, so I would like to > release Apache Commons IO 2.15.1. > > Apache Commons IO 2.15.1 RC1 is available for review here: >https://dist.apache.org/repos/dist/dev/commons/io/2.15.1-RC1 (svn > revision 65522) > > The Git tag commons-io-2.15.1-RC1 commit for this RC is > dc51644d5adbb0c461efb58380ec51fbca10005d which you can browse here: > > https://gitbox.apache.org/repos/asf?p=commons-io.git;a=commit;h=dc51644d5adbb0c461efb58380ec51fbca10005d > You may checkout this tag using: >git clone https://gitbox.apache.org/repos/asf/commons-io.git > --branch commons-io-2.15.1-RC1 commons-io-2.15.1-RC1 > > Maven artifacts are here: > > https://repository.apache.org/content/repositories/orgapachecommons-1675/commons-io/commons-io/2.15.1/ > > These are the artifacts and their hashes: > > #Release SHA-512s > #Fri Nov 24 11:28:20 EST 2023 > commons-io-2.15.1-bin.tar.gz=c00b9cbd8e213311137e10e3425cf19af60c737103b3ed968c33fdc5f803892f364f4e754a7d3a222a579ee6a58a1e8731ef51835d516d2a6aab8fd2f0845e35 > commons-io-2.15.1-bin.zip=944d0e2e750895d8371c7ecbed5e0593bceec404b7a0c6c9f1c2e77986ccabb2280b84485dcf34ae4339256ae164b8e04d4b95101bbfaf28de24aea711fed4bd > commons-io-2.15.1-bom.json=7186ba77d019082653b32b08f91ed64d9de7ed567d9978a7888acc87ee9c8af1b0b4344a4ffd7f01b2cb5393b5fb74c368e2769527a5242372c124ba2625db19 > commons-io-2.15.1-bom.xml=afc61569e85d1a4d4c6c49a91caae3479cd79c6ba9623d2f662a22ee0129111e42d668414560b16fce9606f602a2cca2127f9de57e524332316ba871ffe90e31 > commons-io-2.15.1-javadoc.jar=f275a97668465fe467bd3a690d60da4d842957b94fe22247bbeff43afa4ad008d7fed4e194f8f42ac55b3979a4015dc907f02259e2fe679288f63e469e31366c > commons-io-2.15.1-sources.jar=3ee4e22de8a3e04ff8651873b596a23bd517152f3ede3d14af1e5b6b52eb878f360a2ac672453cf67efb948fea4e969019f9023dd7d1d1b064fb164cc17154a2 > commons-io-2.15.1-src.tar.gz=809c7aa66354f2e35fd23f295c4e2f325596ee7f842b7f63f6acc3bd9377c17d4dd276ce62c477fff8d51d0d660e9addbc068270a876097cbecfe3e64f57f385 > commons-io-2.15.1-src.zip=f98e754fe68827390960f5ca08d8b3ae4eed54243e164c9e347f6f8f40519d096f6bfff4e2696d79870576be36a7140a6cea600381c3c8739361e72a6b392375 > commons-io-2.15.1-test-sources.jar=6a1a70ef392183ad0217e8f517ddcce0fb840c1b6076f9a3407a240e3738da94ce24639422fcda232cd96526360a85284765bef60c127b2dd2be8e47ee6fe96c > commons-io-2.15.1-tests.jar=2bfeac593dfa23cc0da62e4a2c3470ef63ee54ca6987ac2176cb437d0c3ca867f0d92b62d166244da94d9154362cf58486904ef35c3c95645dcd8074bb4d6674 > commons-io_commons-io-2.15.1.spdx.json=eada6a6c341abad84bad3d3fd6e9a00326bf7646110bcc46c6db997bc9d28eed372daa622371abbaad5abf58f47bd4870c7af9f0662d5769e6cb71565987be15 > > I have tested this with > > mvn -V -Prelease -Ptest-deploy -P jacoco -P japicmp clean package site deploy > > using: > > Apache Maven 3.9.5 (57804ffe001d7215b5e7bcb531cf83df38f93546) > Maven home: /usr/local/Cellar/maven/3.9.5/libexec > Java version: 21.0.1, vendor: Homebrew, runtime: > /usr/local/Cellar/openjdk/21.0.1/libexec/openjdk.jdk/Contents/Home > Default locale: en_US, platform encoding: UTF-8 > OS name: "mac os x", version: "14.1.1", arch: "x86_64", family: "mac" > > Darwin 23.1.0 Darwin Kernel Version 23.1.0: Mon Oct 9 21:27:27 > PDT 2023; root:xnu-10002.41.9~6/RELEASE_X86_64 x86_64 > > Details of changes since 2.15.0 are in the release notes: > > https://dist.apache.org/repos/dist/dev/commons/io/2.15.1-RC1/RELEASE-NOTES.txt > > https://dist.apache.org/repos/dist/dev/commons/io/2.15.1-RC1/site/changes-report.html > > Site: > > https://dist.apache.org/repos/dist/dev/commons/io/2.15.1-RC1/site/index.html >(note some *relative* links are broken and the 2.15.1 directories > are not yet created - these will be OK once the site is deployed.) > > JApiCmp Report (compared to 2.15.0): > > https://dist.apache.org/repos/dist/dev/commons/io/2.15.1-RC1/site/japicmp.html > > RAT Report: > > https://dist.apache.org/repos/dist/dev/commons/io/2.15.1-RC1/site/rat-report.html > > KEYS: > https://downloads.apache.org/commons/KEYS > > Please review the release candidate and vote. > This vote will close no sooner than 72 hours from now. > > [ ] +1 Release these artifacts > [ ] +0 OK, but... > [ ] -0 OK, but really should fix... > [ ] -1 I oppose this release because... > > Thank you, > > Gary Gregory, > Release Manager (using key 86fdc7e2a11262cb) > > For following is intended as a helper and refresher for reviewers. > > Validating a release candidate > == > > These guidelines are NOT complete. > > Requirements: Git, Java, Maven. > > You can validate a release from a release candidate
[All] Download page broken for several components
Hello. For https://commons.apache.org/geometry/download_geometry.cgi https://commons.apache.org/math/download_math.cgi https://commons.apache.org/numbers/download_numbers.cgi https://commons.apache.org/statistics/download_statistics.cgi https://commons.apache.org/rng/download_rng.cgi much of the usual contents (namely links to "zip" and "tar" files) is missing. Page also does not correctly display the menus. logo, ... Gilles - To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org For additional commands, e-mail: dev-h...@commons.apache.org
[LANG] Bad download links in the Download web page (3.13.0)
Hi, In the web page "Download Apache Commons Lang" (https://commons.apache.org/proper/commons-lang/download_lang.cgi), in the section "Apache Commons Lang 3.13.0", the four download links give "404 Not Found error": - commons-lang3-3.13.0-bin.tar.gz - commons-lang3-3.13.0-bin.zip - commons-lang3-3.13.0-src.tar.gz - commons-lang3-3.13.0-src.zip Example: # curl -I https://dlcdn.apache.org//commons/lang/binaries/commons-lang3-3.13.0-bin.tar.gz HTTP/2 404 SHA512sum and PGP links are good. Request: make download links operational. Questions: - Where to share the issue? - Is this mailing list the right place? - Or an issue in the LANG Jira project? - Or in the "www.apache.org website" project (ASFSITE)? Thank you in advance :-) Regards, Cpm. -- DEVINSY sarl - Développements en S.I. http://www.devinsy.fr/ Tél. +33 (0)6 26 72 40 04 OpenPGP_signature.asc Description: OpenPGP digital signature
Re: [VOTE] Release Apache Commons Logging 1.3.0 based on RC1
Le lun. 27 nov. 2023 à 00:15, Piotr P. Karwasz a écrit : > [...] > +1 (non binding): everything works correctly with the following remarks: > > 1. the SPDX artifact is not reproducible, > 2. For some strange reason I had to set `TZ=America/New_York` to make > the main JAR reproducible. Either the Moditect or the Maven JAR plugin > are responsible for that. > 3. The SHA512 sums in the distribution can not be used with > `sha512sum -c` (they lack the file name). Maybe related to this old feature request: https://issues.apache.org/jira/browse/COMMONSSITE-133 Gilles - To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org For additional commands, e-mail: dev-h...@commons.apache.org
Re: [VOTE] Release Apache Commons Logging 1.3.0 based on RC1
Hi Gary, > Please review the release candidate and vote. > This vote will close no sooner than 72 hours from now. > > [ ] +1 Release these artifacts > [ ] +0 OK, but... > [ ] -0 OK, but really should fix... > [ ] -1 I oppose this release because... I performed the following tests: * I tested the signature and hashes of the ZIP archives, * I tested the source archive and the reproducibility of binaries with: mvn clean verify artifact:compare -Dreference.repo=https://repository.apache.org/content/repositories/orgapachecommons-1676 * I tested 4 simple JLink runtimes: JCL + Log4j Core 2.x, JCL + Log4j Core 3.x, JCL + `java.logging` and just JCL. +1 (non binding): everything works correctly with the following remarks: 1. the SPDX artifact is not reproducible, 2. For some strange reason I had to set `TZ=America/New_York` to make the main JAR reproducible. Either the Moditect or the Maven JAR plugin are responsible for that. 3. The SHA512 sums in the distribution can not be used with `sha512sum -c` (they lack the file name). Piotr - To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org For additional commands, e-mail: dev-h...@commons.apache.org
[VOTE] Release Apache Commons Logging 1.3.0 based on RC1
We have fixed a few bugs and added some enhancements since Apache Commons Logging 1.2 was released, so I would like to release Apache Commons Logging 1.3.0. Apache Commons Logging 1.3.0 RC1 is available for review here: https://dist.apache.org/repos/dist/dev/commons/logging/1.3.0-RC1 (svn revision 65553) The Git tag commons-logging-1.3.0-RC1 commit for this RC is e0255a5845814802586b91c889ab3e9fc4bf9d68 which you can browse here: https://gitbox.apache.org/repos/asf?p=commons-logging.git;a=commit;h=e0255a5845814802586b91c889ab3e9fc4bf9d68 You may checkout this tag using: git clone https://gitbox.apache.org/repos/asf/commons-logging.git --branch commons-logging-1.3.0-RC1 commons-logging-1.3.0-RC1 Maven artifacts are here: https://repository.apache.org/content/repositories/orgapachecommons-1676/commons-logging/commons-logging/1.3.0/ These are the artifacts and their hashes: #Release SHA-512s #Sun Nov 26 16:38:45 EST 2023 commons-logging-1.3.0-adapters.jar=0b67e5fbca807b3d00ab5569cfac9fd14e268302ef514dee52eb1272762b35211d602045aefa71731108b900f6e0b7c78c3df39a989f3b86736e95a471b342c6 commons-logging-1.3.0-api.jar=d801af15997767abfbf0168651b19a55b8958e3b8c0106e054bdfd0098fdcb198c8dad0c123bd91448d0cb7b81851d4606319e43fed102c976b47143e481f371 commons-logging-1.3.0-bin.tar.gz=1fb9e4537fc59b75baf83b72a8e484604e6124ff7969b6f82955b29beeb5b86d9d115a494a6687e9a89a0b274f1ae9c226f289a7531334cc0451a3d4d5c2e3dc commons-logging-1.3.0-bin.zip=43291b189957da5882eaf753792a041cd25f599b7fb6d960a16799ae450ae3cde59197fe4a664d59243a44c0cdd067eb9979ef2a225b762b0f56264a871c325c commons-logging-1.3.0-bom.json=07580d9d52d4f93bf2a79e41388549a4f6f814cfcc5d6e05832036e480d0364e0bce212b79cc4e921d55587a00e0d1d1a1bcf8b3195fe9765e94f38294b60170 commons-logging-1.3.0-bom.xml=48a60112f79f6809a515a525837094b16e0ebff7daeeb561f20b639f18d47b3585f8e21595c469229caca9a0f2287649dbd8ce70105baa7d36bd621b68f42af7 commons-logging-1.3.0-javadoc.jar=73abbcf238b831d33fdb5c62406b6066183e3dce603535203b6fb0abc34c6aad9605eec2a5ca11981a2544b81447f8580f27a26f66e564f308c35152391c2cd7 commons-logging-1.3.0-sources.jar=ca39a42b2380c2c85800368546d8903b72e13f62bec665dd52db16f21dc214ecf81ff8a51f4739b5393b1d31326668e4ad5d0402eb4570728ad2a4321aeb6aa1 commons-logging-1.3.0-src.tar.gz=20cc40c7d7848da618801a86333f3984151d3089f806e5d7a1e92c83c1f90d330f1c7ded5d0ae70e48dd9de684f2e5da32de24fa2c406f6b419f77704c0e74f8 commons-logging-1.3.0-src.zip=516db2b8854846cf4c2bf5f4f3f4b7fc132183a7003eed0cff291f53f7f0a35d0dc4cc7eb362cd99ad5bf619620f16f7079e3015a7e01bda9e8802eca04a3fa3 commons-logging-1.3.0-test-sources.jar=159ec27c4343f926fe1cdc8977138b5200ef6f1284a3361ae3cd19520d3e7b117e418272a4534b768859f1229e8ff7cd3555bed4f292c27e583a92fe9f2f commons-logging-1.3.0-tests.jar=fb1d052e16ec83f9c6002a44ef79b84c08ad04b9ac3d378060e6adcf6d98860f4411c114837cca872427b1e5c663060a77f7157aabadf81fac1979ea34b44055 commons-logging_commons-logging-1.3.0.spdx.json=a416b9ae6d632f0638eb1c90184ecbe85bb91ce641b5ccea6ed64a144a6af80b20decaeb5d369aabb5e1cedd266d966fec5bc7517465414ab68036c526f9cb21 I have tested this with mvn -V -Prelease -Ptest-deploy -P jacoco -P japicmp clean package site deploy using: Apache Maven 3.9.5 (57804ffe001d7215b5e7bcb531cf83df38f93546) Maven home: /usr/local/Cellar/maven/3.9.5/libexec Java version: 21.0.1, vendor: Homebrew, runtime: /usr/local/Cellar/openjdk/21.0.1/libexec/openjdk.jdk/Contents/Home Default locale: en_US, platform encoding: UTF-8 OS name: "mac os x", version: "14.1.1", arch: "x86_64", family: "mac" Darwin 23.1.0 Darwin Kernel Version 23.1.0: Mon Oct 9 21:27:27 PDT 2023; root:xnu-10002.41.9~6/RELEASE_X86_64 x86_64 Details of changes since 1.2 are in the release notes: https://dist.apache.org/repos/dist/dev/commons/logging/1.3.0-RC1/RELEASE-NOTES.txt https://dist.apache.org/repos/dist/dev/commons/logging/1.3.0-RC1/site/changes-report.html Site: https://dist.apache.org/repos/dist/dev/commons/logging/1.3.0-RC1/site/index.html (note some *relative* links are broken and the 1.3.0 directories are not yet created - these will be OK once the site is deployed.) JApiCmp Report (compared to 1.2): https://dist.apache.org/repos/dist/dev/commons/logging/1.3.0-RC1/site/japicmp.html Note that this report contains false-positives regarding generics: Generics are erased at compile-time, so can't be binary incompatible. RAT Report: https://dist.apache.org/repos/dist/dev/commons/logging/1.3.0-RC1/site/rat-report.html KEYS: https://downloads.apache.org/commons/KEYS Please review the release candidate and vote. This vote will close no sooner than 72 hours from now. [ ] +1 Release these artifacts [ ] +0 OK, but... [ ] -0 OK, but really should fix... [ ] -1 I oppose this release because... Thank you, Gary Gregory, Release Manager (using key 86fdc7e2a11262cb) For following is intended as a helper and refresher for reviewers. Validating a release candidate == These guidelines
