[RESULT] [VOTE] Release Maven Dependency Plugin version 3.6.1

2023-10-23 Thread Michael Osipov
Hi, The vote has passed with the following result: +1: Sylwester Lachiewicz, Hervé Boutemy, Benjamin Marwell, Michael Osipov PMC quorum: reached I will promote the artifacts to the central repo, the source release ZIP file and add this release the board report.

Re: [VOTE] Release Maven Dependency Plugin version 3.6.1

2023-10-22 Thread Michael Osipov
Am 2023-10-20 um 23:28 schrieb Michael Osipov: Hi, we solved 7 issues: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317227=12353360 There are still a couple of issues left in JIRA: https://issues.apache.org/jira/projects/MDEP/issues Staging repo:

Re: [VOTE] Release Maven Dependency Plugin version 3.6.1

2023-10-21 Thread Benjamin Marwell
+1, but consider removing the dependency upgrade for commons from the release notes. It's been removed anyway. Improvement [MDEP-832] - Remove commons-collections-4 vs Dependency upgrade [MDEP-869] - commons-collections to 4.4 On Fri, 20 Oct 2023, 23:28 Michael Osipov, wrote: > Hi, > >

Re: [VOTE] Release Maven Dependency Plugin version 3.6.1

2023-10-21 Thread Herve Boutemy
+1 Reproducible Builds ok: reference build done with JDK 8 on Windows with umask 022 For people interested in details, I had to use JDK 8 Temurin but not Zulu to be able to reproduce the CycloneDX SBOM (because of the supported hasing algorithms difference between the 2 distributions)

Re: [VOTE] Release Maven Dependency Plugin version 3.6.1

2023-10-21 Thread Sylwester Lachiewicz
+1 W dniu pt., 20.10.2023 o 23:30 Michael Osipov napisał(a): > Hi, > > we solved 7 issues: > > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317227=12353360 > > There are still a couple of issues left in JIRA: > https://issues.apache.org/jira/projects/MDEP/issues > >

Re: [VOTE] Release Maven Dependency Plugin version 3.6.1

2023-10-21 Thread Elliotte Rusty Harold
I see a couple of open dependabot PRs that should probably go in. I'll merge them, but you'll need to recut to pick them up. On Fri, Oct 20, 2023 at 5:28 PM Michael Osipov wrote: > > Hi, > > we solved 7 issues: > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317227=12353360

Re: [VOTE] Release Maven Dependency Plugin version 3.6.1

2023-10-21 Thread Elliotte Rusty Harold
https://issues.apache.org/jira/projects/MDEP/issues/MDEP-812?filter=allopenissues is prioritized as a blocker. That's probably overstating that one — it smells like user error or an old version — but please do downgrade its priority before releasing. On Fri, Oct 20, 2023 at 5:28 PM Michael Osipov

[VOTE] Release Maven Dependency Plugin version 3.6.1

2023-10-20 Thread Michael Osipov
Hi, we solved 7 issues: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317227=12353360 There are still a couple of issues left in JIRA: https://issues.apache.org/jira/projects/MDEP/issues Staging repo: https://repository.apache.org/content/repositories/maven-2013/