Howdy,
The vote continues, as Herve -1 was ONLY about binaries, while the vote is
about source bundles.
The "take two" repository staged:
https://repository.apache.org/content/repositories/maven-1996/
That repositository is identical to maven-1995, ONLY changes are the fixed
binaries (hence,
+1
niedz., 1 paź 2023 o 20:03 Michael Osipov napisał(a):
> Hi,
>
> we solved 5 issues:
>
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317320=12353413
>
> There are still a couple of issues left in JIRA:
>
>
+1
On Mon, Oct 2, 2023 at 8:03 PM Slawomir Jaranowski
wrote:
> +1
>
> Now permissions in binary distributions look ok.
> Please also update in dist/dev
>
> pon., 2 paź 2023 o 19:38 Tamás Cservenák napisał(a):
>
> > Howdy,
> >
> > The vote continues, as Herve -1 was ONLY about binaries, while
+1
Now permissions in binary distributions look ok.
Please also update in dist/dev
pon., 2 paź 2023 o 19:38 Tamás Cservenák napisał(a):
> Howdy,
>
> The vote continues, as Herve -1 was ONLY about binaries, while the vote is
> about source bundles.
>
> The "take two" repository staged:
>
+1
niedz., 1 paź 2023 o 20:19 Michael Osipov napisał(a):
> Hi,
>
> IMPORTANT: Requires Doxia Sitetools 2.0.0-M12 vote/staging repo!
>
> we solved 3 issues:
>
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317922=12353492
>
> There are no issues left in JIRA:
>
>
Hi,
IMPORTANT: Requires Doxia Sitetools 2.0.0-M12, Maven Reporting Impl
4.0.0-M10 vote/staging repo!
we solved 3 issues:
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317922=12353680
There are still a couple of issues left in JIRA:
+1
Eyeballed it and did some basic testing on MacOS. All seems good here.
-h
On Sun, Oct 1, 2023 at 12:07 PM Tamás Cservenák wrote:
> Howdy,
>
> Note: This release completes the main goals of Maven 3.9.x lineage, among
> others moving to Java 8 and transition to latest Resolver 1.9.x
+1
Reproducible Builds now ok: reference build done with JDK 17 on *nix and umask
022
and dist area in sync
thank you
Hervé
On 2023/10/02 17:37:26 Tamás Cservenák wrote:
> Howdy,
>
> The vote continues, as Herve -1 was ONLY about binaries, while the vote is
> about source bundles.
>
> The
+1
niedz., 1 paź 2023, 21:47 użytkownik Tamás Cservenák
napisał:
> +1
>
> On Sun, Oct 1, 2023, 20:19 Michael Osipov wrote:
>
> > Hi,
> >
> > IMPORTANT: Requires Doxia Sitetools 2.0.0-M12 vote/staging repo!
> >
> > we solved 3 issues:
> >
> >
>
+1
niedz., 1 paź 2023, 21:47 użytkownik Tamás Cservenák
napisał:
> +1
>
> On Sun, Oct 1, 2023, 20:03 Michael Osipov wrote:
>
> > Hi,
> >
> > we solved 5 issues:
> >
> >
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317320=12353413
> >
> > There are still a couple of
+1
but Reproducible not fully ok: reference build done with JDK 17 on *nix and
umask 022
apache-maven-3.9.5-bin.zip and .tar.gz suffer from weird umask (go-r) on wagon
jars:
$ diffoscope target/reference/org.apache.maven/apache-maven-3.9.5-bin.zip
thinking twice, I need to change to -1: this may impact users that expect to
use the group permissions to use Maven binaries
sorry
I don't know what tests you are doing with permissions on your environment, but
these tests leak releases :(
Regards,
Hervé
On 2023/10/02 07:11:02 Herve Boutemy
The Apache Maven team is pleased to announce the release of the Apache Maven
Artifact Plugin, version 3.5.0
This plugin is used for Reproducible Builds tasks about artifacts.
https://maven.apache.org/plugins/maven-artifact-plugin/
You should specify the version in your project's plugin
+1
Reproducible Builds ok: reference build done with JDK 8 on Windows and umask
022
Regards,
Hervé
Le dimanche 1 octobre 2023, 20:03:02 CEST Michael Osipov a écrit :
> Hi,
>
> we solved 5 issues:
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317320
> rsion=12353413
>
> since anything downloaded comes over https and is already signature
> checked
Transport security is something completely different and does not ensure
you get the "right" artifact just that is was not tampered in between.
> How does this signature check prevent someone from doing something
Am 2023-10-01 um 20:19 schrieb Michael Osipov:
Hi,
IMPORTANT: Requires Doxia Sitetools 2.0.0-M12 vote/staging repo!
we solved 3 issues:
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317922=12353492
There are no issues left in JIRA:
Am 2023-10-01 um 20:03 schrieb Michael Osipov:
Hi,
we solved 5 issues:
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317320=12353413
There are still a couple of issues left in JIRA:
Hi,
The vote has passed with the following result:
+1 : Sylwester Lachiewicz, Tamás Cservenák, Michael Osipov, Hervé Boutemy
PMC quorum reached
I will promote the source release zip file to Apache distribution area and the
artifacts to the central repo.
was intended to the list :)
-- Message transmis --
Objet : Re: [VOTE] Release Apache Maven Artifact Plugin version 3.5.0
Date : samedi 30 septembre 2023, 18:45:51 CEST
De : Michael Osipov
À : Hervé Boutemy
Am 2023-09-29 um 08:00 schrieb Hervé Boutemy:
> Hi,
>
> We solved 6
+1
Reproducible Builds ok: reference build done with JDK 8 on Windows and umask
022
Regards,
Hervé
Le dimanche 1 octobre 2023, 20:19:26 CEST Michael Osipov a écrit :
> Hi,
>
> IMPORTANT: Requires Doxia Sitetools 2.0.0-M12 vote/staging repo!
>
> we solved 3 issues:
>
Bah,
This is the same problem as before... but originally it happened on my
desktop. This time the release was done from my laptop :(
I believe the fix is the same as before: I should rebuild from the tag,
after I fixed my local repository, as source bundles we vote on are
unchanged...
T
On
https://maven.apache.org/plugin-tools/maven-script/ mentions in
passing that scripting support is deprecated and will be dropped in
Maven 4.
This is a major change, and should be made much more obvious. For
example, put it in its own paragraph, maybe make it bold.
Also the release notes for
+1
tested with various projects no issue found.
thanks!
On Mon, 2 Oct 2023 at 05:07, Tamás Cservenák wrote:
>
> Howdy,
>
> Note: This release completes the main goals of Maven 3.9.x lineage, among
> others moving to Java 8 and transition to latest Resolver 1.9.x features
> (new robust
Hi,
+1 from me.
Kind regards
Karl Heinz Marbaise
On 01.10.23 20:03, Michael Osipov wrote:
Hi,
we solved 5 issues:
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317320=12353413
There are still a couple of issues left in JIRA:
Hi,
+1 from me.
Kind regards
Karl Heinz Marbaise
On 01.10.23 20:19, Michael Osipov wrote:
Hi,
IMPORTANT: Requires Doxia Sitetools 2.0.0-M12 vote/staging repo!
we solved 3 issues:
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12317922=12353492
There are no issues left in
Hi,
+1 from me...
with the exceptions as Hervé mentioned (permissions on the wagon jars
and httpclient jar)... and the points Gary mentioned.
Kind regards
Karl Heinz Marbaise
On 01.10.23 21:07, Tamás Cservenák wrote:
Howdy,
Note: This release completes the main goals of Maven 3.9.x
yes, you can drop the staging repository and re-deploy: only the 2 -bin
archives will be different
Regards
Hervé
Le lundi 2 octobre 2023, 11:10:36 CEST Tamás Cservenák a écrit :
> Bah,
>
> This is the same problem as before... but originally it happened on my
> desktop. This time the release
27 matches
Mail list logo
