Re: [VOTE] Release Apache Grails (incubating) 7.0.0-M4

2025-06-09 Thread Søren Berg Glasius 
+1 (binding)

Den man. 9. jun. 2025 kl. 02.37 skrev Daniel Sun :

> +1 (binding)
>
> Cheers,
> Daniel Sun
>
> On 2025/06/07 09:24:06 James Daugherty wrote:
> > Hi Everyone,
> >
> >
> > The Apache Grails podling has voted to approve the release of Apache
> Grails
> > (incubating) 7.0.0-M4. Please note that we "restaged" this release and
> > redid the vote after a critical issue was found. Unfortuntely, I made the
> > mistake of using the same subject so lists.apache.org shows one thread
> for
> > both sets of votes.
> >
> >
> > As the incubation host, we now kindly request the Groovy PMC to review &
> > approve our initial ASF release.
> >
> >
> > Grails vote thread:
> >
> > * https://lists.apache.org/thread/wdsyo1wzxt06bqcpnlyw6q56n2yj6xpj
> >
> >
> > Vote result thread:
> >
> > * https://lists.apache.org/thread/k2p46y0tx9r0brtgwtljvfno6pdndqon
> >
> >
> > The Grails framework consists of 2 repositories, so there are 2 tags for
> > this release:
> >
> > * (grails-core)
> https://github.com/apache/grails-core/releases/tag/v7.0.0-M4
> >
> > * (grails-forge)
> > https://github.com/apache/grails-forge/releases/tag/v7.0.0-M4
> >
> >
> > The artifacts to be voted on are located as follows (r77366):
> >
> > Source release:
> > https://dist.apache.org/repos/dist/dev/grails/core/7.0.0-M4/sources
> >
> > Binary distributions:
> > https://dist.apache.org/repos/dist/dev/grails/core/7.0.0-M4/distribution
> >
> >
> > Release artifacts are signed with a key from the following file:
> >
> > https://dist.apache.org/repos/dist/release/grails/KEYS
> >
> >
> > Our release process, including verification steps, are documented here:
> > https://github.com/apache/grails-core/blob/7.0.x/RELEASE.md The last
> > section of this document `Appendix: Verification from a Container` is
> > likely relevant.  The main maven staging repo id is
> > `orgapachegrails-1053`.  We know we need to improve our build
> instructions
> > in README.md, and plan do so in the next release.  Finally, there are 2
> > known groovy issues that prevent the build from being fully reproducible.
> > For the differing artifacts, we have compared the decompiled classes to
> > ensure they are as we expect to meet the ASF security team's
> requirements.
> >
> >
> > The vote for this release is open for the next 72 hours.
> >
> >
> > [ ] +1 Release Apache Grails (incubating) 7.0.0-M4
> >
> > [ ]  0 I don't have a strong opinion about this, but I assume it's ok
> >
> > [ ] -1 Do not release Apache Grails (incubating) 7.0.0-M4 because...
> >
> >
> > Regards,
> >
> > James
> >
>


-- 

Med venlig hilsen,
Søren Berg Glasius

Hedevej 1, Gl. Rye, 8680 Ry
Mobile: +45 40 44 91 88
--- Press ESC once to quit - twice to save the changes.

Re: [VOTE] Release Apache Grails (incubating) 7.0.0-M4

2025-06-08 Thread Daniel Sun 
+1 (binding)

Cheers,
Daniel Sun

On 2025/06/07 09:24:06 James Daugherty wrote:
> Hi Everyone,
> 
> 
> The Apache Grails podling has voted to approve the release of Apache Grails
> (incubating) 7.0.0-M4. Please note that we "restaged" this release and
> redid the vote after a critical issue was found. Unfortuntely, I made the
> mistake of using the same subject so lists.apache.org shows one thread for
> both sets of votes.
> 
> 
> As the incubation host, we now kindly request the Groovy PMC to review &
> approve our initial ASF release.
> 
> 
> Grails vote thread:
> 
> * https://lists.apache.org/thread/wdsyo1wzxt06bqcpnlyw6q56n2yj6xpj
> 
> 
> Vote result thread:
> 
> * https://lists.apache.org/thread/k2p46y0tx9r0brtgwtljvfno6pdndqon
> 
> 
> The Grails framework consists of 2 repositories, so there are 2 tags for
> this release:
> 
> * (grails-core) https://github.com/apache/grails-core/releases/tag/v7.0.0-M4
> 
> * (grails-forge)
> https://github.com/apache/grails-forge/releases/tag/v7.0.0-M4
> 
> 
> The artifacts to be voted on are located as follows (r77366):
> 
> Source release:
> https://dist.apache.org/repos/dist/dev/grails/core/7.0.0-M4/sources
> 
> Binary distributions:
> https://dist.apache.org/repos/dist/dev/grails/core/7.0.0-M4/distribution
> 
> 
> Release artifacts are signed with a key from the following file:
> 
> https://dist.apache.org/repos/dist/release/grails/KEYS
> 
> 
> Our release process, including verification steps, are documented here:
> https://github.com/apache/grails-core/blob/7.0.x/RELEASE.md The last
> section of this document `Appendix: Verification from a Container` is
> likely relevant.  The main maven staging repo id is
> `orgapachegrails-1053`.  We know we need to improve our build instructions
> in README.md, and plan do so in the next release.  Finally, there are 2
> known groovy issues that prevent the build from being fully reproducible.
> For the differing artifacts, we have compared the decompiled classes to
> ensure they are as we expect to meet the ASF security team's requirements.
> 
> 
> The vote for this release is open for the next 72 hours.
> 
> 
> [ ] +1 Release Apache Grails (incubating) 7.0.0-M4
> 
> [ ]  0 I don't have a strong opinion about this, but I assume it's ok
> 
> [ ] -1 Do not release Apache Grails (incubating) 7.0.0-M4 because...
> 
> 
> Regards,
> 
> James
>

Re: [VOTE] Release Apache Grails (incubating) 7.0.0-M4

2025-06-08 Thread Jochen Theodorou 

+1, but with issues


Following Pauls variant:

On 07.06.25 12:26, Paul King wrote:
[...]

I checked:
* "incubating" in distribution file names
* NOTICE, LICENSE and DISCLAIMER files exist
* No unexpected binary files in src zip
* Verified signatures and checksums for all zips
* Gradle bootstrap for src zip using: "gradle -p gradle-bootstrap" (I
used gradle 8.11)
* Build from source: "./gradlew build -PskipTests"


had it work till here and then I wanted to install. It is a bit strange 
to put a INSTALL file in there, but then to just tell people to go to a 
website, where the instruction for the latest build are linked... which 
my not be the current build? There it says to do "./gradlew install" 
which would not have worked at all without the bootstrap step, which is 
not mentioned there. The install finally wants to verify the grails 
distribution pgp key... why? I really do not want to push to public 
maven! Also not using :grails-async-core:signMavenPublication


Well... I take a look at the binary distribution...

[...]

* I tried:
./grails-forge-cli-help
./grails-forge-cli create-app hello
./grails-forge-cli --version
./grails-shell-cli --version


those work... but the installation instruction even for the binary 
version are kind of useless to me. The apps those commands create depend 
on released (even if only locally) grails jars. But how do I "release" 
them if I have the binary version?



* I think additional guidance in the vote email on what to read to
build from src would be useful for newbies


very much so.

[...]
bye Jochen

Re: [VOTE] Release Apache Grails (incubating) 7.0.0-M4

2025-06-07 Thread Graeme Rocher 
+1

On Sat, Jun 7, 2025 at 6:34 AM Guillaume Laforge  wrote:

> +1 (binding)
>
> On Sat, Jun 7, 2025 at 12:27 PM Paul King  wrote:
>
>> +1 paulk (binding)
>>
>> Carrying forward my vote from the grails dev list:
>>
>> I checked:
>> * "incubating" in distribution file names
>> * NOTICE, LICENSE and DISCLAIMER files exist
>> * No unexpected binary files in src zip
>> * Verified signatures and checksums for all zips
>> * Gradle bootstrap for src zip using: "gradle -p gradle-bootstrap" (I
>> used gradle 8.11)
>> * Build from source: "./gradlew build -PskipTests"
>> * Build from source for grails-forge: as above
>> (used MacOS this time and didn't get spotless complaints)
>> * I note the xsd/dtd CDDL licenses which normally wouldn't be in a source
>> distribution but are allowed "by virtue of being specified by a standard"
>> for a small number of files as per tomcat src release
>> * For next release, please give more attention to NOTICE/LICENSE files
>> in jar artifacts
>> * Just the known "grails-forge/.gitattributes" error from the RAT report
>> * I tried:
>> ./grails-forge-cli-help
>> ./grails-forge-cli create-app hello
>> ./grails-forge-cli --version
>> ./grails-shell-cli --version
>> * I think additional guidance in the vote email on what to read to
>> build from src would be useful for newbies
>>
>> Cheers, Paul.
>>
>> On Sat, Jun 7, 2025 at 7:24 PM James Daugherty
>>  wrote:
>> >
>> > Hi Everyone,
>> >
>> >
>> > The Apache Grails podling has voted to approve the release of Apache
>> Grails (incubating) 7.0.0-M4. Please note that we "restaged" this release
>> and redid the vote after a critical issue was found. Unfortuntely, I made
>> the mistake of using the same subject so lists.apache.org shows one
>> thread for both sets of votes.
>> >
>> >
>> > As the incubation host, we now kindly request the Groovy PMC to review
>> & approve our initial ASF release.
>> >
>> >
>> > Grails vote thread:
>> >
>> > * https://lists.apache.org/thread/wdsyo1wzxt06bqcpnlyw6q56n2yj6xpj
>> >
>> >
>> > Vote result thread:
>> >
>> > * https://lists.apache.org/thread/k2p46y0tx9r0brtgwtljvfno6pdndqon
>> >
>> >
>> > The Grails framework consists of 2 repositories, so there are 2 tags
>> for this release:
>> >
>> > * (grails-core)
>> https://github.com/apache/grails-core/releases/tag/v7.0.0-M4
>> >
>> > * (grails-forge)
>> https://github.com/apache/grails-forge/releases/tag/v7.0.0-M4
>> >
>> >
>> > The artifacts to be voted on are located as follows (r77366):
>> >
>> > Source release:
>> https://dist.apache.org/repos/dist/dev/grails/core/7.0.0-M4/sources
>> >
>> > Binary distributions:
>> https://dist.apache.org/repos/dist/dev/grails/core/7.0.0-M4/distribution
>> >
>> >
>> > Release artifacts are signed with a key from the following file:
>> >
>> > https://dist.apache.org/repos/dist/release/grails/KEYS
>> >
>> >
>> > Our release process, including verification steps, are documented here:
>> https://github.com/apache/grails-core/blob/7.0.x/RELEASE.md The last
>> section of this document `Appendix: Verification from a Container` is
>> likely relevant.  The main maven staging repo id is
>> `orgapachegrails-1053`.  We know we need to improve our build instructions
>> in README.md, and plan do so in the next release.  Finally, there are 2
>> known groovy issues that prevent the build from being fully reproducible.
>> For the differing artifacts, we have compared the decompiled classes to
>> ensure they are as we expect to meet the ASF security team's requirements.
>> >
>> >
>> > The vote for this release is open for the next 72 hours.
>> >
>> >
>> > [ ] +1 Release Apache Grails (incubating) 7.0.0-M4
>> >
>> > [ ]  0 I don't have a strong opinion about this, but I assume it's ok
>> >
>> > [ ] -1 Do not release Apache Grails (incubating) 7.0.0-M4 because...
>> >
>> >
>> > Regards,
>> >
>> > James
>>
>
>
> --
> *Guillaume Laforge*
> Apache Groovy committer
> Developer Advocate @ Google Cloud 
>
>- Blog: glaforge.dev
>- X: @glaforge 
>- Bluesky: @glaforge.dev 
>- Mastodon: @[email protected] 
>
>

-- 
Graeme Rocher

Re: [VOTE] Release Apache Grails (incubating) 7.0.0-M4

2025-06-07 Thread Guillaume Laforge 
+1 (binding)

On Sat, Jun 7, 2025 at 12:27 PM Paul King  wrote:

> +1 paulk (binding)
>
> Carrying forward my vote from the grails dev list:
>
> I checked:
> * "incubating" in distribution file names
> * NOTICE, LICENSE and DISCLAIMER files exist
> * No unexpected binary files in src zip
> * Verified signatures and checksums for all zips
> * Gradle bootstrap for src zip using: "gradle -p gradle-bootstrap" (I
> used gradle 8.11)
> * Build from source: "./gradlew build -PskipTests"
> * Build from source for grails-forge: as above
> (used MacOS this time and didn't get spotless complaints)
> * I note the xsd/dtd CDDL licenses which normally wouldn't be in a source
> distribution but are allowed "by virtue of being specified by a standard"
> for a small number of files as per tomcat src release
> * For next release, please give more attention to NOTICE/LICENSE files
> in jar artifacts
> * Just the known "grails-forge/.gitattributes" error from the RAT report
> * I tried:
> ./grails-forge-cli-help
> ./grails-forge-cli create-app hello
> ./grails-forge-cli --version
> ./grails-shell-cli --version
> * I think additional guidance in the vote email on what to read to
> build from src would be useful for newbies
>
> Cheers, Paul.
>
> On Sat, Jun 7, 2025 at 7:24 PM James Daugherty
>  wrote:
> >
> > Hi Everyone,
> >
> >
> > The Apache Grails podling has voted to approve the release of Apache
> Grails (incubating) 7.0.0-M4. Please note that we "restaged" this release
> and redid the vote after a critical issue was found. Unfortuntely, I made
> the mistake of using the same subject so lists.apache.org shows one
> thread for both sets of votes.
> >
> >
> > As the incubation host, we now kindly request the Groovy PMC to review &
> approve our initial ASF release.
> >
> >
> > Grails vote thread:
> >
> > * https://lists.apache.org/thread/wdsyo1wzxt06bqcpnlyw6q56n2yj6xpj
> >
> >
> > Vote result thread:
> >
> > * https://lists.apache.org/thread/k2p46y0tx9r0brtgwtljvfno6pdndqon
> >
> >
> > The Grails framework consists of 2 repositories, so there are 2 tags for
> this release:
> >
> > * (grails-core)
> https://github.com/apache/grails-core/releases/tag/v7.0.0-M4
> >
> > * (grails-forge)
> https://github.com/apache/grails-forge/releases/tag/v7.0.0-M4
> >
> >
> > The artifacts to be voted on are located as follows (r77366):
> >
> > Source release:
> https://dist.apache.org/repos/dist/dev/grails/core/7.0.0-M4/sources
> >
> > Binary distributions:
> https://dist.apache.org/repos/dist/dev/grails/core/7.0.0-M4/distribution
> >
> >
> > Release artifacts are signed with a key from the following file:
> >
> > https://dist.apache.org/repos/dist/release/grails/KEYS
> >
> >
> > Our release process, including verification steps, are documented here:
> https://github.com/apache/grails-core/blob/7.0.x/RELEASE.md The last
> section of this document `Appendix: Verification from a Container` is
> likely relevant.  The main maven staging repo id is
> `orgapachegrails-1053`.  We know we need to improve our build instructions
> in README.md, and plan do so in the next release.  Finally, there are 2
> known groovy issues that prevent the build from being fully reproducible.
> For the differing artifacts, we have compared the decompiled classes to
> ensure they are as we expect to meet the ASF security team's requirements.
> >
> >
> > The vote for this release is open for the next 72 hours.
> >
> >
> > [ ] +1 Release Apache Grails (incubating) 7.0.0-M4
> >
> > [ ]  0 I don't have a strong opinion about this, but I assume it's ok
> >
> > [ ] -1 Do not release Apache Grails (incubating) 7.0.0-M4 because...
> >
> >
> > Regards,
> >
> > James
>


-- 
*Guillaume Laforge*
Apache Groovy committer
Developer Advocate @ Google Cloud 

   - Blog: glaforge.dev
   - X: @glaforge 
   - Bluesky: @glaforge.dev 
   - Mastodon: @[email protected]

Re: [VOTE] Release Apache Grails (incubating) 7.0.0-M4

2025-06-07 Thread Paul King 
+1 paulk (binding)

Carrying forward my vote from the grails dev list:

I checked:
* "incubating" in distribution file names
* NOTICE, LICENSE and DISCLAIMER files exist
* No unexpected binary files in src zip
* Verified signatures and checksums for all zips
* Gradle bootstrap for src zip using: "gradle -p gradle-bootstrap" (I
used gradle 8.11)
* Build from source: "./gradlew build -PskipTests"
* Build from source for grails-forge: as above
(used MacOS this time and didn't get spotless complaints)
* I note the xsd/dtd CDDL licenses which normally wouldn't be in a source
distribution but are allowed "by virtue of being specified by a standard"
for a small number of files as per tomcat src release
* For next release, please give more attention to NOTICE/LICENSE files
in jar artifacts
* Just the known "grails-forge/.gitattributes" error from the RAT report
* I tried:
./grails-forge-cli-help
./grails-forge-cli create-app hello
./grails-forge-cli --version
./grails-shell-cli --version
* I think additional guidance in the vote email on what to read to
build from src would be useful for newbies

Cheers, Paul.

On Sat, Jun 7, 2025 at 7:24 PM James Daugherty
 wrote:
>
> Hi Everyone,
>
>
> The Apache Grails podling has voted to approve the release of Apache Grails 
> (incubating) 7.0.0-M4. Please note that we "restaged" this release and redid 
> the vote after a critical issue was found. Unfortuntely, I made the mistake 
> of using the same subject so lists.apache.org shows one thread for both sets 
> of votes.
>
>
> As the incubation host, we now kindly request the Groovy PMC to review & 
> approve our initial ASF release.
>
>
> Grails vote thread:
>
> * https://lists.apache.org/thread/wdsyo1wzxt06bqcpnlyw6q56n2yj6xpj
>
>
> Vote result thread:
>
> * https://lists.apache.org/thread/k2p46y0tx9r0brtgwtljvfno6pdndqon
>
>
> The Grails framework consists of 2 repositories, so there are 2 tags for this 
> release:
>
> * (grails-core) https://github.com/apache/grails-core/releases/tag/v7.0.0-M4
>
> * (grails-forge) https://github.com/apache/grails-forge/releases/tag/v7.0.0-M4
>
>
> The artifacts to be voted on are located as follows (r77366):
>
> Source release: 
> https://dist.apache.org/repos/dist/dev/grails/core/7.0.0-M4/sources
>
> Binary distributions: 
> https://dist.apache.org/repos/dist/dev/grails/core/7.0.0-M4/distribution
>
>
> Release artifacts are signed with a key from the following file:
>
> https://dist.apache.org/repos/dist/release/grails/KEYS
>
>
> Our release process, including verification steps, are documented here: 
> https://github.com/apache/grails-core/blob/7.0.x/RELEASE.md The last section 
> of this document `Appendix: Verification from a Container` is likely 
> relevant.  The main maven staging repo id is `orgapachegrails-1053`.  We know 
> we need to improve our build instructions in README.md, and plan do so in the 
> next release.  Finally, there are 2 known groovy issues that prevent the 
> build from being fully reproducible.  For the differing artifacts, we have 
> compared the decompiled classes to ensure they are as we expect to meet the 
> ASF security team's requirements.
>
>
> The vote for this release is open for the next 72 hours.
>
>
> [ ] +1 Release Apache Grails (incubating) 7.0.0-M4
>
> [ ]  0 I don't have a strong opinion about this, but I assume it's ok
>
> [ ] -1 Do not release Apache Grails (incubating) 7.0.0-M4 because...
>
>
> Regards,
>
> James