You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@commons.apache.org by "Piotr P. Karwasz" <pi...@mailing.copernik.eu> on 2025/02/07 22:37:43 UTC
Re: [VOTE] Release Apache Commons Logging 1.3.5 based on RC2
Hi Gary,
On 31.01.2025 16:38, Gary Gregory wrote:
> Please review the release candidate and vote.
> This vote will close no sooner than 72 hours from now.
>
> [ ] +1 Release these artifacts
> [ ] +0 OK, but...
> [ ] -0 OK, but really should fix...
> [ ] -1 I oppose this release because...
The binary distribution contains `findsecbugs-plugin-1.13.0.jar`, which
is a third-party library under LGPL-3.0.
I checked the rest (hashes, signatures, reproducibility) and everything
checks out except this detail. How do you plan to proceed?
Piotr
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
For additional commands, e-mail: dev-help@commons.apache.org
[RESULT][VOTE] Release Apache Commons Logging 1.3.5 based on RC2
Posted by Gary Gregory <ga...@gmail.com>.
This vote passes with the following binding +1s:
- Gary Gregory (ggregory)
- Henri Biestro (henrib)
- Piotr P. Karwasz (pkarwasz)
Gary
On Fri, Feb 7, 2025 at 8:31 PM Piotr P. Karwasz <pi...@mailing.copernik.eu>
wrote:
> Hi Gary,
>
> On 8.02.2025 00:35, Gary Gregory wrote:
> > Nice find! :-) I fixed the offending files (zip and tar). Committed SVN
> > revision 74783 (no longer revision 74565):
>
> After this change everything checks out:
>
> * hashes
>
> * signatures
>
> * build, test and reproducibility using:
>
> $ mvn -version
> Apache Maven 3.8.7
> Maven home: /usr/share/maven
> Java version: 21.0.6, vendor: Eclipse Adoptium, runtime:
> /usr/lib/jvm/temurin-21-jdk-amd64
> Default locale: pl_PL, platform encoding: UTF-8
> OS name: "linux", version: "6.1.0-18-amd64", arch: "amd64", family: "unix"
>
> $ $JAVA_HOME/bin/java --version
> openjdk 21.0.6 2025-01-21 LTS
> OpenJDK Runtime Environment Temurin-21.0.6+7 (build 21.0.6+7-LTS)
> OpenJDK 64-Bit Server VM Temurin-21.0.6+7 (build 21.0.6+7-LTS, mixed
> mode, sharing)
>
> * OSGi headers seem OK.
>
> +1, release the artifacts.
>
> Piotr
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
> For additional commands, e-mail: dev-help@commons.apache.org
>
>
Re: [VOTE] Release Apache Commons Logging 1.3.5 based on RC2
Posted by "Piotr P. Karwasz" <pi...@mailing.copernik.eu>.
Hi Gary,
On 8.02.2025 00:35, Gary Gregory wrote:
> Nice find! :-) I fixed the offending files (zip and tar). Committed SVN
> revision 74783 (no longer revision 74565):
After this change everything checks out:
* hashes
* signatures
* build, test and reproducibility using:
$ mvn -version
Apache Maven 3.8.7
Maven home: /usr/share/maven
Java version: 21.0.6, vendor: Eclipse Adoptium, runtime:
/usr/lib/jvm/temurin-21-jdk-amd64
Default locale: pl_PL, platform encoding: UTF-8
OS name: "linux", version: "6.1.0-18-amd64", arch: "amd64", family: "unix"
$ $JAVA_HOME/bin/java --version
openjdk 21.0.6 2025-01-21 LTS
OpenJDK Runtime Environment Temurin-21.0.6+7 (build 21.0.6+7-LTS)
OpenJDK 64-Bit Server VM Temurin-21.0.6+7 (build 21.0.6+7-LTS, mixed
mode, sharing)
* OSGi headers seem OK.
+1, release the artifacts.
Piotr
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
For additional commands, e-mail: dev-help@commons.apache.org
Re: [VOTE] Release Apache Commons Logging 1.3.5 based on RC2
Posted by Gary Gregory <ga...@gmail.com>.
On Fri, Feb 7, 2025 at 6:35 PM Gary Gregory <ga...@gmail.com> wrote:
> On Fri, Feb 7, 2025 at 5:40 PM Piotr P. Karwasz <pi...@mailing.copernik.eu>
> wrote:
> >
> > Hi Gary,
> >
> > On 31.01.2025 16:38, Gary Gregory wrote:
> > > Please review the release candidate and vote.
> > > This vote will close no sooner than 72 hours from now.
> > >
> > > [ ] +1 Release these artifacts
> > > [ ] +0 OK, but...
> > > [ ] -0 OK, but really should fix...
> > > [ ] -1 I oppose this release because...
> >
> > The binary distribution contains `findsecbugs-plugin-1.13.0.jar`, which
> > is a third-party library under LGPL-3.0.
> >
> > I checked the rest (hashes, signatures, reproducibility) and everything
> > checks out except this detail. How do you plan to proceed?
>
> Hi Piotr,
>
> Nice find! :-) I fixed the offending files (zip and tar). Committed SVN
> revision 74783 (no longer revision 74565):
>
I mean the new svn commit is 74784 (no longer revision 74565).
Gary
>
> -rw-r--r--@ 1 garygregory staff 1145477 Feb 7 18:02
> commons-logging-1.3.5-bin.tar.gz
> -rw-r--r--@ 1 garygregory staff 488 Feb 7 18:26
> commons-logging-1.3.5-bin.tar.gz.asc
> -rw-r--r--@ 1 garygregory staff 163 Feb 7 18:13
> commons-logging-1.3.5-bin.tar.gz.sha512
> -rw-r--r--@ 1 garygregory staff 1216474 Feb 7 17:57
> commons-logging-1.3.5-bin.zip
> -rw-r--r--@ 1 garygregory staff 488 Feb 7 18:27
> commons-logging-1.3.5-bin.zip.asc
> -rw-r--r--@ 1 garygregory staff 129 Feb 7 17:55
> commons-logging-1.3.5-bin.zip.sha512
>
> SHA512s are now:
>
> 54470384fb55eb58da991d2f046f98dd666a3e19eae88ae8e7e1b2c0dfd4f1dc57f697e328cc21540272bdca72ad19284f3e3146bbf0a4b4d0ce534a9a1d31b6
> commons-logging-1.3.5-bin.tar.gz
> 8c4397e18a15223dd1e7b3e3a985e465adacb96127b6716ec233f842906e591c90dae9b7d6ff5d6261d967baf164b10bec9a8643dc27c7ee55243f8da863d45a
> commons-logging-1.3.5-bin.zip
>
> I've fixed zip and tar generation locally.
>
> ASC files are also up to date.
>
> Gary
>
> >
> > Piotr
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
> > For additional commands, e-mail: dev-help@commons.apache.org
> >
>
Re: [VOTE] Release Apache Commons Logging 1.3.5 based on RC2
Posted by Gary Gregory <ga...@gmail.com>.
On Fri, Feb 7, 2025 at 5:40 PM Piotr P. Karwasz <pi...@mailing.copernik.eu>
wrote:
>
> Hi Gary,
>
> On 31.01.2025 16:38, Gary Gregory wrote:
> > Please review the release candidate and vote.
> > This vote will close no sooner than 72 hours from now.
> >
> > [ ] +1 Release these artifacts
> > [ ] +0 OK, but...
> > [ ] -0 OK, but really should fix...
> > [ ] -1 I oppose this release because...
>
> The binary distribution contains `findsecbugs-plugin-1.13.0.jar`, which
> is a third-party library under LGPL-3.0.
>
> I checked the rest (hashes, signatures, reproducibility) and everything
> checks out except this detail. How do you plan to proceed?
Hi Piotr,
Nice find! :-) I fixed the offending files (zip and tar). Committed SVN
revision 74783 (no longer revision 74565):
-rw-r--r--@ 1 garygregory staff 1145477 Feb 7 18:02
commons-logging-1.3.5-bin.tar.gz
-rw-r--r--@ 1 garygregory staff 488 Feb 7 18:26
commons-logging-1.3.5-bin.tar.gz.asc
-rw-r--r--@ 1 garygregory staff 163 Feb 7 18:13
commons-logging-1.3.5-bin.tar.gz.sha512
-rw-r--r--@ 1 garygregory staff 1216474 Feb 7 17:57
commons-logging-1.3.5-bin.zip
-rw-r--r--@ 1 garygregory staff 488 Feb 7 18:27
commons-logging-1.3.5-bin.zip.asc
-rw-r--r--@ 1 garygregory staff 129 Feb 7 17:55
commons-logging-1.3.5-bin.zip.sha512
SHA512s are now:
54470384fb55eb58da991d2f046f98dd666a3e19eae88ae8e7e1b2c0dfd4f1dc57f697e328cc21540272bdca72ad19284f3e3146bbf0a4b4d0ce534a9a1d31b6
commons-logging-1.3.5-bin.tar.gz
8c4397e18a15223dd1e7b3e3a985e465adacb96127b6716ec233f842906e591c90dae9b7d6ff5d6261d967baf164b10bec9a8643dc27c7ee55243f8da863d45a
commons-logging-1.3.5-bin.zip
I've fixed zip and tar generation locally.
ASC files are also up to date.
Gary
>
> Piotr
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
> For additional commands, e-mail: dev-help@commons.apache.org
>