You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@creadur.apache.org by "P. Ottlinger" <po...@apache.org> on 2026/03/11 23:59:49 UTC
[VOTE] Release Apache Creadur RAT 0.18
Dear friends of RAT,
the new v0.18 is ready for testing and fixes 13 issues. I've staged a
new release 0.18 - thanks for all feedback and contributions!
=RELEASE 0.18 ABSTRACT=
This intermediate release addresses a severe performance issue
encountered during RAT runs in version 0.17.
The issue has been resolved by reducing the sample size used for Tika
charset detection
from 12,000 bytes to 256 bytes (thanks to Ryan Schmitt).
In addition, the Java language level required to build RAT has been
raised to 17.
However, we recommend using at least JDK 21 due to a Javadoc issue
affecting certain JDK versions (tracked under RAT-497).
RAT now also uses UTF-8 as its default character set.
These changes allowed us to adopt more modern language features, resolve
numerous CVEs in dependent plugins and libraries,
and integrate with SonarCloud’s code analysis.
This release also includes a range of bug fixes, minor improvements, and
dependency updates.
Furthermore, RAT’s generated report is now produced in XHTML5, and
excessive INFO-level logging in the Maven plugin has been reduced.
Many thanks to all contributors and to our users for their valuable
feedback.
=View on 0.18=
* https://issues.apache.org/jira/projects/RAT/versions/12356398
(you need to login)
* https://github.com/apache/creadur-rat/releases/tag/apache-rat-project-0.18
=Staging area=
In order to use the staged release add this snippet to your pom:
<pluginRepositories>
<pluginRepository>
<id>staged-releases-rat-018</id>
<url>https://repository.apache.org/content/repositories/orgapachecreadur-1013/</url>
<pluginRepository>
</pluginRepositories>
or browse
https://repository.apache.org/content/repositories/orgapachecreadur-1013/org/apache/rat/
directly.
=VOTE is open until 2026-03-19 23:00 UTC=
Everyone is encouraged to vote, express their opinions and jump in if
they find anything wrong with the release. Only PMC votes are binding
on Apache, and for this candidate to become an official Apache
Software Foundation release 3 +1's are required and more +1's than
-1's.
This vote is open for at least 72 hours,
[ ] +1
[ ] +0
[ ] -1
until 2026-03-19 23:00 UTC.
NOTE
The downloads page and RAT webpage is not yet changed to reflect changes
in 0.18 and the dist area does not yet contain the release artifacts.
A preview page (generated before creating the release) is:
https://creadur.apache.org/rat018/
that will be deleted once the release is promoted.
Thanks,
Phil
Re: [VOTE] Release Apache Creadur RAT 0.18
Posted by Claude Warren <cl...@xenei.com>.
After reviewing comments here I switch my vote to
+1
On Tue, Mar 17, 2026 at 8:18 AM Gavin McDonald <gm...@apache.org> wrote:
> HI ALL,
>
>
> > [X] +1
> > [ ] +0
> > [ ] -1
>
> Kind regards
>
> Gavin
>
>
> On Thu, Mar 12, 2026 at 12:59 AM P. Ottlinger <po...@apache.org>
> wrote:
> >
> > Dear friends of RAT,
> >
> > the new v0.18 is ready for testing and fixes 13 issues. I've staged a
> > new release 0.18 - thanks for all feedback and contributions!
> >
> > =RELEASE 0.18 ABSTRACT=
> > This intermediate release addresses a severe performance issue
> > encountered during RAT runs in version 0.17.
> > The issue has been resolved by reducing the sample size used for Tika
> > charset detection
> > from 12,000 bytes to 256 bytes (thanks to Ryan Schmitt).
> >
> > In addition, the Java language level required to build RAT has been
> > raised to 17.
> > However, we recommend using at least JDK 21 due to a Javadoc issue
> > affecting certain JDK versions (tracked under RAT-497).
> > RAT now also uses UTF-8 as its default character set.
> >
> > These changes allowed us to adopt more modern language features, resolve
> > numerous CVEs in dependent plugins and libraries,
> > and integrate with SonarCloud’s code analysis.
> >
> > This release also includes a range of bug fixes, minor improvements, and
> > dependency updates.
> > Furthermore, RAT’s generated report is now produced in XHTML5, and
> > excessive INFO-level logging in the Maven plugin has been reduced.
> >
> > Many thanks to all contributors and to our users for their valuable
> > feedback.
> >
> > =View on 0.18=
> > * https://issues.apache.org/jira/projects/RAT/versions/12356398
> > (you need to login)
> >
> > *
> https://github.com/apache/creadur-rat/releases/tag/apache-rat-project-0.18
> >
> > =Staging area=
> >
> > In order to use the staged release add this snippet to your pom:
> > <pluginRepositories>
> > <pluginRepository>
> > <id>staged-releases-rat-018</id>
> > <url>
> https://repository.apache.org/content/repositories/orgapachecreadur-1013/
> </url>
> > <pluginRepository>
> > </pluginRepositories>
> > or browse
> >
> https://repository.apache.org/content/repositories/orgapachecreadur-1013/org/apache/rat/
> > directly.
> >
> > =VOTE is open until 2026-03-19 23:00 UTC=
> > Everyone is encouraged to vote, express their opinions and jump in if
> > they find anything wrong with the release. Only PMC votes are binding
> > on Apache, and for this candidate to become an official Apache
> > Software Foundation release 3 +1's are required and more +1's than
> > -1's.
> >
> > This vote is open for at least 72 hours,
> >
> > [ ] +1
> > [ ] +0
> > [ ] -1
> >
> > until 2026-03-19 23:00 UTC.
> >
> > NOTE
> > The downloads page and RAT webpage is not yet changed to reflect changes
> > in 0.18 and the dist area does not yet contain the release artifacts.
> >
> > A preview page (generated before creating the release) is:
> > https://creadur.apache.org/rat018/
> > that will be deleted once the release is promoted.
> >
> > Thanks,
> > Phil
> >
>
>
> --
>
> Gavin McDonald -
> Systems Administrator, ASF Infrastructure Team
> V.P Travel Assistance Committee
>
--
LinkedIn: http://www.linkedin.com/in/claudewarren
Re: [VOTE] Release Apache Creadur RAT 0.18
Posted by Gavin McDonald <gm...@apache.org>.
HI ALL,
> [X] +1
> [ ] +0
> [ ] -1
Kind regards
Gavin
On Thu, Mar 12, 2026 at 12:59 AM P. Ottlinger <po...@apache.org> wrote:
>
> Dear friends of RAT,
>
> the new v0.18 is ready for testing and fixes 13 issues. I've staged a
> new release 0.18 - thanks for all feedback and contributions!
>
> =RELEASE 0.18 ABSTRACT=
> This intermediate release addresses a severe performance issue
> encountered during RAT runs in version 0.17.
> The issue has been resolved by reducing the sample size used for Tika
> charset detection
> from 12,000 bytes to 256 bytes (thanks to Ryan Schmitt).
>
> In addition, the Java language level required to build RAT has been
> raised to 17.
> However, we recommend using at least JDK 21 due to a Javadoc issue
> affecting certain JDK versions (tracked under RAT-497).
> RAT now also uses UTF-8 as its default character set.
>
> These changes allowed us to adopt more modern language features, resolve
> numerous CVEs in dependent plugins and libraries,
> and integrate with SonarCloud’s code analysis.
>
> This release also includes a range of bug fixes, minor improvements, and
> dependency updates.
> Furthermore, RAT’s generated report is now produced in XHTML5, and
> excessive INFO-level logging in the Maven plugin has been reduced.
>
> Many thanks to all contributors and to our users for their valuable
> feedback.
>
> =View on 0.18=
> * https://issues.apache.org/jira/projects/RAT/versions/12356398
> (you need to login)
>
> * https://github.com/apache/creadur-rat/releases/tag/apache-rat-project-0.18
>
> =Staging area=
>
> In order to use the staged release add this snippet to your pom:
> <pluginRepositories>
> <pluginRepository>
> <id>staged-releases-rat-018</id>
> <url>https://repository.apache.org/content/repositories/orgapachecreadur-1013/</url>
> <pluginRepository>
> </pluginRepositories>
> or browse
> https://repository.apache.org/content/repositories/orgapachecreadur-1013/org/apache/rat/
> directly.
>
> =VOTE is open until 2026-03-19 23:00 UTC=
> Everyone is encouraged to vote, express their opinions and jump in if
> they find anything wrong with the release. Only PMC votes are binding
> on Apache, and for this candidate to become an official Apache
> Software Foundation release 3 +1's are required and more +1's than
> -1's.
>
> This vote is open for at least 72 hours,
>
> [ ] +1
> [ ] +0
> [ ] -1
>
> until 2026-03-19 23:00 UTC.
>
> NOTE
> The downloads page and RAT webpage is not yet changed to reflect changes
> in 0.18 and the dist area does not yet contain the release artifacts.
>
> A preview page (generated before creating the release) is:
> https://creadur.apache.org/rat018/
> that will be deleted once the release is promoted.
>
> Thanks,
> Phil
>
--
Gavin McDonald -
Systems Administrator, ASF Infrastructure Team
V.P Travel Assistance Committee
Re: [VOTE] Release Apache Creadur RAT 0.18
Posted by "P. Ottlinger" <po...@apache.org>.
Hi Claude,
thanks for reaching out - you mix different things here.
The SHA checksums are created manually when I upload the stuff to the
ASF dist area. The checksums you linked to in nexus are created during
the release build.
This is one of the reasons while each release means 15-20 hours of work ;)
I'd be happy if you check if the release 0.18 works for you and adapt
your release vote ... the download page
https://creadur.apache.org/rat018/download_rat.cgi links to sha512 and
PGP checksums and complies with the ASF rules.
Cheers,
Phil
Am 14.03.26 um 16:28 schrieb Claude Warren:
> Apache documentation[1] indicates that MD5 and SHA-1 are deprecated and
> that we should be using SHA-256 and/or SHA-512
>
> I was unable to find a way to scrape the download directory to grab all the
> files. Does anyone have a hint for how to do this?
>
> +0
>
> The code from the github release compiles and all tests pass. But I think
> we need to update the digests.
>
> [1] https://apache.org/info/verification.html
>
> On Thu, Mar 12, 2026 at 2:12 PM Karl Heinz Marbaise <kh...@gmx.de>
> wrote:
>
>> Hi,
>>
>> +1 from me.
>>
>> Kind regards
>> Karl Heinz Marbaise
>>
>> On 12.03.26 01:03, P. Ottlinger wrote:
>>> Hi,
>>>
>>> Am 12.03.26 um 00:59 schrieb P. Ottlinger:
>>>> =VOTE is open until 2026-03-19 23:00 UTC=
>>>> Everyone is encouraged to vote, express their opinions and jump in if
>>>> they find anything wrong with the release. Only PMC votes are binding
>>>> on Apache, and for this candidate to become an official Apache
>>>> Software Foundation release 3 +1's are required and more +1's than
>>>> -1's.
>>>>
>>>> This vote is open for at least 72 hours,
>>>>
>>>> [ ] +1
>>>
>>> +1
>>>
>>> I used the Maven plugin and checked some artifacts manually.
>>>
>>> Cheers,
>>> Phil
>>>
>>
>
Re: [VOTE] Release Apache Creadur RAT 0.18
Posted by Claude Warren <cl...@apache.org>.
Apache documentation[1] indicates that MD5 and SHA-1 are deprecated and
that we should be using SHA-256 and/or SHA-512
I was unable to find a way to scrape the download directory to grab all the
files. Does anyone have a hint for how to do this?
+0
The code from the github release compiles and all tests pass. But I think
we need to update the digests.
[1] https://apache.org/info/verification.html
On Thu, Mar 12, 2026 at 2:12 PM Karl Heinz Marbaise <kh...@gmx.de>
wrote:
> Hi,
>
> +1 from me.
>
> Kind regards
> Karl Heinz Marbaise
>
> On 12.03.26 01:03, P. Ottlinger wrote:
> > Hi,
> >
> > Am 12.03.26 um 00:59 schrieb P. Ottlinger:
> >> =VOTE is open until 2026-03-19 23:00 UTC=
> >> Everyone is encouraged to vote, express their opinions and jump in if
> >> they find anything wrong with the release. Only PMC votes are binding
> >> on Apache, and for this candidate to become an official Apache
> >> Software Foundation release 3 +1's are required and more +1's than
> >> -1's.
> >>
> >> This vote is open for at least 72 hours,
> >>
> >> [ ] +1
> >
> > +1
> >
> > I used the Maven plugin and checked some artifacts manually.
> >
> > Cheers,
> > Phil
> >
>
Re: [VOTE] Release Apache Creadur RAT 0.18
Posted by Karl Heinz Marbaise <kh...@gmx.de>.
Hi,
+1 from me.
Kind regards
Karl Heinz Marbaise
On 12.03.26 01:03, P. Ottlinger wrote:
> Hi,
>
> Am 12.03.26 um 00:59 schrieb P. Ottlinger:
>> =VOTE is open until 2026-03-19 23:00 UTC=
>> Everyone is encouraged to vote, express their opinions and jump in if
>> they find anything wrong with the release. Only PMC votes are binding
>> on Apache, and for this candidate to become an official Apache
>> Software Foundation release 3 +1's are required and more +1's than
>> -1's.
>>
>> This vote is open for at least 72 hours,
>>
>> [ ] +1
>
> +1
>
> I used the Maven plugin and checked some artifacts manually.
>
> Cheers,
> Phil
>
Re: [VOTE] Release Apache Creadur RAT 0.18
Posted by "P. Ottlinger" <po...@apache.org>.
Hi,
Am 12.03.26 um 00:59 schrieb P. Ottlinger:
> =VOTE is open until 2026-03-19 23:00 UTC=
> Everyone is encouraged to vote, express their opinions and jump in if
> they find anything wrong with the release. Only PMC votes are binding
> on Apache, and for this candidate to become an official Apache
> Software Foundation release 3 +1's are required and more +1's than
> -1's.
>
> This vote is open for at least 72 hours,
>
> [ ] +1
+1
I used the Maven plugin and checked some artifacts manually.
Cheers,
Phil
[RESULT] Re: [VOTE] Release Apache Creadur RAT 0.18
Posted by "P. Ottlinger" <po...@apache.org>.
Hi!
Thanks for your votes on RAT 0.18:
https://lists.apache.org/thread/slckkh1vm0ndq9zgyd6dd74b69ghh526
=BINDING=
* +1 Claude Warren
* +1 Gavin McDonald
* +1 Karl Heinz Marbaise
* +1 Philipp Ottlinger
No non-binding votes.
I'll continue with release propagation and will publish/update the
webpage as well.
Thanks for your contributions and continued interest in RAT!
Cheers,
Phil
Am 12.03.26 um 00:59 schrieb P. Ottlinger:
> Dear friends of RAT,
>
> the new v0.18 is ready for testing and fixes 13 issues. I've staged a
> new release 0.18 - thanks for all feedback and contributions!
>
> =RELEASE 0.18 ABSTRACT=
> This intermediate release addresses a severe performance issue
> encountered during RAT runs in version 0.17.
> The issue has been resolved by reducing the sample size used for Tika
> charset detection
> from 12,000 bytes to 256 bytes (thanks to Ryan Schmitt).
>
> In addition, the Java language level required to build RAT has been
> raised to 17.
> However, we recommend using at least JDK 21 due to a Javadoc issue
> affecting certain JDK versions (tracked under RAT-497).
> RAT now also uses UTF-8 as its default character set.
>
> These changes allowed us to adopt more modern language features, resolve
> numerous CVEs in dependent plugins and libraries,
> and integrate with SonarCloud’s code analysis.
>
> This release also includes a range of bug fixes, minor improvements, and
> dependency updates.
> Furthermore, RAT’s generated report is now produced in XHTML5, and
> excessive INFO-level logging in the Maven plugin has been reduced.
>
> Many thanks to all contributors and to our users for their valuable
> feedback.
>
> =View on 0.18=
> * https://issues.apache.org/jira/projects/RAT/versions/12356398
> (you need to login)
>
> * https://github.com/apache/creadur-rat/releases/tag/apache-rat-
> project-0.18
>
> =Staging area=
>
> In order to use the staged release add this snippet to your pom:
> <pluginRepositories>
> <pluginRepository>
> <id>staged-releases-rat-018</id>
> <url>https://repository.apache.org/content/repositories/
> orgapachecreadur-1013/</url>
> <pluginRepository>
> </pluginRepositories>
> or browse
> https://repository.apache.org/content/repositories/
> orgapachecreadur-1013/org/apache/rat/
> directly.
>
> =VOTE is open until 2026-03-19 23:00 UTC=
> Everyone is encouraged to vote, express their opinions and jump in if
> they find anything wrong with the release. Only PMC votes are binding
> on Apache, and for this candidate to become an official Apache
> Software Foundation release 3 +1's are required and more +1's than
> -1's.
>
> This vote is open for at least 72 hours,
>
> [ ] +1
> [ ] +0
> [ ] -1
>
> until 2026-03-19 23:00 UTC.
>
> NOTE
> The downloads page and RAT webpage is not yet changed to reflect changes
> in 0.18 and the dist area does not yet contain the release artifacts.
>
> A preview page (generated before creating the release) is:
> https://creadur.apache.org/rat018/
> that will be deleted once the release is promoted.
>
> Thanks,
> Phil
>