You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@logging.apache.org by fr...@apache.org on 2026/09/28 06:40:53 UTC
(logging-log4net) branch master updated (408bbdd8 -> a457590f)
This is an automated email from the ASF dual-hosted git repository.
FreeAndNil pushed a change to branch master
in repository https://gitbox.apache.org/repos/asf/logging-log4net.git
from 408bbdd8 Merge pull request #331 - report an unexpected Telnet send failure instead of dropping the client
add 1ed2acba bind a release to the commit it was built from #330
new a457590f Merge pull request #330 - bind a release to the commit it was built from
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
CLAUDE.md | 12 ++
scripts/FakeCommands.TestHelper.ps1 | 23 ++-
scripts/build-preview.ps1 | 3 +-
scripts/build-release.Tests.ps1 | 65 +++++++-
scripts/build-release.ps1 | 146 +++++++++++++----
scripts/sign-log4net-libraries.sh | 7 +-
scripts/verify-release.Tests.ps1 | 90 ++++++++++-
scripts/verify-release.ps1 | 172 +++++++++++++++++----
scripts/verify-release.sh | 58 +++++++
.../3.5.0/330-release-from-one-commit.xml | 14 ++
10 files changed, 515 insertions(+), 75 deletions(-)
create mode 100644 src/changelog/3.5.0/330-release-from-one-commit.xml
(logging-log4net) 01/01: Merge pull request #330 - bind a release to the commit it was built from
Posted by fr...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
FreeAndNil pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/logging-log4net.git
commit a457590f8b765da47b5c7581d94c88e6aff3cf2c
Merge: 408bbdd8 1ed2acba
Author: Jan Friedrich <43...@users.noreply.github.com>
AuthorDate: Mon Sep 28 08:40:47 2026 +0200
Merge pull request #330 - bind a release to the commit it was built from
build-release.ps1 built the binaries from the working tree but archived the
local master ref, so the signed source zip need not match the signed binaries.
* Refuse a dirty tree, archive HEAD, and ship a signed .manifest recording the
commit and the artifact set. No origin/master check: that needs the network
and forbids cutting a release from a tag or a release branch.
* Both verifiers check the commit against the zip archive comment and the
listed set against the files present. The hash and signature loops only see
the files that are there, so an artifact deleted with its .sha512 and .asc
passed before.
* Everything the release writes gets LF, asserted in the tests. Set-Content
writes CRLF on Windows, where a trailing CR breaks sha512sum on macOS and
makes every manifest name compare unequal. Includes the .sha512 fix.
* sign-log4net-libraries.sh gains set -euo pipefail and shopt -s nullglob. An
empty directory iterated the glob patterns and still exited 0.
audit da18b6fd-f025
CLAUDE.md | 12 ++
scripts/FakeCommands.TestHelper.ps1 | 23 ++-
scripts/build-preview.ps1 | 3 +-
scripts/build-release.Tests.ps1 | 65 +++++++-
scripts/build-release.ps1 | 146 +++++++++++++----
scripts/sign-log4net-libraries.sh | 7 +-
scripts/verify-release.Tests.ps1 | 90 ++++++++++-
scripts/verify-release.ps1 | 172 +++++++++++++++++----
scripts/verify-release.sh | 58 +++++++
.../3.5.0/330-release-from-one-commit.xml | 14 ++
10 files changed, 515 insertions(+), 75 deletions(-)