+1 Using the src zip, the SHA-512 and ASC are OK. Running 'mvn clean install site', in the middle of the build I get: ... [INFO] --- cyclonedx:2.7.3:makeBom (make-bom) @ commons-jexl3 --- [INFO] CycloneDX: Parameters [INFO] ------------------------------------------------------------------------ [INFO] schemaVersion : 1.4 [INFO] includeBomSerialNumber : true [INFO] includeCompileScope : true [INFO] includeProvidedScope : true [INFO] includeRuntimeScope : true [INFO] includeTestScope : false [INFO] includeSystemScope : true [INFO] includeLicenseText : false [INFO] outputReactorProjects : true [INFO] outputFormat : all [INFO] outputName : commons-jexl3-3.3-bom [INFO] ------------------------------------------------------------------------ [INFO] CycloneDX: Resolving Dependencies [ERROR] An error occurred attempting to read POM org.codehaus.plexus.util.xml.pull.XmlPullParserException: UTF-8 BOM plus xml decl of ISO-8859-1 is incompatible (position: START_DOCUMENT seen <?xml version="1.0" encoding="ISO-8859-1"... @1:42) at org.codehaus.plexus.util.xml.pull.MXParser.parseXmlDeclWithVersion (MXParser.java:3423) at org.codehaus.plexus.util.xml.pull.MXParser.parseXmlDecl (MXParser.java:3345) at org.codehaus.plexus.util.xml.pull.MXParser.parsePI (MXParser.java:3197) at org.codehaus.plexus.util.xml.pull.MXParser.parseProlog (MXParser.java:1828) at org.codehaus.plexus.util.xml.pull.MXParser.nextImpl (MXParser.java:1757) at org.codehaus.plexus.util.xml.pull.MXParser.next (MXParser.java:1375) at org.apache.maven.model.io.xpp3.MavenXpp3Reader.read (MavenXpp3Reader.java:3940) at org.apache.maven.model.io.xpp3.MavenXpp3Reader.read (MavenXpp3Reader.java:612) at org.apache.maven.model.io.xpp3.MavenXpp3Reader.read (MavenXpp3Reader.java:627) at org.cyclonedx.maven.BaseCycloneDxMojo.readPom (BaseCycloneDxMojo.java:759) at org.cyclonedx.maven.BaseCycloneDxMojo.readPom (BaseCycloneDxMojo.java:746) at org.cyclonedx.maven.BaseCycloneDxMojo.retrieveParentProject (BaseCycloneDxMojo.java:694) at org.cyclonedx.maven.BaseCycloneDxMojo.getClosestMetadata (BaseCycloneDxMojo.java:524) at org.cyclonedx.maven.BaseCycloneDxMojo.convert (BaseCycloneDxMojo.java:481) at org.cyclonedx.maven.CycloneDxMojo.execute (CycloneDxMojo.java:70) at org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo (DefaultBuildPluginManager.java:126) at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute2 (MojoExecutor.java:342) at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute (MojoExecutor.java:330) at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:213) at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:175) at org.apache.maven.lifecycle.internal.MojoExecutor.access$000 (MojoExecutor.java:76) at org.apache.maven.lifecycle.internal.MojoExecutor$1.run (MojoExecutor.java:163) at org.apache.maven.plugin.DefaultMojosExecutionStrategy.execute (DefaultMojosExecutionStrategy.java:39) at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:160) at org.apache.maven.lifecycle.internal.MojoExecutor.executeForkedExecutions (MojoExecutor.java:462) at org.apache.maven.lifecycle.internal.MojoExecutor.doExecute (MojoExecutor.java:325) at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:213) at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:175) at org.apache.maven.lifecycle.internal.MojoExecutor.access$000 (MojoExecutor.java:76) at org.apache.maven.lifecycle.internal.MojoExecutor$1.run (MojoExecutor.java:163) at org.apache.maven.plugin.DefaultMojosExecutionStrategy.execute (DefaultMojosExecutionStrategy.java:39) at org.apache.maven.lifecycle.internal.MojoExecutor.execute (MojoExecutor.java:160) at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:105) at org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject (LifecycleModuleBuilder.java:73) at org.apache.maven.lifecycle.internal.builder.singlethreaded.SingleThreadedBuilder.build (SingleThreadedBuilder.java:53) at org.apache.maven.lifecycle.internal.LifecycleStarter.execute (LifecycleStarter.java:118) at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:260) at org.apache.maven.DefaultMaven.doExecute (DefaultMaven.java:172) at org.apache.maven.DefaultMaven.execute (DefaultMaven.java:100) at org.apache.maven.cli.MavenCli.execute (MavenCli.java:821) at org.apache.maven.cli.MavenCli.doMain (MavenCli.java:270) at org.apache.maven.cli.MavenCli.main (MavenCli.java:192) at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke (NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke (DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke (Method.java:498) at org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced (Launcher.java:282) at org.codehaus.plexus.classworlds.launcher.Launcher.launch (Launcher.java:225) at org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode (Launcher.java:406) at org.codehaus.plexus.classworlds.launcher.Launcher.main (Launcher.java:347)
and the build completes successfully. This could be a BOM issue. The site looks OK. Using: Apache Maven 3.9.0 (9b58d2bad23a66be161c4664ef21ce219c2c8584) Maven home: /usr/local/Cellar/maven/3.9.0/libexec Java version: 1.8.0_362, vendor: Homebrew, runtime: /usr/local/Cellar/openjdk@8/1.8.0+362/libexec/openjdk.jdk/Contents/Home/jre Default locale: en_US, platform encoding: UTF-8 OS name: "mac os x", version: "13.2.1", arch: "x86_64", family: "mac" Gary On Mon, Mar 13, 2023 at 1:01 PM Henri Biestro (Apache) <hen...@apache.org> wrote: > > We have fixed quite a few bugs and added some significant enhancements > since Apache Commons JEXL 3.2.1 was released, so I would like to release > Apache Commons JEXL 3.3. > > Apache Commons JEXL 3.3 RC1 is available for review here: > https://dist.apache.org/repos/dist/dev/commons/jexl/3.3-RC1 (svn > revision 60566) > > The Git tag commons-jexl-3.3-RC1 commit for this RC is > 2eeaad9ce500507130e882a3996b856b41c01785 which you can browse here: > > https://gitbox.apache.org/repos/asf?p=commons-jexl.git;a=commit;h=2eeaad9ce500507130e882a3996b856b41c01785 > You may checkout this tag using: > git clone https://gitbox.apache.org/repos/asf/commons-jexl.git --branch > commons-jexl-3.3-RC1 commons-jexl-3.3-RC1 > > Maven artifacts are here: > > https://repository.apache.org/content/repositories/orgapachecommons-1626/org/apache/commons/commons-jexl3/3.3/ > > These are the artifacts and their hashes: > > #Release SHA-512s > #Mon Mar 13 16:50:50 CET 2023 > commons-jexl-3.3-bin.tar.gz=b9c933666f8b6ca6c39b0ebac2b6a3ac55966a868b7789a690f59ceb4440c979561576a355de1f3d3cad7188055432086a6aed99deab435836dc582610396b65 > commons-jexl-3.3-bin.zip=ac204b2b3e60536e5405a2f97a5ad9379be83162d1860a2c02e5a8d14adb4142137c28a795d2d67b4467f220cf18e9833ec260a3281065cd129e76c990d63a22 > commons-jexl-3.3-src.tar.gz=a9883aa526a70635ef81505fcbc67e1d52615373e1585806b5db1a523047b4ebae1cb433cddfc3e69ce06c100215d0ad64e5e14ed6a2d58ef5223f0ed655b469 > commons-jexl-3.3-src.zip=6c44d8bdc50e1f5894c6eea4e63d2428425907e8a3c0dbe9b483ed76cd60fc54b9354b824113fc27f6f5448b0d0e46458cfe7ea46813284272a77356de2271fb > commons-jexl3-3.3-bom.json=17ba80d97479f8470a6a4e5993757fbacc0fddebec91fc1172146eb9bee539dae992977593a774b99e418034ef2a6cb86832174fa092b4f3546d9eb874e0a783 > commons-jexl3-3.3-bom.xml=3190d9be86e4d1d7f5a2d5becdafa89df2decb9c09408c8420b6a078ec8c0b7b763a9821b6b3be2ec7e78c5736aaae0f0bb5b61a73532682f259fa7ef833556b > commons-jexl3-3.3-javadoc.jar=d0edb2184d6983f6b9a9230dd6fa1c36d85a654373b845328327ecdb9d81f934511038d215d079488132dc77fd5d69f5da073259324c539b183724374221b40f > commons-jexl3-3.3-sources.jar=85fc74e163cd507396ea3985c721c51d398138c1419ddbad69fa4fc598070f74abdb6e73478af1b8dc4be7a035bf43dcaf5314f9d403d714a5bfe0144772ac8f > commons-jexl3-3.3-test-sources.jar=7eb8e4c5d0fae0a3e7a7b056f5fe596c868a16bf951d9c1309f4fa62c3f8ef6dec832934cecfff9d86c09a6d71012744e05307aff59af01d59d534078f90e9d0 > commons-jexl3-3.3-tests.jar=eced3f404df0739a30101364d08ee19b33b99fe09e63f72cabc45928d215be1c598575218ebede598ab10a1a73f5d6c5b64515af295b4d001d3cee3d99c8e6a6 > org.apache.commons_commons-jexl3-3.3.spdx.json=9b15944e44245422fa33faa18dc608c42383041f4657a1c3bf17fd38d80d2a0e8efd208dedb41140dc8273e4fe8a93c1e4a8bbc95b4103d1587cff523db0fd59 > > > > I have tested this with ***'mvn clean install site'*** using: > > Apache Maven 3.8.1 (05c21c65bdfed0f71a2f2ada8b84da59348c4c5d) > Maven home: /Users/henri.biestro/Java/apache-maven-3.8.1 > Java version: 1.8.0_345, vendor: Azul Systems, Inc., runtime: > /Library/Java/JavaVirtualMachines/zulu-8.jdk/Contents/Home/jre > Default locale: en_FR, platform encoding: UTF-8 > OS name: "mac os x", version: "13.2.1", arch: "aarch64", family: "mac" > > Darwin l-hbiestro.home 22.3.0 Darwin Kernel Version 22.3.0: Mon Jan 30 > 20:38:37 PST 2023; root:xnu-8792.81.3~2/RELEASE_ARM64_T6000 arm64 > > And > > Apache Maven 3.8.6 (84538c9988a25aec085021c365c560670ad80f63) > Maven home: /Users/henri/Java/apache-maven-3.8.6 > Java version: 17.0.6, vendor: Azul Systems, Inc., runtime: > /Library/Java/JavaVirtualMachines/zulu-17.jdk/Contents/Home > Default locale: en_US, platform encoding: UTF-8 > OS name: "mac os x", version: "10.15.7", arch: "x86_64", family: "mac" > > Darwin hornet.home 19.6.0 Darwin Kernel Version 19.6.0: Tue Jun 21 21:18:39 > PDT 2022; root:xnu-6153.141.66~1/RELEASE_X86_64 x86_64 > > > Details of changes since 3.2.1 are in the release notes: > > https://dist.apache.org/repos/dist/dev/commons/jexl/3.3-RC1/RELEASE-NOTES.txt > > https://dist.apache.org/repos/dist/dev/commons/jexl/3.3-RC1/site/changes-report.html > > Site: > > https://dist.apache.org/repos/dist/dev/commons/jexl/3.3-RC1/site/index.html > (note some *relative* links are broken and the 3.3 directories are not > yet created - these will be OK once the site is deployed.) > > *** CLIRR Report (compared to 3.2.1): > > https://dist.apache.org/repos/dist/dev/commons/jexl/3.3-RC1/site/clirr-report.html > > *** JApiCmp Report (compared to 3.2.1): > > https://dist.apache.org/repos/dist/dev/commons/jexl/3.3-RC1/site/japicmp.html > > > RAT Report: > > https://dist.apache.org/repos/dist/dev/commons/jexl/3.3-RC1/site/rat-report.html > > KEYS: > https://www.apache.org/dist/commons/KEYS > > Please review the release candidate and vote. > This vote will close no sooner than 72 hours from now. > > [ ] +1 Release these artifacts > [ ] +0 OK, but... > [ ] -0 OK, but really should fix... > [ ] -1 I oppose this release because... > > Thank you, > > Henri Biestro, > Release Manager (using key 4E066E0459CD109B) > > For following is intended as a helper and refresher for reviewers. > > Validating a release candidate > ============================== > > These guidelines are NOT complete. > > Requirements: Git, Java, Maven. > > You can validate a release from a release candidate (RC) tag as follows. > > 1) Clone and checkout the RC tag > > git clone https://gitbox.apache.org/repos/asf/commons-jexl.git --branch > commons-jexl-3.3-RC1 commons-jexl-3.3-RC1 > cd commons-jexl-3.3-RC1 > > 2) Check Apache licenses > > This step is not required if the site includes a RAT report page which you > then must check. > > mvn apache-rat:check > > 3) Check binary compatibility > > Older components still use Apache Clirr: > > This step is not required if the site includes a Clirr report page which > you then must check. > > mvn clirr:check > > Newer components use JApiCmp with the japicmp Maven Profile: > > This step is not required if the site includes a JApiCmp report page which > you then must check. > > mvn install -DskipTests -P japicmp japicmp:cmp > > 4) Build the package > > mvn -V clean package > > You can record the Maven and Java version produced by -V in your VOTE reply. > To gather OS information from a command line: > Windows: ver > Linux: uname -a > > 5) Build the site for a single module project > > Note: Some plugins require the components to be installed instead of > packaged. > > mvn site > Check the site reports in: > - Windows: target\site\index.html > - Linux: target/site/index.html --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org For additional commands, e-mail: dev-h...@commons.apache.org