I have: * checked out git tag commons-vfs-2.10.0-RC1 (this needed a --force due to leftover from previous vote) * verified it (now) corresponds to 1b94883317d6687e2dd3a0294d9e6e2ab066cf56 * downloaded source zip and tgz * verified the hashes match 37254a4e73862522017195b941b42c7befe6629a1cf9efc8902719756ff5a84668a3acac96cfe63edcb448082cc97ef47d0c07972b5aa9d6530d2d64f2490b88 and ea6f488d97c8ee9b1d49ae523d0a12e6ad8c82f01749f226675417f032999ef345ccd93475aa3da616fb4cea6ad2b514a446cf20de5fe612f7bcb9089ad3f174 * verified there are no meaningful differences between the tgz and git * verified .zip and .tgz are signed by Gary's key from https://downloads.apache.org/commons/KEYS * checked 'mvn apache-rat:check' succeeds * built with Java 21.0.5 (!) and ran "mvn install -Dmaven.test.skip && mvn -Dreference.repo= https://repository.apache.org/content/repositories/orgapachecommons-1813 <https://repository.apache.org/content/repositories/orgapachecommons-1813/org/apache/commons/commons-vfs2-project/2.10.0/> verify artifact:compare '-Dbuildinfo.ignore=*/*.spdx.json,*/*-cyclonedx.json,*/*-cyclonedx.xml' -Dmaven.test.skip=true". I think given the learnings in https://github.com/CycloneDX/cyclonedx-maven-plugin/issues/589 perhaps we shouldn't pay too much attention to the differences in the SBOMs. * I did not test the artifacts against any project
This is my +1 On Mon, Feb 3, 2025 at 12:27 AM Gary Gregory <garydgreg...@gmail.com> wrote: > We have fixed a few bugs and added enhancements since Apache Commons > VFS Project 2.9.0 was released over 3 years ago, so I would like to > release Apache Commons VFS Project 2.10.0. > > [Note that try to verify reproducibility using artifact:compare: > > mvn clean verify artifact:compare -DskipTests > -Dreference.repo= > https://repository.apache.org/content/repositories/staging/ > '-Dbuildinfo.ignore=*/*.spdx.json' > > doesn't work, maybe because this is a multi-module builds but it's the > first time I tried with this build] > > Apache Commons VFS Project 2.10.0 RC1 is available for review here: > https://dist.apache.org/repos/dist/dev/commons/vfs/2.10.0-RC1 (svn > revision 74653) > > The Git tag commons-vfs-2.10.0-RC1 commit for this RC is > 1b94883317d6687e2dd3a0294d9e6e2ab066cf56 which you can browse here: > > https://gitbox.apache.org/repos/asf?p=commons-vfs.git;a=commit;h=1b94883317d6687e2dd3a0294d9e6e2ab066cf56 > You may checkout this tag using: > git clone https://gitbox.apache.org/repos/asf/commons-vfs.git > --branch <https://gitbox.apache.org/repos/asf/commons-vfs.git--branch> > commons-vfs-2.10.0-RC1 commons-vfs-2.10.0-RC1 > > Maven artifacts are here: > > https://repository.apache.org/content/repositories/orgapachecommons-1813/org/apache/commons/commons-vfs2-project/2.10.0/ > > These are the artifacts and their hashes are listed at the bottom of this > email. > > I have tested this with 'mvn' (the default goal) and 'mvn clean > package site' plus stagging using: > > openjdk version "17.0.14" 2025-01-21 > OpenJDK Runtime Environment Homebrew (build 17.0.14+0) > OpenJDK 64-Bit Server VM Homebrew (build 17.0.14+0, mixed mode, sharing) > > Apache Maven 3.9.9 (8e8579a9e76f7d015ee5ec7bfcdc97d260186937) > Maven home: /opt/homebrew/Cellar/maven/3.9.9/libexec > Java version: 17.0.14, vendor: Homebrew, runtime: > /opt/homebrew/Cellar/openjdk@17/17.0.14/libexec/openjdk.jdk/Contents/Home > Default locale: en_US, platform encoding: UTF-8 > OS name: "mac os x", version: "15.2", arch: "aarch64", family: "mac" > > Darwin Garys-MacBook-Pro.local 24.2.0 Darwin Kernel Version 24.2.0: > Fri Dec 6 19:03:40 PST 2024; > root:xnu-11215.61.5~2/RELEASE_ARM64_T6041 arm64 > Docker version 27.3.1, build ce12230 > > > Details of changes since 2.9.0 are in the release notes: > > https://dist.apache.org/repos/dist/dev/commons/vfs/2.10.0-RC1/RELEASE-NOTES.txt > > https://dist.apache.org/repos/dist/dev/commons/vfs/2.10.0-RC1/site/changes.html > > Site: > > https://dist.apache.org/repos/dist/dev/commons/vfs/2.10.0-RC1/site/index.html > (note some *relative* links are broken and the 2.10.0 directories > are not yet created - these will be OK once the site is deployed.) > > JApiCmp Reports (compared to 2.9.0): > > https://dist.apache.org/repos/dist/dev/commons/vfs/2.10.0-RC1/site/commons-vfs2/japicmp.html > > https://dist.apache.org/repos/dist/dev/commons/vfs/2.10.0-RC1/site/commons-vfs2-ant/japicmp.html > > https://dist.apache.org/repos/dist/dev/commons/vfs/2.10.0-RC1/site/commons-vfs2-jackrabbit1/japicmp.html > > https://dist.apache.org/repos/dist/dev/commons/vfs/2.10.0-RC1/site/commons-vfs2-jackrabbit2/japicmp.html > RAT Report: > > https://dist.apache.org/repos/dist/dev/commons/vfs/2.10.0-RC1/site/rat-report.html > > KEYS: > https://downloads.apache.org/commons/KEYS > > Please review the release candidate and vote. > This vote will close no sooner than 72 hours from now. > > [ ] +1 Release these artifacts > [ ] +0 OK, but... > [ ] -0 OK, but really should fix... > [ ] -1 I oppose this release because... > > Hashes: > > /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0-cyclonedx.json > (SHA1: b229a5e18d8e82dd6e9db2ff003d0b2593863cbc) > /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0-javadoc.jar > (SHA1: 1f0fc1088905c434428f8112c82baaefd8f78772) > /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0.jar.asc > (SHA1: 0f669a68692b6049db75ce36aebf678a707f7858) > /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0.spdx.json > (SHA1: 499b5021d498f47e98713591006ecad2049da148) > /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0.jar > (SHA1: a306167fdb88152403c8b00595b1502ffacd5b76) > > /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0-cyclonedx.json.asc > (SHA1: b00e61889bdfcd18211fcae2d1035b722d85fd01) > /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0-javadoc.jar.asc > (SHA1: bd5886944c53b7957c4589306a79277a9391a06a) > > /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0-cyclonedx.xml.asc > (SHA1: 81e96bc727bb334f9da68b9002ef6cf3035913ab) > /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0-tests.jar > (SHA1: fc466d24614de4f7de63baa040c5efa39f1c629b) > /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0-sources.jar.asc > (SHA1: d0cefd7149e690bc43ab797ac94979c12c28785b) > /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0-tests.jar.asc > (SHA1: 8730a072ddb74b5db8d2037b1daaad3868021213) > /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0.pom.asc > (SHA1: 739135b1a8f4d0f3d3104a147f7573c27a2ceb55) > /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0-sources.jar > (SHA1: 8ee4df022b06e80f15c77f8b41b20dfbaf732f7f) > > /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0-test-sources.jar.asc > (SHA1: a3e4084e78eb7fdefa4f165296dbdb91eeb932ea) > /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0-cyclonedx.xml > (SHA1: c56bfa3c31be99b8d56462c3f043b2bfb8c322f2) > /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0.spdx.json.asc > (SHA1: 2c64f769d874c2f7795aee28e7b96db56fdc15e2) > > /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0-test-sources.jar > (SHA1: 2834ea660c244d34e3c4d26e01be41697a3dcf88) > /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0.pom > (SHA1: 5b00938fc576e13e3093cc756878a995ac659ff5) > > /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0-tests.jar > (SHA1: a80c60620b5ced3ef8e8274140e3f8803495fdea) > > /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0-sources.jar.asc > (SHA1: a050e71d7c893e79ebd97efe089097fdbdfbab2f) > > /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0.spdx.json.asc > (SHA1: 505d6bc3dc84de698eb0177918619858f85e089e) > > /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0-cyclonedx.json.asc > (SHA1: 86e459f63f581eb5ec48221630090ecfde48769d) > > /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0-test-sources.jar.asc > (SHA1: 00d5903a7070f66c0ea7130f380e2e80071784b0) > > /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0.jar.asc > (SHA1: 3e37b6e5f0f4afeed4583e3d1e7e05feb0b1abd2) > > /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0.spdx.json > (SHA1: a636f81490d2c9c94cb015e6cf372420a9387456) > > /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0.jar > (SHA1: 1ba40e5a26bd898f6020dcc6c4dfb98d29e9cf5a) > > /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0-javadoc.jar.asc > (SHA1: a230ff29acc193c15b96fcb09223410b4843b538) > > /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0.pom > (SHA1: 3cf7c65e3bb5d41926a366ec245b4808b5b51256) > > /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0-cyclonedx.xml.asc > (SHA1: 1fb489ed1824e9001609128b38717313525a8e74) > > /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0-tests.jar.asc > (SHA1: a8e58d670b10aa0ae4faf634809faea10ae6042c) > > /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0-sources.jar > (SHA1: 34c1c70e7af99be1fa4ddf0d47b09ce518fecc86) > > /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0-javadoc.jar > (SHA1: 6106f4d613eca059ff8c1575c51552aae7cef69c) > > /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0-cyclonedx.xml > (SHA1: 8a2fefb817a491ab1995382cefea612a3d71e989) > > /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0-cyclonedx.json > (SHA1: 260afdb4e5a5b2c8890d4e6b5bcea8d5612d894d) > > /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0-test-sources.jar > (SHA1: 0ee7137c2caaa176ca6b76bb978e8eeaf04e84fe) > > /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0.pom.asc > (SHA1: f7f916986118660d627bd503913b84c25f79be33) > > /org/apache/commons/commons-vfs2-bom/2.10.0/commons-vfs2-bom-2.10.0-cyclonedx.json > (SHA1: e1037c2fc0b1564d0bcf0835723a03d270c28be2) > > /org/apache/commons/commons-vfs2-bom/2.10.0/commons-vfs2-bom-2.10.0-cyclonedx.xml > (SHA1: 7a88a6026c8b18ae8e51f407e9d7c5ea30412b8e) > > /org/apache/commons/commons-vfs2-bom/2.10.0/commons-vfs2-bom-2.10.0-cyclonedx.xml.asc > (SHA1: 3ea5fd461beeb0c53960ca72444892e8bc021733) > > /org/apache/commons/commons-vfs2-bom/2.10.0/commons-vfs2-bom-2.10.0-cyclonedx.json.asc > (SHA1: a5d137ebff2dd384e636d1ba8659c82506a96e7c) > > /org/apache/commons/commons-vfs2-bom/2.10.0/commons-vfs2-bom-2.10.0.spdx.json > (SHA1: 5127247d89c01759e4de2c782e6e107534485a60) > /org/apache/commons/commons-vfs2-bom/2.10.0/commons-vfs2-bom-2.10.0.pom.asc > (SHA1: 24f4cbd31345f8c5d520bd6efa35329d50b9df2a) > /org/apache/commons/commons-vfs2-bom/2.10.0/commons-vfs2-bom-2.10.0.pom > (SHA1: de6225a6d964f8041863b0b43c8924a84637c819) > > /org/apache/commons/commons-vfs2-bom/2.10.0/commons-vfs2-bom-2.10.0.spdx.json.asc > (SHA1: 7edefbb8d702afbd81f30da1c30cc8a2f0e5ea2f) > > /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0-cyclonedx.xml.asc > (SHA1: 6ba26e76384d3dca1b7c0a76390377260f138948) > > /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0-test-sources.jar.asc > (SHA1: 7e535e3f79416046ba96f6f41082fc8722dab6ad) > > /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0-sources.jar.asc > (SHA1: 78505cb6ddbe7072f20f098382fab8fd555a1c42) > > /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0-test-sources.jar > (SHA1: 5e55a9dc19f2c0b7d8d0067ce54226915777dbc0) > /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0.jar.asc > (SHA1: 479c4bde0c26599ba94c331b5390dfb8e5ebb475) > > /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0-cyclonedx.json > (SHA1: 94743712fc7d8779eb2914e032d4474761f9475d) > /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0.jar > (SHA1: 5fddcca84a523dbe76efe52108a7c1f14b5dc96f) > /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0.pom > (SHA1: 275848c381e460f407aa63ceb414dc02d1655c95) > > /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0.spdx.json.asc > (SHA1: fac8bb46e79bf07898051d345f408aaf6c4bc980) > > /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0-javadoc.jar > (SHA1: f538070c5dc44a6f81c5f87e6314880c2ce66d6b) > > /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0-cyclonedx.xml > (SHA1: 66776cdb995a58f8d185cf070a16bd0c7ae57fb6) > > /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0-sources.jar > (SHA1: 412669b027688c9fc654ddb9fef25ed5003213be) > > /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0-tests.jar.asc > (SHA1: 6f404cedd10db09e77e0116e3197d3585c9566fe) > > /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0-tests.jar > (SHA1: 4984e57a8b825a26e1a4dca3db5e9cd1ca170026) > /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0.pom.asc > (SHA1: 10149bce12e26317522ad2c547a9ec364bf77c9f) > > /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0.spdx.json > (SHA1: 39a9dc1721c1c08bcf5465531b17f6977235b99b) > > /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0-javadoc.jar.asc > (SHA1: 3055042d15cd525aef40f9c1e0de3d5d43075779) > > /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0-cyclonedx.json.asc > (SHA1: 560f22513a75c1baacc1afc7be10f90c1ab10a9b) > > /org/apache/commons/commons-vfs2-distribution/2.10.0/commons-vfs2-distribution-2.10.0.pom.asc > (SHA1: 2d665942c390e402249b56f6659966d6d7788ac5) > > /org/apache/commons/commons-vfs2-distribution/2.10.0/commons-vfs2-distribution-2.10.0-cyclonedx.json > (SHA1: a6b179d0fb137c9e4f52ae3bca687f0313778490) > > /org/apache/commons/commons-vfs2-distribution/2.10.0/commons-vfs2-distribution-2.10.0-cyclonedx.xml.asc > (SHA1: 7d2652b25571f486175461c7b7b3f102980584b9) > > /org/apache/commons/commons-vfs2-distribution/2.10.0/commons-vfs2-distribution-2.10.0.pom > (SHA1: 85a650fb0c201a24a653c6d436189afb6bd47c79) > > /org/apache/commons/commons-vfs2-distribution/2.10.0/commons-vfs2-distribution-2.10.0-cyclonedx.xml > (SHA1: 23d605d022c6eab8c9214980a966ed9422ccedac) > > /org/apache/commons/commons-vfs2-distribution/2.10.0/commons-vfs2-distribution-2.10.0.spdx.json.asc > (SHA1: ae6ff16e3da3540efb878d2ae9afe69552fc3dc1) > > /org/apache/commons/commons-vfs2-distribution/2.10.0/commons-vfs2-distribution-2.10.0-cyclonedx.json.asc > (SHA1: c64c8c8efaac16c3a6b3a9eee0b03f27a7f5a514) > > /org/apache/commons/commons-vfs2-distribution/2.10.0/commons-vfs2-distribution-2.10.0.spdx.json > (SHA1: c1e49fb4645f93858ae3a61dbd5fbe21e8ede1c7) > > /org/apache/commons/commons-vfs2-project/2.10.0/commons-vfs2-project-2.10.0-site.xml.asc > (SHA1: 9f0d308951c57141f7fc037bd53a248f9b8e1446) > > /org/apache/commons/commons-vfs2-project/2.10.0/commons-vfs2-project-2.10.0.pom > (SHA1: 90d42622fb2b53641b270b1ef6f8ecc8b7679260) > > /org/apache/commons/commons-vfs2-project/2.10.0/commons-vfs2-project-2.10.0-cyclonedx.xml > (SHA1: 1fa57d6acbb47bc1aaa1cadc8ca2ad0e730966d7) > > /org/apache/commons/commons-vfs2-project/2.10.0/commons-vfs2-project-2.10.0-cyclonedx.xml.asc > (SHA1: 97b7d225993c64716025fd391749595cc5d805f3) > > /org/apache/commons/commons-vfs2-project/2.10.0/commons-vfs2-project-2.10.0-site.xml > (SHA1: 8b1dbb2558c1c0c425f30b0d76fe0bbe1868949d) > > /org/apache/commons/commons-vfs2-project/2.10.0/commons-vfs2-project-2.10.0.spdx.json > (SHA1: 48967a9b8db52bd44c2f477cfdb58ef343f5abc0) > > /org/apache/commons/commons-vfs2-project/2.10.0/commons-vfs2-project-2.10.0-cyclonedx.json.asc > (SHA1: 47e794d4b44727515d9c79368100f9eaf067ce1a) > > /org/apache/commons/commons-vfs2-project/2.10.0/commons-vfs2-project-2.10.0.pom.asc > (SHA1: 293c0520769bd0be5ff6f4f53ad46500681df438) > > /org/apache/commons/commons-vfs2-project/2.10.0/commons-vfs2-project-2.10.0.spdx.json.asc > (SHA1: 729cfeb6caa061cb4ec5f0fba08f735b0c554481) > > /org/apache/commons/commons-vfs2-project/2.10.0/commons-vfs2-project-2.10.0-cyclonedx.json > (SHA1: 841c7308d0493f43b872b59229f49022ff42b805) > > /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0-cyclonedx.xml > (SHA1: a90aa5491856bd028e0fa4f92642dd330054e0f3) > > /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0-cyclonedx.json.asc > (SHA1: 94a438faff0aed5ba3cf33e0b1e71d2fbf8b8f6d) > > /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0-tests.jar.asc > (SHA1: d8cd598acd2bc1c565e898e7dbf635f799d43e47) > > /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0-tests.jar > (SHA1: 7aa42c32de610bd4c16d8cf6004e93afce9647ee) > > /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0.spdx.json > (SHA1: 2c278ac08483c97e0dc810a40d30c0b3c5924965) > > /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0-test-sources.jar > (SHA1: 050909a6091c8807de726bc5ddee34368b926eb0) > > /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0-cyclonedx.xml.asc > (SHA1: 508df6e4f5c45db418cb2c090abe667d07e37c61) > > /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0.pom > (SHA1: 823cfe603e9e0a66662d0a992e4fe7dcdf73a79c) > > /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0-javadoc.jar.asc > (SHA1: f25c608b877cd2dd9f7cecbfc496347fe28c3f42) > > /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0-test-sources.jar.asc > (SHA1: cebdab38c07a2d0e268f59b31e0972f037e20b74) > > /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0.spdx.json.asc > (SHA1: cb030a3caacfd88f8bb71ba012504ce8b1cce7de) > > /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0.pom.asc > (SHA1: d6ed8401e417d6b23428b74c54a79ab9bf1207f1) > > /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0-sources.jar > (SHA1: 4f6fef5bd5f1b1a92fa903ecbd1c408f5eea41e9) > > /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0.jar > (SHA1: 65b5e7d648b9fd038a57dc4f3e6106f2e52d9146) > > /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0-sources.jar.asc > (SHA1: 068238306cab95310004a48f7f8cfce07cfcf6f7) > > /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0-cyclonedx.json > (SHA1: a118b583793c021ad43a622233d9248c6c06eb89) > > /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0.jar.asc > (SHA1: 44643af2ffb760901f73745c02536eb5e1f15ec7) > > /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0-javadoc.jar > (SHA1: 5e2e76f6262d9cab1e8202f3b2a8a4074bebe66f) > > /org/apache/commons/commons-vfs2-examples/2.10.0/commons-vfs2-examples-2.10.0-cyclonedx.xml > (SHA1: a2608d2f58dda73ca81ca52348299e29bd0a64b3) > > /org/apache/commons/commons-vfs2-examples/2.10.0/commons-vfs2-examples-2.10.0-cyclonedx.xml.asc > (SHA1: f9faada419af021bbe23442c4817fc3dea4acef5) > > /org/apache/commons/commons-vfs2-examples/2.10.0/commons-vfs2-examples-2.10.0-javadoc.jar > (SHA1: 39849050f6684a4d0196d77daf5878a800e68627) > > /org/apache/commons/commons-vfs2-examples/2.10.0/commons-vfs2-examples-2.10.0.pom > (SHA1: 83eb711d79727fd305153b1fe8b505ecb3ba8712) > > /org/apache/commons/commons-vfs2-examples/2.10.0/commons-vfs2-examples-2.10.0-cyclonedx.json > (SHA1: 8ecb484d66a66ac2723f67655bea52c12ec47ab9) > > /org/apache/commons/commons-vfs2-examples/2.10.0/commons-vfs2-examples-2.10.0.spdx.json > (SHA1: 8722a0d59ff0cfeba5d84d68d55557dcd88c81fe) > > /org/apache/commons/commons-vfs2-examples/2.10.0/commons-vfs2-examples-2.10.0-cyclonedx.json.asc > (SHA1: fd5cd1a67b201118112c382dfe07c09762c21678) > > /org/apache/commons/commons-vfs2-examples/2.10.0/commons-vfs2-examples-2.10.0.jar.asc > (SHA1: 5b5d1327bc2a227dca06b7765c52dffd1688f3d1) > > /org/apache/commons/commons-vfs2-examples/2.10.0/commons-vfs2-examples-2.10.0.jar > (SHA1: 9f2311bce23909fe8f6992215b372d9510f9e60e) > > /org/apache/commons/commons-vfs2-examples/2.10.0/commons-vfs2-examples-2.10.0-javadoc.jar.asc > (SHA1: 85b748afd37effc879b0cd4f3865a7f622117e8a) > > /org/apache/commons/commons-vfs2-examples/2.10.0/commons-vfs2-examples-2.10.0-sources.jar > (SHA1: b137145a37faa611811d65afed1cc5d895440478) > > /org/apache/commons/commons-vfs2-examples/2.10.0/commons-vfs2-examples-2.10.0.spdx.json.asc > (SHA1: 878226a83bd42da510717269aa5beb7c02aa4141) > > /org/apache/commons/commons-vfs2-examples/2.10.0/commons-vfs2-examples-2.10.0.pom.asc > (SHA1: 90c48a0716dcc8a796e6660f1763f6b722c63ef0) > > /org/apache/commons/commons-vfs2-examples/2.10.0/commons-vfs2-examples-2.10.0-sources.jar.asc > (SHA1: d1fc159d51d44e4709b4320330c859bda18cdcec) > > /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0-javadoc.jar.asc > (SHA1: 8daf19ec14e8256a63c7c728ec645f8b54c79711) > > /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0.spdx.json > (SHA1: 8517f52f56fe8f44bf91403a127ddf8b50c1f4ff) > > /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0-sources.jar > (SHA1: 55aef39a2fc7f7a1f2303c47a343eae121d7284a) > > /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0-test-sources.jar > (SHA1: 33f8ed8e583cbdfabb3d4ed1e3cb26d118dd2e3b) > > /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0.spdx.json.asc > (SHA1: 74f1b417b9d2812969db5c32e02ef3d29780c852) > /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0.pom > (SHA1: 3c5c837f1ba7d5570d26842c42c7c04fedbcc862) > > /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0-test-sources.jar.asc > (SHA1: 68f31e579105116adc841549e9e9a6a53775fbc7) > > /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0-javadoc.jar > (SHA1: a98c7d32579560cc24ca2d5799555c6cdd2f7111) > > /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0-cyclonedx.json > (SHA1: 9c07375285d93966514755541a7f969077a08fd2) > > /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0-cyclonedx.xml > (SHA1: 200903a12b0bae3ce8951da8cfc8c7094c398f83) > > /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0.jar.asc > (SHA1: 0682af052fbd61de21682eae5c539ca1ebf2981d) > > /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0-tests.jar.asc > (SHA1: 7cd448f065168588a1437db28327bf693328a095) > /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0.jar > (SHA1: 144fd0afb87ba4cfbc587369655758c3448a3424) > > /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0-cyclonedx.xml.asc > (SHA1: 6bfe18d0268a3428283ae7f9315a758e9289cab4) > > /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0-sources.jar.asc > (SHA1: e3063cedbcb5fe2a6ab59c4dd7122bd9e388c0db) > > /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0-tests.jar > (SHA1: f6ef7549baa622b646597a8c5fb86ebd8d5e594a) > > /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0.pom.asc > (SHA1: 37a25e6e54b05b195da82b21a5102202f3647b3b) > > /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0-cyclonedx.json.asc > (SHA1: 1fbc076658e076a8d7db13444b0dcadd19506ff9) > > Thank you, > Gary Gregory, > Release Manager (using key 86fdc7e2a11262cb) > > ============================== > > The following is intended as a helper and refresher for reviewers. > > Validating a release candidate > ============================== > > These guidelines are NOT complete. > > Requirements: Git, Java, and Maven. > > You can validate a release from a release candidate (RC) tag as follows. > > 1a) Download and decompress the source archive from: > > https://dist.apache.org/repos/dist/dev/commons/vfs/2.10.0-RC1/source > > 1b) Check out the RC tag from git (optional) > > This is optional, as a reviewer must check source distributions as a > minimum. > > git clone https://gitbox.apache.org/repos/asf/commons-vfs.git --branch > commons-vfs-2.10.0-RC1 commons-vfs-2.10.0-RC1 > cd commons-vfs-2.10.0-RC1 > > 2) Checking the build > > All components should include a default Maven goal, such that you can > run 'mvn' from the command line by itself. > > 2) Check Apache licenses > > This step is not required if the site includes a RAT report page which > you then must check. > This check should be included in the default Maven build, but you can > check it with: > > mvn apache-rat:check > > 3) Check binary compatibility > > This step is not required if the site includes a JApiCmp report page > which you then must check. > This check should be included in the default Maven build, but you can > check it with: > > mvn verify -DskipTests -P japicmp japicmp:cmp > > 4) Build the package > > This check should be included in the default Maven build, but you can > check it with: > > mvn -V clean package > > You can record the Maven and Java version produced by -V in your VOTE > reply. > To gather OS information from a command line: > Windows: ver > Linux: uname -a > > 4b) Check reproducibility > > To check that a build is reproducible, run: > > mvn clean verify artifact:compare -DskipTests > -Dreference.repo= > https://repository.apache.org/content/repositories/staging/ > '-Dbuildinfo.ignore=*/*.spdx.json' > > Note that this excludes SPDX files from the check. > > 5) Build the site for a single module project > > Note: Some plugins require the components to be installed instead of > packaged. > > mvn site > Check the site reports in: > - Windows: target\site\index.html > - Linux: target/site/index.html > > 6) Build the site for a multi-module project > > mvn site > mvn site:stage > Check the site reports in: > - Windows: target\site\index.html > - Linux: target/site/index.html > > Note that the project reports are created for each module. > Modules can be accessed using the 'Project Modules' link under > the 'Project Information' menu (see <path-to-site>/modules.html). > > -the end- > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org > For additional commands, e-mail: dev-h...@commons.apache.org > > -- Arnout Engelen ASF Security Response Apache Pekko PMC member, ASF Member NixOS Committer Independent Open Source consultant
