On Thu, Feb 6, 2025 at 11:09 PM Arnout Engelen <enge...@apache.org> wrote:
> * I did not test the artifacts against any project > (I have also ran the jackrabbit-vfs-ext unit tests with the staged version now, no surprises) Arnout > On Mon, Feb 3, 2025 at 12:27 AM Gary Gregory <garydgreg...@gmail.com> > wrote: > >> We have fixed a few bugs and added enhancements since Apache Commons >> VFS Project 2.9.0 was released over 3 years ago, so I would like to >> release Apache Commons VFS Project 2.10.0. >> >> [Note that try to verify reproducibility using artifact:compare: >> >> mvn clean verify artifact:compare -DskipTests >> -Dreference.repo= >> https://repository.apache.org/content/repositories/staging/ >> '-Dbuildinfo.ignore=*/*.spdx.json' >> >> doesn't work, maybe because this is a multi-module builds but it's the >> first time I tried with this build] >> >> Apache Commons VFS Project 2.10.0 RC1 is available for review here: >> https://dist.apache.org/repos/dist/dev/commons/vfs/2.10.0-RC1 (svn >> revision 74653) >> >> The Git tag commons-vfs-2.10.0-RC1 commit for this RC is >> 1b94883317d6687e2dd3a0294d9e6e2ab066cf56 which you can browse here: >> >> https://gitbox.apache.org/repos/asf?p=commons-vfs.git;a=commit;h=1b94883317d6687e2dd3a0294d9e6e2ab066cf56 >> You may checkout this tag using: >> git clone https://gitbox.apache.org/repos/asf/commons-vfs.git >> --branch <https://gitbox.apache.org/repos/asf/commons-vfs.git--branch> >> commons-vfs-2.10.0-RC1 commons-vfs-2.10.0-RC1 >> >> Maven artifacts are here: >> >> https://repository.apache.org/content/repositories/orgapachecommons-1813/org/apache/commons/commons-vfs2-project/2.10.0/ >> >> These are the artifacts and their hashes are listed at the bottom of this >> email. >> >> I have tested this with 'mvn' (the default goal) and 'mvn clean >> package site' plus stagging using: >> >> openjdk version "17.0.14" 2025-01-21 >> OpenJDK Runtime Environment Homebrew (build 17.0.14+0) >> OpenJDK 64-Bit Server VM Homebrew (build 17.0.14+0, mixed mode, sharing) >> >> Apache Maven 3.9.9 (8e8579a9e76f7d015ee5ec7bfcdc97d260186937) >> Maven home: /opt/homebrew/Cellar/maven/3.9.9/libexec >> Java version: 17.0.14, vendor: Homebrew, runtime: >> /opt/homebrew/Cellar/openjdk@17/17.0.14/libexec/openjdk.jdk/Contents/Home >> Default locale: en_US, platform encoding: UTF-8 >> OS name: "mac os x", version: "15.2", arch: "aarch64", family: "mac" >> >> Darwin Garys-MacBook-Pro.local 24.2.0 Darwin Kernel Version 24.2.0: >> Fri Dec 6 19:03:40 PST 2024; >> root:xnu-11215.61.5~2/RELEASE_ARM64_T6041 arm64 >> Docker version 27.3.1, build ce12230 >> >> >> Details of changes since 2.9.0 are in the release notes: >> >> https://dist.apache.org/repos/dist/dev/commons/vfs/2.10.0-RC1/RELEASE-NOTES.txt >> >> https://dist.apache.org/repos/dist/dev/commons/vfs/2.10.0-RC1/site/changes.html >> >> Site: >> >> https://dist.apache.org/repos/dist/dev/commons/vfs/2.10.0-RC1/site/index.html >> (note some *relative* links are broken and the 2.10.0 directories >> are not yet created - these will be OK once the site is deployed.) >> >> JApiCmp Reports (compared to 2.9.0): >> >> https://dist.apache.org/repos/dist/dev/commons/vfs/2.10.0-RC1/site/commons-vfs2/japicmp.html >> >> https://dist.apache.org/repos/dist/dev/commons/vfs/2.10.0-RC1/site/commons-vfs2-ant/japicmp.html >> >> https://dist.apache.org/repos/dist/dev/commons/vfs/2.10.0-RC1/site/commons-vfs2-jackrabbit1/japicmp.html >> >> https://dist.apache.org/repos/dist/dev/commons/vfs/2.10.0-RC1/site/commons-vfs2-jackrabbit2/japicmp.html >> RAT Report: >> >> https://dist.apache.org/repos/dist/dev/commons/vfs/2.10.0-RC1/site/rat-report.html >> >> KEYS: >> https://downloads.apache.org/commons/KEYS >> >> Please review the release candidate and vote. >> This vote will close no sooner than 72 hours from now. >> >> [ ] +1 Release these artifacts >> [ ] +0 OK, but... >> [ ] -0 OK, but really should fix... >> [ ] -1 I oppose this release because... >> >> Hashes: >> >> /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0-cyclonedx.json >> (SHA1: b229a5e18d8e82dd6e9db2ff003d0b2593863cbc) >> /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0-javadoc.jar >> (SHA1: 1f0fc1088905c434428f8112c82baaefd8f78772) >> /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0.jar.asc >> (SHA1: 0f669a68692b6049db75ce36aebf678a707f7858) >> /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0.spdx.json >> (SHA1: 499b5021d498f47e98713591006ecad2049da148) >> /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0.jar >> (SHA1: a306167fdb88152403c8b00595b1502ffacd5b76) >> >> /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0-cyclonedx.json.asc >> (SHA1: b00e61889bdfcd18211fcae2d1035b722d85fd01) >> >> /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0-javadoc.jar.asc >> (SHA1: bd5886944c53b7957c4589306a79277a9391a06a) >> >> /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0-cyclonedx.xml.asc >> (SHA1: 81e96bc727bb334f9da68b9002ef6cf3035913ab) >> /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0-tests.jar >> (SHA1: fc466d24614de4f7de63baa040c5efa39f1c629b) >> >> /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0-sources.jar.asc >> (SHA1: d0cefd7149e690bc43ab797ac94979c12c28785b) >> /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0-tests.jar.asc >> (SHA1: 8730a072ddb74b5db8d2037b1daaad3868021213) >> /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0.pom.asc >> (SHA1: 739135b1a8f4d0f3d3104a147f7573c27a2ceb55) >> /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0-sources.jar >> (SHA1: 8ee4df022b06e80f15c77f8b41b20dfbaf732f7f) >> >> /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0-test-sources.jar.asc >> (SHA1: a3e4084e78eb7fdefa4f165296dbdb91eeb932ea) >> /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0-cyclonedx.xml >> (SHA1: c56bfa3c31be99b8d56462c3f043b2bfb8c322f2) >> /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0.spdx.json.asc >> (SHA1: 2c64f769d874c2f7795aee28e7b96db56fdc15e2) >> >> /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0-test-sources.jar >> (SHA1: 2834ea660c244d34e3c4d26e01be41697a3dcf88) >> /org/apache/commons/commons-vfs2/2.10.0/commons-vfs2-2.10.0.pom >> (SHA1: 5b00938fc576e13e3093cc756878a995ac659ff5) >> >> /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0-tests.jar >> (SHA1: a80c60620b5ced3ef8e8274140e3f8803495fdea) >> >> /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0-sources.jar.asc >> (SHA1: a050e71d7c893e79ebd97efe089097fdbdfbab2f) >> >> /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0.spdx.json.asc >> (SHA1: 505d6bc3dc84de698eb0177918619858f85e089e) >> >> /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0-cyclonedx.json.asc >> (SHA1: 86e459f63f581eb5ec48221630090ecfde48769d) >> >> /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0-test-sources.jar.asc >> (SHA1: 00d5903a7070f66c0ea7130f380e2e80071784b0) >> >> /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0.jar.asc >> (SHA1: 3e37b6e5f0f4afeed4583e3d1e7e05feb0b1abd2) >> >> /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0.spdx.json >> (SHA1: a636f81490d2c9c94cb015e6cf372420a9387456) >> >> /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0.jar >> (SHA1: 1ba40e5a26bd898f6020dcc6c4dfb98d29e9cf5a) >> >> /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0-javadoc.jar.asc >> (SHA1: a230ff29acc193c15b96fcb09223410b4843b538) >> >> /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0.pom >> (SHA1: 3cf7c65e3bb5d41926a366ec245b4808b5b51256) >> >> /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0-cyclonedx.xml.asc >> (SHA1: 1fb489ed1824e9001609128b38717313525a8e74) >> >> /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0-tests.jar.asc >> (SHA1: a8e58d670b10aa0ae4faf634809faea10ae6042c) >> >> /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0-sources.jar >> (SHA1: 34c1c70e7af99be1fa4ddf0d47b09ce518fecc86) >> >> /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0-javadoc.jar >> (SHA1: 6106f4d613eca059ff8c1575c51552aae7cef69c) >> >> /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0-cyclonedx.xml >> (SHA1: 8a2fefb817a491ab1995382cefea612a3d71e989) >> >> /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0-cyclonedx.json >> (SHA1: 260afdb4e5a5b2c8890d4e6b5bcea8d5612d894d) >> >> /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0-test-sources.jar >> (SHA1: 0ee7137c2caaa176ca6b76bb978e8eeaf04e84fe) >> >> /org/apache/commons/commons-vfs2-jackrabbit1/2.10.0/commons-vfs2-jackrabbit1-2.10.0.pom.asc >> (SHA1: f7f916986118660d627bd503913b84c25f79be33) >> >> /org/apache/commons/commons-vfs2-bom/2.10.0/commons-vfs2-bom-2.10.0-cyclonedx.json >> (SHA1: e1037c2fc0b1564d0bcf0835723a03d270c28be2) >> >> /org/apache/commons/commons-vfs2-bom/2.10.0/commons-vfs2-bom-2.10.0-cyclonedx.xml >> (SHA1: 7a88a6026c8b18ae8e51f407e9d7c5ea30412b8e) >> >> /org/apache/commons/commons-vfs2-bom/2.10.0/commons-vfs2-bom-2.10.0-cyclonedx.xml.asc >> (SHA1: 3ea5fd461beeb0c53960ca72444892e8bc021733) >> >> /org/apache/commons/commons-vfs2-bom/2.10.0/commons-vfs2-bom-2.10.0-cyclonedx.json.asc >> (SHA1: a5d137ebff2dd384e636d1ba8659c82506a96e7c) >> >> /org/apache/commons/commons-vfs2-bom/2.10.0/commons-vfs2-bom-2.10.0.spdx.json >> (SHA1: 5127247d89c01759e4de2c782e6e107534485a60) >> >> /org/apache/commons/commons-vfs2-bom/2.10.0/commons-vfs2-bom-2.10.0.pom.asc >> (SHA1: 24f4cbd31345f8c5d520bd6efa35329d50b9df2a) >> /org/apache/commons/commons-vfs2-bom/2.10.0/commons-vfs2-bom-2.10.0.pom >> (SHA1: de6225a6d964f8041863b0b43c8924a84637c819) >> >> /org/apache/commons/commons-vfs2-bom/2.10.0/commons-vfs2-bom-2.10.0.spdx.json.asc >> (SHA1: 7edefbb8d702afbd81f30da1c30cc8a2f0e5ea2f) >> >> /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0-cyclonedx.xml.asc >> (SHA1: 6ba26e76384d3dca1b7c0a76390377260f138948) >> >> /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0-test-sources.jar.asc >> (SHA1: 7e535e3f79416046ba96f6f41082fc8722dab6ad) >> >> /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0-sources.jar.asc >> (SHA1: 78505cb6ddbe7072f20f098382fab8fd555a1c42) >> >> /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0-test-sources.jar >> (SHA1: 5e55a9dc19f2c0b7d8d0067ce54226915777dbc0) >> >> /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0.jar.asc >> (SHA1: 479c4bde0c26599ba94c331b5390dfb8e5ebb475) >> >> /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0-cyclonedx.json >> (SHA1: 94743712fc7d8779eb2914e032d4474761f9475d) >> /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0.jar >> (SHA1: 5fddcca84a523dbe76efe52108a7c1f14b5dc96f) >> /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0.pom >> (SHA1: 275848c381e460f407aa63ceb414dc02d1655c95) >> >> /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0.spdx.json.asc >> (SHA1: fac8bb46e79bf07898051d345f408aaf6c4bc980) >> >> /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0-javadoc.jar >> (SHA1: f538070c5dc44a6f81c5f87e6314880c2ce66d6b) >> >> /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0-cyclonedx.xml >> (SHA1: 66776cdb995a58f8d185cf070a16bd0c7ae57fb6) >> >> /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0-sources.jar >> (SHA1: 412669b027688c9fc654ddb9fef25ed5003213be) >> >> /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0-tests.jar.asc >> (SHA1: 6f404cedd10db09e77e0116e3197d3585c9566fe) >> >> /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0-tests.jar >> (SHA1: 4984e57a8b825a26e1a4dca3db5e9cd1ca170026) >> >> /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0.pom.asc >> (SHA1: 10149bce12e26317522ad2c547a9ec364bf77c9f) >> >> /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0.spdx.json >> (SHA1: 39a9dc1721c1c08bcf5465531b17f6977235b99b) >> >> /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0-javadoc.jar.asc >> (SHA1: 3055042d15cd525aef40f9c1e0de3d5d43075779) >> >> /org/apache/commons/commons-vfs2-ant/2.10.0/commons-vfs2-ant-2.10.0-cyclonedx.json.asc >> (SHA1: 560f22513a75c1baacc1afc7be10f90c1ab10a9b) >> >> /org/apache/commons/commons-vfs2-distribution/2.10.0/commons-vfs2-distribution-2.10.0.pom.asc >> (SHA1: 2d665942c390e402249b56f6659966d6d7788ac5) >> >> /org/apache/commons/commons-vfs2-distribution/2.10.0/commons-vfs2-distribution-2.10.0-cyclonedx.json >> (SHA1: a6b179d0fb137c9e4f52ae3bca687f0313778490) >> >> /org/apache/commons/commons-vfs2-distribution/2.10.0/commons-vfs2-distribution-2.10.0-cyclonedx.xml.asc >> (SHA1: 7d2652b25571f486175461c7b7b3f102980584b9) >> >> /org/apache/commons/commons-vfs2-distribution/2.10.0/commons-vfs2-distribution-2.10.0.pom >> (SHA1: 85a650fb0c201a24a653c6d436189afb6bd47c79) >> >> /org/apache/commons/commons-vfs2-distribution/2.10.0/commons-vfs2-distribution-2.10.0-cyclonedx.xml >> (SHA1: 23d605d022c6eab8c9214980a966ed9422ccedac) >> >> /org/apache/commons/commons-vfs2-distribution/2.10.0/commons-vfs2-distribution-2.10.0.spdx.json.asc >> (SHA1: ae6ff16e3da3540efb878d2ae9afe69552fc3dc1) >> >> /org/apache/commons/commons-vfs2-distribution/2.10.0/commons-vfs2-distribution-2.10.0-cyclonedx.json.asc >> (SHA1: c64c8c8efaac16c3a6b3a9eee0b03f27a7f5a514) >> >> /org/apache/commons/commons-vfs2-distribution/2.10.0/commons-vfs2-distribution-2.10.0.spdx.json >> (SHA1: c1e49fb4645f93858ae3a61dbd5fbe21e8ede1c7) >> >> /org/apache/commons/commons-vfs2-project/2.10.0/commons-vfs2-project-2.10.0-site.xml.asc >> (SHA1: 9f0d308951c57141f7fc037bd53a248f9b8e1446) >> >> /org/apache/commons/commons-vfs2-project/2.10.0/commons-vfs2-project-2.10.0.pom >> (SHA1: 90d42622fb2b53641b270b1ef6f8ecc8b7679260) >> >> /org/apache/commons/commons-vfs2-project/2.10.0/commons-vfs2-project-2.10.0-cyclonedx.xml >> (SHA1: 1fa57d6acbb47bc1aaa1cadc8ca2ad0e730966d7) >> >> /org/apache/commons/commons-vfs2-project/2.10.0/commons-vfs2-project-2.10.0-cyclonedx.xml.asc >> (SHA1: 97b7d225993c64716025fd391749595cc5d805f3) >> >> /org/apache/commons/commons-vfs2-project/2.10.0/commons-vfs2-project-2.10.0-site.xml >> (SHA1: 8b1dbb2558c1c0c425f30b0d76fe0bbe1868949d) >> >> /org/apache/commons/commons-vfs2-project/2.10.0/commons-vfs2-project-2.10.0.spdx.json >> (SHA1: 48967a9b8db52bd44c2f477cfdb58ef343f5abc0) >> >> /org/apache/commons/commons-vfs2-project/2.10.0/commons-vfs2-project-2.10.0-cyclonedx.json.asc >> (SHA1: 47e794d4b44727515d9c79368100f9eaf067ce1a) >> >> /org/apache/commons/commons-vfs2-project/2.10.0/commons-vfs2-project-2.10.0.pom.asc >> (SHA1: 293c0520769bd0be5ff6f4f53ad46500681df438) >> >> /org/apache/commons/commons-vfs2-project/2.10.0/commons-vfs2-project-2.10.0.spdx.json.asc >> (SHA1: 729cfeb6caa061cb4ec5f0fba08f735b0c554481) >> >> /org/apache/commons/commons-vfs2-project/2.10.0/commons-vfs2-project-2.10.0-cyclonedx.json >> (SHA1: 841c7308d0493f43b872b59229f49022ff42b805) >> >> /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0-cyclonedx.xml >> (SHA1: a90aa5491856bd028e0fa4f92642dd330054e0f3) >> >> /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0-cyclonedx.json.asc >> (SHA1: 94a438faff0aed5ba3cf33e0b1e71d2fbf8b8f6d) >> >> /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0-tests.jar.asc >> (SHA1: d8cd598acd2bc1c565e898e7dbf635f799d43e47) >> >> /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0-tests.jar >> (SHA1: 7aa42c32de610bd4c16d8cf6004e93afce9647ee) >> >> /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0.spdx.json >> (SHA1: 2c278ac08483c97e0dc810a40d30c0b3c5924965) >> >> /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0-test-sources.jar >> (SHA1: 050909a6091c8807de726bc5ddee34368b926eb0) >> >> /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0-cyclonedx.xml.asc >> (SHA1: 508df6e4f5c45db418cb2c090abe667d07e37c61) >> >> /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0.pom >> (SHA1: 823cfe603e9e0a66662d0a992e4fe7dcdf73a79c) >> >> /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0-javadoc.jar.asc >> (SHA1: f25c608b877cd2dd9f7cecbfc496347fe28c3f42) >> >> /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0-test-sources.jar.asc >> (SHA1: cebdab38c07a2d0e268f59b31e0972f037e20b74) >> >> /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0.spdx.json.asc >> (SHA1: cb030a3caacfd88f8bb71ba012504ce8b1cce7de) >> >> /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0.pom.asc >> (SHA1: d6ed8401e417d6b23428b74c54a79ab9bf1207f1) >> >> /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0-sources.jar >> (SHA1: 4f6fef5bd5f1b1a92fa903ecbd1c408f5eea41e9) >> >> /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0.jar >> (SHA1: 65b5e7d648b9fd038a57dc4f3e6106f2e52d9146) >> >> /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0-sources.jar.asc >> (SHA1: 068238306cab95310004a48f7f8cfce07cfcf6f7) >> >> /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0-cyclonedx.json >> (SHA1: a118b583793c021ad43a622233d9248c6c06eb89) >> >> /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0.jar.asc >> (SHA1: 44643af2ffb760901f73745c02536eb5e1f15ec7) >> >> /org/apache/commons/commons-vfs2-jackrabbit2/2.10.0/commons-vfs2-jackrabbit2-2.10.0-javadoc.jar >> (SHA1: 5e2e76f6262d9cab1e8202f3b2a8a4074bebe66f) >> >> /org/apache/commons/commons-vfs2-examples/2.10.0/commons-vfs2-examples-2.10.0-cyclonedx.xml >> (SHA1: a2608d2f58dda73ca81ca52348299e29bd0a64b3) >> >> /org/apache/commons/commons-vfs2-examples/2.10.0/commons-vfs2-examples-2.10.0-cyclonedx.xml.asc >> (SHA1: f9faada419af021bbe23442c4817fc3dea4acef5) >> >> /org/apache/commons/commons-vfs2-examples/2.10.0/commons-vfs2-examples-2.10.0-javadoc.jar >> (SHA1: 39849050f6684a4d0196d77daf5878a800e68627) >> >> /org/apache/commons/commons-vfs2-examples/2.10.0/commons-vfs2-examples-2.10.0.pom >> (SHA1: 83eb711d79727fd305153b1fe8b505ecb3ba8712) >> >> /org/apache/commons/commons-vfs2-examples/2.10.0/commons-vfs2-examples-2.10.0-cyclonedx.json >> (SHA1: 8ecb484d66a66ac2723f67655bea52c12ec47ab9) >> >> /org/apache/commons/commons-vfs2-examples/2.10.0/commons-vfs2-examples-2.10.0.spdx.json >> (SHA1: 8722a0d59ff0cfeba5d84d68d55557dcd88c81fe) >> >> /org/apache/commons/commons-vfs2-examples/2.10.0/commons-vfs2-examples-2.10.0-cyclonedx.json.asc >> (SHA1: fd5cd1a67b201118112c382dfe07c09762c21678) >> >> /org/apache/commons/commons-vfs2-examples/2.10.0/commons-vfs2-examples-2.10.0.jar.asc >> (SHA1: 5b5d1327bc2a227dca06b7765c52dffd1688f3d1) >> >> /org/apache/commons/commons-vfs2-examples/2.10.0/commons-vfs2-examples-2.10.0.jar >> (SHA1: 9f2311bce23909fe8f6992215b372d9510f9e60e) >> >> /org/apache/commons/commons-vfs2-examples/2.10.0/commons-vfs2-examples-2.10.0-javadoc.jar.asc >> (SHA1: 85b748afd37effc879b0cd4f3865a7f622117e8a) >> >> /org/apache/commons/commons-vfs2-examples/2.10.0/commons-vfs2-examples-2.10.0-sources.jar >> (SHA1: b137145a37faa611811d65afed1cc5d895440478) >> >> /org/apache/commons/commons-vfs2-examples/2.10.0/commons-vfs2-examples-2.10.0.spdx.json.asc >> (SHA1: 878226a83bd42da510717269aa5beb7c02aa4141) >> >> /org/apache/commons/commons-vfs2-examples/2.10.0/commons-vfs2-examples-2.10.0.pom.asc >> (SHA1: 90c48a0716dcc8a796e6660f1763f6b722c63ef0) >> >> /org/apache/commons/commons-vfs2-examples/2.10.0/commons-vfs2-examples-2.10.0-sources.jar.asc >> (SHA1: d1fc159d51d44e4709b4320330c859bda18cdcec) >> >> /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0-javadoc.jar.asc >> (SHA1: 8daf19ec14e8256a63c7c728ec645f8b54c79711) >> >> /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0.spdx.json >> (SHA1: 8517f52f56fe8f44bf91403a127ddf8b50c1f4ff) >> >> /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0-sources.jar >> (SHA1: 55aef39a2fc7f7a1f2303c47a343eae121d7284a) >> >> /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0-test-sources.jar >> (SHA1: 33f8ed8e583cbdfabb3d4ed1e3cb26d118dd2e3b) >> >> /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0.spdx.json.asc >> (SHA1: 74f1b417b9d2812969db5c32e02ef3d29780c852) >> /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0.pom >> (SHA1: 3c5c837f1ba7d5570d26842c42c7c04fedbcc862) >> >> /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0-test-sources.jar.asc >> (SHA1: 68f31e579105116adc841549e9e9a6a53775fbc7) >> >> /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0-javadoc.jar >> (SHA1: a98c7d32579560cc24ca2d5799555c6cdd2f7111) >> >> /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0-cyclonedx.json >> (SHA1: 9c07375285d93966514755541a7f969077a08fd2) >> >> /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0-cyclonedx.xml >> (SHA1: 200903a12b0bae3ce8951da8cfc8c7094c398f83) >> >> /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0.jar.asc >> (SHA1: 0682af052fbd61de21682eae5c539ca1ebf2981d) >> >> /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0-tests.jar.asc >> (SHA1: 7cd448f065168588a1437db28327bf693328a095) >> /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0.jar >> (SHA1: 144fd0afb87ba4cfbc587369655758c3448a3424) >> >> /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0-cyclonedx.xml.asc >> (SHA1: 6bfe18d0268a3428283ae7f9315a758e9289cab4) >> >> /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0-sources.jar.asc >> (SHA1: e3063cedbcb5fe2a6ab59c4dd7122bd9e388c0db) >> >> /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0-tests.jar >> (SHA1: f6ef7549baa622b646597a8c5fb86ebd8d5e594a) >> >> /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0.pom.asc >> (SHA1: 37a25e6e54b05b195da82b21a5102202f3647b3b) >> >> /org/apache/commons/commons-vfs2-hdfs/2.10.0/commons-vfs2-hdfs-2.10.0-cyclonedx.json.asc >> (SHA1: 1fbc076658e076a8d7db13444b0dcadd19506ff9) >> >> Thank you, >> Gary Gregory, >> Release Manager (using key 86fdc7e2a11262cb) >> >> ============================== >> >> The following is intended as a helper and refresher for reviewers. >> >> Validating a release candidate >> ============================== >> >> These guidelines are NOT complete. >> >> Requirements: Git, Java, and Maven. >> >> You can validate a release from a release candidate (RC) tag as follows. >> >> 1a) Download and decompress the source archive from: >> >> https://dist.apache.org/repos/dist/dev/commons/vfs/2.10.0-RC1/source >> >> 1b) Check out the RC tag from git (optional) >> >> This is optional, as a reviewer must check source distributions as a >> minimum. >> >> git clone https://gitbox.apache.org/repos/asf/commons-vfs.git --branch >> commons-vfs-2.10.0-RC1 commons-vfs-2.10.0-RC1 >> cd commons-vfs-2.10.0-RC1 >> >> 2) Checking the build >> >> All components should include a default Maven goal, such that you can >> run 'mvn' from the command line by itself. >> >> 2) Check Apache licenses >> >> This step is not required if the site includes a RAT report page which >> you then must check. >> This check should be included in the default Maven build, but you can >> check it with: >> >> mvn apache-rat:check >> >> 3) Check binary compatibility >> >> This step is not required if the site includes a JApiCmp report page >> which you then must check. >> This check should be included in the default Maven build, but you can >> check it with: >> >> mvn verify -DskipTests -P japicmp japicmp:cmp >> >> 4) Build the package >> >> This check should be included in the default Maven build, but you can >> check it with: >> >> mvn -V clean package >> >> You can record the Maven and Java version produced by -V in your VOTE >> reply. >> To gather OS information from a command line: >> Windows: ver >> Linux: uname -a >> >> 4b) Check reproducibility >> >> To check that a build is reproducible, run: >> >> mvn clean verify artifact:compare -DskipTests >> -Dreference.repo= >> https://repository.apache.org/content/repositories/staging/ >> '-Dbuildinfo.ignore=*/*.spdx.json' >> >> Note that this excludes SPDX files from the check. >> >> 5) Build the site for a single module project >> >> Note: Some plugins require the components to be installed instead of >> packaged. >> >> mvn site >> Check the site reports in: >> - Windows: target\site\index.html >> - Linux: target/site/index.html >> >> 6) Build the site for a multi-module project >> >> mvn site >> mvn site:stage >> Check the site reports in: >> - Windows: target\site\index.html >> - Linux: target/site/index.html >> >> Note that the project reports are created for each module. >> Modules can be accessed using the 'Project Modules' link under >> the 'Project Information' menu (see <path-to-site>/modules.html). >> >> -the end- >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org >> For additional commands, e-mail: dev-h...@commons.apache.org >> >> > > -- > Arnout Engelen > ASF Security Response > Apache Pekko PMC member, ASF Member > NixOS Committer > Independent Open Source consultant > -- Arnout Engelen ASF Security Response Apache Pekko PMC member, ASF Member NixOS Committer Independent Open Source consultant
