My +1 Gary
On Fri, Jun 13, 2025 at 4:08 PM Gary Gregory <garydgreg...@gmail.com> wrote: > > We have fixed two (2) bugs since Apache Commons FileUpload 2.0.0-M3 > was released, so I would like to release Apache Commons FileUpload > 2.0.0-M4. This is a 24-hour release vote. > > Apache Commons FileUpload 2.0.0-M4 RC1 is available for review here: > https://dist.apache.org/repos/dist/dev/commons/fileupload/2.0.0-M4-RC1 > (svn revision 77527) > > The Git tag commons-fileupload-2.0.0-M4-RC1 commit for this RC is > 95a65ecc354de53273f9d269ebd7bc97887871d6 which you can browse here: > > https://gitbox.apache.org/repos/asf?p=commons-fileupload.git;a=commit;h=95a65ecc354de53273f9d269ebd7bc97887871d6 > You may checkout this tag using: > git clone https://gitbox.apache.org/repos/asf/commons-fileupload.git > --branch commons-fileupload-2.0.0-M4-RC1 > commons-fileupload-2.0.0-M4-RC1 > > Maven artifacts are here: > > https://repository.apache.org/content/repositories/orgapachecommons-1841/org/apache/commons/commons-fileupload2/2.0.0-M4/ > > These are the artifacts and their hashes is at the bottom of this > message at [1]. > > I have tested this with 'mvn' using: > > openjdk version "21.0.7" 2025-04-15 > OpenJDK Runtime Environment Homebrew (build 21.0.7) > OpenJDK 64-Bit Server VM Homebrew (build 21.0.7, mixed mode, sharing) > > Apache Maven 3.9.10 (5f519b97e944483d878815739f519b2eade0a91d) > Maven home: /opt/homebrew/Cellar/maven/3.9.10/libexec > Java version: 21.0.7, vendor: Homebrew, runtime: > /opt/homebrew/Cellar/openjdk@21/21.0.7/libexec/openjdk.jdk/Contents/Home > Default locale: en_US, platform encoding: UTF-8 > OS name: "mac os x", version: "15.5", arch: "aarch64", family: "mac" > > Darwin ****.local 24.5.0 Darwin Kernel Version 24.5.0: Tue Apr 22 > 19:53:27 PDT 2025; root:xnu-11417.121.6~2/RELEASE_ARM64_T6041 arm64 > > Docker version 28.0.4, build b8034c0 > > > Details of changes since 2.0.0-M3 are in the release notes: > > https://dist.apache.org/repos/dist/dev/commons/fileupload/2.0.0-M4-RC1/RELEASE-NOTES.txt > > https://dist.apache.org/repos/dist/dev/commons/fileupload/2.0.0-M4-RC1/site/jira-changes.html > > Site: > > https://dist.apache.org/repos/dist/dev/commons/fileupload/2.0.0-M4-RC1/site/index.html > (note some *relative* links are broken and the 2.0.0-M4 > directories are not yet created - these will be OK once the site is > deployed.) > > JApiCmp Report (compared to 2.0.0-M3): > > https://dist.apache.org/repos/dist/dev/commons/fileupload/2.0.0-M4-RC1/site/japicmp.html > Note that the above report is empty. > > RAT Report: > > https://dist.apache.org/repos/dist/dev/commons/fileupload/2.0.0-M4-RC1/site/rat-report.html > > KEYS: > https://downloads.apache.org/commons/KEYS > > Please review the release candidate and vote. > This vote will close no sooner than 24 hours from now. > > [ ] +1 Release these artifacts > [ ] +0 OK, but... > [ ] -0 OK, but really should fix... > [ ] -1 I oppose this release because... > > Thank you, > > Gary Gregory, > Release Manager (using key 86fdc7e2a11262cb) > > [1] Nexus: > > /org/apache/commons/commons-fileupload2-core/2.0.0-M4/commons-fileupload2-core-2.0.0-M4-test-sources.jar.asc > (SHA1: 142e3539d44bcbe77a208757aebbbd7ac81977d8) > /org/apache/commons/commons-fileupload2-core/2.0.0-M4/commons-fileupload2-core-2.0.0-M4-javadoc.jar > (SHA1: ab35630ced01f76d3fa180206584e3bfe3005063) > /org/apache/commons/commons-fileupload2-core/2.0.0-M4/commons-fileupload2-core-2.0.0-M4-javadoc.jar.asc > (SHA1: 9b05d200d9adec8f66b411a480e01a10719f8028) > /org/apache/commons/commons-fileupload2-core/2.0.0-M4/commons-fileupload2-core-2.0.0-M4-cyclonedx.xml > (SHA1: 1df4cdd34da3f9d72d1320ccb08b00adc9045b3a) > /org/apache/commons/commons-fileupload2-core/2.0.0-M4/commons-fileupload2-core-2.0.0-M4.spdx.json > (SHA1: 95f9cc997a5964167df8630e8d145113ac1ffab8) > /org/apache/commons/commons-fileupload2-core/2.0.0-M4/commons-fileupload2-core-2.0.0-M4-sources.jar > (SHA1: 57d56a3b947e90d851720de6fe22bd4fd18f7aa4) > /org/apache/commons/commons-fileupload2-core/2.0.0-M4/commons-fileupload2-core-2.0.0-M4-cyclonedx.json.asc > (SHA1: 027cbbab5f48706f6c8d80d9579a8c5cc9224a9d) > /org/apache/commons/commons-fileupload2-core/2.0.0-M4/commons-fileupload2-core-2.0.0-M4.pom > (SHA1: fff9659822805dccbce2e5877882ba95be501440) > /org/apache/commons/commons-fileupload2-core/2.0.0-M4/commons-fileupload2-core-2.0.0-M4.jar.asc > (SHA1: cbc3946e28a24a9f8732aef504e68108cfed9a84) > /org/apache/commons/commons-fileupload2-core/2.0.0-M4/commons-fileupload2-core-2.0.0-M4-tests.jar > (SHA1: 4e9cb7e13bbaa8c9c593386a9fdc7b9f102aeda0) > /org/apache/commons/commons-fileupload2-core/2.0.0-M4/commons-fileupload2-core-2.0.0-M4-tests.jar.asc > (SHA1: 9842a1ff128910bdd3bf05b1b530b2dfda69a379) > /org/apache/commons/commons-fileupload2-core/2.0.0-M4/commons-fileupload2-core-2.0.0-M4-test-sources.jar > (SHA1: 8357565f980d528aec242511d13f6970d26489a1) > /org/apache/commons/commons-fileupload2-core/2.0.0-M4/commons-fileupload2-core-2.0.0-M4.pom.asc > (SHA1: e30bd983b034c0ddf8bef1ff172abcb33dde34c2) > /org/apache/commons/commons-fileupload2-core/2.0.0-M4/commons-fileupload2-core-2.0.0-M4-cyclonedx.xml.asc > (SHA1: ce2232cde108261ea15423b52ae4da131bb68ac4) > /org/apache/commons/commons-fileupload2-core/2.0.0-M4/commons-fileupload2-core-2.0.0-M4.spdx.json.asc > (SHA1: b46f34ed5215a31d8af47bd808855992a313760d) > /org/apache/commons/commons-fileupload2-core/2.0.0-M4/commons-fileupload2-core-2.0.0-M4-cyclonedx.json > (SHA1: a0313bcabe3a5416faae0a4ed3971907a151ba0d) > /org/apache/commons/commons-fileupload2-core/2.0.0-M4/commons-fileupload2-core-2.0.0-M4-sources.jar.asc > (SHA1: f0d6ee7094147eed1b8b04ff8416d5cf3e816d20) > /org/apache/commons/commons-fileupload2-core/2.0.0-M4/commons-fileupload2-core-2.0.0-M4.jar > (SHA1: 3284839791dc0130ad07d594a05c7c8750aa4dd6) > /org/apache/commons/commons-fileupload2-javax/2.0.0-M4/commons-fileupload2-javax-2.0.0-M4.pom > (SHA1: 4665da951f745d23db6c2c4075d033dcca11c9f6) > /org/apache/commons/commons-fileupload2-javax/2.0.0-M4/commons-fileupload2-javax-2.0.0-M4-sources.jar > (SHA1: 931747cee7c01a97700f416f9a53712532ac5326) > /org/apache/commons/commons-fileupload2-javax/2.0.0-M4/commons-fileupload2-javax-2.0.0-M4-cyclonedx.xml > (SHA1: e008314756eacb67aeaddc67219198c7c080c011) > /org/apache/commons/commons-fileupload2-javax/2.0.0-M4/commons-fileupload2-javax-2.0.0-M4.jar.asc > (SHA1: 282ae1ce50ce32fca27f31c321d0773c0f056973) > /org/apache/commons/commons-fileupload2-javax/2.0.0-M4/commons-fileupload2-javax-2.0.0-M4-cyclonedx.json.asc > (SHA1: 1053759dd13bf14c9c647015e9b3d66884c0c53f) > /org/apache/commons/commons-fileupload2-javax/2.0.0-M4/commons-fileupload2-javax-2.0.0-M4-sources.jar.asc > (SHA1: ec98282b3bffc819f11b28438e23853e72e8403f) > /org/apache/commons/commons-fileupload2-javax/2.0.0-M4/commons-fileupload2-javax-2.0.0-M4-cyclonedx.xml.asc > (SHA1: 21175116f4e07fa07605a9cafe3e8cf765499fb3) > /org/apache/commons/commons-fileupload2-javax/2.0.0-M4/commons-fileupload2-javax-2.0.0-M4-javadoc.jar > (SHA1: 46abe69798317acd49bc197f939fd017e6808585) > /org/apache/commons/commons-fileupload2-javax/2.0.0-M4/commons-fileupload2-javax-2.0.0-M4.pom.asc > (SHA1: d9d3ca0d2d1d21f9a281b239a55cee94a400c242) > /org/apache/commons/commons-fileupload2-javax/2.0.0-M4/commons-fileupload2-javax-2.0.0-M4.spdx.json > (SHA1: d44f120e4d71b894e16008383e82fa7aeffa72a3) > /org/apache/commons/commons-fileupload2-javax/2.0.0-M4/commons-fileupload2-javax-2.0.0-M4-cyclonedx.json > (SHA1: e1ccceb1c0c708d71190e656835ab3504b4d8939) > /org/apache/commons/commons-fileupload2-javax/2.0.0-M4/commons-fileupload2-javax-2.0.0-M4-javadoc.jar.asc > (SHA1: 6bc2dc9d07a4af659d7c71d37acfea9efeac0b82) > /org/apache/commons/commons-fileupload2-javax/2.0.0-M4/commons-fileupload2-javax-2.0.0-M4.spdx.json.asc > (SHA1: d39abe65295f629e96d64eb9c8155b1b10093108) > /org/apache/commons/commons-fileupload2-javax/2.0.0-M4/commons-fileupload2-javax-2.0.0-M4-test-sources.jar.asc > (SHA1: ceaa9ac0f7f6ee54d24647b88eff351af89e3588) > /org/apache/commons/commons-fileupload2-javax/2.0.0-M4/commons-fileupload2-javax-2.0.0-M4.jar > (SHA1: 1655c138db35bd1f4a296a5c1c7d80e6d7ef7588) > /org/apache/commons/commons-fileupload2-javax/2.0.0-M4/commons-fileupload2-javax-2.0.0-M4-tests.jar.asc > (SHA1: 339bbc79d8c43de73c2bf9e0c70897e073acd11c) > /org/apache/commons/commons-fileupload2-javax/2.0.0-M4/commons-fileupload2-javax-2.0.0-M4-test-sources.jar > (SHA1: 1585c9dde124cfceb8eebe97f456fcd6b8b39bc0) > /org/apache/commons/commons-fileupload2-javax/2.0.0-M4/commons-fileupload2-javax-2.0.0-M4-tests.jar > (SHA1: 6067ff0ac5ca2de57e1484b01822c9210764455c) > /org/apache/commons/commons-fileupload2-jakarta-servlet6/2.0.0-M4/commons-fileupload2-jakarta-servlet6-2.0.0-M4-test-sources.jar > (SHA1: c722c6d9c21dfa0e74704c11c90ee937a7d7216e) > /org/apache/commons/commons-fileupload2-jakarta-servlet6/2.0.0-M4/commons-fileupload2-jakarta-servlet6-2.0.0-M4.pom.asc > (SHA1: e9fcaa68eddbf9dc8a5e40fc39dfe735eafc132d) > /org/apache/commons/commons-fileupload2-jakarta-servlet6/2.0.0-M4/commons-fileupload2-jakarta-servlet6-2.0.0-M4.jar > (SHA1: bb4c5ec509150db182dd5928a43b85d2ca82e273) > /org/apache/commons/commons-fileupload2-jakarta-servlet6/2.0.0-M4/commons-fileupload2-jakarta-servlet6-2.0.0-M4-test-sources.jar.asc > (SHA1: 40cddb0dbad0797b62cbbb83ccb3b5417981aed4) > /org/apache/commons/commons-fileupload2-jakarta-servlet6/2.0.0-M4/commons-fileupload2-jakarta-servlet6-2.0.0-M4-cyclonedx.xml > (SHA1: 26e38d9ac174c778b6ae23b8b531f52775e62c4c) > /org/apache/commons/commons-fileupload2-jakarta-servlet6/2.0.0-M4/commons-fileupload2-jakarta-servlet6-2.0.0-M4.pom > (SHA1: 07aeece1078816e94da387ac79f8430d431f7024) > /org/apache/commons/commons-fileupload2-jakarta-servlet6/2.0.0-M4/commons-fileupload2-jakarta-servlet6-2.0.0-M4-tests.jar > (SHA1: 73405afa96ddea965a7393e4bf262d58782539b2) > /org/apache/commons/commons-fileupload2-jakarta-servlet6/2.0.0-M4/commons-fileupload2-jakarta-servlet6-2.0.0-M4.spdx.json > (SHA1: 549b401aa3845483110ee7e58cace14f715db431) > /org/apache/commons/commons-fileupload2-jakarta-servlet6/2.0.0-M4/commons-fileupload2-jakarta-servlet6-2.0.0-M4-javadoc.jar.asc > (SHA1: f922f46a686e0c704f1302c45138e37f37d97c03) > /org/apache/commons/commons-fileupload2-jakarta-servlet6/2.0.0-M4/commons-fileupload2-jakarta-servlet6-2.0.0-M4-cyclonedx.xml.asc > (SHA1: 22a00a05c1f673329650d36c35c382b0acbe8bdc) > /org/apache/commons/commons-fileupload2-jakarta-servlet6/2.0.0-M4/commons-fileupload2-jakarta-servlet6-2.0.0-M4-cyclonedx.json.asc > (SHA1: 00164ff909788d1de82085a3a744e100acb4f7f0) > /org/apache/commons/commons-fileupload2-jakarta-servlet6/2.0.0-M4/commons-fileupload2-jakarta-servlet6-2.0.0-M4-javadoc.jar > (SHA1: 271812834442cc724601fedb5b9d59b25ca0096f) > /org/apache/commons/commons-fileupload2-jakarta-servlet6/2.0.0-M4/commons-fileupload2-jakarta-servlet6-2.0.0-M4.spdx.json.asc > (SHA1: 33562b020d6277d1c48787665818ff624b98a6f5) > /org/apache/commons/commons-fileupload2-jakarta-servlet6/2.0.0-M4/commons-fileupload2-jakarta-servlet6-2.0.0-M4.jar.asc > (SHA1: 28bddb2b24f5412c2e49459bfc9ab9e6682946c8) > /org/apache/commons/commons-fileupload2-jakarta-servlet6/2.0.0-M4/commons-fileupload2-jakarta-servlet6-2.0.0-M4-sources.jar > (SHA1: fcf3f91148e8ada2ecaf1139c008240c96d05793) > /org/apache/commons/commons-fileupload2-jakarta-servlet6/2.0.0-M4/commons-fileupload2-jakarta-servlet6-2.0.0-M4-cyclonedx.json > (SHA1: 835f7c3146be686319af2907e3077da1af446e91) > /org/apache/commons/commons-fileupload2-jakarta-servlet6/2.0.0-M4/commons-fileupload2-jakarta-servlet6-2.0.0-M4-tests.jar.asc > (SHA1: ae0f56b74e4c9ade830aff5ee57e1fc19af4400d) > /org/apache/commons/commons-fileupload2-jakarta-servlet6/2.0.0-M4/commons-fileupload2-jakarta-servlet6-2.0.0-M4-sources.jar.asc > (SHA1: 2d0618131f1fe36e06cfca9ae98a2a5997233f46) > /org/apache/commons/commons-fileupload2-distribution/2.0.0-M4/commons-fileupload2-distribution-2.0.0-M4.spdx.json > (SHA1: fa9fd62dc0c9eb4a8131b716e9ffd375dbe4252c) > /org/apache/commons/commons-fileupload2-distribution/2.0.0-M4/commons-fileupload2-distribution-2.0.0-M4.pom > (SHA1: 73bf5639ade2e6ba37134d1f473a5066aa20ba63) > /org/apache/commons/commons-fileupload2-distribution/2.0.0-M4/commons-fileupload2-distribution-2.0.0-M4.pom.asc > (SHA1: 721ed13e1c138bd46d2809b5757b0b8745d01608) > /org/apache/commons/commons-fileupload2-distribution/2.0.0-M4/commons-fileupload2-distribution-2.0.0-M4-cyclonedx.json > (SHA1: 8b412bb3930206d48591d3d84483a84dcb262a87) > /org/apache/commons/commons-fileupload2-distribution/2.0.0-M4/commons-fileupload2-distribution-2.0.0-M4-cyclonedx.xml > (SHA1: 59ba67856b7f718685a93534809dc94c2ba18aee) > /org/apache/commons/commons-fileupload2-distribution/2.0.0-M4/commons-fileupload2-distribution-2.0.0-M4-cyclonedx.xml.asc > (SHA1: 14a9a035fb1cd296baee569d4043bacdccd885d1) > /org/apache/commons/commons-fileupload2-distribution/2.0.0-M4/commons-fileupload2-distribution-2.0.0-M4.spdx.json.asc > (SHA1: 4db7bc2ae0bb576104858f38acd001633353812c) > /org/apache/commons/commons-fileupload2-distribution/2.0.0-M4/commons-fileupload2-distribution-2.0.0-M4-cyclonedx.json.asc > (SHA1: 0008e31c085f64d16e50abf629320f75b9d5f35a) > /org/apache/commons/commons-fileupload2-portlet/2.0.0-M4/commons-fileupload2-portlet-2.0.0-M4-cyclonedx.json.asc > (SHA1: 4ade38dbc90d2de78b1b689f4d6ae08ae5687cc7) > /org/apache/commons/commons-fileupload2-portlet/2.0.0-M4/commons-fileupload2-portlet-2.0.0-M4-test-sources.jar.asc > (SHA1: 5b470f497e436139127d6cfe1ee0b67f6d1e832f) > /org/apache/commons/commons-fileupload2-portlet/2.0.0-M4/commons-fileupload2-portlet-2.0.0-M4.pom > (SHA1: c6c676000be7b9e33241cd5199cf0f2c00a6de5b) > /org/apache/commons/commons-fileupload2-portlet/2.0.0-M4/commons-fileupload2-portlet-2.0.0-M4-javadoc.jar.asc > (SHA1: 9ee7648cf5591d85bad9ad0d6c5ca0ed93af4a0f) > /org/apache/commons/commons-fileupload2-portlet/2.0.0-M4/commons-fileupload2-portlet-2.0.0-M4.pom.asc > (SHA1: 85306359aa424d488c44a07b3b7f45fdd26cc320) > /org/apache/commons/commons-fileupload2-portlet/2.0.0-M4/commons-fileupload2-portlet-2.0.0-M4.jar.asc > (SHA1: 07794cb9e6fe131ab16df8e9b52431918d30d913) > /org/apache/commons/commons-fileupload2-portlet/2.0.0-M4/commons-fileupload2-portlet-2.0.0-M4-tests.jar > (SHA1: 136e7e3364676c7746a433085da05cc074ad6fbc) > /org/apache/commons/commons-fileupload2-portlet/2.0.0-M4/commons-fileupload2-portlet-2.0.0-M4-javadoc.jar > (SHA1: 15a5cfc882064ec4235a50c0025c3a585c573e5c) > /org/apache/commons/commons-fileupload2-portlet/2.0.0-M4/commons-fileupload2-portlet-2.0.0-M4-tests.jar.asc > (SHA1: 40b9b03891e3e28e4cbe352bc29e886bf0d0d3be) > /org/apache/commons/commons-fileupload2-portlet/2.0.0-M4/commons-fileupload2-portlet-2.0.0-M4-test-sources.jar > (SHA1: 4cb4cafad14624cdaaf5c6273f9416208572acf3) > /org/apache/commons/commons-fileupload2-portlet/2.0.0-M4/commons-fileupload2-portlet-2.0.0-M4.spdx.json > (SHA1: 03f1167942ac82bff0499439f855d539e74e0e50) > /org/apache/commons/commons-fileupload2-portlet/2.0.0-M4/commons-fileupload2-portlet-2.0.0-M4-cyclonedx.xml.asc > (SHA1: 97cfcf944ea8743862e6dfc289a6b291ea1e334b) > /org/apache/commons/commons-fileupload2-portlet/2.0.0-M4/commons-fileupload2-portlet-2.0.0-M4-sources.jar > (SHA1: 48313165e5a35a9e2898acd4a08977cde64ff477) > /org/apache/commons/commons-fileupload2-portlet/2.0.0-M4/commons-fileupload2-portlet-2.0.0-M4-cyclonedx.xml > (SHA1: 1712281625d2f575f13b256ace051cfed5fba350) > /org/apache/commons/commons-fileupload2-portlet/2.0.0-M4/commons-fileupload2-portlet-2.0.0-M4.spdx.json.asc > (SHA1: 778c413e689ffa11f3ce229b60b7825e21cb7ea5) > /org/apache/commons/commons-fileupload2-portlet/2.0.0-M4/commons-fileupload2-portlet-2.0.0-M4-cyclonedx.json > (SHA1: d1daf36c3ccba46adec460421122bcc87f115356) > /org/apache/commons/commons-fileupload2-portlet/2.0.0-M4/commons-fileupload2-portlet-2.0.0-M4.jar > (SHA1: 9c57c9687203f76a7f629e701441959882e0a443) > /org/apache/commons/commons-fileupload2-portlet/2.0.0-M4/commons-fileupload2-portlet-2.0.0-M4-sources.jar.asc > (SHA1: 409d25647e810f59636e0af81e74483fb8b7dbf1) > /org/apache/commons/commons-fileupload2-jakarta-servlet5/2.0.0-M4/commons-fileupload2-jakarta-servlet5-2.0.0-M4-sources.jar.asc > (SHA1: 7171d5e7216c85a1a79209d70066a151f51661d4) > /org/apache/commons/commons-fileupload2-jakarta-servlet5/2.0.0-M4/commons-fileupload2-jakarta-servlet5-2.0.0-M4.jar > (SHA1: 7fec35e169221a59089c134ec9c43627dd349c9d) > /org/apache/commons/commons-fileupload2-jakarta-servlet5/2.0.0-M4/commons-fileupload2-jakarta-servlet5-2.0.0-M4.pom.asc > (SHA1: 8a2f201fd13746446f7860a15bae49ffef7c8bbe) > /org/apache/commons/commons-fileupload2-jakarta-servlet5/2.0.0-M4/commons-fileupload2-jakarta-servlet5-2.0.0-M4.pom > (SHA1: af06d3d3b581dfe9e5a5d9651b7431e26b10d6ff) > /org/apache/commons/commons-fileupload2-jakarta-servlet5/2.0.0-M4/commons-fileupload2-jakarta-servlet5-2.0.0-M4-cyclonedx.xml > (SHA1: 96a376539ddd2c6fde3679e920f1d7a55717675c) > /org/apache/commons/commons-fileupload2-jakarta-servlet5/2.0.0-M4/commons-fileupload2-jakarta-servlet5-2.0.0-M4-test-sources.jar.asc > (SHA1: c3f43fae6f5fe434b0168879f81ab6ff71c74185) > /org/apache/commons/commons-fileupload2-jakarta-servlet5/2.0.0-M4/commons-fileupload2-jakarta-servlet5-2.0.0-M4-tests.jar > (SHA1: e41bf24108001f158b8bc7e49d64d58b1d2ab568) > /org/apache/commons/commons-fileupload2-jakarta-servlet5/2.0.0-M4/commons-fileupload2-jakarta-servlet5-2.0.0-M4.spdx.json > (SHA1: 22738289939360ff77a2668d7896ca58adf0f47c) > /org/apache/commons/commons-fileupload2-jakarta-servlet5/2.0.0-M4/commons-fileupload2-jakarta-servlet5-2.0.0-M4-javadoc.jar.asc > (SHA1: 1caf1923b9cc785dc731f005cb6add5fe711d66a) > /org/apache/commons/commons-fileupload2-jakarta-servlet5/2.0.0-M4/commons-fileupload2-jakarta-servlet5-2.0.0-M4.jar.asc > (SHA1: 2653698ff8d62e276f551beae48915f27462c466) > /org/apache/commons/commons-fileupload2-jakarta-servlet5/2.0.0-M4/commons-fileupload2-jakarta-servlet5-2.0.0-M4-sources.jar > (SHA1: 69f1e316d91ad5ab4991400d10aa90d5a4b4f1a1) > /org/apache/commons/commons-fileupload2-jakarta-servlet5/2.0.0-M4/commons-fileupload2-jakarta-servlet5-2.0.0-M4-test-sources.jar > (SHA1: 62e7682b9e6771d031c09b627bf4737dc0e9d6a0) > /org/apache/commons/commons-fileupload2-jakarta-servlet5/2.0.0-M4/commons-fileupload2-jakarta-servlet5-2.0.0-M4-cyclonedx.json.asc > (SHA1: a7656d3451fede517708fba1ce46684ef0bf289c) > /org/apache/commons/commons-fileupload2-jakarta-servlet5/2.0.0-M4/commons-fileupload2-jakarta-servlet5-2.0.0-M4-cyclonedx.xml.asc > (SHA1: 331279d96530dbe90bf9e843e464097be9febdfa) > /org/apache/commons/commons-fileupload2-jakarta-servlet5/2.0.0-M4/commons-fileupload2-jakarta-servlet5-2.0.0-M4.spdx.json.asc > (SHA1: 6d9d05bb75829bcc9dd531190f7ac20b952e7b10) > /org/apache/commons/commons-fileupload2-jakarta-servlet5/2.0.0-M4/commons-fileupload2-jakarta-servlet5-2.0.0-M4-tests.jar.asc > (SHA1: 121d36346d83135e1f0b2e306f1c3149b9293777) > /org/apache/commons/commons-fileupload2-jakarta-servlet5/2.0.0-M4/commons-fileupload2-jakarta-servlet5-2.0.0-M4-cyclonedx.json > (SHA1: f79f79e5a0da350076da29c0ae12660217eca2d2) > /org/apache/commons/commons-fileupload2-jakarta-servlet5/2.0.0-M4/commons-fileupload2-jakarta-servlet5-2.0.0-M4-javadoc.jar > (SHA1: a9ffbb4a6b0808cb6861e1556156794b32153c13) > /org/apache/commons/commons-fileupload2/2.0.0-M4/commons-fileupload2-2.0.0-M4.pom.asc > (SHA1: 4df2264fea697db71c477095b52185433703a493) > /org/apache/commons/commons-fileupload2/2.0.0-M4/commons-fileupload2-2.0.0-M4-cyclonedx.xml > (SHA1: fab242303eaf38c8d7e5cc5a383361750e803d2f) > /org/apache/commons/commons-fileupload2/2.0.0-M4/commons-fileupload2-2.0.0-M4-site.xml.asc > (SHA1: b328f4a1b1f6ca41f6f9d4b7fd610307ca0b4e06) > /org/apache/commons/commons-fileupload2/2.0.0-M4/commons-fileupload2-2.0.0-M4-site.xml > (SHA1: a5d51910f9ca659950a50d30ccb7c5add61bc184) > /org/apache/commons/commons-fileupload2/2.0.0-M4/commons-fileupload2-2.0.0-M4-cyclonedx.json > (SHA1: 5dd50dc8707a07b223cd9be84559c64abf8b6e67) > /org/apache/commons/commons-fileupload2/2.0.0-M4/commons-fileupload2-2.0.0-M4.spdx.json.asc > (SHA1: aa50548f2204729248c9f2f5d337d25642867f08) > /org/apache/commons/commons-fileupload2/2.0.0-M4/commons-fileupload2-2.0.0-M4.pom > (SHA1: 39ff0eaf020a41328bf0e0396f001c8e3f5c512e) > /org/apache/commons/commons-fileupload2/2.0.0-M4/commons-fileupload2-2.0.0-M4-cyclonedx.json.asc > (SHA1: 7a7c6bae9e92d087c6e68be50d919c59959835c3) > /org/apache/commons/commons-fileupload2/2.0.0-M4/commons-fileupload2-2.0.0-M4-cyclonedx.xml.asc > (SHA1: 9566b003749d6cfb0e6dc7fc67d0f93340e10562) > /org/apache/commons/commons-fileupload2/2.0.0-M4/commons-fileupload2-2.0.0-M4.spdx.json > (SHA1: 523ddc28f8fc53f95bbb8b65e55e0c2d221935d9) > > ============================== > > The following is intended as a helper and refresher for reviewers. > > Validating a release candidate > ============================== > > These guidelines are NOT complete. > > Requirements: Git, Java, and Maven. > > You can validate a release from a release candidate (RC) tag as follows. > > 1a) Download and decompress the source archive from: > > https://dist.apache.org/repos/dist/dev/commons/fileupload/2.0.0-M4-RC1/source > > 1b) Check out the RC tag from git (optional) > > This is optional, as a reviewer must check source distributions as a minimum. > > git clone https://gitbox.apache.org/repos/asf/commons-fileupload.git > --branch commons-fileupload-2.0.0-M4-RC1 > commons-fileupload-2.0.0-M4-RC1 > cd commons-fileupload-2.0.0-M4-RC1 > > 2) Checking the build > > All components should include a default Maven goal, such that you can > run 'mvn' from the command line by itself. > > 2) Check Apache licenses > > This step is not required if the site includes a RAT report page which > you then must check. > This check should be included in the default Maven build, but you can > check it with: > > mvn apache-rat:check > > 3) Check binary compatibility > > This step is not required if the site includes a JApiCmp report page > which you then must check. > This check should be included in the default Maven build, but you can > check it with: > > mvn verify -DskipTests -P japicmp japicmp:cmp > > 4) Build the package > > This check should be included in the default Maven build, but you can > check it with: > > mvn -V clean package > > You can record the Maven and Java version produced by -V in your VOTE reply. > To gather OS information from a command line: > Windows: ver > Linux: uname -a > > 4b) Check reproducibility > > To check that a build is reproducible, run: > > mvn clean verify artifact:compare -DskipTests > -Dreference.repo=https://repository.apache.org/content/repositories/staging/ > '-Dbuildinfo.ignore=*/*.spdx.json' > > Note that this excludes SPDX files from the check. > > 5) Build the site for a single module project > > Note: Some plugins require the components to be installed instead of packaged. > > mvn site > Check the site reports in: > - Windows: target\site\index.html > - Linux: target/site/index.html > > 6) Build the site for a multi-module project > > mvn site > mvn site:stage > Check the site reports in: > - Windows: target\site\index.html > - Linux: target/site/index.html > > Note that the project reports are created for each module. > Modules can be accessed using the 'Project Modules' link under > the 'Project Information' menu (see <path-to-site>/modules.html). > > -the end- --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org For additional commands, e-mail: dev-h...@commons.apache.org
