My +1 Gary
On Sat, Jul 26, 2025 at 5:04 PM Gary Gregory <garydgreg...@gmail.com> wrote: > We have fixed a few bugs and added enhancements since Apache Commons > Compress 1.27.1 was released, so I would like to release Apache Commons > Compress 1.28.0. > > Apache Commons Compress 1.28.0 RC1 is available for review here: > https://dist.apache.org/repos/dist/dev/commons/compress/1.28.0-RC1 > (svn revision 78394) > > The Git tag commons-compress-1.28.0-RC1 commit for this RC is > 852d9c23b94127feafc1649d9c7f13d4df338845 which you can browse here: > > https://gitbox.apache.org/repos/asf?p=commons-compress.git;a=commit;h=852d9c23b94127feafc1649d9c7f13d4df338845 > You may checkout this tag using: > git clone https://gitbox.apache.org/repos/asf/commons-compress.git > --branch commons-compress-1.28.0-RC1 commons-compress-1.28.0-RC1 > > Maven artifacts are here: > > https://repository.apache.org/content/repositories/orgapachecommons-1853/org/apache/commons/commons-compress/1.28.0/ > > These are the artifacts and their hashes: > > #Release SHA-512s > #Sat Jul 26 20:45:38 UTC 2025 > Apache\ Commons\ > Compress-1.28.0.spdx.rdf.xml=b9873bd3b9a7294b3276a8aac63abe744dc07b0ff59353343be2809951a4f14313c6be55332cc24234a28d9ba183e442de76389390042e22bda75848428dbd64 > > commons-compress-1.28.0-bin.tar.gz=87c6b00ec854d8dc08834ed3bd1590d1facce45dad8c8fc37b2e82e30b18f793181f8dd6b8fcbba3850534b56cfafc7cfa3bd5236004293368fc3b7ff651d4b6 > > commons-compress-1.28.0-bin.zip=68357a6ae6100c8e6d251bb6b2441297c05cf45d34439fa9e40868a967ded1dbb06dac3044cc358aedeed53124914fc43f60ed1989bd54ccd2f89b2209aeb810 > > commons-compress-1.28.0-bom.json=68f3550cd9138d2f88cf318a88a24267ff2e1928b98ca9088661a985b24112af7245de196904f70ea21fa0668e664b439b02786797ed63efa17d8fff8c5e1560 > > commons-compress-1.28.0-bom.xml=b2b42837529c59bf629ec69774ef65b0389cdbb0b565f825610efcc51782f6a50a6b07ae8c0e34b861efc8d552c70267fa12e7392018743b1ad8243b068e1264 > > commons-compress-1.28.0-javadoc.jar=fa8665fff7cccf1bc30fa482898ec654ee42775f2c739a485e76ed01ce69c90e4189cbda333afa45fc9e073645a41af0dbe74e00e904e03e3c8fe0bd1f3d7fdd > > commons-compress-1.28.0-sources.jar=ccaaeef4e6ea6760d3e12baec8c148a0b5a87b13ad3b1d05111cb49d9749381a9aae9c84e1b970e42ba8a797447728f7779d72e8ad83f28b061ebf3e1b44b950 > > commons-compress-1.28.0-src.tar.gz=cd37f7d554dff9f1cf9c90e93a30b7b15ace002d69d317a63d575fd623b4e64dbd55fbf2876ecd5333cf96858a37458f55762e5505311a7a8063d0cc8cdc4120 > > commons-compress-1.28.0-src.zip=fb337dcf749fd868dd0042b1e8da3d693405f618cc76dc9235d196ed76e19b83fb4b9c74a4eb4ba059a7ace8c2b98643cf04d82dcf90174b00c038a9075eb9ea > > commons-compress-1.28.0-test-sources.jar=d4cff1e6fde6e3d944f98e278c96eda295a5a21087aff2b0d891edd44c537eb59837cf648aa57cb269263cd07683f675378631d95e2ba39dc1be297931eb30c4 > > commons-compress-1.28.0-tests.jar=e5bbb11bba6838b8d60ae8aaf751f51bc08e8b4207c48de1011cb842cb09e643cf3ba6cbd5c7d745110fab2d3152f2514af40f57760722a926b288987c2c04fc > > I have tested this with 'mvn -Ddoclint=none' and 'mvn clean install site > -Ddoclint=none' using: > > openjdk version "21.0.8" 2025-07-15 > OpenJDK Runtime Environment Homebrew (build 21.0.8) > OpenJDK 64-Bit Server VM Homebrew (build 21.0.8, mixed mode, sharing) > > Apache Maven 3.9.11 (3e54c93a704957b63ee3494413a2b544fd3d825b) > Maven home: /opt/homebrew/Cellar/maven/3.9.11/libexec > Java version: 21.0.8, vendor: Homebrew, runtime: > /opt/homebrew/Cellar/openjdk@21/21.0.8/libexec/openjdk.jdk/Contents/Home > Default locale: en_US, platform encoding: UTF-8 > OS name: "mac os x", version: "15.5", arch: "aarch64", family: "mac" > > Darwin Garys-MacBook-Pro.local 24.5.0 Darwin Kernel Version 24.5.0: Tue > Apr 22 19:53:27 PDT 2025; root:xnu-11417.121.6~2/RELEASE_ARM64_T6041 arm64 > > Docker version 28.3.0, build 38b7060 > > > Details of changes since 1.27.1 are in the release notes: > > https://dist.apache.org/repos/dist/dev/commons/compress/1.28.0-RC1/RELEASE-NOTES.txt > > https://dist.apache.org/repos/dist/dev/commons/compress/1.28.0-RC1/site/changes.html > > Site: > > https://dist.apache.org/repos/dist/dev/commons/compress/1.28.0-RC1/site/index.html > (note some *relative* links are broken and the 1.28.0 directories are > not yet created - these will be OK once the site is deployed.) > > JApiCmp Report (compared to 1.27.1): > > https://dist.apache.org/repos/dist/dev/commons/compress/1.28.0-RC1/site/japicmp.html > > RAT Report: > > https://dist.apache.org/repos/dist/dev/commons/compress/1.28.0-RC1/site/rat-report.html > > KEYS: > https://downloads.apache.org/commons/KEYS > > Please review the release candidate and vote. > This vote will close no sooner than 72 hours from now. > > [ ] +1 Release these artifacts > [ ] +0 OK, but... > [ ] -0 OK, but really should fix... > [ ] -1 I oppose this release because... > > Thank you, > > Gary Gregory, > Release Manager (using key 86fdc7e2a11262cb) > > The following is intended as a helper and refresher for reviewers. > > Validating a release candidate > ============================== > > These guidelines are NOT complete. > > Requirements: Git, Java, and Maven. > > You can validate a release from a release candidate (RC) tag as follows. > > 1a) Download and decompress the source archive from: > > https://dist.apache.org/repos/dist/dev/commons/compress/1.28.0-RC1/source > > 1b) Check out the RC tag from git (optional) > > This is optional, as a reviewer must check source distributions as a > minimum. > > git clone https://gitbox.apache.org/repos/asf/commons-compress.git > --branch commons-compress-1.28.0-RC1 commons-compress-1.28.0-RC1 > cd commons-compress-1.28.0-RC1 > > 2) Checking the build > > All components should include a default Maven goal, such that you can run > 'mvn' from the command line by itself. > > 2) Check Apache licenses > > This step is not required if the site includes a RAT report page which you > then must check. > This check should be included in the default Maven build, but you can > check it with: > > mvn apache-rat:check > > 3) Check binary compatibility > > This step is not required if the site includes a JApiCmp report page which > you then must check. > This check should be included in the default Maven build, but you can > check it with: > > mvn verify -DskipTests -P japicmp japicmp:cmp > > 4) Build the package > > This check should be included in the default Maven build, but you can > check it with: > > mvn -V clean package > > You can record the Maven and Java version produced by -V in your VOTE > reply. > To gather OS information from a command line: > Windows: ver > Linux: uname -a > > 4b) Check reproducibility > > To check that a build is reproducible, run: > > mvn clean verify artifact:compare -DskipTests -Dreference.repo= > https://repository.apache.org/content/repositories/staging/ > '-Dbuildinfo.ignore=*/*.spdx.json' > > Note that this excludes SPDX files from the check. > > 5) Build the site for a single module project > > Note: Some plugins require the components to be installed instead of > packaged. > > mvn site > Check the site reports in: > - Windows: target\site\index.html > - Linux: target/site/index.html > > -the end- > >