We have fixed 4 bugs since the release of Apache Commons JEXL 3.6.0,
so I would like to release Apache Commons JEXL 3.6.1.
Apache Commons JEXL 3.6.1 RC1 is available for review here:
https://dist.apache.org/repos/dist/dev/commons/jexl/3.6.1-RC1 (svn
revision 81278)
The Git tag commons-jexl-3.6.1-RC1 commit for this RC is
58a23cafc459537dd79d471c75d4553da38affff, which you can browse here:
https://gitbox.apache.org/repos/asf?p=commons-jexl.git;a=commit;h=58a23cafc459537dd79d471c75d4553da38affff
You may checkout this tag using:
git clone https://gitbox.apache.org/repos/asf/commons-jexl.git
--branch commons-jexl-3.6.1-RC1 commons-jexl-3.6.1-RC1
Maven artifacts are here:
https://repository.apache.org/content/repositories/orgapachecommons-1888/org/apache/commons/commons-jexl3/3.6.1/
These are the artifacts and their hashes:
#Release SHA-512s
#Tue Dec 09 23:14:07 UTC 2025
commons-jexl-3.6.1-bin.tar.gz=6373674ec290f523b4a3ff920b50ddfd1a353847c67a2097691b4b2cc4d518ee993e91589ae4a0dce3a5011871c1c36d9b730afff247b63a88b0020bb6eff85a
commons-jexl-3.6.1-bin.zip=e79cbd63f54af118e89e4c57e6b7401f477af827e0b3f6aead295c7601e59819014e8d9fa1c5d716c2df7126cbc2cf66dde8765a506cf4d2e1c21557f110bb0b
commons-jexl-3.6.1-src.tar.gz=58995394a4f67c71d5ca82b3c1b465a2f813e558c1fd93a6aea33d8a544589e3ecc4f47b1c0e5adf9c6abb12285d0417492943cfb53288fe3c2eb1f28ef4fdaa
commons-jexl-3.6.1-src.zip=7a7ed24b64aee03991a1ea230d9d398b178448dd04f8fcfc23ecad73839ef54a9b61db6af1869d23a7c0bd8572035dc0c8f23752881e9369bf493b9fea0c41f4
commons-jexl3-3.6.1-bom.json=bdf99d59a3955ab541e7cfb904f2343be9c604d7640140fa450062b3a0b7f11a75d3c72c6bc377cedee26ad41f316526b516b0655cd8de697defd69b17c042bc
commons-jexl3-3.6.1-bom.xml=2926b0d4e29bb851efb16001970f630bccf86c999f08f82931f7b6590406eed958f029b452956ca8defda5cc9e3b0cf8af0be8747409cddf8913d5f0c7158b1d
commons-jexl3-3.6.1-javadoc.jar=a7532a2f1810eabd1c02a86553934d988f2c466240f40f947a9f9e9cbbeb697c63b17ee175991f046681fb5e56f00ba5918e07fc114f8cd9ac6e42cdc5634cbe
commons-jexl3-3.6.1-sources.jar=ae994d7f5d6ce73148152bc0ce9b5126bb876011a60b8b12c01a6a83f3cfda167e937e5cb948edb36d02bf205945fa1028cf9b17e6ac26403b1a52f6c038c6de
commons-jexl3-3.6.1-test-sources.jar=2b393dc3ad1f48d786d0ba82e881eb50de0be09cdc9a30acb313b490930feaca8c183da911af7760f4f35399a179392d296acb4ebebb7cbd71c5e79077d4bca0
commons-jexl3-3.6.1-tests.jar=0925cebcfe9f74366df57086cfee44f52eaf73371cc0e0c34411e0c59e8b75536c356eb0a48a3483e8784555fcec86079a37235be04d7a77c3806ffd305da705
org.apache.commons_commons-jexl3-3.6.1.spdx.json=896862bc7a595de808679e6687e0ac68bbd99626ca3faf3c69e94a4251e77af6933cb94abc236704e49f407772f9d4fefdcc5f38f14c9f749922f45a6cfd0078
I have tested this with 'mvn' and 'mvn clean install site' using:
openjdk version "21.0.9" 2025-10-21
OpenJDK Runtime Environment Homebrew (build 21.0.9)
OpenJDK 64-Bit Server VM Homebrew (build 21.0.9, mixed mode, sharing)
Apache Maven 3.9.11 (3e54c93a704957b63ee3494413a2b544fd3d825b)
Maven home: /opt/homebrew/Cellar/maven/3.9.11/libexec
Java version: 21.0.9, vendor: Homebrew, runtime:
/opt/homebrew/Cellar/openjdk@21/21.0.9/libexec/openjdk.jdk/Contents/Home
Default locale: en_US, platform encoding: UTF-8
OS name: "mac os x", version: "15.7.2", arch: "aarch64", family: "mac"
Darwin Garys-MacBook-Pro.local 24.6.0 Darwin Kernel Version 24.6.0:
Wed Oct 15 21:12:15 PDT 2025;
root:xnu-11417.140.69.703.14~1/RELEASE_ARM64_T6041 arm64
Docker version 28.4.0, build d8eb465
Details of changes since 3.6.0 are in the release notes:
https://dist.apache.org/repos/dist/dev/commons/jexl/3.6.1-RC1/RELEASE-NOTES.txt
https://dist.apache.org/repos/dist/dev/commons/jexl/3.6.1-RC1/site/changes.html
Site:
https://dist.apache.org/repos/dist/dev/commons/jexl/3.6.1-RC1/site/index.html
(Note some *relative* links are broken and the 3.6.1 directories
are not yet created - these will be OK once the site is deployed.)
JApiCmp Report (compared to 3.6.0):
https://dist.apache.org/repos/dist/dev/commons/jexl/3.6.1-RC1/site/japicmp.html
RAT Report:
https://dist.apache.org/repos/dist/dev/commons/jexl/3.6.1-RC1/site/rat-report.html
KEYS:
https://downloads.apache.org/commons/KEYS
Please review the release candidate and vote.
This vote will close no sooner than 72 hours from now.
[ ] +1 Release these artifacts
[ ] +0 OK, but...
[ ] -0 OK, but really should fix...
[ ] -1 I oppose this release because...
Thank you,
Gary Gregory,
Release Manager (using key 530AA5F25C25011F)
The following is intended as a helper and refresher for reviewers.
Validating a release candidate
==============================
These guidelines are NOT complete.
Requirements: Git, Java, and Maven.
You can validate a release from a release candidate (RC) tag as follows.
1a) Download and decompress the source archive from:
https://dist.apache.org/repos/dist/dev/commons/jexl/3.6.1-RC1/source
1b) Check out the RC tag from git (optional)
This is optional, as a reviewer must at least check source distributions.
git clone https://gitbox.apache.org/repos/asf/commons-jexl.git
--branch commons-jexl-3.6.1-RC1 commons-jexl-3.6.1-RC1
cd commons-jexl-3.6.1-RC1
2) Checking the build
All components should include a default Maven goal, such that you can
run 'mvn' from the command line by itself.
2) Check Apache licenses
This step is not required if the site includes a RAT report page,
which you then must check.
This check should be included in the default Maven build, but you can
check it with:
mvn apache-rat:check
3) Check binary compatibility
This step is not required if the site includes a JApiCmp report page,
which you then must check.
This check should be included in the default Maven build, but you can
check it with:
mvn verify -DskipTests -P japicmp japicmp:cmp
4) Build the package
This check should be included in the default Maven build, but you can
check it with:
mvn -V clean package
You can record the Maven and Java version produced by -V in your VOTE reply.
To gather OS information from a command line:
Windows: ver
Linux: uname -a
4b) Check reproducibility
To check that a build is reproducible, run:
mvn clean verify artifact:compare -DskipTests
-Dreference.repo=https://repository.apache.org/content/repositories/staging/
'-Dbuildinfo.ignore=*/*.spdx.json'
Note that this excludes SPDX files from the check.
5) Build the site for a single module project
Note: Some plugins require the components to be installed instead of packaged.
mvn site
Check the site reports in:
- Windows: target\site\index.html
- Linux: target/site/index.html
-the end-
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]