We have fixed a few bugs and added enhancements since the release of
Apache Commons DBCP 2.13.0, so I would like to release Apache Commons
DBCP 2.14.0.
Apache Commons DBCP 2.14.0 RC1 is available for review here:
https://dist.apache.org/repos/dist/dev/commons/dbcp/2.14.0-RC1
(svn revision 81322)
The Git tag commons-dbcp-2.14.0-RC1 commit for this RC is
1088f44f215e684e0e3f33de9aba4019e00a533d, which you can browse here:
https://gitbox.apache.org/repos/asf?p=commons-dbcp.git;a=commit;h=1088f44f215e684e0e3f33de9aba4019e00a533d
You may checkout this tag using:
git clone https://gitbox.apache.org/repos/asf/commons-dbcp.git
--branch commons-dbcp-2.14.0-RC1 commons-dbcp-2.14.0-RC1
Maven artifacts are here:
https://repository.apache.org/content/repositories/orgapachecommons-1890/org/apache/commons/commons-dbcp2/2.14.0/
These are the artifacts and their hashes:
#Release SHA-512s
#Thu Dec 11 23:13:35 UTC 2025
Apache\ Commons\
DBCP-2.14.0.spdx.rdf.xml=78fb7c30b3ff9012ba2294600bcd18526bf9b23d9bfd5c7e066b1461818cfb4a0567f838e39ba39be011c0e890e98033e35c413867962590cc8dc4946cff000d
commons-dbcp2-2.14.0-bin.tar.gz=cef3d1fd5b7f5de1d8257dbee26f25dfff1a4525eb01ad528c0573f4bff5cf82d75c6872d8220e7dfd78f7eeac2497b9fd443d4a11a6d0ac361574a0df6357de
commons-dbcp2-2.14.0-bin.zip=6af285b80d211eb0e5b57982b0bd013b1a05dbcef00fc53ce4b9fb73ec9684f8ed3bbd3c4bb898c5772d242336d7937d903191e8d2756faa6e4ede61f04f77f4
commons-dbcp2-2.14.0-bom.json=1b56b96785326f50cf8f6107f0bf850b1b2ee8b62c8e5f893a6e3155bc7cd8c63dfd26188830a0ec263f8ad62ce04f9a1372ab1430d754309b05c234638f0800
commons-dbcp2-2.14.0-bom.xml=284f6588c5a72253786163b29ec4b5ce6f1aa361915dc7177b3737577c31117c8856799ff92394734add2eae188245be990632212066b079d1dfe4bc9962be40
commons-dbcp2-2.14.0-javadoc.jar=f354980cfe1a6cda98da8eb677723af506d02f8e1a27838fce582934c2b802bde6d8961093adbb7e276195dff2e653a1fb6e0b3828dc952fc377ecf1bce9b1a9
commons-dbcp2-2.14.0-sources.jar=ccde28d91dcf0613673a7bb4a3d2748b73403d05921f5a62fc25ab51fa5c795ad91d8c003310ae5843d69519ff782de6beaeed713a9e2b1c1085f0dbd5ee9081
commons-dbcp2-2.14.0-src.tar.gz=2341a1184bf3e92cc366ba6fdd9b56094c81d1a0709445f813c2c068cabe4654e2bf83a1129db0a6da658bc999a16ff0c1cdb99aa4b77740ed31b2be93f1037d
commons-dbcp2-2.14.0-src.zip=6cccb62c095a0d919683d5b05608645e4fa78ff69b96dc0e6a7b71a68ee53c6d31df4f59013e4389982ceea06c70afef5954c879c3e5d6dca430e9e5f1809ce9
commons-dbcp2-2.14.0-test-sources.jar=2f1d5af0ef969b07df22ef59788da3575a8b7f0aede3fd179d3ac718cc0ab44684694e8e8060d1f8e03f4cc49179849c04dd229c1a790efc803e8769f0586247
commons-dbcp2-2.14.0-tests.jar=384d3f5c368d6be4f31f1f11ba4189dacb2609ec40939ea634ba7b3b87e757344bb7778e6a851acf2c9e4bb4061d8c9fa1fa6f3ebfb665dc420658faadb436f0
I have tested this with 'mvn' and 'mvn clean install site' using:
openjdk version "21.0.9" 2025-10-21
OpenJDK Runtime Environment Homebrew (build 21.0.9)
OpenJDK 64-Bit Server VM Homebrew (build 21.0.9, mixed mode, sharing)
Apache Maven 3.9.11 (3e54c93a704957b63ee3494413a2b544fd3d825b)
Maven home: /opt/homebrew/Cellar/maven/3.9.11/libexec
Java version: 21.0.9, vendor: Homebrew, runtime:
/opt/homebrew/Cellar/openjdk@21/21.0.9/libexec/openjdk.jdk/Contents/Home
Default locale: en_US, platform encoding: UTF-8
OS name: "mac os x", version: "15.7.2", arch: "aarch64", family: "mac"
Darwin Garys-MacBook-Pro.local 24.6.0 Darwin Kernel Version 24.6.0:
Wed Oct 15 21:12:15 PDT 2025;
root:xnu-11417.140.69.703.14~1/RELEASE_ARM64_T6041 arm64
Docker version 28.4.0, build d8eb465
Details of changes since 2.13.0 are in the release notes:
https://dist.apache.org/repos/dist/dev/commons/dbcp/2.14.0-RC1/RELEASE-NOTES.txt
https://dist.apache.org/repos/dist/dev/commons/dbcp/2.14.0-RC1/site/changes.html
Site:
https://dist.apache.org/repos/dist/dev/commons/dbcp/2.14.0-RC1/site/index.html
(Note some *relative* links are broken and the 2.14.0 directories
are not yet created - these will be OK once the site is deployed.)
JApiCmp Report (compared to 2.13.0):
https://dist.apache.org/repos/dist/dev/commons/dbcp/2.14.0-RC1/site/japicmp.html
RAT Report:
https://dist.apache.org/repos/dist/dev/commons/dbcp/2.14.0-RC1/site/rat-report.html
KEYS:
https://downloads.apache.org/commons/KEYS
Please review the release candidate and vote.
This vote will close no sooner than 72 hours from now.
[ ] +1 Release these artifacts
[ ] +0 OK, but...
[ ] -0 OK, but really should fix...
[ ] -1 I oppose this release because...
Thank you,
Gary Gregory,
Release Manager (using key 530AA5F25C25011F)
The following is intended as a helper and refresher for reviewers.
Validating a release candidate
==============================
These guidelines are NOT complete.
Requirements: Git, Java, and Maven.
You can validate a release from a release candidate (RC) tag as follows.
1a) Download and decompress the source archive from:
https://dist.apache.org/repos/dist/dev/commons/dbcp/2.14.0-RC1/source
1b) Check out the RC tag from git (optional)
This is optional, as a reviewer must at least check source distributions.
git clone https://gitbox.apache.org/repos/asf/commons-dbcp.git
--branch commons-dbcp-2.14.0-RC1 commons-dbcp-2.14.0-RC1
cd commons-dbcp-2.14.0-RC1
2) Checking the build
All components should include a default Maven goal, such that you can
run 'mvn' from the command line by itself.
2) Check Apache licenses
This step is not required if the site includes a RAT report page,
which you then must check.
This check should be included in the default Maven build, but you can
check it with:
mvn apache-rat:check
3) Check binary compatibility
This step is not required if the site includes a JApiCmp report page,
which you then must check.
This check should be included in the default Maven build, but you can
check it with:
mvn verify -DskipTests -P japicmp japicmp:cmp
4) Build the package
This check should be included in the default Maven build, but you can
check it with:
mvn -V clean package
You can record the Maven and Java version produced by -V in your VOTE reply.
To gather OS information from a command line:
Windows: ver
Linux: uname -a
4b) Check reproducibility
To check that a build is reproducible, run:
mvn clean verify artifact:compare -DskipTests
-Dreference.repo=https://repository.apache.org/content/repositories/staging/
'-Dbuildinfo.ignore=*/*.spdx.json'
Note that this excludes SPDX files from the check.
5) Build the site for a single module project
Note: Some plugins require the components to be installed instead of packaged.
mvn site
Check the site reports in:
- Windows: target\site\index.html
- Linux: target/site/index.html
-the end-
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
