Hi Everyone, I am happy to start the VOTE thread to release Apache Grails 7.0.6!
Please note the following build reproducibility issues for this release: 1. grails-forge-core-7.0.6-javadoc.jar # due to groovy 3 in forge, we need to update to groovy 4 to fix this All other differences are clean when compared. Given that these differences are known, explainable, and immaterial, we are moving forward with a release vote. Pre-release discussion thread is here: https://lists.apache.org/thread/f1xwsb0n8yxmd3mz3254jh8vdjdh5tm5 Release notes for the release are here: https://github.com/apache/grails-core/releases/tag/v7.0.6 The tag for this release is: https://github.com/apache/grails-core/releases/tag/v7.0.6 Tag commit id: 195c8091d383c1f9fe7eedb3110ff7dbdb2a6067 The artifacts to be voted on are located as follows (r82062): Source release: https://dist.apache.org/repos/dist/dev/grails/core/7.0.6/sources Binary distributions: https://dist.apache.org/repos/dist/dev/grails/core/7.0.6/distribution Release artifacts are signed with a key from the following file: https://dist.apache.org/repos/dist/release/grails/KEYS Please vote on releasing this package as: Apache Grails 7.0.6. Reminder on ASF release approval requirements for PMC members: https://www.apache.org/legal/release-policy.html#release-approval Hints on validating checksums/signatures (but replace md5sum with sha512sum): https://www.apache.org/info/verification.html Details of our release process are documented at: https://github.com/apache/grails-core/blob/HEAD/RELEASE.md As a reminder, most of our tools support an env `GRAILS_REPO_URL` so that the tools can work with staged artefacts. Set it to the staging repo like this: `export GRAILS_REPO_URL=https://repository.apache.org/content/groups/staging` The vote is open for a minimum of 72 hours and passes if a majority of at least three +1 PMC votes are cast. [ ] +1 Release Apache Grails 7.0.6 [ ] 0 I don't have a strong opinion about this, but I assume it's ok [ ] -1 Do not release Apache Grails 7.0.6 because... Here is my vote: +1 (binding) -------------------------------------------------- Here is output from my diffs for reproducibility: Differences were found, diffing jar files ... Downloading Vineflower decompiler... Checking jar grails-datamapping-core-test-7.0.6-tests.jar... Extracting grails-datamapping-core-test-7.0.6-tests.jar Looking for build artifact grails-datamapping-core-test-7.0.6-tests.jar in /home/groovy/grails-verify/grails/etc/bin/results ✅ First Artifact Found @ /home/groovy/grails-verify/grails/etc/bin/results/first/grails-datamapping-core-test-7.0.6-tests.jar ✅ Second Artifact Found @ /home/groovy/grails-verify/grails/etc/bin/results/first/grails-datamapping-core-test-7.0.6-tests.jar Extracting grails-datamapping-core-test-7.0.6-tests.jar from first to /home/groovy/grails-verify/grails/etc/bin/results/firstArtifact ✅ First Artifact Extracted Extracting grails-datamapping-core-test-7.0.6-tests.jar from second to /home/groovy/grails-verify/grails/etc/bin/results/secondArtifact ✅ Second Artifact Extracted ✅ Extracted grails-datamapping-core-test-7.0.6-tests.jar to firstArtifact and secondArtifact directories. Decompiling grails-datamapping-core-test-7.0.6-tests.jar class files... ✅ Decompiled grails-datamapping-core-test-7.0.6-tests.jar ✅ No differences remain for grails-datamapping-core-test-7.0.6-tests.jar. Removing from diff.txt. Checking jar grails-datamapping-tck-7.0.6.jar... Extracting grails-datamapping-tck-7.0.6.jar Looking for build artifact grails-datamapping-tck-7.0.6.jar in /home/groovy/grails-verify/grails/etc/bin/results ✅ First Artifact Found @ /home/groovy/grails-verify/grails/etc/bin/results/first/grails-datamapping-tck-7.0.6.jar ✅ Second Artifact Found @ /home/groovy/grails-verify/grails/etc/bin/results/first/grails-datamapping-tck-7.0.6.jar Extracting grails-datamapping-tck-7.0.6.jar from first to /home/groovy/grails-verify/grails/etc/bin/results/firstArtifact ✅ First Artifact Extracted Extracting grails-datamapping-tck-7.0.6.jar from second to /home/groovy/grails-verify/grails/etc/bin/results/secondArtifact ✅ Second Artifact Extracted ✅ Extracted grails-datamapping-tck-7.0.6.jar to firstArtifact and secondArtifact directories. Decompiling grails-datamapping-tck-7.0.6.jar class files... ✅ Decompiled grails-datamapping-tck-7.0.6.jar ✅ No differences remain for grails-datamapping-tck-7.0.6.jar. Removing from diff.txt. Checking jar grails-forge-core-7.0.6-javadoc.jar... Extracting grails-forge-core-7.0.6-javadoc.jar Looking for build artifact grails-forge-core-7.0.6-javadoc.jar in /home/groovy/grails-verify/grails/etc/bin/results ✅ First Artifact Found @ /home/groovy/grails-verify/grails/etc/bin/results/first/grails-forge-core-7.0.6-javadoc.jar ✅ Second Artifact Found @ /home/groovy/grails-verify/grails/etc/bin/results/first/grails-forge-core-7.0.6-javadoc.jar Extracting grails-forge-core-7.0.6-javadoc.jar from first to /home/groovy/grails-verify/grails/etc/bin/results/firstArtifact ✅ First Artifact Extracted Extracting grails-forge-core-7.0.6-javadoc.jar from second to /home/groovy/grails-verify/grails/etc/bin/results/secondArtifact ✅ Second Artifact Extracted ✅ Extracted grails-forge-core-7.0.6-javadoc.jar to firstArtifact and secondArtifact directories. Decompiling grails-forge-core-7.0.6-javadoc.jar class files... ✅ Decompiled grails-forge-core-7.0.6-javadoc.jar ❌ Verification failed. ❌ ❌ Differences still found in grails-forge-core-7.0.6-javadoc.jar. ❌ Differences Found ❌ grails-forge-core-7.0.6-javadoc.jar ❌ Differences Found ❌ ❌ Verification failed. ❌ ✅ Reproducible Build Verified
