I get the following diffs when running the release verification script in a container. The diffs that I get are real and not clean, so it does not seem like it is only a forge problem with Groovy 3.
grails-databinding-core-7.0.6-javadoc: https://gist.github.com/matrei/6db0a3865e0b02b9b68397cd682b60f5 grails-data-hibernate5-core-7.0.6-javadoc: https://gist.github.com/matrei/00cbe546a7c0709a7ec9a4821bc31180 grails-forge-core-7.0.6-javadoc: https://gist.github.com/matrei/8ab37d563ba0f784acc29a18b4a1e8f7 +1 (binding) Den tors 22 jan. 2026 kl 16:37 skrev James Daugherty <[email protected] >: > Hi Everyone, > > I am happy to start the VOTE thread to release Apache Grails 7.0.6! > > Please note the following build reproducibility issues for this release: > 1. grails-forge-core-7.0.6-javadoc.jar # due to groovy 3 in forge, we > need to update to groovy 4 to fix this > > All other differences are clean when compared. Given that these > differences are known, explainable, and immaterial, we are moving > forward with a release vote. > > Pre-release discussion thread is here: > https://lists.apache.org/thread/f1xwsb0n8yxmd3mz3254jh8vdjdh5tm5 > > Release notes for the release are here: > https://github.com/apache/grails-core/releases/tag/v7.0.6 > > The tag for this release is: > https://github.com/apache/grails-core/releases/tag/v7.0.6 > > Tag commit id: 195c8091d383c1f9fe7eedb3110ff7dbdb2a6067 > > The artifacts to be voted on are located as follows (r82062): > Source release: > https://dist.apache.org/repos/dist/dev/grails/core/7.0.6/sources > Binary distributions: > https://dist.apache.org/repos/dist/dev/grails/core/7.0.6/distribution > > Release artifacts are signed with a key from the following file: > https://dist.apache.org/repos/dist/release/grails/KEYS > > Please vote on releasing this package as: Apache Grails 7.0.6. > > Reminder on ASF release approval requirements for PMC members: > https://www.apache.org/legal/release-policy.html#release-approval > > Hints on validating checksums/signatures (but replace md5sum with > sha512sum): > https://www.apache.org/info/verification.html > > Details of our release process are documented at: > https://github.com/apache/grails-core/blob/HEAD/RELEASE.md > > As a reminder, most of our tools support an env `GRAILS_REPO_URL` so > that the tools can work with staged artefacts. Set it to the staging > repo like this: `export > GRAILS_REPO_URL=https://repository.apache.org/content/groups/staging` > <https://repository.apache.org/content/groups/staging> > > The vote is open for a minimum of 72 hours and passes if a majority of > at least three +1 PMC votes are cast. > [ ] +1 Release Apache Grails 7.0.6 > [ ] 0 I don't have a strong opinion about this, but I assume it's ok > [ ] -1 Do not release Apache Grails 7.0.6 because... > > Here is my vote: > +1 (binding) > > -------------------------------------------------- > Here is output from my diffs for reproducibility: > > Differences were found, diffing jar files ... > Downloading Vineflower decompiler... > Checking jar grails-datamapping-core-test-7.0.6-tests.jar... > Extracting grails-datamapping-core-test-7.0.6-tests.jar > Looking for build artifact > grails-datamapping-core-test-7.0.6-tests.jar in > /home/groovy/grails-verify/grails/etc/bin/results > ✅ First Artifact Found @ > > /home/groovy/grails-verify/grails/etc/bin/results/first/grails-datamapping-core-test-7.0.6-tests.jar > ✅ Second Artifact Found @ > > /home/groovy/grails-verify/grails/etc/bin/results/first/grails-datamapping-core-test-7.0.6-tests.jar > Extracting grails-datamapping-core-test-7.0.6-tests.jar from > first to /home/groovy/grails-verify/grails/etc/bin/results/firstArtifact > ✅ First Artifact Extracted > Extracting grails-datamapping-core-test-7.0.6-tests.jar from > second to /home/groovy/grails-verify/grails/etc/bin/results/secondArtifact > ✅ Second Artifact Extracted > ✅ Extracted grails-datamapping-core-test-7.0.6-tests.jar to > firstArtifact and secondArtifact directories. > Decompiling grails-datamapping-core-test-7.0.6-tests.jar class files... > ✅ Decompiled grails-datamapping-core-test-7.0.6-tests.jar > ✅ No differences remain for > grails-datamapping-core-test-7.0.6-tests.jar. Removing from diff.txt. > Checking jar grails-datamapping-tck-7.0.6.jar... > Extracting grails-datamapping-tck-7.0.6.jar > Looking for build artifact grails-datamapping-tck-7.0.6.jar in > /home/groovy/grails-verify/grails/etc/bin/results > ✅ First Artifact Found @ > > /home/groovy/grails-verify/grails/etc/bin/results/first/grails-datamapping-tck-7.0.6.jar > ✅ Second Artifact Found @ > > /home/groovy/grails-verify/grails/etc/bin/results/first/grails-datamapping-tck-7.0.6.jar > Extracting grails-datamapping-tck-7.0.6.jar from first to > /home/groovy/grails-verify/grails/etc/bin/results/firstArtifact > ✅ First Artifact Extracted > Extracting grails-datamapping-tck-7.0.6.jar from second to > /home/groovy/grails-verify/grails/etc/bin/results/secondArtifact > ✅ Second Artifact Extracted > ✅ Extracted grails-datamapping-tck-7.0.6.jar to firstArtifact and > secondArtifact directories. > Decompiling grails-datamapping-tck-7.0.6.jar class files... > ✅ Decompiled grails-datamapping-tck-7.0.6.jar > ✅ No differences remain for grails-datamapping-tck-7.0.6.jar. Removing > from diff.txt. > Checking jar grails-forge-core-7.0.6-javadoc.jar... > Extracting grails-forge-core-7.0.6-javadoc.jar > Looking for build artifact grails-forge-core-7.0.6-javadoc.jar in > /home/groovy/grails-verify/grails/etc/bin/results > ✅ First Artifact Found @ > > /home/groovy/grails-verify/grails/etc/bin/results/first/grails-forge-core-7.0.6-javadoc.jar > ✅ Second Artifact Found @ > > /home/groovy/grails-verify/grails/etc/bin/results/first/grails-forge-core-7.0.6-javadoc.jar > Extracting grails-forge-core-7.0.6-javadoc.jar from first to > /home/groovy/grails-verify/grails/etc/bin/results/firstArtifact > ✅ First Artifact Extracted > Extracting grails-forge-core-7.0.6-javadoc.jar from second to > /home/groovy/grails-verify/grails/etc/bin/results/secondArtifact > ✅ Second Artifact Extracted > ✅ Extracted grails-forge-core-7.0.6-javadoc.jar to firstArtifact and > secondArtifact directories. > Decompiling grails-forge-core-7.0.6-javadoc.jar class files... > ✅ Decompiled grails-forge-core-7.0.6-javadoc.jar > ❌ Verification failed. ❌ > ❌ Differences still found in grails-forge-core-7.0.6-javadoc.jar. > ❌ Differences Found ❌ > grails-forge-core-7.0.6-javadoc.jar > ❌ Differences Found ❌ > ❌ Verification failed. ❌ > ✅ Reproducible Build Verified >
