> The only one that is constant is forge b/c of groovy 3. In my case, this is not true. I believe the javadoc jars for the mentioned libraries have consistently failed reproducibility verification for me in every release.
I am running verification in a container (with Docker Desktop on Linux) as described here: https://github.com/apache/grails-core/blob/7.0.x/RELEASE.md#appendix-verification-from-a-container Here are the requested jars for download: https://filebin.net/t5yci70e5khxt9b7 /Mattias Den tors 22 jan. 2026 kl 20:57 skrev James Daugherty <[email protected] >: > Thank you @Mattias. It's interesting that we both have different > amounts. The only one that is constant is forge b/c of groovy 3. Can you > upload these jars somewhere so i can compare to mine? I'd like to take a > look at them to see if it's something specific to your system. Also, can > you clarify - are you running these locally or in the docker container? And > which container runtime are you using? > > On 2026/01/22 19:13:52 Mattias Reichel wrote: > > I get the following diffs when running the release verification script > in a > > container. > > The diffs that I get are real and not clean, so it does not seem like it > is > > only a forge problem with Groovy 3. > > > > grails-databinding-core-7.0.6-javadoc: > > https://gist.github.com/matrei/6db0a3865e0b02b9b68397cd682b60f5 > > > > grails-data-hibernate5-core-7.0.6-javadoc: > > https://gist.github.com/matrei/00cbe546a7c0709a7ec9a4821bc31180 > > > > grails-forge-core-7.0.6-javadoc: > > https://gist.github.com/matrei/8ab37d563ba0f784acc29a18b4a1e8f7 > > > > +1 (binding) > > > > Den tors 22 jan. 2026 kl 16:37 skrev James Daugherty < > [email protected] > > >: > > > > > Hi Everyone, > > > > > > I am happy to start the VOTE thread to release Apache Grails 7.0.6! > > > > > > Please note the following build reproducibility issues for this > release: > > > 1. grails-forge-core-7.0.6-javadoc.jar # due to groovy 3 in forge, we > > > need to update to groovy 4 to fix this > > > > > > All other differences are clean when compared. Given that these > > > differences are known, explainable, and immaterial, we are moving > > > forward with a release vote. > > > > > > Pre-release discussion thread is here: > > > https://lists.apache.org/thread/f1xwsb0n8yxmd3mz3254jh8vdjdh5tm5 > > > > > > Release notes for the release are here: > > > https://github.com/apache/grails-core/releases/tag/v7.0.6 > > > > > > The tag for this release is: > > > https://github.com/apache/grails-core/releases/tag/v7.0.6 > > > > > > Tag commit id: 195c8091d383c1f9fe7eedb3110ff7dbdb2a6067 > > > > > > The artifacts to be voted on are located as follows (r82062): > > > Source release: > > > https://dist.apache.org/repos/dist/dev/grails/core/7.0.6/sources > > > Binary distributions: > > > https://dist.apache.org/repos/dist/dev/grails/core/7.0.6/distribution > > > > > > Release artifacts are signed with a key from the following file: > > > https://dist.apache.org/repos/dist/release/grails/KEYS > > > > > > Please vote on releasing this package as: Apache Grails 7.0.6. > > > > > > Reminder on ASF release approval requirements for PMC members: > > > https://www.apache.org/legal/release-policy.html#release-approval > > > > > > Hints on validating checksums/signatures (but replace md5sum with > > > sha512sum): > > > https://www.apache.org/info/verification.html > > > > > > Details of our release process are documented at: > > > https://github.com/apache/grails-core/blob/HEAD/RELEASE.md > > > > > > As a reminder, most of our tools support an env `GRAILS_REPO_URL` so > > > that the tools can work with staged artefacts. Set it to the staging > > > repo like this: `export > > > GRAILS_REPO_URL=https://repository.apache.org/content/groups/staging` > <https://repository.apache.org/content/groups/staging> > > > <https://repository.apache.org/content/groups/staging> > > > > > > The vote is open for a minimum of 72 hours and passes if a majority of > > > at least three +1 PMC votes are cast. > > > [ ] +1 Release Apache Grails 7.0.6 > > > [ ] 0 I don't have a strong opinion about this, but I assume it's ok > > > [ ] -1 Do not release Apache Grails 7.0.6 because... > > > > > > Here is my vote: > > > +1 (binding) > > > > > > -------------------------------------------------- > > > Here is output from my diffs for reproducibility: > > > > > > Differences were found, diffing jar files ... > > > Downloading Vineflower decompiler... > > > Checking jar grails-datamapping-core-test-7.0.6-tests.jar... > > > Extracting grails-datamapping-core-test-7.0.6-tests.jar > > > Looking for build artifact > > > grails-datamapping-core-test-7.0.6-tests.jar in > > > /home/groovy/grails-verify/grails/etc/bin/results > > > ✅ First Artifact Found @ > > > > > > > /home/groovy/grails-verify/grails/etc/bin/results/first/grails-datamapping-core-test-7.0.6-tests.jar > > > ✅ Second Artifact Found @ > > > > > > > /home/groovy/grails-verify/grails/etc/bin/results/first/grails-datamapping-core-test-7.0.6-tests.jar > > > Extracting grails-datamapping-core-test-7.0.6-tests.jar from > > > first to > /home/groovy/grails-verify/grails/etc/bin/results/firstArtifact > > > ✅ First Artifact Extracted > > > Extracting grails-datamapping-core-test-7.0.6-tests.jar from > > > second to > /home/groovy/grails-verify/grails/etc/bin/results/secondArtifact > > > ✅ Second Artifact Extracted > > > ✅ Extracted grails-datamapping-core-test-7.0.6-tests.jar to > > > firstArtifact and secondArtifact directories. > > > Decompiling grails-datamapping-core-test-7.0.6-tests.jar class files... > > > ✅ Decompiled grails-datamapping-core-test-7.0.6-tests.jar > > > ✅ No differences remain for > > > grails-datamapping-core-test-7.0.6-tests.jar. Removing from diff.txt. > > > Checking jar grails-datamapping-tck-7.0.6.jar... > > > Extracting grails-datamapping-tck-7.0.6.jar > > > Looking for build artifact grails-datamapping-tck-7.0.6.jar in > > > /home/groovy/grails-verify/grails/etc/bin/results > > > ✅ First Artifact Found @ > > > > > > > /home/groovy/grails-verify/grails/etc/bin/results/first/grails-datamapping-tck-7.0.6.jar > > > ✅ Second Artifact Found @ > > > > > > > /home/groovy/grails-verify/grails/etc/bin/results/first/grails-datamapping-tck-7.0.6.jar > > > Extracting grails-datamapping-tck-7.0.6.jar from first to > > > /home/groovy/grails-verify/grails/etc/bin/results/firstArtifact > > > ✅ First Artifact Extracted > > > Extracting grails-datamapping-tck-7.0.6.jar from second to > > > /home/groovy/grails-verify/grails/etc/bin/results/secondArtifact > > > ✅ Second Artifact Extracted > > > ✅ Extracted grails-datamapping-tck-7.0.6.jar to firstArtifact and > > > secondArtifact directories. > > > Decompiling grails-datamapping-tck-7.0.6.jar class files... > > > ✅ Decompiled grails-datamapping-tck-7.0.6.jar > > > ✅ No differences remain for grails-datamapping-tck-7.0.6.jar. Removing > > > from diff.txt. > > > Checking jar grails-forge-core-7.0.6-javadoc.jar... > > > Extracting grails-forge-core-7.0.6-javadoc.jar > > > Looking for build artifact grails-forge-core-7.0.6-javadoc.jar in > > > /home/groovy/grails-verify/grails/etc/bin/results > > > ✅ First Artifact Found @ > > > > > > > /home/groovy/grails-verify/grails/etc/bin/results/first/grails-forge-core-7.0.6-javadoc.jar > > > ✅ Second Artifact Found @ > > > > > > > /home/groovy/grails-verify/grails/etc/bin/results/first/grails-forge-core-7.0.6-javadoc.jar > > > Extracting grails-forge-core-7.0.6-javadoc.jar from first to > > > /home/groovy/grails-verify/grails/etc/bin/results/firstArtifact > > > ✅ First Artifact Extracted > > > Extracting grails-forge-core-7.0.6-javadoc.jar from second to > > > /home/groovy/grails-verify/grails/etc/bin/results/secondArtifact > > > ✅ Second Artifact Extracted > > > ✅ Extracted grails-forge-core-7.0.6-javadoc.jar to firstArtifact and > > > secondArtifact directories. > > > Decompiling grails-forge-core-7.0.6-javadoc.jar class files... > > > ✅ Decompiled grails-forge-core-7.0.6-javadoc.jar > > > ❌ Verification failed. ❌ > > > ❌ Differences still found in grails-forge-core-7.0.6-javadoc.jar. > > > ❌ Differences Found ❌ > > > grails-forge-core-7.0.6-javadoc.jar > > > ❌ Differences Found ❌ > > > ❌ Verification failed. ❌ > > > ✅ Reproducible Build Verified > > > > > >
