+1 (binding) Den fre. 23. jan. 2026 kl. 17.57 skrev Søren Berg Glasius <[email protected] >:
> +1 (binding) > > Den fre. 23. jan. 2026 kl. 09.03 skrev Mattias Reichel < > [email protected]>: > > > > The only one that is constant is forge b/c of groovy 3. > > In my case, this is not true. I believe the javadoc jars for the > mentioned > > libraries have consistently failed reproducibility verification for me in > > every release. > > > > I am running verification in a container (with Docker Desktop on Linux) > as > > described here: > > > > > https://github.com/apache/grails-core/blob/7.0.x/RELEASE.md#appendix-verification-from-a-container > > > > Here are the requested jars for download: > > https://filebin.net/t5yci70e5khxt9b7 > > > > /Mattias > > > > Den tors 22 jan. 2026 kl 20:57 skrev James Daugherty < > > [email protected] > > >: > > > > > Thank you @Mattias. It's interesting that we both have different > > > amounts. The only one that is constant is forge b/c of groovy 3. Can > > you > > > upload these jars somewhere so i can compare to mine? I'd like to > take a > > > look at them to see if it's something specific to your system. Also, > can > > > you clarify - are you running these locally or in the docker container? > > And > > > which container runtime are you using? > > > > > > On 2026/01/22 19:13:52 Mattias Reichel wrote: > > > > I get the following diffs when running the release verification > script > > > in a > > > > container. > > > > The diffs that I get are real and not clean, so it does not seem like > > it > > > is > > > > only a forge problem with Groovy 3. > > > > > > > > grails-databinding-core-7.0.6-javadoc: > > > > https://gist.github.com/matrei/6db0a3865e0b02b9b68397cd682b60f5 > > > > > > > > grails-data-hibernate5-core-7.0.6-javadoc: > > > > https://gist.github.com/matrei/00cbe546a7c0709a7ec9a4821bc31180 > > > > > > > > grails-forge-core-7.0.6-javadoc: > > > > https://gist.github.com/matrei/8ab37d563ba0f784acc29a18b4a1e8f7 > > > > > > > > +1 (binding) > > > > > > > > Den tors 22 jan. 2026 kl 16:37 skrev James Daugherty < > > > [email protected] > > > > >: > > > > > > > > > Hi Everyone, > > > > > > > > > > I am happy to start the VOTE thread to release Apache Grails 7.0.6! > > > > > > > > > > Please note the following build reproducibility issues for this > > > release: > > > > > 1. grails-forge-core-7.0.6-javadoc.jar # due to groovy 3 in forge, > we > > > > > need to update to groovy 4 to fix this > > > > > > > > > > All other differences are clean when compared. Given that these > > > > > differences are known, explainable, and immaterial, we are moving > > > > > forward with a release vote. > > > > > > > > > > Pre-release discussion thread is here: > > > > > https://lists.apache.org/thread/f1xwsb0n8yxmd3mz3254jh8vdjdh5tm5 > > > > > > > > > > Release notes for the release are here: > > > > > https://github.com/apache/grails-core/releases/tag/v7.0.6 > > > > > > > > > > The tag for this release is: > > > > > https://github.com/apache/grails-core/releases/tag/v7.0.6 > > > > > > > > > > Tag commit id: 195c8091d383c1f9fe7eedb3110ff7dbdb2a6067 > > > > > > > > > > The artifacts to be voted on are located as follows (r82062): > > > > > Source release: > > > > > https://dist.apache.org/repos/dist/dev/grails/core/7.0.6/sources > > > > > Binary distributions: > > > > > > > https://dist.apache.org/repos/dist/dev/grails/core/7.0.6/distribution > > > > > > > > > > Release artifacts are signed with a key from the following file: > > > > > https://dist.apache.org/repos/dist/release/grails/KEYS > > > > > > > > > > Please vote on releasing this package as: Apache Grails 7.0.6. > > > > > > > > > > Reminder on ASF release approval requirements for PMC members: > > > > > https://www.apache.org/legal/release-policy.html#release-approval > > > > > > > > > > Hints on validating checksums/signatures (but replace md5sum with > > > > > sha512sum): > > > > > https://www.apache.org/info/verification.html > > > > > > > > > > Details of our release process are documented at: > > > > > https://github.com/apache/grails-core/blob/HEAD/RELEASE.md > > > > > > > > > > As a reminder, most of our tools support an env `GRAILS_REPO_URL` > so > > > > > that the tools can work with staged artefacts. Set it to the > staging > > > > > repo like this: `export > > > > > GRAILS_REPO_URL= > > https://repository.apache.org/content/groups/staging` > <https://repository.apache.org/content/groups/staging> > > <https://repository.apache.org/content/groups/staging> > > > <https://repository.apache.org/content/groups/staging> > > > > > <https://repository.apache.org/content/groups/staging> > > > > > > > > > > The vote is open for a minimum of 72 hours and passes if a majority > > of > > > > > at least three +1 PMC votes are cast. > > > > > [ ] +1 Release Apache Grails 7.0.6 > > > > > [ ] 0 I don't have a strong opinion about this, but I assume it's > ok > > > > > [ ] -1 Do not release Apache Grails 7.0.6 because... > > > > > > > > > > Here is my vote: > > > > > +1 (binding) > > > > > > > > > > -------------------------------------------------- > > > > > Here is output from my diffs for reproducibility: > > > > > > > > > > Differences were found, diffing jar files ... > > > > > Downloading Vineflower decompiler... > > > > > Checking jar grails-datamapping-core-test-7.0.6-tests.jar... > > > > > Extracting grails-datamapping-core-test-7.0.6-tests.jar > > > > > Looking for build artifact > > > > > grails-datamapping-core-test-7.0.6-tests.jar in > > > > > /home/groovy/grails-verify/grails/etc/bin/results > > > > > ✅ First Artifact Found @ > > > > > > > > > > > > > > > > /home/groovy/grails-verify/grails/etc/bin/results/first/grails-datamapping-core-test-7.0.6-tests.jar > > > > > ✅ Second Artifact Found @ > > > > > > > > > > > > > > > > /home/groovy/grails-verify/grails/etc/bin/results/first/grails-datamapping-core-test-7.0.6-tests.jar > > > > > Extracting grails-datamapping-core-test-7.0.6-tests.jar from > > > > > first to > > > /home/groovy/grails-verify/grails/etc/bin/results/firstArtifact > > > > > ✅ First Artifact Extracted > > > > > Extracting grails-datamapping-core-test-7.0.6-tests.jar from > > > > > second to > > > /home/groovy/grails-verify/grails/etc/bin/results/secondArtifact > > > > > ✅ Second Artifact Extracted > > > > > ✅ Extracted grails-datamapping-core-test-7.0.6-tests.jar to > > > > > firstArtifact and secondArtifact directories. > > > > > Decompiling grails-datamapping-core-test-7.0.6-tests.jar class > > files... > > > > > ✅ Decompiled grails-datamapping-core-test-7.0.6-tests.jar > > > > > ✅ No differences remain for > > > > > grails-datamapping-core-test-7.0.6-tests.jar. Removing from > diff.txt. > > > > > Checking jar grails-datamapping-tck-7.0.6.jar... > > > > > Extracting grails-datamapping-tck-7.0.6.jar > > > > > Looking for build artifact grails-datamapping-tck-7.0.6.jar in > > > > > /home/groovy/grails-verify/grails/etc/bin/results > > > > > ✅ First Artifact Found @ > > > > > > > > > > > > > > > > /home/groovy/grails-verify/grails/etc/bin/results/first/grails-datamapping-tck-7.0.6.jar > > > > > ✅ Second Artifact Found @ > > > > > > > > > > > > > > > > /home/groovy/grails-verify/grails/etc/bin/results/first/grails-datamapping-tck-7.0.6.jar > > > > > Extracting grails-datamapping-tck-7.0.6.jar from first to > > > > > /home/groovy/grails-verify/grails/etc/bin/results/firstArtifact > > > > > ✅ First Artifact Extracted > > > > > Extracting grails-datamapping-tck-7.0.6.jar from second to > > > > > /home/groovy/grails-verify/grails/etc/bin/results/secondArtifact > > > > > ✅ Second Artifact Extracted > > > > > ✅ Extracted grails-datamapping-tck-7.0.6.jar to firstArtifact and > > > > > secondArtifact directories. > > > > > Decompiling grails-datamapping-tck-7.0.6.jar class files... > > > > > ✅ Decompiled grails-datamapping-tck-7.0.6.jar > > > > > ✅ No differences remain for grails-datamapping-tck-7.0.6.jar. > > Removing > > > > > from diff.txt. > > > > > Checking jar grails-forge-core-7.0.6-javadoc.jar... > > > > > Extracting grails-forge-core-7.0.6-javadoc.jar > > > > > Looking for build artifact grails-forge-core-7.0.6-javadoc.jar in > > > > > /home/groovy/grails-verify/grails/etc/bin/results > > > > > ✅ First Artifact Found @ > > > > > > > > > > > > > > > > /home/groovy/grails-verify/grails/etc/bin/results/first/grails-forge-core-7.0.6-javadoc.jar > > > > > ✅ Second Artifact Found @ > > > > > > > > > > > > > > > > /home/groovy/grails-verify/grails/etc/bin/results/first/grails-forge-core-7.0.6-javadoc.jar > > > > > Extracting grails-forge-core-7.0.6-javadoc.jar from first to > > > > > /home/groovy/grails-verify/grails/etc/bin/results/firstArtifact > > > > > ✅ First Artifact Extracted > > > > > Extracting grails-forge-core-7.0.6-javadoc.jar from second to > > > > > /home/groovy/grails-verify/grails/etc/bin/results/secondArtifact > > > > > ✅ Second Artifact Extracted > > > > > ✅ Extracted grails-forge-core-7.0.6-javadoc.jar to firstArtifact > and > > > > > secondArtifact directories. > > > > > Decompiling grails-forge-core-7.0.6-javadoc.jar class files... > > > > > ✅ Decompiled grails-forge-core-7.0.6-javadoc.jar > > > > > ❌ Verification failed. ❌ > > > > > ❌ Differences still found in grails-forge-core-7.0.6-javadoc.jar. > > > > > ❌ Differences Found ❌ > > > > > grails-forge-core-7.0.6-javadoc.jar > > > > > ❌ Differences Found ❌ > > > > > ❌ Verification failed. ❌ > > > > > ✅ Reproducible Build Verified > > > > > > > > > > > > > > > > > -- > > Med venlig hilsen, > Søren Berg Glasius > > Hedevej 1, Gl. Rye, 8680 Ry > Mobile: +45 40 44 91 88 > --- Press ESC once to quit - twice to save the changes. > -- Venlig hilsen Thomas Rasmussen Gennemtænkt IT A/S Carl Nielsens Kvarter 23 5000 Odense C Tlf.: +45 22 839 837 Email: [email protected] <[email protected]> Web: www.gennemtænkt.dk <http://www.xn--gennemtnkt-j6a.dk/>
