+1 (binding) James Fredley
On 2026/02/12 16:01:49 James Daugherty wrote: > Hi Everyone, > > I am happy to start the VOTE thread for an Apache Grails Spring > Security release of version 7.0.1! > > Release notes for the release are here: > https://github.com/apache/grails-spring-security/releases/tag/v7.0.1 > > The tag for this release is: > https://github.com/apache/grails-spring-security/releases/tag/v7.0.1 > Tag commit id: 866b91dba648e13cd9b7d2fdda7aec4e91752ebc > > The artifacts to be voted on are located as follows (r82455): > Source release: > https://dist.apache.org/repos/dist/dev/grails/spring-security/7.0.1/sources > > Release artifacts are signed with a key from the following file: > https://dist.apache.org/repos/dist/release/grails/KEYS > > Please vote on releasing this package as: Apache Grails Spring Security 7.0.1. > > Reminder on ASF release approval requirements for PMC members: > https://www.apache.org/legal/release-policy.html#release-approval > > Hints on validating checksums/signatures (but replace md5sum with sha512sum): > https://www.apache.org/info/verification.html > > The vote is open for a minimum of 72 hours and passes if a majority of at > least > three +1 PMC votes are cast. > > [ ] +1 Release Apache Grails Spring Security 7.0.1 > [ ] 0 I don't have a strong opinion about this, but I assume it's ok > [ ] -1 Do not release Apache Grails Spring Security 7.0.1 because... > > Here is my vote: > > +1 (binding) > > > ---- > FYI: We continue to see differences, but when diffed they are > identical. Here's my verification output for reference: > > Differences were found, diffing jar files ... > Downloading Vineflower decompiler... > Checking jar 'acl-plugin-7.0.1.jar'... > Extracting acl-plugin-7.0.1.jar > Looking for build artifact acl-plugin-7.0.1.jar in > /home/groovy/grails-verify/grails-spring-security/etc/bin/results > ✅ First Artifact Found @ > /home/groovy/grails-verify/grails-spring-security/etc/bin/results/first/acl-plugin-7.0.1.jar > ✅ Second Artifact Found @ > /home/groovy/grails-verify/grails-spring-security/etc/bin/results/second/acl-plugin-7.0.1.jar > Extracting acl-plugin-7.0.1.jar from first to > /home/groovy/grails-verify/grails-spring-security/etc/bin/results/firstArtifact > ✅ First Artifact Extracted > Extracting acl-plugin-7.0.1.jar from second to > /home/groovy/grails-verify/grails-spring-security/etc/bin/results/secondArtifact > ✅ Second Artifact Extracted > ✅ Extracted acl-plugin-7.0.1.jar to firstArtifact and secondArtifact > directories. > Decompiling acl-plugin-7.0.1.jar class files... > ✅ Decompiled acl-plugin-7.0.1.jar > ✅ No differences remain for acl-plugin-7.0.1.jar. Removing from diff.txt. > Checking jar 'ui-plugin-7.0.1.jar'... > Extracting ui-plugin-7.0.1.jar > Looking for build artifact ui-plugin-7.0.1.jar in > /home/groovy/grails-verify/grails-spring-security/etc/bin/results > ✅ First Artifact Found @ > /home/groovy/grails-verify/grails-spring-security/etc/bin/results/first/ui-plugin-7.0.1.jar > ✅ Second Artifact Found @ > /home/groovy/grails-verify/grails-spring-security/etc/bin/results/second/ui-plugin-7.0.1.jar > Extracting ui-plugin-7.0.1.jar from first to > /home/groovy/grails-verify/grails-spring-security/etc/bin/results/firstArtifact > ✅ First Artifact Extracted > Extracting ui-plugin-7.0.1.jar from second to > /home/groovy/grails-verify/grails-spring-security/etc/bin/results/secondArtifact > ✅ Second Artifact Extracted > ✅ Extracted ui-plugin-7.0.1.jar to firstArtifact and secondArtifact > directories. > Decompiling ui-plugin-7.0.1.jar class files... > ✅ Decompiled ui-plugin-7.0.1.jar > ✅ No differences remain for ui-plugin-7.0.1.jar. Removing from diff.txt. > ✅ Differences were resolved via decompilation. ✅ > ✅ Reproducible Build Verified > ✅✅✅ Verification finished, see above instructions for remaining manual > testing. >
