+1 (binding) ________________________________ From: Paul King <[email protected]> Sent: Thursday, September 10, 2026 3:37 AM To: Groovy_Developers <[email protected]> Subject: [VOTE] Release Apache Groovy 6.0.0-RC-2
Dear development community, I am happy to start the VOTE thread for a Groovy 6. 0. 0-RC-2 release! This release includes 44 bug fixes/improvements as outlined in the changelog: https: //urldefense. com/v3/__https: //issues. apache. org/jira/secure/ReleaseNote. jspa?projectId=12318123&version=12357502__;!!GFN0sa3rsbfR8OLyAw!eMXor1M6UGLcx7G2omvcnvrDLzSrAg6Zi6_b5pvoUbJrzd8TFvyr7J3RSz2kxH4TLb9qoTTEVtcPIo8ezUvj7A$ Dear development community, I am happy to start the VOTE thread for a Groovy 6.0.0-RC-2 release! This release includes 44 bug fixes/improvements as outlined in the changelog: https://urldefense.com/v3/__https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12318123&version=12357502__;!!GFN0sa3rsbfR8OLyAw!eMXor1M6UGLcx7G2omvcnvrDLzSrAg6Zi6_b5pvoUbJrzd8TFvyr7J3RSz2kxH4TLb9qoTTEVtcPIo8ezUvj7A$ Tag: https://urldefense.com/v3/__https://gitbox.apache.org/repos/asf?p=groovy.git;a=tag;h=refs*tags*GROOVY_6_0_0_RC_2__;Ly8!!GFN0sa3rsbfR8OLyAw!eMXor1M6UGLcx7G2omvcnvrDLzSrAg6Zi6_b5pvoUbJrzd8TFvyr7J3RSz2kxH4TLb9qoTTEVtcPIo8L7PeoMA$ Tag commit id: 760601d45f652b90950f5dd3ba4e60f201691e11 The artifacts to be voted on are located as follows (r87406). Source release: https://urldefense.com/v3/__https://dist.apache.org/repos/dist/dev/groovy/6.0.0-RC-2/sources__;!!GFN0sa3rsbfR8OLyAw!eMXor1M6UGLcx7G2omvcnvrDLzSrAg6Zi6_b5pvoUbJrzd8TFvyr7J3RSz2kxH4TLb9qoTTEVtcPIo8hLLIHLw$ Convenience binaries: https://urldefense.com/v3/__https://dist.apache.org/repos/dist/dev/groovy/6.0.0-RC-2/distribution__;!!GFN0sa3rsbfR8OLyAw!eMXor1M6UGLcx7G2omvcnvrDLzSrAg6Zi6_b5pvoUbJrzd8TFvyr7J3RSz2kxH4TLb9qoTTEVtcPIo9KkcipTQ$ Temporary artifacts: https://urldefense.com/v3/__https://repository.apache.org/content/repositories/orgapachegroovy-1122__;!!GFN0sa3rsbfR8OLyAw!eMXor1M6UGLcx7G2omvcnvrDLzSrAg6Zi6_b5pvoUbJrzd8TFvyr7J3RSz2kxH4TLb9qoTTEVtcPIo8Yybdrkg$ Release artifacts are signed with a key from the following file: https://urldefense.com/v3/__https://dist.apache.org/repos/dist/release/groovy/KEYS__;!!GFN0sa3rsbfR8OLyAw!eMXor1M6UGLcx7G2omvcnvrDLzSrAg6Zi6_b5pvoUbJrzd8TFvyr7J3RSz2kxH4TLb9qoTTEVtcPIo9wnLlqrA$ Please vote on releasing this package as Apache Groovy 6.0.0-RC-2. Reminder on ASF release approval requirements for PMC members: https://urldefense.com/v3/__http://www.apache.org/legal/release-policy.html*release-approval__;Iw!!GFN0sa3rsbfR8OLyAw!eMXor1M6UGLcx7G2omvcnvrDLzSrAg6Zi6_b5pvoUbJrzd8TFvyr7J3RSz2kxH4TLb9qoTTEVtcPIo9xW5yL8w$ Hints on validating checksums/signatures (but replace md5sum with sha256sum): https://urldefense.com/v3/__https://www.apache.org/info/verification.html__;!!GFN0sa3rsbfR8OLyAw!eMXor1M6UGLcx7G2omvcnvrDLzSrAg6Zi6_b5pvoUbJrzd8TFvyr7J3RSz2kxH4TLb9qoTTEVtcPIo95r8V8ug$ The vote is open for the next 72 hours and passes if a majority of at least three +1 PMC votes are cast. [ ] +1 Release Apache Groovy 6.0.0-RC-2 [ ] 0 I don't have a strong opinion about this, but I assume it's ok [ ] -1 Do not release Apache Groovy 6.0.0-RC-2 because... Here is my vote: +1 (binding) -------------------- my local "verify.sh dev 6.0.0-RC-2" results: ✅ KEYS Downloaded ✅ Source Distribution Verified ✅ Binary Distribution Verified ✅ Docs Distribution Verified ✅ SDK Distribution Verified ✅ Gradle Bootstrapped ✅ RAT passed ✅✅✅ Automatic verification finished. -------------------- GroovyPolicyMCP analysis: **Verdict: 6.0.0-RC-2 is clean. I would vote +1.** Every check on the release checklist passed, including signatures this time. **Tag and source** - The annotated tag on gitbox resolves to commit 760601d45f652b90950f5dd3ba4e60f201691e11, matching the vote email, and its parent is on origin/master. - The source zip is identical to `git archive` at the tag. The only absent files are the deliberate omissions: benchmark, the perf dashboard, wrapper, governance docs, CI configs, and the ABI surface. - No compiled code or archives in the source zip. RAT passes at the tag. Version properties carry no SNAPSHOT. - The JIRA changelog lists 44 unique issues, as the email says. **Signatures and checksums** | Location | Artifacts | Signed by 6A65176A0FB1CD0B | Checksums | | ---------------------------------- | --------- | -------------------------- | ----------------------------------- | | dist.apache.org zips | 4 | 4 good | SHA-256 match | | Nexus staging orgapachegroovy-1122 | 297 | 297 good | md5, sha1, sha256, sha512 all match | **LICENSE and NOTICE** - Binary and SDK zips: 18 of 18 license pointers resolve, no unreferenced texts, NOTICE dated 2003-2026 with all the upstream credits. All 88 bundled third-party jars covered, the same set as today's snapshot. - Docs zip: 4 of 4 pointers resolve. - All 167 staged jars carry META-INF LICENSE and NOTICE with every pointer resolving. Raw, shaded, grooid, sources and groovy-all-sources declarations match their content. Sources, javadoc and groovydoc jars contain no classes. - The core, grooid and groovy-test-grooid jars inside the binary zip are byte-identical to the staged ones, as are all 39 module jars in lib/. - All 43 poms declare the license, none reference non-Groovy SNAPSHOT dependencies. **SBOMs** now show 729 of 729 components licensed.
