Howdy, It turns out source bundles (by SHA512) were ok and are unchanged, it was the binary bundle that had flakey maven-resolver-api 1.9.14 JAR embedded, as Herve detected.
Again, - source bundles are _unchanged_. - binary bundles are _fixed_. Will respin "take two" vote for 3.9.4, as everything is restaged. Thanks T On Mon, Jul 31, 2023 at 12:07 AM Tamás Cservenák <ta...@cservenak.net> wrote: > But that's the thing (as I wrote on Slack): > - I have desktop (Fedora 38) and one laptop (Fedora 38) and one macbook > - but all the releases I did do this week happened on desktop (Fedora 38) > ONLY > - on desktop I do use MRM, but as resolver release placed JARs in my local > repository, they were probably overwritten (as you say, by another install) > - I am unsure and am actually troubled here, when and how did I "mvn > install" from tag checked out sources (target/checkout from release > directory)? While building site? As I have _separate_ places/checkouts > even, once for "work" and one for "release" that is not even added to any > IDE... > > T > > On Sun, Jul 30, 2023 at 11:59 PM Hervé Boutemy <herve.bout...@free.fr> > wrote: > >> you probably rebuilt the release with "mvn install" = what you need to >> avoid >> and it seems the rebuild was done with an environment that did not give >> you the same output as the reference build >> >> FYI, I was able to rebuild Maven Resolver 1.9.14 with the same output as >> you >> >> https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/apache/maven/resolver/maven-resolver/README.md >> >> AFAIK, there is no reproduciblity issue nowadays with recent Bnd and/or >> Felix Bundle plugin >> >> Regards, >> >> Hervé >> >> Le samedi 29 juillet 2023, 15:19:12 CEST Tamás Cservenák a écrit : >> > Sure, >> > >> > Will do that, thanks. >> > >> > What I don't understand is how I got 2 different jars in the first >> place, >> > as i did not release twice (nor build from tag two times)... >> > >> > T >> > >> > On Sat, Jul 29, 2023, 11:58 Herve Boutemy <hbout...@apache.org> wrote: >> > > notice that you don't need to go to 3.9.5: rebuilding 3.9.4 from a >> clean >> > > local repository and Git checkout from tag with `mvn -Papache-release >> > > deploy` will do the job that has to be re-done >> > > >> > > Regards, >> > > >> > > Hervé >> > > >> > > On 2023/07/29 08:47:48 Tamás Cservenák wrote: >> > > > Am cancelling the vote due Herve -1 >> > > > >> > > > Will need to figure out how this happened. >> > > > >> > > > T >> > > >> > > --------------------------------------------------------------------- >> > > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org >> > > For additional commands, e-mail: dev-h...@maven.apache.org >> >> >> >> >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org >> For additional commands, e-mail: dev-h...@maven.apache.org >> >>
