+1 pon., 2 paź 2023, 23:50 użytkownik Herve Boutemy <hbout...@apache.org> napisał:
> +1 > > Reproducible Builds now ok: reference build done with JDK 17 on *nix and > umask 022 > > and dist area in sync > > thank you > > Hervé > > On 2023/10/02 17:37:26 Tamás Cservenák wrote: > > Howdy, > > > > The vote continues, as Herve -1 was ONLY about binaries, while the vote > is > > about source bundles. > > > > The "take two" repository staged: > > https://repository.apache.org/content/repositories/maven-1996/ > > > > That repositository is identical to maven-1995, ONLY changes are the > fixed > > binaries (hence, source bundles are unchanged byte-wise, as SHA512 and > > other hashes show). > > > > Thanks > > T > > > > > > On Mon, Oct 2, 2023 at 2:18 PM Hervé Boutemy <herve.bout...@free.fr> > wrote: > > > > > yes, you can drop the staging repository and re-deploy: only the 2 -bin > > > archives will be different > > > > > > Regards > > > > > > Hervé > > > > > > Le lundi 2 octobre 2023, 11:10:36 CEST Tamás Cservenák a écrit : > > > > Bah, > > > > > > > > This is the same problem as before... but originally it happened on > my > > > > desktop. This time the release was done from my laptop :( > > > > > > > > I believe the fix is the same as before: I should rebuild from the > tag, > > > > after I fixed my local repository, as source bundles we vote on are > > > > unchanged... > > > > > > > > T > > > > > > > > On Mon, Oct 2, 2023 at 9:14 AM Herve Boutemy <hbout...@apache.org> > > > wrote: > > > > > thinking twice, I need to change to -1: this may impact users that > > > expect > > > > > to use the group permissions to use Maven binaries > > > > > > > > > > sorry > > > > > I don't know what tests you are doing with permissions on your > > > > > environment, but these tests leak releases :( > > > > > > > > > > Regards, > > > > > > > > > > Hervé > > > > > > > > > > On 2023/10/02 07:11:02 Herve Boutemy wrote: > > > > > > +1 > > > > > > > > > > > > but Reproducible not fully ok: reference build done with JDK 17 > on > > > *nix > > > > > > > > > > and umask 022 > > > > > > > > > > > apache-maven-3.9.5-bin.zip and .tar.gz suffer from weird umask > > > (go-r) on > > > > > > > > > > wagon jars: > > > > > > $ diffoscope > > > > > > > > > > target/reference/org.apache.maven/apache-maven-3.9.5-bin.zip > > > > > apache-maven/target/apache-maven-3.9.5-bin.zip > > > > > > > > > > > --- target/reference/org.apache.maven/apache-maven-3.9.5-bin.zip > > > > > > +++ apache-maven/target/apache-maven-3.9.5-bin.zip > > > > > > │┄ Archive contents identical but files differ, possibly due to > > > > > > > > > > different compression levels. Falling back to binary comparison. > > > > > > > > > > > ├── zipinfo {} > > > > > > │ @@ -81,21 +81,21 @@ > > > > > > │ -rw-r--r-- 2.0 unx 74345 b- defN 23-Oct-01 18:38 > > > > > > > > > > apache-maven-3.9.5/lib/maven-resolver-provider-3.9.5.jar > > > > > > > > > > > │ -rw-r--r-- 2.0 unx 317619 b- defN 23-Oct-01 18:38 > > > > > > > > > > apache-maven-3.9.5/lib/maven-resolver-impl-1.9.16.jar > > > > > > > > > > > │ -rw-r--r-- 2.0 unx 37757 b- defN 23-Oct-01 18:38 > > > > > > > > > > apache-maven-3.9.5/lib/maven-resolver-named-locks-1.9.16.jar > > > > > > > > > > > │ -rw-r--r-- 2.0 unx 51503 b- defN 23-Oct-01 18:38 > > > > > > > > > > apache-maven-3.9.5/lib/maven-resolver-spi-1.9.16.jar > > > > > > > > > > > │ -rw-r--r-- 2.0 unx 379348 b- defN 23-Oct-01 18:38 > > > > > > > > > > apache-maven-3.9.5/lib/org.eclipse.sisu.inject-0.3.5.jar > > > > > > > > > > > │ -rw-r--r-- 2.0 unx 4225 b- defN 23-Oct-01 18:38 > > > > > > > > > > apache-maven-3.9.5/lib/plexus-component-annotations-2.1.0.jar > > > > > > > > > > > │ -rw-r--r-- 2.0 unx 289577 b- defN 23-Oct-01 18:38 > > > > > > > > > > apache-maven-3.9.5/lib/maven-compat-3.9.5.jar > > > > > > > > > > > │ --rw------- 2.0 unx 55101 b- defN 23-Oct-01 18:38 > > > > > > > > > > apache-maven-3.9.5/lib/wagon-provider-api-3.5.3.jar > > > > > > > > > > > │ +-rw-r--r-- 2.0 unx 55101 b- defN 23-Oct-01 18:38 > > > > > > > > > > apache-maven-3.9.5/lib/wagon-provider-api-3.5.3.jar > > > > > > > > > > > │ -rw-r--r-- 2.0 unx 205307 b- defN 23-Oct-01 18:38 > > > > > > > > > > apache-maven-3.9.5/lib/org.eclipse.sisu.plexus-0.3.5.jar > > > > > > > > > > > │ -rw-r--r-- 2.0 unx 58284 b- defN 23-Oct-01 18:38 > > > > > > > > > > apache-maven-3.9.5/lib/commons-cli-1.5.0.jar > > > > > > > > > > > │ --rw------- 2.0 unx 9405 b- defN 23-Oct-01 18:38 > > > > > > > > > > apache-maven-3.9.5/lib/wagon-http-3.5.3.jar > > > > > > > > > > > │ --rw------- 2.0 unx 40832 b- defN 23-Oct-01 18:38 > > > > > > > > > > apache-maven-3.9.5/lib/wagon-http-shared-3.5.3.jar > > > > > > > > > > > │ --rw------- 2.0 unx 785639 b- defN 23-Oct-01 18:38 > > > > > > > > > > apache-maven-3.9.5/lib/httpclient-4.5.14.jar > > > > > > > > > > > │ --rw------- 2.0 unx 11350 b- defN 23-Oct-01 18:38 > > > > > > > > > > apache-maven-3.9.5/lib/wagon-file-3.5.3.jar > > > > > > > > > > > │ +-rw-r--r-- 2.0 unx 9405 b- defN 23-Oct-01 18:38 > > > > > > > > > > apache-maven-3.9.5/lib/wagon-http-3.5.3.jar > > > > > > > > > > > │ +-rw-r--r-- 2.0 unx 40832 b- defN 23-Oct-01 18:38 > > > > > > > > > > apache-maven-3.9.5/lib/wagon-http-shared-3.5.3.jar > > > > > > > > > > > │ +-rw-r--r-- 2.0 unx 785639 b- defN 23-Oct-01 18:38 > > > > > > > > > > apache-maven-3.9.5/lib/httpclient-4.5.14.jar > > > > > > > > > > > │ +-rw-r--r-- 2.0 unx 11350 b- defN 23-Oct-01 18:38 > > > > > > > > > > apache-maven-3.9.5/lib/wagon-file-3.5.3.jar > > > > > > > > > > > │ -rw-r--r-- 2.0 unx 16555 b- defN 23-Oct-01 18:38 > > > > > > > > > > apache-maven-3.9.5/lib/jcl-over-slf4j-1.7.36.jar > > > > > > > > > > > │ -rw-r--r-- 2.0 unx 40277 b- defN 23-Oct-01 18:38 > > > > > > > > > > apache-maven-3.9.5/lib/maven-resolver-connector-basic-1.9.16.jar > > > > > > > > > > > │ -rw-r--r-- 2.0 unx 16249 b- defN 23-Oct-01 18:38 > > > > > > > > > > apache-maven-3.9.5/lib/maven-resolver-transport-file-1.9.16.jar > > > > > > > > > > > │ -rw-r--r-- 2.0 unx 55689 b- defN 23-Oct-01 18:38 > > > > > > > > > > apache-maven-3.9.5/lib/maven-resolver-transport-http-1.9.16.jar > > > > > > > > > > > │ -rw-r--r-- 2.0 unx 327891 b- defN 23-Oct-01 18:38 > > > > > > > > > > apache-maven-3.9.5/lib/httpcore-4.4.16.jar > > > > > > > > > > > │ -rw-r--r-- 2.0 unx 360738 b- defN 23-Oct-01 18:38 > > > > > > > > > > apache-maven-3.9.5/lib/commons-codec-1.16.0.jar > > > > > > > > > > > │ -rw-r--r-- 2.0 unx 32488 b- defN 23-Oct-01 18:38 > > > > > > > > > > apache-maven-3.9.5/lib/maven-resolver-transport-wagon-1.9.16.jar > > > > > > > > > > > │ --- > target/reference/org.apache.maven/apache-maven-3.9.5-bin.zip > > > > > > > > > > > > Regards, > > > > > > > > > > > > Hervé > > > > > > > > > > > > On 2023/10/01 19:07:05 Tamás Cservenák wrote: > > > > > > > Howdy, > > > > > > > > > > > > > > Note: This release completes the main goals of Maven 3.9.x > lineage, > > > > > > > > > > among > > > > > > > > > > > > others moving to Java 8 and transition to latest Resolver 1.9.x > > > > > > > > > > features > > > > > > > > > > > > (new robust transports, local repository locking, provided > > > checksums, > > > > > > > remote repository filtering and more). Maven Resolver 1.9.x > > > lineage is > > > > > > > already in "bugfix only" (no new features) maintenance mode, > and > > > this > > > > > > > > > > makes > > > > > > > > > > > > Maven 3.9.x lineage getting into this maintenance mode as > well. I > > > do > > > > > > > foresee some more Maven 3.9.x releases with usual fluff (bug > fixes, > > > > > > > lifecycle plugin updates), but the focus should move to > upcoming > > > Maven > > > > > > > > > > 4, > > > > > > > > > > > > Resolver 2 and mvnd (at least when "core" is considered). > > > > > > > > > > > > > > --- > > > > > > > > > > > > We solved 8 issues: > > > > > > > > > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316922&; > > > > > version=12353460> > > > > > > > There are still a couple of issues left in JIRA: > > > > > > > > > https://issues.apache.org/jira/issues/?jql=project%20%3D%20MNG%20AND%20res > > > > > olution%20%3D%20Unresolved> > > > > > > > Staging repo: > > > > > > > https://repository.apache.org/content/repositories/maven-1995 > > > > > > > > > > > > > > Dev dist directory (binary bundles updated): > > > > > > > https://dist.apache.org/repos/dist/dev/maven/maven-3/3.9.5/ > > > > > > > > > > > > > > Source release checksums: > > > > > > > > > > > > apache-maven-3.9.5-src.zip sha512: > > > > > > > > > f1e7f36a6423c4f6d98e599120ede3a9f9f62448edeb2d49ffbdc05e36548190049bc83aae > > > > > 4f49e3305da1060d7b8e49477a55cb78b938951fd41ab3d360995f> > > > > > > > apache-maven-3.9.5-src.tar.gz sha512: > > > > > > > > > fd8f9c4f3c6af001d11146102ba491b248163cd45d8be16907f7dcdc763eef4a081a02286b > > > > > 28a74de7f48c3f377a0a4491d2fa9155c906466aa3c831a5b4ef8e> > > > > > > > Staged site: > > > > > > > https://maven.apache.org/ref/3-LATEST/ > > > > > > > > > > > > > > Draft for release notes: > > > > > > > https://github.com/apache/maven-site/pull/458 > > > > > > > > > > > > > > Guide to testing staged releases: > > > > > > > > > > http://maven.apache.org/guides/development/guide-testing-releases.html > > > > > > > > > > > > > > Vote open for 72h > > > > > > > > > > > > > > [ ] +1 > > > > > > > [ ] +0 > > > > > > > [ ] -1 > > > > > > > > > > > > > --------------------------------------------------------------------- > > > > > > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org > > > > > > For additional commands, e-mail: dev-h...@maven.apache.org > > > > > > > > > > > --------------------------------------------------------------------- > > > > > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org > > > > > For additional commands, e-mail: dev-h...@maven.apache.org > > > > > > > > > > > > > > > > > > --------------------------------------------------------------------- > > > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org > > > For additional commands, e-mail: dev-h...@maven.apache.org > > > > > > > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org > For additional commands, e-mail: dev-h...@maven.apache.org > >
