This is an automated email from the ASF dual-hosted git repository. ppkarwasz pushed a commit to branch fix/2.x/verify-reproducibility-race in repository https://gitbox.apache.org/repos/asf/logging-log4j2.git
commit 0e67fcd6f09d1c306cd81cbf7bebec7edb80c50d Author: Piotr P. Karwasz <[email protected]> AuthorDate: Sat Jul 25 09:40:46 2026 +0200 Pin snapshot reproducibility checks to the deployed artifacts Split `verify-reproducibility` into per-deployment jobs. The snapshot variant now verifies against the repository artifact uploaded by `deploy-snapshot-reusable.yaml` instead of the shared Nexus snapshot repository, which could be overwritten by a concurrent run. The release variant keeps using the per-release staging repository URL. Requires apache/logging-parent#505. Assisted-By: Claude Fable 5 <[email protected]> --- .github/workflows/build.yaml | 18 +++++++++++++----- 1 file changed, 13 insertions(+), 5 deletions(-) diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml index 9566bbb255..e1e25da768 100644 --- a/.github/workflows/build.yaml +++ b/.github/workflows/build.yaml @@ -83,13 +83,21 @@ jobs: 17 project-id: log4j - verify-reproducibility: - needs: [ deploy-snapshot, deploy-release ] - if: ${{ always() && (needs.deploy-snapshot.result == 'success' || needs.deploy-release.result == 'success') }} - name: "verify-reproducibility (${{ needs.deploy-release.result == 'success' && needs.deploy-release.outputs.project-version || needs.deploy-snapshot.outputs.project-version }})" + verify-reproducibility-snapshot: + needs: deploy-snapshot + uses: apache/logging-parent/.github/workflows/verify-reproducibility-reusable.yaml@gha/v0 + with: + # Name of the artifact uploaded by `deploy-snapshot` + reference-artifact-name: ${{ needs.deploy-snapshot.outputs.repository-artifact-name }} + # Encode the `runs-on` input as JSON array + runs-on: '["ubuntu-latest", "macos-latest"]' + + verify-reproducibility-release: + needs: deploy-release uses: apache/logging-parent/.github/workflows/verify-reproducibility-reusable.yaml@gha/v0 with: - nexus-url: ${{ needs.deploy-release.result == 'success' && needs.deploy-release.outputs.nexus-url || 'https://repository.apache.org/content/groups/snapshots' }} + # URL of staging repository + nexus-url: ${{ needs.deploy-release.outputs.nexus-url }} # Encode the `runs-on` input as JSON array runs-on: '["ubuntu-latest", "macos-latest"]'
