This is an automated email from the ASF dual-hosted git repository.
ppkarwasz pushed a commit to branch 2.x
in repository https://gitbox.apache.org/repos/asf/logging-log4j2.git
The following commit(s) were added to refs/heads/2.x by this push:
new 95888415f6 Pin snapshot reproducibility checks to the deployed
artifacts (#4215)
95888415f6 is described below
commit 95888415f631f546bb35b9ae14d3adaa552b57db
Author: Piotr P. Karwasz <[email protected]>
AuthorDate: Sun Jul 26 07:12:26 2026 +0200
Pin snapshot reproducibility checks to the deployed artifacts (#4215)
Split `verify-reproducibility` into per-deployment jobs. The snapshot
variant now verifies against the repository artifact uploaded by
`deploy-snapshot-reusable.yaml` instead of the shared Nexus snapshot
repository, which could be overwritten by a concurrent run. The release
variant keeps using the per-release staging repository URL.
Requires apache/logging-parent#505.
Assisted-By: Claude Fable 5 <[email protected]>
---
.github/workflows/build.yaml | 18 +++++++++++++-----
1 file changed, 13 insertions(+), 5 deletions(-)
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 9566bbb255..e1e25da768 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -83,13 +83,21 @@ jobs:
17
project-id: log4j
- verify-reproducibility:
- needs: [ deploy-snapshot, deploy-release ]
- if: ${{ always() && (needs.deploy-snapshot.result == 'success' ||
needs.deploy-release.result == 'success') }}
- name: "verify-reproducibility (${{ needs.deploy-release.result ==
'success' && needs.deploy-release.outputs.project-version ||
needs.deploy-snapshot.outputs.project-version }})"
+ verify-reproducibility-snapshot:
+ needs: deploy-snapshot
+ uses:
apache/logging-parent/.github/workflows/verify-reproducibility-reusable.yaml@gha/v0
+ with:
+ # Name of the artifact uploaded by `deploy-snapshot`
+ reference-artifact-name: ${{
needs.deploy-snapshot.outputs.repository-artifact-name }}
+ # Encode the `runs-on` input as JSON array
+ runs-on: '["ubuntu-latest", "macos-latest"]'
+
+ verify-reproducibility-release:
+ needs: deploy-release
uses:
apache/logging-parent/.github/workflows/verify-reproducibility-reusable.yaml@gha/v0
with:
- nexus-url: ${{ needs.deploy-release.result == 'success' &&
needs.deploy-release.outputs.nexus-url ||
'https://repository.apache.org/content/groups/snapshots' }}
+ # URL of staging repository
+ nexus-url: ${{ needs.deploy-release.outputs.nexus-url }}
# Encode the `runs-on` input as JSON array
runs-on: '["ubuntu-latest", "macos-latest"]'
