Since we fixed using SpotBugs on Java 8 since Apache Commons Parent 82
was released, I would like to release Apache Commons Parent 83.
Apache Commons Parent 83 RC1 is available for review here:
https://dist.apache.org/repos/dist/dev/commons/parent/83-RC1 (svn
revision 76510)
The Git tag commons-parent-83-RC1 commit for this RC is
874088c1bc39303ab9f8c19c0110b9b295943f06 which you can browse here:
https://gitbox.apache.org/repos/asf?p=commons-parent.git;a=commit;h=874088c1bc39303ab9f8c19c0110b9b295943f06
You may checkout this tag using:
git clone https://gitbox.apache.org/repos/asf/commons-parent.git
--branch commons-parent-83-RC1 commons-parent-83-RC1
Maven artifacts are here:
https://repository.apache.org/content/repositories/orgapachecommons-1832/org/apache/commons/commons-parent/83/
These are the artifacts and their hashes:
#Release SHA-512s
#Fri Apr 25 22:04:06 UTC 2025
commons-parent-83-bom.json=348d7498124fc0585fd70c0be420e44d26cbe9e9f062de9106868e65ba9b88c02c568f522a0974051421b3452b36aafb2a6262f1b9b478b4ee27b57c08f4e8a2
commons-parent-83-bom.xml=47cc9aeb99eda54eeddb890cd776fa5f2a1436e338ec811064f13397653c40dd9e2a2e236667b30e6b17699a6154aca6e05678e38c65477f63980328ba697369
commons-parent-83-site.xml=07c3de38227fd28664777636162d583dc0cb5061c8133f827023ca3188b641a53ee2aed1192a8842f76071b2db8c5aeef7d4c58457c8688c89d577ae23d51a86
commons-parent-83-src.tar.gz=a03e9aab8cb8ff092ab0a6c7f368a4d24f9ef661a20932f861e52684e6b5ba2aec6a47eba7b5893bd7eaf40335df666da026a429460dcecb521ce98f39459921
commons-parent-83-src.zip=a3d904ce16d091f87c564c455f6502a71b9dccfae09bdafb3e638a23e6c7fe1e9b62d8d5bac4726d20caff3f310525761db9522a5878e808e465d2639c791b4e
org.apache.commons_commons-parent-83.spdx.json=906f3a62263d9919ed5bb419e0ca814b292f926bfef05c28b93cdf016b2d5a12f63d7d8e5ede646cb6450a129b0e3dc19d5ff00f444409083b0bcffb82445170
I have tested this with 'mvn' and 'mvn -e -V -P release -P test-deploy
-P jacoco -P japicmp clean package site deploy' using:
openjdk version "21.0.7" 2025-04-15
OpenJDK Runtime Environment Homebrew (build 21.0.7)
OpenJDK 64-Bit Server VM Homebrew (build 21.0.7, mixed mode, sharing)
Apache Maven 3.9.9 (8e8579a9e76f7d015ee5ec7bfcdc97d260186937)
Maven home: /opt/homebrew/Cellar/maven/3.9.9/libexec
Java version: 21.0.7, vendor: Homebrew, runtime:
/opt/homebrew/Cellar/openjdk@21/21.0.7/libexec/openjdk.jdk/Contents/Home
Default locale: en_US, platform encoding: UTF-8
OS name: "mac os x", version: "15.4.1", arch: "aarch64", family: "mac"
Darwin ****.local 24.4.0 Darwin Kernel Version 24.4.0: Fri Apr 11
18:32:50 PDT 2025; root:xnu-11417.101.15~117/RELEASE_ARM64_T6041 arm64
Docker version 28.0.4, build b8034c0
I tested the result with Apache Commons JEXL git master using Java 8:
openjdk version "1.8.0_452"
IBM Semeru Runtime Open Edition (build 1.8.0_452-b07)
Eclipse OpenJ9 VM (build v0.51.0-release-3dcfa8b60d, JRE 1.8.0 Mac OS
X amd64-64-Bit Compressed References 20250402_1230 (JIT enabled, AOT
enabled)
OpenJ9 - 3dcfa8b60d
OMR - 9bcff94a2
JCL - 267f5fe4c9 based on jdk8u452-b07)
Details of changes since 82 are in the release notes:
https://dist.apache.org/repos/dist/dev/commons/parent/83-RC1/RELEASE-NOTES.txt
https://dist.apache.org/repos/dist/dev/commons/parent/83-RC1/site/changes.html
Site:
https://dist.apache.org/repos/dist/dev/commons/parent/83-RC1/site/index.html
(note some *relative* links are broken and the 83 directories are
not yet created - these will be OK once the site is deployed.)
RAT Report:
https://dist.apache.org/repos/dist/dev/commons/parent/83-RC1/site/rat-report.html
KEYS:
https://downloads.apache.org/commons/KEYS
Please review the release candidate and vote.
This vote will close no sooner than 72 hours from now.
[ ] +1 Release these artifacts
[ ] +0 OK, but...
[ ] -0 OK, but really should fix...
[ ] -1 I oppose this release because...
Thank you,
Gary Gregory,
Release Manager (using key 86fdc7e2a11262cb)
The following is intended as a helper and refresher for reviewers.
Validating a release candidate
==============================
These guidelines are NOT complete.
Requirements: Git, Java, and Maven.
You can validate a release from a release candidate (RC) tag as follows.
1a) Download and decompress the source archive from:
https://dist.apache.org/repos/dist/dev/commons/parent/83-RC1/source
1b) Check out the RC tag from git (optional)
This is optional, as a reviewer must check source distributions as a minimum.
git clone https://gitbox.apache.org/repos/asf/commons-parent.git
--branch commons-parent-83-RC1 commons-parent-83-RC1
cd commons-parent-83-RC1
2) Checking the build
All components should include a default Maven goal, such that you can
run 'mvn' from the command line by itself.
2) Check Apache licenses
This step is not required if the site includes a RAT report page which
you then must check.
This check should be included in the default Maven build, but you can
check it with:
mvn apache-rat:check
3) Check binary compatibility
This step is not required if the site includes a JApiCmp report page
which you then must check.
This check should be included in the default Maven build, but you can
check it with:
mvn verify -DskipTests -P japicmp japicmp:cmp
4) Build the package
This check should be included in the default Maven build, but you can
check it with:
mvn -V clean package
You can record the Maven and Java version produced by -V in your VOTE reply.
To gather OS information from a command line:
Windows: ver
Linux: uname -a
4b) Check reproducibility
To check that a build is reproducible, run:
mvn clean verify artifact:compare -DskipTests
-Dreference.repo=https://repository.apache.org/content/repositories/staging/
'-Dbuildinfo.ignore=*/*.spdx.json'
Note that this excludes SPDX files from the check.
5) Build the site for a single module project
Note: Some plugins require the components to be installed instead of packaged.
mvn site
Check the site reports in:
- Windows: target\site\index.html
- Linux: target/site/index.html
-the end-
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
