Hi Gary, On 5.07.2025 01:00, Gary Gregory wrote: > Please review the release candidate and vote. > This vote will close no sooner than 72 hours from now. > > [ ] +1 Release these artifacts > [ ] +0 OK, but... > [ ] -0 OK, but really should fix... > [ ] -1 I oppose this release because...
-0: I would prefer not to release these artifacts in their current form, as the build includes Eclipse-generated metadata that makes the release hard to reproduce: * META-INF/maven/org.apache.commons/commons-lang3/pom.properties contains: #Generated by Maven Integration for Eclipse #Fri Jul 04 18:23:38 EDT 2025 artifactId=commons-lang3 groupId=org.apache.commons m2e.projectLocation=/Users/garygregory/git/commons-lang m2e.projectName=commons-lang3 version=3.18.0 * META-INF/MANIFEST.MF contains: Build-Jdk-Spec: 23 This line appears to have been added by Eclipse and does not reflect the JDK actually used for compilation. ## Dependabot metadata (PR #1405) If you decide to cut a new release candidate, would you mind reviewing PR #1405? https://github.com/apache/commons-lang/pull/1405 I've noticed that Dependabot PRs for some Commons artifacts (e.g., `commons-codec`, `commons-csv`) now include rich metadata like links to the GitHub repository, changelogs, and commit diffs. However, this information is missing for `commons-lang3`. The difference comes from the value of the `project.scm.url` in the POM. Some projects use the GitHub repository URL, while others (including `commons-lang3`) still point to `gitbox.apache.org`. Updating this field will help tools like Dependabot provide more meaningful and helpful upgrade PRs. Thanks, Piotr --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org For additional commands, e-mail: dev-h...@commons.apache.org
