We have fixed a few bugs and added enhancements since Apache Commons
Compress 1.27.1 was released, so I would like to release Apache Commons
Compress 1.28.0.
Apache Commons Compress 1.28.0 RC1 is available for review here:
https://dist.apache.org/repos/dist/dev/commons/compress/1.28.0-RC1 (svn
revision 78394)
The Git tag commons-compress-1.28.0-RC1 commit for this RC is
852d9c23b94127feafc1649d9c7f13d4df338845 which you can browse here:
https://gitbox.apache.org/repos/asf?p=commons-compress.git;a=commit;h=852d9c23b94127feafc1649d9c7f13d4df338845
You may checkout this tag using:
git clone https://gitbox.apache.org/repos/asf/commons-compress.git
--branch commons-compress-1.28.0-RC1 commons-compress-1.28.0-RC1
Maven artifacts are here:
https://repository.apache.org/content/repositories/orgapachecommons-1853/org/apache/commons/commons-compress/1.28.0/
These are the artifacts and their hashes:
#Release SHA-512s
#Sat Jul 26 20:45:38 UTC 2025
Apache\ Commons\
Compress-1.28.0.spdx.rdf.xml=b9873bd3b9a7294b3276a8aac63abe744dc07b0ff59353343be2809951a4f14313c6be55332cc24234a28d9ba183e442de76389390042e22bda75848428dbd64
commons-compress-1.28.0-bin.tar.gz=87c6b00ec854d8dc08834ed3bd1590d1facce45dad8c8fc37b2e82e30b18f793181f8dd6b8fcbba3850534b56cfafc7cfa3bd5236004293368fc3b7ff651d4b6
commons-compress-1.28.0-bin.zip=68357a6ae6100c8e6d251bb6b2441297c05cf45d34439fa9e40868a967ded1dbb06dac3044cc358aedeed53124914fc43f60ed1989bd54ccd2f89b2209aeb810
commons-compress-1.28.0-bom.json=68f3550cd9138d2f88cf318a88a24267ff2e1928b98ca9088661a985b24112af7245de196904f70ea21fa0668e664b439b02786797ed63efa17d8fff8c5e1560
commons-compress-1.28.0-bom.xml=b2b42837529c59bf629ec69774ef65b0389cdbb0b565f825610efcc51782f6a50a6b07ae8c0e34b861efc8d552c70267fa12e7392018743b1ad8243b068e1264
commons-compress-1.28.0-javadoc.jar=fa8665fff7cccf1bc30fa482898ec654ee42775f2c739a485e76ed01ce69c90e4189cbda333afa45fc9e073645a41af0dbe74e00e904e03e3c8fe0bd1f3d7fdd
commons-compress-1.28.0-sources.jar=ccaaeef4e6ea6760d3e12baec8c148a0b5a87b13ad3b1d05111cb49d9749381a9aae9c84e1b970e42ba8a797447728f7779d72e8ad83f28b061ebf3e1b44b950
commons-compress-1.28.0-src.tar.gz=cd37f7d554dff9f1cf9c90e93a30b7b15ace002d69d317a63d575fd623b4e64dbd55fbf2876ecd5333cf96858a37458f55762e5505311a7a8063d0cc8cdc4120
commons-compress-1.28.0-src.zip=fb337dcf749fd868dd0042b1e8da3d693405f618cc76dc9235d196ed76e19b83fb4b9c74a4eb4ba059a7ace8c2b98643cf04d82dcf90174b00c038a9075eb9ea
commons-compress-1.28.0-test-sources.jar=d4cff1e6fde6e3d944f98e278c96eda295a5a21087aff2b0d891edd44c537eb59837cf648aa57cb269263cd07683f675378631d95e2ba39dc1be297931eb30c4
commons-compress-1.28.0-tests.jar=e5bbb11bba6838b8d60ae8aaf751f51bc08e8b4207c48de1011cb842cb09e643cf3ba6cbd5c7d745110fab2d3152f2514af40f57760722a926b288987c2c04fc
I have tested this with 'mvn -Ddoclint=none' and 'mvn clean install site
-Ddoclint=none' using:
openjdk version "21.0.8" 2025-07-15
OpenJDK Runtime Environment Homebrew (build 21.0.8)
OpenJDK 64-Bit Server VM Homebrew (build 21.0.8, mixed mode, sharing)
Apache Maven 3.9.11 (3e54c93a704957b63ee3494413a2b544fd3d825b)
Maven home: /opt/homebrew/Cellar/maven/3.9.11/libexec
Java version: 21.0.8, vendor: Homebrew, runtime:
/opt/homebrew/Cellar/openjdk@21/21.0.8/libexec/openjdk.jdk/Contents/Home
Default locale: en_US, platform encoding: UTF-8
OS name: "mac os x", version: "15.5", arch: "aarch64", family: "mac"
Darwin Garys-MacBook-Pro.local 24.5.0 Darwin Kernel Version 24.5.0: Tue Apr
22 19:53:27 PDT 2025; root:xnu-11417.121.6~2/RELEASE_ARM64_T6041 arm64
Docker version 28.3.0, build 38b7060
Details of changes since 1.27.1 are in the release notes:
https://dist.apache.org/repos/dist/dev/commons/compress/1.28.0-RC1/RELEASE-NOTES.txt
https://dist.apache.org/repos/dist/dev/commons/compress/1.28.0-RC1/site/changes.html
Site:
https://dist.apache.org/repos/dist/dev/commons/compress/1.28.0-RC1/site/index.html
(note some *relative* links are broken and the 1.28.0 directories are
not yet created - these will be OK once the site is deployed.)
JApiCmp Report (compared to 1.27.1):
https://dist.apache.org/repos/dist/dev/commons/compress/1.28.0-RC1/site/japicmp.html
RAT Report:
https://dist.apache.org/repos/dist/dev/commons/compress/1.28.0-RC1/site/rat-report.html
KEYS:
https://downloads.apache.org/commons/KEYS
Please review the release candidate and vote.
This vote will close no sooner than 72 hours from now.
[ ] +1 Release these artifacts
[ ] +0 OK, but...
[ ] -0 OK, but really should fix...
[ ] -1 I oppose this release because...
Thank you,
Gary Gregory,
Release Manager (using key 86fdc7e2a11262cb)
The following is intended as a helper and refresher for reviewers.
Validating a release candidate
==============================
These guidelines are NOT complete.
Requirements: Git, Java, and Maven.
You can validate a release from a release candidate (RC) tag as follows.
1a) Download and decompress the source archive from:
https://dist.apache.org/repos/dist/dev/commons/compress/1.28.0-RC1/source
1b) Check out the RC tag from git (optional)
This is optional, as a reviewer must check source distributions as a
minimum.
git clone https://gitbox.apache.org/repos/asf/commons-compress.git --branch
commons-compress-1.28.0-RC1 commons-compress-1.28.0-RC1
cd commons-compress-1.28.0-RC1
2) Checking the build
All components should include a default Maven goal, such that you can run
'mvn' from the command line by itself.
2) Check Apache licenses
This step is not required if the site includes a RAT report page which you
then must check.
This check should be included in the default Maven build, but you can check
it with:
mvn apache-rat:check
3) Check binary compatibility
This step is not required if the site includes a JApiCmp report page which
you then must check.
This check should be included in the default Maven build, but you can check
it with:
mvn verify -DskipTests -P japicmp japicmp:cmp
4) Build the package
This check should be included in the default Maven build, but you can check
it with:
mvn -V clean package
You can record the Maven and Java version produced by -V in your VOTE reply.
To gather OS information from a command line:
Windows: ver
Linux: uname -a
4b) Check reproducibility
To check that a build is reproducible, run:
mvn clean verify artifact:compare -DskipTests -Dreference.repo=
https://repository.apache.org/content/repositories/staging/
'-Dbuildinfo.ignore=*/*.spdx.json'
Note that this excludes SPDX files from the check.
5) Build the site for a single module project
Note: Some plugins require the components to be installed instead of
packaged.
mvn site
Check the site reports in:
- Windows: target\site\index.html
- Linux: target/site/index.html
-the end-
