Hi Gary,
On 12.05.2026 14:08, Gary Gregory wrote:
> [VOTE] Release Apache Commons Configuration 2.15.0 based on RC2
>
> [...]
>
> Please review the release candidate and vote.
> This vote will close no sooner than 24 hours from now.
>
> [ ] +1 Release these artifacts
> [ ] +0 OK, but...
> [ ] -0 OK, but really should fix...
> [ ] -1 I oppose this release because...
Thank you for handling this release.
[X] +1, release the artifacts
I have performed my usual checks on the release archives, which are:
- Checksum verification,
- Signature verification,
- Checking the RAT report for missing license information,
- Checking the japicmp report for API changes missing from the changelog,
- Running unit tests and reproducibility verification in one go using:
export TZ=UTC
export JDK_HOME=path/to/JDK/21
mvn verify artifact:compare \
-Dreference.repo=https://repository.apache.org/content/repositories/orgapachecommons-1936/
\
-Dbuildinfo.ignore="*/*.spdx.json"
I can also confirm that the SPDX artifact is still not reproducible: my
guess is that it must depend on the absolute location of the source folder.
Piotr
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
