This vote passes with the following binding +1s: - Gary Gregory (ggregory) - Henri Biestro (henrib) - Rob Tompkins (chtompki)
Gary On Wed, Jul 29, 2026 at 5:32 PM Rob Tompkins <[email protected]> wrote: > > +1 checks out on all fronts. > > > > > On Jul 26, 2026, at 8:19 PM, Gary Gregory <[email protected]> wrote: > > > > We have fixed a 12 bugs since the release of Apache Commons Codec > > 1.22.0, so I would like to release Apache Commons Codec 1.22.1. > > > > Apache Commons Codec 1.22.1 RC1 is available for review here: > > https://dist.apache.org/repos/dist/dev/commons/codec/1.22.1-RC1 > > (svn revision 86254) > > > > The Git tag commons-codec-1.22.1-RC1 commit for this RC is > > dc8f6c832a30f524bf12a5ae7ab013e4ad7c088f, which you can browse here: > > > > https://gitbox.apache.org/repos/asf?p=commons-codec.git;a=commit;h=dc8f6c832a30f524bf12a5ae7ab013e4ad7c088f > > You may checkout this tag using: > > git clone https://gitbox.apache.org/repos/asf/commons-codec.git > > --branch commons-codec-1.22.1-RC1 commons-codec-1.22.1-RC1 > > > > Maven artifacts are here: > > > > https://repository.apache.org/content/repositories/orgapachecommons-1954/commons-codec/commons-codec/1.22.1/ > > > > These are the artifacts and their hashes: > > > > #Release SHA-512s > > #Mon Jul 27 00:12:38 UTC 2026 > > commons-codec-1.22.1-bin.tar.gz=62e0c1baad7ae28f7d458ad79f6a3b2820acb9dafe56eefad5acdbc3183e6f0fc82bb0e31332ea43cd5da03b46e0c291802e4784bfea75c6a733b1289279ae3b > > commons-codec-1.22.1-bin.zip=15d6639c7a5b1e0835ae0b43831717aed89bdc5782cea218e581c3447a9b48b42b03632624d76733092725b260d98f78f52d848e224e4a8c8e9214b470d636bd > > commons-codec-1.22.1-bom.json=3a8991b770c0a309e6f552904cef5cbdf8bf5a08ae874080335f84a1fdafbbb06867a225bd04c37fc5a7a8835cdaee32397f79abf805430038cea5dfdba37621 > > commons-codec-1.22.1-bom.xml=35ae44a4044da51c2824ae387ea9e5a2c805fd85ab2a62ecf41ab869c98430402be4bcaeac9db6b0710f7b8d760d427e7ac99fd76af6b04aa20d04abe8a9dbca > > commons-codec-1.22.1-javadoc.jar=afe7ffbc2ca9d44964004a1d2eeb69426b66970c49152c994c01df46d8739f427cea8d938719cfa9eb38347b07e5b4b0d2fb111bec0b1f891a82f251505638d5 > > commons-codec-1.22.1-sources.jar=d253d10be72b389536897c61b5b54a20be88571ce240050f45d044286a905f5e11eddde5023c42a2ef3891b799996f39a26672eebec946f51af5800061ace125 > > commons-codec-1.22.1-src.tar.gz=7b1ed7920282028b35c70b2bdd58e05097a83c80177d8a9b952da92be775b9ac0d06aff988b7d43c5f58646153b0a4282063c6c3576723d109d42efc3975a72c > > commons-codec-1.22.1-src.zip=533f12d752a744017e1b925c4cd995603bd071d2b94257e1adb21b0b8b59c97bf7515ea6a823cbfe0a03c98385a19c9f0a6b421418a319edf67c6eea54590ff5 > > commons-codec-1.22.1-test-sources.jar=bddb40ea9a26808a07af3845fae72d75289e8dd4fc55754f86bcc97a4389640d68dc68a49880b3e9d9292faa07a0c512f2d6d180458006b6f0857ffae0f8481e > > commons-codec-1.22.1-tests.jar=c772592944848555f96df261c75dd0cb55b5be2b2626318a05703f93f1601dacec3224644a166fdbc70ddc7f9c6fc7c1521b04f658787e188e632e08887ff072 > > commons-codec_commons-codec-1.22.1.spdx.json=ac86ee3d890c7692bf7ee887324381a13cae7630c490bfe0f3fcb5bf42bf5b703f8cf00b1a8596f4fc58bdffc76d8a51ff55a5eeb23c6a59229ecfd0f39aada5 > > > > > > I have tested this with 'mvn' and 'mvn clean install site' using: > > > > openjdk version "21.0.12" 2026-07-21 > > OpenJDK Runtime Environment Homebrew (build 21.0.12) > > OpenJDK 64-Bit Server VM Homebrew (build 21.0.12, mixed mode, sharing) > > > > Apache Maven 3.9.16 (2bdd9fddda4b155ebf8000e807eb73fd829a51d5) > > Maven home: /opt/homebrew/Cellar/maven/3.9.16/libexec > > Java version: 21.0.12, vendor: Homebrew, runtime: > > /opt/homebrew/Cellar/openjdk@21/21.0.12/libexec/openjdk.jdk/Contents/Home > > Default locale: en_US, platform encoding: UTF-8 > > OS name: "mac os x", version: "26.5.2", arch: "aarch64", family: "mac" > > > > Darwin Garys-MacBook-Pro.local 25.5.0 Darwin Kernel Version 25.5.0: > > Tue Jun 9 22:28:34 PDT 2026; > > root:xnu-12377.121.10~1/RELEASE_ARM64_T6041 arm64 > > > > Docker version 29.4.3, build 055a478 > > > > > > Details of changes since 1.22.0 are in the release notes: > > > > https://dist.apache.org/repos/dist/dev/commons/codec/1.22.1-RC1/RELEASE-NOTES.txt > > > > https://dist.apache.org/repos/dist/dev/commons/codec/1.22.1-RC1/site/changes.html > > > > Site: > > > > https://dist.apache.org/repos/dist/dev/commons/codec/1.22.1-RC1/site/index.html > > (Note some *relative* links are broken and the 1.22.1 directories > > are not yet created - these will be OK once the site is deployed.) > > > > JApiCmp Report (compared to 1.22.0): > > > > https://dist.apache.org/repos/dist/dev/commons/codec/1.22.1-RC1/site/japicmp.html > > > > RAT Report: > > > > https://dist.apache.org/repos/dist/dev/commons/codec/1.22.1-RC1/site/rat-report.html > > > > KEYS: > > https://downloads.apache.org/commons/KEYS > > > > Please review the release candidate and vote. > > This vote will close no sooner than 72 hours from now. > > > > [ ] +1 Release these artifacts > > [ ] +0 OK, but... > > [ ] -0 OK, but really should fix... > > [ ] -1 I oppose this release because... > > > > Thank you, > > > > Gary Gregory, > > Release Manager (using key 530AA5F25C25011F) > > > > The following is intended as a helper and refresher for reviewers. > > > > Validating a release candidate > > ============================== > > > > These guidelines are NOT complete. > > > > Requirements: Git, Java, and Maven. > > > > You can validate a release from a release candidate (RC) tag as follows. > > > > 1a) Download and decompress the source archive from: > > > > https://dist.apache.org/repos/dist/dev/commons/codec/1.22.1-RC1/source > > > > 1b) Check out the RC tag from git (optional) > > > > This is optional, as a reviewer must at least check source distributions. > > > > git clone https://gitbox.apache.org/repos/asf/commons-codec.git > > --branch commons-codec-1.22.1-RC1 commons-codec-1.22.1-RC1 > > cd commons-codec-1.22.1-RC1 > > > > 2) Checking the build > > > > All components should include a default Maven goal, such that you can > > run 'mvn' from the command line by itself. > > > > 2) Check Apache licenses > > > > This step is not required if the site includes a RAT report page, > > which you then must check. > > This check should be included in the default Maven build, but you can > > check it with: > > > > mvn apache-rat:check > > > > 3) Check binary compatibility > > > > This step is not required if the site includes a JApiCmp report page, > > which you then must check. > > This check should be included in the default Maven build, but you can > > check it with: > > > > mvn verify -DskipTests -P japicmp japicmp:cmp > > > > 4) Build the package > > > > This check should be included in the default Maven build, but you can > > check it with: > > > > mvn -V clean package > > > > You can record the Maven and Java version produced by -V in your VOTE reply. > > To gather OS information from a command line: > > Windows: ver > > Linux: uname -a > > > > 4b) Check reproducibility > > > > To check that a build is reproducible, run: > > > > mvn clean verify artifact:compare -DskipTests > > -Dreference.repo=https://repository.apache.org/content/repositories/staging/ > > '-Dbuildinfo.ignore=*/*.spdx.json' > > > > Note that this excludes SPDX files from the check. > > > > 5) Build the site for a single module project > > > > Note: Some plugins require the components to be installed instead of > > packaged. > > > > mvn site > > Check the site reports in: > > - Windows: target\site\index.html > > - Linux: target/site/index.html > > > > -the end- > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: [email protected] > > For additional commands, e-mail: [email protected] > > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
