FYI: the different hash algorithms in CycloneDX SBOM is due to Azul JDK 8 vs other JDK 8 distributions Azul backported to JDK 8 newer hash algorithms from JDK 11, and cyclonedx-maven-plugin uses by default every hash algorithm available on the JVM
for the record, checking binaries during a vote is just about using artifact:compare goal: mvn clean verify artifact:compare -Dreference.repo=https://repository.apache.org/content/repositories/staging/ once the vote is over, ignore the staging reference repo if you want to check against Maven Central third party checks are there https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/apache/directory/api/README.md Regards, Hervé On 2024/02/06 00:55:47 Brian Demers wrote: > +1 - Binding > > I checked that the artifacts were reproducible. > Jars were good, the cyclonedx plugin output was generated differently on my > machine, different hash algorithms. I assume there is something environment > specific happening, but that's not a blocker for release (and I'm guessing > it's user error) > Also validated source zip was signed by a key in the KEYS file > > > On Thu, Feb 1, 2024 at 5:52 PM Emmanuel Lecharny <elecha...@apache.org> > wrote: > > > Hi all, > > > > this is a vote for the release of Apache LDAP API 2.1.6 > > > > This release is fixing a DSML search filter serialization issue. > > > > The revision : > > > > > > https://github.com/apache/directory-ldap-api/tree/c4d1a83b712bacf24c36f9fe5eacde330eff9a81 > > > > The source and binary distribution packages: > > https://dist.apache.org/repos/dist/dev/directory/api/2.1.6 > > > > The staging repository: > > https://repository.apache.org/content/repositories/orgapachedirectory-1225/ > > > > > > Please cast your votes: > > [ ] +1 Release Apache LDAP API 2.1.6 > > [ ] 0 abstain > > [ ] -1 Do not release Apache LDAP API 2.1.6 > > > > > > Thanks ! > > > > > > -- > > Regards, > > Cordialement, > > Emmanuel Lécharny > > www.iktek.com > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org > > For additional commands, e-mail: dev-h...@directory.apache.org > > > > > --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
