FYI, jackrabbit-webapp-*.war has executable flag on dependencies jar in WEB-INF/lib, which is adding unexpected requirement in the environment to rebuild: 2.21.24 is like previous releases
see https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/apache/jackrabbit/jackrabbit/README.md for details: I can explain more if needed you can check yourself your local build output against staged binaries with: mvn -Papache-release -Dgpg.skip clean verify \ artifact:compare -Dreference.repo=https://repository.apache.org/content/repositories/staging/ If the executable flag is just an unwanted fact on the machine where the release has been done, simply deleting local repository content should recreate everything Notice: this does not prevent the release to be ok, just something to improve for next release if possible Regards, Hervé On 2024/02/18 06:19:02 Woonsan Ko wrote: > [X] +1 Release this package as Apache Jackrabbit 2.21.24 > > ...where... > > [INFO] Apache Maven 3.9.5 (57804ffe001d7215b5e7bcb531cf83df38f93546) > [INFO] OS name: "windows 11", version: "10.0", arch: "amd64", family: > "windows" > [INFO] Java version: 11.0.20, vendor: Oracle Corporation, runtime: > C:\Java\jdk-11 > [INFO] MAVEN_OPTS: > > Regards, > > Woonsan > > On Sun, Feb 18, 2024 at 3:10 AM Julian Reschke <julian.resc...@gmx.de> wrote: > > > > A candidate for the Jackrabbit 2.21.24 release is available at: > > > > https://dist.apache.org/repos/dist/dev/jackrabbit/2.21.24/ > > > > The release candidate is a zip archive of the sources in: > > > > https://svn.apache.org/repos/asf/jackrabbit/tags/jackrabbit-2.21.24/ > > > > The SHA1 checksum of the archive is > > 5e8041f3cd09386d79d68176392c880d4e94aacb. > > > > A staged Maven repository is available for review at: > > > > https://repository.apache.org/ > > > > The command for running automated checks against this release candidate is: > > > > # run in SVN checkout of > > https://dist.apache.org/repos/dist/dev/jackrabbit/ > > $ sh check-release.sh jackrabbit 2.21.24 > > 5e8041f3cd09386d79d68176392c880d4e94aacb > > > > Please vote on releasing this package as Apache Jackrabbit 2.21.24. > > The vote is open for the next 72 hours and passes if a majority of at > > least three +1 Jackrabbit PMC votes are cast. > > > > [ ] +1 Release this package as Apache Jackrabbit 2.21.24 > > [ ] -1 Do not release this package because... > > > > Best regards, Julian >