FYI, jackrabbit-webapp-*.war has executable flag on dependencies jar in 
WEB-INF/lib, which is adding unexpected requirement in the environment to 
rebuild: 2.21.24 is like previous releases

see 
https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/apache/jackrabbit/jackrabbit/README.md
 for details: I can explain more if needed

you can check yourself your local build output against staged binaries with: 
mvn -Papache-release -Dgpg.skip clean verify \
    artifact:compare 
-Dreference.repo=https://repository.apache.org/content/repositories/staging/

If the executable flag is just an unwanted fact on the machine where the 
release has been done, simply deleting local repository content should recreate 
everything

Notice: this does not prevent the release to be ok, just something to improve 
for next release if possible

Regards,

Hervé

On 2024/02/18 06:19:02 Woonsan Ko wrote:
> [X] +1 Release this package as Apache Jackrabbit 2.21.24
> 
> ...where...
> 
> [INFO] Apache Maven 3.9.5 (57804ffe001d7215b5e7bcb531cf83df38f93546)
> [INFO] OS name: "windows 11", version: "10.0", arch: "amd64", family: 
> "windows"
> [INFO] Java version: 11.0.20, vendor: Oracle Corporation, runtime:
> C:\Java\jdk-11
> [INFO] MAVEN_OPTS:
> 
> Regards,
> 
> Woonsan
> 
> On Sun, Feb 18, 2024 at 3:10 AM Julian Reschke <julian.resc...@gmx.de> wrote:
> >
> > A candidate for the Jackrabbit 2.21.24 release is available at:
> >
> >      https://dist.apache.org/repos/dist/dev/jackrabbit/2.21.24/
> >
> > The release candidate is a zip archive of the sources in:
> >
> >      https://svn.apache.org/repos/asf/jackrabbit/tags/jackrabbit-2.21.24/
> >
> > The SHA1 checksum of the archive is
> > 5e8041f3cd09386d79d68176392c880d4e94aacb.
> >
> > A staged Maven repository is available for review at:
> >
> >      https://repository.apache.org/
> >
> > The command for running automated checks against this release candidate is:
> >
> >      # run in SVN checkout of
> > https://dist.apache.org/repos/dist/dev/jackrabbit/
> >      $ sh check-release.sh jackrabbit 2.21.24
> > 5e8041f3cd09386d79d68176392c880d4e94aacb
> >
> > Please vote on releasing this package as Apache Jackrabbit 2.21.24.
> > The vote is open for the next 72 hours and passes if a majority of at
> > least three +1 Jackrabbit PMC votes are cast.
> >
> >      [ ] +1 Release this package as Apache Jackrabbit 2.21.24
> >      [ ] -1 Do not release this package because...
> >
> > Best regards, Julian
> 

Reply via email to