I get a build failure: INFO] --- artifact:3.5.0:compare (default-cli) @ log4j-bom --- [ERROR] project.build.outputTimestamp property should not be inherited but defined in POM /Users/garydgregory/rc/log4j/src/.flattened-pom.xml Downloading from reference: https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.buildinfo [INFO] Reference buildinfo file not found: it will be generated from downloaded reference artifacts Downloading from reference: https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom Downloaded from reference: https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom (12 kB at 86 kB/s) Downloading from reference: https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml Downloaded from reference: https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml (704 kB at 949 kB/s) [INFO] Minimal buildinfo generated from downloaded artifacts: /Users/garydgregory/rc/log4j/src/target/reference/log4j-bom-2.23.1.buildinfo [ERROR] sha512 mismatch log4j-bom-2.23.1-cyclonedx.xml: investigate with diffoscope target/reference/org.apache.logging.log4j/log4j-bom-2.23.1-cyclonedx.xml target/bom.xml [ERROR] Reproducible Build output summary: 1 files ok, 1 different [ERROR] see diff target/reference/log4j-bom-2.23.1.buildinfo target/log4j-bom-2.23.1.buildinfo [ERROR] see also https://maven.apache.org/guides/mini/guide-reproducible-builds.html [INFO] Reproducible Build output comparison saved to /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare [INFO] Aggregate buildcompare copied to /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare [INFO] ------------------------------------------------------------------------ [INFO] Reactor Summary for Apache Log4j BOM 2.23.1: [INFO] [INFO] Apache Log4j BOM ................................... FAILURE [ 37.006 s] [INFO] Apache Log4j Parent ................................ SKIPPED <snip>
Running: sh mvnw -Prelease verify artifact:compare -Dreference.repo=$NEXUS_REPO where NEXUS_REPO is https://repository.apache.org/content/repositories/orgapachelogging-1261 Using: openjdk version "17.0.10" 2024-01-16 OpenJDK Runtime Environment Homebrew (build 17.0.10+0) OpenJDK 64-Bit Server VM Homebrew (build 17.0.10+0, mixed mode, sharing) Apache Maven 3.9.6 (bc0240f3c744dd6b6ec2920b3cd08dcc295161ae) Maven home: /usr/local/Cellar/maven/3.9.6/libexec Java version: 17.0.10, vendor: Homebrew, runtime: /usr/local/Cellar/openjdk@17/17.0.10/libexec/openjdk.jdk/Contents/Home Default locale: en_US, platform encoding: UTF-8 OS name: "mac os x", version: "14.3.1", arch: "x86_64", family: "mac" Darwin **** 23.3.0 Darwin Kernel Version 23.3.0: Wed Dec 20 21:28:58 PST 2023; root:xnu-10002.81.5~7/RELEASE_X86_64 x86_64 Gary On Wed, Mar 6, 2024 at 8:13 AM Volkan Yazıcı <vol...@yazi.ci> wrote: > > This is a vote to release the Apache Log4j 2.23.1. > > Website: https://logging.staged.apache.org/log4j > GitHub: https://github.com/apache/logging-log4j2 > Commit: fea2a7116160fb1555d578406444b4fc4f0ef2da > Distribution: https://dist.apache.org/repos/dist/dev/logging/log4j > Nexus: > https://repository.apache.org/content/repositories/orgapachelogging-1261 > Signing key: 0x077e8893a6dcc33dd4a4d5b256e73ba9a0b592d0 > > Please download, test, and cast your votes on this mailing list. > > [ ] +1, release the artifacts > [ ] -1, don't release, because... > > This vote is open for 72 hours and will pass unless getting a > net negative vote count. All votes are welcome and we encourage > everyone to test the release, but only the Logging Services PMC > votes are officially counted. > > == Review kit > > The minimum set of steps needed to review the uploaded distribution > files in the Subversion repository can be summarized as follows: > > # Check out the distribution > svn co https://dist.apache.org/repos/... && cd $_ > > # Verify checksums > shasum --check *.sha512 > > # Verify signatures > wget -O - https://downloads.apache.org/logging/KEYS | gpg --import > for sigFile in *.asc; do gpg --verify $sigFile; done > > # Verify reproduciblity > umask 0022 > unzip *-src.zip -d src > cd src > export NEXUS_REPO=https://repository.apache.org/content/... > sh mvnw -Prelease verify artifact:compare -Dreference.repo=$NEXUS_REPO > # If preferred, augment `mvnw` with `-DskipTests` to speed things up > > == Release notes > > This release contains several small fixes and some dependency updates. > > === Changed > * Improve performance of `CloseableThreadContext#closeMap()` (#2296) > > === Fixed > > * Fix handling of `LoggerContextAware` lookups (#2309) > * Fix NPE in `PatternProcessor` for a `UNIX_MILLIS` pattern (#2346) > * Fix that parameterized message formatting doesn't throw an exception > when there are insufficient number of parameters (#2343) > * Fix `StatusLogger` log level filtering when debug mode is enabled (#2337) > * Add `log4j2.StatusLogger.dateFormatZone` system property to set the > time-zone `StatusLogger` uses to format `java.time.Instant`. Without > this, formatting patterns accessing to time-zone-specific fields > (e.g., year-of-era) cause failures. (#2322) > * Fix `StatusLogger` to correctly read > `log4j2.StatusLogger.properties` resource (#2354) > * Fix stack overflow in `StatusLogger` (#2322) > > === Updated > > * Update `jakarta.activation:jakarta.activation-api` to version `2.1.3` > (#2335) > * Update `jakarta.mail:jakarta.mail-api` to version `2.1.3` (#2348) > * Update `org.apache.commons:commons-compress` to version `1.26.0` (#2304) > * Update `org.apache.commons:commons-dbcp2` to version `2.12.0` (#2344) > * Update `org.apache.kafka:kafka-clients` to version `3.7.0` (#2326) > * Update `org.eclipse.angus:angus-activation` to version `2.0.2` (#2336) > * Update `org.eclipse.angus:jakarta.mail` to version `2.0.3` (#2349)
