rm -rf ~/.m2/repository/org/apache/logging/log4j/*/2.23.1*
export 
NEXUS_REPO=https://repository.apache.org/content/repositories/orgapachelogging-1261
sh mvnw -Prelease verify artifact:compare -Dreference.repo=$NEXUS_REPO

Gary

On Wed, Mar 6, 2024 at 9:33 AM Volkan Yazıcı <vol...@yazi.ci> wrote:
>
> Which command are you exactly running?
>
> Could you share the `target/bom.xml` and `target/log4j-bom-2.23.1.buildinfo` 
> files too, please?
>
> On Wed, Mar 6, 2024 at 3:28 PM Gary Gregory <garydgreg...@gmail.com> wrote:
>>
>> Same :-(
>>
>> [INFO] --- bnd-baseline:7.0.0:baseline (check-api-compat) @ log4j-bom ---
>> [INFO] skip project with packaging=pom
>> [INFO]
>> [INFO] --- artifact:3.5.0:compare (default-cli) @ log4j-bom ---
>> [ERROR] project.build.outputTimestamp property should not be inherited
>> but defined in POM /Users/garydgregory/rc/log4j/src/.flattened-pom.xml
>> Downloading from reference:
>> https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.buildinfo
>> [INFO] Reference buildinfo file not found: it will be generated from
>> downloaded reference artifacts
>> Downloading from reference:
>> https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom
>> Downloaded from reference:
>> https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom
>> (12 kB at 77 kB/s)
>> Downloading from reference:
>> https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml
>> Downloaded from reference:
>> https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml
>> (704 kB at 914 kB/s)
>> [INFO] Minimal buildinfo generated from downloaded artifacts:
>> /Users/garydgregory/rc/log4j/src/target/reference/log4j-bom-2.23.1.buildinfo
>> [ERROR] sha512 mismatch log4j-bom-2.23.1-cyclonedx.xml: investigate
>> with diffoscope
>> target/reference/org.apache.logging.log4j/log4j-bom-2.23.1-cyclonedx.xml
>> target/bom.xml
>> [ERROR] Reproducible Build output summary: 1 files ok, 1 different
>> [ERROR] see diff target/reference/log4j-bom-2.23.1.buildinfo
>> target/log4j-bom-2.23.1.buildinfo
>> [ERROR] see also
>> https://maven.apache.org/guides/mini/guide-reproducible-builds.html
>> [INFO] Reproducible Build output comparison saved to
>> /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare
>> [INFO] Aggregate buildcompare copied to
>> /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare
>> [INFO] 
>> ------------------------------------------------------------------------
>> [INFO] Reactor Summary for Apache Log4j BOM 2.23.1:
>> [INFO]
>> [INFO] Apache Log4j BOM ................................... FAILURE [ 38.689 
>> s]
>> [INFO] Apache Log4j Parent ................................ SKIPPED
>>
>> Gary
>>
>> On Wed, Mar 6, 2024 at 9:23 AM Volkan Yazıcı <vol...@yazi.ci> wrote:
>> >
>> > Could you retry after cleaning up your local repository, please? That is,
>> >
>> >     rm -rf ~/.m2/repository/org/apache/logging/log4j/*/2.23.1*
>> >
>> >
>> >
>> > On Wed, Mar 6, 2024 at 3:03 PM Gary Gregory <garydgreg...@gmail.com> wrote:
>> >
>> > > I get a build failure:
>> > >
>> > > INFO] --- artifact:3.5.0:compare (default-cli) @ log4j-bom ---
>> > > [ERROR] project.build.outputTimestamp property should not be inherited
>> > > but defined in POM /Users/garydgregory/rc/log4j/src/.flattened-pom.xml
>> > > Downloading from reference:
>> > >
>> > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.buildinfo
>> > > [INFO] Reference buildinfo file not found: it will be generated from
>> > > downloaded reference artifacts
>> > > Downloading from reference:
>> > >
>> > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom
>> > > Downloaded from reference:
>> > >
>> > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom
>> > > (12 kB at 86 kB/s)
>> > > Downloading from reference:
>> > >
>> > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml
>> > > Downloaded from reference:
>> > >
>> > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml
>> > > (704 kB at 949 kB/s)
>> > > [INFO] Minimal buildinfo generated from downloaded artifacts:
>> > >
>> > > /Users/garydgregory/rc/log4j/src/target/reference/log4j-bom-2.23.1.buildinfo
>> > > [ERROR] sha512 mismatch log4j-bom-2.23.1-cyclonedx.xml: investigate
>> > > with diffoscope
>> > > target/reference/org.apache.logging.log4j/log4j-bom-2.23.1-cyclonedx.xml
>> > > target/bom.xml
>> > > [ERROR] Reproducible Build output summary: 1 files ok, 1 different
>> > > [ERROR] see diff target/reference/log4j-bom-2.23.1.buildinfo
>> > > target/log4j-bom-2.23.1.buildinfo
>> > > [ERROR] see also
>> > > https://maven.apache.org/guides/mini/guide-reproducible-builds.html
>> > > [INFO] Reproducible Build output comparison saved to
>> > > /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare
>> > > [INFO] Aggregate buildcompare copied to
>> > > /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare
>> > > [INFO]
>> > > ------------------------------------------------------------------------
>> > > [INFO] Reactor Summary for Apache Log4j BOM 2.23.1:
>> > > [INFO]
>> > > [INFO] Apache Log4j BOM ................................... FAILURE [
>> > > 37.006 s]
>> > > [INFO] Apache Log4j Parent ................................ SKIPPED
>> > > <snip>
>> > >
>> > > Running:
>> > > sh mvnw -Prelease verify artifact:compare -Dreference.repo=$NEXUS_REPO
>> > >
>> > > where NEXUS_REPO is
>> > > https://repository.apache.org/content/repositories/orgapachelogging-1261
>> > >
>> > > Using:
>> > >
>> > > openjdk version "17.0.10" 2024-01-16
>> > > OpenJDK Runtime Environment Homebrew (build 17.0.10+0)
>> > > OpenJDK 64-Bit Server VM Homebrew (build 17.0.10+0, mixed mode, sharing)
>> > >
>> > > Apache Maven 3.9.6 (bc0240f3c744dd6b6ec2920b3cd08dcc295161ae)
>> > > Maven home: /usr/local/Cellar/maven/3.9.6/libexec
>> > > Java version: 17.0.10, vendor: Homebrew, runtime:
>> > > /usr/local/Cellar/openjdk@17/17.0.10/libexec/openjdk.jdk/Contents/Home
>> > > Default locale: en_US, platform encoding: UTF-8
>> > > OS name: "mac os x", version: "14.3.1", arch: "x86_64", family: "mac"
>> > >
>> > > Darwin **** 23.3.0 Darwin Kernel Version 23.3.0: Wed Dec 20 21:28:58
>> > > PST 2023; root:xnu-10002.81.5~7/RELEASE_X86_64 x86_64
>> > >
>> > > Gary
>> > >
>> > > On Wed, Mar 6, 2024 at 8:13 AM Volkan Yazıcı <vol...@yazi.ci> wrote:
>> > > >
>> > > > This is a vote to release the Apache Log4j 2.23.1.
>> > > >
>> > > > Website: https://logging.staged.apache.org/log4j
>> > > > GitHub: https://github.com/apache/logging-log4j2
>> > > > Commit: fea2a7116160fb1555d578406444b4fc4f0ef2da
>> > > > Distribution: https://dist.apache.org/repos/dist/dev/logging/log4j
>> > > > Nexus:
>> > > https://repository.apache.org/content/repositories/orgapachelogging-1261
>> > > > Signing key: 0x077e8893a6dcc33dd4a4d5b256e73ba9a0b592d0
>> > > >
>> > > > Please download, test, and cast your votes on this mailing list.
>> > > >
>> > > > [ ] +1, release the artifacts
>> > > > [ ] -1, don't release, because...
>> > > >
>> > > > This vote is open for 72 hours and will pass unless getting a
>> > > > net negative vote count. All votes are welcome and we encourage
>> > > > everyone to test the release, but only the Logging Services PMC
>> > > > votes are officially counted.
>> > > >
>> > > > == Review kit
>> > > >
>> > > > The minimum set of steps needed to review the uploaded distribution
>> > > > files in the Subversion repository can be summarized as follows:
>> > > >
>> > > >     # Check out the distribution
>> > > >     svn co https://dist.apache.org/repos/... && cd $_
>> > > >
>> > > >     # Verify checksums
>> > > >     shasum --check *.sha512
>> > > >
>> > > >     # Verify signatures
>> > > >     wget -O - https://downloads.apache.org/logging/KEYS | gpg --import
>> > > >     for sigFile in *.asc; do gpg --verify $sigFile; done
>> > > >
>> > > >     # Verify reproduciblity
>> > > >     umask 0022
>> > > >     unzip *-src.zip -d src
>> > > >     cd src
>> > > >     export NEXUS_REPO=https://repository.apache.org/content/...
>> > > >     sh mvnw -Prelease verify artifact:compare
>> > > -Dreference.repo=$NEXUS_REPO
>> > > >     # If preferred, augment `mvnw` with `-DskipTests` to speed things 
>> > > > up
>> > > >
>> > > > == Release notes
>> > > >
>> > > > This release contains several small fixes and some dependency updates.
>> > > >
>> > > > === Changed
>> > > > * Improve performance of `CloseableThreadContext#closeMap()` (#2296)
>> > > >
>> > > > === Fixed
>> > > >
>> > > > * Fix handling of `LoggerContextAware` lookups (#2309)
>> > > > * Fix NPE in `PatternProcessor` for a `UNIX_MILLIS` pattern (#2346)
>> > > > * Fix that parameterized message formatting doesn't throw an exception
>> > > > when there are insufficient number of parameters (#2343)
>> > > > * Fix `StatusLogger` log level filtering when debug mode is enabled
>> > > (#2337)
>> > > > * Add `log4j2.StatusLogger.dateFormatZone` system property to set the
>> > > > time-zone `StatusLogger` uses to format `java.time.Instant`. Without
>> > > > this, formatting patterns accessing to time-zone-specific fields
>> > > > (e.g., year-of-era) cause failures. (#2322)
>> > > > * Fix `StatusLogger` to correctly read
>> > > > `log4j2.StatusLogger.properties` resource (#2354)
>> > > > * Fix stack overflow in `StatusLogger` (#2322)
>> > > >
>> > > > === Updated
>> > > >
>> > > > * Update `jakarta.activation:jakarta.activation-api` to version `2.1.3`
>> > > (#2335)
>> > > > * Update `jakarta.mail:jakarta.mail-api` to version `2.1.3` (#2348)
>> > > > * Update `org.apache.commons:commons-compress` to version `1.26.0`
>> > > (#2304)
>> > > > * Update `org.apache.commons:commons-dbcp2` to version `2.12.0` (#2344)
>> > > > * Update `org.apache.kafka:kafka-clients` to version `3.7.0` (#2326)
>> > > > * Update `org.eclipse.angus:angus-activation` to version `2.0.2` 
>> > > > (#2336)
>> > > > * Update `org.eclipse.angus:jakarta.mail` to version `2.0.3` (#2349)
>> > >

Reply via email to