Re: [ALL] Dormant components and projects.a.o
On Tue, 24 Oct 2023 at 20:47, Gary Gregory wrote: > > Or have a dormant section on the page? What page are you referring to? Note that DOAPs appear in several places on the site: e.g OGNL appears on: https://projects.apache.org/project.html?commons-ognl https://projects.apache.org/committee.html?commons https://projects.apache.org/projects.html?category https://projects.apache.org/projects.html?language https://projects.apache.org/projects.html?number I'm hopeful that the '(Dormant)' suffix I added will appear on all these pages for OGNL (and Chain, Functor). It would be a lot of work to have a separate Dormant section on the site, and anyway dormancy only applies to a few projects (possibly only Commons). Does not seem right to make PMC-specific changes. But I'm doubtful that it makes sense to continue to publish details of dormant components on projects.a.o. Sebb > Gary > > On Tue, Oct 24, 2023, 3:37 PM sebb wrote: > > > I've updated the DOAPs for dormant components to add a (Dormant) suffix. > > > > However, I wonder if it might not be better to drop the components > > from projects.a.o? > > > > Note that most of the dormant components are not in projects.a.o as > > they do not have DOAPs. > > > > Sebb > > > > - > > To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org > > For additional commands, e-mail: dev-h...@commons.apache.org > > > > - To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org For additional commands, e-mail: dev-h...@commons.apache.org
Re: [ALL] Dormant components and projects.a.o
Or have a dormant section on the page? Gary On Tue, Oct 24, 2023, 3:37 PM sebb wrote: > I've updated the DOAPs for dormant components to add a (Dormant) suffix. > > However, I wonder if it might not be better to drop the components > from projects.a.o? > > Note that most of the dormant components are not in projects.a.o as > they do not have DOAPs. > > Sebb > > - > To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org > For additional commands, e-mail: dev-h...@commons.apache.org > >
[ALL] Dormant components and projects.a.o
I've updated the DOAPs for dormant components to add a (Dormant) suffix. However, I wonder if it might not be better to drop the components from projects.a.o? Note that most of the dormant components are not in projects.a.o as they do not have DOAPs. Sebb - To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org For additional commands, e-mail: dev-h...@commons.apache.org
Re: [DISCUSS] - Move commons-chain to dormant?
Done On Sun, 22 Oct 2023 at 14:40, Rob Tompkins wrote: > > +1 > > > On Oct 21, 2023, at 7:46 PM, Gary Gregory wrote: > > > > Seems reasonable to me. > > > > Gary > > > > On Sat, Oct 21, 2023, 6:49 PM sebb wrote: > > > >> Reviving this thread. > >> > >> I think we should now change chain to dormant. > >> > >> Sebb > >> > >> On Sun, 8 Oct 2017 at 16:10, Pascal Schumacher > >> wrote: > >>> > >>> Looks like Apache Tiles 3 does not use commons-chain. > >>> > >>> The only mention of commons-chain I could find in > >>> https://github.com/apache/tiles/tree/trunk was an exclusion a of > >>> transitive commons-chain dependency. > >>> > >>> https://tiles.apache.org/framework/tiles-compat/dependencies.html also > >>> does not list commons-chain. > >>> > >>> Looks like the most popular project depending on commons-chain was > >>> Struts (but only till 1.3.x (last released in 2008)). > >>> > >>> According to > >>> > >> https://mvnrepository.com/artifact/commons-chain/commons-chain/1.2/usages > >>> "Magnolia" and "eXo JCR" are the most popular projects using > >> commons-chain. > >>> > >>> -Pascal > >>> > >>> Am 08.10.2017 um 16:48 schrieb Rob Tompkins: > What’s the largest project that depends upon it? Apache “Tiles” seems > >> to. > > -Rob > > > On Oct 8, 2017, at 9:44 AM, Benedikt Ritter > >> wrote: > > > > > > > >> Am 07.10.2017 um 12:35 schrieb Pascal Schumacher < > >> pascalschumac...@gmx.net>: > >> > >> Hello everybody, > >> > >> the last commons-chain release is from 2008. > >> > >> The last bugfix/feature commits are from 2013. > >> > >> Since 2013 only one bugfix/feature released issue was created in > >> JIRA. > >> > >> Maybe it is time to move the component to dormant? > >> > >> What do you think? > > We had somebody asking for the component a few weeks ago, but that is > >> everything that has happened in ages. So +1 > > > >> -Pascal > >> > >> > >> > >> > >> > >> > >> - > >> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org > >> For additional commands, e-mail: dev-h...@commons.apache.org > >> > > > > - > > To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org > > For additional commands, e-mail: dev-h...@commons.apache.org > > > - > To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org > For additional commands, e-mail: dev-h...@commons.apache.org > > >>> > >>> > >>> - > >>> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org > >>> For additional commands, e-mail: dev-h...@commons.apache.org > >>> > >> > >> - > >> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org > >> For additional commands, e-mail: dev-h...@commons.apache.org > >> > >> > > > - > To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org > For additional commands, e-mail: dev-h...@commons.apache.org > - To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org For additional commands, e-mail: dev-h...@commons.apache.org
Re: [VOTE] Release Apache Commons Text 1.11.0 based on RC1
It's worth triaging the bug tracker sometime. At a quick glance I saw several other issues that are arguably security related, mostly around character escaping and unescaping. On Tue, Oct 24, 2023 at 11:43 AM Gary Gregory wrote: > > The issue is a year old with zero comments, I downgraded it to "Major". > > What's worse is that if it were a real security issue, it should have gone > through our security protocol and not a Jira (initially at least). > > Gary > > On Tue, Oct 24, 2023, 10:32 AM Elliotte Rusty Harold > wrote: > > > > > https://issues.apache.org/jira/projects/TEXT/issues/TEXT-220?filter=allopenissues > > is prirotized as a blocker. I haven't analyzed it in detail so I'm not > > sure, but it is security related. If it is a blocker it should be > > resolved before 1.11.0. If it is not a blocker, then the priority > > should be downgraded. > > > > On Tue, Oct 24, 2023 at 9:47 AM Gary Gregory > > wrote: > > > > > > We have fixed quite a few bugs and added some significant enhancements > > > since Apache Commons Text 1.10.0 was released, so I would like to > > > release Apache Commons Text 1.11.0. > > > > > > Apache Commons Text 1.11.0 RC1 is available for review here: > > > https://dist.apache.org/repos/dist/dev/commons/text/1.11.0-RC1 > > > (svn revision 64797) > > > > > > The Git tag commons-text-1.11.0-RC1 commit for this RC is > > > 6e2be58f54bb8e376fbb5188ad964cde2ff6f362 which you can browse here: > > > > > https://gitbox.apache.org/repos/asf?p=commons-text.git;a=commit;h=6e2be58f54bb8e376fbb5188ad964cde2ff6f362 > > > You may checkout this tag using: > > > git clone https://gitbox.apache.org/repos/asf/commons-text.git > > > --branch commons-text-1.11.0-RC1 commons-text-1.11.0-RC1 > > > > > > Maven artifacts are here: > > > > > https://repository.apache.org/content/repositories/orgapachecommons-1670/org/apache/commons/commons-text/1.11.0/ > > > > > > These are the artifacts and their hashes: > > > > > > #Release SHA-512s > > > #Tue Oct 24 09:39:25 EDT 2023 > > > > > commons-text-1.11.0-bin.tar.gz=2e94877000dd270b69e2e8cbf49f258a90b4c628b6b6b0814e300a2f0e9c391f0816dceb0707e596ae3b7c9532f93e7a4917df47c77f44b3a810e14042ce5f3f > > > > > commons-text-1.11.0-bin.zip=f2480ffc6e9d1d678233830602da1c525814cfb8e951872dc4725d3a8e1957dcef8291309dc6ad20789003f04d61e21901eeb606d8f7a946e41c599dd0f35141 > > > > > commons-text-1.11.0-bom.json=1acd3a1a3b297f7460b8eb13d0e156644076186de422eaefd74af38e35885190c87e1ff4179222b6d96537a06069df2d03eb77b1bb24ccce8f854bb491e78334 > > > > > commons-text-1.11.0-bom.xml=e17bdf02c8704b62b5a3e27d500675704ffba3dd6d934b5f0877261feebac52037faa6f85eea3823422d5dcdcbc35314ec874c189c0cd20a82093a8598bfa7b9 > > > > > commons-text-1.11.0-javadoc.jar=63eb0a2c9004854d43ed3ea6e113af07aa2d11632af5beb17a3b1da8f65ef0cecb74e10ac2b496f67e4760cdeaf6925647d4b1fccd40dd6ce66dc076009c42d8 > > > > > commons-text-1.11.0-sources.jar=d937fe2eb28fa28a7b345338cc05b5101f3303baa501f8f6ad4a0efb604375b90997292bcccbdc994889415c3ea709b8b18497a04f83f050661db92a7f5ccaae > > > > > commons-text-1.11.0-src.tar.gz=3a97b58eae3e8a51fe46c3296021622bfe912869b2d9666c745f345d574bbc86307acfb39b329c6a544728b35d200487c6b752de1909a209692a2f00fb260460 > > > > > commons-text-1.11.0-src.zip=72d75261812df2f004aa680d6fbe5c71b77558f89ff03d117363f77811dfbda891c5f489dbae40132063ab1db1d5d30ca81da0674c79c817e9527b260d7a8560 > > > > > commons-text-1.11.0-test-sources.jar=44191a4135b572397131517eac9394564fef0129693110ced2e0d1c8585857b6eedebec8f653bb70f79d74e0334dcc7cc1f663a9101c262651e6e973251e875a > > > > > commons-text-1.11.0-tests.jar=e7d8c3d6e8c056fe793864d8cac4aa84e49789609fc7ea73270a3ba9829451300d4b6663641a013e3fc25d0ae97f57fc1258b303d89f6ed23c44116b22c0989c > > > > > org.apache.commons_commons-text-1.11.0.spdx.json=64b008e082a13db858015e8680183a83d4a29be73dba66b5eb49b6ea77e11b676f1f8b997ab4fce49f0778423b97612516139679af1cb552b3adf65f296cccb7 > > > > > > I have tested this with: > > > > > > mvn -V -Prelease -Ptest-deploy -P jacoco -P japicmp clean package site > > deploy > > > > > > Using: > > > > > > Apache Maven 3.9.5 (57804ffe001d7215b5e7bcb531cf83df38f93546) > > > Maven home: /usr/local/Cellar/maven/3.9.5/libexec > > > Java version: 21, vendor: Homebrew, runtime: > > > /usr/local/Cellar/openjdk/21/libexec/openjdk.jdk/Contents/Home > > > Default locale: en_US, platform encoding: UTF-8 > > > OS name: "mac os x", version: "14.0", arch: "x86_64", family: "mac" > > > Darwin gdg-mac-mini.local 23.0.0 Darwin Kernel Version 23.0.0: Fri Sep > > > 15 14:42:42 PDT 2023; root:xnu-10002.1.13~1/RELEASE_X86_64 x86_64 > > > > > > Details of changes since 1.10.0 are in the release notes: > > > > > https://dist.apache.org/repos/dist/dev/commons/text/1.11.0-RC1/RELEASE-NOTES.txt > > > > > https://dist.apache.org/repos/dist/dev/commons/text/1.11.0-RC1/site/changes-report.html > > > > > > Site: > > > > > https://dist.apache.org/repos/dist/dev/commons/text/1.11.0-RC1/site/index.html > > > (note some *relative* links are broken and the
Re: [VOTE] Release Apache Commons Text 1.11.0 based on RC1
The issue is a year old with zero comments, I downgraded it to "Major". What's worse is that if it were a real security issue, it should have gone through our security protocol and not a Jira (initially at least). Gary On Tue, Oct 24, 2023, 10:32 AM Elliotte Rusty Harold wrote: > > https://issues.apache.org/jira/projects/TEXT/issues/TEXT-220?filter=allopenissues > is prirotized as a blocker. I haven't analyzed it in detail so I'm not > sure, but it is security related. If it is a blocker it should be > resolved before 1.11.0. If it is not a blocker, then the priority > should be downgraded. > > On Tue, Oct 24, 2023 at 9:47 AM Gary Gregory > wrote: > > > > We have fixed quite a few bugs and added some significant enhancements > > since Apache Commons Text 1.10.0 was released, so I would like to > > release Apache Commons Text 1.11.0. > > > > Apache Commons Text 1.11.0 RC1 is available for review here: > > https://dist.apache.org/repos/dist/dev/commons/text/1.11.0-RC1 > > (svn revision 64797) > > > > The Git tag commons-text-1.11.0-RC1 commit for this RC is > > 6e2be58f54bb8e376fbb5188ad964cde2ff6f362 which you can browse here: > > > https://gitbox.apache.org/repos/asf?p=commons-text.git;a=commit;h=6e2be58f54bb8e376fbb5188ad964cde2ff6f362 > > You may checkout this tag using: > > git clone https://gitbox.apache.org/repos/asf/commons-text.git > > --branch commons-text-1.11.0-RC1 commons-text-1.11.0-RC1 > > > > Maven artifacts are here: > > > https://repository.apache.org/content/repositories/orgapachecommons-1670/org/apache/commons/commons-text/1.11.0/ > > > > These are the artifacts and their hashes: > > > > #Release SHA-512s > > #Tue Oct 24 09:39:25 EDT 2023 > > > commons-text-1.11.0-bin.tar.gz=2e94877000dd270b69e2e8cbf49f258a90b4c628b6b6b0814e300a2f0e9c391f0816dceb0707e596ae3b7c9532f93e7a4917df47c77f44b3a810e14042ce5f3f > > > commons-text-1.11.0-bin.zip=f2480ffc6e9d1d678233830602da1c525814cfb8e951872dc4725d3a8e1957dcef8291309dc6ad20789003f04d61e21901eeb606d8f7a946e41c599dd0f35141 > > > commons-text-1.11.0-bom.json=1acd3a1a3b297f7460b8eb13d0e156644076186de422eaefd74af38e35885190c87e1ff4179222b6d96537a06069df2d03eb77b1bb24ccce8f854bb491e78334 > > > commons-text-1.11.0-bom.xml=e17bdf02c8704b62b5a3e27d500675704ffba3dd6d934b5f0877261feebac52037faa6f85eea3823422d5dcdcbc35314ec874c189c0cd20a82093a8598bfa7b9 > > > commons-text-1.11.0-javadoc.jar=63eb0a2c9004854d43ed3ea6e113af07aa2d11632af5beb17a3b1da8f65ef0cecb74e10ac2b496f67e4760cdeaf6925647d4b1fccd40dd6ce66dc076009c42d8 > > > commons-text-1.11.0-sources.jar=d937fe2eb28fa28a7b345338cc05b5101f3303baa501f8f6ad4a0efb604375b90997292bcccbdc994889415c3ea709b8b18497a04f83f050661db92a7f5ccaae > > > commons-text-1.11.0-src.tar.gz=3a97b58eae3e8a51fe46c3296021622bfe912869b2d9666c745f345d574bbc86307acfb39b329c6a544728b35d200487c6b752de1909a209692a2f00fb260460 > > > commons-text-1.11.0-src.zip=72d75261812df2f004aa680d6fbe5c71b77558f89ff03d117363f77811dfbda891c5f489dbae40132063ab1db1d5d30ca81da0674c79c817e9527b260d7a8560 > > > commons-text-1.11.0-test-sources.jar=44191a4135b572397131517eac9394564fef0129693110ced2e0d1c8585857b6eedebec8f653bb70f79d74e0334dcc7cc1f663a9101c262651e6e973251e875a > > > commons-text-1.11.0-tests.jar=e7d8c3d6e8c056fe793864d8cac4aa84e49789609fc7ea73270a3ba9829451300d4b6663641a013e3fc25d0ae97f57fc1258b303d89f6ed23c44116b22c0989c > > > org.apache.commons_commons-text-1.11.0.spdx.json=64b008e082a13db858015e8680183a83d4a29be73dba66b5eb49b6ea77e11b676f1f8b997ab4fce49f0778423b97612516139679af1cb552b3adf65f296cccb7 > > > > I have tested this with: > > > > mvn -V -Prelease -Ptest-deploy -P jacoco -P japicmp clean package site > deploy > > > > Using: > > > > Apache Maven 3.9.5 (57804ffe001d7215b5e7bcb531cf83df38f93546) > > Maven home: /usr/local/Cellar/maven/3.9.5/libexec > > Java version: 21, vendor: Homebrew, runtime: > > /usr/local/Cellar/openjdk/21/libexec/openjdk.jdk/Contents/Home > > Default locale: en_US, platform encoding: UTF-8 > > OS name: "mac os x", version: "14.0", arch: "x86_64", family: "mac" > > Darwin gdg-mac-mini.local 23.0.0 Darwin Kernel Version 23.0.0: Fri Sep > > 15 14:42:42 PDT 2023; root:xnu-10002.1.13~1/RELEASE_X86_64 x86_64 > > > > Details of changes since 1.10.0 are in the release notes: > > > https://dist.apache.org/repos/dist/dev/commons/text/1.11.0-RC1/RELEASE-NOTES.txt > > > https://dist.apache.org/repos/dist/dev/commons/text/1.11.0-RC1/site/changes-report.html > > > > Site: > > > https://dist.apache.org/repos/dist/dev/commons/text/1.11.0-RC1/site/index.html > > (note some *relative* links are broken and the 1.11.0 directories > > are not yet created - these will be OK once the site is deployed.) > > > > JApiCmp Report (compared to 1.10.0): > > > https://dist.apache.org/repos/dist/dev/commons/text/1.11.0-RC1/site/japicmp.html > > > > RAT Report: > > > https://dist.apache.org/repos/dist/dev/commons/text/1.11.0-RC1/site/rat-report.html > > > > KEYS: > > https://downloads.apache.org/commons/KEYS > > > > Please revie
Re: [VOTE] Release Apache Commons Text 1.11.0 based on RC1
https://issues.apache.org/jira/projects/TEXT/issues/TEXT-220?filter=allopenissues is prirotized as a blocker. I haven't analyzed it in detail so I'm not sure, but it is security related. If it is a blocker it should be resolved before 1.11.0. If it is not a blocker, then the priority should be downgraded. On Tue, Oct 24, 2023 at 9:47 AM Gary Gregory wrote: > > We have fixed quite a few bugs and added some significant enhancements > since Apache Commons Text 1.10.0 was released, so I would like to > release Apache Commons Text 1.11.0. > > Apache Commons Text 1.11.0 RC1 is available for review here: > https://dist.apache.org/repos/dist/dev/commons/text/1.11.0-RC1 > (svn revision 64797) > > The Git tag commons-text-1.11.0-RC1 commit for this RC is > 6e2be58f54bb8e376fbb5188ad964cde2ff6f362 which you can browse here: > > https://gitbox.apache.org/repos/asf?p=commons-text.git;a=commit;h=6e2be58f54bb8e376fbb5188ad964cde2ff6f362 > You may checkout this tag using: > git clone https://gitbox.apache.org/repos/asf/commons-text.git > --branch commons-text-1.11.0-RC1 commons-text-1.11.0-RC1 > > Maven artifacts are here: > > https://repository.apache.org/content/repositories/orgapachecommons-1670/org/apache/commons/commons-text/1.11.0/ > > These are the artifacts and their hashes: > > #Release SHA-512s > #Tue Oct 24 09:39:25 EDT 2023 > commons-text-1.11.0-bin.tar.gz=2e94877000dd270b69e2e8cbf49f258a90b4c628b6b6b0814e300a2f0e9c391f0816dceb0707e596ae3b7c9532f93e7a4917df47c77f44b3a810e14042ce5f3f > commons-text-1.11.0-bin.zip=f2480ffc6e9d1d678233830602da1c525814cfb8e951872dc4725d3a8e1957dcef8291309dc6ad20789003f04d61e21901eeb606d8f7a946e41c599dd0f35141 > commons-text-1.11.0-bom.json=1acd3a1a3b297f7460b8eb13d0e156644076186de422eaefd74af38e35885190c87e1ff4179222b6d96537a06069df2d03eb77b1bb24ccce8f854bb491e78334 > commons-text-1.11.0-bom.xml=e17bdf02c8704b62b5a3e27d500675704ffba3dd6d934b5f0877261feebac52037faa6f85eea3823422d5dcdcbc35314ec874c189c0cd20a82093a8598bfa7b9 > commons-text-1.11.0-javadoc.jar=63eb0a2c9004854d43ed3ea6e113af07aa2d11632af5beb17a3b1da8f65ef0cecb74e10ac2b496f67e4760cdeaf6925647d4b1fccd40dd6ce66dc076009c42d8 > commons-text-1.11.0-sources.jar=d937fe2eb28fa28a7b345338cc05b5101f3303baa501f8f6ad4a0efb604375b90997292bcccbdc994889415c3ea709b8b18497a04f83f050661db92a7f5ccaae > commons-text-1.11.0-src.tar.gz=3a97b58eae3e8a51fe46c3296021622bfe912869b2d9666c745f345d574bbc86307acfb39b329c6a544728b35d200487c6b752de1909a209692a2f00fb260460 > commons-text-1.11.0-src.zip=72d75261812df2f004aa680d6fbe5c71b77558f89ff03d117363f77811dfbda891c5f489dbae40132063ab1db1d5d30ca81da0674c79c817e9527b260d7a8560 > commons-text-1.11.0-test-sources.jar=44191a4135b572397131517eac9394564fef0129693110ced2e0d1c8585857b6eedebec8f653bb70f79d74e0334dcc7cc1f663a9101c262651e6e973251e875a > commons-text-1.11.0-tests.jar=e7d8c3d6e8c056fe793864d8cac4aa84e49789609fc7ea73270a3ba9829451300d4b6663641a013e3fc25d0ae97f57fc1258b303d89f6ed23c44116b22c0989c > org.apache.commons_commons-text-1.11.0.spdx.json=64b008e082a13db858015e8680183a83d4a29be73dba66b5eb49b6ea77e11b676f1f8b997ab4fce49f0778423b97612516139679af1cb552b3adf65f296cccb7 > > I have tested this with: > > mvn -V -Prelease -Ptest-deploy -P jacoco -P japicmp clean package site deploy > > Using: > > Apache Maven 3.9.5 (57804ffe001d7215b5e7bcb531cf83df38f93546) > Maven home: /usr/local/Cellar/maven/3.9.5/libexec > Java version: 21, vendor: Homebrew, runtime: > /usr/local/Cellar/openjdk/21/libexec/openjdk.jdk/Contents/Home > Default locale: en_US, platform encoding: UTF-8 > OS name: "mac os x", version: "14.0", arch: "x86_64", family: "mac" > Darwin gdg-mac-mini.local 23.0.0 Darwin Kernel Version 23.0.0: Fri Sep > 15 14:42:42 PDT 2023; root:xnu-10002.1.13~1/RELEASE_X86_64 x86_64 > > Details of changes since 1.10.0 are in the release notes: > > https://dist.apache.org/repos/dist/dev/commons/text/1.11.0-RC1/RELEASE-NOTES.txt > > https://dist.apache.org/repos/dist/dev/commons/text/1.11.0-RC1/site/changes-report.html > > Site: > > https://dist.apache.org/repos/dist/dev/commons/text/1.11.0-RC1/site/index.html > (note some *relative* links are broken and the 1.11.0 directories > are not yet created - these will be OK once the site is deployed.) > > JApiCmp Report (compared to 1.10.0): > > https://dist.apache.org/repos/dist/dev/commons/text/1.11.0-RC1/site/japicmp.html > > RAT Report: > > https://dist.apache.org/repos/dist/dev/commons/text/1.11.0-RC1/site/rat-report.html > > KEYS: > https://downloads.apache.org/commons/KEYS > > Please review the release candidate and vote. > This vote will close no sooner than 72 hours from now. > > [ ] +1 Release these artifacts > [ ] +0 OK, but... > [ ] -0 OK, but really should fix... > [ ] -1 I oppose this release because... > > Thank you, > > Gary Gregory, > Release Manager (using key 86fdc7e2a11262cb) > > For following is intended as a helper and refresher for reviewers. > > Validating a release candidate > ==
[VOTE] Release Apache Commons Text 1.11.0 based on RC1
We have fixed quite a few bugs and added some significant enhancements since Apache Commons Text 1.10.0 was released, so I would like to release Apache Commons Text 1.11.0. Apache Commons Text 1.11.0 RC1 is available for review here: https://dist.apache.org/repos/dist/dev/commons/text/1.11.0-RC1 (svn revision 64797) The Git tag commons-text-1.11.0-RC1 commit for this RC is 6e2be58f54bb8e376fbb5188ad964cde2ff6f362 which you can browse here: https://gitbox.apache.org/repos/asf?p=commons-text.git;a=commit;h=6e2be58f54bb8e376fbb5188ad964cde2ff6f362 You may checkout this tag using: git clone https://gitbox.apache.org/repos/asf/commons-text.git --branch commons-text-1.11.0-RC1 commons-text-1.11.0-RC1 Maven artifacts are here: https://repository.apache.org/content/repositories/orgapachecommons-1670/org/apache/commons/commons-text/1.11.0/ These are the artifacts and their hashes: #Release SHA-512s #Tue Oct 24 09:39:25 EDT 2023 commons-text-1.11.0-bin.tar.gz=2e94877000dd270b69e2e8cbf49f258a90b4c628b6b6b0814e300a2f0e9c391f0816dceb0707e596ae3b7c9532f93e7a4917df47c77f44b3a810e14042ce5f3f commons-text-1.11.0-bin.zip=f2480ffc6e9d1d678233830602da1c525814cfb8e951872dc4725d3a8e1957dcef8291309dc6ad20789003f04d61e21901eeb606d8f7a946e41c599dd0f35141 commons-text-1.11.0-bom.json=1acd3a1a3b297f7460b8eb13d0e156644076186de422eaefd74af38e35885190c87e1ff4179222b6d96537a06069df2d03eb77b1bb24ccce8f854bb491e78334 commons-text-1.11.0-bom.xml=e17bdf02c8704b62b5a3e27d500675704ffba3dd6d934b5f0877261feebac52037faa6f85eea3823422d5dcdcbc35314ec874c189c0cd20a82093a8598bfa7b9 commons-text-1.11.0-javadoc.jar=63eb0a2c9004854d43ed3ea6e113af07aa2d11632af5beb17a3b1da8f65ef0cecb74e10ac2b496f67e4760cdeaf6925647d4b1fccd40dd6ce66dc076009c42d8 commons-text-1.11.0-sources.jar=d937fe2eb28fa28a7b345338cc05b5101f3303baa501f8f6ad4a0efb604375b90997292bcccbdc994889415c3ea709b8b18497a04f83f050661db92a7f5ccaae commons-text-1.11.0-src.tar.gz=3a97b58eae3e8a51fe46c3296021622bfe912869b2d9666c745f345d574bbc86307acfb39b329c6a544728b35d200487c6b752de1909a209692a2f00fb260460 commons-text-1.11.0-src.zip=72d75261812df2f004aa680d6fbe5c71b77558f89ff03d117363f77811dfbda891c5f489dbae40132063ab1db1d5d30ca81da0674c79c817e9527b260d7a8560 commons-text-1.11.0-test-sources.jar=44191a4135b572397131517eac9394564fef0129693110ced2e0d1c8585857b6eedebec8f653bb70f79d74e0334dcc7cc1f663a9101c262651e6e973251e875a commons-text-1.11.0-tests.jar=e7d8c3d6e8c056fe793864d8cac4aa84e49789609fc7ea73270a3ba9829451300d4b6663641a013e3fc25d0ae97f57fc1258b303d89f6ed23c44116b22c0989c org.apache.commons_commons-text-1.11.0.spdx.json=64b008e082a13db858015e8680183a83d4a29be73dba66b5eb49b6ea77e11b676f1f8b997ab4fce49f0778423b97612516139679af1cb552b3adf65f296cccb7 I have tested this with: mvn -V -Prelease -Ptest-deploy -P jacoco -P japicmp clean package site deploy Using: Apache Maven 3.9.5 (57804ffe001d7215b5e7bcb531cf83df38f93546) Maven home: /usr/local/Cellar/maven/3.9.5/libexec Java version: 21, vendor: Homebrew, runtime: /usr/local/Cellar/openjdk/21/libexec/openjdk.jdk/Contents/Home Default locale: en_US, platform encoding: UTF-8 OS name: "mac os x", version: "14.0", arch: "x86_64", family: "mac" Darwin gdg-mac-mini.local 23.0.0 Darwin Kernel Version 23.0.0: Fri Sep 15 14:42:42 PDT 2023; root:xnu-10002.1.13~1/RELEASE_X86_64 x86_64 Details of changes since 1.10.0 are in the release notes: https://dist.apache.org/repos/dist/dev/commons/text/1.11.0-RC1/RELEASE-NOTES.txt https://dist.apache.org/repos/dist/dev/commons/text/1.11.0-RC1/site/changes-report.html Site: https://dist.apache.org/repos/dist/dev/commons/text/1.11.0-RC1/site/index.html (note some *relative* links are broken and the 1.11.0 directories are not yet created - these will be OK once the site is deployed.) JApiCmp Report (compared to 1.10.0): https://dist.apache.org/repos/dist/dev/commons/text/1.11.0-RC1/site/japicmp.html RAT Report: https://dist.apache.org/repos/dist/dev/commons/text/1.11.0-RC1/site/rat-report.html KEYS: https://downloads.apache.org/commons/KEYS Please review the release candidate and vote. This vote will close no sooner than 72 hours from now. [ ] +1 Release these artifacts [ ] +0 OK, but... [ ] -0 OK, but really should fix... [ ] -1 I oppose this release because... Thank you, Gary Gregory, Release Manager (using key 86fdc7e2a11262cb) For following is intended as a helper and refresher for reviewers. Validating a release candidate == These guidelines are NOT complete. Requirements: Git, Java, Maven. You can validate a release from a release candidate (RC) tag as follows. 1a) Clone and checkout the RC tag git clone https://gitbox.apache.org/repos/asf/commons-text.git --branch commons-text-1.11.0-RC1 commons-text-1.11.0-RC1 cd commons-text-1.11.0-RC1 1b) Download and unpack the source archive from: https://dist.apache.org/repos/dist/dev/commons/text/1.11.0-RC1/source 2) Check Apache licenses This step is not required