Re: [VOTE] Release Apache Log4net 2.0.16
+1 Verified the following: * apache-log4net-source-2.0.16.zip and associated sha/signature * apache-log4net-binaries-2.0.16.zip and associated sha/signature It looks all good to me. -Robert Middleton On Tue, Mar 5, 2024 at 1:20 AM Ralph Goers wrote: > > +1 > > Verified signatures > Verified hashes > Verified License and Notice files. > > Note - the copyright year should be the first year the code was created. You > can update it to include “-(currentYear}” but that is not strictly necessary. > > Ralph > > > On Mar 4, 2024, at 10:48 AM, Jan Friedrich wrote: > > > > +1 > > > > Unit tests on my machine were successful. > > We integrated the new version into our test environment and all manual > > tests were successful. > > > > Jan > > > >> +1 > > > >> Verified signatures. > >> Verified hashes. > > > >> `NOTICE` contains 2022 as the copyright year, but I don't find it a > >> blocker. (I have fixed it in `master`.) > > > >> On Fri, Mar 1, 2024 at 2:19 PM Davyd McColl wrote: > > > >>> Hi all > >>> > >>> > >>> This is the vote to release Apache log4net version 2.0.16 > >>> > >>> > >>> Website: > >>> https://logging.staged.apache.org/log4net/release/release-notes.html > >>> > >>> GitHub: https://github.com/apache/logging-log4net > >>> > >>> GitHub release (pre-release): > >>> https://github.com/apache/logging-log4net/releases/tag/2.0.16-rc1 > >>> > >>> Distribution: I'm not sure - > >>> https://dist.apache.org/repos/dist/dev/logging/log4net should have > >>> 2.0.16 binaries and source (I've added via SVN), but I'm not seeing > >>> them. Any help appreciated. > >>> > >>> > >>> > >>> Please have a look at the staging site & artifacts and test (if you can > >>> - clone, `npm i`, `npm test`) > >>> > >>> [ ] +1, release the artifacts > >>> > >>> [ ] -1, don't release, because > >>> > >>> > >>> (thanks Piotr: I copied most of your last VOTE mail!) > >>> > >>> > >>> -d > >>> > >>> > > >
Re: [VOTE] Release Apache Log4j 2.23.1
On Wed, 6 Mar 2024 at 14:13, Volkan Yazıcı wrote: > > This is a vote to release the Apache Log4j 2.23.1. > > Website: https://logging.staged.apache.org/log4j > GitHub: https://github.com/apache/logging-log4j2 > Commit: fea2a7116160fb1555d578406444b4fc4f0ef2da > Distribution: https://dist.apache.org/repos/dist/dev/logging/log4j > Nexus: > https://repository.apache.org/content/repositories/orgapachelogging-1261 > Signing key: 0x077e8893a6dcc33dd4a4d5b256e73ba9a0b592d0 > > Please download, test, and cast your votes on this mailing list. > > [ ] +1, release the artifacts > [ ] -1, don't release, because... * the source and binary archive checksums match, * the source and binary archive signatures match, * the source archive compiles and passes tests, * the generated artifacts are identical to those in the Maven repo, * the generated artifacts are identical to those in the binary archive, * the `log4j-samples-jlink` project works with Log4j 2.23.1. Therefore +1: release the artifacts. Piotr
Re: [VOTE] Release Apache Log4j 2.23.1
All better now: +1 For details see: [log4j] `2.23.1` reproducibility failure (Was: [VOTE] Release Apache Log4j 2.23.1) Gary On Wed, Mar 6, 2024 at 9:26 AM Gary Gregory wrote: > > Same :-( > > [INFO] --- bnd-baseline:7.0.0:baseline (check-api-compat) @ log4j-bom --- > [INFO] skip project with packaging=pom > [INFO] > [INFO] --- artifact:3.5.0:compare (default-cli) @ log4j-bom --- > [ERROR] project.build.outputTimestamp property should not be inherited > but defined in POM /Users/garydgregory/rc/log4j/src/.flattened-pom.xml > Downloading from reference: > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.buildinfo > [INFO] Reference buildinfo file not found: it will be generated from > downloaded reference artifacts > Downloading from reference: > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > Downloaded from reference: > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > (12 kB at 77 kB/s) > Downloading from reference: > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > Downloaded from reference: > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > (704 kB at 914 kB/s) > [INFO] Minimal buildinfo generated from downloaded artifacts: > /Users/garydgregory/rc/log4j/src/target/reference/log4j-bom-2.23.1.buildinfo > [ERROR] sha512 mismatch log4j-bom-2.23.1-cyclonedx.xml: investigate > with diffoscope > target/reference/org.apache.logging.log4j/log4j-bom-2.23.1-cyclonedx.xml > target/bom.xml > [ERROR] Reproducible Build output summary: 1 files ok, 1 different > [ERROR] see diff target/reference/log4j-bom-2.23.1.buildinfo > target/log4j-bom-2.23.1.buildinfo > [ERROR] see also > https://maven.apache.org/guides/mini/guide-reproducible-builds.html > [INFO] Reproducible Build output comparison saved to > /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare > [INFO] Aggregate buildcompare copied to > /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare > [INFO] > > [INFO] Reactor Summary for Apache Log4j BOM 2.23.1: > [INFO] > [INFO] Apache Log4j BOM ... FAILURE [ 38.689 > s] > [INFO] Apache Log4j Parent SKIPPED > > Gary > > On Wed, Mar 6, 2024 at 9:23 AM Volkan Yazıcı wrote: > > > > Could you retry after cleaning up your local repository, please? That is, > > > > rm -rf ~/.m2/repository/org/apache/logging/log4j/*/2.23.1* > > > > > > > > On Wed, Mar 6, 2024 at 3:03 PM Gary Gregory wrote: > > > > > I get a build failure: > > > > > > INFO] --- artifact:3.5.0:compare (default-cli) @ log4j-bom --- > > > [ERROR] project.build.outputTimestamp property should not be inherited > > > but defined in POM /Users/garydgregory/rc/log4j/src/.flattened-pom.xml > > > Downloading from reference: > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.buildinfo > > > [INFO] Reference buildinfo file not found: it will be generated from > > > downloaded reference artifacts > > > Downloading from reference: > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > > > Downloaded from reference: > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > > > (12 kB at 86 kB/s) > > > Downloading from reference: > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > > > Downloaded from reference: > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > > > (704 kB at 949 kB/s) > > > [INFO] Minimal buildinfo generated from downloaded artifacts: > > > > > > /Users/garydgregory/rc/log4j/src/target/reference/log4j-bom-2.23.1.buildinfo > > > [ERROR] sha512 mismatch log4j-bom-2.23.1-cyclonedx.xml: investigate > > > with diffoscope > > > target/reference/org.apache.logging.log4j/log4j-bom-2.23.1-cyclonedx.xml > > > target/bom.xml > > > [ERROR] Reproducible Build output summary: 1 files ok, 1 different > > > [ERROR] see diff target/reference/log4j-bom-2.23.1.buildinfo > > > target/log4j-bom-2.23.1.buildinfo > > > [ERROR] see also > > > https://maven.apache.org/guides/mini/guide-reproducible-builds.html > > > [INFO] Reproducible Build output comparison s
Re: [log4j] `2.23.1` reproducibility failure (Was: [VOTE] Release Apache Log4j 2.23.1)
The build was completed successfully. Gary On Wed, Mar 6, 2024 at 11:02 AM Gary Gregory wrote: > > I nuked the whole thing (rm -rf ~/.m2/repository/) for good measure > (I'll do that once a month from now on). > > Building (and downloading the world)... > > It's made it past log4j-bom so we might be looking good... > > TY! > Gary > > On Wed, Mar 6, 2024 at 10:33 AM Volkan Yazıcı wrote: > > > > Could you do `rm -rf ~/.m2/repository/org/apache/commons` and retry, > > please? (If you compare `target/bom.xml`s you can see that your local > > `commons-*` clones have different hashes.) > > > > On Wed, Mar 6, 2024 at 4:00 PM Gary Gregory wrote: > > > > > On Wed, Mar 6, 2024 at 9:54 AM Volkan Yazıcı wrote: > > > > > > > > Could you share the `target/bom.xml` and > > > > > > https://paste.apache.org/za0k3 > > > > > > > `target/log4j-bom-2.23.1.buildinfo` files too, please? > > > > > > https://paste.apache.org/1403q > > > > > > Gary > > > > > > > > > > > On Wed, Mar 6, 2024 at 3:35 PM Gary Gregory > > > wrote: > > > > > > > > > rm -rf ~/.m2/repository/org/apache/logging/log4j/*/2.23.1* > > > > > export NEXUS_REPO= > > > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261 > > > > > sh mvnw -Prelease verify artifact:compare -Dreference.repo=$NEXUS_REPO > > > > > > > > > > Gary > > > > > > > > > > On Wed, Mar 6, 2024 at 9:33 AM Volkan Yazıcı wrote: > > > > > > > > > > > > Which command are you exactly running? > > > > > > > > > > > > Could you share the `target/bom.xml` and > > > > > `target/log4j-bom-2.23.1.buildinfo` files too, please? > > > > > > > > > > > > On Wed, Mar 6, 2024 at 3:28 PM Gary Gregory > > > > > wrote: > > > > > >> > > > > > >> Same :-( > > > > > >> > > > > > >> [INFO] --- bnd-baseline:7.0.0:baseline (check-api-compat) @ > > > log4j-bom > > > > > --- > > > > > >> [INFO] skip project with packaging=pom > > > > > >> [INFO] > > > > > >> [INFO] --- artifact:3.5.0:compare (default-cli) @ log4j-bom --- > > > > > >> [ERROR] project.build.outputTimestamp property should not be > > > inherited > > > > > >> but defined in POM > > > /Users/garydgregory/rc/log4j/src/.flattened-pom.xml > > > > > >> Downloading from reference: > > > > > >> > > > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.buildinfo > > > > > >> [INFO] Reference buildinfo file not found: it will be generated > > > > > >> from > > > > > >> downloaded reference artifacts > > > > > >> Downloading from reference: > > > > > >> > > > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > > > > > >> Downloaded from reference: > > > > > >> > > > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > > > > > >> (12 kB at 77 kB/s) > > > > > >> Downloading from reference: > > > > > >> > > > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > > > > > >> Downloaded from reference: > > > > > >> > > > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > > > > > >> (704 kB at 914 kB/s) > > > > > >> [INFO] Minimal buildinfo generated from downloaded artifacts: > > > > > >> > > > > > > > > /Users/garydgregory/rc/log4j/src/target/reference/log4j-bom-2.23.1.buildinfo > > > > > >> [ERROR] sha512 mismatch log4j-bom-2.23.1-cyclonedx.xml: investigate > > > > > >> with diffoscope > > > > > >> > > > target/reference/org.apache.logging.log4j/log4j-bom-2.23.1-cyclonedx.xml > > > > > >> target/bom.xml > > > > > >> [ERROR] Reproducible Build output summary: 1 files ok, 1 different > > > > > >> [ERROR] see diff target/reference/log4j-bom-2.23.1.buildinfo > > > > > >> target/log4j-bom-2.23.1.buildinfo > > > > > >> [ERROR] see also > > > > > >> https://maven.apache.org/guides/mini/guide-reproducible-builds.html > > > > > >> [INFO] Reproducible Build output comparison saved to > > > > > >> > > > /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare > > > > > >> [INFO] Aggregate buildcompare copied to > > > > > >> > > > /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare > > > > > >> [INFO] > > > > > > > > > > > > > >> [INFO] Reactor Summary for Apache Log4j BOM 2.23.1: > > > > > >> [INFO] > > > > > >> [INFO] Apache Log4j BOM ... FAILURE > > > [ > > > > > 38.689 s] > > > > > >> [INFO] Apache Log4j Parent SKIPPED > > > > > >> > > > > > >> Gary > > > > > >> > > > > > >> On Wed, Mar 6, 2024 at 9:23 AM Volkan Yazıcı > > > wrote: > > > > > >> > > > > > > >> > Could you retry after cleaning up
Re: [log4j] `2.23.1` reproducibility failure (Was: [VOTE] Release Apache Log4j 2.23.1)
I nuked the whole thing (rm -rf ~/.m2/repository/) for good measure (I'll do that once a month from now on). Building (and downloading the world)... It's made it past log4j-bom so we might be looking good... TY! Gary On Wed, Mar 6, 2024 at 10:33 AM Volkan Yazıcı wrote: > > Could you do `rm -rf ~/.m2/repository/org/apache/commons` and retry, > please? (If you compare `target/bom.xml`s you can see that your local > `commons-*` clones have different hashes.) > > On Wed, Mar 6, 2024 at 4:00 PM Gary Gregory wrote: > > > On Wed, Mar 6, 2024 at 9:54 AM Volkan Yazıcı wrote: > > > > > > Could you share the `target/bom.xml` and > > > > https://paste.apache.org/za0k3 > > > > > `target/log4j-bom-2.23.1.buildinfo` files too, please? > > > > https://paste.apache.org/1403q > > > > Gary > > > > > > > > On Wed, Mar 6, 2024 at 3:35 PM Gary Gregory > > wrote: > > > > > > > rm -rf ~/.m2/repository/org/apache/logging/log4j/*/2.23.1* > > > > export NEXUS_REPO= > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261 > > > > sh mvnw -Prelease verify artifact:compare -Dreference.repo=$NEXUS_REPO > > > > > > > > Gary > > > > > > > > On Wed, Mar 6, 2024 at 9:33 AM Volkan Yazıcı wrote: > > > > > > > > > > Which command are you exactly running? > > > > > > > > > > Could you share the `target/bom.xml` and > > > > `target/log4j-bom-2.23.1.buildinfo` files too, please? > > > > > > > > > > On Wed, Mar 6, 2024 at 3:28 PM Gary Gregory > > > > wrote: > > > > >> > > > > >> Same :-( > > > > >> > > > > >> [INFO] --- bnd-baseline:7.0.0:baseline (check-api-compat) @ > > log4j-bom > > > > --- > > > > >> [INFO] skip project with packaging=pom > > > > >> [INFO] > > > > >> [INFO] --- artifact:3.5.0:compare (default-cli) @ log4j-bom --- > > > > >> [ERROR] project.build.outputTimestamp property should not be > > inherited > > > > >> but defined in POM > > /Users/garydgregory/rc/log4j/src/.flattened-pom.xml > > > > >> Downloading from reference: > > > > >> > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.buildinfo > > > > >> [INFO] Reference buildinfo file not found: it will be generated from > > > > >> downloaded reference artifacts > > > > >> Downloading from reference: > > > > >> > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > > > > >> Downloaded from reference: > > > > >> > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > > > > >> (12 kB at 77 kB/s) > > > > >> Downloading from reference: > > > > >> > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > > > > >> Downloaded from reference: > > > > >> > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > > > > >> (704 kB at 914 kB/s) > > > > >> [INFO] Minimal buildinfo generated from downloaded artifacts: > > > > >> > > > > > > /Users/garydgregory/rc/log4j/src/target/reference/log4j-bom-2.23.1.buildinfo > > > > >> [ERROR] sha512 mismatch log4j-bom-2.23.1-cyclonedx.xml: investigate > > > > >> with diffoscope > > > > >> > > target/reference/org.apache.logging.log4j/log4j-bom-2.23.1-cyclonedx.xml > > > > >> target/bom.xml > > > > >> [ERROR] Reproducible Build output summary: 1 files ok, 1 different > > > > >> [ERROR] see diff target/reference/log4j-bom-2.23.1.buildinfo > > > > >> target/log4j-bom-2.23.1.buildinfo > > > > >> [ERROR] see also > > > > >> https://maven.apache.org/guides/mini/guide-reproducible-builds.html > > > > >> [INFO] Reproducible Build output comparison saved to > > > > >> > > /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare > > > > >> [INFO] Aggregate buildcompare copied to > > > > >> > > /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare > > > > >> [INFO] > > > > > > > > > > >> [INFO] Reactor Summary for Apache Log4j BOM 2.23.1: > > > > >> [INFO] > > > > >> [INFO] Apache Log4j BOM ... FAILURE > > [ > > > > 38.689 s] > > > > >> [INFO] Apache Log4j Parent SKIPPED > > > > >> > > > > >> Gary > > > > >> > > > > >> On Wed, Mar 6, 2024 at 9:23 AM Volkan Yazıcı > > wrote: > > > > >> > > > > > >> > Could you retry after cleaning up your local repository, please? > > That > > > > is, > > > > >> > > > > > >> > rm -rf ~/.m2/repository/org/apache/logging/log4j/*/2.23.1* > > > > >> > > > > > >> > > > > > >> > > > > > >> > On Wed, Mar 6, 2024 at 3:03 PM Gary Gregory < > > garydgreg...@gmail.com> > > > > wrote: > > > > >> > > > > > >> > > I get a build failure: > > > > >> > > > > > > >
Re: [log4j] `2.23.1` reproducibility failure (Was: [VOTE] Release Apache Log4j 2.23.1)
Could you do `rm -rf ~/.m2/repository/org/apache/commons` and retry, please? (If you compare `target/bom.xml`s you can see that your local `commons-*` clones have different hashes.) On Wed, Mar 6, 2024 at 4:00 PM Gary Gregory wrote: > On Wed, Mar 6, 2024 at 9:54 AM Volkan Yazıcı wrote: > > > > Could you share the `target/bom.xml` and > > https://paste.apache.org/za0k3 > > > `target/log4j-bom-2.23.1.buildinfo` files too, please? > > https://paste.apache.org/1403q > > Gary > > > > > On Wed, Mar 6, 2024 at 3:35 PM Gary Gregory > wrote: > > > > > rm -rf ~/.m2/repository/org/apache/logging/log4j/*/2.23.1* > > > export NEXUS_REPO= > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261 > > > sh mvnw -Prelease verify artifact:compare -Dreference.repo=$NEXUS_REPO > > > > > > Gary > > > > > > On Wed, Mar 6, 2024 at 9:33 AM Volkan Yazıcı wrote: > > > > > > > > Which command are you exactly running? > > > > > > > > Could you share the `target/bom.xml` and > > > `target/log4j-bom-2.23.1.buildinfo` files too, please? > > > > > > > > On Wed, Mar 6, 2024 at 3:28 PM Gary Gregory > > > wrote: > > > >> > > > >> Same :-( > > > >> > > > >> [INFO] --- bnd-baseline:7.0.0:baseline (check-api-compat) @ > log4j-bom > > > --- > > > >> [INFO] skip project with packaging=pom > > > >> [INFO] > > > >> [INFO] --- artifact:3.5.0:compare (default-cli) @ log4j-bom --- > > > >> [ERROR] project.build.outputTimestamp property should not be > inherited > > > >> but defined in POM > /Users/garydgregory/rc/log4j/src/.flattened-pom.xml > > > >> Downloading from reference: > > > >> > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.buildinfo > > > >> [INFO] Reference buildinfo file not found: it will be generated from > > > >> downloaded reference artifacts > > > >> Downloading from reference: > > > >> > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > > > >> Downloaded from reference: > > > >> > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > > > >> (12 kB at 77 kB/s) > > > >> Downloading from reference: > > > >> > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > > > >> Downloaded from reference: > > > >> > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > > > >> (704 kB at 914 kB/s) > > > >> [INFO] Minimal buildinfo generated from downloaded artifacts: > > > >> > > > > /Users/garydgregory/rc/log4j/src/target/reference/log4j-bom-2.23.1.buildinfo > > > >> [ERROR] sha512 mismatch log4j-bom-2.23.1-cyclonedx.xml: investigate > > > >> with diffoscope > > > >> > target/reference/org.apache.logging.log4j/log4j-bom-2.23.1-cyclonedx.xml > > > >> target/bom.xml > > > >> [ERROR] Reproducible Build output summary: 1 files ok, 1 different > > > >> [ERROR] see diff target/reference/log4j-bom-2.23.1.buildinfo > > > >> target/log4j-bom-2.23.1.buildinfo > > > >> [ERROR] see also > > > >> https://maven.apache.org/guides/mini/guide-reproducible-builds.html > > > >> [INFO] Reproducible Build output comparison saved to > > > >> > /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare > > > >> [INFO] Aggregate buildcompare copied to > > > >> > /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare > > > >> [INFO] > > > > > > > >> [INFO] Reactor Summary for Apache Log4j BOM 2.23.1: > > > >> [INFO] > > > >> [INFO] Apache Log4j BOM ... FAILURE > [ > > > 38.689 s] > > > >> [INFO] Apache Log4j Parent SKIPPED > > > >> > > > >> Gary > > > >> > > > >> On Wed, Mar 6, 2024 at 9:23 AM Volkan Yazıcı > wrote: > > > >> > > > > >> > Could you retry after cleaning up your local repository, please? > That > > > is, > > > >> > > > > >> > rm -rf ~/.m2/repository/org/apache/logging/log4j/*/2.23.1* > > > >> > > > > >> > > > > >> > > > > >> > On Wed, Mar 6, 2024 at 3:03 PM Gary Gregory < > garydgreg...@gmail.com> > > > wrote: > > > >> > > > > >> > > I get a build failure: > > > >> > > > > > >> > > INFO] --- artifact:3.5.0:compare (default-cli) @ log4j-bom --- > > > >> > > [ERROR] project.build.outputTimestamp property should not be > > > inherited > > > >> > > but defined in POM > > > /Users/garydgregory/rc/log4j/src/.flattened-pom.xml > > > >> > > Downloading from reference: > > > >> > > > > > >> > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.buildinfo > > > >> > > [INFO] Reference buildinfo file not found: it wi
Re: [log4j] `2.23.1` reproducibility failure (Was: [VOTE] Release Apache Log4j 2.23.1)
On Wed, Mar 6, 2024 at 9:54 AM Volkan Yazıcı wrote: > > Could you share the `target/bom.xml` and https://paste.apache.org/za0k3 > `target/log4j-bom-2.23.1.buildinfo` files too, please? https://paste.apache.org/1403q Gary > > On Wed, Mar 6, 2024 at 3:35 PM Gary Gregory wrote: > > > rm -rf ~/.m2/repository/org/apache/logging/log4j/*/2.23.1* > > export NEXUS_REPO= > > https://repository.apache.org/content/repositories/orgapachelogging-1261 > > sh mvnw -Prelease verify artifact:compare -Dreference.repo=$NEXUS_REPO > > > > Gary > > > > On Wed, Mar 6, 2024 at 9:33 AM Volkan Yazıcı wrote: > > > > > > Which command are you exactly running? > > > > > > Could you share the `target/bom.xml` and > > `target/log4j-bom-2.23.1.buildinfo` files too, please? > > > > > > On Wed, Mar 6, 2024 at 3:28 PM Gary Gregory > > wrote: > > >> > > >> Same :-( > > >> > > >> [INFO] --- bnd-baseline:7.0.0:baseline (check-api-compat) @ log4j-bom > > --- > > >> [INFO] skip project with packaging=pom > > >> [INFO] > > >> [INFO] --- artifact:3.5.0:compare (default-cli) @ log4j-bom --- > > >> [ERROR] project.build.outputTimestamp property should not be inherited > > >> but defined in POM /Users/garydgregory/rc/log4j/src/.flattened-pom.xml > > >> Downloading from reference: > > >> > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.buildinfo > > >> [INFO] Reference buildinfo file not found: it will be generated from > > >> downloaded reference artifacts > > >> Downloading from reference: > > >> > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > > >> Downloaded from reference: > > >> > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > > >> (12 kB at 77 kB/s) > > >> Downloading from reference: > > >> > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > > >> Downloaded from reference: > > >> > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > > >> (704 kB at 914 kB/s) > > >> [INFO] Minimal buildinfo generated from downloaded artifacts: > > >> > > /Users/garydgregory/rc/log4j/src/target/reference/log4j-bom-2.23.1.buildinfo > > >> [ERROR] sha512 mismatch log4j-bom-2.23.1-cyclonedx.xml: investigate > > >> with diffoscope > > >> target/reference/org.apache.logging.log4j/log4j-bom-2.23.1-cyclonedx.xml > > >> target/bom.xml > > >> [ERROR] Reproducible Build output summary: 1 files ok, 1 different > > >> [ERROR] see diff target/reference/log4j-bom-2.23.1.buildinfo > > >> target/log4j-bom-2.23.1.buildinfo > > >> [ERROR] see also > > >> https://maven.apache.org/guides/mini/guide-reproducible-builds.html > > >> [INFO] Reproducible Build output comparison saved to > > >> /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare > > >> [INFO] Aggregate buildcompare copied to > > >> /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare > > >> [INFO] > > > > >> [INFO] Reactor Summary for Apache Log4j BOM 2.23.1: > > >> [INFO] > > >> [INFO] Apache Log4j BOM ... FAILURE [ > > 38.689 s] > > >> [INFO] Apache Log4j Parent SKIPPED > > >> > > >> Gary > > >> > > >> On Wed, Mar 6, 2024 at 9:23 AM Volkan Yazıcı wrote: > > >> > > > >> > Could you retry after cleaning up your local repository, please? That > > is, > > >> > > > >> > rm -rf ~/.m2/repository/org/apache/logging/log4j/*/2.23.1* > > >> > > > >> > > > >> > > > >> > On Wed, Mar 6, 2024 at 3:03 PM Gary Gregory > > wrote: > > >> > > > >> > > I get a build failure: > > >> > > > > >> > > INFO] --- artifact:3.5.0:compare (default-cli) @ log4j-bom --- > > >> > > [ERROR] project.build.outputTimestamp property should not be > > inherited > > >> > > but defined in POM > > /Users/garydgregory/rc/log4j/src/.flattened-pom.xml > > >> > > Downloading from reference: > > >> > > > > >> > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.buildinfo > > >> > > [INFO] Reference buildinfo file not found: it will be generated from > > >> > > downloaded reference artifacts > > >> > > Downloading from reference: > > >> > > > > >> > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > > >> > > Downloaded from reference: > > >> > > > > >> > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > > >> > > (12 kB at 86 kB/s) > > >> > > Downloading
Re: [log4j] `2.23.1` reproducibility failure (Was: [VOTE] Release Apache Log4j 2.23.1)
Could you share the `target/bom.xml` and `target/log4j-bom-2.23.1.buildinfo` files too, please? On Wed, Mar 6, 2024 at 3:35 PM Gary Gregory wrote: > rm -rf ~/.m2/repository/org/apache/logging/log4j/*/2.23.1* > export NEXUS_REPO= > https://repository.apache.org/content/repositories/orgapachelogging-1261 > sh mvnw -Prelease verify artifact:compare -Dreference.repo=$NEXUS_REPO > > Gary > > On Wed, Mar 6, 2024 at 9:33 AM Volkan Yazıcı wrote: > > > > Which command are you exactly running? > > > > Could you share the `target/bom.xml` and > `target/log4j-bom-2.23.1.buildinfo` files too, please? > > > > On Wed, Mar 6, 2024 at 3:28 PM Gary Gregory > wrote: > >> > >> Same :-( > >> > >> [INFO] --- bnd-baseline:7.0.0:baseline (check-api-compat) @ log4j-bom > --- > >> [INFO] skip project with packaging=pom > >> [INFO] > >> [INFO] --- artifact:3.5.0:compare (default-cli) @ log4j-bom --- > >> [ERROR] project.build.outputTimestamp property should not be inherited > >> but defined in POM /Users/garydgregory/rc/log4j/src/.flattened-pom.xml > >> Downloading from reference: > >> > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.buildinfo > >> [INFO] Reference buildinfo file not found: it will be generated from > >> downloaded reference artifacts > >> Downloading from reference: > >> > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > >> Downloaded from reference: > >> > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > >> (12 kB at 77 kB/s) > >> Downloading from reference: > >> > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > >> Downloaded from reference: > >> > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > >> (704 kB at 914 kB/s) > >> [INFO] Minimal buildinfo generated from downloaded artifacts: > >> > /Users/garydgregory/rc/log4j/src/target/reference/log4j-bom-2.23.1.buildinfo > >> [ERROR] sha512 mismatch log4j-bom-2.23.1-cyclonedx.xml: investigate > >> with diffoscope > >> target/reference/org.apache.logging.log4j/log4j-bom-2.23.1-cyclonedx.xml > >> target/bom.xml > >> [ERROR] Reproducible Build output summary: 1 files ok, 1 different > >> [ERROR] see diff target/reference/log4j-bom-2.23.1.buildinfo > >> target/log4j-bom-2.23.1.buildinfo > >> [ERROR] see also > >> https://maven.apache.org/guides/mini/guide-reproducible-builds.html > >> [INFO] Reproducible Build output comparison saved to > >> /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare > >> [INFO] Aggregate buildcompare copied to > >> /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare > >> [INFO] > > >> [INFO] Reactor Summary for Apache Log4j BOM 2.23.1: > >> [INFO] > >> [INFO] Apache Log4j BOM ... FAILURE [ > 38.689 s] > >> [INFO] Apache Log4j Parent SKIPPED > >> > >> Gary > >> > >> On Wed, Mar 6, 2024 at 9:23 AM Volkan Yazıcı wrote: > >> > > >> > Could you retry after cleaning up your local repository, please? That > is, > >> > > >> > rm -rf ~/.m2/repository/org/apache/logging/log4j/*/2.23.1* > >> > > >> > > >> > > >> > On Wed, Mar 6, 2024 at 3:03 PM Gary Gregory > wrote: > >> > > >> > > I get a build failure: > >> > > > >> > > INFO] --- artifact:3.5.0:compare (default-cli) @ log4j-bom --- > >> > > [ERROR] project.build.outputTimestamp property should not be > inherited > >> > > but defined in POM > /Users/garydgregory/rc/log4j/src/.flattened-pom.xml > >> > > Downloading from reference: > >> > > > >> > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.buildinfo > >> > > [INFO] Reference buildinfo file not found: it will be generated from > >> > > downloaded reference artifacts > >> > > Downloading from reference: > >> > > > >> > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > >> > > Downloaded from reference: > >> > > > >> > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > >> > > (12 kB at 86 kB/s) > >> > > Downloading from reference: > >> > > > >> > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > >> > > Downloaded from reference: > >> > > > >> > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/
Re: [log4j] `2.23.1` reproducibility failure (Was: [VOTE] Release Apache Log4j 2.23.1)
rm -rf ~/.m2/repository/org/apache/logging/log4j/*/2.23.1* export NEXUS_REPO=https://repository.apache.org/content/repositories/orgapachelogging-1261 sh mvnw -Prelease verify artifact:compare -Dreference.repo=$NEXUS_REPO Gary On Wed, Mar 6, 2024 at 9:33 AM Volkan Yazıcı wrote: > > Which command are you exactly running? > > Could you share the `target/bom.xml` and `target/log4j-bom-2.23.1.buildinfo` > files too, please? > > On Wed, Mar 6, 2024 at 3:28 PM Gary Gregory wrote: >> >> Same :-( >> >> [INFO] --- bnd-baseline:7.0.0:baseline (check-api-compat) @ log4j-bom --- >> [INFO] skip project with packaging=pom >> [INFO] >> [INFO] --- artifact:3.5.0:compare (default-cli) @ log4j-bom --- >> [ERROR] project.build.outputTimestamp property should not be inherited >> but defined in POM /Users/garydgregory/rc/log4j/src/.flattened-pom.xml >> Downloading from reference: >> https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.buildinfo >> [INFO] Reference buildinfo file not found: it will be generated from >> downloaded reference artifacts >> Downloading from reference: >> https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom >> Downloaded from reference: >> https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom >> (12 kB at 77 kB/s) >> Downloading from reference: >> https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml >> Downloaded from reference: >> https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml >> (704 kB at 914 kB/s) >> [INFO] Minimal buildinfo generated from downloaded artifacts: >> /Users/garydgregory/rc/log4j/src/target/reference/log4j-bom-2.23.1.buildinfo >> [ERROR] sha512 mismatch log4j-bom-2.23.1-cyclonedx.xml: investigate >> with diffoscope >> target/reference/org.apache.logging.log4j/log4j-bom-2.23.1-cyclonedx.xml >> target/bom.xml >> [ERROR] Reproducible Build output summary: 1 files ok, 1 different >> [ERROR] see diff target/reference/log4j-bom-2.23.1.buildinfo >> target/log4j-bom-2.23.1.buildinfo >> [ERROR] see also >> https://maven.apache.org/guides/mini/guide-reproducible-builds.html >> [INFO] Reproducible Build output comparison saved to >> /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare >> [INFO] Aggregate buildcompare copied to >> /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare >> [INFO] >> >> [INFO] Reactor Summary for Apache Log4j BOM 2.23.1: >> [INFO] >> [INFO] Apache Log4j BOM ... FAILURE [ 38.689 >> s] >> [INFO] Apache Log4j Parent SKIPPED >> >> Gary >> >> On Wed, Mar 6, 2024 at 9:23 AM Volkan Yazıcı wrote: >> > >> > Could you retry after cleaning up your local repository, please? That is, >> > >> > rm -rf ~/.m2/repository/org/apache/logging/log4j/*/2.23.1* >> > >> > >> > >> > On Wed, Mar 6, 2024 at 3:03 PM Gary Gregory wrote: >> > >> > > I get a build failure: >> > > >> > > INFO] --- artifact:3.5.0:compare (default-cli) @ log4j-bom --- >> > > [ERROR] project.build.outputTimestamp property should not be inherited >> > > but defined in POM /Users/garydgregory/rc/log4j/src/.flattened-pom.xml >> > > Downloading from reference: >> > > >> > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.buildinfo >> > > [INFO] Reference buildinfo file not found: it will be generated from >> > > downloaded reference artifacts >> > > Downloading from reference: >> > > >> > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom >> > > Downloaded from reference: >> > > >> > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom >> > > (12 kB at 86 kB/s) >> > > Downloading from reference: >> > > >> > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml >> > > Downloaded from reference: >> > > >> > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml >> > > (704 kB at 949 kB/s) >> > > [INFO] Minimal buildinfo generated from downloaded artifacts: >> > > >> > > /Users/garydgregory/rc/log4j/src/target/reference/log4j-bom-2.23.1.buildinfo >> > > [ERROR] sha512 mismatch log4j-bom-2.23.1-cyclonedx.xml: investigate >> > > with diffoscope >> > > target/reference/org.apache.logg
[log4j] `2.23.1` reproducibility failure (Was: [VOTE] Release Apache Log4j 2.23.1)
Which command are you exactly running? Could you share the `target/bom.xml` and `target/log4j-bom-2.23.1.buildinfo` files too, please? On Wed, Mar 6, 2024 at 3:28 PM Gary Gregory wrote: > Same :-( > > [INFO] --- bnd-baseline:7.0.0:baseline (check-api-compat) @ log4j-bom --- > [INFO] skip project with packaging=pom > [INFO] > [INFO] --- artifact:3.5.0:compare (default-cli) @ log4j-bom --- > [ERROR] project.build.outputTimestamp property should not be inherited > but defined in POM /Users/garydgregory/rc/log4j/src/.flattened-pom.xml > Downloading from reference: > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.buildinfo > [INFO] Reference buildinfo file not found: it will be generated from > downloaded reference artifacts > Downloading from reference: > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > Downloaded from reference: > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > (12 kB at 77 kB/s) > Downloading from reference: > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > Downloaded from reference: > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > (704 kB at 914 kB/s) > [INFO] Minimal buildinfo generated from downloaded artifacts: > > /Users/garydgregory/rc/log4j/src/target/reference/log4j-bom-2.23.1.buildinfo > [ERROR] sha512 mismatch log4j-bom-2.23.1-cyclonedx.xml: investigate > with diffoscope > target/reference/org.apache.logging.log4j/log4j-bom-2.23.1-cyclonedx.xml > target/bom.xml > [ERROR] Reproducible Build output summary: 1 files ok, 1 different > [ERROR] see diff target/reference/log4j-bom-2.23.1.buildinfo > target/log4j-bom-2.23.1.buildinfo > [ERROR] see also > https://maven.apache.org/guides/mini/guide-reproducible-builds.html > [INFO] Reproducible Build output comparison saved to > /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare > [INFO] Aggregate buildcompare copied to > /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare > [INFO] > > [INFO] Reactor Summary for Apache Log4j BOM 2.23.1: > [INFO] > [INFO] Apache Log4j BOM ... FAILURE [ > 38.689 s] > [INFO] Apache Log4j Parent SKIPPED > > Gary > > On Wed, Mar 6, 2024 at 9:23 AM Volkan Yazıcı wrote: > > > > Could you retry after cleaning up your local repository, please? That is, > > > > rm -rf ~/.m2/repository/org/apache/logging/log4j/*/2.23.1* > > > > > > > > On Wed, Mar 6, 2024 at 3:03 PM Gary Gregory > wrote: > > > > > I get a build failure: > > > > > > INFO] --- artifact:3.5.0:compare (default-cli) @ log4j-bom --- > > > [ERROR] project.build.outputTimestamp property should not be inherited > > > but defined in POM /Users/garydgregory/rc/log4j/src/.flattened-pom.xml > > > Downloading from reference: > > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.buildinfo > > > [INFO] Reference buildinfo file not found: it will be generated from > > > downloaded reference artifacts > > > Downloading from reference: > > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > > > Downloaded from reference: > > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > > > (12 kB at 86 kB/s) > > > Downloading from reference: > > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > > > Downloaded from reference: > > > > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > > > (704 kB at 949 kB/s) > > > [INFO] Minimal buildinfo generated from downloaded artifacts: > > > > > > > /Users/garydgregory/rc/log4j/src/target/reference/log4j-bom-2.23.1.buildinfo > > > [ERROR] sha512 mismatch log4j-bom-2.23.1-cyclonedx.xml: investigate > > > with diffoscope > > > > target/reference/org.apache.logging.log4j/log4j-bom-2.23.1-cyclonedx.xml > > > target/bom.xml > > > [ERROR] Reproducible Build output summary: 1 files ok, 1 different > > > [ERROR] see diff target/reference/log4j-bom-2.23.1.buildinfo > > > target/log4j-bom-2.23.1.buildinfo > > > [ERROR] see also > > > https://maven.apache.org/guides/mini/guide-reproducible-builds.html > > > [INFO] Reprod
Re: [VOTE] Release Apache Log4j 2.23.1
Same :-( [INFO] --- bnd-baseline:7.0.0:baseline (check-api-compat) @ log4j-bom --- [INFO] skip project with packaging=pom [INFO] [INFO] --- artifact:3.5.0:compare (default-cli) @ log4j-bom --- [ERROR] project.build.outputTimestamp property should not be inherited but defined in POM /Users/garydgregory/rc/log4j/src/.flattened-pom.xml Downloading from reference: https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.buildinfo [INFO] Reference buildinfo file not found: it will be generated from downloaded reference artifacts Downloading from reference: https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom Downloaded from reference: https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom (12 kB at 77 kB/s) Downloading from reference: https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml Downloaded from reference: https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml (704 kB at 914 kB/s) [INFO] Minimal buildinfo generated from downloaded artifacts: /Users/garydgregory/rc/log4j/src/target/reference/log4j-bom-2.23.1.buildinfo [ERROR] sha512 mismatch log4j-bom-2.23.1-cyclonedx.xml: investigate with diffoscope target/reference/org.apache.logging.log4j/log4j-bom-2.23.1-cyclonedx.xml target/bom.xml [ERROR] Reproducible Build output summary: 1 files ok, 1 different [ERROR] see diff target/reference/log4j-bom-2.23.1.buildinfo target/log4j-bom-2.23.1.buildinfo [ERROR] see also https://maven.apache.org/guides/mini/guide-reproducible-builds.html [INFO] Reproducible Build output comparison saved to /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare [INFO] Aggregate buildcompare copied to /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare [INFO] [INFO] Reactor Summary for Apache Log4j BOM 2.23.1: [INFO] [INFO] Apache Log4j BOM ... FAILURE [ 38.689 s] [INFO] Apache Log4j Parent SKIPPED Gary On Wed, Mar 6, 2024 at 9:23 AM Volkan Yazıcı wrote: > > Could you retry after cleaning up your local repository, please? That is, > > rm -rf ~/.m2/repository/org/apache/logging/log4j/*/2.23.1* > > > > On Wed, Mar 6, 2024 at 3:03 PM Gary Gregory wrote: > > > I get a build failure: > > > > INFO] --- artifact:3.5.0:compare (default-cli) @ log4j-bom --- > > [ERROR] project.build.outputTimestamp property should not be inherited > > but defined in POM /Users/garydgregory/rc/log4j/src/.flattened-pom.xml > > Downloading from reference: > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.buildinfo > > [INFO] Reference buildinfo file not found: it will be generated from > > downloaded reference artifacts > > Downloading from reference: > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > > Downloaded from reference: > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > > (12 kB at 86 kB/s) > > Downloading from reference: > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > > Downloaded from reference: > > > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > > (704 kB at 949 kB/s) > > [INFO] Minimal buildinfo generated from downloaded artifacts: > > > > /Users/garydgregory/rc/log4j/src/target/reference/log4j-bom-2.23.1.buildinfo > > [ERROR] sha512 mismatch log4j-bom-2.23.1-cyclonedx.xml: investigate > > with diffoscope > > target/reference/org.apache.logging.log4j/log4j-bom-2.23.1-cyclonedx.xml > > target/bom.xml > > [ERROR] Reproducible Build output summary: 1 files ok, 1 different > > [ERROR] see diff target/reference/log4j-bom-2.23.1.buildinfo > > target/log4j-bom-2.23.1.buildinfo > > [ERROR] see also > > https://maven.apache.org/guides/mini/guide-reproducible-builds.html > > [INFO] Reproducible Build output comparison saved to > > /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare > > [INFO] Aggregate buildcompare copied to > > /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare > > [INFO] > > > > [INFO] Reactor Summary for Apache Log4j BOM 2.23.1: > > [INFO] > > [INFO] Apach
Re: [VOTE] Release Apache Log4j 2.23.1
Could you retry after cleaning up your local repository, please? That is, rm -rf ~/.m2/repository/org/apache/logging/log4j/*/2.23.1* On Wed, Mar 6, 2024 at 3:03 PM Gary Gregory wrote: > I get a build failure: > > INFO] --- artifact:3.5.0:compare (default-cli) @ log4j-bom --- > [ERROR] project.build.outputTimestamp property should not be inherited > but defined in POM /Users/garydgregory/rc/log4j/src/.flattened-pom.xml > Downloading from reference: > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.buildinfo > [INFO] Reference buildinfo file not found: it will be generated from > downloaded reference artifacts > Downloading from reference: > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > Downloaded from reference: > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom > (12 kB at 86 kB/s) > Downloading from reference: > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > Downloaded from reference: > > https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml > (704 kB at 949 kB/s) > [INFO] Minimal buildinfo generated from downloaded artifacts: > > /Users/garydgregory/rc/log4j/src/target/reference/log4j-bom-2.23.1.buildinfo > [ERROR] sha512 mismatch log4j-bom-2.23.1-cyclonedx.xml: investigate > with diffoscope > target/reference/org.apache.logging.log4j/log4j-bom-2.23.1-cyclonedx.xml > target/bom.xml > [ERROR] Reproducible Build output summary: 1 files ok, 1 different > [ERROR] see diff target/reference/log4j-bom-2.23.1.buildinfo > target/log4j-bom-2.23.1.buildinfo > [ERROR] see also > https://maven.apache.org/guides/mini/guide-reproducible-builds.html > [INFO] Reproducible Build output comparison saved to > /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare > [INFO] Aggregate buildcompare copied to > /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare > [INFO] > > [INFO] Reactor Summary for Apache Log4j BOM 2.23.1: > [INFO] > [INFO] Apache Log4j BOM ... FAILURE [ > 37.006 s] > [INFO] Apache Log4j Parent SKIPPED > > > Running: > sh mvnw -Prelease verify artifact:compare -Dreference.repo=$NEXUS_REPO > > where NEXUS_REPO is > https://repository.apache.org/content/repositories/orgapachelogging-1261 > > Using: > > openjdk version "17.0.10" 2024-01-16 > OpenJDK Runtime Environment Homebrew (build 17.0.10+0) > OpenJDK 64-Bit Server VM Homebrew (build 17.0.10+0, mixed mode, sharing) > > Apache Maven 3.9.6 (bc0240f3c744dd6b6ec2920b3cd08dcc295161ae) > Maven home: /usr/local/Cellar/maven/3.9.6/libexec > Java version: 17.0.10, vendor: Homebrew, runtime: > /usr/local/Cellar/openjdk@17/17.0.10/libexec/openjdk.jdk/Contents/Home > Default locale: en_US, platform encoding: UTF-8 > OS name: "mac os x", version: "14.3.1", arch: "x86_64", family: "mac" > > Darwin 23.3.0 Darwin Kernel Version 23.3.0: Wed Dec 20 21:28:58 > PST 2023; root:xnu-10002.81.5~7/RELEASE_X86_64 x86_64 > > Gary > > On Wed, Mar 6, 2024 at 8:13 AM Volkan Yazıcı wrote: > > > > This is a vote to release the Apache Log4j 2.23.1. > > > > Website: https://logging.staged.apache.org/log4j > > GitHub: https://github.com/apache/logging-log4j2 > > Commit: fea2a7116160fb1555d578406444b4fc4f0ef2da > > Distribution: https://dist.apache.org/repos/dist/dev/logging/log4j > > Nexus: > https://repository.apache.org/content/repositories/orgapachelogging-1261 > > Signing key: 0x077e8893a6dcc33dd4a4d5b256e73ba9a0b592d0 > > > > Please download, test, and cast your votes on this mailing list. > > > > [ ] +1, release the artifacts > > [ ] -1, don't release, because... > > > > This vote is open for 72 hours and will pass unless getting a > > net negative vote count. All votes are welcome and we encourage > > everyone to test the release, but only the Logging Services PMC > > votes are officially counted. > > > > == Review kit > > > > The minimum set of steps needed to review the uploaded distribution > > files in the Subversion repository can be summarized as follows: > > > > # Check out the distribution > > svn co https://dist.apache.org/repos/... && cd $_ > > > > # Verify checksums > > shasum --check *.sha512 > > > > # Verify signatures > > wget -O - https://downloads.apache.org/logging/KEYS | gpg --import > > for sigFile in *.asc; do gpg --verify $sigFile; done > > > > # Verify reproduciblity > > umask 0022 > > unzip *-src.zip -d src > > cd src > > export NEXUS_REPO=https://repository.apache.org/content
Re: [VOTE] Release Apache Log4j 2.23.1
I get a build failure: INFO] --- artifact:3.5.0:compare (default-cli) @ log4j-bom --- [ERROR] project.build.outputTimestamp property should not be inherited but defined in POM /Users/garydgregory/rc/log4j/src/.flattened-pom.xml Downloading from reference: https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.buildinfo [INFO] Reference buildinfo file not found: it will be generated from downloaded reference artifacts Downloading from reference: https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom Downloaded from reference: https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1.pom (12 kB at 86 kB/s) Downloading from reference: https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml Downloaded from reference: https://repository.apache.org/content/repositories/orgapachelogging-1261/org/apache/logging/log4j/log4j-bom/2.23.1/log4j-bom-2.23.1-cyclonedx.xml (704 kB at 949 kB/s) [INFO] Minimal buildinfo generated from downloaded artifacts: /Users/garydgregory/rc/log4j/src/target/reference/log4j-bom-2.23.1.buildinfo [ERROR] sha512 mismatch log4j-bom-2.23.1-cyclonedx.xml: investigate with diffoscope target/reference/org.apache.logging.log4j/log4j-bom-2.23.1-cyclonedx.xml target/bom.xml [ERROR] Reproducible Build output summary: 1 files ok, 1 different [ERROR] see diff target/reference/log4j-bom-2.23.1.buildinfo target/log4j-bom-2.23.1.buildinfo [ERROR] see also https://maven.apache.org/guides/mini/guide-reproducible-builds.html [INFO] Reproducible Build output comparison saved to /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare [INFO] Aggregate buildcompare copied to /Users/garydgregory/rc/log4j/src/target/log4j-bom-2.23.1.buildcompare [INFO] [INFO] Reactor Summary for Apache Log4j BOM 2.23.1: [INFO] [INFO] Apache Log4j BOM ... FAILURE [ 37.006 s] [INFO] Apache Log4j Parent SKIPPED Running: sh mvnw -Prelease verify artifact:compare -Dreference.repo=$NEXUS_REPO where NEXUS_REPO is https://repository.apache.org/content/repositories/orgapachelogging-1261 Using: openjdk version "17.0.10" 2024-01-16 OpenJDK Runtime Environment Homebrew (build 17.0.10+0) OpenJDK 64-Bit Server VM Homebrew (build 17.0.10+0, mixed mode, sharing) Apache Maven 3.9.6 (bc0240f3c744dd6b6ec2920b3cd08dcc295161ae) Maven home: /usr/local/Cellar/maven/3.9.6/libexec Java version: 17.0.10, vendor: Homebrew, runtime: /usr/local/Cellar/openjdk@17/17.0.10/libexec/openjdk.jdk/Contents/Home Default locale: en_US, platform encoding: UTF-8 OS name: "mac os x", version: "14.3.1", arch: "x86_64", family: "mac" Darwin 23.3.0 Darwin Kernel Version 23.3.0: Wed Dec 20 21:28:58 PST 2023; root:xnu-10002.81.5~7/RELEASE_X86_64 x86_64 Gary On Wed, Mar 6, 2024 at 8:13 AM Volkan Yazıcı wrote: > > This is a vote to release the Apache Log4j 2.23.1. > > Website: https://logging.staged.apache.org/log4j > GitHub: https://github.com/apache/logging-log4j2 > Commit: fea2a7116160fb1555d578406444b4fc4f0ef2da > Distribution: https://dist.apache.org/repos/dist/dev/logging/log4j > Nexus: > https://repository.apache.org/content/repositories/orgapachelogging-1261 > Signing key: 0x077e8893a6dcc33dd4a4d5b256e73ba9a0b592d0 > > Please download, test, and cast your votes on this mailing list. > > [ ] +1, release the artifacts > [ ] -1, don't release, because... > > This vote is open for 72 hours and will pass unless getting a > net negative vote count. All votes are welcome and we encourage > everyone to test the release, but only the Logging Services PMC > votes are officially counted. > > == Review kit > > The minimum set of steps needed to review the uploaded distribution > files in the Subversion repository can be summarized as follows: > > # Check out the distribution > svn co https://dist.apache.org/repos/... && cd $_ > > # Verify checksums > shasum --check *.sha512 > > # Verify signatures > wget -O - https://downloads.apache.org/logging/KEYS | gpg --import > for sigFile in *.asc; do gpg --verify $sigFile; done > > # Verify reproduciblity > umask 0022 > unzip *-src.zip -d src > cd src > export NEXUS_REPO=https://repository.apache.org/content/... > sh mvnw -Prelease verify artifact:compare -Dreference.repo=$NEXUS_REPO > # If preferred, augment `mvnw` with `-DskipTests` to speed things up > > == Release notes > > This release contains several small fixes and some dependency updates. > > === Changed > * Improve performance of `CloseableThreadContext#closeMap()` (#2296) > > === Fixed > > * Fix handling of `LoggerContextAware` lookups (#2309)
Re: [VOTE] Release Apache Log4j 2.23.1
Hi, Thank you for creating this RC. It would be more helpful to provide cut-and-paste instructions. This does not work obviously: svn co https://dist.apache.org/repos/... && cd $_ Neither the "svn co" nor the cd "$_" will work ;-) Gary On Wed, Mar 6, 2024 at 8:13 AM Volkan Yazıcı wrote: > > This is a vote to release the Apache Log4j 2.23.1. > > Website: https://logging.staged.apache.org/log4j > GitHub: https://github.com/apache/logging-log4j2 > Commit: fea2a7116160fb1555d578406444b4fc4f0ef2da > Distribution: https://dist.apache.org/repos/dist/dev/logging/log4j > Nexus: > https://repository.apache.org/content/repositories/orgapachelogging-1261 > Signing key: 0x077e8893a6dcc33dd4a4d5b256e73ba9a0b592d0 > > Please download, test, and cast your votes on this mailing list. > > [ ] +1, release the artifacts > [ ] -1, don't release, because... > > This vote is open for 72 hours and will pass unless getting a > net negative vote count. All votes are welcome and we encourage > everyone to test the release, but only the Logging Services PMC > votes are officially counted. > > == Review kit > > The minimum set of steps needed to review the uploaded distribution > files in the Subversion repository can be summarized as follows: > > # Check out the distribution > svn co https://dist.apache.org/repos/... && cd $_ > > # Verify checksums > shasum --check *.sha512 > > # Verify signatures > wget -O - https://downloads.apache.org/logging/KEYS | gpg --import > for sigFile in *.asc; do gpg --verify $sigFile; done > > # Verify reproduciblity > umask 0022 > unzip *-src.zip -d src > cd src > export NEXUS_REPO=https://repository.apache.org/content/... > sh mvnw -Prelease verify artifact:compare -Dreference.repo=$NEXUS_REPO > # If preferred, augment `mvnw` with `-DskipTests` to speed things up > > == Release notes > > This release contains several small fixes and some dependency updates. > > === Changed > * Improve performance of `CloseableThreadContext#closeMap()` (#2296) > > === Fixed > > * Fix handling of `LoggerContextAware` lookups (#2309) > * Fix NPE in `PatternProcessor` for a `UNIX_MILLIS` pattern (#2346) > * Fix that parameterized message formatting doesn't throw an exception > when there are insufficient number of parameters (#2343) > * Fix `StatusLogger` log level filtering when debug mode is enabled (#2337) > * Add `log4j2.StatusLogger.dateFormatZone` system property to set the > time-zone `StatusLogger` uses to format `java.time.Instant`. Without > this, formatting patterns accessing to time-zone-specific fields > (e.g., year-of-era) cause failures. (#2322) > * Fix `StatusLogger` to correctly read > `log4j2.StatusLogger.properties` resource (#2354) > * Fix stack overflow in `StatusLogger` (#2322) > > === Updated > > * Update `jakarta.activation:jakarta.activation-api` to version `2.1.3` > (#2335) > * Update `jakarta.mail:jakarta.mail-api` to version `2.1.3` (#2348) > * Update `org.apache.commons:commons-compress` to version `1.26.0` (#2304) > * Update `org.apache.commons:commons-dbcp2` to version `2.12.0` (#2344) > * Update `org.apache.kafka:kafka-clients` to version `3.7.0` (#2326) > * Update `org.eclipse.angus:angus-activation` to version `2.0.2` (#2336) > * Update `org.eclipse.angus:jakarta.mail` to version `2.0.3` (#2349)
[VOTE] Release Apache Log4j 2.23.1
This is a vote to release the Apache Log4j 2.23.1. Website: https://logging.staged.apache.org/log4j GitHub: https://github.com/apache/logging-log4j2 Commit: fea2a7116160fb1555d578406444b4fc4f0ef2da Distribution: https://dist.apache.org/repos/dist/dev/logging/log4j Nexus: https://repository.apache.org/content/repositories/orgapachelogging-1261 Signing key: 0x077e8893a6dcc33dd4a4d5b256e73ba9a0b592d0 Please download, test, and cast your votes on this mailing list. [ ] +1, release the artifacts [ ] -1, don't release, because... This vote is open for 72 hours and will pass unless getting a net negative vote count. All votes are welcome and we encourage everyone to test the release, but only the Logging Services PMC votes are officially counted. == Review kit The minimum set of steps needed to review the uploaded distribution files in the Subversion repository can be summarized as follows: # Check out the distribution svn co https://dist.apache.org/repos/... && cd $_ # Verify checksums shasum --check *.sha512 # Verify signatures wget -O - https://downloads.apache.org/logging/KEYS | gpg --import for sigFile in *.asc; do gpg --verify $sigFile; done # Verify reproduciblity umask 0022 unzip *-src.zip -d src cd src export NEXUS_REPO=https://repository.apache.org/content/... sh mvnw -Prelease verify artifact:compare -Dreference.repo=$NEXUS_REPO # If preferred, augment `mvnw` with `-DskipTests` to speed things up == Release notes This release contains several small fixes and some dependency updates. === Changed * Improve performance of `CloseableThreadContext#closeMap()` (#2296) === Fixed * Fix handling of `LoggerContextAware` lookups (#2309) * Fix NPE in `PatternProcessor` for a `UNIX_MILLIS` pattern (#2346) * Fix that parameterized message formatting doesn't throw an exception when there are insufficient number of parameters (#2343) * Fix `StatusLogger` log level filtering when debug mode is enabled (#2337) * Add `log4j2.StatusLogger.dateFormatZone` system property to set the time-zone `StatusLogger` uses to format `java.time.Instant`. Without this, formatting patterns accessing to time-zone-specific fields (e.g., year-of-era) cause failures. (#2322) * Fix `StatusLogger` to correctly read `log4j2.StatusLogger.properties` resource (#2354) * Fix stack overflow in `StatusLogger` (#2322) === Updated * Update `jakarta.activation:jakarta.activation-api` to version `2.1.3` (#2335) * Update `jakarta.mail:jakarta.mail-api` to version `2.1.3` (#2348) * Update `org.apache.commons:commons-compress` to version `1.26.0` (#2304) * Update `org.apache.commons:commons-dbcp2` to version `2.12.0` (#2344) * Update `org.apache.kafka:kafka-clients` to version `3.7.0` (#2326) * Update `org.eclipse.angus:angus-activation` to version `2.0.2` (#2336) * Update `org.eclipse.angus:jakarta.mail` to version `2.0.3` (#2349)
