+1 checked that I can rebuild the release and get the same output: reference build done with JDK 21 on *nix won't suffer from issue found in 2.13.0 (sorry, I did not check during the vote at that time but too late...): https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/apache/commons/commons-dbcp2/README.md
Hervé On 2025/12/16 01:29:18 Rob Tompkins wrote: > +1 all looks to be in order. pardon, went rabbit holing on that unit test > that prints out so much of a stack trace. > > -Rob > > > On Dec 11, 2025, at 6:19 PM, Gary Gregory <[email protected]> wrote: > > > > We have fixed a few bugs and added enhancements since the release of > > Apache Commons DBCP 2.13.0, so I would like to release Apache Commons > > DBCP 2.14.0. > > > > Apache Commons DBCP 2.14.0 RC1 is available for review here: > > https://dist.apache.org/repos/dist/dev/commons/dbcp/2.14.0-RC1 > > (svn revision 81322) > > > > The Git tag commons-dbcp-2.14.0-RC1 commit for this RC is > > 1088f44f215e684e0e3f33de9aba4019e00a533d, which you can browse here: > > > > https://gitbox.apache.org/repos/asf?p=commons-dbcp.git;a=commit;h=1088f44f215e684e0e3f33de9aba4019e00a533d > > You may checkout this tag using: > > git clone https://gitbox.apache.org/repos/asf/commons-dbcp.git > > --branch commons-dbcp-2.14.0-RC1 commons-dbcp-2.14.0-RC1 > > > > Maven artifacts are here: > > > > https://repository.apache.org/content/repositories/orgapachecommons-1890/org/apache/commons/commons-dbcp2/2.14.0/ > > > > These are the artifacts and their hashes: > > > > #Release SHA-512s > > #Thu Dec 11 23:13:35 UTC 2025 > > Apache\ Commons\ > > DBCP-2.14.0.spdx.rdf.xml=78fb7c30b3ff9012ba2294600bcd18526bf9b23d9bfd5c7e066b1461818cfb4a0567f838e39ba39be011c0e890e98033e35c413867962590cc8dc4946cff000d > > commons-dbcp2-2.14.0-bin.tar.gz=cef3d1fd5b7f5de1d8257dbee26f25dfff1a4525eb01ad528c0573f4bff5cf82d75c6872d8220e7dfd78f7eeac2497b9fd443d4a11a6d0ac361574a0df6357de > > commons-dbcp2-2.14.0-bin.zip=6af285b80d211eb0e5b57982b0bd013b1a05dbcef00fc53ce4b9fb73ec9684f8ed3bbd3c4bb898c5772d242336d7937d903191e8d2756faa6e4ede61f04f77f4 > > commons-dbcp2-2.14.0-bom.json=1b56b96785326f50cf8f6107f0bf850b1b2ee8b62c8e5f893a6e3155bc7cd8c63dfd26188830a0ec263f8ad62ce04f9a1372ab1430d754309b05c234638f0800 > > commons-dbcp2-2.14.0-bom.xml=284f6588c5a72253786163b29ec4b5ce6f1aa361915dc7177b3737577c31117c8856799ff92394734add2eae188245be990632212066b079d1dfe4bc9962be40 > > commons-dbcp2-2.14.0-javadoc.jar=f354980cfe1a6cda98da8eb677723af506d02f8e1a27838fce582934c2b802bde6d8961093adbb7e276195dff2e653a1fb6e0b3828dc952fc377ecf1bce9b1a9 > > commons-dbcp2-2.14.0-sources.jar=ccde28d91dcf0613673a7bb4a3d2748b73403d05921f5a62fc25ab51fa5c795ad91d8c003310ae5843d69519ff782de6beaeed713a9e2b1c1085f0dbd5ee9081 > > commons-dbcp2-2.14.0-src.tar.gz=2341a1184bf3e92cc366ba6fdd9b56094c81d1a0709445f813c2c068cabe4654e2bf83a1129db0a6da658bc999a16ff0c1cdb99aa4b77740ed31b2be93f1037d > > commons-dbcp2-2.14.0-src.zip=6cccb62c095a0d919683d5b05608645e4fa78ff69b96dc0e6a7b71a68ee53c6d31df4f59013e4389982ceea06c70afef5954c879c3e5d6dca430e9e5f1809ce9 > > commons-dbcp2-2.14.0-test-sources.jar=2f1d5af0ef969b07df22ef59788da3575a8b7f0aede3fd179d3ac718cc0ab44684694e8e8060d1f8e03f4cc49179849c04dd229c1a790efc803e8769f0586247 > > commons-dbcp2-2.14.0-tests.jar=384d3f5c368d6be4f31f1f11ba4189dacb2609ec40939ea634ba7b3b87e757344bb7778e6a851acf2c9e4bb4061d8c9fa1fa6f3ebfb665dc420658faadb436f0 > > > > > > I have tested this with 'mvn' and 'mvn clean install site' using: > > > > openjdk version "21.0.9" 2025-10-21 > > OpenJDK Runtime Environment Homebrew (build 21.0.9) > > OpenJDK 64-Bit Server VM Homebrew (build 21.0.9, mixed mode, sharing) > > > > Apache Maven 3.9.11 (3e54c93a704957b63ee3494413a2b544fd3d825b) > > Maven home: /opt/homebrew/Cellar/maven/3.9.11/libexec > > Java version: 21.0.9, vendor: Homebrew, runtime: > > /opt/homebrew/Cellar/openjdk@21/21.0.9/libexec/openjdk.jdk/Contents/Home > > Default locale: en_US, platform encoding: UTF-8 > > OS name: "mac os x", version: "15.7.2", arch: "aarch64", family: "mac" > > > > Darwin Garys-MacBook-Pro.local 24.6.0 Darwin Kernel Version 24.6.0: > > Wed Oct 15 21:12:15 PDT 2025; > > root:xnu-11417.140.69.703.14~1/RELEASE_ARM64_T6041 arm64 > > > > Docker version 28.4.0, build d8eb465 > > > > > > Details of changes since 2.13.0 are in the release notes: > > > > https://dist.apache.org/repos/dist/dev/commons/dbcp/2.14.0-RC1/RELEASE-NOTES.txt > > > > https://dist.apache.org/repos/dist/dev/commons/dbcp/2.14.0-RC1/site/changes.html > > > > Site: > > > > https://dist.apache.org/repos/dist/dev/commons/dbcp/2.14.0-RC1/site/index.html > > (Note some *relative* links are broken and the 2.14.0 directories > > are not yet created - these will be OK once the site is deployed.) > > > > JApiCmp Report (compared to 2.13.0): > > > > https://dist.apache.org/repos/dist/dev/commons/dbcp/2.14.0-RC1/site/japicmp.html > > > > RAT Report: > > > > https://dist.apache.org/repos/dist/dev/commons/dbcp/2.14.0-RC1/site/rat-report.html > > > > KEYS: > > https://downloads.apache.org/commons/KEYS > > > > Please review the release candidate and vote. > > This vote will close no sooner than 72 hours from now. > > > > [ ] +1 Release these artifacts > > [ ] +0 OK, but... > > [ ] -0 OK, but really should fix... > > [ ] -1 I oppose this release because... > > > > Thank you, > > > > Gary Gregory, > > Release Manager (using key 530AA5F25C25011F) > > > > The following is intended as a helper and refresher for reviewers. > > > > Validating a release candidate > > ============================== > > > > These guidelines are NOT complete. > > > > Requirements: Git, Java, and Maven. > > > > You can validate a release from a release candidate (RC) tag as follows. > > > > 1a) Download and decompress the source archive from: > > > > https://dist.apache.org/repos/dist/dev/commons/dbcp/2.14.0-RC1/source > > > > 1b) Check out the RC tag from git (optional) > > > > This is optional, as a reviewer must at least check source distributions. > > > > git clone https://gitbox.apache.org/repos/asf/commons-dbcp.git > > --branch commons-dbcp-2.14.0-RC1 commons-dbcp-2.14.0-RC1 > > cd commons-dbcp-2.14.0-RC1 > > > > 2) Checking the build > > > > All components should include a default Maven goal, such that you can > > run 'mvn' from the command line by itself. > > > > 2) Check Apache licenses > > > > This step is not required if the site includes a RAT report page, > > which you then must check. > > This check should be included in the default Maven build, but you can > > check it with: > > > > mvn apache-rat:check > > > > 3) Check binary compatibility > > > > This step is not required if the site includes a JApiCmp report page, > > which you then must check. > > This check should be included in the default Maven build, but you can > > check it with: > > > > mvn verify -DskipTests -P japicmp japicmp:cmp > > > > 4) Build the package > > > > This check should be included in the default Maven build, but you can > > check it with: > > > > mvn -V clean package > > > > You can record the Maven and Java version produced by -V in your VOTE reply. > > To gather OS information from a command line: > > Windows: ver > > Linux: uname -a > > > > 4b) Check reproducibility > > > > To check that a build is reproducible, run: > > > > mvn clean verify artifact:compare -DskipTests > > -Dreference.repo=https://repository.apache.org/content/repositories/staging/ > > '-Dbuildinfo.ignore=*/*.spdx.json' > > > > Note that this excludes SPDX files from the check. > > > > 5) Build the site for a single module project > > > > Note: Some plugins require the components to be installed instead of > > packaged. > > > > mvn site > > Check the site reports in: > > - Windows: target\site\index.html > > - Linux: target/site/index.html > > > > -the end- > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: [email protected] > > For additional commands, e-mail: [email protected] > > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > > --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
