Re: [VOTE] Release Apache Commons IO 2.15.0 based on RC1

2023-10-25 Thread Gary Gregory 
My +1. More reviews please 😉

Gary

On Sat, Oct 21, 2023, 7:34 PM Bruno Kinoshita 
wrote:

>  [x] +1 Release these artifacts
>
> Site reports look OK, checked some files in dist area, building fine on
> Apache Maven 3.8.5 (3599d3414f046de2324203b78ddcf9b5e4388aa0)
> Maven home: /opt/apache-maven-3.8.5
> Java version: 17.0.8.1, vendor: Private Build, runtime:
> /usr/lib/jvm/java-17-openjdk-amd64
> Default locale: en_US, platform encoding: UTF-8
> OS name: "linux", version: "5.15.0-86-generic", arch: "amd64", family:
> "unix"
>
> Thanks
>
> On Sun, 22 Oct 2023 at 00:17, Gary Gregory  wrote:
>
> > Yeah, I saw that on the site and simplified it, but I missed the release
> > notes, we can pretty up the text post release. Certainly not a blocker
> IMO.
> >
> > Gary
> >
> > On Sat, Oct 21, 2023, 4:43 PM Elliotte Rusty Harold 
> > wrote:
> >
> > > One nit. In the release notes I see this:
> > >
> > > Commons IO 2.9.0 requires Java 8.
> > > Commons IO 2.8.0 requires Java 8.
> > > Commons IO 2.7 requires Java 8.
> > > Commons IO 2.6 requires Java 7.
> > > Commons IO 2.5 requires Java 6.
> > > Commons IO 2.4 requires Java 6.
> > > Commons IO 2.3 requires Java 6.
> > > Commons IO 2.2 requires Java 5.
> > > Commons IO 1.4 requires Java 1.3.
> > >
> > > I'm not sure why this is there at all, but if it should be it perhaps
> > > needs 2.10 through 2.14 as well. Or perhaps just remove this section
> > > completely.
> > >
> > >
> > > On Sat, Oct 21, 2023 at 7:12 PM Gary Gregory 
> > > wrote:
> > > >
> > > > We have fixed a few bugs and added some enhancements since Apache
> > > > Commons IO 2.14.0 was released, so I would like to release Apache
> > > > Commons IO 2.15.0.
> > > >
> > > > Apache Commons IO 2.15.0 RC1 is available for review here:
> > > > https://dist.apache.org/repos/dist/dev/commons/io/2.15.0-RC1
> (svn
> > > > revision 64652)
> > > >
> > > > The Git tag commons-io-2.15.0-RC1 commit for this RC is
> > > > 6bb8020d40f1a4b947ff26949843def5d60292d0 which you can browse here:
> > > >
> > >
> >
> https://gitbox.apache.org/repos/asf?p=commons-io.git;a=commit;h=6bb8020d40f1a4b947ff26949843def5d60292d0
> > > > You may checkout this tag using:
> > > > git clone https://gitbox.apache.org/repos/asf/commons-io.git
> > > > --branch commons-io-2.15.0-RC1 commons-io-2.15.0-RC1
> > > >
> > > > Maven artifacts are here:
> > > >
> > >
> >
> https://repository.apache.org/content/repositories/orgapachecommons-1666/commons-io/commons-io/2.15.0/
> > > >
> > > > These are the artifacts and their hashes:
> > > >
> > > > #Release SHA-512s
> > > > #Sat Oct 21 14:59:24 EDT 2023
> > > >
> > >
> >
> commons-io-2.15.0-bin.tar.gz=026dc2e2ba6edea920813dff5d8e09a5d4e2af5c91b79096159375731bebfefa38be6c1394e57f0f9cef6969c906472ca25f1fa67a1ca84e8a50e2e33763d683
> > > >
> > >
> >
> commons-io-2.15.0-bin.zip=74d3db69f9cd015ae5c0a8fffe4eb2bb08a7bd1091db8d75bb7cda1e520fd690045c05e73cca5792e9589f17f3f98eab0add765d4d5cdc90f1ae6e1ace0fd4ce
> > > >
> > >
> >
> commons-io-2.15.0-bom.json=ed58acb14027e9abd66676e0acbfbc3e38d832ba12e97d89479d7b9f1a931b326995e0994c66ced7ed10c890d0e5f0630b09b5814b755e6f059babe254677ab5
> > > >
> > >
> >
> commons-io-2.15.0-bom.xml=2ac587fc41277f159aa2f70dc8cfd41889dc8e2cdd570540918c186b7b71be1187eae2f034352888015beea5a5058917743921e71374e9a564e29c9cc66b1b73
> > > >
> > >
> >
> commons-io-2.15.0-javadoc.jar=3f214472b9d579827a23b498de30d21afe577c59bbfae668d4f42fd9419c2d341499e66bd38cbba074be72f79671dbcb30f2b151d397e90489c4a98b456cc049
> > > >
> > >
> >
> commons-io-2.15.0-sources.jar=89a37db267284ba002c6cf2d570b76359f684c354e5b605c94d602f4e3f510264fb05ff2e890362ac13211164933cc640f051c9e49475156e22a833212ec505c
> > > >
> > >
> >
> commons-io-2.15.0-src.tar.gz=a8df05b8da8f39408473588a8f4672dee8f4215e50e1001c0132f9bd046b32f5816f2939db471d21578e6748a5f8a998337e3adbc6dbada798d64c39ff1370d0
> > > >
> > >
> >
> commons-io-2.15.0-src.zip=4d600f130dbcee703620b7916b6a34ebb36d4ec71ae00da1a1339976cec9bdcea936386b31ac7dcf2e225ac6e0ae1a13bbad0f0ea78bac4dbe4a68a73d347c8b
> > > >
> > >
> >
> commons-io-2.15.0-test-sources.jar=5fab0e764cfba8165d4e608e89cee40702cd43739b23f9a5f6c86ecd78fde98f403755e362de2cdefb5ce3ab24ee4f9e049200b76bc365228bd1d5c6d850ab11
> > > >
> > >
> >
> commons-io-2.15.0-tests.jar=3e402eeed7ef3093bd75deda30a41cd1a811bf2a95f974a37c4fde114234966298b69b0503ce260e25f66560828668449f7a0d0e2c885e4e5134dcac6492c37e
> > > >
> > >
> >
> commons-io_commons-io-2.15.0.spdx.json=606503b5c9d7a9d865ebfea7edf9e4420c580254f47e69cf012089bf934b39bf6e99c74904693c566e0cec994d487cc0bc06d5114f5fa13eb1f38bd0e66f11d2
> > > >
> > > > I have tested this with
> > > >
> > > > mvn -V -Prelease -Ptest-deploy -P jacoco -P japicmp clean package
> site
> > > deploy
> > > >
> > > > Using:
> > > >
> > > > Apache Maven 3.9.5 (57804ffe001d7215b5e7bcb531cf83df38f93546)
> > > > Maven home: /usr/local/Cellar/maven/3.9.5/libexec
> > > > Java version: 21, vendor: Homebrew, runtime:
> > > > /usr/local/Cellar/openjdk/21/libexec/openjdk.jdk/Contents/Home
> > >

[ALL] README.md and CONTRIBUTING.md

2023-10-25 Thread sebb 
These files can be generated by the build plugin.
As such, most of the information is duplicated across all the repositories.

This is convenient for users - provided that it is up to date.

The problem is that making any changes is very time-consuming:
- update build-plugin
- vote on release
- release plugin
- run the plugin in nearly every component (some have their own
versions of the files)

It seems to me that the README file should only contain info specific
to the component, and should be maintained locally. The build plugin
could be used to provide an initial template, but should not clobber
an existing entry.

CONTRIBUTING.md should be a link to a shared file (as is done with SECURITY.md).
[It's now very easy to update the main site, so I think the
contributing info should be stored there.]

Sebb

-
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org

Re: [VOTE] Release Apache Commons DBCP 2.11.0 based on RC1

2023-10-25 Thread Bruno Kinoshita 
   [x] +1 Release these artifacts

Site reports OK, building fine on

Apache Maven 3.8.5 (3599d3414f046de2324203b78ddcf9b5e4388aa0)
Maven home: /opt/apache-maven-3.8.5
Java version: 17.0.8.1, vendor: Private Build, runtime:
/usr/lib/jvm/java-17-openjdk-amd64
Default locale: en_US, platform encoding: UTF-8
OS name: "linux", version: "5.15.0-87-generic", arch: "amd64", family:
"unix"

On Mon, 23 Oct 2023 at 19:55, Gary Gregory  wrote:

> We have fixed a few bugs and added some enhancements since Apache
> Commons DBCP 2.9.0 was released, so I would like to release Apache
> Commons DBCP 2.11.0.
>
> Apache Commons DBCP 2.11.0 RC1 is available for review here:
> https://dist.apache.org/repos/dist/dev/commons/dbcp/2.11.0-RC1
> (svn revision 64680)
>
> The Git tag commons-dbcp-2.11.0-RC1 commit for this RC is
> e57ce3cf019ffa9534b88735c454c54afbe9849f which you can browse here:
>
> https://gitbox.apache.org/repos/asf?p=commons-dbcp.git;a=commit;h=e57ce3cf019ffa9534b88735c454c54afbe9849f
> You may checkout this tag using:
> git clone https://gitbox.apache.org/repos/asf/commons-dbcp.git
> --branch 
> commons-dbcp-2.11.0-RC1 commons-dbcp-2.11.0-RC1
>
> Maven artifacts are here:
>
> https://repository.apache.org/content/repositories/orgapachecommons-1668/org/apache/commons/commons-dbcp2/2.11.0/
>
> These are the artifacts and their hashes:
>
> #Release SHA-512s
> #Mon Oct 23 13:37:23 EDT 2023
> Apache\ Commons\
>
> DBCP-2.11.0.spdx.rdf.xml=3d02a79fc5cfcb453195efe4a045f7b37ded7ba0fb0eadb301f7800e86019e3d7d9824e47f3db04ce530936cb770ad0c39cff2801070d9171c862085a79416c3
>
> commons-dbcp2-2.11.0-bin.tar.gz=34432889d6d973c6ff662c1189713fb48fdb431433a969b11186501fab338b6fe1ec3c402454dfebb7a16f8fb5e8e7c67633868a1a796faafb322d7a8215a527
>
> commons-dbcp2-2.11.0-bin.zip=b82e9e8e2c9df52424e59a0fbb2b1bd1cacd9f37686a237392d0801ab4bf69c7d0fe8b886442cc1a0613e04bb96039bf77e093bb0cd861d809ba9761d3a74359
>
> commons-dbcp2-2.11.0-bom.json=2c338fc5cea7e3210c4c489316b30c4313ae20139593b29e5d3970b01f17e094f2880e13230c83ac02373b8b8e30c162835bbcf85502084eab40f87b94bf4560
>
> commons-dbcp2-2.11.0-bom.xml=93a1d28bfa6e2f3d99452be23e02aae107b32a9cf7bdd5547c76f3bcb93a7f536a7a2f71231975e794e096c335618e14c43c52e53fd34bc12c626d10e6efb72b
>
> commons-dbcp2-2.11.0-javadoc.jar=bb4235fb91a74934ef408439019091a2f9938d3297fa932aa58f104532aab02911be77a674c945ea62b1d7dc1713466c375bedd87d0395db44f3a9aa3cf47870
>
> commons-dbcp2-2.11.0-sources.jar=a4f5f86a281853191a526d53dc05551cb7a72a83078d521c6e7a06e92a607db3a7627af4d819d90bbc168c20228f4e2e55a1763c77a4c7e085171964b692810b
>
> commons-dbcp2-2.11.0-src.tar.gz=2f73c4637a098925f7cf56fc49ee390a471f1f3faa50e8ee1595c762644437ea85683fa1c3ee44bf89b2f821716f6ee344ea09839cda6dee173b59dc49ba524b
>
> commons-dbcp2-2.11.0-src.zip=212e84f4a31a7b192ae4d534292b4d5c6dd48f3650c1caf844dad34b97c498d027266f5d3fae220efee1bbdb75df95adc9d6f58f35bb445b653dbbee3c485de2
>
> commons-dbcp2-2.11.0-test-sources.jar=78107b2437aa4b7232522f8c9791085da2f8421056208f7df220e327d7b45efb222da0eb2d1add99aa3d0d4c15e934d3a81f9cc6a5aa13bbd2f96370ca4d3365
>
> commons-dbcp2-2.11.0-tests.jar=553de32da56551a221fd7f974a6b704fc82a130546469ccb9de857504be4e4db3a8fde0911602270ca2c66b8dd61f5066c72ea935f39c1555ae5b7adc7b2af15
>
> I have tested this with:
>
> mvn -V -Ptest-deploy -P jacoco -P japicmp clean package site deploy
>
> Using:
>
> pache Maven 3.9.5 (57804ffe001d7215b5e7bcb531cf83df38f93546)
> Maven home: /usr/local/Cellar/maven/3.9.5/libexec
> Java version: 21, vendor: Homebrew, runtime:
> /usr/local/Cellar/openjdk/21/libexec/openjdk.jdk/Contents/Home
> Default locale: en_US, platform encoding: UTF-8
> OS name: "mac os x", version: "14.0", arch: "x86_64", family: "mac"
> Darwin gdg-mac-mini.local 23.0.0 Darwin Kernel Version 23.0.0: Fri Sep
> 15 14:42:42 PDT 2023; root:xnu-10002.1.13~1/RELEASE_X86_64 x86_64
>
> Details of changes since 2.9.0 are in the release notes:
>
> https://dist.apache.org/repos/dist/dev/commons/dbcp/2.11.0-RC1/RELEASE-NOTES.txt
>
> https://dist.apache.org/repos/dist/dev/commons/dbcp/2.11.0-RC1/site/changes-report.html
>
> Site:
>
> https://dist.apache.org/repos/dist/dev/commons/dbcp/2.11.0-RC1/site/index.html
> (note some *relative* links are broken and the 2.11.0 directories
> are not yet created - these will be OK once the site is deployed.)
>
> JApiCmp Report (compared to 2.9.0):
>
> https://dist.apache.org/repos/dist/dev/commons/dbcp/2.11.0-RC1/site/japicmp.html
>
> RAT Report:
>
> https://dist.apache.org/repos/dist/dev/commons/dbcp/2.11.0-RC1/site/rat-report.html
>
> KEYS:
>   https://downloads.apache.org/commons/KEYS
>
> Please review the release candidate and vote.
> This vote will close no sooner than 72 hours from now.
>
>   [ ] +1 Release these artifacts
>   [ ] +0 OK, but...
>   [ ] -0 OK, but really should fix...
>   [ ] -1 I oppose this release because...
>
> Thank you,
>
> Gary Gregory,
> Release Manager (using key 86fdc7e2a11262cb)
>
> For follo

Re: [ALL] README.md and CONTRIBUTING.md

2023-10-25 Thread Gary Gregory 
In older times, we were more concerned with providing a somewhat self
contained source zip/tar. I am concerned that hyperlinking these files
would add another step and be a hassle to GitHub users, like myself. I
really like having at least all top level type of information in the Readme
such that the repository presents itself as nicely as possible.

Gary

On Wed, Oct 25, 2023, 6:17 AM sebb  wrote:

> These files can be generated by the build plugin.
> As such, most of the information is duplicated across all the repositories.
>
> This is convenient for users - provided that it is up to date.
>
> The problem is that making any changes is very time-consuming:
> - update build-plugin
> - vote on release
> - release plugin
> - run the plugin in nearly every component (some have their own
> versions of the files)
>
> It seems to me that the README file should only contain info specific
> to the component, and should be maintained locally. The build plugin
> could be used to provide an initial template, but should not clobber
> an existing entry.
>
> CONTRIBUTING.md should be a link to a shared file (as is done with
> SECURITY.md).
> [It's now very easy to update the main site, so I think the
> contributing info should be stored there.]
>
> Sebb
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> For additional commands, e-mail: dev-h...@commons.apache.org
>
>

Re: [VOTE] Release Apache Commons CLI 1.6.0 based on RC1

2023-10-25 Thread Bruno Kinoshita 
   [x] +1 Release these artifacts

Site reports and build both OK! Thanks!

Apache Maven 3.8.5 (3599d3414f046de2324203b78ddcf9b5e4388aa0)
Maven home: /opt/apache-maven-3.8.5
Java version: 17.0.8.1, vendor: Private Build, runtime:
/usr/lib/jvm/java-17-openjdk-amd64
Default locale: en_US, platform encoding: UTF-8
OS name: "linux", version: "5.15.0-87-generic", arch: "amd64", family:
"unix"

On Mon, 23 Oct 2023 at 19:07, Gary Gregory  wrote:

> We have fixed quite a few bugs and added some significant enhancements
> since Apache Commons CLI 1.5.0 was released, so I would like to
> release Apache Commons CLI 1.6.0.
>
> Apache Commons CLI 1.6.0 RC1 is available for review here:
> https://dist.apache.org/repos/dist/dev/commons/cli/1.6.0-RC1 (svn
> revision 64679)
>
> The Git tag commons-cli-1.6.0-RC1 commit for this RC is
> 0d29a55998aa52be8832497527e266630f97c371 which you can browse here:
>
> https://gitbox.apache.org/repos/asf?p=commons-cli.git;a=commit;h=0d29a55998aa52be8832497527e266630f97c371
> You may checkout this tag using:
> git clone https://gitbox.apache.org/repos/asf/commons-cli.git
> --branch 
> commons-cli-1.6.0-RC1 commons-cli-1.6.0-RC1
>
> Maven artifacts are here:
>
> https://repository.apache.org/content/repositories/orgapachecommons-1667/commons-cli/commons-cli/1.6.0/
>
> These are the artifacts and their hashes:
>
> #Release SHA-512s
> #Mon Oct 23 12:59:22 EDT 2023
>
> commons-cli-1.6.0-bin.tar.gz=26487b81809d7bb79c21423d5a1556bcd0945db59a5096793fa14699b8b5001018707c72a3475a48a5071777f2c3c6a5d91936e1b7dcbd675ece855f1b929a82
>
> commons-cli-1.6.0-bin.zip=9e7b89b2b32363acf9c4a773559697eb832c1fe1236859cbbd5e254bed5d205e95f46ef1cce563ca4612d672fc22a7239adcc3ba573b0fa23d80b967efe9b8bf
>
> commons-cli-1.6.0-bom.json=532c4312167b76e2003f706e2bb7c45eec0782fe6d9977a0a5533f56961808c7e8d0c8b705acb11f5537fe5aabe0b6143c02184c666919d77a1fa7b4fed196ee
>
> commons-cli-1.6.0-bom.xml=eb4ca6cc32dcb9f122fe86fffaea411cb768826566961582e618d1480341490a72503f225b7150ef21631f50ef3edfbbb5fed25d2b2b7d113e0b3e86ef8786e7
>
> commons-cli-1.6.0-javadoc.jar=830e0c0ffb4b5d369dbd72af278897cbd2c3396ddb64d8b3ba53360073be5af4f96af988e8fe56f8bf85f661e15b709fdc7034522adefb2e8200e836d1fc193a
>
> commons-cli-1.6.0-sources.jar=8ed0a9ce0e0064c3da1027b4615c918ad81d440fcea87e41e6461d178bed43bbdd2908876d004ffdb393df6fd0d4bfc12a5a8b3e0fdf48b47d9c96571d11895b
>
> commons-cli-1.6.0-src.tar.gz=029088e7c51b657a0be5478685e1f689d6d39357957b3b8813ef6b315b4676ba4bd17b739dc15e09a30f8abfbe22e169c1c629f662477821adf0aa66474e1812
>
> commons-cli-1.6.0-src.zip=c98b917e89bc4023e36f2bb8585f4c62b01a82f2937167a34c12d40b65a0870269a38109e896e4eefef58cdc3f3e821def8ef524a0c267051c67da84975d
>
> commons-cli-1.6.0-test-sources.jar=09b72e7050592e8d34caf7d08679011421f4bc90a9d8fc9f83d0e7629e4e7fb730f765cba8bae9bf048e9f3be806f9fa3a74423ff8982caa08048d71861dd410
>
> commons-cli-1.6.0-tests.jar=89b2211fdfa912db46814ed0df7c39a88a6a2a233009684dfb0344ea16b5a28b5fcf13342fbe2ea3a802050f4b591e05f25f7b96bbbfebb16d2ab038cf2f713a
>
> commons-cli_commons-cli-1.6.0.spdx.json=9abdae007fa94496c92deb2bcc203f0814692f1de741f5961c5fe3015d6274ea51a508f26ea79913d8fed4746c0eda1a6dfc1405e8056544847177b5ffa74c4f
>
> I have tested this with:
>
> mvn -V -Prelease -Ptest-deploy -P jacoco -P japicmp clean package site
> deploy
>
> Using:
>
> Apache Maven 3.9.5 (57804ffe001d7215b5e7bcb531cf83df38f93546)
> Maven home: /usr/local/Cellar/maven/3.9.5/libexec
> Java version: 21, vendor: Homebrew, runtime:
> /usr/local/Cellar/openjdk/21/libexec/openjdk.jdk/Contents/Home
> Default locale: en_US, platform encoding: UTF-8
> OS name: "mac os x", version: "14.0", arch: "x86_64", family: "mac"
> Darwin gdg-mac-mini.local 23.0.0 Darwin Kernel Version 23.0.0: Fri Sep
> 15 14:42:42 PDT 2023; root:xnu-10002.1.13~1/RELEASE_X86_64 x86_64
>
> Details of changes since 1.5.0 are in the release notes:
>
> https://dist.apache.org/repos/dist/dev/commons/cli/1.6.0-RC1/RELEASE-NOTES.txt
>
> https://dist.apache.org/repos/dist/dev/commons/cli/1.6.0-RC1/site/changes-report.html
>
> Site:
>
> https://dist.apache.org/repos/dist/dev/commons/cli/1.6.0-RC1/site/index.html
> (note some *relative* links are broken and the 1.6.0 directories
> are not yet created - these will be OK once the site is deployed.)
>
> JApiCmp Report (compared to 1.5.0):
>
> https://dist.apache.org/repos/dist/dev/commons/cli/1.6.0-RC1/site/japicmp.html
>
> RAT Report:
>
> https://dist.apache.org/repos/dist/dev/commons/cli/1.6.0-RC1/site/rat-report.html
>
> KEYS:
>   https://downloads.apache.org/commons/KEYS
>
> Please review the release candidate and vote.
> This vote will close no sooner than 72 hours from now.
>
>   [ ] +1 Release these artifacts
>   [ ] +0 OK, but...
>   [ ] -0 OK, but really should fix...
>   [ ] -1 I oppose this release because...
>
> Thank you,
>
> Gary Gregory,
> Release Manager (using key 86fdc7e2a11262cb)
>
> For following is intended as a helper and r

Re: [ALL] Dormant components and projects.a.o

2023-10-25 Thread Gary Gregory 
I was referring to projects.a.o but that does not make sense now that I
look at the page.

Gary

On Tue, Oct 24, 2023, 5:19 PM sebb  wrote:

> On Tue, 24 Oct 2023 at 20:47, Gary Gregory  wrote:
> >
> > Or have a dormant section on the page?
>
> What page are you referring to?
>
> Note that DOAPs appear in several places on the site:
>
> e.g OGNL appears on:
>
> https://projects.apache.org/project.html?commons-ognl
> https://projects.apache.org/committee.html?commons
> https://projects.apache.org/projects.html?category
> https://projects.apache.org/projects.html?language
> https://projects.apache.org/projects.html?number
>
> I'm hopeful that the '(Dormant)' suffix I added will appear on all
> these pages for OGNL (and Chain, Functor).
>
> It would be a lot of work to have a separate Dormant section on the
> site, and anyway dormancy only applies to a few projects (possibly
> only Commons).
> Does not seem right to make PMC-specific changes.
>
> But I'm doubtful that it makes sense to continue to publish details of
> dormant components on projects.a.o.
>
> Sebb
>
> > Gary
> >
> > On Tue, Oct 24, 2023, 3:37 PM sebb  wrote:
> >
> > > I've updated the DOAPs for dormant components to add a (Dormant)
> suffix.
> > >
> > > However, I wonder if it might not be better to drop the components
> > > from projects.a.o?
> > >
> > > Note that most of the dormant components are not in projects.a.o as
> > > they do not have DOAPs.
> > >
> > > Sebb
> > >
> > > -
> > > To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> > > For additional commands, e-mail: dev-h...@commons.apache.org
> > >
> > >
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> For additional commands, e-mail: dev-h...@commons.apache.org
>
>

Re: [ALL] Why run scorecards and CodeQL weekly?

2023-10-25 Thread Gary Gregory 
Hm, I guess it does not make sense to run these on a schedule, unlike
Dependabot.

Gary

On Sat, Oct 21, 2023, 4:37 PM sebb  wrote:

> I don't understand why Scorecard analysis and CodeQL are being run
> weekly as well as on push/pull.
>
> Does the  output somehow change if there has been no change in the input?
> Or does the generated output expire?
>
> Surely it is only necessary to run the analysis when there has been a
> change to the source?
>
> Alternatively, drop the push/pull trigger and only trigger weekly
> (although that would be overkill for the less active components)
>
> Sebb
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> For additional commands, e-mail: dev-h...@commons.apache.org
>
>

Re: [GH] (commons-logging): Workflow run "Java CI" failed!

2023-10-25 Thread Gary Gregory 
That's not going to work, please see the comments in the POM. Needs work.
Revert for now I say.

Gary

On Wed, Oct 25, 2023, 11:58 AM GitBox  wrote:

>
> The GitHub Actions job "Java CI" on commons-logging.git has failed.
> Run started by GitHub user asfgit (triggered by asfgit).
>
> Head commit for run:
> e4d68bb37071db1e871a71634d0c535945b96484 / Sebb 
> Standardise on verify goal
>
> Report URL:
> https://github.com/apache/commons-logging/actions/runs/6642985893
>
> With regards,
> GitHub Actions via GitBox
>
>

Re: Move Proxy to dormant?

2023-10-25 Thread sebb 
This did not happen at the time, but there has been little activity
since then, and the code does not even build (circular reference in
pom, and old Maven required).

I'll try again.

On Tue, 27 Apr 2021 at 13:54, Gary Gregory  wrote:
>
> Seems reasonable.
>
> Gary
>
> On Tue, Apr 27, 2021, 07:16 sebb  wrote:
>
> > I propose to move Proxy to dormant later this week unless anyone steps
> > up to fix the website etc.
> >
> > On Sat, 24 Apr 2021 at 18:13, sebb  wrote:
> > >
> > > On Sat, 24 Apr 2021 at 00:35, Matt Benson  wrote:
> > > >
> > > > FWIW, my recollection is that proxy was ready for a 2.0 release which
> > was
> > > > vetoed on the basis that the site didn't contain a migration how-to
> > > > document. Oh well.
> > >
> > > I don't think it was vetoed, but it looks like there were only 2 +1
> > votes:
> > >
> > https://lists.apache.org/thread.html/45e87021355c0c1ae1d0b6d1db601bf33a2aecaad0ee240dc0d2e1ca%401396900218%40%3Cdev.commons.apache.org%3E
> > >
> > > Given that there have been no significant activity or enquiries since
> > > then, I wonder if it is worth the effort. As a minimum the site would
> > > need to be rebuilt, dependencies updated etc.
> > >
> > > Sebb.
> > >
> > > > On Fri, Apr 23, 2021, 4:07 PM Gary Gregory 
> > wrote:
> > > >
> > > > > Sounds reasonable to me.
> > > > >
> > > > > Gary
> > > > >
> > > > > On Thu, Apr 22, 2021, 16:09 sebb  wrote:
> > > > >
> > > > > > There has been no substantial development for several years, and
> > only
> > > > > > two open JIRA feature requests.
> > > > > >
> > > > > > The website is outdated, and needs regeneration.
> > > > > >
> > > > > > Is it worth spending any time on this component?
> > > > > >
> > > > > > I suspect it should go dormant.
> > > > > >
> > > > > > Sebb.
> > > > > >
> > > > > >
> > -
> > > > > > To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> > > > > > For additional commands, e-mail: dev-h...@commons.apache.org
> > > > > >
> > > > > >
> > > > >
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> > For additional commands, e-mail: dev-h...@commons.apache.org
> >
> >

-
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org

Re: [GH] (commons-logging): Workflow run "Java CI" failed!

2023-10-25 Thread sebb 
On Wed, 25 Oct 2023 at 17:19, Gary Gregory  wrote:
>
> That's not going to work, please see the comments in the POM. Needs work.

Not sure what comments you are referring to.

If there is a reason not to use a particular default goal, it seems to
me it should be documented alongside the goal, rather than somewhere
else.

> Revert for now I say.
>
> Gary
>
> On Wed, Oct 25, 2023, 11:58 AM GitBox  wrote:
>
> >
> > The GitHub Actions job "Java CI" on commons-logging.git has failed.
> > Run started by GitHub user asfgit (triggered by asfgit).
> >
> > Head commit for run:
> > e4d68bb37071db1e871a71634d0c535945b96484 / Sebb 
> > Standardise on verify goal
> >
> > Report URL:
> > https://github.com/apache/commons-logging/actions/runs/6642985893
> >
> > With regards,
> > GitHub Actions via GitBox
> >
> >

-
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org

Re: [VOTE] Release Apache Commons IO 2.15.0 based on RC1

2023-10-25 Thread Rob Tompkins 
+1 - all looks appropriate, signatures, site, builds, RELEASE-NOTES.txt,

Thank you again Gary and team for all the hard work!

> On Oct 25, 2023, at 5:45 AM, Gary Gregory  wrote:
> 
> My +1. More reviews please 😉
> 
> Gary
> 
> On Sat, Oct 21, 2023, 7:34 PM Bruno Kinoshita 
> wrote:
> 
>> [x] +1 Release these artifacts
>> 
>> Site reports look OK, checked some files in dist area, building fine on
>> Apache Maven 3.8.5 (3599d3414f046de2324203b78ddcf9b5e4388aa0)
>> Maven home: /opt/apache-maven-3.8.5
>> Java version: 17.0.8.1, vendor: Private Build, runtime:
>> /usr/lib/jvm/java-17-openjdk-amd64
>> Default locale: en_US, platform encoding: UTF-8
>> OS name: "linux", version: "5.15.0-86-generic", arch: "amd64", family:
>> "unix"
>> 
>> Thanks
>> 
>> On Sun, 22 Oct 2023 at 00:17, Gary Gregory  wrote:
>> 
>>> Yeah, I saw that on the site and simplified it, but I missed the release
>>> notes, we can pretty up the text post release. Certainly not a blocker
>> IMO.
>>> 
>>> Gary
>>> 
>>> On Sat, Oct 21, 2023, 4:43 PM Elliotte Rusty Harold 
>>> wrote:
>>> 
 One nit. In the release notes I see this:
 
 Commons IO 2.9.0 requires Java 8.
 Commons IO 2.8.0 requires Java 8.
 Commons IO 2.7 requires Java 8.
 Commons IO 2.6 requires Java 7.
 Commons IO 2.5 requires Java 6.
 Commons IO 2.4 requires Java 6.
 Commons IO 2.3 requires Java 6.
 Commons IO 2.2 requires Java 5.
 Commons IO 1.4 requires Java 1.3.
 
 I'm not sure why this is there at all, but if it should be it perhaps
 needs 2.10 through 2.14 as well. Or perhaps just remove this section
 completely.
 
 
 On Sat, Oct 21, 2023 at 7:12 PM Gary Gregory 
 wrote:
> 
> We have fixed a few bugs and added some enhancements since Apache
> Commons IO 2.14.0 was released, so I would like to release Apache
> Commons IO 2.15.0.
> 
> Apache Commons IO 2.15.0 RC1 is available for review here:
>https://dist.apache.org/repos/dist/dev/commons/io/2.15.0-RC1
>> (svn
> revision 64652)
> 
> The Git tag commons-io-2.15.0-RC1 commit for this RC is
> 6bb8020d40f1a4b947ff26949843def5d60292d0 which you can browse here:
> 
 
>>> 
>> https://gitbox.apache.org/repos/asf?p=commons-io.git;a=commit;h=6bb8020d40f1a4b947ff26949843def5d60292d0
> You may checkout this tag using:
>git clone https://gitbox.apache.org/repos/asf/commons-io.git
> --branch commons-io-2.15.0-RC1 commons-io-2.15.0-RC1
> 
> Maven artifacts are here:
> 
 
>>> 
>> https://repository.apache.org/content/repositories/orgapachecommons-1666/commons-io/commons-io/2.15.0/
> 
> These are the artifacts and their hashes:
> 
> #Release SHA-512s
> #Sat Oct 21 14:59:24 EDT 2023
> 
 
>>> 
>> commons-io-2.15.0-bin.tar.gz=026dc2e2ba6edea920813dff5d8e09a5d4e2af5c91b79096159375731bebfefa38be6c1394e57f0f9cef6969c906472ca25f1fa67a1ca84e8a50e2e33763d683
> 
 
>>> 
>> commons-io-2.15.0-bin.zip=74d3db69f9cd015ae5c0a8fffe4eb2bb08a7bd1091db8d75bb7cda1e520fd690045c05e73cca5792e9589f17f3f98eab0add765d4d5cdc90f1ae6e1ace0fd4ce
> 
 
>>> 
>> commons-io-2.15.0-bom.json=ed58acb14027e9abd66676e0acbfbc3e38d832ba12e97d89479d7b9f1a931b326995e0994c66ced7ed10c890d0e5f0630b09b5814b755e6f059babe254677ab5
> 
 
>>> 
>> commons-io-2.15.0-bom.xml=2ac587fc41277f159aa2f70dc8cfd41889dc8e2cdd570540918c186b7b71be1187eae2f034352888015beea5a5058917743921e71374e9a564e29c9cc66b1b73
> 
 
>>> 
>> commons-io-2.15.0-javadoc.jar=3f214472b9d579827a23b498de30d21afe577c59bbfae668d4f42fd9419c2d341499e66bd38cbba074be72f79671dbcb30f2b151d397e90489c4a98b456cc049
> 
 
>>> 
>> commons-io-2.15.0-sources.jar=89a37db267284ba002c6cf2d570b76359f684c354e5b605c94d602f4e3f510264fb05ff2e890362ac13211164933cc640f051c9e49475156e22a833212ec505c
> 
 
>>> 
>> commons-io-2.15.0-src.tar.gz=a8df05b8da8f39408473588a8f4672dee8f4215e50e1001c0132f9bd046b32f5816f2939db471d21578e6748a5f8a998337e3adbc6dbada798d64c39ff1370d0
> 
 
>>> 
>> commons-io-2.15.0-src.zip=4d600f130dbcee703620b7916b6a34ebb36d4ec71ae00da1a1339976cec9bdcea936386b31ac7dcf2e225ac6e0ae1a13bbad0f0ea78bac4dbe4a68a73d347c8b
> 
 
>>> 
>> commons-io-2.15.0-test-sources.jar=5fab0e764cfba8165d4e608e89cee40702cd43739b23f9a5f6c86ecd78fde98f403755e362de2cdefb5ce3ab24ee4f9e049200b76bc365228bd1d5c6d850ab11
> 
 
>>> 
>> commons-io-2.15.0-tests.jar=3e402eeed7ef3093bd75deda30a41cd1a811bf2a95f974a37c4fde114234966298b69b0503ce260e25f66560828668449f7a0d0e2c885e4e5134dcac6492c37e
> 
 
>>> 
>> commons-io_commons-io-2.15.0.spdx.json=606503b5c9d7a9d865ebfea7edf9e4420c580254f47e69cf012089bf934b39bf6e99c74904693c566e0cec994d487cc0bc06d5114f5fa13eb1f38bd0e66f11d2
> 
> I have tested this with
> 
> mvn -V -Prelease -Ptest-deploy -P jacoco -P japicmp clean package
>> site
 deploy
> 
> Using:
> 
> Apache Maven 3.9.5 (57804ffe001d7215b5e7bcb531cf83df38f93546)
> Maven home: /

Re: [GH] (commons-logging): Workflow run "Java CI" failed!

2023-10-25 Thread Gary Gregory 
Please revert or fix the build.

There are large comment blocks in at least three locations in the POM
detailing why running Maven in a normal way will not work.

Thank you,
Gary


On Wed, Oct 25, 2023, 3:02 PM sebb  wrote:

> On Wed, 25 Oct 2023 at 17:19, Gary Gregory  wrote:
> >
> > That's not going to work, please see the comments in the POM. Needs work.
>
> Not sure what comments you are referring to.
>
> If there is a reason not to use a particular default goal, it seems to
> me it should be documented alongside the goal, rather than somewhere
> else.
>
> > Revert for now I say.
> >
> > Gary
> >
> > On Wed, Oct 25, 2023, 11:58 AM GitBox  wrote:
> >
> > >
> > > The GitHub Actions job "Java CI" on commons-logging.git has failed.
> > > Run started by GitHub user asfgit (triggered by asfgit).
> > >
> > > Head commit for run:
> > > e4d68bb37071db1e871a71634d0c535945b96484 / Sebb 
> > > Standardise on verify goal
> > >
> > > Report URL:
> > > https://github.com/apache/commons-logging/actions/runs/6642985893
> > >
> > > With regards,
> > > GitHub Actions via GitBox
> > >
> > >
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> For additional commands, e-mail: dev-h...@commons.apache.org
>
>

Re: [VOTE] Release Apache Commons IO 2.15.0 based on RC1

2023-10-25 Thread Gary Gregory 
This RC vote passes with the following binding +1 votes:

- Bruno Kinoshita
- Gary Gregory
- Rob Tompkins

Gary

On Wed, Oct 25, 2023 at 3:08 PM Rob Tompkins  wrote:
>
> +1 - all looks appropriate, signatures, site, builds, RELEASE-NOTES.txt,
>
> Thank you again Gary and team for all the hard work!
>
> > On Oct 25, 2023, at 5:45 AM, Gary Gregory  wrote:
> >
> > My +1. More reviews please 😉
> >
> > Gary
> >
> > On Sat, Oct 21, 2023, 7:34 PM Bruno Kinoshita 
> > wrote:
> >
> >> [x] +1 Release these artifacts
> >>
> >> Site reports look OK, checked some files in dist area, building fine on
> >> Apache Maven 3.8.5 (3599d3414f046de2324203b78ddcf9b5e4388aa0)
> >> Maven home: /opt/apache-maven-3.8.5
> >> Java version: 17.0.8.1, vendor: Private Build, runtime:
> >> /usr/lib/jvm/java-17-openjdk-amd64
> >> Default locale: en_US, platform encoding: UTF-8
> >> OS name: "linux", version: "5.15.0-86-generic", arch: "amd64", family:
> >> "unix"
> >>
> >> Thanks
> >>
> >> On Sun, 22 Oct 2023 at 00:17, Gary Gregory  wrote:
> >>
> >>> Yeah, I saw that on the site and simplified it, but I missed the release
> >>> notes, we can pretty up the text post release. Certainly not a blocker
> >> IMO.
> >>>
> >>> Gary
> >>>
> >>> On Sat, Oct 21, 2023, 4:43 PM Elliotte Rusty Harold 
> >>> wrote:
> >>>
>  One nit. In the release notes I see this:
> 
>  Commons IO 2.9.0 requires Java 8.
>  Commons IO 2.8.0 requires Java 8.
>  Commons IO 2.7 requires Java 8.
>  Commons IO 2.6 requires Java 7.
>  Commons IO 2.5 requires Java 6.
>  Commons IO 2.4 requires Java 6.
>  Commons IO 2.3 requires Java 6.
>  Commons IO 2.2 requires Java 5.
>  Commons IO 1.4 requires Java 1.3.
> 
>  I'm not sure why this is there at all, but if it should be it perhaps
>  needs 2.10 through 2.14 as well. Or perhaps just remove this section
>  completely.
> 
> 
>  On Sat, Oct 21, 2023 at 7:12 PM Gary Gregory 
>  wrote:
> >
> > We have fixed a few bugs and added some enhancements since Apache
> > Commons IO 2.14.0 was released, so I would like to release Apache
> > Commons IO 2.15.0.
> >
> > Apache Commons IO 2.15.0 RC1 is available for review here:
> >https://dist.apache.org/repos/dist/dev/commons/io/2.15.0-RC1
> >> (svn
> > revision 64652)
> >
> > The Git tag commons-io-2.15.0-RC1 commit for this RC is
> > 6bb8020d40f1a4b947ff26949843def5d60292d0 which you can browse here:
> >
> 
> >>>
> >> https://gitbox.apache.org/repos/asf?p=commons-io.git;a=commit;h=6bb8020d40f1a4b947ff26949843def5d60292d0
> > You may checkout this tag using:
> >git clone https://gitbox.apache.org/repos/asf/commons-io.git
> > --branch commons-io-2.15.0-RC1 commons-io-2.15.0-RC1
> >
> > Maven artifacts are here:
> >
> 
> >>>
> >> https://repository.apache.org/content/repositories/orgapachecommons-1666/commons-io/commons-io/2.15.0/
> >
> > These are the artifacts and their hashes:
> >
> > #Release SHA-512s
> > #Sat Oct 21 14:59:24 EDT 2023
> >
> 
> >>>
> >> commons-io-2.15.0-bin.tar.gz=026dc2e2ba6edea920813dff5d8e09a5d4e2af5c91b79096159375731bebfefa38be6c1394e57f0f9cef6969c906472ca25f1fa67a1ca84e8a50e2e33763d683
> >
> 
> >>>
> >> commons-io-2.15.0-bin.zip=74d3db69f9cd015ae5c0a8fffe4eb2bb08a7bd1091db8d75bb7cda1e520fd690045c05e73cca5792e9589f17f3f98eab0add765d4d5cdc90f1ae6e1ace0fd4ce
> >
> 
> >>>
> >> commons-io-2.15.0-bom.json=ed58acb14027e9abd66676e0acbfbc3e38d832ba12e97d89479d7b9f1a931b326995e0994c66ced7ed10c890d0e5f0630b09b5814b755e6f059babe254677ab5
> >
> 
> >>>
> >> commons-io-2.15.0-bom.xml=2ac587fc41277f159aa2f70dc8cfd41889dc8e2cdd570540918c186b7b71be1187eae2f034352888015beea5a5058917743921e71374e9a564e29c9cc66b1b73
> >
> 
> >>>
> >> commons-io-2.15.0-javadoc.jar=3f214472b9d579827a23b498de30d21afe577c59bbfae668d4f42fd9419c2d341499e66bd38cbba074be72f79671dbcb30f2b151d397e90489c4a98b456cc049
> >
> 
> >>>
> >> commons-io-2.15.0-sources.jar=89a37db267284ba002c6cf2d570b76359f684c354e5b605c94d602f4e3f510264fb05ff2e890362ac13211164933cc640f051c9e49475156e22a833212ec505c
> >
> 
> >>>
> >> commons-io-2.15.0-src.tar.gz=a8df05b8da8f39408473588a8f4672dee8f4215e50e1001c0132f9bd046b32f5816f2939db471d21578e6748a5f8a998337e3adbc6dbada798d64c39ff1370d0
> >
> 
> >>>
> >> commons-io-2.15.0-src.zip=4d600f130dbcee703620b7916b6a34ebb36d4ec71ae00da1a1339976cec9bdcea936386b31ac7dcf2e225ac6e0ae1a13bbad0f0ea78bac4dbe4a68a73d347c8b
> >
> 
> >>>
> >> commons-io-2.15.0-test-sources.jar=5fab0e764cfba8165d4e608e89cee40702cd43739b23f9a5f6c86ecd78fde98f403755e362de2cdefb5ce3ab24ee4f9e049200b76bc365228bd1d5c6d850ab11
> >
> 
> >>>
> >> commons-io-2.15.0-tests.jar=3e402eeed7ef3093bd75deda30a41cd1a811bf2a95f974a37c4fde114234966298b69b0503ce260e25f66560828668449f7a0d0e2c885e4e5134dcac6492c37e
> >
> 
> >>>
> >> commons-io_commons-io-2.15.0.spdx.json=606503b5c9d7a

[RESULT][VOTE] Release Apache Commons IO 2.15.0 based on RC1

2023-10-25 Thread Gary Gregory 
Shoulda prefixed with "[RESULT]", now.

Gary

On Wed, Oct 25, 2023 at 3:42 PM Gary Gregory  wrote:
>
> This RC vote passes with the following binding +1 votes:
>
> - Bruno Kinoshita
> - Gary Gregory
> - Rob Tompkins
>
> Gary
>
> On Wed, Oct 25, 2023 at 3:08 PM Rob Tompkins  wrote:
> >
> > +1 - all looks appropriate, signatures, site, builds, RELEASE-NOTES.txt,
> >
> > Thank you again Gary and team for all the hard work!
> >
> > > On Oct 25, 2023, at 5:45 AM, Gary Gregory  wrote:
> > >
> > > My +1. More reviews please 😉
> > >
> > > Gary
> > >
> > > On Sat, Oct 21, 2023, 7:34 PM Bruno Kinoshita 
> > > wrote:
> > >
> > >> [x] +1 Release these artifacts
> > >>
> > >> Site reports look OK, checked some files in dist area, building fine on
> > >> Apache Maven 3.8.5 (3599d3414f046de2324203b78ddcf9b5e4388aa0)
> > >> Maven home: /opt/apache-maven-3.8.5
> > >> Java version: 17.0.8.1, vendor: Private Build, runtime:
> > >> /usr/lib/jvm/java-17-openjdk-amd64
> > >> Default locale: en_US, platform encoding: UTF-8
> > >> OS name: "linux", version: "5.15.0-86-generic", arch: "amd64", family:
> > >> "unix"
> > >>
> > >> Thanks
> > >>
> > >> On Sun, 22 Oct 2023 at 00:17, Gary Gregory  
> > >> wrote:
> > >>
> > >>> Yeah, I saw that on the site and simplified it, but I missed the release
> > >>> notes, we can pretty up the text post release. Certainly not a blocker
> > >> IMO.
> > >>>
> > >>> Gary
> > >>>
> > >>> On Sat, Oct 21, 2023, 4:43 PM Elliotte Rusty Harold 
> > >>> wrote:
> > >>>
> >  One nit. In the release notes I see this:
> > 
> >  Commons IO 2.9.0 requires Java 8.
> >  Commons IO 2.8.0 requires Java 8.
> >  Commons IO 2.7 requires Java 8.
> >  Commons IO 2.6 requires Java 7.
> >  Commons IO 2.5 requires Java 6.
> >  Commons IO 2.4 requires Java 6.
> >  Commons IO 2.3 requires Java 6.
> >  Commons IO 2.2 requires Java 5.
> >  Commons IO 1.4 requires Java 1.3.
> > 
> >  I'm not sure why this is there at all, but if it should be it perhaps
> >  needs 2.10 through 2.14 as well. Or perhaps just remove this section
> >  completely.
> > 
> > 
> >  On Sat, Oct 21, 2023 at 7:12 PM Gary Gregory 
> >  wrote:
> > >
> > > We have fixed a few bugs and added some enhancements since Apache
> > > Commons IO 2.14.0 was released, so I would like to release Apache
> > > Commons IO 2.15.0.
> > >
> > > Apache Commons IO 2.15.0 RC1 is available for review here:
> > >https://dist.apache.org/repos/dist/dev/commons/io/2.15.0-RC1
> > >> (svn
> > > revision 64652)
> > >
> > > The Git tag commons-io-2.15.0-RC1 commit for this RC is
> > > 6bb8020d40f1a4b947ff26949843def5d60292d0 which you can browse here:
> > >
> > 
> > >>>
> > >> https://gitbox.apache.org/repos/asf?p=commons-io.git;a=commit;h=6bb8020d40f1a4b947ff26949843def5d60292d0
> > > You may checkout this tag using:
> > >git clone https://gitbox.apache.org/repos/asf/commons-io.git
> > > --branch commons-io-2.15.0-RC1 commons-io-2.15.0-RC1
> > >
> > > Maven artifacts are here:
> > >
> > 
> > >>>
> > >> https://repository.apache.org/content/repositories/orgapachecommons-1666/commons-io/commons-io/2.15.0/
> > >
> > > These are the artifacts and their hashes:
> > >
> > > #Release SHA-512s
> > > #Sat Oct 21 14:59:24 EDT 2023
> > >
> > 
> > >>>
> > >> commons-io-2.15.0-bin.tar.gz=026dc2e2ba6edea920813dff5d8e09a5d4e2af5c91b79096159375731bebfefa38be6c1394e57f0f9cef6969c906472ca25f1fa67a1ca84e8a50e2e33763d683
> > >
> > 
> > >>>
> > >> commons-io-2.15.0-bin.zip=74d3db69f9cd015ae5c0a8fffe4eb2bb08a7bd1091db8d75bb7cda1e520fd690045c05e73cca5792e9589f17f3f98eab0add765d4d5cdc90f1ae6e1ace0fd4ce
> > >
> > 
> > >>>
> > >> commons-io-2.15.0-bom.json=ed58acb14027e9abd66676e0acbfbc3e38d832ba12e97d89479d7b9f1a931b326995e0994c66ced7ed10c890d0e5f0630b09b5814b755e6f059babe254677ab5
> > >
> > 
> > >>>
> > >> commons-io-2.15.0-bom.xml=2ac587fc41277f159aa2f70dc8cfd41889dc8e2cdd570540918c186b7b71be1187eae2f034352888015beea5a5058917743921e71374e9a564e29c9cc66b1b73
> > >
> > 
> > >>>
> > >> commons-io-2.15.0-javadoc.jar=3f214472b9d579827a23b498de30d21afe577c59bbfae668d4f42fd9419c2d341499e66bd38cbba074be72f79671dbcb30f2b151d397e90489c4a98b456cc049
> > >
> > 
> > >>>
> > >> commons-io-2.15.0-sources.jar=89a37db267284ba002c6cf2d570b76359f684c354e5b605c94d602f4e3f510264fb05ff2e890362ac13211164933cc640f051c9e49475156e22a833212ec505c
> > >
> > 
> > >>>
> > >> commons-io-2.15.0-src.tar.gz=a8df05b8da8f39408473588a8f4672dee8f4215e50e1001c0132f9bd046b32f5816f2939db471d21578e6748a5f8a998337e3adbc6dbada798d64c39ff1370d0
> > >
> > 
> > >>>
> > >> commons-io-2.15.0-src.zip=4d600f130dbcee703620b7916b6a34ebb36d4ec71ae00da1a1339976cec9bdcea936386b31ac7dcf2e225ac6e0ae1a13bbad0f0ea78bac4dbe4a68a73d347c8b
> > >
> > 
> > >>>
> > >> commons-io-2.15.0-test-sources.jar=5fab0e764cfba8165d4e

Re: [VOTE] Release Apache Commons CLI 1.6.0 based on RC1

2023-10-25 Thread Rob Tompkins 
+1, signatures, site, builds, and release notes all good

Send it!

> On Oct 23, 2023, at 1:07 PM, Gary Gregory  wrote:
> 
> We have fixed quite a few bugs and added some significant enhancements
> since Apache Commons CLI 1.5.0 was released, so I would like to
> release Apache Commons CLI 1.6.0.
> 
> Apache Commons CLI 1.6.0 RC1 is available for review here:
>https://dist.apache.org/repos/dist/dev/commons/cli/1.6.0-RC1 (svn
> revision 64679)
> 
> The Git tag commons-cli-1.6.0-RC1 commit for this RC is
> 0d29a55998aa52be8832497527e266630f97c371 which you can browse here:
>
> https://gitbox.apache.org/repos/asf?p=commons-cli.git;a=commit;h=0d29a55998aa52be8832497527e266630f97c371
> You may checkout this tag using:
>git clone https://gitbox.apache.org/repos/asf/commons-cli.git
> --branch commons-cli-1.6.0-RC1 commons-cli-1.6.0-RC1
> 
> Maven artifacts are here:
>
> https://repository.apache.org/content/repositories/orgapachecommons-1667/commons-cli/commons-cli/1.6.0/
> 
> These are the artifacts and their hashes:
> 
> #Release SHA-512s
> #Mon Oct 23 12:59:22 EDT 2023
> commons-cli-1.6.0-bin.tar.gz=26487b81809d7bb79c21423d5a1556bcd0945db59a5096793fa14699b8b5001018707c72a3475a48a5071777f2c3c6a5d91936e1b7dcbd675ece855f1b929a82
> commons-cli-1.6.0-bin.zip=9e7b89b2b32363acf9c4a773559697eb832c1fe1236859cbbd5e254bed5d205e95f46ef1cce563ca4612d672fc22a7239adcc3ba573b0fa23d80b967efe9b8bf
> commons-cli-1.6.0-bom.json=532c4312167b76e2003f706e2bb7c45eec0782fe6d9977a0a5533f56961808c7e8d0c8b705acb11f5537fe5aabe0b6143c02184c666919d77a1fa7b4fed196ee
> commons-cli-1.6.0-bom.xml=eb4ca6cc32dcb9f122fe86fffaea411cb768826566961582e618d1480341490a72503f225b7150ef21631f50ef3edfbbb5fed25d2b2b7d113e0b3e86ef8786e7
> commons-cli-1.6.0-javadoc.jar=830e0c0ffb4b5d369dbd72af278897cbd2c3396ddb64d8b3ba53360073be5af4f96af988e8fe56f8bf85f661e15b709fdc7034522adefb2e8200e836d1fc193a
> commons-cli-1.6.0-sources.jar=8ed0a9ce0e0064c3da1027b4615c918ad81d440fcea87e41e6461d178bed43bbdd2908876d004ffdb393df6fd0d4bfc12a5a8b3e0fdf48b47d9c96571d11895b
> commons-cli-1.6.0-src.tar.gz=029088e7c51b657a0be5478685e1f689d6d39357957b3b8813ef6b315b4676ba4bd17b739dc15e09a30f8abfbe22e169c1c629f662477821adf0aa66474e1812
> commons-cli-1.6.0-src.zip=c98b917e89bc4023e36f2bb8585f4c62b01a82f2937167a34c12d40b65a0870269a38109e896e4eefef58cdc3f3e821def8ef524a0c267051c67da84975d
> commons-cli-1.6.0-test-sources.jar=09b72e7050592e8d34caf7d08679011421f4bc90a9d8fc9f83d0e7629e4e7fb730f765cba8bae9bf048e9f3be806f9fa3a74423ff8982caa08048d71861dd410
> commons-cli-1.6.0-tests.jar=89b2211fdfa912db46814ed0df7c39a88a6a2a233009684dfb0344ea16b5a28b5fcf13342fbe2ea3a802050f4b591e05f25f7b96bbbfebb16d2ab038cf2f713a
> commons-cli_commons-cli-1.6.0.spdx.json=9abdae007fa94496c92deb2bcc203f0814692f1de741f5961c5fe3015d6274ea51a508f26ea79913d8fed4746c0eda1a6dfc1405e8056544847177b5ffa74c4f
> 
> I have tested this with:
> 
> mvn -V -Prelease -Ptest-deploy -P jacoco -P japicmp clean package site deploy
> 
> Using:
> 
> Apache Maven 3.9.5 (57804ffe001d7215b5e7bcb531cf83df38f93546)
> Maven home: /usr/local/Cellar/maven/3.9.5/libexec
> Java version: 21, vendor: Homebrew, runtime:
> /usr/local/Cellar/openjdk/21/libexec/openjdk.jdk/Contents/Home
> Default locale: en_US, platform encoding: UTF-8
> OS name: "mac os x", version: "14.0", arch: "x86_64", family: "mac"
> Darwin gdg-mac-mini.local 23.0.0 Darwin Kernel Version 23.0.0: Fri Sep
> 15 14:42:42 PDT 2023; root:xnu-10002.1.13~1/RELEASE_X86_64 x86_64
> 
> Details of changes since 1.5.0 are in the release notes:
>
> https://dist.apache.org/repos/dist/dev/commons/cli/1.6.0-RC1/RELEASE-NOTES.txt
>
> https://dist.apache.org/repos/dist/dev/commons/cli/1.6.0-RC1/site/changes-report.html
> 
> Site:
>
> https://dist.apache.org/repos/dist/dev/commons/cli/1.6.0-RC1/site/index.html
>(note some *relative* links are broken and the 1.6.0 directories
> are not yet created - these will be OK once the site is deployed.)
> 
> JApiCmp Report (compared to 1.5.0):
>
> https://dist.apache.org/repos/dist/dev/commons/cli/1.6.0-RC1/site/japicmp.html
> 
> RAT Report:
>
> https://dist.apache.org/repos/dist/dev/commons/cli/1.6.0-RC1/site/rat-report.html
> 
> KEYS:
>  https://downloads.apache.org/commons/KEYS
> 
> Please review the release candidate and vote.
> This vote will close no sooner than 72 hours from now.
> 
>  [ ] +1 Release these artifacts
>  [ ] +0 OK, but...
>  [ ] -0 OK, but really should fix...
>  [ ] -1 I oppose this release because...
> 
> Thank you,
> 
> Gary Gregory,
> Release Manager (using key 86fdc7e2a11262cb)
> 
> For following is intended as a helper and refresher for reviewers.
> 
> Validating a release candidate
> ==
> 
> These guidelines are NOT complete.
> 
> Requirements: Git, Java, Maven.
> 
> You can validate a release from a release candidate (RC) tag as follows.
> 
> 1a) Clone and checkout the RC tag
> 
> git clone https://gitbox.apache.org/repos/asf/commons-cli.git --branch
> commo

Re: [ALL] README.md and CONTRIBUTING.md

2023-10-25 Thread sebb 
On Wed, 25 Oct 2023 at 11:28, Gary Gregory  wrote:
>
> In older times, we were more concerned with providing a somewhat self
> contained source zip/tar.

Not sure how that is relevant.

> I am concerned that hyperlinking these files
> would add another step and be a hassle to GitHub users, like myself. I
> really like having at least all top level type of information in the Readme
> such that the repository presents itself as nicely as possible.

In which case, I suggest we merge the parent POM into every component,
to save having to look it up.

> Gary
>
> On Wed, Oct 25, 2023, 6:17 AM sebb  wrote:
>
> > These files can be generated by the build plugin.
> > As such, most of the information is duplicated across all the repositories.
> >
> > This is convenient for users - provided that it is up to date.
> >
> > The problem is that making any changes is very time-consuming:
> > - update build-plugin
> > - vote on release
> > - release plugin
> > - run the plugin in nearly every component (some have their own
> > versions of the files)
> >
> > It seems to me that the README file should only contain info specific
> > to the component, and should be maintained locally. The build plugin
> > could be used to provide an initial template, but should not clobber
> > an existing entry.
> >
> > CONTRIBUTING.md should be a link to a shared file (as is done with
> > SECURITY.md).
> > [It's now very easy to update the main site, so I think the
> > contributing info should be stored there.]
> >
> > Sebb
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> > For additional commands, e-mail: dev-h...@commons.apache.org
> >
> >

-
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org