[VOTE][LAZY] Release Apache Logging Parent 10.3.0 (RC3)

2023-11-09 Thread Volkan Yazıcı
This is a lazy-vote to release the Apache Logging Parent 10.3.0 RC3.

Website: https://logging.staged.apache.org/logging-parent
GitHub: https://github.com/apache/logging-parent
Commit: 44c6dd8b4356854c2c467e89f04dcc042cc8fad3
Distribution: https://dist.apache.org/repos/dist/dev/logging/logging-parent
Nexus: https://repository.apache.org/content/repositories/orgapachelogging-1222
Signing key: 0x077e8893a6dcc33dd4a4d5b256e73ba9a0b592d0

Please download, test, and cast your votes on this mailing list.

[ ] +1, release the artifacts
[ ] -1, don't release, because...

This vote is open for 24 hours and will pass unless getting a
net negative vote count. All votes are welcome and we encourage
everyone to test the release, but only the Logging Services PMC
votes are officially counted.

=== Review aid

RC2..RC3: 
https://github.com/apache/logging-parent/compare/ca99077f82923a97d79ea7947e05cb589873d241..44c6dd8b4356854c2c467e89f04dcc042cc8fad3

rel/10.2.0..RC3:
https://github.com/apache/logging-parent/compare/rel/10.2.0..44c6dd8b4356854c2c467e89f04dcc042cc8fad3

=== Note on voting time window

I chose a 24h time window even though earlier people requested a
longer period. The RC2 time window has already been exceeded and
nobody has participated. Similar has happened to RC1 too. I think RC3
is good to go and PMC can always down vote the _usage_ of
`logging-parent`, which is an internal component.

=== Release Notes

This minor release contains several small improvements.

 Added

* Add support to extend the `bnd-maven-plugin` configuration with
`bnd-extra-config` property (apache/logging-log4j2#1895)
* Add support to replace `project.build.outputTimestamp` Maven
property in CI (#50)
* Add XSLT transformation step to add a deterministic `serialNumber`
and VDR links to the SBOM
* Add support for an optional `spotbugs-exclude.xml` file

 Changed

* `deploy-release-reusable.yaml` is improved to automatically derive
deployed artifacts as attachments. This renders both
`distribution-attachment-filepath-pattern` and
`distribution-attachment-count` input arguments redundant for almost
all cases.
* Disable the usage of `` and alpha releases
in the `bnd-baseline-maven-plugin`
* Convert `bnd-maven-plugin` API leakage warnings to errors
(apache/logging-log4j2#1895)
* Update `com.github.spotbugs:spotbugs-annotations` to version `4.8.1` (#58)
* Update `com.github.spotbugs:spotbugs-maven-plugin` to version `4.8.1.0` (#57)
* Update `com.google.errorprone:error_prone_core` to version `2.23.0` (#49)
* Update `org.apache.maven.plugins:maven-artifact-plugin` to version `3.5.0`
* Update `org.cyclonedx:cyclonedx-maven-plugin` to version `2.7.10` (#54)

 Fixed

* Fix broken changelog entry validation
* Attach `flatten:clean` to `clean` phase
* Add missing `Implementation-` and `Specification-` entries in
`MANIFEST.MF` to `bnd-maven-plugin` configuration
(apache/logging-log4j2#1923)


Re: Deterministic formatter

2023-11-09 Thread Piotr P. Karwasz
Hi all,

On Wed, 8 Nov 2023 at 09:05, Volkan Yazıcı  wrote:
> I completely agree with Matt. With or without IDE plugins, we run `./mvnw
> spotless:apply` anyway. Hence, lack of Eclipse support is not a blocker,
> IMO. Gary is covered.
>
> +1 deterministic formatter (don't have an opinion on Palantir-vs-Google)
>
> Piotr, it has been two months or so since we are discussing this. No
> objections so far. Please go ahead and implement this. It will help a lot
> for sync'ing `2.x` and `3.x`.

I submitted a PR against `palantir-java-formatter`:
https://github.com/palantir/palantir-java-format/pull/949

It's an independent Maven project, so it can be used to generate an
Eclipse plugin that "works for me". Gary can you check if it works for
you?

It might take me a while to integrate that into Palantir's Gradle
build. If you have mad Gradle skills, feel free to get a crack at it.
As far as I can tell, the only "hard" operation is retrieving the
`org.eclipse.jdt.core` artifact from a P2 repository to use in the
compilation step. The remaining steps are copying a bunch of resources
and three dependency libraries into the JAR.

+1

I consider this task accomplished and I'll start deploying the
Palantir formatter to our repos next week.

Piotr