Adding my +1.
With that, the release passes with 1 binding +1 vote from me.
I will continue the release process.
On Thu, Nov 9, 2023 at 10:30 AM Volkan Yazıcı wrote:
>
> This is a lazy-vote to release the Apache Logging Parent 10.3.0 RC3.
>
> Website: https://logging.staged.apache.org/logging-parent
> GitHub: https://github.com/apache/logging-parent
> Commit: 44c6dd8b4356854c2c467e89f04dcc042cc8fad3
> Distribution: https://dist.apache.org/repos/dist/dev/logging/logging-parent
> Nexus:
> https://repository.apache.org/content/repositories/orgapachelogging-1222
> Signing key: 0x077e8893a6dcc33dd4a4d5b256e73ba9a0b592d0
>
> Please download, test, and cast your votes on this mailing list.
>
> [ ] +1, release the artifacts
> [ ] -1, don't release, because...
>
> This vote is open for 24 hours and will pass unless getting a
> net negative vote count. All votes are welcome and we encourage
> everyone to test the release, but only the Logging Services PMC
> votes are officially counted.
>
> === Review aid
>
> RC2..RC3:
> https://github.com/apache/logging-parent/compare/ca99077f82923a97d79ea7947e05cb589873d241..44c6dd8b4356854c2c467e89f04dcc042cc8fad3
>
> rel/10.2.0..RC3:
> https://github.com/apache/logging-parent/compare/rel/10.2.0..44c6dd8b4356854c2c467e89f04dcc042cc8fad3
>
> === Note on voting time window
>
> I chose a 24h time window even though earlier people requested a
> longer period. The RC2 time window has already been exceeded and
> nobody has participated. Similar has happened to RC1 too. I think RC3
> is good to go and PMC can always down vote the _usage_ of
> `logging-parent`, which is an internal component.
>
> === Release Notes
>
> This minor release contains several small improvements.
>
> Added
>
> * Add support to extend the `bnd-maven-plugin` configuration with
> `bnd-extra-config` property (apache/logging-log4j2#1895)
> * Add support to replace `project.build.outputTimestamp` Maven
> property in CI (#50)
> * Add XSLT transformation step to add a deterministic `serialNumber`
> and VDR links to the SBOM
> * Add support for an optional `spotbugs-exclude.xml` file
>
> Changed
>
> * `deploy-release-reusable.yaml` is improved to automatically derive
> deployed artifacts as attachments. This renders both
> `distribution-attachment-filepath-pattern` and
> `distribution-attachment-count` input arguments redundant for almost
> all cases.
> * Disable the usage of `` and alpha releases
> in the `bnd-baseline-maven-plugin`
> * Convert `bnd-maven-plugin` API leakage warnings to errors
> (apache/logging-log4j2#1895)
> * Update `com.github.spotbugs:spotbugs-annotations` to version `4.8.1` (#58)
> * Update `com.github.spotbugs:spotbugs-maven-plugin` to version `4.8.1.0`
> (#57)
> * Update `com.google.errorprone:error_prone_core` to version `2.23.0` (#49)
> * Update `org.apache.maven.plugins:maven-artifact-plugin` to version `3.5.0`
> * Update `org.cyclonedx:cyclonedx-maven-plugin` to version `2.7.10` (#54)
>
> Fixed
>
> * Fix broken changelog entry validation
> * Attach `flatten:clean` to `clean` phase
> * Add missing `Implementation-` and `Specification-` entries in
> `MANIFEST.MF` to `bnd-maven-plugin` configuration
> (apache/logging-log4j2#1923)
