Re: [VOTE] Release Apache Log4j Kotlin API 1.4.0
And my +1. With this, the vote passes with 4 +1 votes from myself, Volkan, Piotr, and Gary. — Matt Sicker > On Dec 24, 2023, at 09:57, Gary Gregory wrote: > > +1 > - Tested src zip file > - ASC OK > - SHA512 OK > - Building 'mvn clean verify' OK > - Using: > Apache Maven 3.9.6 (bc0240f3c744dd6b6ec2920b3cd08dcc295161ae) > Maven home: /usr/local/Cellar/maven/3.9.6/libexec > Java version: 17.0.9, vendor: Homebrew, runtime: > /usr/local/Cellar/openjdk@17/17.0.9/libexec/openjdk.jdk/Contents/Home > Default locale: en_US, platform encoding: UTF-8 > OS name: "mac os x", version: "14.2.1", arch: "x86_64", family: "mac" > Darwin 23.2.0 Darwin Kernel Version 23.2.0: Wed Nov 15 21:54:10 > PST 2023; root:xnu-10002.61.3~2/RELEASE_X86_64 x86_64 > > Gary > > On Wed, Dec 20, 2023 at 1:08 PM Matt Sicker wrote: >> >> This is a vote to release the Apache Log4j Kotlin API 1.4.0. >> >> Website: https://logging.staged.apache.org/log4j/kotlin >> GitHub: https://github.com/apache/logging-log4j-kotlin >> Commit: ee2d4a8efa16bb2223252329531c94e98ed6d1e6 >> Distribution: https://dist.apache.org/repos/dist/dev/logging/log4j-kotlin >> Nexus: >> https://repository.apache.org/content/repositories/orgapachelogging-1113 >> Signing key: 0x077e8893a6dcc33dd4a4d5b256e73ba9a0b592d0 >> >> Please download, test, and cast your votes on this mailing list. >> >> [ ] +1, release the artifacts >> [ ] -1, don't release, because... >> >> This vote is open for 72 hours and will pass unless getting a >> net negative vote count. All votes are welcome and we encourage >> everyone to test the release, but only the Logging Services PMC >> votes are officially counted. At least 3 +1 votes and more >> positive than negative votes are required. >> >> === Review kit >> >> The minimum set of steps needed to review the uploaded distribution >> files in the Subversion repository can be summarized as follows: >> >># Check out the distribution >>svn co https://dist.apache.org/repos/... && cd $_ >> >># Verify checksums >>shasum --check *.sha512 >> >># Verify signatures >>wget -O - https://downloads.apache.org/logging/KEYS | gpg --import >>for sigFile in *.asc; do gpg --verify $sigFile; done >> >># Verify reproduciblity >>umask 0022 >>unzip *-src.zip -d src >>cd src >>export NEXUS_REPO=https://repository.apache.org/content/... >>sh mvnw -Prelease verify artifact:compare -Dreference.repo=$NEXUS_REPO >> >> === Release notes >> >> >> This minor release fixes incorrect coroutine context map and stack. >> >> >> Added >> >> * Started generating CycloneDX SBOM with the recent update of >> `logging-parent` to version `10.2.0` >> >> Changed >> >> * Coroutine context is not cleared properly, only appended to (#54) >> * Update `org.apache.logging:logging-parent` to version `10.2.0` >> * Update `org.apache.logging.log4j:log4j-bom` to version `2.22.0` (#52) >> * Update `org.apache.logging:logging-parent` to version `10.4.0` (#53) >> * Update `org.codehaus.mojo:build-helper-maven-plugin` to version `3.5.0` >> (#51) >> * Update `org.codehaus.mojo:exec-maven-plugin` to version `3.1.1` (#50) >> * Update `org.junit:junit-bom` to version `5.10.1` (#49)
Re: [VOTE] Release Apache Log4j 2.22.1 RC1
While there appears to be some issues with the reproducibility of the build, it appears to be inconsequential. +1 — Matt Sicker > On Dec 22, 2023, at 12:00, Piotr P. Karwasz wrote: > > This is a vote to release the Apache Log4j 2.22.1. > > Website: https://logging.staged.apache.org/log4j/2.x/ > GitHub: https://github.com/apache/logging-log4j2 > Commit: 8469975a4f2b1f8f1bd4f25ca6d1989a52aefc1b > Distribution: https://dist.apache.org/repos/dist/dev/logging/log4j > Nexus: > https://repository.apache.org/content/repositories/orgapachelogging-1254 > Signing key: 0x077e8893a6dcc33dd4a4d5b256e73ba9a0b592d0 > > Please download, test, and cast your votes on this mailing list. > > [ ] +1, release the artifacts > [ ] -1, don't release, because... > > This vote is open for 72 hours and will pass unless getting a > net negative vote count. All votes are welcome and we encourage > everyone to test the release, but only the Logging Services PMC > votes are officially counted. > > == Review Kit > > The minimum set of steps needed to review the uploaded distribution > files in the Subversion repository can be summarized as follows: > ># Check out the distribution >wget --recursive --no-parent --no-host-directories --cut-dirs=5 > https://dist.apache.org/repos/dist/dev/logging/log4j > ># Verify checksums >sha512sum --check *.sha512 > ># Verify signatures >wget -O - https://downloads.apache.org/logging/KEYS | gpg --import >for sigFile in *.asc; do gpg --verify $sigFile; done > ># Verify reproduciblity >umask 0022 >unzip *-src.zip -d src >cd src >export > NEXUS_REPO=https://repository.apache.org/content/repositories/orgapachelogging-1254 >sh mvnw -Prelease verify artifact:compare -Dreference.repo=$NEXUS_REPO > > == Release Notes > > This release contains only dependency upgrades and bug fixes, which do > not change the behavior of the artifacts. > > While maintaining compatibility with Java 8, the artifacts in this > release where generated using JDK 17, unlike version `2.22.0` that > used JDK 11. > > > [#release-notes-2-22-1-fixed] > === Fixed > > * Mark `JdkMapAdapterStringMap` as frozen if map is immutable. (#2098) > * Fix NPE in `CloseableThreadContext`. (#1426) > * Use the module name of Conversant Media Disruptor from version > `1.2.16+` of the library. > * Fix NPE in `RollingFileManager`. (#1645) > * Fix `log4j-to-slf4j` JPMS and OSGi descriptors. (#1983) > * Workaround a Coursier/Ivy dependency resolution bug affecting > `log4j-slf4j-impl` and `log4j-mongodb3`. (#2065) > > [#release-notes-2-22-1-updated] > === Updated > > * Bumped the minimum Java version required for the build to Java 17. > Runtime requirements remain unchanged. (#2021) > * Update `com.github.luben:zstd-jni` to version `1.5.5-11` (#2030) > * Update `com.google.guava:guava` to version `33.0.0-jre` (#2110) > * Update `commons-codec:commons-codec` to version `1.16.0` (#2042) > * Update `commons-io:commons-io` to version `2.15.1` (#2034) > * Update `commons-logging:commons-logging` to version `1.3.0` (#2050) > * Update `io.netty:netty-bom` to version `4.1.104.Final` (#2095) > * Update `org.apache.commons:commons-compress` to version `1.25.0` (#2045) > * Update `org.apache.commons:commons-dbcp2` to version `2.11.0` (#2048) > * Update `org.apache.commons:commons-lang3` to version `3.14.0` (#2047) > * Update `org.apache.commons:commons-pool2` to version `2.12.0` (#2057) > * Update `org.apache.kafka:kafka-clients` to version `3.6.1` (#2068) > * Update `org.apache.logging:logging-parent` to version `10.5.0` (#2119) > * Update `org.jctools:jctools-core` to version `4.0.2` (#1984) > * Update `org.springframework.boot:spring-boot` to version `2.7.18` (#1998) > * Update `org.springframework.cloud:spring-cloud-dependencies` to > version `2021.0.9` (#2109)
Re: [VOTE] Release Apache Log4j 2.22.1 RC1
On Wed, 27 Dec 2023 at 00:54, Matt Sicker wrote: > > While there appears to be some issues with the reproducibility of the build, > it appears to be inconsequential. > > +1 Adding my +1, this vote passes with 3 +1 from: Gary, Matt and me. I will continue the release process. Piotr BTW: reproducibility is not an issue for me (Debian 11, JDK 17).
