On Thu, Jan 9, 2025 at 6:05 PM Herve Boutemy wrote:
>
> -0
>
> as I feared, same issue as Commons Release Plugin 1.9.0 RC1: wrong component
> hash in SBOM (in this case, it's one dependency: commons-codec)
>
> When I read
> > Built using: mvn clean install site -s "$HOME/.m2/commons-settings.xml"
Hi Sebb,
It's not a hack but the Maven way of providing reproducible builds as
documented here:
https://maven.apache.org/guides/mini/guide-reproducible-builds.html
HTH,
Gary
On Thu, Jan 9, 2025 at 7:27 PM sebb wrote:
>
> I think I have found the issue:
>
> The parent and validator pom.xml files
I think I have found the issue:
The parent and validator pom.xml files now contain a definition for
the property:
project.build.outputTimestamp
This appears to be a hack related to reproducible builds.
Whilst that is a worthwhile goal, I don't think that should be to the
detriment of an accurate
On Thu, 9 Jan 2025 at 23:04, Herve Boutemy wrote:
>
> -0
>
> as I feared, same issue as Commons Release Plugin 1.9.0 RC1: wrong component
> hash in SBOM (in this case, it's one dependency: commons-codec)
>
> When I read
> > Built using: mvn clean install site -s "$HOME/.m2/commons-settings.xml"
>
It looks like the changes to CP 79 and the maven site setup have
broken the 'Last Published' date.
When I build with
$ mvn site -Psite-quick
For CP 79 I get
Last Published: 07 Jan 2025
For validator I get:
Last Published: 28 May 2024
Sebb
-0
as I feared, same issue as Commons Release Plugin 1.9.0 RC1: wrong component
hash in SBOM (in this case, it's one dependency: commons-codec)
When I read
> Built using: mvn clean install site -s "$HOME/.m2/commons-settings.xml"
install should seriously be avoided when voting, but verify or pa
[+1]
Build & tests ok, site & API look good, changes & reports are clean (very nice
coverage).
Built using: mvn clean install site -s "$HOME/.m2/commons-settings.xml"
On:
Apache Maven 3.8.6 (84538c9988a25aec085021c365c560670ad80f63)
Maven home: /Users/hbiestro/Java/apache-maven-3.8.6
Java versio
My +1
Gary
On 2025/01/08 14:01:28 Gary Gregory wrote:
> We have fixed a few bugs and added enhancements since Apache Commons
> CSV 1.12.0 was released, so I would like to release Apache Commons CSV
> 1.13.0.
>
> Apache Commons CSV 1.13.0 RC1 is available for review here:
> https://dist.apach
