This vote thread passes with the following votes:
+1 Gary Gregory (ggregory, binding)
+1 Henri Biestro (henrib, binding)
- 0 Herve Boutemy (hboutemy, non-binding)
- 0 Piotr P. Karwasz (ppkarwasz, binding)
+ 1 Arnout Engelen (engelen, binding)
A todo is to improve reproducible builds.
TY,
Gary
O
On Thu, Jan 9, 2025 at 6:57 PM sebb wrote:
>
> On Thu, 9 Jan 2025 at 23:04, Herve Boutemy wrote:
> >
> > -0
> >
> > as I feared, same issue as Commons Release Plugin 1.9.0 RC1: wrong
> > component hash in SBOM (in this case, it's one dependency: commons-codec)
> >
> > When I read
> > > Built usi
On Fri, Jan 10, 2025 at 6:36 PM Herve Boutemy wrote:
>
>
>
> On 2025/01/10 01:32:55 Gary Gregory wrote:
> > On Thu, Jan 9, 2025 at 6:05 PM Herve Boutemy wrote:
> > >
> > > -0
> > >
> > > as I feared, same issue as Commons Release Plugin 1.9.0 RC1: wrong
> > > component hash in SBOM (in this case
On 2025/01/10 08:38:57 "Piotr P. Karwasz" wrote:
> Hi,
>
> On 10.01.2025 00:04, Herve Boutemy wrote:
> > -0
> >
> > as I feared, same issue as Commons Release Plugin 1.9.0 RC1: wrong
> > component hash in SBOM (in this case, it's one dependency: commons-codec)
>
> -0
>
> Same problem: the SB
On 2025/01/10 01:32:55 Gary Gregory wrote:
> On Thu, Jan 9, 2025 at 6:05 PM Herve Boutemy wrote:
> >
> > -0
> >
> > as I feared, same issue as Commons Release Plugin 1.9.0 RC1: wrong
> > component hash in SBOM (in this case, it's one dependency: commons-codec)
> >
> > When I read
> > > Built u
> Are you sure install is not needed with multi-module builds?
yes: this issue existed sometimes with Maven 2
but starting with Maven 3, reactor inter-module resolution works flawlessly
Regards,
Hervé
On 2025/01/09 23:56:38 sebb wrote:
> On Thu, 9 Jan 2025 at 23:04, Herve Boutemy wrote:
> >
> >
On Fri, Jan 10, 2025 at 3:40 AM Piotr P. Karwasz
wrote:
>
> Hi,
>
> On 10.01.2025 00:04, Herve Boutemy wrote:
> > -0
> >
> > as I feared, same issue as Commons Release Plugin 1.9.0 RC1: wrong
> > component hash in SBOM (in this case, it's one dependency: commons-codec)
>
> -0
>
> Same problem: th
I have:
* checked out git tag commons-csv-1.13.0-RC1
* verified it corresponds to f2f1cffe53cde4b36623403bdc27855cec01fac2
* downloaded source zip and tgz
* verified the hashes match
139a40878b45027d2b7b481eb0ec51f829c155747b096b4acb639ee18acc2b4c994232d623cd2bdf84d8147ec96a4cf9b327567435f2806f0dc9
Hi,
On 10.01.2025 00:04, Herve Boutemy wrote:
-0
as I feared, same issue as Commons Release Plugin 1.9.0 RC1: wrong component
hash in SBOM (in this case, it's one dependency: commons-codec)
-0
Same problem: the SBOMs are not reproducible.
I also wonder if we really need to publish the `tes
Hi sebb,
On 10.01.2025 00:56, sebb wrote:
On Thu, 9 Jan 2025 at 23:04, Herve Boutemy wrote:
When I read
Built using: mvn clean install site -s "$HOME/.m2/commons-settings.xml"
install should seriously be avoided when voting, but verify or package
Are you sure install is not needed with mult
On Thu, Jan 9, 2025 at 6:05 PM Herve Boutemy wrote:
>
> -0
>
> as I feared, same issue as Commons Release Plugin 1.9.0 RC1: wrong component
> hash in SBOM (in this case, it's one dependency: commons-codec)
>
> When I read
> > Built using: mvn clean install site -s "$HOME/.m2/commons-settings.xml"
On Thu, 9 Jan 2025 at 23:04, Herve Boutemy wrote:
>
> -0
>
> as I feared, same issue as Commons Release Plugin 1.9.0 RC1: wrong component
> hash in SBOM (in this case, it's one dependency: commons-codec)
>
> When I read
> > Built using: mvn clean install site -s "$HOME/.m2/commons-settings.xml"
>
-0
as I feared, same issue as Commons Release Plugin 1.9.0 RC1: wrong component
hash in SBOM (in this case, it's one dependency: commons-codec)
When I read
> Built using: mvn clean install site -s "$HOME/.m2/commons-settings.xml"
install should seriously be avoided when voting, but verify or pa
[+1]
Build & tests ok, site & API look good, changes & reports are clean (very nice
coverage).
Built using: mvn clean install site -s "$HOME/.m2/commons-settings.xml"
On:
Apache Maven 3.8.6 (84538c9988a25aec085021c365c560670ad80f63)
Maven home: /Users/hbiestro/Java/apache-maven-3.8.6
Java versio
My +1
Gary
On 2025/01/08 14:01:28 Gary Gregory wrote:
> We have fixed a few bugs and added enhancements since Apache Commons
> CSV 1.12.0 was released, so I would like to release Apache Commons CSV
> 1.13.0.
>
> Apache Commons CSV 1.13.0 RC1 is available for review here:
> https://dist.apach
We have fixed a few bugs and added enhancements since Apache Commons
CSV 1.12.0 was released, so I would like to release Apache Commons CSV
1.13.0.
Apache Commons CSV 1.13.0 RC1 is available for review here:
https://dist.apache.org/repos/dist/dev/commons/csv/1.13.0-RC1 (svn
revision 74044)
Th
16 matches
Mail list logo
