Re: [VOTE] Release Apache Log4j 2.24.3 (RC1)

2024-12-10 Thread Jan Friedrich
Hello Piotr, +1 I verified the signatures and ran the tests successful under Linux. openjdk 17.0.13 2024-10-15 OpenJDK Runtime Environment (build 17.0.13+11-Ubuntu-2ubuntu122.04) OpenJDK 64-Bit Server VM (build 17.0.13+11-Ubuntu-2ubuntu122.04, mixed mode, sharing) Regards. Jan Tuesday, Decem

Re: [DISCUSSION][VOTE] Release Apache Log4j 2.24.3 (RC1)

2024-12-10 Thread Gary Gregory
Ah... good one. I do rm my cache every couple months. I guess I'll have to do it more often! Gary On Tue, Dec 10, 2024, 11:46 AM Piotr P. Karwasz wrote: > Hi Gary, > > On 10.12.2024 17:18, Gary Gregory wrote: > > Here you go: > > > > diff target/bom.xml > > target/reference/org.apache.logging.l

Re: [DISCUSSION][VOTE] Release Apache Log4j 2.24.3 (RC1)

2024-12-10 Thread Piotr P. Karwasz
Hi Gary, On 10.12.2024 17:18, Gary Gregory wrote: Here you go: diff target/bom.xml target/reference/org.apache.logging.log4j/log4j-bom-2.24.3-cyclonedx.xml 2445,2452c2445,2452 < 85497a1ab65d101400ba4073c7d0c839 < f384ad3659c6f2529dc5f3516d24e26092c74eca < fada7f734209587

Re: [DISCUSSION][VOTE] Release Apache Log4j 2.24.3 (RC1)

2024-12-10 Thread Gary Gregory
On Tue, Dec 10, 2024 at 9:17 AM Piotr P. Karwasz wrote: > > Hi Gary, > > On 10.12.2024 14:58, Gary Gregory wrote: > > Here you go: > > > > mvn verify -Prelease artifact:compare > > -Dreference.repo=https://repository.apache.org/content/repositories/orgapachelogging-1309 > > > > diff target/referen

[DISCUSSION][VOTE] Release Apache Log4j 2.24.3 (RC1)

2024-12-10 Thread Piotr P. Karwasz
Hi Gary, On 10.12.2024 14:58, Gary Gregory wrote: Here you go: mvn verify -Prelease artifact:compare -Dreference.repo=https://repository.apache.org/content/repositories/orgapachelogging-1309 diff target/reference/log4j-bom-2.24.3.buildinfo target/log4j-bom-2.24.3.buildinfo The `*.buildinfo`

Re: [VOTE] Release Apache Log4j 2.24.3 (RC1)

2024-12-10 Thread Gary Gregory
Piotr, Here you go: mvn verify -Prelease artifact:compare -Dreference.repo=https://repository.apache.org/content/repositories/orgapachelogging-1309 diff target/reference/log4j-bom-2.24.3.buildinfo target/log4j-bom-2.24.3.buildinfo 0a1,2 > # https://reproducible-builds.org/docs/jvm/ > buildinfo.v

Re: [DISCUSSION][VOTE] Release Apache Log4j 2.24.3 (RC1)

2024-12-10 Thread Gary Gregory
On Tue, Dec 10, 2024 at 8:23 AM Piotr P. Karwasz wrote: > > Hi Gary, > > On 10.12.2024 13:23, Gary Gregory wrote: > > sh mvnw verify \ > >-Prelease artifact:compare \ > > > > -Dreference.repo=https://repository.apache.org/content/repositories/orgapachelogging-1309 > > Error: Failed to vali

Re: [VOTE] Release Apache Log4j 2.24.3 (RC1)

2024-12-10 Thread Piotr P. Karwasz
Hi Gary, On 10.12.2024 13:26, Gary Gregory wrote: Using: mvn verify -Prelease artifact:compare -Dreference.repo=https://repository.apache.org/content/repositories/orgapachelogging-1309 (Should' we also say "clean"?) I don't believe `clean` is necessary. I ran `mvnw verify artifact:compare` tw

[DISCUSSION][VOTE] Release Apache Log4j 2.24.3 (RC1)

2024-12-10 Thread Piotr P. Karwasz
Hi Gary, On 10.12.2024 13:23, Gary Gregory wrote: sh mvnw verify \ -Prelease artifact:compare \ -Dreference.repo=https://repository.apache.org/content/repositories/orgapachelogging-1309 Error: Failed to validate Maven wrapper SHA-256, your Maven wrapper might be compromised. Investigate o

Re: [VOTE] Release Apache Log4j 2.24.3 (RC1)

2024-12-10 Thread Gary Gregory
Using: mvn verify -Prelease artifact:compare -Dreference.repo=https://repository.apache.org/content/repositories/orgapachelogging-1309 (Should' we also say "clean"?) I get: [INFO] --- artifact:3.5.1:compare (default-cli) @ log4j-bom --- [WARNING] property is inherited, it should be defined in

Re: [VOTE] Release Apache Log4j 2.24.3 (RC1)

2024-12-10 Thread Gary Gregory
I'm following the review kit and I get: sh mvnw verify \ -Prelease artifact:compare \ -Dreference.repo=https://repository.apache.org/content/repositories/orgapachelogging-1309 Error: Failed to validate Maven wrapper SHA-256, your Maven wrapper might be compromised. Investigate or delete /User

Re: [VOTE] Release Apache Log4j 2.24.3 (RC1)

2024-12-10 Thread Gary Gregory
I'm following the review kit and I get: On Tue, Dec 10, 2024 at 6:31 AM Piotr P. Karwasz wrote: > > This is a vote to release the Apache Log4j `2.24.3`. > > Website: https://logging.staged.apache.org/log4j/2.24.3/index.html > GitHub: https://github.com/apache/logging-log4j2 > Commit: 4aa5efec7f2e

[VOTE] Release Apache Log4j 2.24.3 (RC1)

2024-12-10 Thread Piotr P. Karwasz
This is a vote to release the Apache Log4j `2.24.3`. Website: https://logging.staged.apache.org/log4j/2.24.3/index.html GitHub: https://github.com/apache/logging-log4j2 Commit: 4aa5efec7f2ee2d4623381cd66c3df3a16a6b9a9 Distribution: https://dist.apache.org/repos/dist/dev/logging/log4j/2.24.3 Nexus

Re: [log4j] CL leak in `ThrowableProxy` (#3282)

2024-12-10 Thread Po Chun, Yu
Hi Volkan, Yes. It's working now. Thanks! Volkan Yazıcı 於 2024年12月10日 週二 上午4:03寫道: > Alan, I am told by INFRA that your Slack account is reactivated – see > INFRA-26355 . Could > you verify and let me know, please? > > On Fri, Dec 6, 2024 at 2: