Re: [VOTE][LAZY] Release Apache Logging Parent 10.2.0

2023-10-19 Thread Volkan Yazıcı
Will do 72 hours next time. On Thu, 19 Oct 2023 at 16:41, Ralph Goers wrote: > I am confused. I thought even lazy consensus votes needed to stay open for > 72 hours so people still have time to look at them if they want to. I > personally do not like limiting a vote to 24 hours except in extraor

Re: [VOTE][LAZY] Release Apache Logging Parent 10.2.0

2023-10-19 Thread Gary Gregory
FWIW, the normal way to proceed is 72 hours but can be reduced, usually for security issues. There is no rush IMO, especially for a normal release, time zones and do on. Gary On Thu, Oct 19, 2023, 10:40 AM Ralph Goers wrote: > I am confused. I thought even lazy consensus votes needed to stay o

Re: [VOTE][LAZY] Release Apache Logging Parent 10.2.0

2023-10-19 Thread Ralph Goers
I am confused. I thought even lazy consensus votes needed to stay open for 72 hours so people still have time to look at them if they want to. I personally do not like limiting a vote to 24 hours except in extraordinary circumstances (i.e.critical security fixes). Ralph > On Oct 18, 2023, at 1

Re: SBOM (was: [VOTE][LAZY] Release Apache Logging Parent 10.2.0)

2023-10-19 Thread Volkan Yazıcı
It took me a while to do the research. But I have some answers! [See my comments below.] > { > "type" : "distribution", > "url" : " https://repository.apache.org/service/local/staging/deploy/maven2"; > }, > > This is a private URL for staging a release. Below is the relevant excerpt from `c

Re: SBOM (was: [VOTE][LAZY] Release Apache Logging Parent 10.2.0)

2023-10-19 Thread Piotr P. Karwasz
Hi Volkan, On Thu, 19 Oct 2023 at 11:42, Volkan Yazıcı wrote: > Some of the settings you shared can be fixed for all projects, hence > in `logging-parent` configuration. This will necessitate either a > `10.2.0` RC2 or `10.2.1`. I would prefer `10.2.1`. Let us publish `logging-parent`, find out

Re: SBOM (was: [VOTE][LAZY] Release Apache Logging Parent 10.2.0)

2023-10-19 Thread Volkan Yazıcı
Those are all good points Piotr. Thanks for raising them. Some of the settings you shared can be fixed for all projects, hence in `logging-parent` configuration. This will necessitate either a `10.2.0` RC2 or `10.2.1`. The others need to be addressed per project, which I will implement once we ha

SBOM (was: [VOTE][LAZY] Release Apache Logging Parent 10.2.0)

2023-10-19 Thread Piotr P. Karwasz
Hi Volkan, On Wed, 18 Oct 2023 at 21:55, Volkan Yazıcı wrote: > * Added support for auto-generating CycloneDX Software Bill of Materials > (SBOM) Looking at the generated `bom.json`, it gives a strange URL for the distribution: { "type" : "distribution", "url" : "ht

Re: [VOTE][LAZY] Release Apache Logging Parent 10.2.0

2023-10-18 Thread Christian Grobmeier
+1 On Wed, Oct 18, 2023, at 21:54, Volkan Yazıcı wrote: > This is a lazy-vote to release the Apache Logging Parent 10.2.0. > > Website: https://logging-parent.staged.apache.org/logging-parent > GitHub: https://github.com/apache/logging-parent > Commit: 13ee5ca880ef515b69fb1fc6b5fe2e1807e48be6 > Di

[VOTE][LAZY] Release Apache Logging Parent 10.2.0

2023-10-18 Thread Volkan Yazıcı
This is a lazy-vote to release the Apache Logging Parent 10.2.0. Website: https://logging-parent.staged.apache.org/logging-parent GitHub: https://github.com/apache/logging-parent Commit: 13ee5ca880ef515b69fb1fc6b5fe2e1807e48be6 Distribution: https://dist.apache.org/repos/dist/dev/logging/logging-p