Re: [VOTE] Release Apache Log4j 2.22.1 RC1

2023-12-26 Thread Piotr P. Karwasz
On Wed, 27 Dec 2023 at 00:54, Matt Sicker wrote: > > While there appears to be some issues with the reproducibility of the build, > it appears to be inconsequential. > > +1 Adding my +1, this vote passes with 3 +1 from: Gary, Matt and me. I will continue the release process. Piotr BTW: reprod

Re: [VOTE] Release Apache Log4j 2.22.1 RC1

2023-12-26 Thread Matt Sicker
While there appears to be some issues with the reproducibility of the build, it appears to be inconsequential. +1 — Matt Sicker > On Dec 22, 2023, at 12:00, Piotr P. Karwasz wrote: > > This is a vote to release the Apache Log4j 2.22.1. > > Website: https://logging.staged.apache.org/log4j/2.x/

Re: [VOTE] Release Apache Log4j 2.22.1 RC1

2023-12-23 Thread Gary Gregory
Hi Piotr, I'm pretty sure there aren't any Apache requirements around tagging in git (or svn) but it seems nice to me to have tags for release candidates. Not that big of a deal probably. Gary On Sat, Dec 23, 2023, 2:51 PM Piotr P. Karwasz wrote: > Hi Gary, > > On Sat, 23 Dec 2023 at 17:47, Ga

Re: [VOTE] Release Apache Log4j 2.22.1 RC1

2023-12-23 Thread Piotr P. Karwasz
Hi Gary, On Sat, 23 Dec 2023 at 17:47, Gary Gregory wrote: > > Question: Where is the git tag in these VOTE emails? I see a "Commit" > but no named tag. The CI does not create tags, but it works on a separate branch `release/x.y.z` and the commit should be the last commit of the branch. Of cours

Re: [VOTE] Release Apache Log4j 2.22.1 RC1

2023-12-23 Thread Gary Gregory
TY for the references. Gary On Sat, Dec 23, 2023 at 2:20 PM Piotr P. Karwasz wrote: > > Hi Gary, > > On Sat, 23 Dec 2023 at 16:23, Gary Gregory wrote: > > > > Can this noise be made quiet in the future please (mvn clean verify -U): > > This is a temporary workaround for three `cyclonedx-maven-p

Re: [VOTE] Release Apache Log4j 2.22.1 RC1

2023-12-23 Thread Piotr P. Karwasz
Hi Gary, On Sat, 23 Dec 2023 at 16:23, Gary Gregory wrote: > > Can this noise be made quiet in the future please (mvn clean verify -U): This is a temporary workaround for three `cyclonedx-maven-plugin` limitations. We are still waiting for two fixes and a release of the plugin: https://github.c

Re: [VOTE] Release Apache Log4j 2.22.1 RC1

2023-12-23 Thread Gary Gregory
Question: Where is the git tag in these VOTE emails? I see a "Commit" but no named tag. Gary On Fri, Dec 22, 2023 at 1:01 PM Piotr P. Karwasz wrote: > > This is a vote to release the Apache Log4j 2.22.1. > > Website: https://logging.staged.apache.org/log4j/2.x/ > GitHub: https://github.com/apach

Re: [VOTE] Release Apache Log4j 2.22.1 RC1

2023-12-23 Thread Gary Gregory
+1 - Tested src zip file - ASC OK - SHA512 OK - `mvn clean verify` OK - Using: Apache Maven 3.9.6 (bc0240f3c744dd6b6ec2920b3cd08dcc295161ae) Maven home: /usr/local/Cellar/maven/3.9.6/libexec Java version: 17.0.9, vendor: Homebrew, runtime: /usr/local/Cellar/openjdk@17/17.0.9/libexec/openjdk.jdk/Con

Re: [VOTE] Release Apache Log4j 2.22.1 RC1

2023-12-23 Thread Gary Gregory
Can this noise be made quiet in the future please (mvn clean verify -U): ... [INFO] --- bsh:1.4:run (process-sbom) @ log4j-api-java9 --- [INFO] Executing Script [INFO] file class java.lang.Object [INFO] script class java.lang.String [INFO] evaluating script import java.io.*; import java.nio.file.*

[VOTE] Release Apache Log4j 2.22.1 RC1

2023-12-22 Thread Piotr P. Karwasz
This is a vote to release the Apache Log4j 2.22.1. Website: https://logging.staged.apache.org/log4j/2.x/ GitHub: https://github.com/apache/logging-log4j2 Commit: 8469975a4f2b1f8f1bd4f25ca6d1989a52aefc1b Distribution: https://dist.apache.org/repos/dist/dev/logging/log4j Nexus: https://repository.ap