Re: [VOTE] Release Apache Maven Artifact Plugin version 3.5.0

2023-09-30 Thread Sylwester Lachiewicz
+1 sob., 30 wrz 2023, 20:08 użytkownik Hervé Boutemy napisał: > +1 > > Reproducible Builds ok: reference build done on *nix with JDK 11 > > Regards, > > Hervé > > Le vendredi 29 septembre 2023, 08:00:39 CEST Hervé Boutemy a écrit : > > Hi, > > > > We solved 6 issues: > > > https://issues.apache.

Re: [VOTE] Release Apache Maven Artifact Plugin version 3.5.0

2023-09-30 Thread Tamás Cservenák
+1 On Fri, Sep 29, 2023 at 8:00 AM Hervé Boutemy wrote: > Hi, > > We solved 6 issues: > > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12324322&version=12353118&styleName=Text > > Staging repo: > https://repository.apache.org/content/repositories/maven-1992/ > > https://repos

Re: [VOTE] Release Apache Maven Artifact Plugin version 3.5.0

2023-09-30 Thread Hervé Boutemy
+1 Reproducible Builds ok: reference build done on *nix with JDK 11 Regards, Hervé Le vendredi 29 septembre 2023, 08:00:39 CEST Hervé Boutemy a écrit : > Hi, > > We solved 6 issues: > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12324322&ve > rsion=12353118&styleName=Text >

verifying signatures, PGP or ... (was Re: [VOTE] Release Apache Maven Artifact Plugin version 3.5.0)

2023-09-30 Thread Hervé Boutemy
very useful feedback creating a separate thread because this will be a useful discussion, completely independent from the vote I added PGP signatures verification to this project as an IRL test, to get real experience on the impact: yes, it makes dependencies upgrade harder because often, diff