[VOTE] Release Apache Commons JEXL 3.6.2 based on RC1

We have fixed 2 bugs and 1 regression bug since the release of Apache
Commons JEXL 3.6.1, so I would like to release Apache Commons JEXL
3.6.2.

Apache Commons JEXL 3.6.2 RC1 is available for review here:
    https://dist.apache.org/repos/dist/dev/commons/jexl/3.6.2-RC1 (svn
revision 82314)

The Git tag commons-jexl-3.6.2-RC1 commit for this RC is
6a86b0d36b6642058d36d3f2ec5eaa48d248bb07, which you can browse here:
    https://gitbox.apache.org/repos/asf?p=commons-jexl.git;a=commit;h=6a86b0d36b6642058d36d3f2ec5eaa48d248bb07
You may checkout this tag using:
    git clone https://gitbox.apache.org/repos/asf/commons-jexl.git
--branch commons-jexl-3.6.2-RC1 commons-jexl-3.6.2-RC1

Maven artifacts are here:
    https://repository.apache.org/content/repositories/orgapachecommons-1915/org/apache/commons/commons-jexl3/3.6.2/

These are the artifacts and their hashes:

#Release SHA-512s
#Thu Feb 05 20:19:59 UTC 2026
commons-jexl-3.6.2-bin.tar.gz=eef706857ae1f5d01c175b940793e7e6269c7c49b4f04f4590f92bffa12d0207e8eb68f6cc26ffb36fbac901eeb29af4446305397e5f44ef10ecafb53b414f0f
commons-jexl-3.6.2-bin.zip=c6a7be271dd84b5c4896c25fc1c287dd05b662b71adc4c4107f564a9f5106a1cc87e312c4ce5940bc985f05070ba3f3ae19905bbc604a70ad739e41d4a67fc52
commons-jexl-3.6.2-src.tar.gz=1956308f6accc71fce29e69fd71a5fd93e13797a143e43880d2d6ac2d8cff08b1fb942b1513877b234fd2a59aceeb656daf6c04e9da17a11822a6783904028b5
commons-jexl-3.6.2-src.zip=ab1b591b12da1d24efa04f505ee0206d22af12d09308e680b74a751981d2c62dc986ae1be533300875df82869716a007ace3e6be4fb7c4c8f8e7e94337a7bf0f
commons-jexl3-3.6.2-bom.json=abc25672b5247b084f363aa22c45bba5df8376fff6fe75e2bd15489ac30d54e7f9b9efdd906f92c0b6d51d0147a10ccdb06e74f20657676c436c63aaed10b161
commons-jexl3-3.6.2-bom.xml=4464384bf23b48dcb606961aba617a02e5d2d21c48bd79fb84f4b1590da196a8b059f3492c95b2768be53189e9616ded89215eea6ae0dae410e4d7c201028064
commons-jexl3-3.6.2-javadoc.jar=f409eb39cfe8c4ae5dcf32f05096c85f1246a8a07c9a52afd5500cb710eb9a1ff9dd4adf331e31eee05aeeed197c49cfd88c8d6cad8d2d3657e6442684dd2900
commons-jexl3-3.6.2-sources.jar=ed30b838d2f44202cf31f3da96c21dda38bdbc7082e70342bb03521045d8e8064b9edb4b484e2802f01b6e54fb8f8fac2bb6485672606c99c307545922551f6b
commons-jexl3-3.6.2-test-sources.jar=8d32b4cd8ab6cfaaf3964b01f88d363cc8861ca25d2d35755fd2345131e103b5fecefabdc9360bed57f77361a9760f3ecefbc7c3b45b5e89a34e7c49a3e69ff2
commons-jexl3-3.6.2-tests.jar=e9e54d20b5ae5b2be1e6540684c938574cb6d028223a90b948fd79ca0a111c7078320ef153580e25b1cecb4600a6d1f57f244fed436f60bfc2bf88dadd9033f3
org.apache.commons_commons-jexl3-3.6.2.spdx.json=b0ed3a3be5ba233c688fb2a040d6c20b274cb2d7bf73d12fdb0cdcde97ee055bd36559bfedff76f7b5a6b1b2db46b781a9596f9dee9144d7fe289006102a6ed9



I have tested this with 'mvn' and 'mvn clean install site' using:

openjdk version "25.0.2" 2026-01-20
OpenJDK Runtime Environment Homebrew (build 25.0.2)
OpenJDK 64-Bit Server VM Homebrew (build 25.0.2, mixed mode, sharing)

Apache Maven 3.9.12 (848fbb4bf2d427b72bdb2471c22fced7ebd9a7a1)
Maven home: /opt/homebrew/Cellar/maven/3.9.12/libexec
Java version: 25.0.2, vendor: Homebrew, runtime:
/opt/homebrew/Cellar/openjdk/25.0.2/libexec/openjdk.jdk/Contents/Home
Default locale: en_US, platform encoding: UTF-8
OS name: "mac os x", version: "26.2", arch: "aarch64", family: "mac"

Darwin Garys-MacBook-Pro.local 25.2.0 Darwin Kernel Version 25.2.0:
Tue Nov 18 21:09:56 PST 2025;
root:xnu-12377.61.12~1/RELEASE_ARM64_T6041 arm64

Docker version 29.1.5, build 0e6fee6


Details of changes since 3.6.1 are in the release notes:
    https://dist.apache.org/repos/dist/dev/commons/jexl/3.6.2-RC1/RELEASE-NOTES.txt
    https://dist.apache.org/repos/dist/dev/commons/jexl/3.6.2-RC1/site/changes.html

Site:
    https://dist.apache.org/repos/dist/dev/commons/jexl/3.6.2-RC1/site/index.html
    (Note some *relative* links are broken and the 3.6.2 directories
are not yet created - these will be OK once the site is deployed.)

JApiCmp Report (compared to 3.6.1):
    https://dist.apache.org/repos/dist/dev/commons/jexl/3.6.2-RC1/site/japicmp.html

RAT Report:
    https://dist.apache.org/repos/dist/dev/commons/jexl/3.6.2-RC1/site/rat-report.html

KEYS:
  https://downloads.apache.org/commons/KEYS

Please review the release candidate and vote.
This vote will close no sooner than 72 hours from now.

  [ ] +1 Release these artifacts
  [ ] +0 OK, but...
  [ ] -0 OK, but really should fix...
  [ ] -1 I oppose this release because...

Thank you,

Gary Gregory,
Release Manager (using key 530AA5F25C25011F)

The following is intended as a helper and refresher for reviewers.

Validating a release candidate
==============================

These guidelines are NOT complete.

Requirements: Git, Java, and Maven.

You can validate a release from a release candidate (RC) tag as follows.

1a) Download and decompress the source archive from:

https://dist.apache.org/repos/dist/dev/commons/jexl/3.6.2-RC1/source

1b) Check out the RC tag from git (optional)

This is optional,  as a reviewer must at least check source distributions.

git clone https://gitbox.apache.org/repos/asf/commons-jexl.git
--branch commons-jexl-3.6.2-RC1 commons-jexl-3.6.2-RC1
cd commons-jexl-3.6.2-RC1

2) Checking the build

All components should include a default Maven goal, such that you can
run 'mvn' from the command line by itself.

2) Check Apache licenses

This step is not required if the site includes a RAT report page,
which you then must check.
This check should be included in the default Maven build, but you can
check it with:

mvn apache-rat:check

3) Check binary compatibility

This step is not required if the site includes a JApiCmp report page,
which you then must check.
This check should be included in the default Maven build, but you can
check it with:

mvn verify -DskipTests -P japicmp japicmp:cmp

4) Build the package

This check should be included in the default Maven build, but you can
check it with:

mvn -V clean package

You can record the Maven and Java version produced by -V in your VOTE reply.
To gather OS information from a command line:
Windows: ver
Linux: uname -a

4b) Check reproducibility

To check that a build is reproducible, run:

mvn clean verify artifact:compare -DskipTests
-Dreference.repo=https://repository.apache.org/content/repositories/staging/
'-Dbuildinfo.ignore=*/*.spdx.json'

Note that this excludes SPDX files from the check.

5) Build the site for a single module project

Note: Some plugins require the components to be installed instead of packaged.

mvn site
Check the site reports in:
- Windows: target\site\index.html
- Linux: target/site/index.html

-the end-