Re: [VOTE] Release Apache Commons Configuration 2.15.0 based on RC2

Hi Gary,

On 12.05.2026 14:08, Gary Gregory wrote:
> [VOTE] Release Apache Commons Configuration 2.15.0 based on RC2
> 
> [...]
>
> Please review the release candidate and vote.
> This vote will close no sooner than 24 hours from now.
> 
>   [ ] +1 Release these artifacts
>   [ ] +0 OK, but...
>   [ ] -0 OK, but really should fix...
>   [ ] -1 I oppose this release because...


Thank you for handling this release.

[X] +1, release the artifacts

I have performed my usual checks on the release archives, which are:

- Checksum verification,
- Signature verification,
- Checking the RAT report for missing license information,
- Checking the japicmp report for API changes missing from the changelog,
- Running unit tests and reproducibility verification in one go using:

    export TZ=UTC
    export JDK_HOME=path/to/JDK/21
    mvn verify artifact:compare \

-Dreference.repo=https://repository.apache.org/content/repositories/orgapachecommons-1936/
\
        -Dbuildinfo.ignore="*/*.spdx.json"

I can also confirm that the SPDX artifact is still not reproducible: my
guess is that it must depend on the absolute location of the source folder.

Piotr