Re: [VOTE] Release Apache Commons Daemon 1.6.1 based on RC1

On 2026/05/31 11:34:15 Mark Thomas wrote:
> We have fixed the packaging issue since the release of Apache Commons=20
> Daemon 1.6.0, so I would like to release Apache Commons Daemon 1.6.1.
>=20
> Apache Commons Daemon 1.6.1 RC1 is available for review here:
>      https://dist.apache.org/repos/dist/dev/commons/daemon/1.6.1-RC1=20
> (svn revision 84861)
>=20
> The Git tag commons-daemon-1.6.1-RC1 commit for this RC is=20
> 68e2301d5be8aef15c432c7c5fc08fee5c20805f, which you can browse here:
>  =20
> https://gitbox.apache.org/repos/asf?p=3Dcommons-daemon.git;a=3Dcommit;h=3D6=
8e2301d5be8aef15c432c7c5fc08fee5c20805f
> You may checkout this tag using:
>      git clone https://gitbox.apache.org/repos/asf/commons-daemon.git=20
> --branch commons-daemon-1.6.1-RC1 commons-daemon-1.6.1-RC1
>=20
> Maven artifacts are here:
>  =20
> https://repository.apache.org/content/repositories/orgapachecommons-1946/co=
mmons-daemon/commons-daemon/1.6.1/
>=20
> These are the artifacts and their hashes:
>=20
> #Release SHA-512s
> #Sun May 31 12:13:58 BST 2026
> commons-daemon-1.6.1-bin-windows.zip=3Da878177edc92e663c1113858f8903451ec02=
b5b033bca373bea4f8761d9196323771301fcd6a7b8387d8e2300f7a1056b9e08e83fca9703df=
32ac3ecd5b129f7
> commons-daemon-1.6.1-bin.tar.gz=3D4757860f7700908cd915141237321b2996ea07077=
066e8afaa1de322d9edbf7e20c73cb19c57e2bcc27e5e0756d7c3d568f8849718e2011e3b182a=
2420d7a969
> commons-daemon-1.6.1-bin.zip=3D65fe49ff0cb8d9938d2b519ca2864ef6e53e5d8fc205=
6734bdb93bcf03b6729f2879dbffa52dc24d89e6553dcc2238c66b7f734dc59fd0a75d803a98e=
3a5d718
> commons-daemon-1.6.1-bom.json=3Dc07466b9b30c7ea9ca5acbe5565b673f2669b7f209c=
90ccd26c3fd0c08e533f607e05927f33934f238fd9f7a55d08238ef7667c503c277204e8e8d42=
e74ab826
> commons-daemon-1.6.1-bom.xml=3D3b2b97ea0d62b2799f50bae79f619b729c7b2d39bbf9=
44448643780337978badbd576dccfd6e7f840ca44272a09b16e4026015be68d1577fbee23e900=
2830918
> commons-daemon-1.6.1-javadoc.jar=3De2d77a2e7b5df214bb7505d92ee11b482e6736bb=
87753e96538623ccd82083b0fc69cfd46202b68ce7b2bb493a8373e3ca28ab1e65790beac1c3e=
ab8a93855f0
> commons-daemon-1.6.1-native-src.tar.gz=3D6ecc74a85d7356078d778cbc414e007435=
e58c0c15dffc5cb83865e037adf423980842946218c75e80062e0ee715ce3240d39c709afe15e=
0d52db1a613e0484e
> commons-daemon-1.6.1-native-src.zip=3D9703b05a25f99ed61754300fe85c7b20592f4=
03c869ffca2cc5449c094f5fc1a2cf816fa8382c875b844dcb9e24dfd8f82d4cccd54ec393abf=
3853752d031549
> commons-daemon-1.6.1-sources.jar=3D7fce22f4975702e11d07329b8e6f21e51f6d1351=
c28a30b217f757057226eb63d07a733bcbbf95409a1b797483cf0c697c70ca69a1e67368409bb=
cb35fef5f5b
> commons-daemon-1.6.1-src.tar.gz=3D51910df48e5e8dd44d695deb95ef878b961119fb9=
9aa2924bc966b28f431737c2071085e46400e96db4831c4b82ff6e60a7299cb6c792e53c151dc=
053844546f
> commons-daemon-1.6.1-src.zip=3D41a2f5736762c8368935cb8e7e08dbe89ab64b6f847e=
21ab911ba1f199ac6943dcc7a7cfc8805344d3bb10098accc01658bf96c8a4dd6338289b35182=
17e8bc3
> commons-daemon_commons-daemon-1.6.1.spdx.json=3D92a6d76db311f1cff024fb7fcbf=
d7d43035462fe0ca59e40cd38c369b5379c02c02f971e22184b1f39a646d1b1c5f8398512cbd6=
3786b00d1c9b7f76b53e1e75
>=20
>=20
>=20
> I have tested this with 'mvn' using:
> ***
> Apache Maven 3.9.9 (8e8579a9e76f7d015ee5ec7bfcdc97d260186937)
> Maven home: /opt/sdkman/candidates/maven/current
> Java version: 25.0.3, vendor: Eclipse Adoptium, runtime:=20
> /opt/sdkman/candidates/java/25.0.3-tem
> Default locale: en_GB, platform encoding: UTF-8
> OS name: "linux", version: "6.8.0-117-generic", arch: "amd64", family:=20
> "unix"
> ***
>=20
> Details of changes since 1.6.0 are in the release notes:
>  =20
> https://dist.apache.org/repos/dist/dev/commons/daemon/1.6.1-RC1/RELEASE-NOT=
ES.txt
>=20
> KEYS:
>    https://downloads.apache.org/commons/KEYS
>=20
> Please review the release candidate and vote.
> This vote will close no sooner than 72 hours from now.
>=20
>    [ ] +1 Release these artifacts
>    [ ] +0 OK, but...
>    [ ] -0 OK, but really should fix...
>    [ ] -1 I oppose this release because...
>=20
> Thank you,
>=20
> Mark Thomas,
> Release Manager (using key 10C01C5A2F6059E7)
>=20
> The following is intended as a helper and refresher for reviewers.
>=20
> Validating a release candidate
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D
>=20
> These guidelines are NOT complete.
>=20
> Requirements: Git, Java, and Maven.
>=20
> You can validate a release from a release candidate (RC) tag as follows.
>=20
> 1a) Download and decompress the source archive from:
>=20
> https://dist.apache.org/repos/dist/dev/commons/daemon/1.6.1-RC1/source
>=20
> 1b) Check out the RC tag from git (optional)
>=20
> This is optional,  as a reviewer must at least check source distributions.
>=20
> git clone https://gitbox.apache.org/repos/asf/commons-daemon.git=20
> --branch commons-daemon-1.6.1-RC1 commons-daemon-1.6.1-RC1
> cd commons-daemon-1.6.1-RC1
>=20
> 2) Checking the build
>=20
> All components should include a default Maven goal, such that you can=20
> run 'mvn' from the command line by itself.
>=20
> 2) Check Apache licenses
>=20
> This step is not required if the site includes a RAT report page, which=20
> you then must check.
> This check should be included in the default Maven build, but you can=20
> check it with:
>=20
> mvn apache-rat:check
>=20
> 3) Check binary compatibility
>=20
> This step is not required if the site includes a JApiCmp report page,=20
> which you then must check.
> This check should be included in the default Maven build, but you can=20
> check it with:
>=20
> mvn verify -DskipTests -P japicmp japicmp:cmp
>=20
> 4) Build the package
>=20
> This check should be included in the default Maven build, but you can=20
> check it with:
>=20
> mvn -V clean package
>=20
> You can record the Maven and Java version produced by -V in your VOTE reply.
> To gather OS information from a command line:
> Windows: ver
> Linux: uname -a
>=20
> 4b) Check reproducibility
>=20
> To check that a build is reproducible, run:
>=20
> mvn clean verify artifact:compare -DskipTests=20
> -Dreference.repo=3Dhttps://repository.apache.org/content/repositories/stagi=
ng/=20
> '-Dbuildinfo.ignore=3D*/*.spdx.json'
>=20
> Note that this excludes SPDX files from the check.
>=20
> 5) Build the site for a single module project
>=20
> Note: Some plugins require the components to be installed instead of=20
> packaged.
>=20
> mvn site
> Check the site reports in:
> - Windows: target\site\index.html
> - Linux: target/site/index.html
>=20
> 6) Build the site for a multi-module project
>=20
> mvn site
> mvn site:stage
> Check the site reports in:
> - Windows: target\site\index.html
> - Linux: target/site/index.html
>=20
> Note that the project reports are created for each module.
> Modules can be accessed using the 'Project Modules' link under
> the 'Project Information' menu (see <path-to-site>/modules.html).

Much better now

+1