[VOTE][RESULT] Release Apache Commons Codec 1.22.1 based on RC1

This vote passes with the following binding +1s:

- Gary Gregory (ggregory)
- Henri Biestro (henrib)
- Rob Tompkins (chtompki)

Gary

On Wed, Jul 29, 2026 at 5:32=E2=80=AFPM Rob Tompkins <[email protected]> w=
rote:
>
> +1 checks out on all fronts.
>
>
>
> > On Jul 26, 2026, at 8:19=E2=80=AFPM, Gary Gregory <[email protected]=
om> wrote:
> >
> > We have fixed a 12 bugs since the release of Apache Commons Codec
> > 1.22.0, so I would like to release Apache Commons Codec 1.22.1.
> >
> > Apache Commons Codec 1.22.1 RC1 is available for review here:
> >    https://dist.apache.org/repos/dist/dev/commons/codec/1.22.1-RC1
> > (svn revision 86254)
> >
> > The Git tag commons-codec-1.22.1-RC1 commit for this RC is
> > dc8f6c832a30f524bf12a5ae7ab013e4ad7c088f, which you can browse here:
> >    https://gitbox.apache.org/repos/asf?p=3Dcommons-codec.git;a=3Dcommit=
;h=3Ddc8f6c832a30f524bf12a5ae7ab013e4ad7c088f
> > You may checkout this tag using:
> >    git clone https://gitbox.apache.org/repos/asf/commons-codec.git
> > --branch commons-codec-1.22.1-RC1 commons-codec-1.22.1-RC1
> >
> > Maven artifacts are here:
> >    https://repository.apache.org/content/repositories/orgapachecommons-=
1954/commons-codec/commons-codec/1.22.1/
> >
> > These are the artifacts and their hashes:
> >
> > #Release SHA-512s
> > #Mon Jul 27 00:12:38 UTC 2026
> > commons-codec-1.22.1-bin.tar.gz=3D62e0c1baad7ae28f7d458ad79f6a3b2820acb=
9dafe56eefad5acdbc3183e6f0fc82bb0e31332ea43cd5da03b46e0c291802e4784bfea75c6=
a733b1289279ae3b
> > commons-codec-1.22.1-bin.zip=3D15d6639c7a5b1e0835ae0b43831717aed89bdc57=
82cea218e581c3447a9b48b42b03632624d76733092725b260d98f78f52d848e224e4a8c8e9=
214b470d636bd
> > commons-codec-1.22.1-bom.json=3D3a8991b770c0a309e6f552904cef5cbdf8bf5a0=
8ae874080335f84a1fdafbbb06867a225bd04c37fc5a7a8835cdaee32397f79abf805430038=
cea5dfdba37621
> > commons-codec-1.22.1-bom.xml=3D35ae44a4044da51c2824ae387ea9e5a2c805fd85=
ab2a62ecf41ab869c98430402be4bcaeac9db6b0710f7b8d760d427e7ac99fd76af6b04aa20=
d04abe8a9dbca
> > commons-codec-1.22.1-javadoc.jar=3Dafe7ffbc2ca9d44964004a1d2eeb69426b66=
970c49152c994c01df46d8739f427cea8d938719cfa9eb38347b07e5b4b0d2fb111bec0b1f8=
91a82f251505638d5
> > commons-codec-1.22.1-sources.jar=3Dd253d10be72b389536897c61b5b54a20be88=
571ce240050f45d044286a905f5e11eddde5023c42a2ef3891b799996f39a26672eebec946f=
51af5800061ace125
> > commons-codec-1.22.1-src.tar.gz=3D7b1ed7920282028b35c70b2bdd58e05097a83=
c80177d8a9b952da92be775b9ac0d06aff988b7d43c5f58646153b0a4282063c6c3576723d1=
09d42efc3975a72c
> > commons-codec-1.22.1-src.zip=3D533f12d752a744017e1b925c4cd995603bd071d2=
b94257e1adb21b0b8b59c97bf7515ea6a823cbfe0a03c98385a19c9f0a6b421418a319edf67=
c6eea54590ff5
> > commons-codec-1.22.1-test-sources.jar=3Dbddb40ea9a26808a07af3845fae72d7=
5289e8dd4fc55754f86bcc97a4389640d68dc68a49880b3e9d9292faa07a0c512f2d6d18045=
8006b6f0857ffae0f8481e
> > commons-codec-1.22.1-tests.jar=3Dc772592944848555f96df261c75dd0cb55b5be=
2b2626318a05703f93f1601dacec3224644a166fdbc70ddc7f9c6fc7c1521b04f658787e188=
e632e08887ff072
> > commons-codec_commons-codec-1.22.1.spdx.json=3Dac86ee3d890c7692bf7ee887=
324381a13cae7630c490bfe0f3fcb5bf42bf5b703f8cf00b1a8596f4fc58bdffc76d8a51ff5=
5a5eeb23c6a59229ecfd0f39aada5
> >
> >
> > I have tested this with 'mvn' and 'mvn clean install site' using:
> >
> > openjdk version "21.0.12" 2026-07-21
> > OpenJDK Runtime Environment Homebrew (build 21.0.12)
> > OpenJDK 64-Bit Server VM Homebrew (build 21.0.12, mixed mode, sharing)
> >
> > Apache Maven 3.9.16 (2bdd9fddda4b155ebf8000e807eb73fd829a51d5)
> > Maven home: /opt/homebrew/Cellar/maven/3.9.16/libexec
> > Java version: 21.0.12, vendor: Homebrew, runtime:
> > /opt/homebrew/Cellar/openjdk@21/21.0.12/libexec/openjdk.jdk/Contents/Ho=
me
> > Default locale: en_US, platform encoding: UTF-8
> > OS name: "mac os x", version: "26.5.2", arch: "aarch64", family: "mac"
> >
> > Darwin Garys-MacBook-Pro.local 25.5.0 Darwin Kernel Version 25.5.0:
> > Tue Jun  9 22:28:34 PDT 2026;
> > root:xnu-12377.121.10~1/RELEASE_ARM64_T6041 arm64
> >
> > Docker version 29.4.3, build 055a478
> >
> >
> > Details of changes since 1.22.0 are in the release notes:
> >    https://dist.apache.org/repos/dist/dev/commons/codec/1.22.1-RC1/RELE=
ASE-NOTES.txt
> >    https://dist.apache.org/repos/dist/dev/commons/codec/1.22.1-RC1/site=
/changes.html
> >
> > Site:
> >    https://dist.apache.org/repos/dist/dev/commons/codec/1.22.1-RC1/site=
/index.html
> >    (Note some *relative* links are broken and the 1.22.1 directories
> > are not yet created - these will be OK once the site is deployed.)
> >
> > JApiCmp Report (compared to 1.22.0):
> >    https://dist.apache.org/repos/dist/dev/commons/codec/1.22.1-RC1/site=
/japicmp.html
> >
> > RAT Report:
> >    https://dist.apache.org/repos/dist/dev/commons/codec/1.22.1-RC1/site=
/rat-report.html
> >
> > KEYS:
> >  https://downloads.apache.org/commons/KEYS
> >
> > Please review the release candidate and vote.
> > This vote will close no sooner than 72 hours from now.
> >
> >  [ ] +1 Release these artifacts
> >  [ ] +0 OK, but...
> >  [ ] -0 OK, but really should fix...
> >  [ ] -1 I oppose this release because...
> >
> > Thank you,
> >
> > Gary Gregory,
> > Release Manager (using key 530AA5F25C25011F)
> >
> > The following is intended as a helper and refresher for reviewers.
> >
> > Validating a release candidate
> > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D
> >
> > These guidelines are NOT complete.
> >
> > Requirements: Git, Java, and Maven.
> >
> > You can validate a release from a release candidate (RC) tag as follows=
.
> >
> > 1a) Download and decompress the source archive from:
> >
> > https://dist.apache.org/repos/dist/dev/commons/codec/1.22.1-RC1/source
> >
> > 1b) Check out the RC tag from git (optional)
> >
> > This is optional,  as a reviewer must at least check source distributio=
ns.
> >
> > git clone https://gitbox.apache.org/repos/asf/commons-codec.git
> > --branch commons-codec-1.22.1-RC1 commons-codec-1.22.1-RC1
> > cd commons-codec-1.22.1-RC1
> >
> > 2) Checking the build
> >
> > All components should include a default Maven goal, such that you can
> > run 'mvn' from the command line by itself.
> >
> > 2) Check Apache licenses
> >
> > This step is not required if the site includes a RAT report page,
> > which you then must check.
> > This check should be included in the default Maven build, but you can
> > check it with:
> >
> > mvn apache-rat:check
> >
> > 3) Check binary compatibility
> >
> > This step is not required if the site includes a JApiCmp report page,
> > which you then must check.
> > This check should be included in the default Maven build, but you can
> > check it with:
> >
> > mvn verify -DskipTests -P japicmp japicmp:cmp
> >
> > 4) Build the package
> >
> > This check should be included in the default Maven build, but you can
> > check it with:
> >
> > mvn -V clean package
> >
> > You can record the Maven and Java version produced by -V in your VOTE r=
eply.
> > To gather OS information from a command line:
> > Windows: ver
> > Linux: uname -a
> >
> > 4b) Check reproducibility
> >
> > To check that a build is reproducible, run:
> >
> > mvn clean verify artifact:compare -DskipTests
> > -Dreference.repo=3Dhttps://repository.apache.org/content/repositories/s=
taging/
> > '-Dbuildinfo.ignore=3D*/*.spdx.json'
> >
> > Note that this excludes SPDX files from the check.
> >
> > 5) Build the site for a single module project
> >
> > Note: Some plugins require the components to be installed instead of pa=
ckaged.
> >
> > mvn site
> > Check the site reports in:
> > - Windows: target\site\index.html
> > - Linux: target/site/index.html
> >
> > -the end-
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: [email protected]
> > For additional commands, e-mail: [email protected]
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>