Re: [VOTE] Release Log4j 2.25.4

Hi all,

On 25.03.2026 10:32, [email protected] wrote:
> The ATR release candidate page, including downloads, can be found at:
> 
>   https://release-test.apache.org/vote/logging-log4j/2.25.4


You'll find a lot of failed checks on this page. The main reason for
that, is that the content of our source and binary archive is not
wrapped in a directory.

We'll fix that in future releases, since I plan to:

- Use `git archive` to generate the source archive.
- Drop the binary archive completely: less than 1 user in 10,000
downloads JARs from our website.
- We'll consider a SLSA Provenance attestation to prove the authenticity
of the artifacts in Central instead.

Piotr