We have fixed a few bugs and added enhancements since Apache Commons Codec 1.19.0 was released, so I would like to release Apache Commons Codec 1.20.0.
Apache Commons Codec 1.20.0 RC1 is available for review here: https://dist.apache.org/repos/dist/dev/commons/codec/1.20.0-RC1 (svn revision 80440) The Git tag commons-codec-1.20.0-RC1 commit for this RC is b20db1f1fa6ee7b0536f6a25c9c33f8289c22098 which you can browse here: https://gitbox.apache.org/repos/asf?p=commons-codec.git;a=commit;h=b20db1f1fa6ee7b0536f6a25c9c33f8289c22098 You may checkout this tag using: git clone https://gitbox.apache.org/repos/asf/commons-codec.git --branch commons-codec-1.20.0-RC1 commons-codec-1.20.0-RC1 Maven artifacts are here: https://repository.apache.org/content/repositories/orgapachecommons-1870/commons-codec/commons-codec/1.20.0/ These are the artifacts and their hashes: #Release SHA-512s #Sun Nov 02 20:05:13 UTC 2025 commons-codec-1.20.0-bin.tar.gz=988b38d9d11769b725d6c8a7021019874b8806bb694b0bba75c0f8f1d8a429bdcb4da2d2b5c8029bc8dc0909f9a96707b140a311f31394837e4601f3e583f22f commons-codec-1.20.0-bin.zip=25ac2f1ac8beebbd40ac1bce3fcad58c412954fccffe2bbb25a98ca54192910252e150778fd96921eee9839cb4ec4c2f7cdd46a810bd3ba5f1951e3e304520c3 commons-codec-1.20.0-bom.json=469b00ff5ebc07bb3a7139e667f443587a91596f7d6dfa94a7cb21abd1da3aa25642209401110e17b122cf85b7efd39d7791fde279c7c886406d4658bf58a674 commons-codec-1.20.0-bom.xml=99a0ee502e9165a16a02e562c6b826a8489ab92f341c432f68368054c9b1c92be5dd8bd07197918aeabefdbc87c3dc3210fff7144d801eca70536f43223f39ec commons-codec-1.20.0-javadoc.jar=d93c996c1a828f18173dd3a10e5ddc3be08d0721ac68a02426be97883e2d805150a5b269af4811af8e5e17a73c85d6e1870cab468d3293102e7dc7fa29eff50c commons-codec-1.20.0-sources.jar=888fb7ce074c0ef64ec023a2abdf024e40fd83512a9af98caa45f3b6019098c8a1b6789366a0efeaaad84a81aafeda4795a3c3dd44a368c8e0db72b654367bc1 commons-codec-1.20.0-src.tar.gz=88a46488470fdeff6627849474cde035113ce34207cf619763227a4acd7f825b97e19db83b6ad548bc9bcd26b9f92a4c00afce437ff5bd3a35ef30f066c94714 commons-codec-1.20.0-src.zip=cd302db96b1535b8688356c6951187dcf241f33d4a014e1ff18d26530b22955b0f845e90fd92fbe7bc4c789ed1cf2c8aa05488678d5dcb3a4e2171d221f22164 commons-codec-1.20.0-test-sources.jar=3ed4ba4bf00ca126bf9462b1dec1b617bebdd8e113ee4c8032469b06661c968b147eff1e8f71fe0fc50353983a965240149cdd366c75bb67440d34c9d25b3d1d commons-codec-1.20.0-tests.jar=d182a371b4638b25c5d17df77342624d649ae8260f67c1291fafba6bd0c4d135bfd73e95ea5271eb92ce18e84110131c3f0c185ad011509e23869be5b03e347f commons-codec_commons-codec-1.20.0.spdx.json=a0abf153fd9d01354c40fe3e8333d2ca54a42029763fe545f73e8c3303368ecb7568f26fa42ef5881ca9f4489f1e229fd240a5e03ddb07750abce0f527010857 I have tested this with 'mvn' and 'mvn clean install site' using: openjdk version "25.0.1" 2025年10月21日 OpenJDK Runtime Environment Homebrew (build 25.0.1) OpenJDK 64-Bit Server VM Homebrew (build 25.0.1, mixed mode, sharing) Apache Maven 3.9.11 (3e54c93a704957b63ee3494413a2b544fd3d825b) Maven home: /opt/homebrew/Cellar/maven/3.9.11/libexec Java version: 25.0.1, vendor: Homebrew, runtime: /opt/homebrew/Cellar/openjdk/25.0.1/libexec/openjdk.jdk/Contents/Home Default locale: en_US, platform encoding: UTF-8 OS name: "mac os x", version: "15.7.1", arch: "aarch64", family: "mac" Darwin ***.local 24.6.0 Darwin Kernel Version 24.6.0: Mon Aug 11 21:15:09 PDT 2025; root:xnu-11417.140.69.701.11~1/RELEASE_ARM64_T6041 arm64 Docker version 28.4.0, build d8eb465 Details of changes since 1.19.0 are in the release notes: https://dist.apache.org/repos/dist/dev/commons/codec/1.20.0-RC1/RELEASE-NOTES.txt https://dist.apache.org/repos/dist/dev/commons/codec/1.20.0-RC1/site/changes.html Site: https://dist.apache.org/repos/dist/dev/commons/codec/1.20.0-RC1/site/index.html (note some *relative* links are broken and the 1.20.0 directories are not yet created - these will be OK once the site is deployed.) JApiCmp Report (compared to 1.19.0): https://dist.apache.org/repos/dist/dev/commons/codec/1.20.0-RC1/site/japicmp.html RAT Report: https://dist.apache.org/repos/dist/dev/commons/codec/1.20.0-RC1/site/rat-report.html KEYS: https://downloads.apache.org/commons/KEYS Please review the release candidate and vote. This vote will close no sooner than 72 hours from now. [ ] +1 Release these artifacts [ ] +0 OK, but... [ ] -0 OK, but really should fix... [ ] -1 I oppose this release because... Thank you, Gary Gregory, Release Manager (using key 530AA5F25C25011F) The following is intended as a helper and refresher for reviewers. Validating a release candidate ============================== These guidelines are NOT complete. Requirements: Git, Java, and Maven. You can validate a release from a release candidate (RC) tag as follows. 1a) Download and decompress the source archive from: https://dist.apache.org/repos/dist/dev/commons/codec/1.20.0-RC1/source 1b) Check out the RC tag from git (optional) This is optional, as a reviewer must check source distributions as a minimum. git clone https://gitbox.apache.org/repos/asf/commons-codec.git --branch commons-codec-1.20.0-RC1 commons-codec-1.20.0-RC1 cd commons-codec-1.20.0-RC1 2) Checking the build All components should include a default Maven goal, such that you can run 'mvn' from the command line by itself. 2) Check Apache licenses This step is not required if the site includes a RAT report page which you then must check. This check should be included in the default Maven build, but you can check it with: mvn apache-rat:check 3) Check binary compatibility This step is not required if the site includes a JApiCmp report page which you then must check. This check should be included in the default Maven build, but you can check it with: mvn verify -DskipTests -P japicmp japicmp:cmp 4) Build the package This check should be included in the default Maven build, but you can check it with: mvn -V clean package You can record the Maven and Java version produced by -V in your VOTE reply. To gather OS information from a command line: Windows: ver Linux: uname -a 4b) Check reproducibility To check that a build is reproducible, run: mvn clean verify artifact:compare -DskipTests -Dreference.repo=https://repository.apache.org/content/repositories/staging/ '-Dbuildinfo.ignore=*/*.spdx.json' Note that this excludes SPDX files from the check. 5) Build the site for a single module project Note: Some plugins require the components to be installed instead of packaged. mvn site Check the site reports in: - Windows: target\site\index.html - Linux: target/site/index.html -the end- --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]