names like apr-1.6.3-SP3/jbcs-apr-1.6.3-SP3-win6-x86_64.zip for the 2.4.29 SP3 are preventing to release the apr-1.6.3 from 2.4.37.

The solution is to use the NRV like
apr-1.6.3-63/jbcs-apr-1.6.3-63-win6-x86_64.zip

The same applies to openssl

We should have a test to detect the problem at the first build...