You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@sling.apache.org by Robert Munteanu <ro...@apache.org> on 2023/10/26 16:43:36 UTC
[VOTE] Release Apache Sling XSS Protection API 2.3.10
Hi,
We solved 6 issues in this release:
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310710&version=12353392&styleName=Text
Staging repository:
https://repository.apache.org/content/repositories/orgapachesling-2799/
You can use this UNIX script to download the release and verify the signatures:
https://raw.githubusercontent.com/apache/sling-tooling-release/master/check_staged_release.sh
Usage:
sh check_staged_release.sh 2799 /tmp/sling-staging
Please vote to approve this release:
[ ] +1 Approve the release
[ ] 0 Don't care
[ ] -1 Don't release, because ...
This majority vote is open for at least 72 hours.
Regards,
Robert Munteanu
[CANCELLED] [VOTE] Release Apache Sling XSS Protection API 2.3.10
Posted by Robert Munteanu <ro...@apache.org>.
Hi,
This vote is cancelled because of the extra OSGi requirements that were
unintentionally added.
The fix is tracked in https://issues.apache.org/jira/browse/SLING-12123
.
Thanks,
Robert
Re: [VOTE] Release Apache Sling XSS Protection API 2.3.10
Posted by Daniel Klco <dk...@apache.org>.
+1
On Thu, Oct 26, 2023 at 12:44 PM Robert Munteanu <ro...@apache.org> wrote:
>
> Hi,
>
> We solved 6 issues in this release:
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310710&version=12353392&styleName=Text
>
> Staging repository:
> https://repository.apache.org/content/repositories/orgapachesling-2799/
>
> You can use this UNIX script to download the release and verify the signatures:
> https://raw.githubusercontent.com/apache/sling-tooling-release/master/check_staged_release.sh
>
> Usage:
> sh check_staged_release.sh 2799 /tmp/sling-staging
>
> Please vote to approve this release:
>
> [ ] +1 Approve the release
> [ ] 0 Don't care
> [ ] -1 Don't release, because ...
>
> This majority vote is open for at least 72 hours.
>
> Regards,
> Robert Munteanu
Re: [VOTE] Release Apache Sling XSS Protection API 2.3.10
Posted by Robert Munteanu <ro...@apache.org>.
On Thu, 2023-10-26 at 16:43 +0000, Robert Munteanu wrote:
> Please vote to approve this release:
+1
Robert
Re: [VOTE] Release Apache Sling XSS Protection API 2.3.10
Posted by Robert Munteanu <ro...@apache.org>.
Hi Eric,
On Sat, 2023-10-28 at 14:23 -0700, Eric Norman wrote:
> -1 for me. This version doesn't appear to resolve when I plug it
> into the
> starter project. Were there additional new dependencies required to
> use
> it?
Good catch, I will cancel the vote.
I don't think any of the new requirements are intentional. We did some
work around dependencies, upgrading version and also started using
org.owasp.encoder as a bundle ( SLING-12005 ), but none of the changes
should result in the requirements that you reported.
Thanks,
Robert
Re: [VOTE] Release Apache Sling XSS Protection API 2.3.10
Posted by Eric Norman <en...@apache.org>.
-1 for me. This version doesn't appear to resolve when I plug it into the
starter project. Were there additional new dependencies required to use
it?
It reports the following errors from the feature analyzer:
[ERROR] [bundle-packages] org.apache.sling:org.apache.sling.xss:2.3.10:
Bundle is importing packages [javax.annotation.meta, android.os] with start
order 20 but no bundle is exporting these for that start order.
[ERROR] Analyser detected errors on feature
'org.apache.sling:org.apache.sling.starter:slingosgifeature:oak_tar:13-SNAPSHOT'.
See log output for error messages.
On Thu, Oct 26, 2023 at 9:45 AM Robert Munteanu <ro...@apache.org> wrote:
> Hi,
>
> We solved 6 issues in this release:
>
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310710&version=12353392&styleName=Text
>
> Staging repository:
> https://repository.apache.org/content/repositories/orgapachesling-2799/
>
> You can use this UNIX script to download the release and verify the
> signatures:
>
> https://raw.githubusercontent.com/apache/sling-tooling-release/master/check_staged_release.sh
>
> Usage:
> sh check_staged_release.sh 2799 /tmp/sling-staging
>
> Please vote to approve this release:
>
> [ ] +1 Approve the release
> [ ] 0 Don't care
> [ ] -1 Don't release, because ...
>
> This majority vote is open for at least 72 hours.
>
> Regards,
> Robert Munteanu
>