You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@jspwiki.apache.org by Alex O'Ree <al...@apache.org> on 2026/08/28 18:48:49 UTC

[JSPWIKI] Help wanted

Team

We've been flooded with security reports. While i was able to apply
some of the fixes and PR'd them, not all of them work (i.e. ai
generated patches). I could use some help reviewing the PRs and
potentially fixing the remaining git patches for the other issues not
currently under PR and/or retesting the software after the application
of these patches. While none of them should break anything, you never
know.

Re: [JSPWIKI] Help wanted

Posted by Juan Pablo Santos Rodríguez <ju...@gmail.com>.
Hi!

I've just pushed 3.0.1-git-02, which includes
https://github.com/apache/jspwiki/commit/d664299e7 that hopefully
makes the build less flaky. I'm reviewing the PRs now, most of them
are thankfully short enough so I suppose they're ok to go


cheers,
juan pablo

On Thu, Sep 10, 2026 at 1:18 AM Alex O'Ree <al...@apache.org> wrote:
>
> ha no idea. they all should build with tests, however the CI setup has
> been flaky
>
> On Tue, Sep 8, 2026 at 4:41 PM Juan Pablo Santos Rodríguez
> <ju...@gmail.com> wrote:
> >
> > Hi Alex!
> >
> > tomorrow I'll have some time to begin reviewing PRs / triaging
> > reports, if you have some preferences on which ones should be looked
> > at first I'd be more than happy to start with those
> >
> >
> > cheers,
> > juan pablo
> >
> > On Sun, Sep 6, 2026 at 2:55 PM Alex O'Ree <al...@apache.org> wrote:
> > >
> > > Thanks!
> > >
> > > We'll also need to figure out if we want to backport any of this to
> > > 2.X. I'm leaning towards no as the delta between 2 and 3 isn't that
> > > significant
> > >
> > >
> > > On Fri, Aug 28, 2026 at 3:16 PM Juan Pablo Santos Rodríguez
> > > <ju...@gmail.com> wrote:
> > > >
> > > > Hi Alex!
> > > >
> > > > First Big thanks for all the work, certainly there have been a lot of
> > > > reports. I'll arrive next week and begin reviewing ASAP; anyone else, pmc
> > > > or not, wanting to chime in, please feel free to do so :-)
> > > >
> > > >
> > > > Cheers,
> > > > juan pablo
> > > >
> > > > El vie, 28 ago 2026, 20:49, Alex O'Ree <al...@apache.org> escribió:
> > > >
> > > > > Team
> > > > >
> > > > > We've been flooded with security reports. While i was able to apply
> > > > > some of the fixes and PR'd them, not all of them work (i.e. ai
> > > > > generated patches). I could use some help reviewing the PRs and
> > > > > potentially fixing the remaining git patches for the other issues not
> > > > > currently under PR and/or retesting the software after the application
> > > > > of these patches. While none of them should break anything, you never
> > > > > know.
> > > > >

Re: [JSPWIKI] Help wanted

Posted by Alex O'Ree <al...@apache.org>.
ha no idea. they all should build with tests, however the CI setup has
been flaky

On Tue, Sep 8, 2026 at 4:41 PM Juan Pablo Santos Rodríguez
<ju...@gmail.com> wrote:
>
> Hi Alex!
>
> tomorrow I'll have some time to begin reviewing PRs / triaging
> reports, if you have some preferences on which ones should be looked
> at first I'd be more than happy to start with those
>
>
> cheers,
> juan pablo
>
> On Sun, Sep 6, 2026 at 2:55 PM Alex O'Ree <al...@apache.org> wrote:
> >
> > Thanks!
> >
> > We'll also need to figure out if we want to backport any of this to
> > 2.X. I'm leaning towards no as the delta between 2 and 3 isn't that
> > significant
> >
> >
> > On Fri, Aug 28, 2026 at 3:16 PM Juan Pablo Santos Rodríguez
> > <ju...@gmail.com> wrote:
> > >
> > > Hi Alex!
> > >
> > > First Big thanks for all the work, certainly there have been a lot of
> > > reports. I'll arrive next week and begin reviewing ASAP; anyone else, pmc
> > > or not, wanting to chime in, please feel free to do so :-)
> > >
> > >
> > > Cheers,
> > > juan pablo
> > >
> > > El vie, 28 ago 2026, 20:49, Alex O'Ree <al...@apache.org> escribió:
> > >
> > > > Team
> > > >
> > > > We've been flooded with security reports. While i was able to apply
> > > > some of the fixes and PR'd them, not all of them work (i.e. ai
> > > > generated patches). I could use some help reviewing the PRs and
> > > > potentially fixing the remaining git patches for the other issues not
> > > > currently under PR and/or retesting the software after the application
> > > > of these patches. While none of them should break anything, you never
> > > > know.
> > > >

Re: [JSPWIKI] Help wanted

Posted by Juan Pablo Santos Rodríguez <ju...@gmail.com>.
Hi Alex!

tomorrow I'll have some time to begin reviewing PRs / triaging
reports, if you have some preferences on which ones should be looked
at first I'd be more than happy to start with those


cheers,
juan pablo

On Sun, Sep 6, 2026 at 2:55 PM Alex O'Ree <al...@apache.org> wrote:
>
> Thanks!
>
> We'll also need to figure out if we want to backport any of this to
> 2.X. I'm leaning towards no as the delta between 2 and 3 isn't that
> significant
>
>
> On Fri, Aug 28, 2026 at 3:16 PM Juan Pablo Santos Rodríguez
> <ju...@gmail.com> wrote:
> >
> > Hi Alex!
> >
> > First Big thanks for all the work, certainly there have been a lot of
> > reports. I'll arrive next week and begin reviewing ASAP; anyone else, pmc
> > or not, wanting to chime in, please feel free to do so :-)
> >
> >
> > Cheers,
> > juan pablo
> >
> > El vie, 28 ago 2026, 20:49, Alex O'Ree <al...@apache.org> escribió:
> >
> > > Team
> > >
> > > We've been flooded with security reports. While i was able to apply
> > > some of the fixes and PR'd them, not all of them work (i.e. ai
> > > generated patches). I could use some help reviewing the PRs and
> > > potentially fixing the remaining git patches for the other issues not
> > > currently under PR and/or retesting the software after the application
> > > of these patches. While none of them should break anything, you never
> > > know.
> > >

Re: [JSPWIKI] Help wanted

Posted by Alex O'Ree <al...@apache.org>.
Thanks!

We'll also need to figure out if we want to backport any of this to
2.X. I'm leaning towards no as the delta between 2 and 3 isn't that
significant


On Fri, Aug 28, 2026 at 3:16 PM Juan Pablo Santos Rodríguez
<ju...@gmail.com> wrote:
>
> Hi Alex!
>
> First Big thanks for all the work, certainly there have been a lot of
> reports. I'll arrive next week and begin reviewing ASAP; anyone else, pmc
> or not, wanting to chime in, please feel free to do so :-)
>
>
> Cheers,
> juan pablo
>
> El vie, 28 ago 2026, 20:49, Alex O'Ree <al...@apache.org> escribió:
>
> > Team
> >
> > We've been flooded with security reports. While i was able to apply
> > some of the fixes and PR'd them, not all of them work (i.e. ai
> > generated patches). I could use some help reviewing the PRs and
> > potentially fixing the remaining git patches for the other issues not
> > currently under PR and/or retesting the software after the application
> > of these patches. While none of them should break anything, you never
> > know.
> >

Re: [JSPWIKI] Help wanted

Posted by Juan Pablo Santos Rodríguez <ju...@gmail.com>.
Hi Alex!

First Big thanks for all the work, certainly there have been a lot of
reports. I'll arrive next week and begin reviewing ASAP; anyone else, pmc
or not, wanting to chime in, please feel free to do so :-)


Cheers,
juan pablo

El vie, 28 ago 2026, 20:49, Alex O'Ree <al...@apache.org> escribió:

> Team
>
> We've been flooded with security reports. While i was able to apply
> some of the fixes and PR'd them, not all of them work (i.e. ai
> generated patches). I could use some help reviewing the PRs and
> potentially fixing the remaining git patches for the other issues not
> currently under PR and/or retesting the software after the application
> of these patches. While none of them should break anything, you never
> know.
>