You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@stanbol.apache.org by Reto Gmür <re...@apache.org> on 2014/06/05 08:14:03 UTC

[VOTE][RESULTS] Apache Stanbol Partial Security Release RC2

You have voted as follows:

+1: 3 (Enrico, Rupert, Reto)
0: 0
-1: 0

The vote for the releases has passed by having reached a majority and 3 +1.

Thanks for voting!

@Rupert, regarding the JIRA issues:


> * creating this release in JIRA
>
https://issues.apache.org/jira/browse/STANBOL-1351


> * add this release as fixed version to STANBOL-1317
>
It's already there as 1.0.0 and 0.12.1, closing anyway

> * create an own sub-task to STANBOL-1094 that is about migrating
> security and mark this one as fixed by this release
>
This would be a sub-task of 1094, also it's not all of security but just 2
of the bundles. I suggest I just comment on 1094.

Cheers,
Reto

>
> best
> Rupert
>
> On Mon, Jun 2, 2014 at 4:47 PM, Enrico Daga <en...@gmail.com> wrote:
> > +1
> >
> > Enrico
> > Enrico Daga
> >
> > --
> > http://www.enridaga.net
> > skype: enri-pan
> >
> >
> >
> > On 2 June 2014 14:47, Reto Gmür <re...@apache.org> wrote:
> >> Sorry I accidentally sent an HTML links with the old HREFs under the
> >> correct new URIs as labels.
> >>
> >> Son once again, clickable:
> >>
> >> SVN-Tag:
> >>
> https://svn.apache.org/repos/asf/stanbol/tags/org.apache.stanbol.commons.security.reactor-20140602/
> >>
> >> Staging repos
> >>
> https://repository.apache.org/content/repositories/orgapachestanbol-1007
> >>
> >> Source tarball:
> >>
> http://people.apache.org/~reto/stanbol-release-20140602/org.apache.stanbol.commons.security.reactor-20140602-source-release.tar.gz
> >>
> >> Detached signature:
> >>
> http://people.apache.org/~reto/stanbol-release-20140602/org.apache.stanbol.commons.security.reactor-20140602-source-release.tar.gz.asc
> >>
> >> PGP release keys
> >> https://dist.apache.org/repos/dist/release/stanbol/KEYS
> >>
> >> Cheers,
> >> Reto
> >>
> >>
> >> On Mon, Jun 2, 2014 at 3:29 PM, Reto Gmür <re...@apache.org> wrote:
> >>
> >>> Rehi community,
> >>>
> >>> Given that the full 1.0.0 release might take some more time I've
> tailored
> >>> a mini-release of two modules. The 0.12 security.core module doesn't
> work
> >>> with jersey >= 2.0 because of what I believe to be a bug in Jersey
> >>> (JERSEY-1926) but a work-around working with all Jersey versions is
> >>> straight forward and has been in trunk for almost exactly one year.
> Apart
> >>> from the patch to work around JERSEY-1926 affecting security.core and
> >>> authentication.basic the new release also incorporates the code
> >>> simplification patch provided by Furkan Kamaci (STANBOL-1317).
> >>>
> >>> Changes since last release candidate [1]:
> >>> - Added parent to release
> >>> - Using version label 1.0.0 for component to be released
> >>> - Using version label 20140602 for the release reactor, this reactor
> >>> exists only for the release and nothing depends on it
> >>> - Removed reactor from staging repo (so no space in maven central will
> be
> >>> wasted)
> >>>
> >>> Solved issues:
> >>> - STANBOL-1094
> >>> - STANBOL-1317
> >>>
> >>> SVN-Tag:
> >>>
> >>>
> https://svn.apache.org/repos/asf/stanbol/tags/org.apache.stanbol.commons.security.reactor-20140602/
> >>> <
> https://svn.apache.org/repos/asf/stanbol/tags/org.apache.stanbol.commons.security-0.99/
> >
> >>>
> >>> Staging repos
> >>>
> https://repository.apache.org/content/repositories/orgapachestanbol-1007
> >>> <
> https://repository.apache.org/content/repositories/orgapachestanbol-1006/>
> >>>
> >>> Source tarball:
> >>>
> >>>
> http://people.apache.org/~reto/stanbol-release-20140602/org.apache.stanbol.commons.security.reactor-20140602-source-release.tar.gz
> >>> <
> http://repository.apache.org/content/repositories/orgapachestanbol-1006/org/apache/stanbol/org.apache.stanbol.commons.security/0.99/org.apache.stanbol.commons.security-0.99-source-release.tar.gz
> >
> >>>
> >>> Detached signature:
> >>>
> >>>
> http://people.apache.org/~reto/stanbol-release-20140602/org.apache.stanbol.commons.security.reactor-20140602-source-release.tar.gz.asc
> >>> <
> https://repository.apache.org/content/repositories/orgapachestanbol-1006/org/apache/stanbol/org.apache.stanbol.commons.security/0.99/org.apache.stanbol.commons.security-0.99-source-release.tar.gz.asc
> >
> >>>
> >>> PGP release keys
> >>> https://dist.apache.org/repos/dist/release/stanbol/KEYS
> >>>
> >>> The vote will be open for at least 48 hours.
> >>> Thanks for reviewing this release and for voting!
> >>>
> >>> Cheers,
> >>> Reto
> >>>
> >>> 1.
> >>>
> http://mail-archives.apache.org/mod_mbox/stanbol-dev/201406.mbox/%3CCALvhUEX4Tdg3HCwtMwTCyds%2B8xUsn4-hnvOyJ%3D1TUBKbneGoeQ%40mail.gmail.com%3E
> >>>
>
>
>
> --
> | Rupert Westenthaler             rupert.westenthaler@gmail.com
> | Bodenlehenstraße 11                              ++43-699-11108907
> | A-5500 Bischofshofen
> | REDLINK.CO
> ..........................................................................
> | http://redlink.co/
>

Re: [VOTE][RESULTS] Apache Stanbol Partial Security Release RC2

Posted by Reto Gmür <re...@apache.org>.
On Thu, Jun 26, 2014 at 10:08 AM, Rupert Westenthaler <
rupert.westenthaler@gmail.com> wrote:

> On Thu, Jun 26, 2014 at 9:38 AM, Reto Gmür <re...@wymiwyg.com> wrote:
> > On Thu, Jun 26, 2014 at 9:28 AM, Rupert Westenthaler <
> > rupert.westenthaler@gmail.com> wrote:
> >
> >> On Wed, Jun 25, 2014 at 4:31 PM, Reto Gmür <re...@wymiwyg.com> wrote:
> >> > Rehi,
> >> >
> >> > I've updated the versions in trunk. I've updated the dependent
> projectes
> >> > and the bundlelist to depend on the new SNAPSHOT version. So that some
> >> > changes will be reflected in the SNAPSHOT launcher. However this might
> >> mean
> >> > that when the launcher will be released and nothing changed in these
> >> > security modules we might want to switch back from 1.0.1-SNAPSHOT to
> >> 1.0.0.
> >> >
> >>
> >> In that case we can just remove those modules from the release.
> >>
> > And also switch back the version of the dependency in the dependent
> > projects. The maven versions:force-releases goal might be of help to do
> > this. It still needs to e done manually for the bundlelists are they are
> > not currently created from dependencies in the pom.
> >
>
> OK I was assuming that you kept the maven dependencies to the release
> 1.0.0 modules and not updated them to 1.0.1-SNAPSHOT as this would
> allow to use both the release version as well as the 1.0.1-SNAPSHOT
> version at runtime (OSGI semantic versioning).
>
> For bundle lists there is the possibility to use maven properties
> instead of fixed version numbers. That means that we could define
> versions for modules in the parent pom.
>
> <properties>
>     <stanbol-version>1.0.0-SNAPSHOT</stanbol-version>
>     <stanbol-enhancer-version>${stanbol-version}</stanbol-enhancer-version>
>     ...
> </properties>
>
> In the bundlelits one could than use
>
>   <startLevel level="30">
>     <bundle>
>       <groupId>org.apache.stanbol</groupId>
>       <artifactId>org.apache.stanbol.enhancer.servicesapi</artifactId>
>       <version>${stanbol-enhancer-version}</version>
>     </bundle>
>
> When adapting this it should be enough to adapt the version numbers in
> the parent when doing a release. In addition this could also be
> adopted for other important external dependencies (e.g. solr).
>
> best
> Rupert
>

In general variables do not work together well with the
maven-versions-plugin so I would avoid this.

So to me the preferred solution is to create the partialbundlelists from
the pom. This allows the dependencies to managed by standard maven tool and
to have full IDE support when editing the dependencies of a partial
bundlelist.

I hope this will soon be supported by the karaf-maven-plugin as requested
by: https://issues.apache.org/jira/browse/KARAF-2468

For the time being there is a fork of karaf-maven-plugin that can do
partialbundlelists, It is used in Clerezza and in Fusepool, for an example
migration see:
https://github.com/fusepool/fusepool-bundlelist/commit/bcf149ed6553b3335483de41be2e01f685519ae9

The karaf approach is a bit less easy to use when bundles withing the same
partialbundlelist should have different start level. But relying on a
start-order is an anti-pattern anyway.

Cheers,
Reto




>
> > Cheers,
> > Reto
> >
> >
> >>
> >> best
> >> Rupert
> >>
> >> --
> >> | Rupert Westenthaler             rupert.westenthaler@gmail.com
> >> | Bodenlehenstraße 11                              ++43-699-11108907
> >> | A-5500 Bischofshofen
> >> | REDLINK.CO
> >>
> ..........................................................................
> >> | http://redlink.co/
> >>
>
>
>
> --
> | Rupert Westenthaler             rupert.westenthaler@gmail.com
> | Bodenlehenstraße 11                              ++43-699-11108907
> | A-5500 Bischofshofen
> | REDLINK.CO
> ..........................................................................
> | http://redlink.co/
>

Re: [VOTE][RESULTS] Apache Stanbol Partial Security Release RC2

Posted by Rupert Westenthaler <ru...@gmail.com>.
On Thu, Jun 26, 2014 at 9:38 AM, Reto Gmür <re...@wymiwyg.com> wrote:
> On Thu, Jun 26, 2014 at 9:28 AM, Rupert Westenthaler <
> rupert.westenthaler@gmail.com> wrote:
>
>> On Wed, Jun 25, 2014 at 4:31 PM, Reto Gmür <re...@wymiwyg.com> wrote:
>> > Rehi,
>> >
>> > I've updated the versions in trunk. I've updated the dependent projectes
>> > and the bundlelist to depend on the new SNAPSHOT version. So that some
>> > changes will be reflected in the SNAPSHOT launcher. However this might
>> mean
>> > that when the launcher will be released and nothing changed in these
>> > security modules we might want to switch back from 1.0.1-SNAPSHOT to
>> 1.0.0.
>> >
>>
>> In that case we can just remove those modules from the release.
>>
> And also switch back the version of the dependency in the dependent
> projects. The maven versions:force-releases goal might be of help to do
> this. It still needs to e done manually for the bundlelists are they are
> not currently created from dependencies in the pom.
>

OK I was assuming that you kept the maven dependencies to the release
1.0.0 modules and not updated them to 1.0.1-SNAPSHOT as this would
allow to use both the release version as well as the 1.0.1-SNAPSHOT
version at runtime (OSGI semantic versioning).

For bundle lists there is the possibility to use maven properties
instead of fixed version numbers. That means that we could define
versions for modules in the parent pom.

<properties>
    <stanbol-version>1.0.0-SNAPSHOT</stanbol-version>
    <stanbol-enhancer-version>${stanbol-version}</stanbol-enhancer-version>
    ...
</properties>

In the bundlelits one could than use

  <startLevel level="30">
    <bundle>
      <groupId>org.apache.stanbol</groupId>
      <artifactId>org.apache.stanbol.enhancer.servicesapi</artifactId>
      <version>${stanbol-enhancer-version}</version>
    </bundle>

When adapting this it should be enough to adapt the version numbers in
the parent when doing a release. In addition this could also be
adopted for other important external dependencies (e.g. solr).

best
Rupert

> Cheers,
> Reto
>
>
>>
>> best
>> Rupert
>>
>> --
>> | Rupert Westenthaler             rupert.westenthaler@gmail.com
>> | Bodenlehenstraße 11                              ++43-699-11108907
>> | A-5500 Bischofshofen
>> | REDLINK.CO
>> ..........................................................................
>> | http://redlink.co/
>>



-- 
| Rupert Westenthaler             rupert.westenthaler@gmail.com
| Bodenlehenstraße 11                              ++43-699-11108907
| A-5500 Bischofshofen
| REDLINK.CO ..........................................................................
| http://redlink.co/

Re: [VOTE][RESULTS] Apache Stanbol Partial Security Release RC2

Posted by Reto Gmür <re...@wymiwyg.com>.
On Thu, Jun 26, 2014 at 9:28 AM, Rupert Westenthaler <
rupert.westenthaler@gmail.com> wrote:

> On Wed, Jun 25, 2014 at 4:31 PM, Reto Gmür <re...@wymiwyg.com> wrote:
> > Rehi,
> >
> > I've updated the versions in trunk. I've updated the dependent projectes
> > and the bundlelist to depend on the new SNAPSHOT version. So that some
> > changes will be reflected in the SNAPSHOT launcher. However this might
> mean
> > that when the launcher will be released and nothing changed in these
> > security modules we might want to switch back from 1.0.1-SNAPSHOT to
> 1.0.0.
> >
>
> In that case we can just remove those modules from the release.
>
And also switch back the version of the dependency in the dependent
projects. The maven versions:force-releases goal might be of help to do
this. It still needs to e done manually for the bundlelists are they are
not currently created from dependencies in the pom.

Cheers,
Reto


>
> best
> Rupert
>
> --
> | Rupert Westenthaler             rupert.westenthaler@gmail.com
> | Bodenlehenstraße 11                              ++43-699-11108907
> | A-5500 Bischofshofen
> | REDLINK.CO
> ..........................................................................
> | http://redlink.co/
>

Re: [VOTE][RESULTS] Apache Stanbol Partial Security Release RC2

Posted by Rupert Westenthaler <ru...@gmail.com>.
On Wed, Jun 25, 2014 at 4:31 PM, Reto Gmür <re...@wymiwyg.com> wrote:
> Rehi,
>
> I've updated the versions in trunk. I've updated the dependent projectes
> and the bundlelist to depend on the new SNAPSHOT version. So that some
> changes will be reflected in the SNAPSHOT launcher. However this might mean
> that when the launcher will be released and nothing changed in these
> security modules we might want to switch back from 1.0.1-SNAPSHOT to 1.0.0.
>

In that case we can just remove those modules from the release.

best
Rupert

-- 
| Rupert Westenthaler             rupert.westenthaler@gmail.com
| Bodenlehenstraße 11                              ++43-699-11108907
| A-5500 Bischofshofen
| REDLINK.CO ..........................................................................
| http://redlink.co/

Re: [VOTE][RESULTS] Apache Stanbol Partial Security Release RC2

Posted by Reto Gmür <re...@wymiwyg.com>.
Rehi,

I've updated the versions in trunk. I've updated the dependent projectes
and the bundlelist to depend on the new SNAPSHOT version. So that some
changes will be reflected in the SNAPSHOT launcher. However this might mean
that when the launcher will be released and nothing changed in these
security modules we might want to switch back from 1.0.1-SNAPSHOT to 1.0.0.

Cheers,
Reto


On Wed, Jun 25, 2014 at 3:51 PM, Reto Gmür <re...@wymiwyg.com> wrote:

> Hi Fabian
>
> Back from holidays, done now.
>
> Will now update the trunk as I couldn't use the release plugin to do the
> branching.
>
> Cheers,
>
> Reto
> On Jun 6, 2014 10:40 AM, "Fabian Christ" <ch...@googlemail.com>
> wrote:
>
>> Hi,
>>
>> sorry - I did not find the time to check this release. Reto, are you
>> going to update the website's download section with the links to the
>> release tar balls?
>>
>> Best,
>>  - Fabian
>>
>> 2014-06-05 8:14 GMT+02:00 Reto Gmür <re...@apache.org>:
>> > You have voted as follows:
>> >
>> > +1: 3 (Enrico, Rupert, Reto)
>> > 0: 0
>> > -1: 0
>> >
>> > The vote for the releases has passed by having reached a majority and 3
>> +1.
>> >
>> > Thanks for voting!
>> >
>> > @Rupert, regarding the JIRA issues:
>> >
>> >
>> >> * creating this release in JIRA
>> >>
>> > https://issues.apache.org/jira/browse/STANBOL-1351
>> >
>> >
>> >> * add this release as fixed version to STANBOL-1317
>> >>
>> > It's already there as 1.0.0 and 0.12.1, closing anyway
>> >
>> >> * create an own sub-task to STANBOL-1094 that is about migrating
>> >> security and mark this one as fixed by this release
>> >>
>> > This would be a sub-task of 1094, also it's not all of security but
>> just 2
>> > of the bundles. I suggest I just comment on 1094.
>> >
>> > Cheers,
>> > Reto
>> >
>> >>
>> >> best
>> >> Rupert
>> >>
>> >> On Mon, Jun 2, 2014 at 4:47 PM, Enrico Daga <en...@gmail.com>
>> wrote:
>> >> > +1
>> >> >
>> >> > Enrico
>> >> > Enrico Daga
>> >> >
>> >> > --
>> >> > http://www.enridaga.net
>> >> > skype: enri-pan
>> >> >
>> >> >
>> >> >
>> >> > On 2 June 2014 14:47, Reto Gmür <re...@apache.org> wrote:
>> >> >> Sorry I accidentally sent an HTML links with the old HREFs under the
>> >> >> correct new URIs as labels.
>> >> >>
>> >> >> Son once again, clickable:
>> >> >>
>> >> >> SVN-Tag:
>> >> >>
>> >>
>> https://svn.apache.org/repos/asf/stanbol/tags/org.apache.stanbol.commons.security.reactor-20140602/
>> >> >>
>> >> >> Staging repos
>> >> >>
>> >>
>> https://repository.apache.org/content/repositories/orgapachestanbol-1007
>> >> >>
>> >> >> Source tarball:
>> >> >>
>> >>
>> http://people.apache.org/~reto/stanbol-release-20140602/org.apache.stanbol.commons.security.reactor-20140602-source-release.tar.gz
>> >> >>
>> >> >> Detached signature:
>> >> >>
>> >>
>> http://people.apache.org/~reto/stanbol-release-20140602/org.apache.stanbol.commons.security.reactor-20140602-source-release.tar.gz.asc
>> >> >>
>> >> >> PGP release keys
>> >> >> https://dist.apache.org/repos/dist/release/stanbol/KEYS
>> >> >>
>> >> >> Cheers,
>> >> >> Reto
>> >> >>
>> >> >>
>> >> >> On Mon, Jun 2, 2014 at 3:29 PM, Reto Gmür <re...@apache.org> wrote:
>> >> >>
>> >> >>> Rehi community,
>> >> >>>
>> >> >>> Given that the full 1.0.0 release might take some more time I've
>> >> tailored
>> >> >>> a mini-release of two modules. The 0.12 security.core module
>> doesn't
>> >> work
>> >> >>> with jersey >= 2.0 because of what I believe to be a bug in Jersey
>> >> >>> (JERSEY-1926) but a work-around working with all Jersey versions is
>> >> >>> straight forward and has been in trunk for almost exactly one year.
>> >> Apart
>> >> >>> from the patch to work around JERSEY-1926 affecting security.core
>> and
>> >> >>> authentication.basic the new release also incorporates the code
>> >> >>> simplification patch provided by Furkan Kamaci (STANBOL-1317).
>> >> >>>
>> >> >>> Changes since last release candidate [1]:
>> >> >>> - Added parent to release
>> >> >>> - Using version label 1.0.0 for component to be released
>> >> >>> - Using version label 20140602 for the release reactor, this
>> reactor
>> >> >>> exists only for the release and nothing depends on it
>> >> >>> - Removed reactor from staging repo (so no space in maven central
>> will
>> >> be
>> >> >>> wasted)
>> >> >>>
>> >> >>> Solved issues:
>> >> >>> - STANBOL-1094
>> >> >>> - STANBOL-1317
>> >> >>>
>> >> >>> SVN-Tag:
>> >> >>>
>> >> >>>
>> >>
>> https://svn.apache.org/repos/asf/stanbol/tags/org.apache.stanbol.commons.security.reactor-20140602/
>> >> >>> <
>> >>
>> https://svn.apache.org/repos/asf/stanbol/tags/org.apache.stanbol.commons.security-0.99/
>> >> >
>> >> >>>
>> >> >>> Staging repos
>> >> >>>
>> >>
>> https://repository.apache.org/content/repositories/orgapachestanbol-1007
>> >> >>> <
>> >>
>> https://repository.apache.org/content/repositories/orgapachestanbol-1006/
>> >
>> >> >>>
>> >> >>> Source tarball:
>> >> >>>
>> >> >>>
>> >>
>> http://people.apache.org/~reto/stanbol-release-20140602/org.apache.stanbol.commons.security.reactor-20140602-source-release.tar.gz
>> >> >>> <
>> >>
>> http://repository.apache.org/content/repositories/orgapachestanbol-1006/org/apache/stanbol/org.apache.stanbol.commons.security/0.99/org.apache.stanbol.commons.security-0.99-source-release.tar.gz
>> >> >
>> >> >>>
>> >> >>> Detached signature:
>> >> >>>
>> >> >>>
>> >>
>> http://people.apache.org/~reto/stanbol-release-20140602/org.apache.stanbol.commons.security.reactor-20140602-source-release.tar.gz.asc
>> >> >>> <
>> >>
>> https://repository.apache.org/content/repositories/orgapachestanbol-1006/org/apache/stanbol/org.apache.stanbol.commons.security/0.99/org.apache.stanbol.commons.security-0.99-source-release.tar.gz.asc
>> >> >
>> >> >>>
>> >> >>> PGP release keys
>> >> >>> https://dist.apache.org/repos/dist/release/stanbol/KEYS
>> >> >>>
>> >> >>> The vote will be open for at least 48 hours.
>> >> >>> Thanks for reviewing this release and for voting!
>> >> >>>
>> >> >>> Cheers,
>> >> >>> Reto
>> >> >>>
>> >> >>> 1.
>> >> >>>
>> >>
>> http://mail-archives.apache.org/mod_mbox/stanbol-dev/201406.mbox/%3CCALvhUEX4Tdg3HCwtMwTCyds%2B8xUsn4-hnvOyJ%3D1TUBKbneGoeQ%40mail.gmail.com%3E
>> >> >>>
>> >>
>> >>
>> >>
>> >> --
>> >> | Rupert Westenthaler             rupert.westenthaler@gmail.com
>> >> | Bodenlehenstraße 11                              ++43-699-11108907
>> >> | A-5500 Bischofshofen
>> >> | REDLINK.CO
>> >>
>> ..........................................................................
>> >> | http://redlink.co/
>> >>
>>
>>
>>
>> --
>> Fabian
>> http://twitter.com/fctwitt
>>
>

Re: [VOTE][RESULTS] Apache Stanbol Partial Security Release RC2

Posted by Fabian Christ <ch...@googlemail.com>.
2014-06-25 15:51 GMT+02:00 Reto Gmür <re...@wymiwyg.com>:
> Back from holidays, done now.

Perfect, thank you!

-- 
Fabian
http://twitter.com/fctwitt

Re: [VOTE][RESULTS] Apache Stanbol Partial Security Release RC2

Posted by Reto Gmür <re...@wymiwyg.com>.
Hi Fabian

Back from holidays, done now.

Will now update the trunk as I couldn't use the release plugin to do the
branching.

Cheers,

Reto
On Jun 6, 2014 10:40 AM, "Fabian Christ" <ch...@googlemail.com>
wrote:

> Hi,
>
> sorry - I did not find the time to check this release. Reto, are you
> going to update the website's download section with the links to the
> release tar balls?
>
> Best,
>  - Fabian
>
> 2014-06-05 8:14 GMT+02:00 Reto Gmür <re...@apache.org>:
> > You have voted as follows:
> >
> > +1: 3 (Enrico, Rupert, Reto)
> > 0: 0
> > -1: 0
> >
> > The vote for the releases has passed by having reached a majority and 3
> +1.
> >
> > Thanks for voting!
> >
> > @Rupert, regarding the JIRA issues:
> >
> >
> >> * creating this release in JIRA
> >>
> > https://issues.apache.org/jira/browse/STANBOL-1351
> >
> >
> >> * add this release as fixed version to STANBOL-1317
> >>
> > It's already there as 1.0.0 and 0.12.1, closing anyway
> >
> >> * create an own sub-task to STANBOL-1094 that is about migrating
> >> security and mark this one as fixed by this release
> >>
> > This would be a sub-task of 1094, also it's not all of security but just
> 2
> > of the bundles. I suggest I just comment on 1094.
> >
> > Cheers,
> > Reto
> >
> >>
> >> best
> >> Rupert
> >>
> >> On Mon, Jun 2, 2014 at 4:47 PM, Enrico Daga <en...@gmail.com>
> wrote:
> >> > +1
> >> >
> >> > Enrico
> >> > Enrico Daga
> >> >
> >> > --
> >> > http://www.enridaga.net
> >> > skype: enri-pan
> >> >
> >> >
> >> >
> >> > On 2 June 2014 14:47, Reto Gmür <re...@apache.org> wrote:
> >> >> Sorry I accidentally sent an HTML links with the old HREFs under the
> >> >> correct new URIs as labels.
> >> >>
> >> >> Son once again, clickable:
> >> >>
> >> >> SVN-Tag:
> >> >>
> >>
> https://svn.apache.org/repos/asf/stanbol/tags/org.apache.stanbol.commons.security.reactor-20140602/
> >> >>
> >> >> Staging repos
> >> >>
> >>
> https://repository.apache.org/content/repositories/orgapachestanbol-1007
> >> >>
> >> >> Source tarball:
> >> >>
> >>
> http://people.apache.org/~reto/stanbol-release-20140602/org.apache.stanbol.commons.security.reactor-20140602-source-release.tar.gz
> >> >>
> >> >> Detached signature:
> >> >>
> >>
> http://people.apache.org/~reto/stanbol-release-20140602/org.apache.stanbol.commons.security.reactor-20140602-source-release.tar.gz.asc
> >> >>
> >> >> PGP release keys
> >> >> https://dist.apache.org/repos/dist/release/stanbol/KEYS
> >> >>
> >> >> Cheers,
> >> >> Reto
> >> >>
> >> >>
> >> >> On Mon, Jun 2, 2014 at 3:29 PM, Reto Gmür <re...@apache.org> wrote:
> >> >>
> >> >>> Rehi community,
> >> >>>
> >> >>> Given that the full 1.0.0 release might take some more time I've
> >> tailored
> >> >>> a mini-release of two modules. The 0.12 security.core module doesn't
> >> work
> >> >>> with jersey >= 2.0 because of what I believe to be a bug in Jersey
> >> >>> (JERSEY-1926) but a work-around working with all Jersey versions is
> >> >>> straight forward and has been in trunk for almost exactly one year.
> >> Apart
> >> >>> from the patch to work around JERSEY-1926 affecting security.core
> and
> >> >>> authentication.basic the new release also incorporates the code
> >> >>> simplification patch provided by Furkan Kamaci (STANBOL-1317).
> >> >>>
> >> >>> Changes since last release candidate [1]:
> >> >>> - Added parent to release
> >> >>> - Using version label 1.0.0 for component to be released
> >> >>> - Using version label 20140602 for the release reactor, this reactor
> >> >>> exists only for the release and nothing depends on it
> >> >>> - Removed reactor from staging repo (so no space in maven central
> will
> >> be
> >> >>> wasted)
> >> >>>
> >> >>> Solved issues:
> >> >>> - STANBOL-1094
> >> >>> - STANBOL-1317
> >> >>>
> >> >>> SVN-Tag:
> >> >>>
> >> >>>
> >>
> https://svn.apache.org/repos/asf/stanbol/tags/org.apache.stanbol.commons.security.reactor-20140602/
> >> >>> <
> >>
> https://svn.apache.org/repos/asf/stanbol/tags/org.apache.stanbol.commons.security-0.99/
> >> >
> >> >>>
> >> >>> Staging repos
> >> >>>
> >>
> https://repository.apache.org/content/repositories/orgapachestanbol-1007
> >> >>> <
> >>
> https://repository.apache.org/content/repositories/orgapachestanbol-1006/>
> >> >>>
> >> >>> Source tarball:
> >> >>>
> >> >>>
> >>
> http://people.apache.org/~reto/stanbol-release-20140602/org.apache.stanbol.commons.security.reactor-20140602-source-release.tar.gz
> >> >>> <
> >>
> http://repository.apache.org/content/repositories/orgapachestanbol-1006/org/apache/stanbol/org.apache.stanbol.commons.security/0.99/org.apache.stanbol.commons.security-0.99-source-release.tar.gz
> >> >
> >> >>>
> >> >>> Detached signature:
> >> >>>
> >> >>>
> >>
> http://people.apache.org/~reto/stanbol-release-20140602/org.apache.stanbol.commons.security.reactor-20140602-source-release.tar.gz.asc
> >> >>> <
> >>
> https://repository.apache.org/content/repositories/orgapachestanbol-1006/org/apache/stanbol/org.apache.stanbol.commons.security/0.99/org.apache.stanbol.commons.security-0.99-source-release.tar.gz.asc
> >> >
> >> >>>
> >> >>> PGP release keys
> >> >>> https://dist.apache.org/repos/dist/release/stanbol/KEYS
> >> >>>
> >> >>> The vote will be open for at least 48 hours.
> >> >>> Thanks for reviewing this release and for voting!
> >> >>>
> >> >>> Cheers,
> >> >>> Reto
> >> >>>
> >> >>> 1.
> >> >>>
> >>
> http://mail-archives.apache.org/mod_mbox/stanbol-dev/201406.mbox/%3CCALvhUEX4Tdg3HCwtMwTCyds%2B8xUsn4-hnvOyJ%3D1TUBKbneGoeQ%40mail.gmail.com%3E
> >> >>>
> >>
> >>
> >>
> >> --
> >> | Rupert Westenthaler             rupert.westenthaler@gmail.com
> >> | Bodenlehenstraße 11                              ++43-699-11108907
> >> | A-5500 Bischofshofen
> >> | REDLINK.CO
> >>
> ..........................................................................
> >> | http://redlink.co/
> >>
>
>
>
> --
> Fabian
> http://twitter.com/fctwitt
>

Re: [VOTE][RESULTS] Apache Stanbol Partial Security Release RC2

Posted by Fabian Christ <ch...@googlemail.com>.
Hi,

sorry - I did not find the time to check this release. Reto, are you
going to update the website's download section with the links to the
release tar balls?

Best,
 - Fabian

2014-06-05 8:14 GMT+02:00 Reto Gmür <re...@apache.org>:
> You have voted as follows:
>
> +1: 3 (Enrico, Rupert, Reto)
> 0: 0
> -1: 0
>
> The vote for the releases has passed by having reached a majority and 3 +1.
>
> Thanks for voting!
>
> @Rupert, regarding the JIRA issues:
>
>
>> * creating this release in JIRA
>>
> https://issues.apache.org/jira/browse/STANBOL-1351
>
>
>> * add this release as fixed version to STANBOL-1317
>>
> It's already there as 1.0.0 and 0.12.1, closing anyway
>
>> * create an own sub-task to STANBOL-1094 that is about migrating
>> security and mark this one as fixed by this release
>>
> This would be a sub-task of 1094, also it's not all of security but just 2
> of the bundles. I suggest I just comment on 1094.
>
> Cheers,
> Reto
>
>>
>> best
>> Rupert
>>
>> On Mon, Jun 2, 2014 at 4:47 PM, Enrico Daga <en...@gmail.com> wrote:
>> > +1
>> >
>> > Enrico
>> > Enrico Daga
>> >
>> > --
>> > http://www.enridaga.net
>> > skype: enri-pan
>> >
>> >
>> >
>> > On 2 June 2014 14:47, Reto Gmür <re...@apache.org> wrote:
>> >> Sorry I accidentally sent an HTML links with the old HREFs under the
>> >> correct new URIs as labels.
>> >>
>> >> Son once again, clickable:
>> >>
>> >> SVN-Tag:
>> >>
>> https://svn.apache.org/repos/asf/stanbol/tags/org.apache.stanbol.commons.security.reactor-20140602/
>> >>
>> >> Staging repos
>> >>
>> https://repository.apache.org/content/repositories/orgapachestanbol-1007
>> >>
>> >> Source tarball:
>> >>
>> http://people.apache.org/~reto/stanbol-release-20140602/org.apache.stanbol.commons.security.reactor-20140602-source-release.tar.gz
>> >>
>> >> Detached signature:
>> >>
>> http://people.apache.org/~reto/stanbol-release-20140602/org.apache.stanbol.commons.security.reactor-20140602-source-release.tar.gz.asc
>> >>
>> >> PGP release keys
>> >> https://dist.apache.org/repos/dist/release/stanbol/KEYS
>> >>
>> >> Cheers,
>> >> Reto
>> >>
>> >>
>> >> On Mon, Jun 2, 2014 at 3:29 PM, Reto Gmür <re...@apache.org> wrote:
>> >>
>> >>> Rehi community,
>> >>>
>> >>> Given that the full 1.0.0 release might take some more time I've
>> tailored
>> >>> a mini-release of two modules. The 0.12 security.core module doesn't
>> work
>> >>> with jersey >= 2.0 because of what I believe to be a bug in Jersey
>> >>> (JERSEY-1926) but a work-around working with all Jersey versions is
>> >>> straight forward and has been in trunk for almost exactly one year.
>> Apart
>> >>> from the patch to work around JERSEY-1926 affecting security.core and
>> >>> authentication.basic the new release also incorporates the code
>> >>> simplification patch provided by Furkan Kamaci (STANBOL-1317).
>> >>>
>> >>> Changes since last release candidate [1]:
>> >>> - Added parent to release
>> >>> - Using version label 1.0.0 for component to be released
>> >>> - Using version label 20140602 for the release reactor, this reactor
>> >>> exists only for the release and nothing depends on it
>> >>> - Removed reactor from staging repo (so no space in maven central will
>> be
>> >>> wasted)
>> >>>
>> >>> Solved issues:
>> >>> - STANBOL-1094
>> >>> - STANBOL-1317
>> >>>
>> >>> SVN-Tag:
>> >>>
>> >>>
>> https://svn.apache.org/repos/asf/stanbol/tags/org.apache.stanbol.commons.security.reactor-20140602/
>> >>> <
>> https://svn.apache.org/repos/asf/stanbol/tags/org.apache.stanbol.commons.security-0.99/
>> >
>> >>>
>> >>> Staging repos
>> >>>
>> https://repository.apache.org/content/repositories/orgapachestanbol-1007
>> >>> <
>> https://repository.apache.org/content/repositories/orgapachestanbol-1006/>
>> >>>
>> >>> Source tarball:
>> >>>
>> >>>
>> http://people.apache.org/~reto/stanbol-release-20140602/org.apache.stanbol.commons.security.reactor-20140602-source-release.tar.gz
>> >>> <
>> http://repository.apache.org/content/repositories/orgapachestanbol-1006/org/apache/stanbol/org.apache.stanbol.commons.security/0.99/org.apache.stanbol.commons.security-0.99-source-release.tar.gz
>> >
>> >>>
>> >>> Detached signature:
>> >>>
>> >>>
>> http://people.apache.org/~reto/stanbol-release-20140602/org.apache.stanbol.commons.security.reactor-20140602-source-release.tar.gz.asc
>> >>> <
>> https://repository.apache.org/content/repositories/orgapachestanbol-1006/org/apache/stanbol/org.apache.stanbol.commons.security/0.99/org.apache.stanbol.commons.security-0.99-source-release.tar.gz.asc
>> >
>> >>>
>> >>> PGP release keys
>> >>> https://dist.apache.org/repos/dist/release/stanbol/KEYS
>> >>>
>> >>> The vote will be open for at least 48 hours.
>> >>> Thanks for reviewing this release and for voting!
>> >>>
>> >>> Cheers,
>> >>> Reto
>> >>>
>> >>> 1.
>> >>>
>> http://mail-archives.apache.org/mod_mbox/stanbol-dev/201406.mbox/%3CCALvhUEX4Tdg3HCwtMwTCyds%2B8xUsn4-hnvOyJ%3D1TUBKbneGoeQ%40mail.gmail.com%3E
>> >>>
>>
>>
>>
>> --
>> | Rupert Westenthaler             rupert.westenthaler@gmail.com
>> | Bodenlehenstraße 11                              ++43-699-11108907
>> | A-5500 Bischofshofen
>> | REDLINK.CO
>> ..........................................................................
>> | http://redlink.co/
>>



-- 
Fabian
http://twitter.com/fctwitt