[VOTE RESULT] Apache TomEE 9.0.0.RC1 - staging repo 1208

[Jean-Louis Monteiro <jl...@tomitribe.com>]

Vote passed with 7 +1 and no other vote.
Thanks everyone for the prompte feedback, review and vote. Nice to see so
many people voting.

I'll proceed with the other tasks and get the announcement out.
--
Jean-Louis Monteiro
http://twitter.com/jlouismonteiro
http://www.tomitribe.com


On Mon, Oct 31, 2022 at 11:06 AM Jean-Louis Monteiro <
jlmonteiro@tomitribe.com> wrote:

> Hi all,
>
> As discussed, here is the vote for Apache TomEE 9.0.0.RC1. This is a
> release candidate implementing Jakarta EE 9.1 and MicroProfile 5. It is
> fully passing MicroProfile 5 TCK and only has a few failures for Jakarta
> TCK, hence the release candidate.
>
> This is a jakarta namespace compatible version. And it will result in a
> final version as soon as we can get the few TCK failures fixed.
>
> Binaries and sources
> https://dist.apache.org/repos/dist/dev/tomee/staging-1208/
>
> Staging repository
> https://repository.apache.org/content/repositories/orgapachetomee-1208
>
> CI last green build
> https://ci-builds.apache.org/job/Tomee/job/master-build-full/797/
>
> Releases notes
> = Apache TomEE 9.0.0.RC1 Release Notes
> :index-group: Release Notes
> :jbake-type: page
> :jbake-status: published
>
> == Dependency upgrade
>
> [.compact]
>  - link:https://issues.apache.org/jira/browse/TOMEE-4100[TOMEE-4100]
>  XBean 4.22
>  - link:https://issues.apache.org/jira/browse/TOMEE-4083[TOMEE-4083]
> Commons CLI 1.5.0
>  - link:https://issues.apache.org/jira/browse/TOMEE-3800[TOMEE-3800] DBCP
> 2.9.0
>  - link:https://issues.apache.org/jira/browse/TOMEE-4037[TOMEE-4037]
> Eclipse Mojarra 3.0.2
>  - link:https://issues.apache.org/jira/browse/TOMEE-4036[TOMEE-4036]
> EclipseLink 3.0.3
>  - link:https://issues.apache.org/jira/browse/TOMEE-3980[TOMEE-3980]
> HSQLDB 2.7.0
>  - link:https://issues.apache.org/jira/browse/TOMEE-4019[TOMEE-4019]
> HSQLDB 2.7.0
>  - link:https://issues.apache.org/jira/browse/TOMEE-4086[TOMEE-4086]
> HSQLDB 2.7.1
>  - link:https://issues.apache.org/jira/browse/TOMEE-4039[TOMEE-4039]
> Hibernate 6.1
>  - link:https://issues.apache.org/jira/browse/TOMEE-4093[TOMEE-4093]
> Hibernate 6.1.4.Final
>  - link:https://issues.apache.org/jira/browse/TOMEE-4038[TOMEE-4038]
> Jackson 2.13.4
>  - link:https://issues.apache.org/jira/browse/TOMEE-4026[TOMEE-4026]
> Johnzon 1.2.19
>  - link:https://issues.apache.org/jira/browse/TOMEE-4030[TOMEE-4030]
> Log4J2 2.18.0
>  - link:https://issues.apache.org/jira/browse/TOMEE-4097[TOMEE-4097]
> MicroProfile Fault Tolerance API 4.0.2
>  - link:https://issues.apache.org/jira/browse/TOMEE-4098[TOMEE-4098]
> MicroProfile Health API 4.0.1
>  - link:https://issues.apache.org/jira/browse/TOMEE-4099[TOMEE-4099]
> MicroProfile Rest Client API 3.0.1
>  - link:https://issues.apache.org/jira/browse/TOMEE-3999[TOMEE-3999]
> MyFaces 3.0.2
>  - link:https://issues.apache.org/jira/browse/TOMEE-4054[TOMEE-4054]
> Snakeyaml 1.33
>  - link:https://issues.apache.org/jira/browse/TOMEE-3831[TOMEE-3831]
> TomEE should support library asm9.1 support fully Java 17
>  - link:https://issues.apache.org/jira/browse/TOMEE-4040[TOMEE-4040]
> Tomcat 10.0.23
>  - link:https://issues.apache.org/jira/browse/TOMEE-4096[TOMEE-4096]
> Tomcat 10.0.27
>  - link:https://issues.apache.org/jira/browse/TOMEE-4018[TOMEE-4018]
> bcprov-jdk15on 1.70
>  - link:https://issues.apache.org/jira/browse/TOMEE-4006[TOMEE-4006]
> slf4j 1.7.36
>
> == Bug
>
> [.compact]
>  - link:https://issues.apache.org/jira/browse/TOMEE-4101[TOMEE-4101] Typo
> with EL22Adaptor implementation in openwebbeans.properties
>  - link:https://issues.apache.org/jira/browse/TOMEE-4102[TOMEE-4102]
> TomEE logs SEVERE: Expected ContextBinding to have the method
> getThreadName()
>  - link:https://issues.apache.org/jira/browse/TOMEE-4032[TOMEE-4032]
> Class cast Exception when undeploying application with @PostConstruct
> LifeCycle
>  - link:https://issues.apache.org/jira/browse/TOMEE-3795[TOMEE-3795]
> Proxy class definition does not work in Java 17+
>  - link:https://issues.apache.org/jira/browse/TOMEE-4014[TOMEE-4014]
> Unable to see TomEE version in Tomcat home page with Java 17
>  - link:https://issues.apache.org/jira/browse/TOMEE-4041[TOMEE-4041] 4
> CVE Vulnerabilities in snakeyaml-1.30.jar
>  - link:https://issues.apache.org/jira/browse/TOMEE-4001[TOMEE-4001]
> CVE-2022-34305 displaying user provided data without filtering, exposing a
> XSS vulnerability
>
> == Task
>
> [.compact]
>  - link:https://issues.apache.org/jira/browse/TOMEE-4022[TOMEE-4022] Move
> to Apache Rat
>  - link:https://issues.apache.org/jira/browse/TOMEE-4028[TOMEE-4028]
> Replace cucumber shading and replace with cucumber-jakarta-openejb
>  - link:https://issues.apache.org/jira/browse/TOMEE-4035[TOMEE-4035]
> Upgrade SmallRye, Jackson and others
>  - link:https://issues.apache.org/jira/browse/TOMEE-3914[TOMEE-3914]
> Spring 3 Dependencies in TomEE Root POM
>  - link:https://issues.apache.org/jira/browse/TOMEE-4088[TOMEE-4088] Add
> workaround for CVE-2022-41853 (hsqldb)
>
> == Documentation
>
> [.compact]
>  - link:https://issues.apache.org/jira/browse/TOMEE-4023[TOMEE-4023]
> Comparison pages with wrong specs per profiles
>
> == Sub-task
>
> [.compact]
>  - link:https://issues.apache.org/jira/browse/TOMEE-3890[TOMEE-3890]
> Replace Apache Geronimo Microprofile with Smallrye
>  - link:https://issues.apache.org/jira/browse/TOMEE-3896[TOMEE-3896]
> SmallRye Metrics integration
>  - link:https://issues.apache.org/jira/browse/TOMEE-3897[TOMEE-3897]
> SmallRye Health integration
>  - link:https://issues.apache.org/jira/browse/TOMEE-3898[TOMEE-3898]
> SmallRye Config integration
>  - link:https://issues.apache.org/jira/browse/TOMEE-3899[TOMEE-3899]
> SmallRye Fault Tolerant integration
>  - link:https://issues.apache.org/jira/browse/TOMEE-4007[TOMEE-4007]
> Clean up ASM dependency
>  - link:https://issues.apache.org/jira/browse/TOMEE-3900[TOMEE-3900]
> SmallRye OpenAPI integration
>  - link:https://issues.apache.org/jira/browse/TOMEE-3947[TOMEE-3947]
> Elliptic Curve ES256 signature algorithm
>  - link:https://issues.apache.org/jira/browse/TOMEE-3948[TOMEE-3948]
> Decryption of JWTs using RSA-OAEP and A256GCM algorithms
>  - link:https://issues.apache.org/jira/browse/TOMEE-3949[TOMEE-3949]
> Support for JWT audience aud claim
>  - link:https://issues.apache.org/jira/browse/TOMEE-3909[TOMEE-3909] Pass
> MicroProfile Rest Client TCK
>  - link:https://issues.apache.org/jira/browse/TOMEE-3910[TOMEE-3910] Pass
> MicroProfile JWT TCK
>  - link:https://issues.apache.org/jira/browse/TOMEE-3955[TOMEE-3955] Fix
> TomEE :: Examples :: Arquillian Persistence Extension Sample
>
> == Fixed Common Vulnerabilities and Exposures (CVEs)
>
> [.compact]
>  - link:https://issues.apache.org/jira/browse/TOMEE-4086[TOMEE-4086]
> HSQLDB 2.7.1
>  - link:https://issues.apache.org/jira/browse/TOMEE-4041[TOMEE-4041] 4
> CVE Vulnerabilities in snakeyaml-1.30.jar
>  - link:https://issues.apache.org/jira/browse/TOMEE-4001[TOMEE-4001]
> CVE-2022-34305 displaying user provided data without filtering, exposing a
> XSS vulnerability
>  - link:https://issues.apache.org/jira/browse/TOMEE-4088[TOMEE-4088] Add
> workaround for CVE-2022-41853 (hsqldb)
>
> Please VOTE
>
>  [+1] go ship it
>  [+0] meh, don't care
>  [-1] stop, there is a ${showstopper}
>
>  The VOTE is open for 72h or as long as needed.
> --
> Jean-Louis Monteiro
> http://twitter.com/jlouismonteiro
> http://www.tomitribe.com
>