You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tapestry.apache.org by Igor Drobiazko <ig...@gmail.com> on 2010/05/04 08:39:00 UTC
Time for a 5.2 release?
Tapestry 5.1.0.5 has been released one year ago and think we need a new
release. We've fixed around 160 issues, we have a lot of improvements and
bug fixes.
There are so much new features I can't live without. I would love to
upgrade my apps. What do you think about a 5.2.0 release?
--
Best regards,
Igor Drobiazko
http://tapestry5.de/blog
Re: Time for a 5.2 release?
Posted by Christian Edward Gruber <ch...@gmail.com>.
I'll take a look. From my end, it's because I've only just started
using Tapestry again. :) So now it's about me, I can afford the time.
LOL.
Christian
On May 5, 2010, at 2:30 PM, Howard Lewis Ship wrote:
> Well, there is this big backlog of bugs, many of which are pretty easy
> to fix. If getting a release out is important, why is the backlog not
> getting addressed?
>
> On Wed, May 5, 2010 at 9:28 AM, Christian Edward Gruber
> <ch...@gmail.com> wrote:
>> i think the specific schedule isn't the advantage, it's the
>> regularity of
>> the timebox. There are advantages to longer or shorter iterations,
>> but
>> having a fixed-length iteration forces prioritization, and,
>> ideally, there's
>> a cut-off where work-in-progress that "won't make it" is pruned or
>> side-lined (if modular enough). If I knew there was a T5 release
>> on N
>> dates (with a nice list of what's been done, what seems likely to
>> be in, and
>> what could get in if the moons aligned) it would certainly help me
>> plan
>> things out. (the above notwithstanding bug-fix patch releases
>> which can be
>> as-needed for critical fixes)
>>
>> What that schedule is is probably not as big a deal, just that it's
>> consistent.
>>
>> Just my 2c.
>>
>> Christian.
>>
>> On May 5, 2010, at 12:15 PM, Massimo Lusetti wrote:
>>
>>> On Wed, May 5, 2010 at 2:40 PM, Christian Edward Gruber
>>> <ch...@gmail.com> wrote:
>>>
>>>> sometimes it's 2. Having said that OpenBSD releases twice a year
>>>> like
>>>> clockwork and the regularity of their release really works. Meh.
>>>> Hopefully
>>>> soon. :)
>>>
>>> Really happy to see someone mention it[1]. Even if an OS is
>>> something
>>> quite different from Tapestry I guess something good could be
>>> learned
>>> from that.
>>>
>>> I would like to push Igor to take lead on releasing 5.2.x
>>>
>>> Cheers
>>>
>>> [1]
>>> cvs.openbsd.org/papers/asiabsdcon2009-release_engineering/
>>> mgp00001.html
>>> --
>>> Massimo
>>> http://meridio.blogspot.com
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>>> For additional commands, e-mail: dev-help@tapestry.apache.org
>>>
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>> For additional commands, e-mail: dev-help@tapestry.apache.org
>>
>>
>
>
>
> --
> Howard M. Lewis Ship
>
> Creator of Apache Tapestry
>
> The source for Tapestry training, mentoring and support. Contact me to
> learn how I can get you up and productive in Tapestry fast!
>
> (971) 678-5210
> http://howardlewisship.com
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
> For additional commands, e-mail: dev-help@tapestry.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
For additional commands, e-mail: dev-help@tapestry.apache.org
Re: Time for a 5.2 release?
Posted by Howard Lewis Ship <hl...@gmail.com>.
That being said, I think it would be good to have a full stable
release every 6 months or so, like the transition from 5.0 to 5.1.
On Wed, May 5, 2010 at 11:30 AM, Howard Lewis Ship <hl...@gmail.com> wrote:
> Well, there is this big backlog of bugs, many of which are pretty easy
> to fix. If getting a release out is important, why is the backlog not
> getting addressed?
>
> On Wed, May 5, 2010 at 9:28 AM, Christian Edward Gruber
> <ch...@gmail.com> wrote:
>> i think the specific schedule isn't the advantage, it's the regularity of
>> the timebox. There are advantages to longer or shorter iterations, but
>> having a fixed-length iteration forces prioritization, and, ideally, there's
>> a cut-off where work-in-progress that "won't make it" is pruned or
>> side-lined (if modular enough). If I knew there was a T5 release on N
>> dates (with a nice list of what's been done, what seems likely to be in, and
>> what could get in if the moons aligned) it would certainly help me plan
>> things out. (the above notwithstanding bug-fix patch releases which can be
>> as-needed for critical fixes)
>>
>> What that schedule is is probably not as big a deal, just that it's
>> consistent.
>>
>> Just my 2c.
>>
>> Christian.
>>
>> On May 5, 2010, at 12:15 PM, Massimo Lusetti wrote:
>>
>>> On Wed, May 5, 2010 at 2:40 PM, Christian Edward Gruber
>>> <ch...@gmail.com> wrote:
>>>
>>>> sometimes it's 2. Having said that OpenBSD releases twice a year like
>>>> clockwork and the regularity of their release really works. Meh.
>>>> Hopefully
>>>> soon. :)
>>>
>>> Really happy to see someone mention it[1]. Even if an OS is something
>>> quite different from Tapestry I guess something good could be learned
>>> from that.
>>>
>>> I would like to push Igor to take lead on releasing 5.2.x
>>>
>>> Cheers
>>>
>>> [1]
>>> cvs.openbsd.org/papers/asiabsdcon2009-release_engineering/mgp00001.html
>>> --
>>> Massimo
>>> http://meridio.blogspot.com
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>>> For additional commands, e-mail: dev-help@tapestry.apache.org
>>>
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>> For additional commands, e-mail: dev-help@tapestry.apache.org
>>
>>
>
>
>
> --
> Howard M. Lewis Ship
>
> Creator of Apache Tapestry
>
> The source for Tapestry training, mentoring and support. Contact me to
> learn how I can get you up and productive in Tapestry fast!
>
> (971) 678-5210
> http://howardlewisship.com
>
--
Howard M. Lewis Ship
Creator of Apache Tapestry
The source for Tapestry training, mentoring and support. Contact me to
learn how I can get you up and productive in Tapestry fast!
(971) 678-5210
http://howardlewisship.com
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
For additional commands, e-mail: dev-help@tapestry.apache.org
Re: Time for a 5.2 release?
Posted by Howard Lewis Ship <hl...@gmail.com>.
Well, there is this big backlog of bugs, many of which are pretty easy
to fix. If getting a release out is important, why is the backlog not
getting addressed?
On Wed, May 5, 2010 at 9:28 AM, Christian Edward Gruber
<ch...@gmail.com> wrote:
> i think the specific schedule isn't the advantage, it's the regularity of
> the timebox. There are advantages to longer or shorter iterations, but
> having a fixed-length iteration forces prioritization, and, ideally, there's
> a cut-off where work-in-progress that "won't make it" is pruned or
> side-lined (if modular enough). If I knew there was a T5 release on N
> dates (with a nice list of what's been done, what seems likely to be in, and
> what could get in if the moons aligned) it would certainly help me plan
> things out. (the above notwithstanding bug-fix patch releases which can be
> as-needed for critical fixes)
>
> What that schedule is is probably not as big a deal, just that it's
> consistent.
>
> Just my 2c.
>
> Christian.
>
> On May 5, 2010, at 12:15 PM, Massimo Lusetti wrote:
>
>> On Wed, May 5, 2010 at 2:40 PM, Christian Edward Gruber
>> <ch...@gmail.com> wrote:
>>
>>> sometimes it's 2. Having said that OpenBSD releases twice a year like
>>> clockwork and the regularity of their release really works. Meh.
>>> Hopefully
>>> soon. :)
>>
>> Really happy to see someone mention it[1]. Even if an OS is something
>> quite different from Tapestry I guess something good could be learned
>> from that.
>>
>> I would like to push Igor to take lead on releasing 5.2.x
>>
>> Cheers
>>
>> [1]
>> cvs.openbsd.org/papers/asiabsdcon2009-release_engineering/mgp00001.html
>> --
>> Massimo
>> http://meridio.blogspot.com
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>> For additional commands, e-mail: dev-help@tapestry.apache.org
>>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
> For additional commands, e-mail: dev-help@tapestry.apache.org
>
>
--
Howard M. Lewis Ship
Creator of Apache Tapestry
The source for Tapestry training, mentoring and support. Contact me to
learn how I can get you up and productive in Tapestry fast!
(971) 678-5210
http://howardlewisship.com
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
For additional commands, e-mail: dev-help@tapestry.apache.org
Re: Time for a 5.2 release?
Posted by Christian Edward Gruber <ch...@gmail.com>.
i think the specific schedule isn't the advantage, it's the regularity
of the timebox. There are advantages to longer or shorter iterations,
but having a fixed-length iteration forces prioritization, and,
ideally, there's a cut-off where work-in-progress that "won't make it"
is pruned or side-lined (if modular enough). If I knew there was a
T5 release on N dates (with a nice list of what's been done, what
seems likely to be in, and what could get in if the moons aligned) it
would certainly help me plan things out. (the above notwithstanding
bug-fix patch releases which can be as-needed for critical fixes)
What that schedule is is probably not as big a deal, just that it's
consistent.
Just my 2c.
Christian.
On May 5, 2010, at 12:15 PM, Massimo Lusetti wrote:
> On Wed, May 5, 2010 at 2:40 PM, Christian Edward Gruber
> <ch...@gmail.com> wrote:
>
>> sometimes it's 2. Having said that OpenBSD releases twice a year
>> like
>> clockwork and the regularity of their release really works. Meh.
>> Hopefully
>> soon. :)
>
> Really happy to see someone mention it[1]. Even if an OS is something
> quite different from Tapestry I guess something good could be learned
> from that.
>
> I would like to push Igor to take lead on releasing 5.2.x
>
> Cheers
>
> [1] cvs.openbsd.org/papers/asiabsdcon2009-release_engineering/
> mgp00001.html
> --
> Massimo
> http://meridio.blogspot.com
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
> For additional commands, e-mail: dev-help@tapestry.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
For additional commands, e-mail: dev-help@tapestry.apache.org
Re: Time for a 5.2 release?
Posted by Massimo Lusetti <ml...@gmail.com>.
On Wed, May 5, 2010 at 2:40 PM, Christian Edward Gruber
<ch...@gmail.com> wrote:
> sometimes it's 2. Having said that OpenBSD releases twice a year like
> clockwork and the regularity of their release really works. Meh. Hopefully
> soon. :)
Really happy to see someone mention it[1]. Even if an OS is something
quite different from Tapestry I guess something good could be learned
from that.
I would like to push Igor to take lead on releasing 5.2.x
Cheers
[1] cvs.openbsd.org/papers/asiabsdcon2009-release_engineering/mgp00001.html
--
Massimo
http://meridio.blogspot.com
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
For additional commands, e-mail: dev-help@tapestry.apache.org
Re: Time for a 5.2 release?
Posted by Christian Edward Gruber <ch...@gmail.com>.
I agree, though I'd go for more releases with fewer features each
time, personally. Less "work in progress" and way more customer
satisfaction. Also, it's way easier to wait 1-2, or even 2-4 months
than 3-4 months, if sometimes it's 2. Having said that OpenBSD
releases twice a year like clockwork and the regularity of their
release really works. Meh. Hopefully soon. :)
Christian.
On May 5, 2010, at 3:21 AM, Massimo Lusetti wrote:
> On Wed, May 5, 2010 at 8:21 AM, Igor Drobiazko <igor.drobiazko@gmail.com
> > wrote:
>
>> I'm looking forward to see the new stuff but sometimes we have to
>> deliver
>> less than we would like to deliver. Waiting for a release 12-18
>> month is
>> unacceptable for any client. I guess, same applies for open source.
>> Ideally
>> there are 2-3 smaller releases per year. We put in every release as
>> much as
>> we can. If some innovative and cool stuff isn't ready to be
>> released, we
>> move it. It's no problem, because the next release is in 3-4 months.
>
> Plain right. And I remember a vote or a discussion where a release
> cycle ala-Tomcat was chosen where the project release quite often and
> then a vote will be casted on a specific release number to declare it
> the "stable" one.
>
>> I believe that the release strategy is one of the factor to success.
>
> Again completely agree.
>
> Cheers
> --
> Massimo
> http://meridio.blogspot.com
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
> For additional commands, e-mail: dev-help@tapestry.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
For additional commands, e-mail: dev-help@tapestry.apache.org
Re: Time for a 5.2 release?
Posted by Massimo Lusetti <ml...@gmail.com>.
On Wed, May 5, 2010 at 8:21 AM, Igor Drobiazko <ig...@gmail.com> wrote:
> I'm looking forward to see the new stuff but sometimes we have to deliver
> less than we would like to deliver. Waiting for a release 12-18 month is
> unacceptable for any client. I guess, same applies for open source. Ideally
> there are 2-3 smaller releases per year. We put in every release as much as
> we can. If some innovative and cool stuff isn't ready to be released, we
> move it. It's no problem, because the next release is in 3-4 months.
Plain right. And I remember a vote or a discussion where a release
cycle ala-Tomcat was chosen where the project release quite often and
then a vote will be casted on a specific release number to declare it
the "stable" one.
> I believe that the release strategy is one of the factor to success.
Again completely agree.
Cheers
--
Massimo
http://meridio.blogspot.com
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
For additional commands, e-mail: dev-help@tapestry.apache.org
Re: Time for a 5.2 release?
Posted by Igor Drobiazko <ig...@gmail.com>.
I'm looking forward to see the new stuff but sometimes we have to deliver
less than we would like to deliver. Waiting for a release 12-18 month is
unacceptable for any client. I guess, same applies for open source. Ideally
there are 2-3 smaller releases per year. We put in every release as much as
we can. If some innovative and cool stuff isn't ready to be released, we
move it. It's no problem, because the next release is in 3-4 months.
I believe that the release strategy is one of the factor to success.
On Tue, May 4, 2010 at 7:35 PM, Howard Lewis Ship <hl...@gmail.com> wrote:
> I agree that the timing would be nice, but I still think there's a lot
> to go. Perhaps an alpha release, but I'm not quite ready to commit to
> a stable 5.2 release. A lot of great stuff is shaping up in T5.2
> right now, driven by the work I'm doing for my clients.
>
> On Mon, May 3, 2010 at 11:39 PM, Igor Drobiazko
> <ig...@gmail.com> wrote:
> > Tapestry 5.1.0.5 has been released one year ago and think we need a new
> > release. We've fixed around 160 issues, we have a lot of improvements and
> > bug fixes.
> >
> > There are so much new features I can't live without. I would love to
> > upgrade my apps. What do you think about a 5.2.0 release?
> >
> > --
> > Best regards,
> >
> > Igor Drobiazko
> > http://tapestry5.de/blog
> >
>
>
>
> --
> Howard M. Lewis Ship
>
> Creator of Apache Tapestry
>
> The source for Tapestry training, mentoring and support. Contact me to
> learn how I can get you up and productive in Tapestry fast!
>
> (971) 678-5210
> http://howardlewisship.com
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
> For additional commands, e-mail: dev-help@tapestry.apache.org
>
>
--
Best regards,
Igor Drobiazko
http://tapestry5.de/blog
Re: Time for a 5.2 release?
Posted by Christian Edward Gruber <ch...@gmail.com>.
+1 for an alpha when you complete a given feature/body-of-work, or get
it to a certain level. I'm randomly grabbing from trunk, but if you
have a cleaner sense of what a "good candidate to try out" is, please
do release it.
Christian.
On May 4, 2010, at 1:35 PM, Howard Lewis Ship wrote:
> I agree that the timing would be nice, but I still think there's a lot
> to go. Perhaps an alpha release, but I'm not quite ready to commit to
> a stable 5.2 release. A lot of great stuff is shaping up in T5.2
> right now, driven by the work I'm doing for my clients.
>
> On Mon, May 3, 2010 at 11:39 PM, Igor Drobiazko
> <ig...@gmail.com> wrote:
>> Tapestry 5.1.0.5 has been released one year ago and think we need a
>> new
>> release. We've fixed around 160 issues, we have a lot of
>> improvements and
>> bug fixes.
>>
>> There are so much new features I can't live without. I would love to
>> upgrade my apps. What do you think about a 5.2.0 release?
>>
>> --
>> Best regards,
>>
>> Igor Drobiazko
>> http://tapestry5.de/blog
>>
>
>
>
> --
> Howard M. Lewis Ship
>
> Creator of Apache Tapestry
>
> The source for Tapestry training, mentoring and support. Contact me to
> learn how I can get you up and productive in Tapestry fast!
>
> (971) 678-5210
> http://howardlewisship.com
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
> For additional commands, e-mail: dev-help@tapestry.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
For additional commands, e-mail: dev-help@tapestry.apache.org
Re: Time for a 5.2 release?
Posted by Howard Lewis Ship <hl...@gmail.com>.
I agree that the timing would be nice, but I still think there's a lot
to go. Perhaps an alpha release, but I'm not quite ready to commit to
a stable 5.2 release. A lot of great stuff is shaping up in T5.2
right now, driven by the work I'm doing for my clients.
On Mon, May 3, 2010 at 11:39 PM, Igor Drobiazko
<ig...@gmail.com> wrote:
> Tapestry 5.1.0.5 has been released one year ago and think we need a new
> release. We've fixed around 160 issues, we have a lot of improvements and
> bug fixes.
>
> There are so much new features I can't live without. I would love to
> upgrade my apps. What do you think about a 5.2.0 release?
>
> --
> Best regards,
>
> Igor Drobiazko
> http://tapestry5.de/blog
>
--
Howard M. Lewis Ship
Creator of Apache Tapestry
The source for Tapestry training, mentoring and support. Contact me to
learn how I can get you up and productive in Tapestry fast!
(971) 678-5210
http://howardlewisship.com
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
For additional commands, e-mail: dev-help@tapestry.apache.org
Re: Time for a 5.2 release?
Posted by Massimo Lusetti <ml...@gmail.com>.
On Wed, May 5, 2010 at 12:08 AM, Robert Zeigler <ro...@scazdl.org> wrote:
> chenille-kit does.
ChenilleKit will adapt quickly
Cheers
--
Massimo
http://meridio.blogspot.com
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
For additional commands, e-mail: dev-help@tapestry.apache.org
Re: Time for a 5.2 release?
Posted by Robert Zeigler <ro...@scazdl.org>.
Not sure.
t5cayenne does.
chenille-kit does.
I took a look through the 3rd-party libraries listed on the page and
didn't see any others.
It's probably worth asking on the user-list, however. If chenille-kit
and t5cayenne are the only two libraries that use slashes, then it
would probably be fine to proceed as-is, although I suspect a lot of
people use chenille-kit.
Robert
On May 4, 2010, at 5/43:59 PM , Howard Lewis Ship wrote:
> Point taken. How may 3rd party libraries do, in fact, have slashes in
> the virtual folder name?
>
> On Tue, May 4, 2010 at 1:44 PM, Robert Zeigler <ro...@scazdl.org>
> wrote:
>> Documented != ok. :)
>>
>> What this basically means is that nobody would be able to upgrade to
>> tapestry 5.2 until every 3rd party library they use updated their
>> source
>> tree.
>> Do we really want to hinder upgrade adoption in that way?
>> I can understand the need to eliminate slashes, but is there no way
>> that we
>> can grandfather this in for a release before dropping slash support
>> completely?
>> That would allow people to upgrade and give library authors the
>> time to put
>> out a new release without slashes that would be forwards compatible
>> with
>> tapestry 5.2.
>>
>> Robert
>>
>> On May 4, 2010, at 5/412:33 PM , Howard Lewis Ship wrote:
>>
>>> On Tue, May 4, 2010 at 9:55 AM, Robert Zeigler
>>> <ro...@scazdl.org> wrote:
>>>>
>>>> -1.
>>>>
>>>> I'm not opposed to a release generally, but I found something that
>>>> disturbed
>>>> me the other day, and haven't had a chance to track it down.
>>>> I had an app that was running fine on 5.2.0-SNAPSHOT, and then
>>>> there was
>>>> a
>>>> change in the code (related to external library loading), and my
>>>> app
>>>> broke
>>>> with a message about slashes in library mappings.
>>>
>>> This is true and documented in the upgrade notes.
>>>
>>>
>>>> I'm concerned that many people are going to have ugly upgrade
>>>> experiences
>>>> with this recent change when their app stops working due to 3rd-
>>>> party
>>>> library contributions breaking.
>>>> I think I will have some time this evening to look this issue
>>>> over and
>>>> see
>>>> if it really is an issue; I may revise my vote at that point.
>>>>
>>>> Robert
>>>>
>>>> On May 4, 2010, at 5/41:39 AM , Igor Drobiazko wrote:
>>>>
>>>>> Tapestry 5.1.0.5 has been released one year ago and think we
>>>>> need a new
>>>>> release. We've fixed around 160 issues, we have a lot of
>>>>> improvements
>>>>> and
>>>>> bug fixes.
>>>>>
>>>>> There are so much new features I can't live without. I would
>>>>> love to
>>>>> upgrade my apps. What do you think about a 5.2.0 release?
>>>>>
>>>>> --
>>>>> Best regards,
>>>>>
>>>>> Igor Drobiazko
>>>>> http://tapestry5.de/blog
>>>>
>>>>
>>>> ---------------------------------------------------------------------
>>>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>>>> For additional commands, e-mail: dev-help@tapestry.apache.org
>>>>
>>>>
>>>
>>>
>>>
>>> --
>>> Howard M. Lewis Ship
>>>
>>> Creator of Apache Tapestry
>>>
>>> The source for Tapestry training, mentoring and support. Contact
>>> me to
>>> learn how I can get you up and productive in Tapestry fast!
>>>
>>> (971) 678-5210
>>> http://howardlewisship.com
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>>> For additional commands, e-mail: dev-help@tapestry.apache.org
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>> For additional commands, e-mail: dev-help@tapestry.apache.org
>>
>>
>
>
>
> --
> Howard M. Lewis Ship
>
> Creator of Apache Tapestry
>
> The source for Tapestry training, mentoring and support. Contact me to
> learn how I can get you up and productive in Tapestry fast!
>
> (971) 678-5210
> http://howardlewisship.com
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
> For additional commands, e-mail: dev-help@tapestry.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
For additional commands, e-mail: dev-help@tapestry.apache.org
Re: Time for a 5.2 release?
Posted by Howard Lewis Ship <hl...@gmail.com>.
Point taken. How may 3rd party libraries do, in fact, have slashes in
the virtual folder name?
On Tue, May 4, 2010 at 1:44 PM, Robert Zeigler <ro...@scazdl.org> wrote:
> Documented != ok. :)
>
> What this basically means is that nobody would be able to upgrade to
> tapestry 5.2 until every 3rd party library they use updated their source
> tree.
> Do we really want to hinder upgrade adoption in that way?
> I can understand the need to eliminate slashes, but is there no way that we
> can grandfather this in for a release before dropping slash support
> completely?
> That would allow people to upgrade and give library authors the time to put
> out a new release without slashes that would be forwards compatible with
> tapestry 5.2.
>
> Robert
>
> On May 4, 2010, at 5/412:33 PM , Howard Lewis Ship wrote:
>
>> On Tue, May 4, 2010 at 9:55 AM, Robert Zeigler <ro...@scazdl.org> wrote:
>>>
>>> -1.
>>>
>>> I'm not opposed to a release generally, but I found something that
>>> disturbed
>>> me the other day, and haven't had a chance to track it down.
>>> I had an app that was running fine on 5.2.0-SNAPSHOT, and then there was
>>> a
>>> change in the code (related to external library loading), and my app
>>> broke
>>> with a message about slashes in library mappings.
>>
>> This is true and documented in the upgrade notes.
>>
>>
>>> I'm concerned that many people are going to have ugly upgrade experiences
>>> with this recent change when their app stops working due to 3rd-party
>>> library contributions breaking.
>>> I think I will have some time this evening to look this issue over and
>>> see
>>> if it really is an issue; I may revise my vote at that point.
>>>
>>> Robert
>>>
>>> On May 4, 2010, at 5/41:39 AM , Igor Drobiazko wrote:
>>>
>>>> Tapestry 5.1.0.5 has been released one year ago and think we need a new
>>>> release. We've fixed around 160 issues, we have a lot of improvements
>>>> and
>>>> bug fixes.
>>>>
>>>> There are so much new features I can't live without. I would love to
>>>> upgrade my apps. What do you think about a 5.2.0 release?
>>>>
>>>> --
>>>> Best regards,
>>>>
>>>> Igor Drobiazko
>>>> http://tapestry5.de/blog
>>>
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>>> For additional commands, e-mail: dev-help@tapestry.apache.org
>>>
>>>
>>
>>
>>
>> --
>> Howard M. Lewis Ship
>>
>> Creator of Apache Tapestry
>>
>> The source for Tapestry training, mentoring and support. Contact me to
>> learn how I can get you up and productive in Tapestry fast!
>>
>> (971) 678-5210
>> http://howardlewisship.com
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>> For additional commands, e-mail: dev-help@tapestry.apache.org
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
> For additional commands, e-mail: dev-help@tapestry.apache.org
>
>
--
Howard M. Lewis Ship
Creator of Apache Tapestry
The source for Tapestry training, mentoring and support. Contact me to
learn how I can get you up and productive in Tapestry fast!
(971) 678-5210
http://howardlewisship.com
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
For additional commands, e-mail: dev-help@tapestry.apache.org
Re: Time for a 5.2 release?
Posted by Robert Zeigler <ro...@scazdl.org>.
Documented != ok. :)
What this basically means is that nobody would be able to upgrade to
tapestry 5.2 until every 3rd party library they use updated their
source tree.
Do we really want to hinder upgrade adoption in that way?
I can understand the need to eliminate slashes, but is there no way
that we can grandfather this in for a release before dropping slash
support completely?
That would allow people to upgrade and give library authors the time
to put out a new release without slashes that would be forwards
compatible with tapestry 5.2.
Robert
On May 4, 2010, at 5/412:33 PM , Howard Lewis Ship wrote:
> On Tue, May 4, 2010 at 9:55 AM, Robert Zeigler <ro...@scazdl.org>
> wrote:
>> -1.
>>
>> I'm not opposed to a release generally, but I found something that
>> disturbed
>> me the other day, and haven't had a chance to track it down.
>> I had an app that was running fine on 5.2.0-SNAPSHOT, and then
>> there was a
>> change in the code (related to external library loading), and my
>> app broke
>> with a message about slashes in library mappings.
>
> This is true and documented in the upgrade notes.
>
>
>> I'm concerned that many people are going to have ugly upgrade
>> experiences
>> with this recent change when their app stops working due to 3rd-party
>> library contributions breaking.
>> I think I will have some time this evening to look this issue over
>> and see
>> if it really is an issue; I may revise my vote at that point.
>>
>> Robert
>>
>> On May 4, 2010, at 5/41:39 AM , Igor Drobiazko wrote:
>>
>>> Tapestry 5.1.0.5 has been released one year ago and think we need
>>> a new
>>> release. We've fixed around 160 issues, we have a lot of
>>> improvements and
>>> bug fixes.
>>>
>>> There are so much new features I can't live without. I would love
>>> to
>>> upgrade my apps. What do you think about a 5.2.0 release?
>>>
>>> --
>>> Best regards,
>>>
>>> Igor Drobiazko
>>> http://tapestry5.de/blog
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>> For additional commands, e-mail: dev-help@tapestry.apache.org
>>
>>
>
>
>
> --
> Howard M. Lewis Ship
>
> Creator of Apache Tapestry
>
> The source for Tapestry training, mentoring and support. Contact me to
> learn how I can get you up and productive in Tapestry fast!
>
> (971) 678-5210
> http://howardlewisship.com
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
> For additional commands, e-mail: dev-help@tapestry.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
For additional commands, e-mail: dev-help@tapestry.apache.org
Re: Time for a 5.2 release?
Posted by Howard Lewis Ship <hl...@gmail.com>.
On Tue, May 4, 2010 at 9:55 AM, Robert Zeigler <ro...@scazdl.org> wrote:
> -1.
>
> I'm not opposed to a release generally, but I found something that disturbed
> me the other day, and haven't had a chance to track it down.
> I had an app that was running fine on 5.2.0-SNAPSHOT, and then there was a
> change in the code (related to external library loading), and my app broke
> with a message about slashes in library mappings.
This is true and documented in the upgrade notes.
> I'm concerned that many people are going to have ugly upgrade experiences
> with this recent change when their app stops working due to 3rd-party
> library contributions breaking.
> I think I will have some time this evening to look this issue over and see
> if it really is an issue; I may revise my vote at that point.
>
> Robert
>
> On May 4, 2010, at 5/41:39 AM , Igor Drobiazko wrote:
>
>> Tapestry 5.1.0.5 has been released one year ago and think we need a new
>> release. We've fixed around 160 issues, we have a lot of improvements and
>> bug fixes.
>>
>> There are so much new features I can't live without. I would love to
>> upgrade my apps. What do you think about a 5.2.0 release?
>>
>> --
>> Best regards,
>>
>> Igor Drobiazko
>> http://tapestry5.de/blog
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
> For additional commands, e-mail: dev-help@tapestry.apache.org
>
>
--
Howard M. Lewis Ship
Creator of Apache Tapestry
The source for Tapestry training, mentoring and support. Contact me to
learn how I can get you up and productive in Tapestry fast!
(971) 678-5210
http://howardlewisship.com
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
For additional commands, e-mail: dev-help@tapestry.apache.org
Re: Time for a 5.2 release?
Posted by Robert Zeigler <ro...@scazdl.org>.
-1.
I'm not opposed to a release generally, but I found something that
disturbed me the other day, and haven't had a chance to track it down.
I had an app that was running fine on 5.2.0-SNAPSHOT, and then there
was a change in the code (related to external library loading), and my
app broke with a message about slashes in library mappings.
I'm concerned that many people are going to have ugly upgrade
experiences with this recent change when their app stops working due
to 3rd-party library contributions breaking.
I think I will have some time this evening to look this issue over and
see if it really is an issue; I may revise my vote at that point.
Robert
On May 4, 2010, at 5/41:39 AM , Igor Drobiazko wrote:
> Tapestry 5.1.0.5 has been released one year ago and think we need a
> new
> release. We've fixed around 160 issues, we have a lot of
> improvements and
> bug fixes.
>
> There are so much new features I can't live without. I would love to
> upgrade my apps. What do you think about a 5.2.0 release?
>
> --
> Best regards,
>
> Igor Drobiazko
> http://tapestry5.de/blog
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
For additional commands, e-mail: dev-help@tapestry.apache.org
Re: Time for a 5.2 release?
Posted by Christian Riedel <cr...@googlemail.com>.
> Your solution was looking for two dots... the url I posted had a single dot. :)
damn it, didn't read carefully enough :)
i'll look for a better solution then...
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
For additional commands, e-mail: dev-help@tapestry.apache.org
Re: Time for a 5.2 release?
Posted by Robert Zeigler <ro...@scazdl.org>.
Aside from the fact that it doesn't do anything for the url pattern
that I listed?
Your solution was looking for two dots... the url I posted had a
single dot. :)
Of course you could do a similar trick/use a similar regex to clean
out urls like the one I posted.
But that's beside the point; Howard said he was thinking about
checking for a dot. I was pointing out that it's easy enough to have
a dot without being a file, even if none of your directory names have
dots in them (and they very well could), so you can't just check for
the presence of a dot. It has to be a bit more sophisticated than that.
In reality, the "best" solution in terms of correctness is to resolve
the url to the file and ask if the file exists and is a directory.
But I'm unsure of the performance implications of such an approach.
Robert
On May 4, 2010, at 5/42:20 PM , Christian Riedel wrote:
> I proposed a (maybe not-so-elegant) regex for that "dot-problem" in
> the other thread: http://tapestry-developers.221625.n2.nabble.com/Rationale-behind-the-pathPattern-regex-in-the-RegexAuthorizer-contribution-td4419177.html#a4419177
>
> what's wrong with such a solution?
>
>
> Am 04.05.2010 um 20:26 schrieb Robert Zeigler:
>
>>
>> On May 4, 2010, at 5/412:34 PM , Howard Lewis Ship wrote:
>>
>>> On Tue, May 4, 2010 at 10:04 AM, Robert Zeigler
>>> <ro...@scazdl.org> wrote:
>>>> AssetProtection for 5.2 has been resolved. The dispatcher
>>>> introduced in 5.1
>>>> has been stripped out in favor of a less obtrusive system.
>>>>
>>>
>>> It's not quite complete; I haven't come up with a sure-fire way to
>>> prevent malicious users from retrieving directory listings. I may
>>> simply add a check that the classpath asset to retrieve includes a
>>> '.'
>>> in the name somewhere.
>>>
>>
>> Seems like a sucky check that could easily be circumvented. Eg:
>>
>> foo/./bar will have a dot, and give you a directory listing. The
>> browser is likely to clean up this request, but that doesn't
>> prevent someone from using wget or curl to fetch the directory
>> listing.
>>
>> Robert
>>
>>>> Robert
>>>>
>>>> On May 4, 2010, at 5/411:53 AM , Christian Riedel wrote:
>>>>
>>>>> Have you already decided on a solution for the asset protection
>>>>> issue? I
>>>>> think it was also in progress for 5.2 as well, wasn't it?
>>>>> Anyway, it's time for a release!
>>>>> I tested 5.2 on one of my apps and the upgrade was just the
>>>>> switch of the
>>>>> version number (as promised) :)
>>>>>
>>>>>
>>>>> Am 04.05.2010 um 10:23 schrieb Robin Komiwes:
>>>>>
>>>>>> Would be great for external contributions too.
>>>>>>
>>>>>> On Tue, May 4, 2010 at 9:21 AM, Christian Edward Gruber <
>>>>>> christianedwardgruber@gmail.com> wrote:
>>>>>>
>>>>>>> +1. We're using a trunk build from 4/26 and we're having a
>>>>>>> nice time of
>>>>>>> it... but having a build known to be well-tested and accepted
>>>>>>> would be
>>>>>>> nice.
>>>>>>>
>>>>>>> Christian.
>>>>>>>
>>>>>>>
>>>>>>> On May 4, 2010, at 3:12 AM, Massimo Lusetti wrote:
>>>>>>>
>>>>>>> On Tue, May 4, 2010 at 8:39 AM, Igor Drobiazko
>>>>>>> <ig...@gmail.com>
>>>>>>>>
>>>>>>>> wrote:
>>>>>>>>
>>>>>>>> Tapestry 5.1.0.5 has been released one year ago and think we
>>>>>>>> need a new
>>>>>>>>>
>>>>>>>>> release. We've fixed around 160 issues, we have a lot of
>>>>>>>>> improvements
>>>>>>>>> and
>>>>>>>>> bug fixes.
>>>>>>>>>
>>>>>>>>> There are so much new features I can't live without. I
>>>>>>>>> would love to
>>>>>>>>> upgrade my apps. What do you think about a 5.2.0 release?
>>>>>>>>>
>>>>>>>>>
>>>>>>>> I've been using 5.2 from day one and it has proven to be
>>>>>>>> reliable, as
>>>>>>>> was with 5.1 and 5.0 so I guess it would be really nice to
>>>>>>>> have a
>>>>>>>> 5.2.x release.
>>>>>>>>
>>>>>>>> Cheers
>>>>>>>> --
>>>>>>>> Massimo
>>>>>>>> http://meridio.blogspot.com
>>>>>>>>
>>>>>>>> ---------------------------------------------------------------------
>>>>>>>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>>>>>>>> For additional commands, e-mail: dev-help@tapestry.apache.org
>>>>>>>>
>>>>>>>>
>>>>>>>
>>>>>>> ---------------------------------------------------------------------
>>>>>>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>>>>>>> For additional commands, e-mail: dev-help@tapestry.apache.org
>>>>>>>
>>>>>>>
>>>>>
>>>>>
>>>>> ---------------------------------------------------------------------
>>>>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>>>>> For additional commands, e-mail: dev-help@tapestry.apache.org
>>>>
>>>>
>>>> ---------------------------------------------------------------------
>>>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>>>> For additional commands, e-mail: dev-help@tapestry.apache.org
>>>>
>>>>
>>>
>>>
>>>
>>> --
>>> Howard M. Lewis Ship
>>>
>>> Creator of Apache Tapestry
>>>
>>> The source for Tapestry training, mentoring and support. Contact
>>> me to
>>> learn how I can get you up and productive in Tapestry fast!
>>>
>>> (971) 678-5210
>>> http://howardlewisship.com
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>>> For additional commands, e-mail: dev-help@tapestry.apache.org
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>> For additional commands, e-mail: dev-help@tapestry.apache.org
>>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
> For additional commands, e-mail: dev-help@tapestry.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
For additional commands, e-mail: dev-help@tapestry.apache.org
Re: Time for a 5.2 release?
Posted by ad...@gmail.com.
+1 regex seems appropriate
Sent using BlackBerry® from Orange
-----Original Message-----
From: Christian Riedel <cr...@googlemail.com>
Date: Tue, 4 May 2010 21:20:49
To: Tapestry development<de...@tapestry.apache.org>
Subject: Re: Time for a 5.2 release?
I proposed a (maybe not-so-elegant) regex for that "dot-problem" in the other thread: http://tapestry-developers.221625.n2.nabble.com/Rationale-behind-the-pathPattern-regex-in-the-RegexAuthorizer-contribution-td4419177.html#a4419177
what's wrong with such a solution?
Am 04.05.2010 um 20:26 schrieb Robert Zeigler:
>
> On May 4, 2010, at 5/412:34 PM , Howard Lewis Ship wrote:
>
>> On Tue, May 4, 2010 at 10:04 AM, Robert Zeigler <ro...@scazdl.org> wrote:
>>> AssetProtection for 5.2 has been resolved. The dispatcher introduced in 5.1
>>> has been stripped out in favor of a less obtrusive system.
>>>
>>
>> It's not quite complete; I haven't come up with a sure-fire way to
>> prevent malicious users from retrieving directory listings. I may
>> simply add a check that the classpath asset to retrieve includes a '.'
>> in the name somewhere.
>>
>
> Seems like a sucky check that could easily be circumvented. Eg:
>
> foo/./bar will have a dot, and give you a directory listing. The browser is likely to clean up this request, but that doesn't prevent someone from using wget or curl to fetch the directory listing.
>
> Robert
>
>>> Robert
>>>
>>> On May 4, 2010, at 5/411:53 AM , Christian Riedel wrote:
>>>
>>>> Have you already decided on a solution for the asset protection issue? I
>>>> think it was also in progress for 5.2 as well, wasn't it?
>>>> Anyway, it's time for a release!
>>>> I tested 5.2 on one of my apps and the upgrade was just the switch of the
>>>> version number (as promised) :)
>>>>
>>>>
>>>> Am 04.05.2010 um 10:23 schrieb Robin Komiwes:
>>>>
>>>>> Would be great for external contributions too.
>>>>>
>>>>> On Tue, May 4, 2010 at 9:21 AM, Christian Edward Gruber <
>>>>> christianedwardgruber@gmail.com> wrote:
>>>>>
>>>>>> +1. We're using a trunk build from 4/26 and we're having a nice time of
>>>>>> it... but having a build known to be well-tested and accepted would be
>>>>>> nice.
>>>>>>
>>>>>> Christian.
>>>>>>
>>>>>>
>>>>>> On May 4, 2010, at 3:12 AM, Massimo Lusetti wrote:
>>>>>>
>>>>>> On Tue, May 4, 2010 at 8:39 AM, Igor Drobiazko
>>>>>> <ig...@gmail.com>
>>>>>>>
>>>>>>> wrote:
>>>>>>>
>>>>>>> Tapestry 5.1.0.5 has been released one year ago and think we need a new
>>>>>>>>
>>>>>>>> release. We've fixed around 160 issues, we have a lot of improvements
>>>>>>>> and
>>>>>>>> bug fixes.
>>>>>>>>
>>>>>>>> There are so much new features I can't live without. I would love to
>>>>>>>> upgrade my apps. What do you think about a 5.2.0 release?
>>>>>>>>
>>>>>>>>
>>>>>>> I've been using 5.2 from day one and it has proven to be reliable, as
>>>>>>> was with 5.1 and 5.0 so I guess it would be really nice to have a
>>>>>>> 5.2.x release.
>>>>>>>
>>>>>>> Cheers
>>>>>>> --
>>>>>>> Massimo
>>>>>>> http://meridio.blogspot.com
>>>>>>>
>>>>>>> ---------------------------------------------------------------------
>>>>>>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>>>>>>> For additional commands, e-mail: dev-help@tapestry.apache.org
>>>>>>>
>>>>>>>
>>>>>>
>>>>>> ---------------------------------------------------------------------
>>>>>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>>>>>> For additional commands, e-mail: dev-help@tapestry.apache.org
>>>>>>
>>>>>>
>>>>
>>>>
>>>> ---------------------------------------------------------------------
>>>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>>>> For additional commands, e-mail: dev-help@tapestry.apache.org
>>>
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>>> For additional commands, e-mail: dev-help@tapestry.apache.org
>>>
>>>
>>
>>
>>
>> --
>> Howard M. Lewis Ship
>>
>> Creator of Apache Tapestry
>>
>> The source for Tapestry training, mentoring and support. Contact me to
>> learn how I can get you up and productive in Tapestry fast!
>>
>> (971) 678-5210
>> http://howardlewisship.com
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>> For additional commands, e-mail: dev-help@tapestry.apache.org
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
> For additional commands, e-mail: dev-help@tapestry.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
For additional commands, e-mail: dev-help@tapestry.apache.org
Re: Time for a 5.2 release?
Posted by Christian Riedel <cr...@googlemail.com>.
I proposed a (maybe not-so-elegant) regex for that "dot-problem" in the other thread: http://tapestry-developers.221625.n2.nabble.com/Rationale-behind-the-pathPattern-regex-in-the-RegexAuthorizer-contribution-td4419177.html#a4419177
what's wrong with such a solution?
Am 04.05.2010 um 20:26 schrieb Robert Zeigler:
>
> On May 4, 2010, at 5/412:34 PM , Howard Lewis Ship wrote:
>
>> On Tue, May 4, 2010 at 10:04 AM, Robert Zeigler <ro...@scazdl.org> wrote:
>>> AssetProtection for 5.2 has been resolved. The dispatcher introduced in 5.1
>>> has been stripped out in favor of a less obtrusive system.
>>>
>>
>> It's not quite complete; I haven't come up with a sure-fire way to
>> prevent malicious users from retrieving directory listings. I may
>> simply add a check that the classpath asset to retrieve includes a '.'
>> in the name somewhere.
>>
>
> Seems like a sucky check that could easily be circumvented. Eg:
>
> foo/./bar will have a dot, and give you a directory listing. The browser is likely to clean up this request, but that doesn't prevent someone from using wget or curl to fetch the directory listing.
>
> Robert
>
>>> Robert
>>>
>>> On May 4, 2010, at 5/411:53 AM , Christian Riedel wrote:
>>>
>>>> Have you already decided on a solution for the asset protection issue? I
>>>> think it was also in progress for 5.2 as well, wasn't it?
>>>> Anyway, it's time for a release!
>>>> I tested 5.2 on one of my apps and the upgrade was just the switch of the
>>>> version number (as promised) :)
>>>>
>>>>
>>>> Am 04.05.2010 um 10:23 schrieb Robin Komiwes:
>>>>
>>>>> Would be great for external contributions too.
>>>>>
>>>>> On Tue, May 4, 2010 at 9:21 AM, Christian Edward Gruber <
>>>>> christianedwardgruber@gmail.com> wrote:
>>>>>
>>>>>> +1. We're using a trunk build from 4/26 and we're having a nice time of
>>>>>> it... but having a build known to be well-tested and accepted would be
>>>>>> nice.
>>>>>>
>>>>>> Christian.
>>>>>>
>>>>>>
>>>>>> On May 4, 2010, at 3:12 AM, Massimo Lusetti wrote:
>>>>>>
>>>>>> On Tue, May 4, 2010 at 8:39 AM, Igor Drobiazko
>>>>>> <ig...@gmail.com>
>>>>>>>
>>>>>>> wrote:
>>>>>>>
>>>>>>> Tapestry 5.1.0.5 has been released one year ago and think we need a new
>>>>>>>>
>>>>>>>> release. We've fixed around 160 issues, we have a lot of improvements
>>>>>>>> and
>>>>>>>> bug fixes.
>>>>>>>>
>>>>>>>> There are so much new features I can't live without. I would love to
>>>>>>>> upgrade my apps. What do you think about a 5.2.0 release?
>>>>>>>>
>>>>>>>>
>>>>>>> I've been using 5.2 from day one and it has proven to be reliable, as
>>>>>>> was with 5.1 and 5.0 so I guess it would be really nice to have a
>>>>>>> 5.2.x release.
>>>>>>>
>>>>>>> Cheers
>>>>>>> --
>>>>>>> Massimo
>>>>>>> http://meridio.blogspot.com
>>>>>>>
>>>>>>> ---------------------------------------------------------------------
>>>>>>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>>>>>>> For additional commands, e-mail: dev-help@tapestry.apache.org
>>>>>>>
>>>>>>>
>>>>>>
>>>>>> ---------------------------------------------------------------------
>>>>>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>>>>>> For additional commands, e-mail: dev-help@tapestry.apache.org
>>>>>>
>>>>>>
>>>>
>>>>
>>>> ---------------------------------------------------------------------
>>>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>>>> For additional commands, e-mail: dev-help@tapestry.apache.org
>>>
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>>> For additional commands, e-mail: dev-help@tapestry.apache.org
>>>
>>>
>>
>>
>>
>> --
>> Howard M. Lewis Ship
>>
>> Creator of Apache Tapestry
>>
>> The source for Tapestry training, mentoring and support. Contact me to
>> learn how I can get you up and productive in Tapestry fast!
>>
>> (971) 678-5210
>> http://howardlewisship.com
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>> For additional commands, e-mail: dev-help@tapestry.apache.org
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
> For additional commands, e-mail: dev-help@tapestry.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
For additional commands, e-mail: dev-help@tapestry.apache.org
Re: Time for a 5.2 release?
Posted by Robert Zeigler <ro...@scazdl.org>.
On May 4, 2010, at 5/412:34 PM , Howard Lewis Ship wrote:
> On Tue, May 4, 2010 at 10:04 AM, Robert Zeigler <ro...@scazdl.org>
> wrote:
>> AssetProtection for 5.2 has been resolved. The dispatcher
>> introduced in 5.1
>> has been stripped out in favor of a less obtrusive system.
>>
>
> It's not quite complete; I haven't come up with a sure-fire way to
> prevent malicious users from retrieving directory listings. I may
> simply add a check that the classpath asset to retrieve includes a '.'
> in the name somewhere.
>
Seems like a sucky check that could easily be circumvented. Eg:
foo/./bar will have a dot, and give you a directory listing. The
browser is likely to clean up this request, but that doesn't prevent
someone from using wget or curl to fetch the directory listing.
Robert
>> Robert
>>
>> On May 4, 2010, at 5/411:53 AM , Christian Riedel wrote:
>>
>>> Have you already decided on a solution for the asset protection
>>> issue? I
>>> think it was also in progress for 5.2 as well, wasn't it?
>>> Anyway, it's time for a release!
>>> I tested 5.2 on one of my apps and the upgrade was just the switch
>>> of the
>>> version number (as promised) :)
>>>
>>>
>>> Am 04.05.2010 um 10:23 schrieb Robin Komiwes:
>>>
>>>> Would be great for external contributions too.
>>>>
>>>> On Tue, May 4, 2010 at 9:21 AM, Christian Edward Gruber <
>>>> christianedwardgruber@gmail.com> wrote:
>>>>
>>>>> +1. We're using a trunk build from 4/26 and we're having a nice
>>>>> time of
>>>>> it... but having a build known to be well-tested and accepted
>>>>> would be
>>>>> nice.
>>>>>
>>>>> Christian.
>>>>>
>>>>>
>>>>> On May 4, 2010, at 3:12 AM, Massimo Lusetti wrote:
>>>>>
>>>>> On Tue, May 4, 2010 at 8:39 AM, Igor Drobiazko
>>>>> <ig...@gmail.com>
>>>>>>
>>>>>> wrote:
>>>>>>
>>>>>> Tapestry 5.1.0.5 has been released one year ago and think we
>>>>>> need a new
>>>>>>>
>>>>>>> release. We've fixed around 160 issues, we have a lot of
>>>>>>> improvements
>>>>>>> and
>>>>>>> bug fixes.
>>>>>>>
>>>>>>> There are so much new features I can't live without. I would
>>>>>>> love to
>>>>>>> upgrade my apps. What do you think about a 5.2.0 release?
>>>>>>>
>>>>>>>
>>>>>> I've been using 5.2 from day one and it has proven to be
>>>>>> reliable, as
>>>>>> was with 5.1 and 5.0 so I guess it would be really nice to have a
>>>>>> 5.2.x release.
>>>>>>
>>>>>> Cheers
>>>>>> --
>>>>>> Massimo
>>>>>> http://meridio.blogspot.com
>>>>>>
>>>>>> ---------------------------------------------------------------------
>>>>>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>>>>>> For additional commands, e-mail: dev-help@tapestry.apache.org
>>>>>>
>>>>>>
>>>>>
>>>>> ---------------------------------------------------------------------
>>>>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>>>>> For additional commands, e-mail: dev-help@tapestry.apache.org
>>>>>
>>>>>
>>>
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>>> For additional commands, e-mail: dev-help@tapestry.apache.org
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>> For additional commands, e-mail: dev-help@tapestry.apache.org
>>
>>
>
>
>
> --
> Howard M. Lewis Ship
>
> Creator of Apache Tapestry
>
> The source for Tapestry training, mentoring and support. Contact me to
> learn how I can get you up and productive in Tapestry fast!
>
> (971) 678-5210
> http://howardlewisship.com
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
> For additional commands, e-mail: dev-help@tapestry.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
For additional commands, e-mail: dev-help@tapestry.apache.org
Re: Time for a 5.2 release?
Posted by Howard Lewis Ship <hl...@gmail.com>.
On Tue, May 4, 2010 at 10:04 AM, Robert Zeigler <ro...@scazdl.org> wrote:
> AssetProtection for 5.2 has been resolved. The dispatcher introduced in 5.1
> has been stripped out in favor of a less obtrusive system.
>
It's not quite complete; I haven't come up with a sure-fire way to
prevent malicious users from retrieving directory listings. I may
simply add a check that the classpath asset to retrieve includes a '.'
in the name somewhere.
> Robert
>
> On May 4, 2010, at 5/411:53 AM , Christian Riedel wrote:
>
>> Have you already decided on a solution for the asset protection issue? I
>> think it was also in progress for 5.2 as well, wasn't it?
>> Anyway, it's time for a release!
>> I tested 5.2 on one of my apps and the upgrade was just the switch of the
>> version number (as promised) :)
>>
>>
>> Am 04.05.2010 um 10:23 schrieb Robin Komiwes:
>>
>>> Would be great for external contributions too.
>>>
>>> On Tue, May 4, 2010 at 9:21 AM, Christian Edward Gruber <
>>> christianedwardgruber@gmail.com> wrote:
>>>
>>>> +1. We're using a trunk build from 4/26 and we're having a nice time of
>>>> it... but having a build known to be well-tested and accepted would be
>>>> nice.
>>>>
>>>> Christian.
>>>>
>>>>
>>>> On May 4, 2010, at 3:12 AM, Massimo Lusetti wrote:
>>>>
>>>> On Tue, May 4, 2010 at 8:39 AM, Igor Drobiazko
>>>> <ig...@gmail.com>
>>>>>
>>>>> wrote:
>>>>>
>>>>> Tapestry 5.1.0.5 has been released one year ago and think we need a new
>>>>>>
>>>>>> release. We've fixed around 160 issues, we have a lot of improvements
>>>>>> and
>>>>>> bug fixes.
>>>>>>
>>>>>> There are so much new features I can't live without. I would love to
>>>>>> upgrade my apps. What do you think about a 5.2.0 release?
>>>>>>
>>>>>>
>>>>> I've been using 5.2 from day one and it has proven to be reliable, as
>>>>> was with 5.1 and 5.0 so I guess it would be really nice to have a
>>>>> 5.2.x release.
>>>>>
>>>>> Cheers
>>>>> --
>>>>> Massimo
>>>>> http://meridio.blogspot.com
>>>>>
>>>>> ---------------------------------------------------------------------
>>>>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>>>>> For additional commands, e-mail: dev-help@tapestry.apache.org
>>>>>
>>>>>
>>>>
>>>> ---------------------------------------------------------------------
>>>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>>>> For additional commands, e-mail: dev-help@tapestry.apache.org
>>>>
>>>>
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>> For additional commands, e-mail: dev-help@tapestry.apache.org
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
> For additional commands, e-mail: dev-help@tapestry.apache.org
>
>
--
Howard M. Lewis Ship
Creator of Apache Tapestry
The source for Tapestry training, mentoring and support. Contact me to
learn how I can get you up and productive in Tapestry fast!
(971) 678-5210
http://howardlewisship.com
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
For additional commands, e-mail: dev-help@tapestry.apache.org
Re: Time for a 5.2 release?
Posted by Robert Zeigler <ro...@scazdl.org>.
AssetProtection for 5.2 has been resolved. The dispatcher introduced
in 5.1 has been stripped out in favor of a less obtrusive system.
Robert
On May 4, 2010, at 5/411:53 AM , Christian Riedel wrote:
> Have you already decided on a solution for the asset protection
> issue? I think it was also in progress for 5.2 as well, wasn't it?
> Anyway, it's time for a release!
> I tested 5.2 on one of my apps and the upgrade was just the switch
> of the version number (as promised) :)
>
>
> Am 04.05.2010 um 10:23 schrieb Robin Komiwes:
>
>> Would be great for external contributions too.
>>
>> On Tue, May 4, 2010 at 9:21 AM, Christian Edward Gruber <
>> christianedwardgruber@gmail.com> wrote:
>>
>>> +1. We're using a trunk build from 4/26 and we're having a nice
>>> time of
>>> it... but having a build known to be well-tested and accepted
>>> would be nice.
>>>
>>> Christian.
>>>
>>>
>>> On May 4, 2010, at 3:12 AM, Massimo Lusetti wrote:
>>>
>>> On Tue, May 4, 2010 at 8:39 AM, Igor Drobiazko <igor.drobiazko@gmail.com
>>> >
>>>> wrote:
>>>>
>>>> Tapestry 5.1.0.5 has been released one year ago and think we need
>>>> a new
>>>>> release. We've fixed around 160 issues, we have a lot of
>>>>> improvements and
>>>>> bug fixes.
>>>>>
>>>>> There are so much new features I can't live without. I would
>>>>> love to
>>>>> upgrade my apps. What do you think about a 5.2.0 release?
>>>>>
>>>>>
>>>> I've been using 5.2 from day one and it has proven to be
>>>> reliable, as
>>>> was with 5.1 and 5.0 so I guess it would be really nice to have a
>>>> 5.2.x release.
>>>>
>>>> Cheers
>>>> --
>>>> Massimo
>>>> http://meridio.blogspot.com
>>>>
>>>> ---------------------------------------------------------------------
>>>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>>>> For additional commands, e-mail: dev-help@tapestry.apache.org
>>>>
>>>>
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>>> For additional commands, e-mail: dev-help@tapestry.apache.org
>>>
>>>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
> For additional commands, e-mail: dev-help@tapestry.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
For additional commands, e-mail: dev-help@tapestry.apache.org
Re: Time for a 5.2 release?
Posted by Christian Riedel <cr...@googlemail.com>.
Have you already decided on a solution for the asset protection issue? I think it was also in progress for 5.2 as well, wasn't it?
Anyway, it's time for a release!
I tested 5.2 on one of my apps and the upgrade was just the switch of the version number (as promised) :)
Am 04.05.2010 um 10:23 schrieb Robin Komiwes:
> Would be great for external contributions too.
>
> On Tue, May 4, 2010 at 9:21 AM, Christian Edward Gruber <
> christianedwardgruber@gmail.com> wrote:
>
>> +1. We're using a trunk build from 4/26 and we're having a nice time of
>> it... but having a build known to be well-tested and accepted would be nice.
>>
>> Christian.
>>
>>
>> On May 4, 2010, at 3:12 AM, Massimo Lusetti wrote:
>>
>> On Tue, May 4, 2010 at 8:39 AM, Igor Drobiazko <ig...@gmail.com>
>>> wrote:
>>>
>>> Tapestry 5.1.0.5 has been released one year ago and think we need a new
>>>> release. We've fixed around 160 issues, we have a lot of improvements and
>>>> bug fixes.
>>>>
>>>> There are so much new features I can't live without. I would love to
>>>> upgrade my apps. What do you think about a 5.2.0 release?
>>>>
>>>>
>>> I've been using 5.2 from day one and it has proven to be reliable, as
>>> was with 5.1 and 5.0 so I guess it would be really nice to have a
>>> 5.2.x release.
>>>
>>> Cheers
>>> --
>>> Massimo
>>> http://meridio.blogspot.com
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>>> For additional commands, e-mail: dev-help@tapestry.apache.org
>>>
>>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>> For additional commands, e-mail: dev-help@tapestry.apache.org
>>
>>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
For additional commands, e-mail: dev-help@tapestry.apache.org
Re: Time for a 5.2 release?
Posted by Robin Komiwes <od...@gmail.com>.
Would be great for external contributions too.
On Tue, May 4, 2010 at 9:21 AM, Christian Edward Gruber <
christianedwardgruber@gmail.com> wrote:
> +1. We're using a trunk build from 4/26 and we're having a nice time of
> it... but having a build known to be well-tested and accepted would be nice.
>
> Christian.
>
>
> On May 4, 2010, at 3:12 AM, Massimo Lusetti wrote:
>
> On Tue, May 4, 2010 at 8:39 AM, Igor Drobiazko <ig...@gmail.com>
>> wrote:
>>
>> Tapestry 5.1.0.5 has been released one year ago and think we need a new
>>> release. We've fixed around 160 issues, we have a lot of improvements and
>>> bug fixes.
>>>
>>> There are so much new features I can't live without. I would love to
>>> upgrade my apps. What do you think about a 5.2.0 release?
>>>
>>>
>> I've been using 5.2 from day one and it has proven to be reliable, as
>> was with 5.1 and 5.0 so I guess it would be really nice to have a
>> 5.2.x release.
>>
>> Cheers
>> --
>> Massimo
>> http://meridio.blogspot.com
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
>> For additional commands, e-mail: dev-help@tapestry.apache.org
>>
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
> For additional commands, e-mail: dev-help@tapestry.apache.org
>
>
Re: Time for a 5.2 release?
Posted by Christian Edward Gruber <ch...@gmail.com>.
+1. We're using a trunk build from 4/26 and we're having a nice time
of it... but having a build known to be well-tested and accepted would
be nice.
Christian.
On May 4, 2010, at 3:12 AM, Massimo Lusetti wrote:
> On Tue, May 4, 2010 at 8:39 AM, Igor Drobiazko <igor.drobiazko@gmail.com
> > wrote:
>
>> Tapestry 5.1.0.5 has been released one year ago and think we need a
>> new
>> release. We've fixed around 160 issues, we have a lot of
>> improvements and
>> bug fixes.
>>
>> There are so much new features I can't live without. I would love to
>> upgrade my apps. What do you think about a 5.2.0 release?
>>
>
> I've been using 5.2 from day one and it has proven to be reliable, as
> was with 5.1 and 5.0 so I guess it would be really nice to have a
> 5.2.x release.
>
> Cheers
> --
> Massimo
> http://meridio.blogspot.com
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
> For additional commands, e-mail: dev-help@tapestry.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
For additional commands, e-mail: dev-help@tapestry.apache.org
Re: Time for a 5.2 release?
Posted by Massimo Lusetti <ml...@gmail.com>.
On Tue, May 4, 2010 at 8:39 AM, Igor Drobiazko <ig...@gmail.com> wrote:
> Tapestry 5.1.0.5 has been released one year ago and think we need a new
> release. We've fixed around 160 issues, we have a lot of improvements and
> bug fixes.
>
> There are so much new features I can't live without. I would love to
> upgrade my apps. What do you think about a 5.2.0 release?
>
I've been using 5.2 from day one and it has proven to be reliable, as
was with 5.1 and 5.0 so I guess it would be really nice to have a
5.2.x release.
Cheers
--
Massimo
http://meridio.blogspot.com
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
For additional commands, e-mail: dev-help@tapestry.apache.org