You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@turbine.apache.org by Georg Kallidis <ge...@cedis.fu-berlin.de> on 2021/11/23 13:29:58 UTC
[VOTE] RC Turbine Core 5.1 based on staged repository
Hi Turbine devs,
hopefully this finds you all well!
A release candidate for the Turbine Core 5.1 has been prepared.
It contains:
- The new URL Mapper service : render beautified URL and map parameters
back when parsed
(supports xml, json or yaml formatted configuration files).
- Security Fixes
- Code Improvements and Bugfixes
- Add tests with profile docker-testcontainer (requires docker)
- Better concurrency
- Dependency updates:
Major versions:
Torque 4.0 -> 5.0, Fulcrum Security 2.0.0, Fulcrum Cache
2.0.0, Turbine Parent 9 (with shared dependencies).
Minor versions:
commons-lang3 3.12.0, commons-text 1.9,
Patch versions:
commons-beanutils 1.9.4, jython-standalone 2.7.2, yauaa to
5.23 ( CVE-2020-13956), Fulcrum Quartz 1.1.2, Fulcrum Parser 2.0.1
- Test dependencies:
JUnit 4.13.1 (CVE-2020-15250), Testcontainers 1.16.2,
mysql 8.0.27, hsqldb 2.5.1
Tag: turbine-5.1-candidate
git clone https://gitbox.apache.org/repos/asf/turbine-core.git
cd turbine-core
git checkout turbine-5.1-candidate
Artifacts:
https://repository.apache.org/content/repositories/orgapacheturbine-1069
Keys:
https://dist.apache.org/repos/dist/release/turbine/KEYS
[ ] +1 release it
[ ] +0 go ahead I don't care
[ ] -1 no, do not release it because
Please verify this release candidate carefully and vote, if you are
Turbine PMC member or a committer (non binding).
Thanks for your efforts!
Best regards,
Georg
Re: [VOTE] RC Turbine Core 5.1 based on staged repository
Posted by 조영호 <yo...@easydesk.co.kr>.
>
> A release candidate for the Turbine Core 5.1 has been prepared.
>
> [x] +1 release it
> [ ] +0 go ahead I don't care
> [ ] -1 no, do not release it because
>
>
> Please verify this release candidate carefully and vote, if you are
> Turbine PMC member or a committer (non binding).
>
>
Thanks,
Youngo
Re: [VOTE] RC Turbine Core 5.1 based on staged repository
Posted by Jeffery Painter <je...@jivecast.com>.
Hi Georg,
My vote is:
[X] +1 release it
Clean build and test:
Apache Maven 3.8.1 (05c21c65bdfed0f71a2f2ada8b84da59348c4c5d)
Maven home: /usr/java/maven
Java version: 1.8.0_281, vendor: Oracle Corporation, runtime:
/usr/java/jdk1.8.0_281/jre
Default locale: en_US, platform encoding: UTF-8
OS name: "linux", version: "5.11.0-40-generic", arch: "amd64", family:
"unix"
Signatures look good to me.
I noticed a few source files (mainly in test) were missing ASL and
updated those. Not a show stopper for this release.
Thanks,
Jeffery Painter
On 11/23/21 8:47 AM, Georg Kallidis wrote:
> my vote is
>
> [ x ] +1 release it!
>
> -Georg
>
>
>
>
> Von: "Georg Kallidis" <ge...@cedis.fu-berlin.de>
> An: Turbine <de...@turbine.apache.org>
> Datum: 23.11.2021 14:30
> Betreff: [VOTE] RC Turbine Core 5.1 based on staged repository
>
>
>
> Hi Turbine devs,
>
> hopefully this finds you all well!
>
> A release candidate for the Turbine Core 5.1 has been prepared.
>
> It contains:
> - The new URL Mapper service : render beautified URL and map parameters
> back when parsed
> (supports xml, json or yaml formatted configuration files).
>
> - Security Fixes
> - Code Improvements and Bugfixes
> - Add tests with profile docker-testcontainer (requires docker)
> - Better concurrency
> - Dependency updates:
> Major versions:
> Torque 4.0 -> 5.0, Fulcrum Security 2.0.0, Fulcrum Cache
> 2.0.0, Turbine Parent 9 (with shared dependencies).
> Minor versions:
> commons-lang3 3.12.0, commons-text 1.9,
> Patch versions:
> commons-beanutils 1.9.4, jython-standalone 2.7.2, yauaa to
>
> 5.23 ( CVE-2020-13956), Fulcrum Quartz 1.1.2, Fulcrum Parser 2.0.1
> - Test dependencies:
> JUnit 4.13.1 (CVE-2020-15250), Testcontainers 1.16.2,
> mysql 8.0.27, hsqldb 2.5.1
>
> Tag: turbine-5.1-candidate
> git clone https://gitbox.apache.org/repos/asf/turbine-core.git
> cd turbine-core
> git checkout turbine-5.1-candidate
>
> Artifacts:
> https://repository.apache.org/content/repositories/orgapacheturbine-1069
>
> Keys:
> https://dist.apache.org/repos/dist/release/turbine/KEYS
>
>
> [ ] +1 release it
> [ ] +0 go ahead I don't care
> [ ] -1 no, do not release it because
>
>
> Please verify this release candidate carefully and vote, if you are
> Turbine PMC member or a committer (non binding).
>
> Thanks for your efforts!
>
> Best regards,
>
> Georg
>
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@turbine.apache.org
For additional commands, e-mail: dev-help@turbine.apache.org
Re: [VOTE] RC Turbine Core 5.1 based on staged repository
Posted by Georg Kallidis <ge...@cedis.fu-berlin.de>.
my vote is
[ x ] +1 release it!
-Georg
Von: "Georg Kallidis" <ge...@cedis.fu-berlin.de>
An: Turbine <de...@turbine.apache.org>
Datum: 23.11.2021 14:30
Betreff: [VOTE] RC Turbine Core 5.1 based on staged repository
Hi Turbine devs,
hopefully this finds you all well!
A release candidate for the Turbine Core 5.1 has been prepared.
It contains:
- The new URL Mapper service : render beautified URL and map parameters
back when parsed
(supports xml, json or yaml formatted configuration files).
- Security Fixes
- Code Improvements and Bugfixes
- Add tests with profile docker-testcontainer (requires docker)
- Better concurrency
- Dependency updates:
Major versions:
Torque 4.0 -> 5.0, Fulcrum Security 2.0.0, Fulcrum Cache
2.0.0, Turbine Parent 9 (with shared dependencies).
Minor versions:
commons-lang3 3.12.0, commons-text 1.9,
Patch versions:
commons-beanutils 1.9.4, jython-standalone 2.7.2, yauaa to
5.23 ( CVE-2020-13956), Fulcrum Quartz 1.1.2, Fulcrum Parser 2.0.1
- Test dependencies:
JUnit 4.13.1 (CVE-2020-15250), Testcontainers 1.16.2,
mysql 8.0.27, hsqldb 2.5.1
Tag: turbine-5.1-candidate
git clone https://gitbox.apache.org/repos/asf/turbine-core.git
cd turbine-core
git checkout turbine-5.1-candidate
Artifacts:
https://repository.apache.org/content/repositories/orgapacheturbine-1069
Keys:
https://dist.apache.org/repos/dist/release/turbine/KEYS
[ ] +1 release it
[ ] +0 go ahead I don't care
[ ] -1 no, do not release it because
Please verify this release candidate carefully and vote, if you are
Turbine PMC member or a committer (non binding).
Thanks for your efforts!
Best regards,
Georg
Re: Re: [VOTE] RC Turbine Core 5.1 based on staged repository
Posted by Georg Kallidis <ge...@cedis.fu-berlin.de>.
> I needed to add -Ddependency-check.skip=true again as the NIST site is
not accessible right now.
yes, this will be handled in turbine-parent's upcoming release.
dependency-check.skip will be set to true by default and a new profile
owasp is activated only in profile apache-release.
Best regards, Georg
Von: Thomas Vandahl <tv...@apache.org>
An: Turbine Developers List <de...@turbine.apache.org>
Datum: 12.12.2021 13:38
Betreff: Re: [VOTE] RC Turbine Core 5.1 based on staged repository
> Am 23.11.2021 um 14:29 schrieb Georg Kallidis
<ge...@cedis.fu-berlin.de>:
>
> Hi Turbine devs,
>
> hopefully this finds you all well!
>
> A release candidate for the Turbine Core 5.1 has been prepared.
>
> [X] +1 release it
> [ ] +0 go ahead I don't care
> [ ] -1 no, do not release it because
Sorry for long silence.
Keys are ok. Build and test runs fine using
Apache Maven 3.8.4 (9b656c72d54e5bacbed989b64718c159fe39b537)
Java version: 14, vendor: Oracle Corporation, runtime:
/Library/Java/JavaVirtualMachines/jdk-14.jdk/Contents/Home
Default locale: de_DE, platform encoding: UTF-8
OS name: "mac os x", version: "10.16", arch: "x86_64", family: "mac"
I needed to add -Ddependency-check.skip=true again as the NIST site is not
accessible right now. I suggest to put the dependency check into a
separate profile, possibly together with the release profile.
Bye, Thomas
Re: [VOTE] RC Turbine Core 5.1 based on staged repository
Posted by Thomas Vandahl <tv...@apache.org>.
> Am 23.11.2021 um 14:29 schrieb Georg Kallidis <ge...@cedis.fu-berlin.de>:
>
> Hi Turbine devs,
>
> hopefully this finds you all well!
>
> A release candidate for the Turbine Core 5.1 has been prepared.
>
> [X] +1 release it
> [ ] +0 go ahead I don't care
> [ ] -1 no, do not release it because
Sorry for long silence.
Keys are ok. Build and test runs fine using
Apache Maven 3.8.4 (9b656c72d54e5bacbed989b64718c159fe39b537)
Java version: 14, vendor: Oracle Corporation, runtime: /Library/Java/JavaVirtualMachines/jdk-14.jdk/Contents/Home
Default locale: de_DE, platform encoding: UTF-8
OS name: "mac os x", version: "10.16", arch: "x86_64", family: "mac"
I needed to add -Ddependency-check.skip=true again as the NIST site is not accessible right now. I suggest to put the dependency check into a separate profile, possibly together with the release profile.
Bye, Thomas
[RESULT][VOTE] RC Turbine Core 5.1 based on staged repository
Posted by Georg Kallidis <ge...@cedis.fu-berlin.de>.
Hi Turbine Developers,
I announce the voting result:
Casted votes are:
+1 Georg Kallidis
+1 Jeffery Painter
+1 Thomas Vandahl
+1 Youngho Cho (non- binding)
The vote result being without negative votes and
three binding and one non-binding votes in favor the RC could be promoted
to a release.
I'll update the distribution channels and repositories soon.
Thanks to all the voters!
Best regards,
Georg
> An: Turbine <de...@turbine.apache.org>
> Datum: 23.11.2021 14:30
> Betreff: [VOTE] RC Turbine Core 5.1 based on staged repository
>
>
>
> Hi Turbine devs,
>
> hopefully this finds you all well!
>
> A release candidate for the Turbine Core 5.1 has been prepared.
>
> It contains:
> - The new URL Mapper service : render beautified URL and map parameters
> back when parsed
> (supports xml, json or yaml formatted configuration files).
>
> - Security Fixes
> - Code Improvements and Bugfixes
> - Add tests with profile docker-testcontainer (requires docker)
> - Better concurrency
> - Dependency updates:
> Major versions:
> Torque 4.0 -> 5.0, Fulcrum Security 2.0.0, Fulcrum
Cache
> 2.0.0, Turbine Parent 9 (with shared dependencies).
> Minor versions:
> commons-lang3 3.12.0, commons-text 1.9,
> Patch versions:
> commons-beanutils 1.9.4, jython-standalone 2.7.2, yauaa
to
>
> 5.23 ( CVE-2020-13956), Fulcrum Quartz 1.1.2, Fulcrum Parser 2.0.1
> - Test dependencies:
> JUnit 4.13.1 (CVE-2020-15250), Testcontainers 1.16.2,
> mysql 8.0.27, hsqldb 2.5.1
>
> Tag: turbine-5.1-candidate
> git clone https://gitbox.apache.org/repos/asf/turbine-core.git
> cd turbine-core
> git checkout turbine-5.1-candidate
>
> Artifacts:
> https://repository.apache.org/content/repositories/orgapacheturbine-1069
>
> Keys:
> https://dist.apache.org/repos/dist/release/turbine/KEYS
>
>
> [ ] +1 release it
> [ ] +0 go ahead I don't care
> [ ] -1 no, do not release it because
>
>
> Please verify this release candidate carefully and vote, if you are
> Turbine PMC member or a committer (non binding).
>
> Thanks for your efforts!
>
> Best regards,
>
> Georg
>
>
>