You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@wicket.apache.org by Martin Grigorov <mg...@apache.org> on 2020/04/01 03:39:35 UTC
Re: [VOTE] Release Apache Wicket 9.0.0-M5 TAKE 2
Hi,
The CHANGELOG should not contain
https://issues.apache.org/jira/browse/WICKET-6750 since it is not Resolved.
On Tue, Mar 31, 2020 at 9:56 PM Andrea Del Bene <an...@gmail.com>
wrote:
> This is a vote to release Apache Wicket 9.0.0-M5
>
> Please download the source distributions found in our staging area
> linked below.
>
> I have included the signatures for both the source archives. This vote
> lasts for 72 hours minimum.
>
> [ ] Yes, release Apache Wicket 9.0.0-M5
> [ ] No, don't release Apache Wicket 9.0.0-M5, because ...
>
> Distributions, changelog, keys and signatures can be found at:
>
> https://dist.apache.org/repos/dist/dev/wicket/9.0.0-M5
>
> Staging repository:
>
> https://repository.apache.org/content/repositories/orgapachewicket-1140/
>
> The binaries are available in the above link, as are a staging
> repository for Maven. Typically the vote is on the source, but should
> you find a problem with one of the binaries, please let me know, I can
> re-roll them some way or the other.
>
> Staging git repository data:
>
> Repository: git@github.com:bitstorm/wicket.git
> Branch: build/wicket-9.0.0-M5
> Release tag: rel/wicket-9.0.0-M5
>
>
> ========================================================================
>
> The signatures for the source release artefacts:
>
>
> Signature for apache-wicket-9.0.0-M5.zip:
>
> -----BEGIN PGP SIGNATURE-----
>
> iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT
> VuEPnQ/9Gc7bH7Y/s6PZceoLV0t9gkhtsJaC8jhuZhOWCqj1Uu/3VfJPRYma2eSs
> z7XpgU1+x8qTMMUm27Z0HWMjUrMOevH5B0w4z9bb3yq9kmgwHGqH0o8lenjlZBAB
> sKQKKNFcdEP4uzIOW5B6TWa9MHzkwQjKS2SYMSNfRsZps7p0pHylcb2S9QvEB/7R
> ajSaNvF8C9J1vjkm8Qcutj8SUa+CwxuySe6rhCzj4VjslNMNTxUlyZxeicTipL3K
> dB2UkG1ziTcHsgYLmDXOyta4eloMSGC+X/8UFNJsob7KkdQxqT64VW++8VQ166ND
> UOkDZBPwTRislVf6c1cnLVZg+cIdNeNK9i2KDEIIChLhPStBpA9MVnaKAQjIYC7O
> EZcYzliQmr1dVIx/6XakgaCsIRifkkPyEkCIdg0fnMSoaKs4qc5Q0p1IXiWO6vJP
> mpnrtC7WzQ9ThnvQek6A1kz3ls3QlE9fqtDUmvE+XE/9E4Xko9ufe2tscPZ4Dr1b
> RUCRix+hmtisRWCjcTZ9oqxtzB+vxDYsuVAo0Q1+ckSf/xSIlzrtfidtOgifft0v
> FMKOlplmBzSmcmZrTJ2/DgpNgvX+tJJaBIEXUrXgFyuf1bRJBiwse9x/EGpBRcjC
> 3HlOcXG3o/W+SrVutxez49kt3Eaksa2AI+CYUvDJjl7wgHA3J9A=
> =fMOR
> -----END PGP SIGNATURE-----
>
> Signature for apache-wicket-9.0.0-M5.tar.gz:
>
> -----BEGIN PGP SIGNATURE-----
>
> iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT
> VuFP/A/7BPiVX8FkifrsxVMcD7jgbiCEGTxO6adDIoZNPYA9vrapE3XCEVY9qyaW
> vHjqs/qFRtnhZY8dLcC6GKX5nnvIP0PoFvfw48yMx6/xidNoNnNrcxDzg4fpB3uW
> KzaqKbHb/tH7ndTsB/EF5CRejUxuQXYqiUIYDToHQwc/XT6to7TUpPL7FM/lEfUk
> xSdCK4EhsD1U4XvhZYKL7R1SfhyC5tvmm609UXLxFli7DBn5Sq/mcPlbA+BWbQQF
> GtLxFwYTrYONPfSyABUzi7CkKgeSXoK3ffnQlDqc5L8/cUYJQurU55jP5GP39Urk
> wGv3D2/glxEIeDUN77U0PxQzHDULwCXlX2Ng+npbUTS7COc8wTSpYFH+WzeyVATU
> RO5WIDG0RF1/y9CWm3S0gdXfeWSO0bP1VWX7MOeefVBm1c6vgHYdHctmwiHX9owB
> 4wfKqT9LbKMuaMY/A9ZpGt24X6N7ujAVMEIBJ+UGF2sSCnMNJK5XCSgnUkMNZwex
> 6h+rM6NUMl3nc8z6FEXPLvdJDdtx73O0LtL0REV5bINlIpRmXqMvTF1RvdhKR0jl
> vWFH5xBzW7/sKmJ5zQkh/Nw+VG9l0qewqwBh5sOHzWZXROqsVvrDXvGwXIOJKNMW
> 2881MlEJLLB9V59N7PIC7shxKl300W36Z1fIRSp3c9DiEoC4Y+E=
> =G/ZG
> -----END PGP SIGNATURE-----
>
> ========================================================================
>
> CHANGELOG for 9.0.0-M5:
>
> ** Bug
>
> * [WICKET-6715] - FileUpload class should not implement IClusterable
> * [WICKET-6745] - CSP: inline JS in server and client time response
> filters
> * [WICKET-6746] - HttpsMapper cannot deal with resources over
> websockets
> * [WICKET-6752] - Some dependencies contain CVEs
> * [WICKET-6753] - res/modal.js using aria-labelledby where it
> should be using aria-label
> * [WICKET-6754] - Iteration stops with nested containers
> * [WICKET-6755] - MockServletContext does not decode real path
> * [WICKET-6756] - Avoid URL.getFile() when actually expecting paths.
> * [WICKET-6757] - Avoid URL.getFile during mime type detection.
> * [WICKET-6758] - NPE in AbstractWebSocketProcessor after session
> times out
>
> ** New Feature
>
> * [WICKET-6727] - Configurable CSP
> * [WICKET-6729] - allow adding IHeaderResponseDecorator without
> replacing all others
> * [WICKET-6730] - Global access to secure random data
>
> ** Improvement
>
> * [WICKET-6724] - CSP: Inline Javascript in AjaxLink
> * [WICKET-6725] - CSP: display:none in Component.renderPlaceholderTag
> * [WICKET-6726] - CSP: inline styling and js in Form submitbutton
> handling
> * [WICKET-6731] - CSP: inline JS in SubmitLink
> * [WICKET-6732] - CSP: inline JS in Link and ExternalLink
> * [WICKET-6733] - CSP: enable by default
> * [WICKET-6735] - CSP: inline styling in
> FormComponentFeedbackBorder/Indicator
> * [WICKET-6736] - CSP: Inline styling in BrowserInfoForm
> * [WICKET-6737] - CSP: violations in examples
> * [WICKET-6738] - CSP: inline styling in UploadProgressBar
> * [WICKET-6739] - CSP: inline JS in Palette
> * [WICKET-6740] - CSP: inline JS in Button
> * [WICKET-6741] - CSP: inline JS in FormComponentUpdatingBehavior
> * [WICKET-6749] - CSP: Inline styling in ExceptionErrorPage.html
> * [WICKET-6750] - add capability to cancel ongoing AJAX requests
> from client side
> * [WICKET-6759] - Support disabling error notification for websockets
> * [WICKET-6760] - Nested Form placeholder should preserve tag name
> * [WICKET-6761] - Support multiple connections to the same
> websocket resource from a single session
> * [WICKET-6762] - Support manual initialization of websocket
> connections
>
> ** Task
>
> * [WICKET-6687] - Cleanup the code from attribute inline styles and
> attribute inline scripts
> * [WICKET-6747] - Document CSP in user guide and migration guide
> * [WICKET-6751] - Support creating custom page access
> synchronization strategies
>
>
Re: [VOTE] Release Apache Wicket 9.0.0-M5 TAKE 2
Posted by Andrea Del Bene <an...@gmail.com>.
This vote is cancelled. I will start a new one shortly.
On 4/2/20 10:38 AM, Andrea Del Bene wrote:
> Yes at this point I think it's safer starting a new vote.
>
> On 4/2/20 9:33 AM, Maxim Solodovnik wrote:
>> I see no other way :(
>>
>> On Thu, 2 Apr 2020 at 14:29, Andrea Del Bene <an...@gmail.com>
>> wrote:
>>
>>> On 4/1/20 5:39 AM, Martin Grigorov wrote:
>>>> Hi,
>>>>
>>>> The CHANGELOG should not contain
>>>> https://issues.apache.org/jira/browse/WICKET-6750 since it is not
>>> Resolved.
>>>
>>> I don't know how it managed to go into the CHANGELOG. I've fixed it at
>>> code base level but it requires a to start again a new release to fix
>>> also distribution archives.
>>>
>>> Should we cancel this vote?
>>>
>>>> On Tue, Mar 31, 2020 at 9:56 PM Andrea Del Bene <an...@gmail.com>
>>>> wrote:
>>>>
>>>>> This is a vote to release Apache Wicket 9.0.0-M5
>>>>>
>>>>> Please download the source distributions found in our staging area
>>>>> linked below.
>>>>>
>>>>> I have included the signatures for both the source archives. This
>>>>> vote
>>>>> lasts for 72 hours minimum.
>>>>>
>>>>> [ ] Yes, release Apache Wicket 9.0.0-M5
>>>>> [ ] No, don't release Apache Wicket 9.0.0-M5, because ...
>>>>>
>>>>> Distributions, changelog, keys and signatures can be found at:
>>>>>
>>>>> https://dist.apache.org/repos/dist/dev/wicket/9.0.0-M5
>>>>>
>>>>> Staging repository:
>>>>>
>>>>>
>>> https://repository.apache.org/content/repositories/orgapachewicket-1140/
>>>
>>>>> The binaries are available in the above link, as are a staging
>>>>> repository for Maven. Typically the vote is on the source, but should
>>>>> you find a problem with one of the binaries, please let me know, I
>>>>> can
>>>>> re-roll them some way or the other.
>>>>>
>>>>> Staging git repository data:
>>>>>
>>>>> Repository: git@github.com:bitstorm/wicket.git
>>>>> Branch: build/wicket-9.0.0-M5
>>>>> Release tag: rel/wicket-9.0.0-M5
>>>>>
>>>>>
>>>>> ========================================================================
>>>>>
>>>>>
>>>>> The signatures for the source release artefacts:
>>>>>
>>>>>
>>>>> Signature for apache-wicket-9.0.0-M5.zip:
>>>>>
>>>>> -----BEGIN PGP SIGNATURE-----
>>>>>
>>>>> iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT
>>>>> VuEPnQ/9Gc7bH7Y/s6PZceoLV0t9gkhtsJaC8jhuZhOWCqj1Uu/3VfJPRYma2eSs
>>>>> z7XpgU1+x8qTMMUm27Z0HWMjUrMOevH5B0w4z9bb3yq9kmgwHGqH0o8lenjlZBAB
>>>>> sKQKKNFcdEP4uzIOW5B6TWa9MHzkwQjKS2SYMSNfRsZps7p0pHylcb2S9QvEB/7R
>>>>> ajSaNvF8C9J1vjkm8Qcutj8SUa+CwxuySe6rhCzj4VjslNMNTxUlyZxeicTipL3K
>>>>> dB2UkG1ziTcHsgYLmDXOyta4eloMSGC+X/8UFNJsob7KkdQxqT64VW++8VQ166ND
>>>>> UOkDZBPwTRislVf6c1cnLVZg+cIdNeNK9i2KDEIIChLhPStBpA9MVnaKAQjIYC7O
>>>>> EZcYzliQmr1dVIx/6XakgaCsIRifkkPyEkCIdg0fnMSoaKs4qc5Q0p1IXiWO6vJP
>>>>> mpnrtC7WzQ9ThnvQek6A1kz3ls3QlE9fqtDUmvE+XE/9E4Xko9ufe2tscPZ4Dr1b
>>>>> RUCRix+hmtisRWCjcTZ9oqxtzB+vxDYsuVAo0Q1+ckSf/xSIlzrtfidtOgifft0v
>>>>> FMKOlplmBzSmcmZrTJ2/DgpNgvX+tJJaBIEXUrXgFyuf1bRJBiwse9x/EGpBRcjC
>>>>> 3HlOcXG3o/W+SrVutxez49kt3Eaksa2AI+CYUvDJjl7wgHA3J9A=
>>>>> =fMOR
>>>>> -----END PGP SIGNATURE-----
>>>>>
>>>>> Signature for apache-wicket-9.0.0-M5.tar.gz:
>>>>>
>>>>> -----BEGIN PGP SIGNATURE-----
>>>>>
>>>>> iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT
>>>>> VuFP/A/7BPiVX8FkifrsxVMcD7jgbiCEGTxO6adDIoZNPYA9vrapE3XCEVY9qyaW
>>>>> vHjqs/qFRtnhZY8dLcC6GKX5nnvIP0PoFvfw48yMx6/xidNoNnNrcxDzg4fpB3uW
>>>>> KzaqKbHb/tH7ndTsB/EF5CRejUxuQXYqiUIYDToHQwc/XT6to7TUpPL7FM/lEfUk
>>>>> xSdCK4EhsD1U4XvhZYKL7R1SfhyC5tvmm609UXLxFli7DBn5Sq/mcPlbA+BWbQQF
>>>>> GtLxFwYTrYONPfSyABUzi7CkKgeSXoK3ffnQlDqc5L8/cUYJQurU55jP5GP39Urk
>>>>> wGv3D2/glxEIeDUN77U0PxQzHDULwCXlX2Ng+npbUTS7COc8wTSpYFH+WzeyVATU
>>>>> RO5WIDG0RF1/y9CWm3S0gdXfeWSO0bP1VWX7MOeefVBm1c6vgHYdHctmwiHX9owB
>>>>> 4wfKqT9LbKMuaMY/A9ZpGt24X6N7ujAVMEIBJ+UGF2sSCnMNJK5XCSgnUkMNZwex
>>>>> 6h+rM6NUMl3nc8z6FEXPLvdJDdtx73O0LtL0REV5bINlIpRmXqMvTF1RvdhKR0jl
>>>>> vWFH5xBzW7/sKmJ5zQkh/Nw+VG9l0qewqwBh5sOHzWZXROqsVvrDXvGwXIOJKNMW
>>>>> 2881MlEJLLB9V59N7PIC7shxKl300W36Z1fIRSp3c9DiEoC4Y+E=
>>>>> =G/ZG
>>>>> -----END PGP SIGNATURE-----
>>>>>
>>>>> ========================================================================
>>>>>
>>>>>
>>>>> CHANGELOG for 9.0.0-M5:
>>>>>
>>>>> ** Bug
>>>>>
>>>>> * [WICKET-6715] - FileUpload class should not implement
>>> IClusterable
>>>>> * [WICKET-6745] - CSP: inline JS in server and client time
>>> response
>>>>> filters
>>>>> * [WICKET-6746] - HttpsMapper cannot deal with resources over
>>>>> websockets
>>>>> * [WICKET-6752] - Some dependencies contain CVEs
>>>>> * [WICKET-6753] - res/modal.js using aria-labelledby where it
>>>>> should be using aria-label
>>>>> * [WICKET-6754] - Iteration stops with nested containers
>>>>> * [WICKET-6755] - MockServletContext does not decode real path
>>>>> * [WICKET-6756] - Avoid URL.getFile() when actually expecting
>>> paths.
>>>>> * [WICKET-6757] - Avoid URL.getFile during mime type
>>>>> detection.
>>>>> * [WICKET-6758] - NPE in AbstractWebSocketProcessor after
>>>>> session
>>>>> times out
>>>>>
>>>>> ** New Feature
>>>>>
>>>>> * [WICKET-6727] - Configurable CSP
>>>>> * [WICKET-6729] - allow adding IHeaderResponseDecorator
>>>>> without
>>>>> replacing all others
>>>>> * [WICKET-6730] - Global access to secure random data
>>>>>
>>>>> ** Improvement
>>>>>
>>>>> * [WICKET-6724] - CSP: Inline Javascript in AjaxLink
>>>>> * [WICKET-6725] - CSP: display:none in
>>> Component.renderPlaceholderTag
>>>>> * [WICKET-6726] - CSP: inline styling and js in Form
>>>>> submitbutton
>>>>> handling
>>>>> * [WICKET-6731] - CSP: inline JS in SubmitLink
>>>>> * [WICKET-6732] - CSP: inline JS in Link and ExternalLink
>>>>> * [WICKET-6733] - CSP: enable by default
>>>>> * [WICKET-6735] - CSP: inline styling in
>>>>> FormComponentFeedbackBorder/Indicator
>>>>> * [WICKET-6736] - CSP: Inline styling in BrowserInfoForm
>>>>> * [WICKET-6737] - CSP: violations in examples
>>>>> * [WICKET-6738] - CSP: inline styling in UploadProgressBar
>>>>> * [WICKET-6739] - CSP: inline JS in Palette
>>>>> * [WICKET-6740] - CSP: inline JS in Button
>>>>> * [WICKET-6741] - CSP: inline JS in
>>>>> FormComponentUpdatingBehavior
>>>>> * [WICKET-6749] - CSP: Inline styling in
>>>>> ExceptionErrorPage.html
>>>>> * [WICKET-6750] - add capability to cancel ongoing AJAX
>>>>> requests
>>>>> from client side
>>>>> * [WICKET-6759] - Support disabling error notification for
>>> websockets
>>>>> * [WICKET-6760] - Nested Form placeholder should preserve
>>>>> tag name
>>>>> * [WICKET-6761] - Support multiple connections to the same
>>>>> websocket resource from a single session
>>>>> * [WICKET-6762] - Support manual initialization of websocket
>>>>> connections
>>>>>
>>>>> ** Task
>>>>>
>>>>> * [WICKET-6687] - Cleanup the code from attribute inline
>>>>> styles
>>> and
>>>>> attribute inline scripts
>>>>> * [WICKET-6747] - Document CSP in user guide and migration
>>>>> guide
>>>>> * [WICKET-6751] - Support creating custom page access
>>>>> synchronization strategies
>>>>>
>>>>>
>>
Re: [VOTE] Release Apache Wicket 9.0.0-M5 TAKE 2
Posted by Andrea Del Bene <an...@gmail.com>.
Yes at this point I think it's safer starting a new vote.
On 4/2/20 9:33 AM, Maxim Solodovnik wrote:
> I see no other way :(
>
> On Thu, 2 Apr 2020 at 14:29, Andrea Del Bene <an...@gmail.com> wrote:
>
>> On 4/1/20 5:39 AM, Martin Grigorov wrote:
>>> Hi,
>>>
>>> The CHANGELOG should not contain
>>> https://issues.apache.org/jira/browse/WICKET-6750 since it is not
>> Resolved.
>>
>> I don't know how it managed to go into the CHANGELOG. I've fixed it at
>> code base level but it requires a to start again a new release to fix
>> also distribution archives.
>>
>> Should we cancel this vote?
>>
>>> On Tue, Mar 31, 2020 at 9:56 PM Andrea Del Bene <an...@gmail.com>
>>> wrote:
>>>
>>>> This is a vote to release Apache Wicket 9.0.0-M5
>>>>
>>>> Please download the source distributions found in our staging area
>>>> linked below.
>>>>
>>>> I have included the signatures for both the source archives. This vote
>>>> lasts for 72 hours minimum.
>>>>
>>>> [ ] Yes, release Apache Wicket 9.0.0-M5
>>>> [ ] No, don't release Apache Wicket 9.0.0-M5, because ...
>>>>
>>>> Distributions, changelog, keys and signatures can be found at:
>>>>
>>>> https://dist.apache.org/repos/dist/dev/wicket/9.0.0-M5
>>>>
>>>> Staging repository:
>>>>
>>>>
>> https://repository.apache.org/content/repositories/orgapachewicket-1140/
>>>> The binaries are available in the above link, as are a staging
>>>> repository for Maven. Typically the vote is on the source, but should
>>>> you find a problem with one of the binaries, please let me know, I can
>>>> re-roll them some way or the other.
>>>>
>>>> Staging git repository data:
>>>>
>>>> Repository: git@github.com:bitstorm/wicket.git
>>>> Branch: build/wicket-9.0.0-M5
>>>> Release tag: rel/wicket-9.0.0-M5
>>>>
>>>>
>>>> ========================================================================
>>>>
>>>> The signatures for the source release artefacts:
>>>>
>>>>
>>>> Signature for apache-wicket-9.0.0-M5.zip:
>>>>
>>>> -----BEGIN PGP SIGNATURE-----
>>>>
>>>> iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT
>>>> VuEPnQ/9Gc7bH7Y/s6PZceoLV0t9gkhtsJaC8jhuZhOWCqj1Uu/3VfJPRYma2eSs
>>>> z7XpgU1+x8qTMMUm27Z0HWMjUrMOevH5B0w4z9bb3yq9kmgwHGqH0o8lenjlZBAB
>>>> sKQKKNFcdEP4uzIOW5B6TWa9MHzkwQjKS2SYMSNfRsZps7p0pHylcb2S9QvEB/7R
>>>> ajSaNvF8C9J1vjkm8Qcutj8SUa+CwxuySe6rhCzj4VjslNMNTxUlyZxeicTipL3K
>>>> dB2UkG1ziTcHsgYLmDXOyta4eloMSGC+X/8UFNJsob7KkdQxqT64VW++8VQ166ND
>>>> UOkDZBPwTRislVf6c1cnLVZg+cIdNeNK9i2KDEIIChLhPStBpA9MVnaKAQjIYC7O
>>>> EZcYzliQmr1dVIx/6XakgaCsIRifkkPyEkCIdg0fnMSoaKs4qc5Q0p1IXiWO6vJP
>>>> mpnrtC7WzQ9ThnvQek6A1kz3ls3QlE9fqtDUmvE+XE/9E4Xko9ufe2tscPZ4Dr1b
>>>> RUCRix+hmtisRWCjcTZ9oqxtzB+vxDYsuVAo0Q1+ckSf/xSIlzrtfidtOgifft0v
>>>> FMKOlplmBzSmcmZrTJ2/DgpNgvX+tJJaBIEXUrXgFyuf1bRJBiwse9x/EGpBRcjC
>>>> 3HlOcXG3o/W+SrVutxez49kt3Eaksa2AI+CYUvDJjl7wgHA3J9A=
>>>> =fMOR
>>>> -----END PGP SIGNATURE-----
>>>>
>>>> Signature for apache-wicket-9.0.0-M5.tar.gz:
>>>>
>>>> -----BEGIN PGP SIGNATURE-----
>>>>
>>>> iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT
>>>> VuFP/A/7BPiVX8FkifrsxVMcD7jgbiCEGTxO6adDIoZNPYA9vrapE3XCEVY9qyaW
>>>> vHjqs/qFRtnhZY8dLcC6GKX5nnvIP0PoFvfw48yMx6/xidNoNnNrcxDzg4fpB3uW
>>>> KzaqKbHb/tH7ndTsB/EF5CRejUxuQXYqiUIYDToHQwc/XT6to7TUpPL7FM/lEfUk
>>>> xSdCK4EhsD1U4XvhZYKL7R1SfhyC5tvmm609UXLxFli7DBn5Sq/mcPlbA+BWbQQF
>>>> GtLxFwYTrYONPfSyABUzi7CkKgeSXoK3ffnQlDqc5L8/cUYJQurU55jP5GP39Urk
>>>> wGv3D2/glxEIeDUN77U0PxQzHDULwCXlX2Ng+npbUTS7COc8wTSpYFH+WzeyVATU
>>>> RO5WIDG0RF1/y9CWm3S0gdXfeWSO0bP1VWX7MOeefVBm1c6vgHYdHctmwiHX9owB
>>>> 4wfKqT9LbKMuaMY/A9ZpGt24X6N7ujAVMEIBJ+UGF2sSCnMNJK5XCSgnUkMNZwex
>>>> 6h+rM6NUMl3nc8z6FEXPLvdJDdtx73O0LtL0REV5bINlIpRmXqMvTF1RvdhKR0jl
>>>> vWFH5xBzW7/sKmJ5zQkh/Nw+VG9l0qewqwBh5sOHzWZXROqsVvrDXvGwXIOJKNMW
>>>> 2881MlEJLLB9V59N7PIC7shxKl300W36Z1fIRSp3c9DiEoC4Y+E=
>>>> =G/ZG
>>>> -----END PGP SIGNATURE-----
>>>>
>>>> ========================================================================
>>>>
>>>> CHANGELOG for 9.0.0-M5:
>>>>
>>>> ** Bug
>>>>
>>>> * [WICKET-6715] - FileUpload class should not implement
>> IClusterable
>>>> * [WICKET-6745] - CSP: inline JS in server and client time
>> response
>>>> filters
>>>> * [WICKET-6746] - HttpsMapper cannot deal with resources over
>>>> websockets
>>>> * [WICKET-6752] - Some dependencies contain CVEs
>>>> * [WICKET-6753] - res/modal.js using aria-labelledby where it
>>>> should be using aria-label
>>>> * [WICKET-6754] - Iteration stops with nested containers
>>>> * [WICKET-6755] - MockServletContext does not decode real path
>>>> * [WICKET-6756] - Avoid URL.getFile() when actually expecting
>> paths.
>>>> * [WICKET-6757] - Avoid URL.getFile during mime type detection.
>>>> * [WICKET-6758] - NPE in AbstractWebSocketProcessor after session
>>>> times out
>>>>
>>>> ** New Feature
>>>>
>>>> * [WICKET-6727] - Configurable CSP
>>>> * [WICKET-6729] - allow adding IHeaderResponseDecorator without
>>>> replacing all others
>>>> * [WICKET-6730] - Global access to secure random data
>>>>
>>>> ** Improvement
>>>>
>>>> * [WICKET-6724] - CSP: Inline Javascript in AjaxLink
>>>> * [WICKET-6725] - CSP: display:none in
>> Component.renderPlaceholderTag
>>>> * [WICKET-6726] - CSP: inline styling and js in Form submitbutton
>>>> handling
>>>> * [WICKET-6731] - CSP: inline JS in SubmitLink
>>>> * [WICKET-6732] - CSP: inline JS in Link and ExternalLink
>>>> * [WICKET-6733] - CSP: enable by default
>>>> * [WICKET-6735] - CSP: inline styling in
>>>> FormComponentFeedbackBorder/Indicator
>>>> * [WICKET-6736] - CSP: Inline styling in BrowserInfoForm
>>>> * [WICKET-6737] - CSP: violations in examples
>>>> * [WICKET-6738] - CSP: inline styling in UploadProgressBar
>>>> * [WICKET-6739] - CSP: inline JS in Palette
>>>> * [WICKET-6740] - CSP: inline JS in Button
>>>> * [WICKET-6741] - CSP: inline JS in FormComponentUpdatingBehavior
>>>> * [WICKET-6749] - CSP: Inline styling in ExceptionErrorPage.html
>>>> * [WICKET-6750] - add capability to cancel ongoing AJAX requests
>>>> from client side
>>>> * [WICKET-6759] - Support disabling error notification for
>> websockets
>>>> * [WICKET-6760] - Nested Form placeholder should preserve tag name
>>>> * [WICKET-6761] - Support multiple connections to the same
>>>> websocket resource from a single session
>>>> * [WICKET-6762] - Support manual initialization of websocket
>>>> connections
>>>>
>>>> ** Task
>>>>
>>>> * [WICKET-6687] - Cleanup the code from attribute inline styles
>> and
>>>> attribute inline scripts
>>>> * [WICKET-6747] - Document CSP in user guide and migration guide
>>>> * [WICKET-6751] - Support creating custom page access
>>>> synchronization strategies
>>>>
>>>>
>
Re: [VOTE] Release Apache Wicket 9.0.0-M5 TAKE 2
Posted by Maxim Solodovnik <so...@gmail.com>.
I see no other way :(
On Thu, 2 Apr 2020 at 14:29, Andrea Del Bene <an...@gmail.com> wrote:
>
> On 4/1/20 5:39 AM, Martin Grigorov wrote:
> > Hi,
> >
> > The CHANGELOG should not contain
> > https://issues.apache.org/jira/browse/WICKET-6750 since it is not
> Resolved.
>
> I don't know how it managed to go into the CHANGELOG. I've fixed it at
> code base level but it requires a to start again a new release to fix
> also distribution archives.
>
> Should we cancel this vote?
>
> > On Tue, Mar 31, 2020 at 9:56 PM Andrea Del Bene <an...@gmail.com>
> > wrote:
> >
> >> This is a vote to release Apache Wicket 9.0.0-M5
> >>
> >> Please download the source distributions found in our staging area
> >> linked below.
> >>
> >> I have included the signatures for both the source archives. This vote
> >> lasts for 72 hours minimum.
> >>
> >> [ ] Yes, release Apache Wicket 9.0.0-M5
> >> [ ] No, don't release Apache Wicket 9.0.0-M5, because ...
> >>
> >> Distributions, changelog, keys and signatures can be found at:
> >>
> >> https://dist.apache.org/repos/dist/dev/wicket/9.0.0-M5
> >>
> >> Staging repository:
> >>
> >>
> https://repository.apache.org/content/repositories/orgapachewicket-1140/
> >>
> >> The binaries are available in the above link, as are a staging
> >> repository for Maven. Typically the vote is on the source, but should
> >> you find a problem with one of the binaries, please let me know, I can
> >> re-roll them some way or the other.
> >>
> >> Staging git repository data:
> >>
> >> Repository: git@github.com:bitstorm/wicket.git
> >> Branch: build/wicket-9.0.0-M5
> >> Release tag: rel/wicket-9.0.0-M5
> >>
> >>
> >> ========================================================================
> >>
> >> The signatures for the source release artefacts:
> >>
> >>
> >> Signature for apache-wicket-9.0.0-M5.zip:
> >>
> >> -----BEGIN PGP SIGNATURE-----
> >>
> >> iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT
> >> VuEPnQ/9Gc7bH7Y/s6PZceoLV0t9gkhtsJaC8jhuZhOWCqj1Uu/3VfJPRYma2eSs
> >> z7XpgU1+x8qTMMUm27Z0HWMjUrMOevH5B0w4z9bb3yq9kmgwHGqH0o8lenjlZBAB
> >> sKQKKNFcdEP4uzIOW5B6TWa9MHzkwQjKS2SYMSNfRsZps7p0pHylcb2S9QvEB/7R
> >> ajSaNvF8C9J1vjkm8Qcutj8SUa+CwxuySe6rhCzj4VjslNMNTxUlyZxeicTipL3K
> >> dB2UkG1ziTcHsgYLmDXOyta4eloMSGC+X/8UFNJsob7KkdQxqT64VW++8VQ166ND
> >> UOkDZBPwTRislVf6c1cnLVZg+cIdNeNK9i2KDEIIChLhPStBpA9MVnaKAQjIYC7O
> >> EZcYzliQmr1dVIx/6XakgaCsIRifkkPyEkCIdg0fnMSoaKs4qc5Q0p1IXiWO6vJP
> >> mpnrtC7WzQ9ThnvQek6A1kz3ls3QlE9fqtDUmvE+XE/9E4Xko9ufe2tscPZ4Dr1b
> >> RUCRix+hmtisRWCjcTZ9oqxtzB+vxDYsuVAo0Q1+ckSf/xSIlzrtfidtOgifft0v
> >> FMKOlplmBzSmcmZrTJ2/DgpNgvX+tJJaBIEXUrXgFyuf1bRJBiwse9x/EGpBRcjC
> >> 3HlOcXG3o/W+SrVutxez49kt3Eaksa2AI+CYUvDJjl7wgHA3J9A=
> >> =fMOR
> >> -----END PGP SIGNATURE-----
> >>
> >> Signature for apache-wicket-9.0.0-M5.tar.gz:
> >>
> >> -----BEGIN PGP SIGNATURE-----
> >>
> >> iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT
> >> VuFP/A/7BPiVX8FkifrsxVMcD7jgbiCEGTxO6adDIoZNPYA9vrapE3XCEVY9qyaW
> >> vHjqs/qFRtnhZY8dLcC6GKX5nnvIP0PoFvfw48yMx6/xidNoNnNrcxDzg4fpB3uW
> >> KzaqKbHb/tH7ndTsB/EF5CRejUxuQXYqiUIYDToHQwc/XT6to7TUpPL7FM/lEfUk
> >> xSdCK4EhsD1U4XvhZYKL7R1SfhyC5tvmm609UXLxFli7DBn5Sq/mcPlbA+BWbQQF
> >> GtLxFwYTrYONPfSyABUzi7CkKgeSXoK3ffnQlDqc5L8/cUYJQurU55jP5GP39Urk
> >> wGv3D2/glxEIeDUN77U0PxQzHDULwCXlX2Ng+npbUTS7COc8wTSpYFH+WzeyVATU
> >> RO5WIDG0RF1/y9CWm3S0gdXfeWSO0bP1VWX7MOeefVBm1c6vgHYdHctmwiHX9owB
> >> 4wfKqT9LbKMuaMY/A9ZpGt24X6N7ujAVMEIBJ+UGF2sSCnMNJK5XCSgnUkMNZwex
> >> 6h+rM6NUMl3nc8z6FEXPLvdJDdtx73O0LtL0REV5bINlIpRmXqMvTF1RvdhKR0jl
> >> vWFH5xBzW7/sKmJ5zQkh/Nw+VG9l0qewqwBh5sOHzWZXROqsVvrDXvGwXIOJKNMW
> >> 2881MlEJLLB9V59N7PIC7shxKl300W36Z1fIRSp3c9DiEoC4Y+E=
> >> =G/ZG
> >> -----END PGP SIGNATURE-----
> >>
> >> ========================================================================
> >>
> >> CHANGELOG for 9.0.0-M5:
> >>
> >> ** Bug
> >>
> >> * [WICKET-6715] - FileUpload class should not implement
> IClusterable
> >> * [WICKET-6745] - CSP: inline JS in server and client time
> response
> >> filters
> >> * [WICKET-6746] - HttpsMapper cannot deal with resources over
> >> websockets
> >> * [WICKET-6752] - Some dependencies contain CVEs
> >> * [WICKET-6753] - res/modal.js using aria-labelledby where it
> >> should be using aria-label
> >> * [WICKET-6754] - Iteration stops with nested containers
> >> * [WICKET-6755] - MockServletContext does not decode real path
> >> * [WICKET-6756] - Avoid URL.getFile() when actually expecting
> paths.
> >> * [WICKET-6757] - Avoid URL.getFile during mime type detection.
> >> * [WICKET-6758] - NPE in AbstractWebSocketProcessor after session
> >> times out
> >>
> >> ** New Feature
> >>
> >> * [WICKET-6727] - Configurable CSP
> >> * [WICKET-6729] - allow adding IHeaderResponseDecorator without
> >> replacing all others
> >> * [WICKET-6730] - Global access to secure random data
> >>
> >> ** Improvement
> >>
> >> * [WICKET-6724] - CSP: Inline Javascript in AjaxLink
> >> * [WICKET-6725] - CSP: display:none in
> Component.renderPlaceholderTag
> >> * [WICKET-6726] - CSP: inline styling and js in Form submitbutton
> >> handling
> >> * [WICKET-6731] - CSP: inline JS in SubmitLink
> >> * [WICKET-6732] - CSP: inline JS in Link and ExternalLink
> >> * [WICKET-6733] - CSP: enable by default
> >> * [WICKET-6735] - CSP: inline styling in
> >> FormComponentFeedbackBorder/Indicator
> >> * [WICKET-6736] - CSP: Inline styling in BrowserInfoForm
> >> * [WICKET-6737] - CSP: violations in examples
> >> * [WICKET-6738] - CSP: inline styling in UploadProgressBar
> >> * [WICKET-6739] - CSP: inline JS in Palette
> >> * [WICKET-6740] - CSP: inline JS in Button
> >> * [WICKET-6741] - CSP: inline JS in FormComponentUpdatingBehavior
> >> * [WICKET-6749] - CSP: Inline styling in ExceptionErrorPage.html
> >> * [WICKET-6750] - add capability to cancel ongoing AJAX requests
> >> from client side
> >> * [WICKET-6759] - Support disabling error notification for
> websockets
> >> * [WICKET-6760] - Nested Form placeholder should preserve tag name
> >> * [WICKET-6761] - Support multiple connections to the same
> >> websocket resource from a single session
> >> * [WICKET-6762] - Support manual initialization of websocket
> >> connections
> >>
> >> ** Task
> >>
> >> * [WICKET-6687] - Cleanup the code from attribute inline styles
> and
> >> attribute inline scripts
> >> * [WICKET-6747] - Document CSP in user guide and migration guide
> >> * [WICKET-6751] - Support creating custom page access
> >> synchronization strategies
> >>
> >>
>
--
WBR
Maxim aka solomax
Re: [VOTE] Release Apache Wicket 9.0.0-M5 TAKE 2
Posted by Andrea Del Bene <an...@gmail.com>.
On 4/1/20 5:39 AM, Martin Grigorov wrote:
> Hi,
>
> The CHANGELOG should not contain
> https://issues.apache.org/jira/browse/WICKET-6750 since it is not Resolved.
I don't know how it managed to go into the CHANGELOG. I've fixed it at
code base level but it requires a to start again a new release to fix
also distribution archives.
Should we cancel this vote?
> On Tue, Mar 31, 2020 at 9:56 PM Andrea Del Bene <an...@gmail.com>
> wrote:
>
>> This is a vote to release Apache Wicket 9.0.0-M5
>>
>> Please download the source distributions found in our staging area
>> linked below.
>>
>> I have included the signatures for both the source archives. This vote
>> lasts for 72 hours minimum.
>>
>> [ ] Yes, release Apache Wicket 9.0.0-M5
>> [ ] No, don't release Apache Wicket 9.0.0-M5, because ...
>>
>> Distributions, changelog, keys and signatures can be found at:
>>
>> https://dist.apache.org/repos/dist/dev/wicket/9.0.0-M5
>>
>> Staging repository:
>>
>> https://repository.apache.org/content/repositories/orgapachewicket-1140/
>>
>> The binaries are available in the above link, as are a staging
>> repository for Maven. Typically the vote is on the source, but should
>> you find a problem with one of the binaries, please let me know, I can
>> re-roll them some way or the other.
>>
>> Staging git repository data:
>>
>> Repository: git@github.com:bitstorm/wicket.git
>> Branch: build/wicket-9.0.0-M5
>> Release tag: rel/wicket-9.0.0-M5
>>
>>
>> ========================================================================
>>
>> The signatures for the source release artefacts:
>>
>>
>> Signature for apache-wicket-9.0.0-M5.zip:
>>
>> -----BEGIN PGP SIGNATURE-----
>>
>> iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT
>> VuEPnQ/9Gc7bH7Y/s6PZceoLV0t9gkhtsJaC8jhuZhOWCqj1Uu/3VfJPRYma2eSs
>> z7XpgU1+x8qTMMUm27Z0HWMjUrMOevH5B0w4z9bb3yq9kmgwHGqH0o8lenjlZBAB
>> sKQKKNFcdEP4uzIOW5B6TWa9MHzkwQjKS2SYMSNfRsZps7p0pHylcb2S9QvEB/7R
>> ajSaNvF8C9J1vjkm8Qcutj8SUa+CwxuySe6rhCzj4VjslNMNTxUlyZxeicTipL3K
>> dB2UkG1ziTcHsgYLmDXOyta4eloMSGC+X/8UFNJsob7KkdQxqT64VW++8VQ166ND
>> UOkDZBPwTRislVf6c1cnLVZg+cIdNeNK9i2KDEIIChLhPStBpA9MVnaKAQjIYC7O
>> EZcYzliQmr1dVIx/6XakgaCsIRifkkPyEkCIdg0fnMSoaKs4qc5Q0p1IXiWO6vJP
>> mpnrtC7WzQ9ThnvQek6A1kz3ls3QlE9fqtDUmvE+XE/9E4Xko9ufe2tscPZ4Dr1b
>> RUCRix+hmtisRWCjcTZ9oqxtzB+vxDYsuVAo0Q1+ckSf/xSIlzrtfidtOgifft0v
>> FMKOlplmBzSmcmZrTJ2/DgpNgvX+tJJaBIEXUrXgFyuf1bRJBiwse9x/EGpBRcjC
>> 3HlOcXG3o/W+SrVutxez49kt3Eaksa2AI+CYUvDJjl7wgHA3J9A=
>> =fMOR
>> -----END PGP SIGNATURE-----
>>
>> Signature for apache-wicket-9.0.0-M5.tar.gz:
>>
>> -----BEGIN PGP SIGNATURE-----
>>
>> iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT
>> VuFP/A/7BPiVX8FkifrsxVMcD7jgbiCEGTxO6adDIoZNPYA9vrapE3XCEVY9qyaW
>> vHjqs/qFRtnhZY8dLcC6GKX5nnvIP0PoFvfw48yMx6/xidNoNnNrcxDzg4fpB3uW
>> KzaqKbHb/tH7ndTsB/EF5CRejUxuQXYqiUIYDToHQwc/XT6to7TUpPL7FM/lEfUk
>> xSdCK4EhsD1U4XvhZYKL7R1SfhyC5tvmm609UXLxFli7DBn5Sq/mcPlbA+BWbQQF
>> GtLxFwYTrYONPfSyABUzi7CkKgeSXoK3ffnQlDqc5L8/cUYJQurU55jP5GP39Urk
>> wGv3D2/glxEIeDUN77U0PxQzHDULwCXlX2Ng+npbUTS7COc8wTSpYFH+WzeyVATU
>> RO5WIDG0RF1/y9CWm3S0gdXfeWSO0bP1VWX7MOeefVBm1c6vgHYdHctmwiHX9owB
>> 4wfKqT9LbKMuaMY/A9ZpGt24X6N7ujAVMEIBJ+UGF2sSCnMNJK5XCSgnUkMNZwex
>> 6h+rM6NUMl3nc8z6FEXPLvdJDdtx73O0LtL0REV5bINlIpRmXqMvTF1RvdhKR0jl
>> vWFH5xBzW7/sKmJ5zQkh/Nw+VG9l0qewqwBh5sOHzWZXROqsVvrDXvGwXIOJKNMW
>> 2881MlEJLLB9V59N7PIC7shxKl300W36Z1fIRSp3c9DiEoC4Y+E=
>> =G/ZG
>> -----END PGP SIGNATURE-----
>>
>> ========================================================================
>>
>> CHANGELOG for 9.0.0-M5:
>>
>> ** Bug
>>
>> * [WICKET-6715] - FileUpload class should not implement IClusterable
>> * [WICKET-6745] - CSP: inline JS in server and client time response
>> filters
>> * [WICKET-6746] - HttpsMapper cannot deal with resources over
>> websockets
>> * [WICKET-6752] - Some dependencies contain CVEs
>> * [WICKET-6753] - res/modal.js using aria-labelledby where it
>> should be using aria-label
>> * [WICKET-6754] - Iteration stops with nested containers
>> * [WICKET-6755] - MockServletContext does not decode real path
>> * [WICKET-6756] - Avoid URL.getFile() when actually expecting paths.
>> * [WICKET-6757] - Avoid URL.getFile during mime type detection.
>> * [WICKET-6758] - NPE in AbstractWebSocketProcessor after session
>> times out
>>
>> ** New Feature
>>
>> * [WICKET-6727] - Configurable CSP
>> * [WICKET-6729] - allow adding IHeaderResponseDecorator without
>> replacing all others
>> * [WICKET-6730] - Global access to secure random data
>>
>> ** Improvement
>>
>> * [WICKET-6724] - CSP: Inline Javascript in AjaxLink
>> * [WICKET-6725] - CSP: display:none in Component.renderPlaceholderTag
>> * [WICKET-6726] - CSP: inline styling and js in Form submitbutton
>> handling
>> * [WICKET-6731] - CSP: inline JS in SubmitLink
>> * [WICKET-6732] - CSP: inline JS in Link and ExternalLink
>> * [WICKET-6733] - CSP: enable by default
>> * [WICKET-6735] - CSP: inline styling in
>> FormComponentFeedbackBorder/Indicator
>> * [WICKET-6736] - CSP: Inline styling in BrowserInfoForm
>> * [WICKET-6737] - CSP: violations in examples
>> * [WICKET-6738] - CSP: inline styling in UploadProgressBar
>> * [WICKET-6739] - CSP: inline JS in Palette
>> * [WICKET-6740] - CSP: inline JS in Button
>> * [WICKET-6741] - CSP: inline JS in FormComponentUpdatingBehavior
>> * [WICKET-6749] - CSP: Inline styling in ExceptionErrorPage.html
>> * [WICKET-6750] - add capability to cancel ongoing AJAX requests
>> from client side
>> * [WICKET-6759] - Support disabling error notification for websockets
>> * [WICKET-6760] - Nested Form placeholder should preserve tag name
>> * [WICKET-6761] - Support multiple connections to the same
>> websocket resource from a single session
>> * [WICKET-6762] - Support manual initialization of websocket
>> connections
>>
>> ** Task
>>
>> * [WICKET-6687] - Cleanup the code from attribute inline styles and
>> attribute inline scripts
>> * [WICKET-6747] - Document CSP in user guide and migration guide
>> * [WICKET-6751] - Support creating custom page access
>> synchronization strategies
>>
>>