You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tika.apache.org by Tim Allison <ta...@apache.org> on 2022/02/01 19:40:46 UTC
Re: Next release -- 2.3.0?
The results on ~ one million files (comparing 2.2.1 and
2.3.0-SNAPSHOT) are here:
https://corpora.tika.apache.org/base/share/tika-2.3.0-prerc1-reports.tgz
I don't see anything concerning.
I'm currently running 1.28 against the same files, and I'll compare
those with 2.3.0-SNAPSHOT.
Please let me know if you find any problems. If I don't see anything
concerning in 1.28 vs 2.3.0-SNAPSHOT, I'll start the release process.
Best,
Tim
On Mon, Jan 31, 2022 at 5:44 PM Tim Allison <ta...@apache.org> wrote:
>
> All,
>
> I've kicked off the regression tests for 2.3.0. Please let me know if
> there are any blockers on 2.3.0.
>
> Thank you, all!
>
> Cheers,
>
> Tim
>
> On Fri, Jan 14, 2022 at 8:49 AM Tim Allison <ta...@apache.org> wrote:
> >
> > All,
> > I'd like to roll a release for the next version of main soonish.
> > The changes to default memory allocation for PDF parsing and in
> > marking embedded files in xhtml I think are significant enough to make
> > the next version 2.3.0.
> > This would include an upgrade to log4j2 2.17.1.
> > Maybe kick it off towards the end of next week? What else do we
> > want to get into the next release?
> >
> > Best,
> >
> > Tim
Re: Release 1.28.1? [FROM] Next release -- 2.3.0?
Posted by Tim Allison <ta...@apache.org>.
I'll start the 1.28.1 release cycle shortly unless there are
objections. My current plan is to update dependencies only. If you'd
like to backport any bug fixes or if there's anything else you'd like
to get into 1.28.1, please let me know.
Best,
Tim
On Thu, Feb 3, 2022 at 9:01 AM Tim Allison <ta...@apache.org> wrote:
>
> Hi Subhajit,
>
> Seems reasonable. We also have (should have) security updates in
> xerces, junrar and protobuf.
>
> Fellow devs, what do you think of running the 1.28.1 release after
> 2.3.0 is out (say, early/mid next week)?
>
> Anything else we need to do for 1.28.1?
>
> Cheers,
>
> Tim
>
> On Thu, Feb 3, 2022 at 8:39 AM Subhajit Das <su...@live.com> wrote:
> >
> > Hi Tim,
> >
> > Is there any plan for Tika 1.x release with the log4j update.
> > Tika 1.28 is getting considered as vulnerable as it is not using the latest log4j.
> > Might be a patch version, at least?
> >
> > Thanks and Regards
> > Subhajit Das
> >
> > On Feb 3 2022, at 12:57 am, Tim Allison <ta...@apache.org> wrote:
> > > Results on 1.28 vs 2.3.0-pre-rc1 are available here:
> > > https://corpora.tika.apache.org/base/share/tika-1.28-vs-2.3.0-pre-rc1.tgz
> > >
> > > There are a couple of things that I'd like to fix at some point, but
> > > this generally looks good to me. Please do take a look if you have an
> > > interest.
> > >
> > > I'll kick off the release candidate shortly.
> > > Best,
> > > Tim
> > > On Tue, Feb 1, 2022 at 2:40 PM Tim Allison <ta...@apache.org> wrote:
> > > >
> > > > The results on ~ one million files (comparing 2.2.1 and
> > > > 2.3.0-SNAPSHOT) are here:
> > > > https://corpora.tika.apache.org/base/share/tika-2.3.0-prerc1-reports.tgz
> > > >
> > > > I don't see anything concerning.
> > > >
> > > > I'm currently running 1.28 against the same files, and I'll compare
> > > > those with 2.3.0-SNAPSHOT.
> > > >
> > > > Please let me know if you find any problems. If I don't see anything
> > > > concerning in 1.28 vs 2.3.0-SNAPSHOT, I'll start the release process.
> > > >
> > > > Best,
> > > >
> > > > Tim
> > > >
> > > > On Mon, Jan 31, 2022 at 5:44 PM Tim Allison <ta...@apache.org> wrote:
> > > > >
> > > > > All,
> > > > >
> > > > > I've kicked off the regression tests for 2.3.0. Please let me know if
> > > > > there are any blockers on 2.3.0.
> > > > >
> > > > > Thank you, all!
> > > > >
> > > > > Cheers,
> > > > >
> > > > > Tim
> > > > >
> > > > > On Fri, Jan 14, 2022 at 8:49 AM Tim Allison <ta...@apache.org> wrote:
> > > > > >
> > > > > > All,
> > > > > > I'd like to roll a release for the next version of main soonish.
> > > > > > The changes to default memory allocation for PDF parsing and in
> > > > > > marking embedded files in xhtml I think are significant enough to make
> > > > > > the next version 2.3.0.
> > > > > > This would include an upgrade to log4j2 2.17.1.
> > > > > > Maybe kick it off towards the end of next week? What else do we
> > > > > > want to get into the next release?
> > > > > >
> > > > > > Best,
> > > > > >
> > > > > > Tim
> > >
> >
Release 1.28.1? [FROM] Next release -- 2.3.0?
Posted by Tim Allison <ta...@apache.org>.
Hi Subhajit,
Seems reasonable. We also have (should have) security updates in
xerces, junrar and protobuf.
Fellow devs, what do you think of running the 1.28.1 release after
2.3.0 is out (say, early/mid next week)?
Anything else we need to do for 1.28.1?
Cheers,
Tim
On Thu, Feb 3, 2022 at 8:39 AM Subhajit Das <su...@live.com> wrote:
>
> Hi Tim,
>
> Is there any plan for Tika 1.x release with the log4j update.
> Tika 1.28 is getting considered as vulnerable as it is not using the latest log4j.
> Might be a patch version, at least?
>
> Thanks and Regards
> Subhajit Das
>
> On Feb 3 2022, at 12:57 am, Tim Allison <ta...@apache.org> wrote:
> > Results on 1.28 vs 2.3.0-pre-rc1 are available here:
> > https://corpora.tika.apache.org/base/share/tika-1.28-vs-2.3.0-pre-rc1.tgz
> >
> > There are a couple of things that I'd like to fix at some point, but
> > this generally looks good to me. Please do take a look if you have an
> > interest.
> >
> > I'll kick off the release candidate shortly.
> > Best,
> > Tim
> > On Tue, Feb 1, 2022 at 2:40 PM Tim Allison <ta...@apache.org> wrote:
> > >
> > > The results on ~ one million files (comparing 2.2.1 and
> > > 2.3.0-SNAPSHOT) are here:
> > > https://corpora.tika.apache.org/base/share/tika-2.3.0-prerc1-reports.tgz
> > >
> > > I don't see anything concerning.
> > >
> > > I'm currently running 1.28 against the same files, and I'll compare
> > > those with 2.3.0-SNAPSHOT.
> > >
> > > Please let me know if you find any problems. If I don't see anything
> > > concerning in 1.28 vs 2.3.0-SNAPSHOT, I'll start the release process.
> > >
> > > Best,
> > >
> > > Tim
> > >
> > > On Mon, Jan 31, 2022 at 5:44 PM Tim Allison <ta...@apache.org> wrote:
> > > >
> > > > All,
> > > >
> > > > I've kicked off the regression tests for 2.3.0. Please let me know if
> > > > there are any blockers on 2.3.0.
> > > >
> > > > Thank you, all!
> > > >
> > > > Cheers,
> > > >
> > > > Tim
> > > >
> > > > On Fri, Jan 14, 2022 at 8:49 AM Tim Allison <ta...@apache.org> wrote:
> > > > >
> > > > > All,
> > > > > I'd like to roll a release for the next version of main soonish.
> > > > > The changes to default memory allocation for PDF parsing and in
> > > > > marking embedded files in xhtml I think are significant enough to make
> > > > > the next version 2.3.0.
> > > > > This would include an upgrade to log4j2 2.17.1.
> > > > > Maybe kick it off towards the end of next week? What else do we
> > > > > want to get into the next release?
> > > > >
> > > > > Best,
> > > > >
> > > > > Tim
> >
>
Re: Next release -- 2.3.0?
Posted by Subhajit Das <su...@live.com>.
Hi Tim,
Is there any plan for Tika 1.x release with the log4j update.
Tika 1.28 is getting considered as vulnerable as it is not using the latest log4j.
Might be a patch version, at least?
Thanks and Regards
Subhajit Das
On Feb 3 2022, at 12:57 am, Tim Allison <ta...@apache.org> wrote:
> Results on 1.28 vs 2.3.0-pre-rc1 are available here:
> https://corpora.tika.apache.org/base/share/tika-1.28-vs-2.3.0-pre-rc1.tgz
>
> There are a couple of things that I'd like to fix at some point, but
> this generally looks good to me. Please do take a look if you have an
> interest.
>
> I'll kick off the release candidate shortly.
> Best,
> Tim
> On Tue, Feb 1, 2022 at 2:40 PM Tim Allison <ta...@apache.org> wrote:
> >
> > The results on ~ one million files (comparing 2.2.1 and
> > 2.3.0-SNAPSHOT) are here:
> > https://corpora.tika.apache.org/base/share/tika-2.3.0-prerc1-reports.tgz
> >
> > I don't see anything concerning.
> >
> > I'm currently running 1.28 against the same files, and I'll compare
> > those with 2.3.0-SNAPSHOT.
> >
> > Please let me know if you find any problems. If I don't see anything
> > concerning in 1.28 vs 2.3.0-SNAPSHOT, I'll start the release process.
> >
> > Best,
> >
> > Tim
> >
> > On Mon, Jan 31, 2022 at 5:44 PM Tim Allison <ta...@apache.org> wrote:
> > >
> > > All,
> > >
> > > I've kicked off the regression tests for 2.3.0. Please let me know if
> > > there are any blockers on 2.3.0.
> > >
> > > Thank you, all!
> > >
> > > Cheers,
> > >
> > > Tim
> > >
> > > On Fri, Jan 14, 2022 at 8:49 AM Tim Allison <ta...@apache.org> wrote:
> > > >
> > > > All,
> > > > I'd like to roll a release for the next version of main soonish.
> > > > The changes to default memory allocation for PDF parsing and in
> > > > marking embedded files in xhtml I think are significant enough to make
> > > > the next version 2.3.0.
> > > > This would include an upgrade to log4j2 2.17.1.
> > > > Maybe kick it off towards the end of next week? What else do we
> > > > want to get into the next release?
> > > >
> > > > Best,
> > > >
> > > > Tim
>
Re: Next release -- 2.3.0?
Posted by Tim Allison <ta...@apache.org>.
Results on 1.28 vs 2.3.0-pre-rc1 are available here:
https://corpora.tika.apache.org/base/share/tika-1.28-vs-2.3.0-pre-rc1.tgz
There are a couple of things that I'd like to fix at some point, but
this generally looks good to me. Please do take a look if you have an
interest.
I'll kick off the release candidate shortly.
Best,
Tim
On Tue, Feb 1, 2022 at 2:40 PM Tim Allison <ta...@apache.org> wrote:
>
> The results on ~ one million files (comparing 2.2.1 and
> 2.3.0-SNAPSHOT) are here:
> https://corpora.tika.apache.org/base/share/tika-2.3.0-prerc1-reports.tgz
>
> I don't see anything concerning.
>
> I'm currently running 1.28 against the same files, and I'll compare
> those with 2.3.0-SNAPSHOT.
>
> Please let me know if you find any problems. If I don't see anything
> concerning in 1.28 vs 2.3.0-SNAPSHOT, I'll start the release process.
>
> Best,
>
> Tim
>
> On Mon, Jan 31, 2022 at 5:44 PM Tim Allison <ta...@apache.org> wrote:
> >
> > All,
> >
> > I've kicked off the regression tests for 2.3.0. Please let me know if
> > there are any blockers on 2.3.0.
> >
> > Thank you, all!
> >
> > Cheers,
> >
> > Tim
> >
> > On Fri, Jan 14, 2022 at 8:49 AM Tim Allison <ta...@apache.org> wrote:
> > >
> > > All,
> > > I'd like to roll a release for the next version of main soonish.
> > > The changes to default memory allocation for PDF parsing and in
> > > marking embedded files in xhtml I think are significant enough to make
> > > the next version 2.3.0.
> > > This would include an upgrade to log4j2 2.17.1.
> > > Maybe kick it off towards the end of next week? What else do we
> > > want to get into the next release?
> > >
> > > Best,
> > >
> > > Tim