You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@activemq.apache.org by Jean-Baptiste Onofre <jb...@nanthrax.net> on 2021/04/06 06:30:39 UTC

[VOTE] Apache ActiveMQ 5.15.15 release

Hi everyone,

I submit Apache ActiveMQ 5.15.15 to your vote. This release includes important fixes and updates, especially:
- Shiro, Spring, xstream, jetty upgrades
- fixes on WebConsole when destination name contains +
- fixes and improvements on the Karaf features to avoid breaking Karaf http commands and refresh
- improved serialization security to avoid impact on xstream ack processing

Please take a look on the Release Notes for details:
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417>

The Maven staging repository is:
https://repository.apache.org/content/repositories/orgapacheactivemq-1226/ <https://repository.apache.org/content/repositories/orgapacheactivemq-1226/>

The dist staging repository is:
https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/ <https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/>

Git tag:
activemq-5.15.15

Please vote to approve this release:

[ ] +1 Approve the release
[ ] -1 Don't approve the release (please provide specific comments)

This vote will be open for at least 72 hours.

Thanks !
Regards
JB

[CANCEL][VOTE] Apache ActiveMQ 5.15.15 release

Posted by Jean-Baptiste Onofre <jb...@nanthrax.net>.
Hi,

AMQ-8219 has been found and it’s blocker for the release. I cancel this vote to prepare a new one with AMQ-8219 fixed.

Regards
JB

> Le 6 avr. 2021 à 08:30, Jean-Baptiste Onofre <jb...@nanthrax.net> a écrit :
> 
> Hi everyone,
> 
> I submit Apache ActiveMQ 5.15.15 to your vote. This release includes important fixes and updates, especially:
> - Shiro, Spring, xstream, jetty upgrades
> - fixes on WebConsole when destination name contains +
> - fixes and improvements on the Karaf features to avoid breaking Karaf http commands and refresh
> - improved serialization security to avoid impact on xstream ack processing
> 
> Please take a look on the Release Notes for details:
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417>
> 
> The Maven staging repository is:
> https://repository.apache.org/content/repositories/orgapacheactivemq-1226/ <https://repository.apache.org/content/repositories/orgapacheactivemq-1226/>
> 
> The dist staging repository is:
> https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/ <https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/>
> 
> Git tag:
> activemq-5.15.15
> 
> Please vote to approve this release:
> 
> [ ] +1 Approve the release
> [ ] -1 Don't approve the release (please provide specific comments)
> 
> This vote will be open for at least 72 hours.
> 
> Thanks !
> Regards
> JB


Re: [VOTE] Apache ActiveMQ 5.15.15 release

Posted by Jean-Baptiste Onofre <jb...@nanthrax.net>.
Hi Robbie,

I found the cause: the prepare-release.sh script use sha512sum which doesn’t exist on my Mac. So, I have created a script sha512sum but made a mistake here and it’s taking file my local repo instead of remote.
I removed the script to replace with an alias (alias sha512sum="shasum -a 512").
It should be better, and we can test on the 5.15.15 #2 vote.

Regards
JB

> Le 7 avr. 2021 à 16:10, Robbie Gemmell <ro...@gmail.com> a écrit :
> 
> The -bin artifacts in the dist dev area differ from those in the maven
> staging repo, as previously reported for the prior release. These
> files should be the same, and would be if following the documented
> process or common alternatives, so I dont quite understand how this is
> still occurring. Especially as it seems the source archives do match
> this time unlike with the previous report.
> 
> It's also surprising to see 5.15.15 under vote rather than 5.16.2,
> given previous discussion around doing 5.16.2 first.
> 
> Robbie
> 
> On Tue, 6 Apr 2021 at 07:30, Jean-Baptiste Onofre <jb...@nanthrax.net> wrote:
>> 
>> Hi everyone,
>> 
>> I submit Apache ActiveMQ 5.15.15 to your vote. This release includes important fixes and updates, especially:
>> - Shiro, Spring, xstream, jetty upgrades
>> - fixes on WebConsole when destination name contains +
>> - fixes and improvements on the Karaf features to avoid breaking Karaf http commands and refresh
>> - improved serialization security to avoid impact on xstream ack processing
>> 
>> Please take a look on the Release Notes for details:
>> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417>
>> 
>> The Maven staging repository is:
>> https://repository.apache.org/content/repositories/orgapacheactivemq-1226/ <https://repository.apache.org/content/repositories/orgapacheactivemq-1226/>
>> 
>> The dist staging repository is:
>> https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/ <https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/>
>> 
>> Git tag:
>> activemq-5.15.15
>> 
>> Please vote to approve this release:
>> 
>> [ ] +1 Approve the release
>> [ ] -1 Don't approve the release (please provide specific comments)
>> 
>> This vote will be open for at least 72 hours.
>> 
>> Thanks !
>> Regards
>> JB


Re: [VOTE] Apache ActiveMQ 5.15.15 release

Posted by Jean-Baptiste Onofre <jb...@nanthrax.net>.
Thanks for the update Robbie.

I did take 5.15.15 #2, the files should be sync between Maven repo and dist now.

As 5.15.15 is ready, I submit it to vote now, and I will move forward on 5.16.2.

Thanks !
Regards
JB

> Le 8 avr. 2021 à 11:30, Robbie Gemmell <ro...@gmail.com> a écrit :
> 
> I did check/compare the sigs to confirm but it was visible that the
> archives were different even before doing that, just from their file
> sizes.
> 
> Doing 5.15.15 first still makes little sense to me but clearly you
> really want to, so ho hum.
> 
> Robbie
> 
> On Thu, 8 Apr 2021 at 05:51, Jean-Baptiste Onofre <jb...@nanthrax.net> wrote:
>> 
>> That’s the same files for sure, and I use the prepare-release script. Let me check the script.
>> Do you check the checksums ?
>> 
>> 5.15.15 and 5.16.2 should be close enough, and 5.16.2 is not yet ready: the redelivery plugin should be fixed (I’m on it) but it can be releases after 5.15.15.
>> 
>> Regards
>> JB
>> 
>>> Le 7 avr. 2021 à 16:10, Robbie Gemmell <ro...@gmail.com> a écrit :
>>> 
>>> The -bin artifacts in the dist dev area differ from those in the maven
>>> staging repo, as previously reported for the prior release. These
>>> files should be the same, and would be if following the documented
>>> process or common alternatives, so I dont quite understand how this is
>>> still occurring. Especially as it seems the source archives do match
>>> this time unlike with the previous report.
>>> 
>>> It's also surprising to see 5.15.15 under vote rather than 5.16.2,
>>> given previous discussion around doing 5.16.2 first.
>>> 
>>> Robbie
>>> 
>>> On Tue, 6 Apr 2021 at 07:30, Jean-Baptiste Onofre <jb...@nanthrax.net> wrote:
>>>> 
>>>> Hi everyone,
>>>> 
>>>> I submit Apache ActiveMQ 5.15.15 to your vote. This release includes important fixes and updates, especially:
>>>> - Shiro, Spring, xstream, jetty upgrades
>>>> - fixes on WebConsole when destination name contains +
>>>> - fixes and improvements on the Karaf features to avoid breaking Karaf http commands and refresh
>>>> - improved serialization security to avoid impact on xstream ack processing
>>>> 
>>>> Please take a look on the Release Notes for details:
>>>> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417>
>>>> 
>>>> The Maven staging repository is:
>>>> https://repository.apache.org/content/repositories/orgapacheactivemq-1226/ <https://repository.apache.org/content/repositories/orgapacheactivemq-1226/>
>>>> 
>>>> The dist staging repository is:
>>>> https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/ <https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/>
>>>> 
>>>> Git tag:
>>>> activemq-5.15.15
>>>> 
>>>> Please vote to approve this release:
>>>> 
>>>> [ ] +1 Approve the release
>>>> [ ] -1 Don't approve the release (please provide specific comments)
>>>> 
>>>> This vote will be open for at least 72 hours.
>>>> 
>>>> Thanks !
>>>> Regards
>>>> JB
>> 


Re: [VOTE] Apache ActiveMQ 5.15.15 release

Posted by Robbie Gemmell <ro...@gmail.com>.
I did check/compare the sigs to confirm but it was visible that the
archives were different even before doing that, just from their file
sizes.

Doing 5.15.15 first still makes little sense to me but clearly you
really want to, so ho hum.

Robbie

On Thu, 8 Apr 2021 at 05:51, Jean-Baptiste Onofre <jb...@nanthrax.net> wrote:
>
> That’s the same files for sure, and I use the prepare-release script. Let me check the script.
> Do you check the checksums ?
>
> 5.15.15 and 5.16.2 should be close enough, and 5.16.2 is not yet ready: the redelivery plugin should be fixed (I’m on it) but it can be releases after 5.15.15.
>
> Regards
> JB
>
> > Le 7 avr. 2021 à 16:10, Robbie Gemmell <ro...@gmail.com> a écrit :
> >
> > The -bin artifacts in the dist dev area differ from those in the maven
> > staging repo, as previously reported for the prior release. These
> > files should be the same, and would be if following the documented
> > process or common alternatives, so I dont quite understand how this is
> > still occurring. Especially as it seems the source archives do match
> > this time unlike with the previous report.
> >
> > It's also surprising to see 5.15.15 under vote rather than 5.16.2,
> > given previous discussion around doing 5.16.2 first.
> >
> > Robbie
> >
> > On Tue, 6 Apr 2021 at 07:30, Jean-Baptiste Onofre <jb...@nanthrax.net> wrote:
> >>
> >> Hi everyone,
> >>
> >> I submit Apache ActiveMQ 5.15.15 to your vote. This release includes important fixes and updates, especially:
> >> - Shiro, Spring, xstream, jetty upgrades
> >> - fixes on WebConsole when destination name contains +
> >> - fixes and improvements on the Karaf features to avoid breaking Karaf http commands and refresh
> >> - improved serialization security to avoid impact on xstream ack processing
> >>
> >> Please take a look on the Release Notes for details:
> >> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417>
> >>
> >> The Maven staging repository is:
> >> https://repository.apache.org/content/repositories/orgapacheactivemq-1226/ <https://repository.apache.org/content/repositories/orgapacheactivemq-1226/>
> >>
> >> The dist staging repository is:
> >> https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/ <https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/>
> >>
> >> Git tag:
> >> activemq-5.15.15
> >>
> >> Please vote to approve this release:
> >>
> >> [ ] +1 Approve the release
> >> [ ] -1 Don't approve the release (please provide specific comments)
> >>
> >> This vote will be open for at least 72 hours.
> >>
> >> Thanks !
> >> Regards
> >> JB
>

Re: [VOTE] Apache ActiveMQ 5.15.15 release

Posted by Jean-Baptiste Onofre <jb...@nanthrax.net>.
That’s the same files for sure, and I use the prepare-release script. Let me check the script.
Do you check the checksums ?

5.15.15 and 5.16.2 should be close enough, and 5.16.2 is not yet ready: the redelivery plugin should be fixed (I’m on it) but it can be releases after 5.15.15.

Regards
JB

> Le 7 avr. 2021 à 16:10, Robbie Gemmell <ro...@gmail.com> a écrit :
> 
> The -bin artifacts in the dist dev area differ from those in the maven
> staging repo, as previously reported for the prior release. These
> files should be the same, and would be if following the documented
> process or common alternatives, so I dont quite understand how this is
> still occurring. Especially as it seems the source archives do match
> this time unlike with the previous report.
> 
> It's also surprising to see 5.15.15 under vote rather than 5.16.2,
> given previous discussion around doing 5.16.2 first.
> 
> Robbie
> 
> On Tue, 6 Apr 2021 at 07:30, Jean-Baptiste Onofre <jb...@nanthrax.net> wrote:
>> 
>> Hi everyone,
>> 
>> I submit Apache ActiveMQ 5.15.15 to your vote. This release includes important fixes and updates, especially:
>> - Shiro, Spring, xstream, jetty upgrades
>> - fixes on WebConsole when destination name contains +
>> - fixes and improvements on the Karaf features to avoid breaking Karaf http commands and refresh
>> - improved serialization security to avoid impact on xstream ack processing
>> 
>> Please take a look on the Release Notes for details:
>> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417>
>> 
>> The Maven staging repository is:
>> https://repository.apache.org/content/repositories/orgapacheactivemq-1226/ <https://repository.apache.org/content/repositories/orgapacheactivemq-1226/>
>> 
>> The dist staging repository is:
>> https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/ <https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/>
>> 
>> Git tag:
>> activemq-5.15.15
>> 
>> Please vote to approve this release:
>> 
>> [ ] +1 Approve the release
>> [ ] -1 Don't approve the release (please provide specific comments)
>> 
>> This vote will be open for at least 72 hours.
>> 
>> Thanks !
>> Regards
>> JB


Re: [VOTE] Apache ActiveMQ 5.15.15 release

Posted by Jean-Baptiste Onofre <jb...@nanthrax.net>.
Thanks for catching this.

I’m cancel this vote to prepare a new one with the fix.

Regards
JB

> Le 8 avr. 2021 à 02:47, Chen, Charlie <ch...@amazon.com.INVALID> a écrit :
> 
> Hi,
> 
> I found an issue in Apache ActiveMQ 5.15.15. When I click on "send to" / "send" button in web console I got the Error webpage and "org.apache.commons.lang.StringEscapeUtils cannot be resolved to a type" in log. I've created a ticket in JIRA: https://issues.apache.org/jira/browse/AMQ-8219. And I have a PR ready: https://github.com/apache/activemq/pull/646
> 
> 
> Thanks,
> Charlie 
> 
> 
>    On 2021-04-07, 7:12 AM, "Robbie Gemmell" <ro...@gmail.com> wrote:
> 
>        CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you can confirm the sender and know the content is safe.
> 
> 
> 
>        The -bin artifacts in the dist dev area differ from those in the maven
>        staging repo, as previously reported for the prior release. These
>        files should be the same, and would be if following the documented
>        process or common alternatives, so I dont quite understand how this is
>        still occurring. Especially as it seems the source archives do match
>        this time unlike with the previous report.
> 
>        It's also surprising to see 5.15.15 under vote rather than 5.16.2,
>        given previous discussion around doing 5.16.2 first.
> 
>        Robbie
> 
>        On Tue, 6 Apr 2021 at 07:30, Jean-Baptiste Onofre <jb...@nanthrax.net> wrote:
>> 
>> Hi everyone,
>> 
>> I submit Apache ActiveMQ 5.15.15 to your vote. This release includes important fixes and updates, especially:
>> - Shiro, Spring, xstream, jetty upgrades
>> - fixes on WebConsole when destination name contains +
>> - fixes and improvements on the Karaf features to avoid breaking Karaf http commands and refresh
>> - improved serialization security to avoid impact on xstream ack processing
>> 
>> Please take a look on the Release Notes for details:
>> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417>
>> 
>> The Maven staging repository is:
>> https://repository.apache.org/content/repositories/orgapacheactivemq-1226/ <https://repository.apache.org/content/repositories/orgapacheactivemq-1226/>
>> 
>> The dist staging repository is:
>> https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/ <https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/>
>> 
>> Git tag:
>> activemq-5.15.15
>> 
>> Please vote to approve this release:
>> 
>> [ ] +1 Approve the release
>> [ ] -1 Don't approve the release (please provide specific comments)
>> 
>> This vote will be open for at least 72 hours.
>> 
>> Thanks !
>> Regards
>> JB
> 
> 


Re: [VOTE] Apache ActiveMQ 5.15.15 release

Posted by "Chen, Charlie" <ch...@amazon.com.INVALID>.
Hi,

I found an issue in Apache ActiveMQ 5.15.15. When I click on "send to" / "send" button in web console I got the Error webpage and "org.apache.commons.lang.StringEscapeUtils cannot be resolved to a type" in log. I've created a ticket in JIRA: https://issues.apache.org/jira/browse/AMQ-8219. And I have a PR ready: https://github.com/apache/activemq/pull/646


Thanks,
Charlie 


    On 2021-04-07, 7:12 AM, "Robbie Gemmell" <ro...@gmail.com> wrote:

        CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you can confirm the sender and know the content is safe.



        The -bin artifacts in the dist dev area differ from those in the maven
        staging repo, as previously reported for the prior release. These
        files should be the same, and would be if following the documented
        process or common alternatives, so I dont quite understand how this is
        still occurring. Especially as it seems the source archives do match
        this time unlike with the previous report.

        It's also surprising to see 5.15.15 under vote rather than 5.16.2,
        given previous discussion around doing 5.16.2 first.

        Robbie

        On Tue, 6 Apr 2021 at 07:30, Jean-Baptiste Onofre <jb...@nanthrax.net> wrote:
        >
        > Hi everyone,
        >
        > I submit Apache ActiveMQ 5.15.15 to your vote. This release includes important fixes and updates, especially:
        > - Shiro, Spring, xstream, jetty upgrades
        > - fixes on WebConsole when destination name contains +
        > - fixes and improvements on the Karaf features to avoid breaking Karaf http commands and refresh
        > - improved serialization security to avoid impact on xstream ack processing
        >
        > Please take a look on the Release Notes for details:
        > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417>
        >
        > The Maven staging repository is:
        > https://repository.apache.org/content/repositories/orgapacheactivemq-1226/ <https://repository.apache.org/content/repositories/orgapacheactivemq-1226/>
        >
        > The dist staging repository is:
        > https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/ <https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/>
        >
        > Git tag:
        > activemq-5.15.15
        >
        > Please vote to approve this release:
        >
        > [ ] +1 Approve the release
        > [ ] -1 Don't approve the release (please provide specific comments)
        >
        > This vote will be open for at least 72 hours.
        >
        > Thanks !
        > Regards
        > JB



Re: [VOTE] Apache ActiveMQ 5.15.15 release

Posted by Robbie Gemmell <ro...@gmail.com>.
The -bin artifacts in the dist dev area differ from those in the maven
staging repo, as previously reported for the prior release. These
files should be the same, and would be if following the documented
process or common alternatives, so I dont quite understand how this is
still occurring. Especially as it seems the source archives do match
this time unlike with the previous report.

It's also surprising to see 5.15.15 under vote rather than 5.16.2,
given previous discussion around doing 5.16.2 first.

Robbie

On Tue, 6 Apr 2021 at 07:30, Jean-Baptiste Onofre <jb...@nanthrax.net> wrote:
>
> Hi everyone,
>
> I submit Apache ActiveMQ 5.15.15 to your vote. This release includes important fixes and updates, especially:
> - Shiro, Spring, xstream, jetty upgrades
> - fixes on WebConsole when destination name contains +
> - fixes and improvements on the Karaf features to avoid breaking Karaf http commands and refresh
> - improved serialization security to avoid impact on xstream ack processing
>
> Please take a look on the Release Notes for details:
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417>
>
> The Maven staging repository is:
> https://repository.apache.org/content/repositories/orgapacheactivemq-1226/ <https://repository.apache.org/content/repositories/orgapacheactivemq-1226/>
>
> The dist staging repository is:
> https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/ <https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/>
>
> Git tag:
> activemq-5.15.15
>
> Please vote to approve this release:
>
> [ ] +1 Approve the release
> [ ] -1 Don't approve the release (please provide specific comments)
>
> This vote will be open for at least 72 hours.
>
> Thanks !
> Regards
> JB