You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@turbine.apache.org by "Kallidis, Georg" <ge...@fu-berlin.de> on 2025/06/12 08:15:28 UTC
[VOTE] Release candidate turbine-7 as in staged repository
Hi Turbine devs,
a new Turbine Core release candidate has been prepared!
Tag: turbine-7.0-candidate
Git repo (mirrored): <https://gitbox.apache.org/repos/asf/turbine-core.git>
https://gitbox.apache.org/repos/asf/turbine-core.git
Mirror <https://github.com/apache/turbine-core>
https://github.com/apache/turbine-core
Update or clone the repo, then checkout the candidate :
git checkout turbine-7.0-candidate
N.B. If you do a checkout for a tag, you are in detached head mode, as you
have no branch to work on.
Artifacts:
<https://repository.apache.org/content/repositories/orgapacheturbine-1101/>
https://repository.apache.org/content/repositories/orgapacheturbine-1101/
Main changes in this version are:
o New configuration option "session.objectinputfilter" to limit the classes
that can be deserialized into a session from persistent storage. This
feature uses the ObjectInputFilter introduced in Java 9.
o Fix for security check to prevent XSS for default Turbine keys from
parameters, which might be set or not and e.g. sed in templates and other
places.
o Change to Jakarta namespace (from Javax).
o Update to latest Fulcrum dependencies (fulcrum.security 4.0.0,
fulcrum.intake 4.0.0, fulcrum.parser 4.0.0, fulcrum.yaafi 2.0.0,
fulcrum.cache 2.0.1, fulcrum-quartz 2.0.0, fulcrum localization 2.0.0,
fulcrum testcontainer 2.0.1) and Turbine parent 14.
o Find more fixes and changes, e.g. dependency updates in GIT commits, e.g.
Torque 6.0, commons-configuration2 to 2.11.0, commons-beanutils from 1.9.4
to 1.11.0.
This version requires Java 17.
[ ] +1 release it
[ ] +0 go ahead I don't care
[ ] -1 no, do not release it because
Please consider voting, thanks!
Best regards,
Georg
Re: [VOTE] Release candidate turbine-7 as in staged repository
Posted by Jeffery Painter <je...@jivecast.com>.
Hello,
My vote below. Thanks!
> Hi Turbine devs,
>
> a new Turbine Core release candidate has been prepared!
>
> Tag: turbine-7.0-candidate
>
> [X] +1 release it
> [ ] +0 go ahead I don't care
> [ ] -1 no, do not release it because
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@turbine.apache.org
For additional commands, e-mail: dev-help@turbine.apache.org
AW: [VOTE] Release candidate turbine-7 as in staged repository
Posted by "Kallidis, Georg" <ge...@fu-berlin.de>.
Hi,
my vote
[ x ] +1 release it
😊
Best regards, Georg
Von: Kallidis, Georg <ge...@fu-berlin.de>
Gesendet: Donnerstag, 12. Juni 2025 10:15
An: Turbine Developers List <de...@turbine.apache.org>
Betreff: [VOTE] Release candidate turbine-7 as in staged repository
Hi Turbine devs,
a new Turbine Core release candidate has been prepared!
Tag: turbine-7.0-candidate
Git repo (mirrored): <https://gitbox.apache.org/repos/asf/turbine-core.git> https://gitbox.apache.org/repos/asf/turbine-core.git
Mirror <https://github.com/apache/turbine-core> https://github.com/apache/turbine-core
Update or clone the repo, then checkout the candidate :
git checkout turbine-7.0-candidate
N.B. If you do a checkout for a tag, you are in detached head mode, as you
have no branch to work on.
Artifacts:
<https://repository.apache.org/content/repositories/orgapacheturbine-1101/> https://repository.apache.org/content/repositories/orgapacheturbine-1101/
Main changes in this version are:
o New configuration option "session.objectinputfilter" to limit the classes that can be deserialized into a session from persistent storage. This feature uses the ObjectInputFilter introduced in Java 9.
o Fix for security check to prevent XSS for default Turbine keys from parameters, which might be set or not and e.g. sed in templates and other places.
o Change to Jakarta namespace (from Javax).
o Update to latest Fulcrum dependencies (fulcrum.security 4.0.0, fulcrum.intake 4.0.0, fulcrum.parser 4.0.0, fulcrum.yaafi 2.0.0, fulcrum.cache 2.0.1, fulcrum-quartz 2.0.0, fulcrum localization 2.0.0, fulcrum testcontainer 2.0.1) and Turbine parent 14.
o Find more fixes and changes, e.g. dependency updates in GIT commits, e.g. Torque 6.0, commons-configuration2 to 2.11.0, commons-beanutils from 1.9.4 to 1.11.0.
This version requires Java 17.
[ ] +1 release it
[ ] +0 go ahead I don't care
[ ] -1 no, do not release it because
Please consider voting, thanks!
Best regards,
Georg
Re: [VOTE] Release candidate turbine-7 as in staged repository
Posted by Thomas Vandahl <tv...@apache.org>.
Hi Georg,
Thanks for taking the time for the release candidate.
> Am 12.06.2025 um 10:15 schrieb Kallidis, Georg <ge...@fu-berlin.de>:
>
> Hi Turbine devs,
> a new Turbine Core release candidate has been prepared!
> [X] +1 release it
> [ ] +0 go ahead I don't care
> [ ] -1 no, do not release it because
Signatures, build and tests are ok using
Apache Maven 3.9.6 (bc0240f3c744dd6b6ec2920b3cd08dcc295161ae)
Java version: 17.0.6, vendor: Oracle Corporation, runtime: /Library/Java/JavaVirtualMachines/jdk-17.jdk/Contents/Home
Default locale: de_DE, platform encoding: UTF-8
OS name: "mac os x", version: "15.5", arch: "x86_64", family: "mac"
Bye, Thomas
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@turbine.apache.org
For additional commands, e-mail: dev-help@turbine.apache.org