You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@shindig.apache.org by Ryan Baxter <rb...@gmail.com> on 2012/06/19 03:54:18 UTC

Shindig 2.5.0-beta2 RC3 - Third Time Is A Charm

OK after Stanton found what appeared to be a security issue (more
details on that should be published tomorrow) I have regenerated
2.5.0-beta2.  I pulled in the fix Stanton checked in as well as
SHINDIG-1786 [1].  I had to pull in 1786 since both changes were made
in the same file, although 1786 is a small change and low risk.

The old repository has been discarded.  I suggest people who have
containers which support OAuth 2.0 retest with the new RC.

Staging Repo: https://repository.apache.org/content/repositories/orgapacheshindig-247/
JIRA Issues: https://issues.apache.org/jira/secure/IssueNavigator.jspa?reset=true&jqlQuery=project+%3D+SHINDIG+AND+resolved+%3E%3D+2012-03-26

Vote open for 72 hours.
[ ] +1
[ ] +0
[ ] -1

[1] https://issues.apache.org/jira/browse/SHINDIG-1786

-Ryan

Re: Shindig 2.5.0-beta2 RC3 - Third Time Is A Charm

Posted by Paul Lindner <li...@inuus.com>.
Looks good for me too +1.


On Fri, Jun 22, 2012 at 10:40 AM, Henry Saputra <he...@gmail.com>wrote:

> Used the generated jars to test in the container application and run
> basic gadget flow (no OAuth and crypt codec flows though)
> REST and OSAPI calls looks good.
>
> Signature looks ok (only check for common, gadgets, social-api, and
> feature modules)
>
> +1
>
> - Henry
>
>
> On Mon, Jun 18, 2012 at 6:54 PM, Ryan Baxter <rb...@gmail.com> wrote:
> > OK after Stanton found what appeared to be a security issue (more
> > details on that should be published tomorrow) I have regenerated
> > 2.5.0-beta2.  I pulled in the fix Stanton checked in as well as
> > SHINDIG-1786 [1].  I had to pull in 1786 since both changes were made
> > in the same file, although 1786 is a small change and low risk.
> >
> > The old repository has been discarded.  I suggest people who have
> > containers which support OAuth 2.0 retest with the new RC.
> >
> > Staging Repo:
> https://repository.apache.org/content/repositories/orgapacheshindig-247/
> > JIRA Issues:
> https://issues.apache.org/jira/secure/IssueNavigator.jspa?reset=true&jqlQuery=project+%3D+SHINDIG+AND+resolved+%3E%3D+2012-03-26
> >
> > Vote open for 72 hours.
> > [ ] +1
> > [ ] +0
> > [ ] -1
> >
> > [1] https://issues.apache.org/jira/browse/SHINDIG-1786
> >
> > -Ryan
>



-- 
Paul Lindner -- lindner@inuus.com -- profiles.google.com/pmlindner

Re: Shindig 2.5.0-beta2 RC3 - Third Time Is A Charm

Posted by Henry Saputra <he...@gmail.com>.
Used the generated jars to test in the container application and run
basic gadget flow (no OAuth and crypt codec flows though)
REST and OSAPI calls looks good.

Signature looks ok (only check for common, gadgets, social-api, and
feature modules)

+1

- Henry


On Mon, Jun 18, 2012 at 6:54 PM, Ryan Baxter <rb...@gmail.com> wrote:
> OK after Stanton found what appeared to be a security issue (more
> details on that should be published tomorrow) I have regenerated
> 2.5.0-beta2.  I pulled in the fix Stanton checked in as well as
> SHINDIG-1786 [1].  I had to pull in 1786 since both changes were made
> in the same file, although 1786 is a small change and low risk.
>
> The old repository has been discarded.  I suggest people who have
> containers which support OAuth 2.0 retest with the new RC.
>
> Staging Repo: https://repository.apache.org/content/repositories/orgapacheshindig-247/
> JIRA Issues: https://issues.apache.org/jira/secure/IssueNavigator.jspa?reset=true&jqlQuery=project+%3D+SHINDIG+AND+resolved+%3E%3D+2012-03-26
>
> Vote open for 72 hours.
> [ ] +1
> [ ] +0
> [ ] -1
>
> [1] https://issues.apache.org/jira/browse/SHINDIG-1786
>
> -Ryan

Re: Shindig 2.5.0-beta2 RC3 - Third Time Is A Charm

Posted by Stanton Sievers <ss...@us.ibm.com>.
+1

Smoke tested the sample common container page.  Will verify signatures 
later.

Thanks,
-Stanton



From:   Ryan J Baxter/Westford/IBM@Lotus
To:     dev@shindig.apache.org, 
Date:   06/20/2012 21:19
Subject:        Re: Shindig 2.5.0-beta2 RC3 - Third Time Is A Charm



+1 from me

I hate to ask people to test the release again, but it should be quick and 

easy.  I would like to publish the release tomorrow if we can get enough 
+1s by the end of the day.

-Ryan




From:   Ryan Baxter <rb...@gmail.com>
To:     dev@shindig.apache.org, 
Date:   06/18/2012 09:53 PM
Subject:        Shindig 2.5.0-beta2 RC3 - Third Time Is A Charm



OK after Stanton found what appeared to be a security issue (more
details on that should be published tomorrow) I have regenerated
2.5.0-beta2.  I pulled in the fix Stanton checked in as well as
SHINDIG-1786 [1].  I had to pull in 1786 since both changes were made
in the same file, although 1786 is a small change and low risk.

The old repository has been discarded.  I suggest people who have
containers which support OAuth 2.0 retest with the new RC.

Staging Repo: 
https://repository.apache.org/content/repositories/orgapacheshindig-247/
JIRA Issues: 
https://issues.apache.org/jira/secure/IssueNavigator.jspa?reset=true&jqlQuery=project+%3D+SHINDIG+AND+resolved+%3E%3D+2012-03-26



Vote open for 72 hours.
[ ] +1
[ ] +0
[ ] -1

[1] https://issues.apache.org/jira/browse/SHINDIG-1786

-Ryan




Re: Shindig 2.5.0-beta2 RC3 - Third Time Is A Charm

Posted by Ryan J Baxter <rj...@us.ibm.com>.
+1 from me

I hate to ask people to test the release again, but it should be quick and 
easy.  I would like to publish the release tomorrow if we can get enough 
+1s by the end of the day.

-Ryan




From:   Ryan Baxter <rb...@gmail.com>
To:     dev@shindig.apache.org, 
Date:   06/18/2012 09:53 PM
Subject:        Shindig 2.5.0-beta2 RC3 - Third Time Is A Charm



OK after Stanton found what appeared to be a security issue (more
details on that should be published tomorrow) I have regenerated
2.5.0-beta2.  I pulled in the fix Stanton checked in as well as
SHINDIG-1786 [1].  I had to pull in 1786 since both changes were made
in the same file, although 1786 is a small change and low risk.

The old repository has been discarded.  I suggest people who have
containers which support OAuth 2.0 retest with the new RC.

Staging Repo: 
https://repository.apache.org/content/repositories/orgapacheshindig-247/
JIRA Issues: 
https://issues.apache.org/jira/secure/IssueNavigator.jspa?reset=true&jqlQuery=project+%3D+SHINDIG+AND+resolved+%3E%3D+2012-03-26


Vote open for 72 hours.
[ ] +1
[ ] +0
[ ] -1

[1] https://issues.apache.org/jira/browse/SHINDIG-1786

-Ryan



[RESULT] Shindig 2.5.0-beta2 RC3 - Third Time Is A Charm

Posted by Ryan J Baxter <rj...@us.ibm.com>.
Hi,
The vote has passed with the following result :

+1 (binding): Paul, Ryan, Henry, Stanton
+1 (non binding): None

I have promoted the artifacts to the centra repo [1] and checked them in 
to the Apache distribution site [2].

[1] 
https://repository.apache.org/content/repositories/releases/org/apache/shindig/shindig/2.5.0-beta2/
[2] https://dist.apache.org/repos/dist/release/shindig/2.5.0-beta2/

-Ryan




From:   Ryan Baxter <rb...@gmail.com>
To:     dev@shindig.apache.org, 
Date:   06/18/2012 09:53 PM
Subject:        Shindig 2.5.0-beta2 RC3 - Third Time Is A Charm



OK after Stanton found what appeared to be a security issue (more
details on that should be published tomorrow) I have regenerated
2.5.0-beta2.  I pulled in the fix Stanton checked in as well as
SHINDIG-1786 [1].  I had to pull in 1786 since both changes were made
in the same file, although 1786 is a small change and low risk.

The old repository has been discarded.  I suggest people who have
containers which support OAuth 2.0 retest with the new RC.

Staging Repo: 
https://repository.apache.org/content/repositories/orgapacheshindig-247/
JIRA Issues: 
https://issues.apache.org/jira/secure/IssueNavigator.jspa?reset=true&jqlQuery=project+%3D+SHINDIG+AND+resolved+%3E%3D+2012-03-26


Vote open for 72 hours.
[ ] +1
[ ] +0
[ ] -1

[1] https://issues.apache.org/jira/browse/SHINDIG-1786

-Ryan