You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@maven.apache.org by Olivier Lamy <ol...@apache.org> on 2013/06/25 03:48:55 UTC
[VOTE] Apache Maven Javadoc Plugin 2.9.1 (take 2)
Hi,
I'd like to release Apache Maven Javadoc Plugin 2.9.1.
This version contains the code to fix the javadoc security issue after
the javadoc generation.
Since previous try I fix the @since for applying the javadoc security fix.
We fixed 6 issues:
https://jira.codehaus.org/secure/ReleaseNote.jspa?version=18843&styleName=Text&projectId=11138&Create=Create
Staging repository:
https://repository.apache.org/content/repositories/maven-066/
Staging site: http://maven.apache.org/plugins-archives/maven-javadoc-plugin-2.9.1/
Vote open for 72H
[+1]
[0]
[-1]
Thanks,
--
Olivier Lamy
Ecetera: http://ecetera.com.au
http://twitter.com/olamy | http://linkedin.com/in/olamy
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org
Re: [VOTE] Apache Maven Javadoc Plugin 2.9.1 (take 2)
Posted by Olivier Lamy <ol...@apache.org>.
+1
2013/6/25 Olivier Lamy <ol...@apache.org>:
> Hi,
> I'd like to release Apache Maven Javadoc Plugin 2.9.1.
>
> This version contains the code to fix the javadoc security issue after
> the javadoc generation.
>
> Since previous try I fix the @since for applying the javadoc security fix.
>
> We fixed 6 issues:
> https://jira.codehaus.org/secure/ReleaseNote.jspa?version=18843&styleName=Text&projectId=11138&Create=Create
>
> Staging repository:
> https://repository.apache.org/content/repositories/maven-066/
>
> Staging site: http://maven.apache.org/plugins-archives/maven-javadoc-plugin-2.9.1/
>
> Vote open for 72H
>
> [+1]
> [0]
> [-1]
>
> Thanks,
> --
> Olivier Lamy
> Ecetera: http://ecetera.com.au
> http://twitter.com/olamy | http://linkedin.com/in/olamy
--
Olivier Lamy
Ecetera: http://ecetera.com.au
http://twitter.com/olamy | http://linkedin.com/in/olamy
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org
Re: [VOTE] Apache Maven Javadoc Plugin 2.9.1 (take 2)
Posted by Olivier Lamy <ol...@apache.org>.
fixed: http://maven.apache.org/plugins-archives/maven-javadoc-plugin-2.9.1/jira-report.html
2013/6/25 Olivier Lamy <ol...@apache.org>:
> I will try to fix that. (as I remember changes plugin need to be
> upgraded with new jira version)
> So I can try redeploy the site with the fix.
>
>
>
> 2013/6/25 Ralph Goers <ra...@dslextreme.com>:
>> KEYS file - http://svn.apache.org/repos/asf/maven/project/KEYS
>>
>> svn tag - http://svn.apache.org/repos/asf/maven/plugins/tags/maven-javadoc-plugin-2.9.1
>>
>> +1 on the release however it is odd that the Release Notes page is empty.
>>
>> Ralph
>>
>> On Jun 24, 2013, at 7:15 PM, sebb wrote:
>>
>>> On 25 June 2013 02:48, Olivier Lamy <ol...@apache.org> wrote:
>>>> Hi,
>>>> I'd like to release Apache Maven Javadoc Plugin 2.9.1.
>>>>
>>>> This version contains the code to fix the javadoc security issue after
>>>> the javadoc generation.
>>>>
>>>> Since previous try I fix the @since for applying the javadoc security fix.
>>>>
>>>> We fixed 6 issues:
>>>> https://jira.codehaus.org/secure/ReleaseNote.jspa?version=18843&styleName=Text&projectId=11138&Create=Create
>>>>
>>>> Staging repository:
>>>> https://repository.apache.org/content/repositories/maven-066/
>>>
>>> The NOTICE file still has a spurious blank line at the start; it
>>> should be removed before the next release candidate.
>>>
>>>> Staging site: http://maven.apache.org/plugins-archives/maven-javadoc-plugin-2.9.1/
>>>
>>> The release notes page is empty, as before.
>>> Given that this release has a vital change in it, that is very unfortunate.
>>>
>>> SVN tag and revision?
>>> Without them, how can reviewers determine the provenance of the source
>>> files in the source release?
>>>
>>> KEYS file?
>>> How can we check the sigs?
>>>
>>>> Vote open for 72H
>>>>
>>>> [+1]
>>>> [0]
>>>> [-1]
>>>>
>>>> Thanks,
>>>> --
>>>> Olivier Lamy
>>>> Ecetera: http://ecetera.com.au
>>>> http://twitter.com/olamy | http://linkedin.com/in/olamy
>>>>
>>>> ---------------------------------------------------------------------
>>>> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
>>>> For additional commands, e-mail: dev-help@maven.apache.org
>>>>
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
>>> For additional commands, e-mail: dev-help@maven.apache.org
>>>
>>
>
>
>
> --
> Olivier Lamy
> Ecetera: http://ecetera.com.au
> http://twitter.com/olamy | http://linkedin.com/in/olamy
--
Olivier Lamy
Ecetera: http://ecetera.com.au
http://twitter.com/olamy | http://linkedin.com/in/olamy
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org
Re: [VOTE] Apache Maven Javadoc Plugin 2.9.1 (take 2)
Posted by Olivier Lamy <ol...@apache.org>.
I will try to fix that. (as I remember changes plugin need to be
upgraded with new jira version)
So I can try redeploy the site with the fix.
2013/6/25 Ralph Goers <ra...@dslextreme.com>:
> KEYS file - http://svn.apache.org/repos/asf/maven/project/KEYS
>
> svn tag - http://svn.apache.org/repos/asf/maven/plugins/tags/maven-javadoc-plugin-2.9.1
>
> +1 on the release however it is odd that the Release Notes page is empty.
>
> Ralph
>
> On Jun 24, 2013, at 7:15 PM, sebb wrote:
>
>> On 25 June 2013 02:48, Olivier Lamy <ol...@apache.org> wrote:
>>> Hi,
>>> I'd like to release Apache Maven Javadoc Plugin 2.9.1.
>>>
>>> This version contains the code to fix the javadoc security issue after
>>> the javadoc generation.
>>>
>>> Since previous try I fix the @since for applying the javadoc security fix.
>>>
>>> We fixed 6 issues:
>>> https://jira.codehaus.org/secure/ReleaseNote.jspa?version=18843&styleName=Text&projectId=11138&Create=Create
>>>
>>> Staging repository:
>>> https://repository.apache.org/content/repositories/maven-066/
>>
>> The NOTICE file still has a spurious blank line at the start; it
>> should be removed before the next release candidate.
>>
>>> Staging site: http://maven.apache.org/plugins-archives/maven-javadoc-plugin-2.9.1/
>>
>> The release notes page is empty, as before.
>> Given that this release has a vital change in it, that is very unfortunate.
>>
>> SVN tag and revision?
>> Without them, how can reviewers determine the provenance of the source
>> files in the source release?
>>
>> KEYS file?
>> How can we check the sigs?
>>
>>> Vote open for 72H
>>>
>>> [+1]
>>> [0]
>>> [-1]
>>>
>>> Thanks,
>>> --
>>> Olivier Lamy
>>> Ecetera: http://ecetera.com.au
>>> http://twitter.com/olamy | http://linkedin.com/in/olamy
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
>>> For additional commands, e-mail: dev-help@maven.apache.org
>>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
>> For additional commands, e-mail: dev-help@maven.apache.org
>>
>
--
Olivier Lamy
Ecetera: http://ecetera.com.au
http://twitter.com/olamy | http://linkedin.com/in/olamy
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org
Re: [VOTE] Apache Maven Javadoc Plugin 2.9.1 (take 2)
Posted by Tony Chemit <ch...@codelutin.com>.
On Tue, 25 Jun 2013 22:52:31 +0200
"Robert Scholte" <rf...@apache.org> wrote:
+1
tony.
> +1
>
> Op Tue, 25 Jun 2013 08:46:21 +0200 schreef Ralph Goers
> <ra...@dslextreme.com>:
>
> > KEYS file - http://svn.apache.org/repos/asf/maven/project/KEYS
> >
> > svn tag -
> > http://svn.apache.org/repos/asf/maven/plugins/tags/maven-javadoc-plugin-2.9.1
> >
> > +1 on the release however it is odd that the Release Notes page is empty.
> >
> > Ralph
> >
> > On Jun 24, 2013, at 7:15 PM, sebb wrote:
> >
> >> On 25 June 2013 02:48, Olivier Lamy <ol...@apache.org> wrote:
> >>> Hi,
> >>> I'd like to release Apache Maven Javadoc Plugin 2.9.1.
> >>>
> >>> This version contains the code to fix the javadoc security issue after
> >>> the javadoc generation.
> >>>
> >>> Since previous try I fix the @since for applying the javadoc security
> >>> fix.
> >>>
> >>> We fixed 6 issues:
> >>> https://jira.codehaus.org/secure/ReleaseNote.jspa?version=18843&styleName=Text&projectId=11138&Create=Create
> >>>
> >>> Staging repository:
> >>> https://repository.apache.org/content/repositories/maven-066/
> >>
> >> The NOTICE file still has a spurious blank line at the start; it
> >> should be removed before the next release candidate.
> >>
> >>> Staging site:
> >>> http://maven.apache.org/plugins-archives/maven-javadoc-plugin-2.9.1/
> >>
> >> The release notes page is empty, as before.
> >> Given that this release has a vital change in it, that is very
> >> unfortunate.
> >>
> >> SVN tag and revision?
> >> Without them, how can reviewers determine the provenance of the source
> >> files in the source release?
> >>
> >> KEYS file?
> >> How can we check the sigs?
> >>
> >>> Vote open for 72H
> >>>
> >>> [+1]
> >>> [0]
> >>> [-1]
> >>>
> >>> Thanks,
> >>> --
> >>> Olivier Lamy
> >>> Ecetera: http://ecetera.com.au
> >>> http://twitter.com/olamy | http://linkedin.com/in/olamy
> >>>
> >>> ---------------------------------------------------------------------
> >>> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
> >>> For additional commands, e-mail: dev-help@maven.apache.org
> >>>
> >>
> >> ---------------------------------------------------------------------
> >> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
> >> For additional commands, e-mail: dev-help@maven.apache.org
> >>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
> For additional commands, e-mail: dev-help@maven.apache.org
>
--
Tony Chemit
--------------------
tél: +33 (0) 2 40 50 29 28
email: chemit@codelutin.com
http://www.codelutin.com
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org
Re: [VOTE] Apache Maven Javadoc Plugin 2.9.1 (take 2)
Posted by Robert Scholte <rf...@apache.org>.
+1
Op Tue, 25 Jun 2013 08:46:21 +0200 schreef Ralph Goers
<ra...@dslextreme.com>:
> KEYS file - http://svn.apache.org/repos/asf/maven/project/KEYS
>
> svn tag -
> http://svn.apache.org/repos/asf/maven/plugins/tags/maven-javadoc-plugin-2.9.1
>
> +1 on the release however it is odd that the Release Notes page is empty.
>
> Ralph
>
> On Jun 24, 2013, at 7:15 PM, sebb wrote:
>
>> On 25 June 2013 02:48, Olivier Lamy <ol...@apache.org> wrote:
>>> Hi,
>>> I'd like to release Apache Maven Javadoc Plugin 2.9.1.
>>>
>>> This version contains the code to fix the javadoc security issue after
>>> the javadoc generation.
>>>
>>> Since previous try I fix the @since for applying the javadoc security
>>> fix.
>>>
>>> We fixed 6 issues:
>>> https://jira.codehaus.org/secure/ReleaseNote.jspa?version=18843&styleName=Text&projectId=11138&Create=Create
>>>
>>> Staging repository:
>>> https://repository.apache.org/content/repositories/maven-066/
>>
>> The NOTICE file still has a spurious blank line at the start; it
>> should be removed before the next release candidate.
>>
>>> Staging site:
>>> http://maven.apache.org/plugins-archives/maven-javadoc-plugin-2.9.1/
>>
>> The release notes page is empty, as before.
>> Given that this release has a vital change in it, that is very
>> unfortunate.
>>
>> SVN tag and revision?
>> Without them, how can reviewers determine the provenance of the source
>> files in the source release?
>>
>> KEYS file?
>> How can we check the sigs?
>>
>>> Vote open for 72H
>>>
>>> [+1]
>>> [0]
>>> [-1]
>>>
>>> Thanks,
>>> --
>>> Olivier Lamy
>>> Ecetera: http://ecetera.com.au
>>> http://twitter.com/olamy | http://linkedin.com/in/olamy
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
>>> For additional commands, e-mail: dev-help@maven.apache.org
>>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
>> For additional commands, e-mail: dev-help@maven.apache.org
>>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org
Re: [VOTE] Apache Maven Javadoc Plugin 2.9.1 (take 2)
Posted by Olivier Lamy <ol...@apache.org>.
2013/6/25 sebb <se...@gmail.com>:
> On 25 June 2013 07:46, Ralph Goers <ra...@dslextreme.com> wrote:
>> KEYS file - http://svn.apache.org/repos/asf/maven/project/KEYS
>
> Thanks, the key id used for signing is in the file.
> Also the id is available from key servers.
>
>> svn tag - http://svn.apache.org/repos/asf/maven/plugins/tags/maven-javadoc-plugin-2.9.1
>
> Thanks, but that is insufficient as the tag has been recreated several times.
> I think the last one was r1496317
>
> If there is ever a question about how a certain file got into a
> release, it's vital to have traceability.
AFAIK svn log can give you informations ?
>
> The source archive agrees with the SVN tag, apart from some expected
> differences - e.g. DEPENDENCIES is only in the source archive
We use this release process for very long time now. Not sure this
thread is the good place to discuss that.
If you want to discuss that start an other thread but perso I'm happy
with the current process as it's very simple and doesn't require to
many manual actions required.
That's documented here:
http://maven.apache.org/developers/release/releasing.html.
>
>> +1 on the release however it is odd that the Release Notes page is empty.
>
> Please fix that on the actual site deploy.
I think it's fixed now see:
http://maven.apache.org/plugins-archives/maven-javadoc-plugin-2.9.1/jira-report.html
>
>> Ralph
>>
>> On Jun 24, 2013, at 7:15 PM, sebb wrote:
>>
>>> On 25 June 2013 02:48, Olivier Lamy <ol...@apache.org> wrote:
>>>> Hi,
>>>> I'd like to release Apache Maven Javadoc Plugin 2.9.1.
>>>>
>>>> This version contains the code to fix the javadoc security issue after
>>>> the javadoc generation.
>>>>
>>>> Since previous try I fix the @since for applying the javadoc security fix.
>>>>
>>>> We fixed 6 issues:
>>>> https://jira.codehaus.org/secure/ReleaseNote.jspa?version=18843&styleName=Text&projectId=11138&Create=Create
>>>>
>>>> Staging repository:
>>>> https://repository.apache.org/content/repositories/maven-066/
>>>
>>> The NOTICE file still has a spurious blank line at the start; it
>>> should be removed before the next release candidate.
>>>
>>>> Staging site: http://maven.apache.org/plugins-archives/maven-javadoc-plugin-2.9.1/
>>>
>>> The release notes page is empty, as before.
>>> Given that this release has a vital change in it, that is very unfortunate.
>>>
>>> SVN tag and revision?
>>> Without them, how can reviewers determine the provenance of the source
>>> files in the source release?
>>>
>>> KEYS file?
>>> How can we check the sigs?
>>>
>>>> Vote open for 72H
>>>>
>>>> [+1]
>>>> [0]
>>>> [-1]
>>>>
>>>> Thanks,
>>>> --
>>>> Olivier Lamy
>>>> Ecetera: http://ecetera.com.au
>>>> http://twitter.com/olamy | http://linkedin.com/in/olamy
>>>>
>>>> ---------------------------------------------------------------------
>>>> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
>>>> For additional commands, e-mail: dev-help@maven.apache.org
>>>>
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
>>> For additional commands, e-mail: dev-help@maven.apache.org
>>>
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
> For additional commands, e-mail: dev-help@maven.apache.org
>
--
Olivier Lamy
Ecetera: http://ecetera.com.au
http://twitter.com/olamy | http://linkedin.com/in/olamy
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org
Re: [VOTE] Apache Maven Javadoc Plugin 2.9.1 (take 2)
Posted by sebb <se...@gmail.com>.
On 25 June 2013 12:20, Fred Cooke <fr...@gmail.com> wrote:
> Absolutely, sebb! This is what I've been saying all along. If I had more
> time I'd vote -1 to every attempted release that used or intended to use
> respun tags/artifacts without revisions and checksums. So here's one for
> this one until rectified properly -1!
I quoted the tag and revision number earlier in this thread that I
believe are the correct ones.
It should really be done by the RM in the original e-mail, but at
least the mail archives have the information now.
> On Tue, Jun 25, 2013 at 12:28 PM, sebb <se...@gmail.com> wrote:
>
>> On 25 June 2013 07:46, Ralph Goers <ra...@dslextreme.com> wrote:
>> > KEYS file - http://svn.apache.org/repos/asf/maven/project/KEYS
>>
>> Thanks, the key id used for signing is in the file.
>> Also the id is available from key servers.
>>
>> > svn tag -
>> http://svn.apache.org/repos/asf/maven/plugins/tags/maven-javadoc-plugin-2.9.1
>>
>> Thanks, but that is insufficient as the tag has been recreated several
>> times.
>> I think the last one was r1496317
>>
>> If there is ever a question about how a certain file got into a
>> release, it's vital to have traceability.
>>
>> The source archive agrees with the SVN tag, apart from some expected
>> differences - e.g. DEPENDENCIES is only in the source archive
>>
>> > +1 on the release however it is odd that the Release Notes page is empty.
>>
>> Please fix that on the actual site deploy.
>>
>> > Ralph
>> >
>> > On Jun 24, 2013, at 7:15 PM, sebb wrote:
>> >
>> >> On 25 June 2013 02:48, Olivier Lamy <ol...@apache.org> wrote:
>> >>> Hi,
>> >>> I'd like to release Apache Maven Javadoc Plugin 2.9.1.
>> >>>
>> >>> This version contains the code to fix the javadoc security issue after
>> >>> the javadoc generation.
>> >>>
>> >>> Since previous try I fix the @since for applying the javadoc security
>> fix.
>> >>>
>> >>> We fixed 6 issues:
>> >>>
>> https://jira.codehaus.org/secure/ReleaseNote.jspa?version=18843&styleName=Text&projectId=11138&Create=Create
>> >>>
>> >>> Staging repository:
>> >>> https://repository.apache.org/content/repositories/maven-066/
>> >>
>> >> The NOTICE file still has a spurious blank line at the start; it
>> >> should be removed before the next release candidate.
>> >>
>> >>> Staging site:
>> http://maven.apache.org/plugins-archives/maven-javadoc-plugin-2.9.1/
>> >>
>> >> The release notes page is empty, as before.
>> >> Given that this release has a vital change in it, that is very
>> unfortunate.
>> >>
>> >> SVN tag and revision?
>> >> Without them, how can reviewers determine the provenance of the source
>> >> files in the source release?
>> >>
>> >> KEYS file?
>> >> How can we check the sigs?
>> >>
>> >>> Vote open for 72H
>> >>>
>> >>> [+1]
>> >>> [0]
>> >>> [-1]
>> >>>
>> >>> Thanks,
>> >>> --
>> >>> Olivier Lamy
>> >>> Ecetera: http://ecetera.com.au
>> >>> http://twitter.com/olamy | http://linkedin.com/in/olamy
>> >>>
>> >>> ---------------------------------------------------------------------
>> >>> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
>> >>> For additional commands, e-mail: dev-help@maven.apache.org
>> >>>
>> >>
>> >> ---------------------------------------------------------------------
>> >> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
>> >> For additional commands, e-mail: dev-help@maven.apache.org
>> >>
>> >
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
>> For additional commands, e-mail: dev-help@maven.apache.org
>>
>>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org
Re: [VOTE] Apache Maven Javadoc Plugin 2.9.1 (take 2)
Posted by Fred Cooke <fr...@gmail.com>.
Absolutely, sebb! This is what I've been saying all along. If I had more
time I'd vote -1 to every attempted release that used or intended to use
respun tags/artifacts without revisions and checksums. So here's one for
this one until rectified properly -1!
On Tue, Jun 25, 2013 at 12:28 PM, sebb <se...@gmail.com> wrote:
> On 25 June 2013 07:46, Ralph Goers <ra...@dslextreme.com> wrote:
> > KEYS file - http://svn.apache.org/repos/asf/maven/project/KEYS
>
> Thanks, the key id used for signing is in the file.
> Also the id is available from key servers.
>
> > svn tag -
> http://svn.apache.org/repos/asf/maven/plugins/tags/maven-javadoc-plugin-2.9.1
>
> Thanks, but that is insufficient as the tag has been recreated several
> times.
> I think the last one was r1496317
>
> If there is ever a question about how a certain file got into a
> release, it's vital to have traceability.
>
> The source archive agrees with the SVN tag, apart from some expected
> differences - e.g. DEPENDENCIES is only in the source archive
>
> > +1 on the release however it is odd that the Release Notes page is empty.
>
> Please fix that on the actual site deploy.
>
> > Ralph
> >
> > On Jun 24, 2013, at 7:15 PM, sebb wrote:
> >
> >> On 25 June 2013 02:48, Olivier Lamy <ol...@apache.org> wrote:
> >>> Hi,
> >>> I'd like to release Apache Maven Javadoc Plugin 2.9.1.
> >>>
> >>> This version contains the code to fix the javadoc security issue after
> >>> the javadoc generation.
> >>>
> >>> Since previous try I fix the @since for applying the javadoc security
> fix.
> >>>
> >>> We fixed 6 issues:
> >>>
> https://jira.codehaus.org/secure/ReleaseNote.jspa?version=18843&styleName=Text&projectId=11138&Create=Create
> >>>
> >>> Staging repository:
> >>> https://repository.apache.org/content/repositories/maven-066/
> >>
> >> The NOTICE file still has a spurious blank line at the start; it
> >> should be removed before the next release candidate.
> >>
> >>> Staging site:
> http://maven.apache.org/plugins-archives/maven-javadoc-plugin-2.9.1/
> >>
> >> The release notes page is empty, as before.
> >> Given that this release has a vital change in it, that is very
> unfortunate.
> >>
> >> SVN tag and revision?
> >> Without them, how can reviewers determine the provenance of the source
> >> files in the source release?
> >>
> >> KEYS file?
> >> How can we check the sigs?
> >>
> >>> Vote open for 72H
> >>>
> >>> [+1]
> >>> [0]
> >>> [-1]
> >>>
> >>> Thanks,
> >>> --
> >>> Olivier Lamy
> >>> Ecetera: http://ecetera.com.au
> >>> http://twitter.com/olamy | http://linkedin.com/in/olamy
> >>>
> >>> ---------------------------------------------------------------------
> >>> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
> >>> For additional commands, e-mail: dev-help@maven.apache.org
> >>>
> >>
> >> ---------------------------------------------------------------------
> >> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
> >> For additional commands, e-mail: dev-help@maven.apache.org
> >>
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
> For additional commands, e-mail: dev-help@maven.apache.org
>
>
Re: [VOTE] Apache Maven Javadoc Plugin 2.9.1 (take 2)
Posted by sebb <se...@gmail.com>.
On 25 June 2013 07:46, Ralph Goers <ra...@dslextreme.com> wrote:
> KEYS file - http://svn.apache.org/repos/asf/maven/project/KEYS
Thanks, the key id used for signing is in the file.
Also the id is available from key servers.
> svn tag - http://svn.apache.org/repos/asf/maven/plugins/tags/maven-javadoc-plugin-2.9.1
Thanks, but that is insufficient as the tag has been recreated several times.
I think the last one was r1496317
If there is ever a question about how a certain file got into a
release, it's vital to have traceability.
The source archive agrees with the SVN tag, apart from some expected
differences - e.g. DEPENDENCIES is only in the source archive
> +1 on the release however it is odd that the Release Notes page is empty.
Please fix that on the actual site deploy.
> Ralph
>
> On Jun 24, 2013, at 7:15 PM, sebb wrote:
>
>> On 25 June 2013 02:48, Olivier Lamy <ol...@apache.org> wrote:
>>> Hi,
>>> I'd like to release Apache Maven Javadoc Plugin 2.9.1.
>>>
>>> This version contains the code to fix the javadoc security issue after
>>> the javadoc generation.
>>>
>>> Since previous try I fix the @since for applying the javadoc security fix.
>>>
>>> We fixed 6 issues:
>>> https://jira.codehaus.org/secure/ReleaseNote.jspa?version=18843&styleName=Text&projectId=11138&Create=Create
>>>
>>> Staging repository:
>>> https://repository.apache.org/content/repositories/maven-066/
>>
>> The NOTICE file still has a spurious blank line at the start; it
>> should be removed before the next release candidate.
>>
>>> Staging site: http://maven.apache.org/plugins-archives/maven-javadoc-plugin-2.9.1/
>>
>> The release notes page is empty, as before.
>> Given that this release has a vital change in it, that is very unfortunate.
>>
>> SVN tag and revision?
>> Without them, how can reviewers determine the provenance of the source
>> files in the source release?
>>
>> KEYS file?
>> How can we check the sigs?
>>
>>> Vote open for 72H
>>>
>>> [+1]
>>> [0]
>>> [-1]
>>>
>>> Thanks,
>>> --
>>> Olivier Lamy
>>> Ecetera: http://ecetera.com.au
>>> http://twitter.com/olamy | http://linkedin.com/in/olamy
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
>>> For additional commands, e-mail: dev-help@maven.apache.org
>>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
>> For additional commands, e-mail: dev-help@maven.apache.org
>>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org
Re: [VOTE] Apache Maven Javadoc Plugin 2.9.1 (take 2)
Posted by Ralph Goers <ra...@dslextreme.com>.
KEYS file - http://svn.apache.org/repos/asf/maven/project/KEYS
svn tag - http://svn.apache.org/repos/asf/maven/plugins/tags/maven-javadoc-plugin-2.9.1
+1 on the release however it is odd that the Release Notes page is empty.
Ralph
On Jun 24, 2013, at 7:15 PM, sebb wrote:
> On 25 June 2013 02:48, Olivier Lamy <ol...@apache.org> wrote:
>> Hi,
>> I'd like to release Apache Maven Javadoc Plugin 2.9.1.
>>
>> This version contains the code to fix the javadoc security issue after
>> the javadoc generation.
>>
>> Since previous try I fix the @since for applying the javadoc security fix.
>>
>> We fixed 6 issues:
>> https://jira.codehaus.org/secure/ReleaseNote.jspa?version=18843&styleName=Text&projectId=11138&Create=Create
>>
>> Staging repository:
>> https://repository.apache.org/content/repositories/maven-066/
>
> The NOTICE file still has a spurious blank line at the start; it
> should be removed before the next release candidate.
>
>> Staging site: http://maven.apache.org/plugins-archives/maven-javadoc-plugin-2.9.1/
>
> The release notes page is empty, as before.
> Given that this release has a vital change in it, that is very unfortunate.
>
> SVN tag and revision?
> Without them, how can reviewers determine the provenance of the source
> files in the source release?
>
> KEYS file?
> How can we check the sigs?
>
>> Vote open for 72H
>>
>> [+1]
>> [0]
>> [-1]
>>
>> Thanks,
>> --
>> Olivier Lamy
>> Ecetera: http://ecetera.com.au
>> http://twitter.com/olamy | http://linkedin.com/in/olamy
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
>> For additional commands, e-mail: dev-help@maven.apache.org
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
> For additional commands, e-mail: dev-help@maven.apache.org
>
Re: [VOTE] Apache Maven Javadoc Plugin 2.9.1 (take 2)
Posted by Kristian Rosenvold <kr...@gmail.com>.
+1
Sources at https://repository.apache.org/content/repositories/maven-066/org/apache/maven/plugins/maven-javadoc-plugin/2.9.1/maven-javadoc-plugin-2.9.1-sources.jar,
based on r1496317
Kristian
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org
Re: [VOTE] Apache Maven Javadoc Plugin 2.9.1 (take 2)
Posted by sebb <se...@gmail.com>.
On 25 June 2013 02:48, Olivier Lamy <ol...@apache.org> wrote:
> Hi,
> I'd like to release Apache Maven Javadoc Plugin 2.9.1.
>
> This version contains the code to fix the javadoc security issue after
> the javadoc generation.
>
> Since previous try I fix the @since for applying the javadoc security fix.
>
> We fixed 6 issues:
> https://jira.codehaus.org/secure/ReleaseNote.jspa?version=18843&styleName=Text&projectId=11138&Create=Create
>
> Staging repository:
> https://repository.apache.org/content/repositories/maven-066/
The NOTICE file still has a spurious blank line at the start; it
should be removed before the next release candidate.
> Staging site: http://maven.apache.org/plugins-archives/maven-javadoc-plugin-2.9.1/
The release notes page is empty, as before.
Given that this release has a vital change in it, that is very unfortunate.
SVN tag and revision?
Without them, how can reviewers determine the provenance of the source
files in the source release?
KEYS file?
How can we check the sigs?
> Vote open for 72H
>
> [+1]
> [0]
> [-1]
>
> Thanks,
> --
> Olivier Lamy
> Ecetera: http://ecetera.com.au
> http://twitter.com/olamy | http://linkedin.com/in/olamy
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
> For additional commands, e-mail: dev-help@maven.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org
Re: [VOTE] Apache Maven Javadoc Plugin 2.9.1 (take 2)
Posted by Hervé BOUTEMY <he...@free.fr>.
+1
Regards,
Hervé
Le mardi 25 juin 2013 11:48:55 Olivier Lamy a écrit :
> Hi,
> I'd like to release Apache Maven Javadoc Plugin 2.9.1.
>
> This version contains the code to fix the javadoc security issue after
> the javadoc generation.
>
> Since previous try I fix the @since for applying the javadoc security fix.
>
> We fixed 6 issues:
> https://jira.codehaus.org/secure/ReleaseNote.jspa?version=18843&styleName=Te
> xt&projectId=11138&Create=Create
>
> Staging repository:
> https://repository.apache.org/content/repositories/maven-066/
>
> Staging site:
> http://maven.apache.org/plugins-archives/maven-javadoc-plugin-2.9.1/
>
> Vote open for 72H
>
> [+1]
> [0]
> [-1]
>
> Thanks,
> --
> Olivier Lamy
> Ecetera: http://ecetera.com.au
> http://twitter.com/olamy | http://linkedin.com/in/olamy
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
> For additional commands, e-mail: dev-help@maven.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@maven.apache.org
For additional commands, e-mail: dev-help@maven.apache.org