You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@wicket.apache.org by Andrea Del Bene <an...@gmail.com> on 2020/03/31 18:56:41 UTC
[VOTE] Release Apache Wicket 9.0.0-M5 TAKE 2
This is a vote to release Apache Wicket 9.0.0-M5
Please download the source distributions found in our staging area
linked below.
I have included the signatures for both the source archives. This vote
lasts for 72 hours minimum.
[ ] Yes, release Apache Wicket 9.0.0-M5
[ ] No, don't release Apache Wicket 9.0.0-M5, because ...
Distributions, changelog, keys and signatures can be found at:
https://dist.apache.org/repos/dist/dev/wicket/9.0.0-M5
Staging repository:
https://repository.apache.org/content/repositories/orgapachewicket-1140/
The binaries are available in the above link, as are a staging
repository for Maven. Typically the vote is on the source, but should
you find a problem with one of the binaries, please let me know, I can
re-roll them some way or the other.
Staging git repository data:
Repository: git@github.com:bitstorm/wicket.git
Branch: build/wicket-9.0.0-M5
Release tag: rel/wicket-9.0.0-M5
========================================================================
The signatures for the source release artefacts:
Signature for apache-wicket-9.0.0-M5.zip:
-----BEGIN PGP SIGNATURE-----
iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT
VuEPnQ/9Gc7bH7Y/s6PZceoLV0t9gkhtsJaC8jhuZhOWCqj1Uu/3VfJPRYma2eSs
z7XpgU1+x8qTMMUm27Z0HWMjUrMOevH5B0w4z9bb3yq9kmgwHGqH0o8lenjlZBAB
sKQKKNFcdEP4uzIOW5B6TWa9MHzkwQjKS2SYMSNfRsZps7p0pHylcb2S9QvEB/7R
ajSaNvF8C9J1vjkm8Qcutj8SUa+CwxuySe6rhCzj4VjslNMNTxUlyZxeicTipL3K
dB2UkG1ziTcHsgYLmDXOyta4eloMSGC+X/8UFNJsob7KkdQxqT64VW++8VQ166ND
UOkDZBPwTRislVf6c1cnLVZg+cIdNeNK9i2KDEIIChLhPStBpA9MVnaKAQjIYC7O
EZcYzliQmr1dVIx/6XakgaCsIRifkkPyEkCIdg0fnMSoaKs4qc5Q0p1IXiWO6vJP
mpnrtC7WzQ9ThnvQek6A1kz3ls3QlE9fqtDUmvE+XE/9E4Xko9ufe2tscPZ4Dr1b
RUCRix+hmtisRWCjcTZ9oqxtzB+vxDYsuVAo0Q1+ckSf/xSIlzrtfidtOgifft0v
FMKOlplmBzSmcmZrTJ2/DgpNgvX+tJJaBIEXUrXgFyuf1bRJBiwse9x/EGpBRcjC
3HlOcXG3o/W+SrVutxez49kt3Eaksa2AI+CYUvDJjl7wgHA3J9A=
=fMOR
-----END PGP SIGNATURE-----
Signature for apache-wicket-9.0.0-M5.tar.gz:
-----BEGIN PGP SIGNATURE-----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=G/ZG
-----END PGP SIGNATURE-----
========================================================================
CHANGELOG for 9.0.0-M5:
** Bug
* [WICKET-6715] - FileUpload class should not implement IClusterable
* [WICKET-6745] - CSP: inline JS in server and client time response
filters
* [WICKET-6746] - HttpsMapper cannot deal with resources over
websockets
* [WICKET-6752] - Some dependencies contain CVEs
* [WICKET-6753] - res/modal.js using aria-labelledby where it
should be using aria-label
* [WICKET-6754] - Iteration stops with nested containers
* [WICKET-6755] - MockServletContext does not decode real path
* [WICKET-6756] - Avoid URL.getFile() when actually expecting paths.
* [WICKET-6757] - Avoid URL.getFile during mime type detection.
* [WICKET-6758] - NPE in AbstractWebSocketProcessor after session
times out
** New Feature
* [WICKET-6727] - Configurable CSP
* [WICKET-6729] - allow adding IHeaderResponseDecorator without
replacing all others
* [WICKET-6730] - Global access to secure random data
** Improvement
* [WICKET-6724] - CSP: Inline Javascript in AjaxLink
* [WICKET-6725] - CSP: display:none in Component.renderPlaceholderTag
* [WICKET-6726] - CSP: inline styling and js in Form submitbutton
handling
* [WICKET-6731] - CSP: inline JS in SubmitLink
* [WICKET-6732] - CSP: inline JS in Link and ExternalLink
* [WICKET-6733] - CSP: enable by default
* [WICKET-6735] - CSP: inline styling in
FormComponentFeedbackBorder/Indicator
* [WICKET-6736] - CSP: Inline styling in BrowserInfoForm
* [WICKET-6737] - CSP: violations in examples
* [WICKET-6738] - CSP: inline styling in UploadProgressBar
* [WICKET-6739] - CSP: inline JS in Palette
* [WICKET-6740] - CSP: inline JS in Button
* [WICKET-6741] - CSP: inline JS in FormComponentUpdatingBehavior
* [WICKET-6749] - CSP: Inline styling in ExceptionErrorPage.html
* [WICKET-6750] - add capability to cancel ongoing AJAX requests
from client side
* [WICKET-6759] - Support disabling error notification for websockets
* [WICKET-6760] - Nested Form placeholder should preserve tag name
* [WICKET-6761] - Support multiple connections to the same
websocket resource from a single session
* [WICKET-6762] - Support manual initialization of websocket
connections
** Task
* [WICKET-6687] - Cleanup the code from attribute inline styles and
attribute inline scripts
* [WICKET-6747] - Document CSP in user guide and migration guide
* [WICKET-6751] - Support creating custom page access
synchronization strategies
Re: [VOTE] Release Apache Wicket 9.0.0-M5 TAKE 2
Posted by Andrea Del Bene <an...@gmail.com>.
This vote is cancelled. I will start a new one shortly.
On 4/2/20 10:38 AM, Andrea Del Bene wrote:
> Yes at this point I think it's safer starting a new vote.
>
> On 4/2/20 9:33 AM, Maxim Solodovnik wrote:
>> I see no other way :(
>>
>> On Thu, 2 Apr 2020 at 14:29, Andrea Del Bene <an...@gmail.com>
>> wrote:
>>
>>> On 4/1/20 5:39 AM, Martin Grigorov wrote:
>>>> Hi,
>>>>
>>>> The CHANGELOG should not contain
>>>> https://issues.apache.org/jira/browse/WICKET-6750 since it is not
>>> Resolved.
>>>
>>> I don't know how it managed to go into the CHANGELOG. I've fixed it at
>>> code base level but it requires a to start again a new release to fix
>>> also distribution archives.
>>>
>>> Should we cancel this vote?
>>>
>>>> On Tue, Mar 31, 2020 at 9:56 PM Andrea Del Bene <an...@gmail.com>
>>>> wrote:
>>>>
>>>>> This is a vote to release Apache Wicket 9.0.0-M5
>>>>>
>>>>> Please download the source distributions found in our staging area
>>>>> linked below.
>>>>>
>>>>> I have included the signatures for both the source archives. This
>>>>> vote
>>>>> lasts for 72 hours minimum.
>>>>>
>>>>> [ ] Yes, release Apache Wicket 9.0.0-M5
>>>>> [ ] No, don't release Apache Wicket 9.0.0-M5, because ...
>>>>>
>>>>> Distributions, changelog, keys and signatures can be found at:
>>>>>
>>>>> https://dist.apache.org/repos/dist/dev/wicket/9.0.0-M5
>>>>>
>>>>> Staging repository:
>>>>>
>>>>>
>>> https://repository.apache.org/content/repositories/orgapachewicket-1140/
>>>
>>>>> The binaries are available in the above link, as are a staging
>>>>> repository for Maven. Typically the vote is on the source, but should
>>>>> you find a problem with one of the binaries, please let me know, I
>>>>> can
>>>>> re-roll them some way or the other.
>>>>>
>>>>> Staging git repository data:
>>>>>
>>>>> Repository: git@github.com:bitstorm/wicket.git
>>>>> Branch: build/wicket-9.0.0-M5
>>>>> Release tag: rel/wicket-9.0.0-M5
>>>>>
>>>>>
>>>>> ========================================================================
>>>>>
>>>>>
>>>>> The signatures for the source release artefacts:
>>>>>
>>>>>
>>>>> Signature for apache-wicket-9.0.0-M5.zip:
>>>>>
>>>>> -----BEGIN PGP SIGNATURE-----
>>>>>
>>>>> iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT
>>>>> VuEPnQ/9Gc7bH7Y/s6PZceoLV0t9gkhtsJaC8jhuZhOWCqj1Uu/3VfJPRYma2eSs
>>>>> z7XpgU1+x8qTMMUm27Z0HWMjUrMOevH5B0w4z9bb3yq9kmgwHGqH0o8lenjlZBAB
>>>>> sKQKKNFcdEP4uzIOW5B6TWa9MHzkwQjKS2SYMSNfRsZps7p0pHylcb2S9QvEB/7R
>>>>> ajSaNvF8C9J1vjkm8Qcutj8SUa+CwxuySe6rhCzj4VjslNMNTxUlyZxeicTipL3K
>>>>> dB2UkG1ziTcHsgYLmDXOyta4eloMSGC+X/8UFNJsob7KkdQxqT64VW++8VQ166ND
>>>>> UOkDZBPwTRislVf6c1cnLVZg+cIdNeNK9i2KDEIIChLhPStBpA9MVnaKAQjIYC7O
>>>>> EZcYzliQmr1dVIx/6XakgaCsIRifkkPyEkCIdg0fnMSoaKs4qc5Q0p1IXiWO6vJP
>>>>> mpnrtC7WzQ9ThnvQek6A1kz3ls3QlE9fqtDUmvE+XE/9E4Xko9ufe2tscPZ4Dr1b
>>>>> RUCRix+hmtisRWCjcTZ9oqxtzB+vxDYsuVAo0Q1+ckSf/xSIlzrtfidtOgifft0v
>>>>> FMKOlplmBzSmcmZrTJ2/DgpNgvX+tJJaBIEXUrXgFyuf1bRJBiwse9x/EGpBRcjC
>>>>> 3HlOcXG3o/W+SrVutxez49kt3Eaksa2AI+CYUvDJjl7wgHA3J9A=
>>>>> =fMOR
>>>>> -----END PGP SIGNATURE-----
>>>>>
>>>>> Signature for apache-wicket-9.0.0-M5.tar.gz:
>>>>>
>>>>> -----BEGIN PGP SIGNATURE-----
>>>>>
>>>>> iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT
>>>>> VuFP/A/7BPiVX8FkifrsxVMcD7jgbiCEGTxO6adDIoZNPYA9vrapE3XCEVY9qyaW
>>>>> vHjqs/qFRtnhZY8dLcC6GKX5nnvIP0PoFvfw48yMx6/xidNoNnNrcxDzg4fpB3uW
>>>>> KzaqKbHb/tH7ndTsB/EF5CRejUxuQXYqiUIYDToHQwc/XT6to7TUpPL7FM/lEfUk
>>>>> xSdCK4EhsD1U4XvhZYKL7R1SfhyC5tvmm609UXLxFli7DBn5Sq/mcPlbA+BWbQQF
>>>>> GtLxFwYTrYONPfSyABUzi7CkKgeSXoK3ffnQlDqc5L8/cUYJQurU55jP5GP39Urk
>>>>> wGv3D2/glxEIeDUN77U0PxQzHDULwCXlX2Ng+npbUTS7COc8wTSpYFH+WzeyVATU
>>>>> RO5WIDG0RF1/y9CWm3S0gdXfeWSO0bP1VWX7MOeefVBm1c6vgHYdHctmwiHX9owB
>>>>> 4wfKqT9LbKMuaMY/A9ZpGt24X6N7ujAVMEIBJ+UGF2sSCnMNJK5XCSgnUkMNZwex
>>>>> 6h+rM6NUMl3nc8z6FEXPLvdJDdtx73O0LtL0REV5bINlIpRmXqMvTF1RvdhKR0jl
>>>>> vWFH5xBzW7/sKmJ5zQkh/Nw+VG9l0qewqwBh5sOHzWZXROqsVvrDXvGwXIOJKNMW
>>>>> 2881MlEJLLB9V59N7PIC7shxKl300W36Z1fIRSp3c9DiEoC4Y+E=
>>>>> =G/ZG
>>>>> -----END PGP SIGNATURE-----
>>>>>
>>>>> ========================================================================
>>>>>
>>>>>
>>>>> CHANGELOG for 9.0.0-M5:
>>>>>
>>>>> ** Bug
>>>>>
>>>>> * [WICKET-6715] - FileUpload class should not implement
>>> IClusterable
>>>>> * [WICKET-6745] - CSP: inline JS in server and client time
>>> response
>>>>> filters
>>>>> * [WICKET-6746] - HttpsMapper cannot deal with resources over
>>>>> websockets
>>>>> * [WICKET-6752] - Some dependencies contain CVEs
>>>>> * [WICKET-6753] - res/modal.js using aria-labelledby where it
>>>>> should be using aria-label
>>>>> * [WICKET-6754] - Iteration stops with nested containers
>>>>> * [WICKET-6755] - MockServletContext does not decode real path
>>>>> * [WICKET-6756] - Avoid URL.getFile() when actually expecting
>>> paths.
>>>>> * [WICKET-6757] - Avoid URL.getFile during mime type
>>>>> detection.
>>>>> * [WICKET-6758] - NPE in AbstractWebSocketProcessor after
>>>>> session
>>>>> times out
>>>>>
>>>>> ** New Feature
>>>>>
>>>>> * [WICKET-6727] - Configurable CSP
>>>>> * [WICKET-6729] - allow adding IHeaderResponseDecorator
>>>>> without
>>>>> replacing all others
>>>>> * [WICKET-6730] - Global access to secure random data
>>>>>
>>>>> ** Improvement
>>>>>
>>>>> * [WICKET-6724] - CSP: Inline Javascript in AjaxLink
>>>>> * [WICKET-6725] - CSP: display:none in
>>> Component.renderPlaceholderTag
>>>>> * [WICKET-6726] - CSP: inline styling and js in Form
>>>>> submitbutton
>>>>> handling
>>>>> * [WICKET-6731] - CSP: inline JS in SubmitLink
>>>>> * [WICKET-6732] - CSP: inline JS in Link and ExternalLink
>>>>> * [WICKET-6733] - CSP: enable by default
>>>>> * [WICKET-6735] - CSP: inline styling in
>>>>> FormComponentFeedbackBorder/Indicator
>>>>> * [WICKET-6736] - CSP: Inline styling in BrowserInfoForm
>>>>> * [WICKET-6737] - CSP: violations in examples
>>>>> * [WICKET-6738] - CSP: inline styling in UploadProgressBar
>>>>> * [WICKET-6739] - CSP: inline JS in Palette
>>>>> * [WICKET-6740] - CSP: inline JS in Button
>>>>> * [WICKET-6741] - CSP: inline JS in
>>>>> FormComponentUpdatingBehavior
>>>>> * [WICKET-6749] - CSP: Inline styling in
>>>>> ExceptionErrorPage.html
>>>>> * [WICKET-6750] - add capability to cancel ongoing AJAX
>>>>> requests
>>>>> from client side
>>>>> * [WICKET-6759] - Support disabling error notification for
>>> websockets
>>>>> * [WICKET-6760] - Nested Form placeholder should preserve
>>>>> tag name
>>>>> * [WICKET-6761] - Support multiple connections to the same
>>>>> websocket resource from a single session
>>>>> * [WICKET-6762] - Support manual initialization of websocket
>>>>> connections
>>>>>
>>>>> ** Task
>>>>>
>>>>> * [WICKET-6687] - Cleanup the code from attribute inline
>>>>> styles
>>> and
>>>>> attribute inline scripts
>>>>> * [WICKET-6747] - Document CSP in user guide and migration
>>>>> guide
>>>>> * [WICKET-6751] - Support creating custom page access
>>>>> synchronization strategies
>>>>>
>>>>>
>>
Re: [VOTE] Release Apache Wicket 9.0.0-M5 TAKE 2
Posted by Andrea Del Bene <an...@gmail.com>.
Yes at this point I think it's safer starting a new vote.
On 4/2/20 9:33 AM, Maxim Solodovnik wrote:
> I see no other way :(
>
> On Thu, 2 Apr 2020 at 14:29, Andrea Del Bene <an...@gmail.com> wrote:
>
>> On 4/1/20 5:39 AM, Martin Grigorov wrote:
>>> Hi,
>>>
>>> The CHANGELOG should not contain
>>> https://issues.apache.org/jira/browse/WICKET-6750 since it is not
>> Resolved.
>>
>> I don't know how it managed to go into the CHANGELOG. I've fixed it at
>> code base level but it requires a to start again a new release to fix
>> also distribution archives.
>>
>> Should we cancel this vote?
>>
>>> On Tue, Mar 31, 2020 at 9:56 PM Andrea Del Bene <an...@gmail.com>
>>> wrote:
>>>
>>>> This is a vote to release Apache Wicket 9.0.0-M5
>>>>
>>>> Please download the source distributions found in our staging area
>>>> linked below.
>>>>
>>>> I have included the signatures for both the source archives. This vote
>>>> lasts for 72 hours minimum.
>>>>
>>>> [ ] Yes, release Apache Wicket 9.0.0-M5
>>>> [ ] No, don't release Apache Wicket 9.0.0-M5, because ...
>>>>
>>>> Distributions, changelog, keys and signatures can be found at:
>>>>
>>>> https://dist.apache.org/repos/dist/dev/wicket/9.0.0-M5
>>>>
>>>> Staging repository:
>>>>
>>>>
>> https://repository.apache.org/content/repositories/orgapachewicket-1140/
>>>> The binaries are available in the above link, as are a staging
>>>> repository for Maven. Typically the vote is on the source, but should
>>>> you find a problem with one of the binaries, please let me know, I can
>>>> re-roll them some way or the other.
>>>>
>>>> Staging git repository data:
>>>>
>>>> Repository: git@github.com:bitstorm/wicket.git
>>>> Branch: build/wicket-9.0.0-M5
>>>> Release tag: rel/wicket-9.0.0-M5
>>>>
>>>>
>>>> ========================================================================
>>>>
>>>> The signatures for the source release artefacts:
>>>>
>>>>
>>>> Signature for apache-wicket-9.0.0-M5.zip:
>>>>
>>>> -----BEGIN PGP SIGNATURE-----
>>>>
>>>> iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT
>>>> VuEPnQ/9Gc7bH7Y/s6PZceoLV0t9gkhtsJaC8jhuZhOWCqj1Uu/3VfJPRYma2eSs
>>>> z7XpgU1+x8qTMMUm27Z0HWMjUrMOevH5B0w4z9bb3yq9kmgwHGqH0o8lenjlZBAB
>>>> sKQKKNFcdEP4uzIOW5B6TWa9MHzkwQjKS2SYMSNfRsZps7p0pHylcb2S9QvEB/7R
>>>> ajSaNvF8C9J1vjkm8Qcutj8SUa+CwxuySe6rhCzj4VjslNMNTxUlyZxeicTipL3K
>>>> dB2UkG1ziTcHsgYLmDXOyta4eloMSGC+X/8UFNJsob7KkdQxqT64VW++8VQ166ND
>>>> UOkDZBPwTRislVf6c1cnLVZg+cIdNeNK9i2KDEIIChLhPStBpA9MVnaKAQjIYC7O
>>>> EZcYzliQmr1dVIx/6XakgaCsIRifkkPyEkCIdg0fnMSoaKs4qc5Q0p1IXiWO6vJP
>>>> mpnrtC7WzQ9ThnvQek6A1kz3ls3QlE9fqtDUmvE+XE/9E4Xko9ufe2tscPZ4Dr1b
>>>> RUCRix+hmtisRWCjcTZ9oqxtzB+vxDYsuVAo0Q1+ckSf/xSIlzrtfidtOgifft0v
>>>> FMKOlplmBzSmcmZrTJ2/DgpNgvX+tJJaBIEXUrXgFyuf1bRJBiwse9x/EGpBRcjC
>>>> 3HlOcXG3o/W+SrVutxez49kt3Eaksa2AI+CYUvDJjl7wgHA3J9A=
>>>> =fMOR
>>>> -----END PGP SIGNATURE-----
>>>>
>>>> Signature for apache-wicket-9.0.0-M5.tar.gz:
>>>>
>>>> -----BEGIN PGP SIGNATURE-----
>>>>
>>>> iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT
>>>> VuFP/A/7BPiVX8FkifrsxVMcD7jgbiCEGTxO6adDIoZNPYA9vrapE3XCEVY9qyaW
>>>> vHjqs/qFRtnhZY8dLcC6GKX5nnvIP0PoFvfw48yMx6/xidNoNnNrcxDzg4fpB3uW
>>>> KzaqKbHb/tH7ndTsB/EF5CRejUxuQXYqiUIYDToHQwc/XT6to7TUpPL7FM/lEfUk
>>>> xSdCK4EhsD1U4XvhZYKL7R1SfhyC5tvmm609UXLxFli7DBn5Sq/mcPlbA+BWbQQF
>>>> GtLxFwYTrYONPfSyABUzi7CkKgeSXoK3ffnQlDqc5L8/cUYJQurU55jP5GP39Urk
>>>> wGv3D2/glxEIeDUN77U0PxQzHDULwCXlX2Ng+npbUTS7COc8wTSpYFH+WzeyVATU
>>>> RO5WIDG0RF1/y9CWm3S0gdXfeWSO0bP1VWX7MOeefVBm1c6vgHYdHctmwiHX9owB
>>>> 4wfKqT9LbKMuaMY/A9ZpGt24X6N7ujAVMEIBJ+UGF2sSCnMNJK5XCSgnUkMNZwex
>>>> 6h+rM6NUMl3nc8z6FEXPLvdJDdtx73O0LtL0REV5bINlIpRmXqMvTF1RvdhKR0jl
>>>> vWFH5xBzW7/sKmJ5zQkh/Nw+VG9l0qewqwBh5sOHzWZXROqsVvrDXvGwXIOJKNMW
>>>> 2881MlEJLLB9V59N7PIC7shxKl300W36Z1fIRSp3c9DiEoC4Y+E=
>>>> =G/ZG
>>>> -----END PGP SIGNATURE-----
>>>>
>>>> ========================================================================
>>>>
>>>> CHANGELOG for 9.0.0-M5:
>>>>
>>>> ** Bug
>>>>
>>>> * [WICKET-6715] - FileUpload class should not implement
>> IClusterable
>>>> * [WICKET-6745] - CSP: inline JS in server and client time
>> response
>>>> filters
>>>> * [WICKET-6746] - HttpsMapper cannot deal with resources over
>>>> websockets
>>>> * [WICKET-6752] - Some dependencies contain CVEs
>>>> * [WICKET-6753] - res/modal.js using aria-labelledby where it
>>>> should be using aria-label
>>>> * [WICKET-6754] - Iteration stops with nested containers
>>>> * [WICKET-6755] - MockServletContext does not decode real path
>>>> * [WICKET-6756] - Avoid URL.getFile() when actually expecting
>> paths.
>>>> * [WICKET-6757] - Avoid URL.getFile during mime type detection.
>>>> * [WICKET-6758] - NPE in AbstractWebSocketProcessor after session
>>>> times out
>>>>
>>>> ** New Feature
>>>>
>>>> * [WICKET-6727] - Configurable CSP
>>>> * [WICKET-6729] - allow adding IHeaderResponseDecorator without
>>>> replacing all others
>>>> * [WICKET-6730] - Global access to secure random data
>>>>
>>>> ** Improvement
>>>>
>>>> * [WICKET-6724] - CSP: Inline Javascript in AjaxLink
>>>> * [WICKET-6725] - CSP: display:none in
>> Component.renderPlaceholderTag
>>>> * [WICKET-6726] - CSP: inline styling and js in Form submitbutton
>>>> handling
>>>> * [WICKET-6731] - CSP: inline JS in SubmitLink
>>>> * [WICKET-6732] - CSP: inline JS in Link and ExternalLink
>>>> * [WICKET-6733] - CSP: enable by default
>>>> * [WICKET-6735] - CSP: inline styling in
>>>> FormComponentFeedbackBorder/Indicator
>>>> * [WICKET-6736] - CSP: Inline styling in BrowserInfoForm
>>>> * [WICKET-6737] - CSP: violations in examples
>>>> * [WICKET-6738] - CSP: inline styling in UploadProgressBar
>>>> * [WICKET-6739] - CSP: inline JS in Palette
>>>> * [WICKET-6740] - CSP: inline JS in Button
>>>> * [WICKET-6741] - CSP: inline JS in FormComponentUpdatingBehavior
>>>> * [WICKET-6749] - CSP: Inline styling in ExceptionErrorPage.html
>>>> * [WICKET-6750] - add capability to cancel ongoing AJAX requests
>>>> from client side
>>>> * [WICKET-6759] - Support disabling error notification for
>> websockets
>>>> * [WICKET-6760] - Nested Form placeholder should preserve tag name
>>>> * [WICKET-6761] - Support multiple connections to the same
>>>> websocket resource from a single session
>>>> * [WICKET-6762] - Support manual initialization of websocket
>>>> connections
>>>>
>>>> ** Task
>>>>
>>>> * [WICKET-6687] - Cleanup the code from attribute inline styles
>> and
>>>> attribute inline scripts
>>>> * [WICKET-6747] - Document CSP in user guide and migration guide
>>>> * [WICKET-6751] - Support creating custom page access
>>>> synchronization strategies
>>>>
>>>>
>
Re: [VOTE] Release Apache Wicket 9.0.0-M5 TAKE 2
Posted by Maxim Solodovnik <so...@gmail.com>.
I see no other way :(
On Thu, 2 Apr 2020 at 14:29, Andrea Del Bene <an...@gmail.com> wrote:
>
> On 4/1/20 5:39 AM, Martin Grigorov wrote:
> > Hi,
> >
> > The CHANGELOG should not contain
> > https://issues.apache.org/jira/browse/WICKET-6750 since it is not
> Resolved.
>
> I don't know how it managed to go into the CHANGELOG. I've fixed it at
> code base level but it requires a to start again a new release to fix
> also distribution archives.
>
> Should we cancel this vote?
>
> > On Tue, Mar 31, 2020 at 9:56 PM Andrea Del Bene <an...@gmail.com>
> > wrote:
> >
> >> This is a vote to release Apache Wicket 9.0.0-M5
> >>
> >> Please download the source distributions found in our staging area
> >> linked below.
> >>
> >> I have included the signatures for both the source archives. This vote
> >> lasts for 72 hours minimum.
> >>
> >> [ ] Yes, release Apache Wicket 9.0.0-M5
> >> [ ] No, don't release Apache Wicket 9.0.0-M5, because ...
> >>
> >> Distributions, changelog, keys and signatures can be found at:
> >>
> >> https://dist.apache.org/repos/dist/dev/wicket/9.0.0-M5
> >>
> >> Staging repository:
> >>
> >>
> https://repository.apache.org/content/repositories/orgapachewicket-1140/
> >>
> >> The binaries are available in the above link, as are a staging
> >> repository for Maven. Typically the vote is on the source, but should
> >> you find a problem with one of the binaries, please let me know, I can
> >> re-roll them some way or the other.
> >>
> >> Staging git repository data:
> >>
> >> Repository: git@github.com:bitstorm/wicket.git
> >> Branch: build/wicket-9.0.0-M5
> >> Release tag: rel/wicket-9.0.0-M5
> >>
> >>
> >> ========================================================================
> >>
> >> The signatures for the source release artefacts:
> >>
> >>
> >> Signature for apache-wicket-9.0.0-M5.zip:
> >>
> >> -----BEGIN PGP SIGNATURE-----
> >>
> >> iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT
> >> VuEPnQ/9Gc7bH7Y/s6PZceoLV0t9gkhtsJaC8jhuZhOWCqj1Uu/3VfJPRYma2eSs
> >> z7XpgU1+x8qTMMUm27Z0HWMjUrMOevH5B0w4z9bb3yq9kmgwHGqH0o8lenjlZBAB
> >> sKQKKNFcdEP4uzIOW5B6TWa9MHzkwQjKS2SYMSNfRsZps7p0pHylcb2S9QvEB/7R
> >> ajSaNvF8C9J1vjkm8Qcutj8SUa+CwxuySe6rhCzj4VjslNMNTxUlyZxeicTipL3K
> >> dB2UkG1ziTcHsgYLmDXOyta4eloMSGC+X/8UFNJsob7KkdQxqT64VW++8VQ166ND
> >> UOkDZBPwTRislVf6c1cnLVZg+cIdNeNK9i2KDEIIChLhPStBpA9MVnaKAQjIYC7O
> >> EZcYzliQmr1dVIx/6XakgaCsIRifkkPyEkCIdg0fnMSoaKs4qc5Q0p1IXiWO6vJP
> >> mpnrtC7WzQ9ThnvQek6A1kz3ls3QlE9fqtDUmvE+XE/9E4Xko9ufe2tscPZ4Dr1b
> >> RUCRix+hmtisRWCjcTZ9oqxtzB+vxDYsuVAo0Q1+ckSf/xSIlzrtfidtOgifft0v
> >> FMKOlplmBzSmcmZrTJ2/DgpNgvX+tJJaBIEXUrXgFyuf1bRJBiwse9x/EGpBRcjC
> >> 3HlOcXG3o/W+SrVutxez49kt3Eaksa2AI+CYUvDJjl7wgHA3J9A=
> >> =fMOR
> >> -----END PGP SIGNATURE-----
> >>
> >> Signature for apache-wicket-9.0.0-M5.tar.gz:
> >>
> >> -----BEGIN PGP SIGNATURE-----
> >>
> >> iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT
> >> VuFP/A/7BPiVX8FkifrsxVMcD7jgbiCEGTxO6adDIoZNPYA9vrapE3XCEVY9qyaW
> >> vHjqs/qFRtnhZY8dLcC6GKX5nnvIP0PoFvfw48yMx6/xidNoNnNrcxDzg4fpB3uW
> >> KzaqKbHb/tH7ndTsB/EF5CRejUxuQXYqiUIYDToHQwc/XT6to7TUpPL7FM/lEfUk
> >> xSdCK4EhsD1U4XvhZYKL7R1SfhyC5tvmm609UXLxFli7DBn5Sq/mcPlbA+BWbQQF
> >> GtLxFwYTrYONPfSyABUzi7CkKgeSXoK3ffnQlDqc5L8/cUYJQurU55jP5GP39Urk
> >> wGv3D2/glxEIeDUN77U0PxQzHDULwCXlX2Ng+npbUTS7COc8wTSpYFH+WzeyVATU
> >> RO5WIDG0RF1/y9CWm3S0gdXfeWSO0bP1VWX7MOeefVBm1c6vgHYdHctmwiHX9owB
> >> 4wfKqT9LbKMuaMY/A9ZpGt24X6N7ujAVMEIBJ+UGF2sSCnMNJK5XCSgnUkMNZwex
> >> 6h+rM6NUMl3nc8z6FEXPLvdJDdtx73O0LtL0REV5bINlIpRmXqMvTF1RvdhKR0jl
> >> vWFH5xBzW7/sKmJ5zQkh/Nw+VG9l0qewqwBh5sOHzWZXROqsVvrDXvGwXIOJKNMW
> >> 2881MlEJLLB9V59N7PIC7shxKl300W36Z1fIRSp3c9DiEoC4Y+E=
> >> =G/ZG
> >> -----END PGP SIGNATURE-----
> >>
> >> ========================================================================
> >>
> >> CHANGELOG for 9.0.0-M5:
> >>
> >> ** Bug
> >>
> >> * [WICKET-6715] - FileUpload class should not implement
> IClusterable
> >> * [WICKET-6745] - CSP: inline JS in server and client time
> response
> >> filters
> >> * [WICKET-6746] - HttpsMapper cannot deal with resources over
> >> websockets
> >> * [WICKET-6752] - Some dependencies contain CVEs
> >> * [WICKET-6753] - res/modal.js using aria-labelledby where it
> >> should be using aria-label
> >> * [WICKET-6754] - Iteration stops with nested containers
> >> * [WICKET-6755] - MockServletContext does not decode real path
> >> * [WICKET-6756] - Avoid URL.getFile() when actually expecting
> paths.
> >> * [WICKET-6757] - Avoid URL.getFile during mime type detection.
> >> * [WICKET-6758] - NPE in AbstractWebSocketProcessor after session
> >> times out
> >>
> >> ** New Feature
> >>
> >> * [WICKET-6727] - Configurable CSP
> >> * [WICKET-6729] - allow adding IHeaderResponseDecorator without
> >> replacing all others
> >> * [WICKET-6730] - Global access to secure random data
> >>
> >> ** Improvement
> >>
> >> * [WICKET-6724] - CSP: Inline Javascript in AjaxLink
> >> * [WICKET-6725] - CSP: display:none in
> Component.renderPlaceholderTag
> >> * [WICKET-6726] - CSP: inline styling and js in Form submitbutton
> >> handling
> >> * [WICKET-6731] - CSP: inline JS in SubmitLink
> >> * [WICKET-6732] - CSP: inline JS in Link and ExternalLink
> >> * [WICKET-6733] - CSP: enable by default
> >> * [WICKET-6735] - CSP: inline styling in
> >> FormComponentFeedbackBorder/Indicator
> >> * [WICKET-6736] - CSP: Inline styling in BrowserInfoForm
> >> * [WICKET-6737] - CSP: violations in examples
> >> * [WICKET-6738] - CSP: inline styling in UploadProgressBar
> >> * [WICKET-6739] - CSP: inline JS in Palette
> >> * [WICKET-6740] - CSP: inline JS in Button
> >> * [WICKET-6741] - CSP: inline JS in FormComponentUpdatingBehavior
> >> * [WICKET-6749] - CSP: Inline styling in ExceptionErrorPage.html
> >> * [WICKET-6750] - add capability to cancel ongoing AJAX requests
> >> from client side
> >> * [WICKET-6759] - Support disabling error notification for
> websockets
> >> * [WICKET-6760] - Nested Form placeholder should preserve tag name
> >> * [WICKET-6761] - Support multiple connections to the same
> >> websocket resource from a single session
> >> * [WICKET-6762] - Support manual initialization of websocket
> >> connections
> >>
> >> ** Task
> >>
> >> * [WICKET-6687] - Cleanup the code from attribute inline styles
> and
> >> attribute inline scripts
> >> * [WICKET-6747] - Document CSP in user guide and migration guide
> >> * [WICKET-6751] - Support creating custom page access
> >> synchronization strategies
> >>
> >>
>
--
WBR
Maxim aka solomax
Re: [VOTE] Release Apache Wicket 9.0.0-M5 TAKE 2
Posted by Andrea Del Bene <an...@gmail.com>.
On 4/1/20 5:39 AM, Martin Grigorov wrote:
> Hi,
>
> The CHANGELOG should not contain
> https://issues.apache.org/jira/browse/WICKET-6750 since it is not Resolved.
I don't know how it managed to go into the CHANGELOG. I've fixed it at
code base level but it requires a to start again a new release to fix
also distribution archives.
Should we cancel this vote?
> On Tue, Mar 31, 2020 at 9:56 PM Andrea Del Bene <an...@gmail.com>
> wrote:
>
>> This is a vote to release Apache Wicket 9.0.0-M5
>>
>> Please download the source distributions found in our staging area
>> linked below.
>>
>> I have included the signatures for both the source archives. This vote
>> lasts for 72 hours minimum.
>>
>> [ ] Yes, release Apache Wicket 9.0.0-M5
>> [ ] No, don't release Apache Wicket 9.0.0-M5, because ...
>>
>> Distributions, changelog, keys and signatures can be found at:
>>
>> https://dist.apache.org/repos/dist/dev/wicket/9.0.0-M5
>>
>> Staging repository:
>>
>> https://repository.apache.org/content/repositories/orgapachewicket-1140/
>>
>> The binaries are available in the above link, as are a staging
>> repository for Maven. Typically the vote is on the source, but should
>> you find a problem with one of the binaries, please let me know, I can
>> re-roll them some way or the other.
>>
>> Staging git repository data:
>>
>> Repository: git@github.com:bitstorm/wicket.git
>> Branch: build/wicket-9.0.0-M5
>> Release tag: rel/wicket-9.0.0-M5
>>
>>
>> ========================================================================
>>
>> The signatures for the source release artefacts:
>>
>>
>> Signature for apache-wicket-9.0.0-M5.zip:
>>
>> -----BEGIN PGP SIGNATURE-----
>>
>> iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT
>> VuEPnQ/9Gc7bH7Y/s6PZceoLV0t9gkhtsJaC8jhuZhOWCqj1Uu/3VfJPRYma2eSs
>> z7XpgU1+x8qTMMUm27Z0HWMjUrMOevH5B0w4z9bb3yq9kmgwHGqH0o8lenjlZBAB
>> sKQKKNFcdEP4uzIOW5B6TWa9MHzkwQjKS2SYMSNfRsZps7p0pHylcb2S9QvEB/7R
>> ajSaNvF8C9J1vjkm8Qcutj8SUa+CwxuySe6rhCzj4VjslNMNTxUlyZxeicTipL3K
>> dB2UkG1ziTcHsgYLmDXOyta4eloMSGC+X/8UFNJsob7KkdQxqT64VW++8VQ166ND
>> UOkDZBPwTRislVf6c1cnLVZg+cIdNeNK9i2KDEIIChLhPStBpA9MVnaKAQjIYC7O
>> EZcYzliQmr1dVIx/6XakgaCsIRifkkPyEkCIdg0fnMSoaKs4qc5Q0p1IXiWO6vJP
>> mpnrtC7WzQ9ThnvQek6A1kz3ls3QlE9fqtDUmvE+XE/9E4Xko9ufe2tscPZ4Dr1b
>> RUCRix+hmtisRWCjcTZ9oqxtzB+vxDYsuVAo0Q1+ckSf/xSIlzrtfidtOgifft0v
>> FMKOlplmBzSmcmZrTJ2/DgpNgvX+tJJaBIEXUrXgFyuf1bRJBiwse9x/EGpBRcjC
>> 3HlOcXG3o/W+SrVutxez49kt3Eaksa2AI+CYUvDJjl7wgHA3J9A=
>> =fMOR
>> -----END PGP SIGNATURE-----
>>
>> Signature for apache-wicket-9.0.0-M5.tar.gz:
>>
>> -----BEGIN PGP SIGNATURE-----
>>
>> iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT
>> VuFP/A/7BPiVX8FkifrsxVMcD7jgbiCEGTxO6adDIoZNPYA9vrapE3XCEVY9qyaW
>> vHjqs/qFRtnhZY8dLcC6GKX5nnvIP0PoFvfw48yMx6/xidNoNnNrcxDzg4fpB3uW
>> KzaqKbHb/tH7ndTsB/EF5CRejUxuQXYqiUIYDToHQwc/XT6to7TUpPL7FM/lEfUk
>> xSdCK4EhsD1U4XvhZYKL7R1SfhyC5tvmm609UXLxFli7DBn5Sq/mcPlbA+BWbQQF
>> GtLxFwYTrYONPfSyABUzi7CkKgeSXoK3ffnQlDqc5L8/cUYJQurU55jP5GP39Urk
>> wGv3D2/glxEIeDUN77U0PxQzHDULwCXlX2Ng+npbUTS7COc8wTSpYFH+WzeyVATU
>> RO5WIDG0RF1/y9CWm3S0gdXfeWSO0bP1VWX7MOeefVBm1c6vgHYdHctmwiHX9owB
>> 4wfKqT9LbKMuaMY/A9ZpGt24X6N7ujAVMEIBJ+UGF2sSCnMNJK5XCSgnUkMNZwex
>> 6h+rM6NUMl3nc8z6FEXPLvdJDdtx73O0LtL0REV5bINlIpRmXqMvTF1RvdhKR0jl
>> vWFH5xBzW7/sKmJ5zQkh/Nw+VG9l0qewqwBh5sOHzWZXROqsVvrDXvGwXIOJKNMW
>> 2881MlEJLLB9V59N7PIC7shxKl300W36Z1fIRSp3c9DiEoC4Y+E=
>> =G/ZG
>> -----END PGP SIGNATURE-----
>>
>> ========================================================================
>>
>> CHANGELOG for 9.0.0-M5:
>>
>> ** Bug
>>
>> * [WICKET-6715] - FileUpload class should not implement IClusterable
>> * [WICKET-6745] - CSP: inline JS in server and client time response
>> filters
>> * [WICKET-6746] - HttpsMapper cannot deal with resources over
>> websockets
>> * [WICKET-6752] - Some dependencies contain CVEs
>> * [WICKET-6753] - res/modal.js using aria-labelledby where it
>> should be using aria-label
>> * [WICKET-6754] - Iteration stops with nested containers
>> * [WICKET-6755] - MockServletContext does not decode real path
>> * [WICKET-6756] - Avoid URL.getFile() when actually expecting paths.
>> * [WICKET-6757] - Avoid URL.getFile during mime type detection.
>> * [WICKET-6758] - NPE in AbstractWebSocketProcessor after session
>> times out
>>
>> ** New Feature
>>
>> * [WICKET-6727] - Configurable CSP
>> * [WICKET-6729] - allow adding IHeaderResponseDecorator without
>> replacing all others
>> * [WICKET-6730] - Global access to secure random data
>>
>> ** Improvement
>>
>> * [WICKET-6724] - CSP: Inline Javascript in AjaxLink
>> * [WICKET-6725] - CSP: display:none in Component.renderPlaceholderTag
>> * [WICKET-6726] - CSP: inline styling and js in Form submitbutton
>> handling
>> * [WICKET-6731] - CSP: inline JS in SubmitLink
>> * [WICKET-6732] - CSP: inline JS in Link and ExternalLink
>> * [WICKET-6733] - CSP: enable by default
>> * [WICKET-6735] - CSP: inline styling in
>> FormComponentFeedbackBorder/Indicator
>> * [WICKET-6736] - CSP: Inline styling in BrowserInfoForm
>> * [WICKET-6737] - CSP: violations in examples
>> * [WICKET-6738] - CSP: inline styling in UploadProgressBar
>> * [WICKET-6739] - CSP: inline JS in Palette
>> * [WICKET-6740] - CSP: inline JS in Button
>> * [WICKET-6741] - CSP: inline JS in FormComponentUpdatingBehavior
>> * [WICKET-6749] - CSP: Inline styling in ExceptionErrorPage.html
>> * [WICKET-6750] - add capability to cancel ongoing AJAX requests
>> from client side
>> * [WICKET-6759] - Support disabling error notification for websockets
>> * [WICKET-6760] - Nested Form placeholder should preserve tag name
>> * [WICKET-6761] - Support multiple connections to the same
>> websocket resource from a single session
>> * [WICKET-6762] - Support manual initialization of websocket
>> connections
>>
>> ** Task
>>
>> * [WICKET-6687] - Cleanup the code from attribute inline styles and
>> attribute inline scripts
>> * [WICKET-6747] - Document CSP in user guide and migration guide
>> * [WICKET-6751] - Support creating custom page access
>> synchronization strategies
>>
>>
Re: [VOTE] Release Apache Wicket 9.0.0-M5 TAKE 2
Posted by Martin Grigorov <mg...@apache.org>.
Hi,
The CHANGELOG should not contain
https://issues.apache.org/jira/browse/WICKET-6750 since it is not Resolved.
On Tue, Mar 31, 2020 at 9:56 PM Andrea Del Bene <an...@gmail.com>
wrote:
> This is a vote to release Apache Wicket 9.0.0-M5
>
> Please download the source distributions found in our staging area
> linked below.
>
> I have included the signatures for both the source archives. This vote
> lasts for 72 hours minimum.
>
> [ ] Yes, release Apache Wicket 9.0.0-M5
> [ ] No, don't release Apache Wicket 9.0.0-M5, because ...
>
> Distributions, changelog, keys and signatures can be found at:
>
> https://dist.apache.org/repos/dist/dev/wicket/9.0.0-M5
>
> Staging repository:
>
> https://repository.apache.org/content/repositories/orgapachewicket-1140/
>
> The binaries are available in the above link, as are a staging
> repository for Maven. Typically the vote is on the source, but should
> you find a problem with one of the binaries, please let me know, I can
> re-roll them some way or the other.
>
> Staging git repository data:
>
> Repository: git@github.com:bitstorm/wicket.git
> Branch: build/wicket-9.0.0-M5
> Release tag: rel/wicket-9.0.0-M5
>
>
> ========================================================================
>
> The signatures for the source release artefacts:
>
>
> Signature for apache-wicket-9.0.0-M5.zip:
>
> -----BEGIN PGP SIGNATURE-----
>
> iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT
> VuEPnQ/9Gc7bH7Y/s6PZceoLV0t9gkhtsJaC8jhuZhOWCqj1Uu/3VfJPRYma2eSs
> z7XpgU1+x8qTMMUm27Z0HWMjUrMOevH5B0w4z9bb3yq9kmgwHGqH0o8lenjlZBAB
> sKQKKNFcdEP4uzIOW5B6TWa9MHzkwQjKS2SYMSNfRsZps7p0pHylcb2S9QvEB/7R
> ajSaNvF8C9J1vjkm8Qcutj8SUa+CwxuySe6rhCzj4VjslNMNTxUlyZxeicTipL3K
> dB2UkG1ziTcHsgYLmDXOyta4eloMSGC+X/8UFNJsob7KkdQxqT64VW++8VQ166ND
> UOkDZBPwTRislVf6c1cnLVZg+cIdNeNK9i2KDEIIChLhPStBpA9MVnaKAQjIYC7O
> EZcYzliQmr1dVIx/6XakgaCsIRifkkPyEkCIdg0fnMSoaKs4qc5Q0p1IXiWO6vJP
> mpnrtC7WzQ9ThnvQek6A1kz3ls3QlE9fqtDUmvE+XE/9E4Xko9ufe2tscPZ4Dr1b
> RUCRix+hmtisRWCjcTZ9oqxtzB+vxDYsuVAo0Q1+ckSf/xSIlzrtfidtOgifft0v
> FMKOlplmBzSmcmZrTJ2/DgpNgvX+tJJaBIEXUrXgFyuf1bRJBiwse9x/EGpBRcjC
> 3HlOcXG3o/W+SrVutxez49kt3Eaksa2AI+CYUvDJjl7wgHA3J9A=
> =fMOR
> -----END PGP SIGNATURE-----
>
> Signature for apache-wicket-9.0.0-M5.tar.gz:
>
> -----BEGIN PGP SIGNATURE-----
>
> iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT
> VuFP/A/7BPiVX8FkifrsxVMcD7jgbiCEGTxO6adDIoZNPYA9vrapE3XCEVY9qyaW
> vHjqs/qFRtnhZY8dLcC6GKX5nnvIP0PoFvfw48yMx6/xidNoNnNrcxDzg4fpB3uW
> KzaqKbHb/tH7ndTsB/EF5CRejUxuQXYqiUIYDToHQwc/XT6to7TUpPL7FM/lEfUk
> xSdCK4EhsD1U4XvhZYKL7R1SfhyC5tvmm609UXLxFli7DBn5Sq/mcPlbA+BWbQQF
> GtLxFwYTrYONPfSyABUzi7CkKgeSXoK3ffnQlDqc5L8/cUYJQurU55jP5GP39Urk
> wGv3D2/glxEIeDUN77U0PxQzHDULwCXlX2Ng+npbUTS7COc8wTSpYFH+WzeyVATU
> RO5WIDG0RF1/y9CWm3S0gdXfeWSO0bP1VWX7MOeefVBm1c6vgHYdHctmwiHX9owB
> 4wfKqT9LbKMuaMY/A9ZpGt24X6N7ujAVMEIBJ+UGF2sSCnMNJK5XCSgnUkMNZwex
> 6h+rM6NUMl3nc8z6FEXPLvdJDdtx73O0LtL0REV5bINlIpRmXqMvTF1RvdhKR0jl
> vWFH5xBzW7/sKmJ5zQkh/Nw+VG9l0qewqwBh5sOHzWZXROqsVvrDXvGwXIOJKNMW
> 2881MlEJLLB9V59N7PIC7shxKl300W36Z1fIRSp3c9DiEoC4Y+E=
> =G/ZG
> -----END PGP SIGNATURE-----
>
> ========================================================================
>
> CHANGELOG for 9.0.0-M5:
>
> ** Bug
>
> * [WICKET-6715] - FileUpload class should not implement IClusterable
> * [WICKET-6745] - CSP: inline JS in server and client time response
> filters
> * [WICKET-6746] - HttpsMapper cannot deal with resources over
> websockets
> * [WICKET-6752] - Some dependencies contain CVEs
> * [WICKET-6753] - res/modal.js using aria-labelledby where it
> should be using aria-label
> * [WICKET-6754] - Iteration stops with nested containers
> * [WICKET-6755] - MockServletContext does not decode real path
> * [WICKET-6756] - Avoid URL.getFile() when actually expecting paths.
> * [WICKET-6757] - Avoid URL.getFile during mime type detection.
> * [WICKET-6758] - NPE in AbstractWebSocketProcessor after session
> times out
>
> ** New Feature
>
> * [WICKET-6727] - Configurable CSP
> * [WICKET-6729] - allow adding IHeaderResponseDecorator without
> replacing all others
> * [WICKET-6730] - Global access to secure random data
>
> ** Improvement
>
> * [WICKET-6724] - CSP: Inline Javascript in AjaxLink
> * [WICKET-6725] - CSP: display:none in Component.renderPlaceholderTag
> * [WICKET-6726] - CSP: inline styling and js in Form submitbutton
> handling
> * [WICKET-6731] - CSP: inline JS in SubmitLink
> * [WICKET-6732] - CSP: inline JS in Link and ExternalLink
> * [WICKET-6733] - CSP: enable by default
> * [WICKET-6735] - CSP: inline styling in
> FormComponentFeedbackBorder/Indicator
> * [WICKET-6736] - CSP: Inline styling in BrowserInfoForm
> * [WICKET-6737] - CSP: violations in examples
> * [WICKET-6738] - CSP: inline styling in UploadProgressBar
> * [WICKET-6739] - CSP: inline JS in Palette
> * [WICKET-6740] - CSP: inline JS in Button
> * [WICKET-6741] - CSP: inline JS in FormComponentUpdatingBehavior
> * [WICKET-6749] - CSP: Inline styling in ExceptionErrorPage.html
> * [WICKET-6750] - add capability to cancel ongoing AJAX requests
> from client side
> * [WICKET-6759] - Support disabling error notification for websockets
> * [WICKET-6760] - Nested Form placeholder should preserve tag name
> * [WICKET-6761] - Support multiple connections to the same
> websocket resource from a single session
> * [WICKET-6762] - Support manual initialization of websocket
> connections
>
> ** Task
>
> * [WICKET-6687] - Cleanup the code from attribute inline styles and
> attribute inline scripts
> * [WICKET-6747] - Document CSP in user guide and migration guide
> * [WICKET-6751] - Support creating custom page access
> synchronization strategies
>
>
Re: [VOTE] Release Apache Wicket 9.0.0-M5 TAKE 2
Posted by Sven Meier <sv...@meiers.net>.
+1 release
Built and tested examples.
Thanks
Sven
On 31.03.20 20:56, Andrea Del Bene wrote:
> This is a vote to release Apache Wicket 9.0.0-M5
>
> Please download the source distributions found in our staging area
> linked below.
>
> I have included the signatures for both the source archives. This vote
> lasts for 72 hours minimum.
>
> [ ] Yes, release Apache Wicket 9.0.0-M5
> [ ] No, don't release Apache Wicket 9.0.0-M5, because ...
>
> Distributions, changelog, keys and signatures can be found at:
>
> https://dist.apache.org/repos/dist/dev/wicket/9.0.0-M5
>
> Staging repository:
>
> https://repository.apache.org/content/repositories/orgapachewicket-1140/
>
> The binaries are available in the above link, as are a staging
> repository for Maven. Typically the vote is on the source, but should
> you find a problem with one of the binaries, please let me know, I can
> re-roll them some way or the other.
>
> Staging git repository data:
>
> Repository: git@github.com:bitstorm/wicket.git
> Branch: build/wicket-9.0.0-M5
> Release tag: rel/wicket-9.0.0-M5
>
>
> ========================================================================
>
> The signatures for the source release artefacts:
>
>
> Signature for apache-wicket-9.0.0-M5.zip:
>
> -----BEGIN PGP SIGNATURE-----
>
> iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT
> VuEPnQ/9Gc7bH7Y/s6PZceoLV0t9gkhtsJaC8jhuZhOWCqj1Uu/3VfJPRYma2eSs
> z7XpgU1+x8qTMMUm27Z0HWMjUrMOevH5B0w4z9bb3yq9kmgwHGqH0o8lenjlZBAB
> sKQKKNFcdEP4uzIOW5B6TWa9MHzkwQjKS2SYMSNfRsZps7p0pHylcb2S9QvEB/7R
> ajSaNvF8C9J1vjkm8Qcutj8SUa+CwxuySe6rhCzj4VjslNMNTxUlyZxeicTipL3K
> dB2UkG1ziTcHsgYLmDXOyta4eloMSGC+X/8UFNJsob7KkdQxqT64VW++8VQ166ND
> UOkDZBPwTRislVf6c1cnLVZg+cIdNeNK9i2KDEIIChLhPStBpA9MVnaKAQjIYC7O
> EZcYzliQmr1dVIx/6XakgaCsIRifkkPyEkCIdg0fnMSoaKs4qc5Q0p1IXiWO6vJP
> mpnrtC7WzQ9ThnvQek6A1kz3ls3QlE9fqtDUmvE+XE/9E4Xko9ufe2tscPZ4Dr1b
> RUCRix+hmtisRWCjcTZ9oqxtzB+vxDYsuVAo0Q1+ckSf/xSIlzrtfidtOgifft0v
> FMKOlplmBzSmcmZrTJ2/DgpNgvX+tJJaBIEXUrXgFyuf1bRJBiwse9x/EGpBRcjC
> 3HlOcXG3o/W+SrVutxez49kt3Eaksa2AI+CYUvDJjl7wgHA3J9A=
> =fMOR
> -----END PGP SIGNATURE-----
>
> Signature for apache-wicket-9.0.0-M5.tar.gz:
>
> -----BEGIN PGP SIGNATURE-----
>
> iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT
> VuFP/A/7BPiVX8FkifrsxVMcD7jgbiCEGTxO6adDIoZNPYA9vrapE3XCEVY9qyaW
> vHjqs/qFRtnhZY8dLcC6GKX5nnvIP0PoFvfw48yMx6/xidNoNnNrcxDzg4fpB3uW
> KzaqKbHb/tH7ndTsB/EF5CRejUxuQXYqiUIYDToHQwc/XT6to7TUpPL7FM/lEfUk
> xSdCK4EhsD1U4XvhZYKL7R1SfhyC5tvmm609UXLxFli7DBn5Sq/mcPlbA+BWbQQF
> GtLxFwYTrYONPfSyABUzi7CkKgeSXoK3ffnQlDqc5L8/cUYJQurU55jP5GP39Urk
> wGv3D2/glxEIeDUN77U0PxQzHDULwCXlX2Ng+npbUTS7COc8wTSpYFH+WzeyVATU
> RO5WIDG0RF1/y9CWm3S0gdXfeWSO0bP1VWX7MOeefVBm1c6vgHYdHctmwiHX9owB
> 4wfKqT9LbKMuaMY/A9ZpGt24X6N7ujAVMEIBJ+UGF2sSCnMNJK5XCSgnUkMNZwex
> 6h+rM6NUMl3nc8z6FEXPLvdJDdtx73O0LtL0REV5bINlIpRmXqMvTF1RvdhKR0jl
> vWFH5xBzW7/sKmJ5zQkh/Nw+VG9l0qewqwBh5sOHzWZXROqsVvrDXvGwXIOJKNMW
> 2881MlEJLLB9V59N7PIC7shxKl300W36Z1fIRSp3c9DiEoC4Y+E=
> =G/ZG
> -----END PGP SIGNATURE-----
>
> ========================================================================
>
> CHANGELOG for 9.0.0-M5:
>
> ** Bug
>
> * [WICKET-6715] - FileUpload class should not implement IClusterable
> * [WICKET-6745] - CSP: inline JS in server and client time
> response filters
> * [WICKET-6746] - HttpsMapper cannot deal with resources over
> websockets
> * [WICKET-6752] - Some dependencies contain CVEs
> * [WICKET-6753] - res/modal.js using aria-labelledby where it
> should be using aria-label
> * [WICKET-6754] - Iteration stops with nested containers
> * [WICKET-6755] - MockServletContext does not decode real path
> * [WICKET-6756] - Avoid URL.getFile() when actually expecting paths.
> * [WICKET-6757] - Avoid URL.getFile during mime type detection.
> * [WICKET-6758] - NPE in AbstractWebSocketProcessor after session
> times out
>
> ** New Feature
>
> * [WICKET-6727] - Configurable CSP
> * [WICKET-6729] - allow adding IHeaderResponseDecorator without
> replacing all others
> * [WICKET-6730] - Global access to secure random data
>
> ** Improvement
>
> * [WICKET-6724] - CSP: Inline Javascript in AjaxLink
> * [WICKET-6725] - CSP: display:none in Component.renderPlaceholderTag
> * [WICKET-6726] - CSP: inline styling and js in Form submitbutton
> handling
> * [WICKET-6731] - CSP: inline JS in SubmitLink
> * [WICKET-6732] - CSP: inline JS in Link and ExternalLink
> * [WICKET-6733] - CSP: enable by default
> * [WICKET-6735] - CSP: inline styling in
> FormComponentFeedbackBorder/Indicator
> * [WICKET-6736] - CSP: Inline styling in BrowserInfoForm
> * [WICKET-6737] - CSP: violations in examples
> * [WICKET-6738] - CSP: inline styling in UploadProgressBar
> * [WICKET-6739] - CSP: inline JS in Palette
> * [WICKET-6740] - CSP: inline JS in Button
> * [WICKET-6741] - CSP: inline JS in FormComponentUpdatingBehavior
> * [WICKET-6749] - CSP: Inline styling in ExceptionErrorPage.html
> * [WICKET-6750] - add capability to cancel ongoing AJAX requests
> from client side
> * [WICKET-6759] - Support disabling error notification for websockets
> * [WICKET-6760] - Nested Form placeholder should preserve tag name
> * [WICKET-6761] - Support multiple connections to the same
> websocket resource from a single session
> * [WICKET-6762] - Support manual initialization of websocket
> connections
>
> ** Task
>
> * [WICKET-6687] - Cleanup the code from attribute inline styles
> and attribute inline scripts
> * [WICKET-6747] - Document CSP in user guide and migration guide
> * [WICKET-6751] - Support creating custom page access
> synchronization strategies
>
Re: [VOTE] Release Apache Wicket 9.0.0-M5 TAKE 2
Posted by Tobias Soloschenko <to...@googlemail.com.INVALID>.
+1
kind regards
Tobias
> Am 01.04.2020 um 06:27 schrieb Maxim Solodovnik <so...@gmail.com>:
>
> +1
>
> tested
> * signatures/hashes
> * local build
> * wicketstuff build (examples need to be reviewed and fixed, will do later)
> * our main app
>
>> On Wed, 1 Apr 2020 at 11:03, Martin Grigorov <mg...@apache.org> wrote:
>>
>> +1 to release
>>
>> Tested local build, random Wicket examples and my Scala based application.
>>
>> On Tue, Mar 31, 2020 at 9:56 PM Andrea Del Bene <an...@gmail.com>
>> wrote:
>>
>>> This is a vote to release Apache Wicket 9.0.0-M5
>>>
>>> Please download the source distributions found in our staging area
>>> linked below.
>>>
>>> I have included the signatures for both the source archives. This vote
>>> lasts for 72 hours minimum.
>>>
>>> [ ] Yes, release Apache Wicket 9.0.0-M5
>>> [ ] No, don't release Apache Wicket 9.0.0-M5, because ...
>>>
>>> Distributions, changelog, keys and signatures can be found at:
>>>
>>> https://dist.apache.org/repos/dist/dev/wicket/9.0.0-M5
>>>
>>> Staging repository:
>>>
>>> https://repository.apache.org/content/repositories/orgapachewicket-1140/
>>>
>>> The binaries are available in the above link, as are a staging
>>> repository for Maven. Typically the vote is on the source, but should
>>> you find a problem with one of the binaries, please let me know, I can
>>> re-roll them some way or the other.
>>>
>>> Staging git repository data:
>>>
>>> Repository: git@github.com:bitstorm/wicket.git
>>> Branch: build/wicket-9.0.0-M5
>>> Release tag: rel/wicket-9.0.0-M5
>>>
>>>
>>> ========================================================================
>>>
>>> The signatures for the source release artefacts:
>>>
>>>
>>> Signature for apache-wicket-9.0.0-M5.zip:
>>>
>>> -----BEGIN PGP SIGNATURE-----
>>>
>>> iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT
>>> VuEPnQ/9Gc7bH7Y/s6PZceoLV0t9gkhtsJaC8jhuZhOWCqj1Uu/3VfJPRYma2eSs
>>> z7XpgU1+x8qTMMUm27Z0HWMjUrMOevH5B0w4z9bb3yq9kmgwHGqH0o8lenjlZBAB
>>> sKQKKNFcdEP4uzIOW5B6TWa9MHzkwQjKS2SYMSNfRsZps7p0pHylcb2S9QvEB/7R
>>> ajSaNvF8C9J1vjkm8Qcutj8SUa+CwxuySe6rhCzj4VjslNMNTxUlyZxeicTipL3K
>>> dB2UkG1ziTcHsgYLmDXOyta4eloMSGC+X/8UFNJsob7KkdQxqT64VW++8VQ166ND
>>> UOkDZBPwTRislVf6c1cnLVZg+cIdNeNK9i2KDEIIChLhPStBpA9MVnaKAQjIYC7O
>>> EZcYzliQmr1dVIx/6XakgaCsIRifkkPyEkCIdg0fnMSoaKs4qc5Q0p1IXiWO6vJP
>>> mpnrtC7WzQ9ThnvQek6A1kz3ls3QlE9fqtDUmvE+XE/9E4Xko9ufe2tscPZ4Dr1b
>>> RUCRix+hmtisRWCjcTZ9oqxtzB+vxDYsuVAo0Q1+ckSf/xSIlzrtfidtOgifft0v
>>> FMKOlplmBzSmcmZrTJ2/DgpNgvX+tJJaBIEXUrXgFyuf1bRJBiwse9x/EGpBRcjC
>>> 3HlOcXG3o/W+SrVutxez49kt3Eaksa2AI+CYUvDJjl7wgHA3J9A=
>>> =fMOR
>>> -----END PGP SIGNATURE-----
>>>
>>> Signature for apache-wicket-9.0.0-M5.tar.gz:
>>>
>>> -----BEGIN PGP SIGNATURE-----
>>>
>>> iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT
>>> VuFP/A/7BPiVX8FkifrsxVMcD7jgbiCEGTxO6adDIoZNPYA9vrapE3XCEVY9qyaW
>>> vHjqs/qFRtnhZY8dLcC6GKX5nnvIP0PoFvfw48yMx6/xidNoNnNrcxDzg4fpB3uW
>>> KzaqKbHb/tH7ndTsB/EF5CRejUxuQXYqiUIYDToHQwc/XT6to7TUpPL7FM/lEfUk
>>> xSdCK4EhsD1U4XvhZYKL7R1SfhyC5tvmm609UXLxFli7DBn5Sq/mcPlbA+BWbQQF
>>> GtLxFwYTrYONPfSyABUzi7CkKgeSXoK3ffnQlDqc5L8/cUYJQurU55jP5GP39Urk
>>> wGv3D2/glxEIeDUN77U0PxQzHDULwCXlX2Ng+npbUTS7COc8wTSpYFH+WzeyVATU
>>> RO5WIDG0RF1/y9CWm3S0gdXfeWSO0bP1VWX7MOeefVBm1c6vgHYdHctmwiHX9owB
>>> 4wfKqT9LbKMuaMY/A9ZpGt24X6N7ujAVMEIBJ+UGF2sSCnMNJK5XCSgnUkMNZwex
>>> 6h+rM6NUMl3nc8z6FEXPLvdJDdtx73O0LtL0REV5bINlIpRmXqMvTF1RvdhKR0jl
>>> vWFH5xBzW7/sKmJ5zQkh/Nw+VG9l0qewqwBh5sOHzWZXROqsVvrDXvGwXIOJKNMW
>>> 2881MlEJLLB9V59N7PIC7shxKl300W36Z1fIRSp3c9DiEoC4Y+E=
>>> =G/ZG
>>> -----END PGP SIGNATURE-----
>>>
>>> ========================================================================
>>>
>>> CHANGELOG for 9.0.0-M5:
>>>
>>> ** Bug
>>>
>>> * [WICKET-6715] - FileUpload class should not implement
>> IClusterable
>>> * [WICKET-6745] - CSP: inline JS in server and client time response
>>> filters
>>> * [WICKET-6746] - HttpsMapper cannot deal with resources over
>>> websockets
>>> * [WICKET-6752] - Some dependencies contain CVEs
>>> * [WICKET-6753] - res/modal.js using aria-labelledby where it
>>> should be using aria-label
>>> * [WICKET-6754] - Iteration stops with nested containers
>>> * [WICKET-6755] - MockServletContext does not decode real path
>>> * [WICKET-6756] - Avoid URL.getFile() when actually expecting paths.
>>> * [WICKET-6757] - Avoid URL.getFile during mime type detection.
>>> * [WICKET-6758] - NPE in AbstractWebSocketProcessor after session
>>> times out
>>>
>>> ** New Feature
>>>
>>> * [WICKET-6727] - Configurable CSP
>>> * [WICKET-6729] - allow adding IHeaderResponseDecorator without
>>> replacing all others
>>> * [WICKET-6730] - Global access to secure random data
>>>
>>> ** Improvement
>>>
>>> * [WICKET-6724] - CSP: Inline Javascript in AjaxLink
>>> * [WICKET-6725] - CSP: display:none in
>> Component.renderPlaceholderTag
>>> * [WICKET-6726] - CSP: inline styling and js in Form submitbutton
>>> handling
>>> * [WICKET-6731] - CSP: inline JS in SubmitLink
>>> * [WICKET-6732] - CSP: inline JS in Link and ExternalLink
>>> * [WICKET-6733] - CSP: enable by default
>>> * [WICKET-6735] - CSP: inline styling in
>>> FormComponentFeedbackBorder/Indicator
>>> * [WICKET-6736] - CSP: Inline styling in BrowserInfoForm
>>> * [WICKET-6737] - CSP: violations in examples
>>> * [WICKET-6738] - CSP: inline styling in UploadProgressBar
>>> * [WICKET-6739] - CSP: inline JS in Palette
>>> * [WICKET-6740] - CSP: inline JS in Button
>>> * [WICKET-6741] - CSP: inline JS in FormComponentUpdatingBehavior
>>> * [WICKET-6749] - CSP: Inline styling in ExceptionErrorPage.html
>>> * [WICKET-6750] - add capability to cancel ongoing AJAX requests
>>> from client side
>>> * [WICKET-6759] - Support disabling error notification for
>> websockets
>>> * [WICKET-6760] - Nested Form placeholder should preserve tag name
>>> * [WICKET-6761] - Support multiple connections to the same
>>> websocket resource from a single session
>>> * [WICKET-6762] - Support manual initialization of websocket
>>> connections
>>>
>>> ** Task
>>>
>>> * [WICKET-6687] - Cleanup the code from attribute inline styles and
>>> attribute inline scripts
>>> * [WICKET-6747] - Document CSP in user guide and migration guide
>>> * [WICKET-6751] - Support creating custom page access
>>> synchronization strategies
>>>
>>>
>>
>
>
> --
> WBR
> Maxim aka solomax
Re: [VOTE] Release Apache Wicket 9.0.0-M5 TAKE 2
Posted by Maxim Solodovnik <so...@gmail.com>.
+1
tested
* signatures/hashes
* local build
* wicketstuff build (examples need to be reviewed and fixed, will do later)
* our main app
On Wed, 1 Apr 2020 at 11:03, Martin Grigorov <mg...@apache.org> wrote:
> +1 to release
>
> Tested local build, random Wicket examples and my Scala based application.
>
> On Tue, Mar 31, 2020 at 9:56 PM Andrea Del Bene <an...@gmail.com>
> wrote:
>
> > This is a vote to release Apache Wicket 9.0.0-M5
> >
> > Please download the source distributions found in our staging area
> > linked below.
> >
> > I have included the signatures for both the source archives. This vote
> > lasts for 72 hours minimum.
> >
> > [ ] Yes, release Apache Wicket 9.0.0-M5
> > [ ] No, don't release Apache Wicket 9.0.0-M5, because ...
> >
> > Distributions, changelog, keys and signatures can be found at:
> >
> > https://dist.apache.org/repos/dist/dev/wicket/9.0.0-M5
> >
> > Staging repository:
> >
> > https://repository.apache.org/content/repositories/orgapachewicket-1140/
> >
> > The binaries are available in the above link, as are a staging
> > repository for Maven. Typically the vote is on the source, but should
> > you find a problem with one of the binaries, please let me know, I can
> > re-roll them some way or the other.
> >
> > Staging git repository data:
> >
> > Repository: git@github.com:bitstorm/wicket.git
> > Branch: build/wicket-9.0.0-M5
> > Release tag: rel/wicket-9.0.0-M5
> >
> >
> > ========================================================================
> >
> > The signatures for the source release artefacts:
> >
> >
> > Signature for apache-wicket-9.0.0-M5.zip:
> >
> > -----BEGIN PGP SIGNATURE-----
> >
> > iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT
> > VuEPnQ/9Gc7bH7Y/s6PZceoLV0t9gkhtsJaC8jhuZhOWCqj1Uu/3VfJPRYma2eSs
> > z7XpgU1+x8qTMMUm27Z0HWMjUrMOevH5B0w4z9bb3yq9kmgwHGqH0o8lenjlZBAB
> > sKQKKNFcdEP4uzIOW5B6TWa9MHzkwQjKS2SYMSNfRsZps7p0pHylcb2S9QvEB/7R
> > ajSaNvF8C9J1vjkm8Qcutj8SUa+CwxuySe6rhCzj4VjslNMNTxUlyZxeicTipL3K
> > dB2UkG1ziTcHsgYLmDXOyta4eloMSGC+X/8UFNJsob7KkdQxqT64VW++8VQ166ND
> > UOkDZBPwTRislVf6c1cnLVZg+cIdNeNK9i2KDEIIChLhPStBpA9MVnaKAQjIYC7O
> > EZcYzliQmr1dVIx/6XakgaCsIRifkkPyEkCIdg0fnMSoaKs4qc5Q0p1IXiWO6vJP
> > mpnrtC7WzQ9ThnvQek6A1kz3ls3QlE9fqtDUmvE+XE/9E4Xko9ufe2tscPZ4Dr1b
> > RUCRix+hmtisRWCjcTZ9oqxtzB+vxDYsuVAo0Q1+ckSf/xSIlzrtfidtOgifft0v
> > FMKOlplmBzSmcmZrTJ2/DgpNgvX+tJJaBIEXUrXgFyuf1bRJBiwse9x/EGpBRcjC
> > 3HlOcXG3o/W+SrVutxez49kt3Eaksa2AI+CYUvDJjl7wgHA3J9A=
> > =fMOR
> > -----END PGP SIGNATURE-----
> >
> > Signature for apache-wicket-9.0.0-M5.tar.gz:
> >
> > -----BEGIN PGP SIGNATURE-----
> >
> > iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT
> > VuFP/A/7BPiVX8FkifrsxVMcD7jgbiCEGTxO6adDIoZNPYA9vrapE3XCEVY9qyaW
> > vHjqs/qFRtnhZY8dLcC6GKX5nnvIP0PoFvfw48yMx6/xidNoNnNrcxDzg4fpB3uW
> > KzaqKbHb/tH7ndTsB/EF5CRejUxuQXYqiUIYDToHQwc/XT6to7TUpPL7FM/lEfUk
> > xSdCK4EhsD1U4XvhZYKL7R1SfhyC5tvmm609UXLxFli7DBn5Sq/mcPlbA+BWbQQF
> > GtLxFwYTrYONPfSyABUzi7CkKgeSXoK3ffnQlDqc5L8/cUYJQurU55jP5GP39Urk
> > wGv3D2/glxEIeDUN77U0PxQzHDULwCXlX2Ng+npbUTS7COc8wTSpYFH+WzeyVATU
> > RO5WIDG0RF1/y9CWm3S0gdXfeWSO0bP1VWX7MOeefVBm1c6vgHYdHctmwiHX9owB
> > 4wfKqT9LbKMuaMY/A9ZpGt24X6N7ujAVMEIBJ+UGF2sSCnMNJK5XCSgnUkMNZwex
> > 6h+rM6NUMl3nc8z6FEXPLvdJDdtx73O0LtL0REV5bINlIpRmXqMvTF1RvdhKR0jl
> > vWFH5xBzW7/sKmJ5zQkh/Nw+VG9l0qewqwBh5sOHzWZXROqsVvrDXvGwXIOJKNMW
> > 2881MlEJLLB9V59N7PIC7shxKl300W36Z1fIRSp3c9DiEoC4Y+E=
> > =G/ZG
> > -----END PGP SIGNATURE-----
> >
> > ========================================================================
> >
> > CHANGELOG for 9.0.0-M5:
> >
> > ** Bug
> >
> > * [WICKET-6715] - FileUpload class should not implement
> IClusterable
> > * [WICKET-6745] - CSP: inline JS in server and client time response
> > filters
> > * [WICKET-6746] - HttpsMapper cannot deal with resources over
> > websockets
> > * [WICKET-6752] - Some dependencies contain CVEs
> > * [WICKET-6753] - res/modal.js using aria-labelledby where it
> > should be using aria-label
> > * [WICKET-6754] - Iteration stops with nested containers
> > * [WICKET-6755] - MockServletContext does not decode real path
> > * [WICKET-6756] - Avoid URL.getFile() when actually expecting paths.
> > * [WICKET-6757] - Avoid URL.getFile during mime type detection.
> > * [WICKET-6758] - NPE in AbstractWebSocketProcessor after session
> > times out
> >
> > ** New Feature
> >
> > * [WICKET-6727] - Configurable CSP
> > * [WICKET-6729] - allow adding IHeaderResponseDecorator without
> > replacing all others
> > * [WICKET-6730] - Global access to secure random data
> >
> > ** Improvement
> >
> > * [WICKET-6724] - CSP: Inline Javascript in AjaxLink
> > * [WICKET-6725] - CSP: display:none in
> Component.renderPlaceholderTag
> > * [WICKET-6726] - CSP: inline styling and js in Form submitbutton
> > handling
> > * [WICKET-6731] - CSP: inline JS in SubmitLink
> > * [WICKET-6732] - CSP: inline JS in Link and ExternalLink
> > * [WICKET-6733] - CSP: enable by default
> > * [WICKET-6735] - CSP: inline styling in
> > FormComponentFeedbackBorder/Indicator
> > * [WICKET-6736] - CSP: Inline styling in BrowserInfoForm
> > * [WICKET-6737] - CSP: violations in examples
> > * [WICKET-6738] - CSP: inline styling in UploadProgressBar
> > * [WICKET-6739] - CSP: inline JS in Palette
> > * [WICKET-6740] - CSP: inline JS in Button
> > * [WICKET-6741] - CSP: inline JS in FormComponentUpdatingBehavior
> > * [WICKET-6749] - CSP: Inline styling in ExceptionErrorPage.html
> > * [WICKET-6750] - add capability to cancel ongoing AJAX requests
> > from client side
> > * [WICKET-6759] - Support disabling error notification for
> websockets
> > * [WICKET-6760] - Nested Form placeholder should preserve tag name
> > * [WICKET-6761] - Support multiple connections to the same
> > websocket resource from a single session
> > * [WICKET-6762] - Support manual initialization of websocket
> > connections
> >
> > ** Task
> >
> > * [WICKET-6687] - Cleanup the code from attribute inline styles and
> > attribute inline scripts
> > * [WICKET-6747] - Document CSP in user guide and migration guide
> > * [WICKET-6751] - Support creating custom page access
> > synchronization strategies
> >
> >
>
--
WBR
Maxim aka solomax
Re: [VOTE] Release Apache Wicket 9.0.0-M5 TAKE 2
Posted by Martin Grigorov <mg...@apache.org>.
+1 to release
Tested local build, random Wicket examples and my Scala based application.
On Tue, Mar 31, 2020 at 9:56 PM Andrea Del Bene <an...@gmail.com>
wrote:
> This is a vote to release Apache Wicket 9.0.0-M5
>
> Please download the source distributions found in our staging area
> linked below.
>
> I have included the signatures for both the source archives. This vote
> lasts for 72 hours minimum.
>
> [ ] Yes, release Apache Wicket 9.0.0-M5
> [ ] No, don't release Apache Wicket 9.0.0-M5, because ...
>
> Distributions, changelog, keys and signatures can be found at:
>
> https://dist.apache.org/repos/dist/dev/wicket/9.0.0-M5
>
> Staging repository:
>
> https://repository.apache.org/content/repositories/orgapachewicket-1140/
>
> The binaries are available in the above link, as are a staging
> repository for Maven. Typically the vote is on the source, but should
> you find a problem with one of the binaries, please let me know, I can
> re-roll them some way or the other.
>
> Staging git repository data:
>
> Repository: git@github.com:bitstorm/wicket.git
> Branch: build/wicket-9.0.0-M5
> Release tag: rel/wicket-9.0.0-M5
>
>
> ========================================================================
>
> The signatures for the source release artefacts:
>
>
> Signature for apache-wicket-9.0.0-M5.zip:
>
> -----BEGIN PGP SIGNATURE-----
>
> iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT
> VuEPnQ/9Gc7bH7Y/s6PZceoLV0t9gkhtsJaC8jhuZhOWCqj1Uu/3VfJPRYma2eSs
> z7XpgU1+x8qTMMUm27Z0HWMjUrMOevH5B0w4z9bb3yq9kmgwHGqH0o8lenjlZBAB
> sKQKKNFcdEP4uzIOW5B6TWa9MHzkwQjKS2SYMSNfRsZps7p0pHylcb2S9QvEB/7R
> ajSaNvF8C9J1vjkm8Qcutj8SUa+CwxuySe6rhCzj4VjslNMNTxUlyZxeicTipL3K
> dB2UkG1ziTcHsgYLmDXOyta4eloMSGC+X/8UFNJsob7KkdQxqT64VW++8VQ166ND
> UOkDZBPwTRislVf6c1cnLVZg+cIdNeNK9i2KDEIIChLhPStBpA9MVnaKAQjIYC7O
> EZcYzliQmr1dVIx/6XakgaCsIRifkkPyEkCIdg0fnMSoaKs4qc5Q0p1IXiWO6vJP
> mpnrtC7WzQ9ThnvQek6A1kz3ls3QlE9fqtDUmvE+XE/9E4Xko9ufe2tscPZ4Dr1b
> RUCRix+hmtisRWCjcTZ9oqxtzB+vxDYsuVAo0Q1+ckSf/xSIlzrtfidtOgifft0v
> FMKOlplmBzSmcmZrTJ2/DgpNgvX+tJJaBIEXUrXgFyuf1bRJBiwse9x/EGpBRcjC
> 3HlOcXG3o/W+SrVutxez49kt3Eaksa2AI+CYUvDJjl7wgHA3J9A=
> =fMOR
> -----END PGP SIGNATURE-----
>
> Signature for apache-wicket-9.0.0-M5.tar.gz:
>
> -----BEGIN PGP SIGNATURE-----
>
> iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT
> VuFP/A/7BPiVX8FkifrsxVMcD7jgbiCEGTxO6adDIoZNPYA9vrapE3XCEVY9qyaW
> vHjqs/qFRtnhZY8dLcC6GKX5nnvIP0PoFvfw48yMx6/xidNoNnNrcxDzg4fpB3uW
> KzaqKbHb/tH7ndTsB/EF5CRejUxuQXYqiUIYDToHQwc/XT6to7TUpPL7FM/lEfUk
> xSdCK4EhsD1U4XvhZYKL7R1SfhyC5tvmm609UXLxFli7DBn5Sq/mcPlbA+BWbQQF
> GtLxFwYTrYONPfSyABUzi7CkKgeSXoK3ffnQlDqc5L8/cUYJQurU55jP5GP39Urk
> wGv3D2/glxEIeDUN77U0PxQzHDULwCXlX2Ng+npbUTS7COc8wTSpYFH+WzeyVATU
> RO5WIDG0RF1/y9CWm3S0gdXfeWSO0bP1VWX7MOeefVBm1c6vgHYdHctmwiHX9owB
> 4wfKqT9LbKMuaMY/A9ZpGt24X6N7ujAVMEIBJ+UGF2sSCnMNJK5XCSgnUkMNZwex
> 6h+rM6NUMl3nc8z6FEXPLvdJDdtx73O0LtL0REV5bINlIpRmXqMvTF1RvdhKR0jl
> vWFH5xBzW7/sKmJ5zQkh/Nw+VG9l0qewqwBh5sOHzWZXROqsVvrDXvGwXIOJKNMW
> 2881MlEJLLB9V59N7PIC7shxKl300W36Z1fIRSp3c9DiEoC4Y+E=
> =G/ZG
> -----END PGP SIGNATURE-----
>
> ========================================================================
>
> CHANGELOG for 9.0.0-M5:
>
> ** Bug
>
> * [WICKET-6715] - FileUpload class should not implement IClusterable
> * [WICKET-6745] - CSP: inline JS in server and client time response
> filters
> * [WICKET-6746] - HttpsMapper cannot deal with resources over
> websockets
> * [WICKET-6752] - Some dependencies contain CVEs
> * [WICKET-6753] - res/modal.js using aria-labelledby where it
> should be using aria-label
> * [WICKET-6754] - Iteration stops with nested containers
> * [WICKET-6755] - MockServletContext does not decode real path
> * [WICKET-6756] - Avoid URL.getFile() when actually expecting paths.
> * [WICKET-6757] - Avoid URL.getFile during mime type detection.
> * [WICKET-6758] - NPE in AbstractWebSocketProcessor after session
> times out
>
> ** New Feature
>
> * [WICKET-6727] - Configurable CSP
> * [WICKET-6729] - allow adding IHeaderResponseDecorator without
> replacing all others
> * [WICKET-6730] - Global access to secure random data
>
> ** Improvement
>
> * [WICKET-6724] - CSP: Inline Javascript in AjaxLink
> * [WICKET-6725] - CSP: display:none in Component.renderPlaceholderTag
> * [WICKET-6726] - CSP: inline styling and js in Form submitbutton
> handling
> * [WICKET-6731] - CSP: inline JS in SubmitLink
> * [WICKET-6732] - CSP: inline JS in Link and ExternalLink
> * [WICKET-6733] - CSP: enable by default
> * [WICKET-6735] - CSP: inline styling in
> FormComponentFeedbackBorder/Indicator
> * [WICKET-6736] - CSP: Inline styling in BrowserInfoForm
> * [WICKET-6737] - CSP: violations in examples
> * [WICKET-6738] - CSP: inline styling in UploadProgressBar
> * [WICKET-6739] - CSP: inline JS in Palette
> * [WICKET-6740] - CSP: inline JS in Button
> * [WICKET-6741] - CSP: inline JS in FormComponentUpdatingBehavior
> * [WICKET-6749] - CSP: Inline styling in ExceptionErrorPage.html
> * [WICKET-6750] - add capability to cancel ongoing AJAX requests
> from client side
> * [WICKET-6759] - Support disabling error notification for websockets
> * [WICKET-6760] - Nested Form placeholder should preserve tag name
> * [WICKET-6761] - Support multiple connections to the same
> websocket resource from a single session
> * [WICKET-6762] - Support manual initialization of websocket
> connections
>
> ** Task
>
> * [WICKET-6687] - Cleanup the code from attribute inline styles and
> attribute inline scripts
> * [WICKET-6747] - Document CSP in user guide and migration guide
> * [WICKET-6751] - Support creating custom page access
> synchronization strategies
>
>