You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@struts.apache.org by Ted Husted <hu...@apache.org> on 2007/07/23 03:52:34 UTC
Struts 2.0.9 release (was Re: S2 security fix release planning (XWork 2.0.4 is out))
In the interest of time, I'm trying to pickup where James left off
with the 2.0.9 release, so that we can get the XWork fix out into the
wild.
The good news is that I have confirmed that dropping in the new XWork
2.0.4 JAR does fix the problem for Struts 2.0.8, and probably prior.
Anyone who wants a fix today should be able to replace the XWork JAR
and restart.
* http://opensymphony.com/xwork/download.action
The bad news is that I'm having trouble building Struts 2.0.9 against
XWork 2.0.4. Maven complained that it couldn't download the JAR, so I
installed it locally (using the script generated command), and it
still wouldn't build (mvn install).
I'm still "banging the rocks together" when it comes to Maven. Can
anyone confirm the problem, help me work around it, or confirm that we
need to do something on the OpenSymphony side.
-Ted.
----
GroupId: opensymphony
ArtifactId: xwork
Version: 2.0.4
Reason: Unable to download the artifact from any repository
Try downloading the file manually from the project website.
Then, install it using the command:
mvn install:install-file -DgroupId=opensymphony -DartifactId=xwork \
-Dversion=2.0.4 -Dpackaging=jar -Dfile=/path/to/file
opensymphony:xwork:jar:2.0.4
from the specified remote repositories:
Maven Snapshots (http://snapshots.maven.codehaus.org/maven2/),
central (http://repo1.maven.org/maven2),
opensymphony (http://maven.opensymphony.com),
apache.snapshots (http://people.apache.org/repo/m2-snapshot-repository),
snapshots-maven-codehaus (http://snapshots.maven.codehaus.org/maven2)
----
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org
For additional commands, e-mail: dev-help@struts.apache.org
Re: Struts 2.0.9 release (was Re: S2 security fix release planning (XWork 2.0.4 is out))
Posted by Ted Husted <hu...@apache.org>.
It seems that r558600, which removed some "extra" line feeds from the
templates is causing build failure for me. My early testing was prior
to r558600, and so I didn't catch the problem before tagging. I have
to run some errands, and unless someone can isolate the problem with
r558600 in the next hour or so., I'll merge back the original
templates, and retag.
-T.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org
For additional commands, e-mail: dev-help@struts.apache.org
Re: Struts 2.0.9 release (was Re: S2 security fix release planning (XWork 2.0.4 is out))
Posted by Ted Husted <hu...@apache.org>.
I've added some notes to the omnibus ticket, and unless I hear
anything further, I'll proceed as outlined there.
* https://issues.apache.org/struts/browse/WW-1974
-Ted.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org
For additional commands, e-mail: dev-help@struts.apache.org
Re: [VOTE] Re: Struts 2.0.9 release (was Re: S2 security fix release planning (XWork 2.0.4 is out))
Posted by Don Brown <do...@gmail.com>.
+1 GA
On 7/24/07, Ted Husted <hu...@apache.org> wrote:
> Here's my +1 for GA.
>
> On 7/23/07, Ted Husted <hu...@apache.org> wrote:
> > The test build of Struts 2.0.9 is available.
> >
> > Release notes:
> >
> > * http://struts.apache.org/2.x/docs/release-notes-209.html
> >
> > Distribution:
> >
> > * http://people.apache.org/builds/struts/2.0.9/
> >
> > Maven 2 staging repository:
> >
> > * http://people.apache.org/builds/struts/2.0.9/m2-staging-repository/
> >
> > We appreciate the time and effort everyone has put toward contributing
> > code and documentation, posting to the mailing lists, and logging
> > issues.
> >
> > Once you have had a chance to review the test build, please respond
> > with a vote on its quality:
> >
> > [ ] Leave at test build
> > [ ] Alpha
> > [ ] Beta
> > [ ] General Availability (GA)
> >
> > Everyone who has tested the build is invited to vote. Votes by PMC
> > members are considered binding. A vote passes if there are at least
> > three binding +1s and more +1s than -1s.
> >
> > **** PLEASE NOTE ****
> >
> > In the interest of time, I would like to declare a quality grade on
> > Struts 2.0.9 AS SOON AS we have received three binding votes toward
> > one of the grades, and NOT WAIT the usual 72 hours!
> >
> > If not voting GA, please also be specific as to your concerns, so that
> > we can address any issues immediately!
> >
> > Remember, a vote can be amended at any time to upgrade or downgrade
> > the quality of the release based on future experience. If an initial
> > vote designates the build as "Beta", the release will be submitted for
> > mirroring and announced to the user list. Once released as a public
> > beta, subsequent quality votes on a build may be held on the user
> > list.
> >
> > As always, the act of voting carries certain obligations. A binding
> > vote not only states an opinion, but means that the voter is agreeing
> > to help do the work
> >
> > -Ted.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org
> For additional commands, e-mail: dev-help@struts.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org
For additional commands, e-mail: dev-help@struts.apache.org
Re: [VOTE] Re: Struts 2.0.9 release (was Re: S2 security fix release planning (XWork 2.0.4 is out))
Posted by Ted Husted <hu...@apache.org>.
The note about the file size is wrong. The full distribution is 86mb
zipped (and 143mb unzipped). But, everything is available
cafeteria-style, including a 3mb lib download with just the JARs. For
the security issue, the quickest fix is to download XWork 2.0.4 from
Open Symphony and just replace the XWork JAR in your open
applications.
-Ted.
On 7/25/07, Aram Mkhitaryan <ar...@googlemail.com> wrote:
> Hi guys, thanks for the great job!
>
> In the site it is written that the "all" distribution should be 43M, but
> when I try to download it shows that the file is 86M (
> http://apache.mirrormax.net/struts/binaries/struts-2.0.9-all.zip) and it
> seems to be already unzipped.
>
> Can someone create .tar.gz to make it smaller, please?!
>
> Thank you in advance,
> Aram
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org
For additional commands, e-mail: dev-help@struts.apache.org
Re: [VOTE] Re: Struts 2.0.9 release (was Re: S2 security fix release planning (XWork 2.0.4 is out))
Posted by Aram Mkhitaryan <ar...@googlemail.com>.
Hi guys, thanks for the great job!
In the site it is written that the "all" distribution should be 43M, but
when I try to download it shows that the file is 86M (
http://apache.mirrormax.net/struts/binaries/struts-2.0.9-all.zip) and it
seems to be already unzipped.
Can someone create .tar.gz to make it smaller, please?!
Thank you in advance,
Aram
________________________________
Aram Mkhitaryan
52, 25 Lvovyan, Yerevan 375000, Armenia
Mobile: +374 91 518456
E-mail: aram.mkhitaryan@googlemail.com
Re: [VOTE] Re: Struts 2.0.9 release (was Re: S2 security fix
release planning (XWork 2.0.4 is out))
Posted by Pedro Herrera <pe...@hotmail.com>.
+1
- great job ;)
Herrera
Rainer Hermanns wrote:
>
> +1 for GA
>
> Thanks Ted and James for jumping in.
>
>> Here's my +1 for GA.
>>
>> On 7/23/07, Ted Husted <hu...@apache.org> wrote:
>>> The test build of Struts 2.0.9 is available.
>>>
>>> Release notes:
>>>
>>> * http://struts.apache.org/2.x/docs/release-notes-209.html
>>>
>>> Distribution:
>>>
>>> * http://people.apache.org/builds/struts/2.0.9/
>>>
>>> Maven 2 staging repository:
>>>
>>> *
>>> http://people.apache.org/builds/struts/2.0.9/m2-staging-repository/
>>>
>>> We appreciate the time and effort everyone has put toward contributing
>>> code and documentation, posting to the mailing lists, and logging
>>> issues.
>>>
>>> Once you have had a chance to review the test build, please respond
>>> with a vote on its quality:
>>>
>>> [ ] Leave at test build
>>> [ ] Alpha
>>> [ ] Beta
>>> [ ] General Availability (GA)
>>>
>>> Everyone who has tested the build is invited to vote. Votes by PMC
>>> members are considered binding. A vote passes if there are at least
>>> three binding +1s and more +1s than -1s.
>>>
>>> **** PLEASE NOTE ****
>>>
>>> In the interest of time, I would like to declare a quality grade on
>>> Struts 2.0.9 AS SOON AS we have received three binding votes toward
>>> one of the grades, and NOT WAIT the usual 72 hours!
>>>
>>> If not voting GA, please also be specific as to your concerns, so that
>>> we can address any issues immediately!
>>>
>>> Remember, a vote can be amended at any time to upgrade or downgrade
>>> the quality of the release based on future experience. If an initial
>>> vote designates the build as "Beta", the release will be submitted for
>>> mirroring and announced to the user list. Once released as a public
>>> beta, subsequent quality votes on a build may be held on the user
>>> list.
>>>
>>> As always, the act of voting carries certain obligations. A binding
>>> vote not only states an opinion, but means that the voter is agreeing
>>> to help do the work
>>>
>>> -Ted.
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org
>> For additional commands, e-mail: dev-help@struts.apache.org
>>
>>
>
>
> --
> Rainer Hermanns
> aixcept
> Neupforte 16
> 52062 Aachen - Germany
> w: http://aixcept.de/
> t: +49-241-4012247
> m: +49-170-3432912
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org
> For additional commands, e-mail: dev-help@struts.apache.org
>
>
>
--
View this message in context: http://www.nabble.com/Struts-2.0.9-release-%28was-Re%3A-S2-security-fix-release-planning-%28XWork-2.0.4-is-out%29%29-tf4127126.html#a11760640
Sent from the Struts - Dev mailing list archive at Nabble.com.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org
For additional commands, e-mail: dev-help@struts.apache.org
Re: [VOTE] Re: Struts 2.0.9 release (was Re: S2 security fix
release planning (XWork 2.0.4 is out))
Posted by Rainer Hermanns <he...@aixcept.de>.
+1 for GA
Thanks Ted and James for jumping in.
> Here's my +1 for GA.
>
> On 7/23/07, Ted Husted <hu...@apache.org> wrote:
>> The test build of Struts 2.0.9 is available.
>>
>> Release notes:
>>
>> * http://struts.apache.org/2.x/docs/release-notes-209.html
>>
>> Distribution:
>>
>> * http://people.apache.org/builds/struts/2.0.9/
>>
>> Maven 2 staging repository:
>>
>> *
>> http://people.apache.org/builds/struts/2.0.9/m2-staging-repository/
>>
>> We appreciate the time and effort everyone has put toward contributing
>> code and documentation, posting to the mailing lists, and logging
>> issues.
>>
>> Once you have had a chance to review the test build, please respond
>> with a vote on its quality:
>>
>> [ ] Leave at test build
>> [ ] Alpha
>> [ ] Beta
>> [ ] General Availability (GA)
>>
>> Everyone who has tested the build is invited to vote. Votes by PMC
>> members are considered binding. A vote passes if there are at least
>> three binding +1s and more +1s than -1s.
>>
>> **** PLEASE NOTE ****
>>
>> In the interest of time, I would like to declare a quality grade on
>> Struts 2.0.9 AS SOON AS we have received three binding votes toward
>> one of the grades, and NOT WAIT the usual 72 hours!
>>
>> If not voting GA, please also be specific as to your concerns, so that
>> we can address any issues immediately!
>>
>> Remember, a vote can be amended at any time to upgrade or downgrade
>> the quality of the release based on future experience. If an initial
>> vote designates the build as "Beta", the release will be submitted for
>> mirroring and announced to the user list. Once released as a public
>> beta, subsequent quality votes on a build may be held on the user
>> list.
>>
>> As always, the act of voting carries certain obligations. A binding
>> vote not only states an opinion, but means that the voter is agreeing
>> to help do the work
>>
>> -Ted.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org
> For additional commands, e-mail: dev-help@struts.apache.org
>
>
--
Rainer Hermanns
aixcept
Neupforte 16
52062 Aachen - Germany
w: http://aixcept.de/
t: +49-241-4012247
m: +49-170-3432912
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org
For additional commands, e-mail: dev-help@struts.apache.org
[VOTE] Re: Struts 2.0.9 release (was Re: S2 security fix release planning (XWork 2.0.4 is out))
Posted by Ted Husted <hu...@apache.org>.
Here's my +1 for GA.
On 7/23/07, Ted Husted <hu...@apache.org> wrote:
> The test build of Struts 2.0.9 is available.
>
> Release notes:
>
> * http://struts.apache.org/2.x/docs/release-notes-209.html
>
> Distribution:
>
> * http://people.apache.org/builds/struts/2.0.9/
>
> Maven 2 staging repository:
>
> * http://people.apache.org/builds/struts/2.0.9/m2-staging-repository/
>
> We appreciate the time and effort everyone has put toward contributing
> code and documentation, posting to the mailing lists, and logging
> issues.
>
> Once you have had a chance to review the test build, please respond
> with a vote on its quality:
>
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [ ] General Availability (GA)
>
> Everyone who has tested the build is invited to vote. Votes by PMC
> members are considered binding. A vote passes if there are at least
> three binding +1s and more +1s than -1s.
>
> **** PLEASE NOTE ****
>
> In the interest of time, I would like to declare a quality grade on
> Struts 2.0.9 AS SOON AS we have received three binding votes toward
> one of the grades, and NOT WAIT the usual 72 hours!
>
> If not voting GA, please also be specific as to your concerns, so that
> we can address any issues immediately!
>
> Remember, a vote can be amended at any time to upgrade or downgrade
> the quality of the release based on future experience. If an initial
> vote designates the build as "Beta", the release will be submitted for
> mirroring and announced to the user list. Once released as a public
> beta, subsequent quality votes on a build may be held on the user
> list.
>
> As always, the act of voting carries certain obligations. A binding
> vote not only states an opinion, but means that the voter is agreeing
> to help do the work
>
> -Ted.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org
For additional commands, e-mail: dev-help@struts.apache.org
Re: Struts 2.0.9 release (was Re: S2 security fix release planning (XWork 2.0.4 is out))
Posted by Antonio Petrelli <an...@gmail.com>.
2007/7/23, Ted Husted <hu...@apache.org>:
>
> [X] General Availability (GA)
+1 to GA (non-binding), but only to release ASAP a fixed version, because I
have a pair of notes:
1. the sample applications do not have correct license headers, and this
usually is considered a blocker issue:
https://issues.apache.org/struts/browse/WW-2049
2. The staging repository does not have source and javadoc jars, but this
seems to be a problem of previous versions. I did not open an issue for
this, because I want to hear your thoughts before.
Antonio
Re: Struts 2.0.9 release (was Re: S2 security fix release planning (XWork 2.0.4 is out))
Posted by Ted Husted <hu...@apache.org>.
The test build of Struts 2.0.9 is available.
Release notes:
* http://struts.apache.org/2.x/docs/release-notes-209.html
Distribution:
* http://people.apache.org/builds/struts/2.0.9/
Maven 2 staging repository:
* http://people.apache.org/builds/struts/2.0.9/m2-staging-repository/
We appreciate the time and effort everyone has put toward contributing
code and documentation, posting to the mailing lists, and logging
issues.
Once you have had a chance to review the test build, please respond
with a vote on its quality:
[ ] Leave at test build
[ ] Alpha
[ ] Beta
[ ] General Availability (GA)
Everyone who has tested the build is invited to vote. Votes by PMC
members are considered binding. A vote passes if there are at least
three binding +1s and more +1s than -1s.
**** PLEASE NOTE ****
In the interest of time, I would like to declare a quality grade on
Struts 2.0.9 AS SOON AS we have received three binding votes toward
one of the grades, and NOT WAIT the usual 72 hours!
If not voting GA, please also be specific as to your concerns, so that
we can address any issues immediately!
Remember, a vote can be amended at any time to upgrade or downgrade
the quality of the release based on future experience. If an initial
vote designates the build as "Beta", the release will be submitted for
mirroring and announced to the user list. Once released as a public
beta, subsequent quality votes on a build may be held on the user
list.
As always, the act of voting carries certain obligations. A binding
vote not only states an opinion, but means that the voter is agreeing
to help do the work
-Ted.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org
For additional commands, e-mail: dev-help@struts.apache.org
Re: Struts 2.0.9 release (was Re: S2 security fix release planning (XWork 2.0.4 is out))
Posted by James Mitchell <jm...@gmail.com>.
In addition to these issues, here's something I noticed when doing a
full clean build against a cleaned ~/.m2/ directory:
...
Downloading: http://maven.opensymphony.com/opensymphony/poms/pell-
multipart-2.1.5.pom
Downloading: http://repo1.maven.org/maven2/opensymphony/pell-
multipart/2.1.5/pell-multipart-2.1.5.pom
401b downloaded
[WARNING] POM for 'opensymphony:pell-multipart:pom:2.1.5:provided' is
invalid. It will be ignored for artifact resolution. Reason: Not a
v4.0.0 POM.
Downloading: http://maven.opensymphony.com/opensymphony/jars/pell-
multipart-2.1.5.jar
Downloading: http://repo1.maven.org/maven2/opensymphony/pell-
multipart/2.1.5/pell-multipart-2.1.5.jar
6K downloaded
...
When I actually looked at the contents of the pom, I was a little
shocked. Any chance there will be a newer release? Even if only to
update the pom? Where should we ask about it?
--
James Mitchell
On Jul 23, 2007, at 1:40 AM, Rainer Hermanns wrote:
> Ted,
>
> the group id needs to be changed from opensymphony to
> com.opensymphony.
> This change is already commited to branch the 2.0 branch.
> Is your checkout uptodate?
>
> -Rainer
>> In the interest of time, I'm trying to pickup where James left off
>> with the 2.0.9 release, so that we can get the XWork fix out into the
>> wild.
>>
>> The good news is that I have confirmed that dropping in the new XWork
>> 2.0.4 JAR does fix the problem for Struts 2.0.8, and probably prior.
>> Anyone who wants a fix today should be able to replace the XWork JAR
>> and restart.
>>
>> * http://opensymphony.com/xwork/download.action
>>
>> The bad news is that I'm having trouble building Struts 2.0.9 against
>> XWork 2.0.4. Maven complained that it couldn't download the JAR, so I
>> installed it locally (using the script generated command), and it
>> still wouldn't build (mvn install).
>>
>> I'm still "banging the rocks together" when it comes to Maven. Can
>> anyone confirm the problem, help me work around it, or confirm
>> that we
>> need to do something on the OpenSymphony side.
>>
>> -Ted.
>>
>> ----
>>
>> GroupId: opensymphony
>> ArtifactId: xwork
>> Version: 2.0.4
>>
>> Reason: Unable to download the artifact from any repository
>>
>> Try downloading the file manually from the project website.
>>
>> Then, install it using the command:
>> mvn install:install-file -DgroupId=opensymphony -
>> DartifactId=xwork \
>> -Dversion=2.0.4 -Dpackaging=jar -Dfile=/path/to/file
>>
>>
>> opensymphony:xwork:jar:2.0.4
>>
>> from the specified remote repositories:
>> Maven Snapshots (http://snapshots.maven.codehaus.org/maven2/),
>> central (http://repo1.maven.org/maven2),
>> opensymphony (http://maven.opensymphony.com),
>> apache.snapshots (http://people.apache.org/repo/m2-snapshot-
>> repository),
>> snapshots-maven-codehaus (http://snapshots.maven.codehaus.org/
>> maven2)
>>
>> ----
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org
>> For additional commands, e-mail: dev-help@struts.apache.org
>>
>>
>
>
> --
> Rainer Hermanns
> aixcept
> Neupforte 16
> 52062 Aachen - Germany
> w: http://aixcept.de/
> t: +49-241-4012247
> m: +49-170-3432912
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org
> For additional commands, e-mail: dev-help@struts.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org
For additional commands, e-mail: dev-help@struts.apache.org
Re: Struts 2.0.9 release (was Re: S2 security fix release planning
(XWork 2.0.4 is out))
Posted by Rainer Hermanns <he...@aixcept.de>.
Ted,
the group id needs to be changed from opensymphony to com.opensymphony.
This change is already commited to branch the 2.0 branch.
Is your checkout uptodate?
-Rainer
> In the interest of time, I'm trying to pickup where James left off
> with the 2.0.9 release, so that we can get the XWork fix out into the
> wild.
>
> The good news is that I have confirmed that dropping in the new XWork
> 2.0.4 JAR does fix the problem for Struts 2.0.8, and probably prior.
> Anyone who wants a fix today should be able to replace the XWork JAR
> and restart.
>
> * http://opensymphony.com/xwork/download.action
>
> The bad news is that I'm having trouble building Struts 2.0.9 against
> XWork 2.0.4. Maven complained that it couldn't download the JAR, so I
> installed it locally (using the script generated command), and it
> still wouldn't build (mvn install).
>
> I'm still "banging the rocks together" when it comes to Maven. Can
> anyone confirm the problem, help me work around it, or confirm that we
> need to do something on the OpenSymphony side.
>
> -Ted.
>
> ----
>
> GroupId: opensymphony
> ArtifactId: xwork
> Version: 2.0.4
>
> Reason: Unable to download the artifact from any repository
>
> Try downloading the file manually from the project website.
>
> Then, install it using the command:
> mvn install:install-file -DgroupId=opensymphony -DartifactId=xwork \
> -Dversion=2.0.4 -Dpackaging=jar -Dfile=/path/to/file
>
>
> opensymphony:xwork:jar:2.0.4
>
> from the specified remote repositories:
> Maven Snapshots (http://snapshots.maven.codehaus.org/maven2/),
> central (http://repo1.maven.org/maven2),
> opensymphony (http://maven.opensymphony.com),
> apache.snapshots (http://people.apache.org/repo/m2-snapshot-repository),
> snapshots-maven-codehaus (http://snapshots.maven.codehaus.org/maven2)
>
> ----
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org
> For additional commands, e-mail: dev-help@struts.apache.org
>
>
--
Rainer Hermanns
aixcept
Neupforte 16
52062 Aachen - Germany
w: http://aixcept.de/
t: +49-241-4012247
m: +49-170-3432912
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org
For additional commands, e-mail: dev-help@struts.apache.org
Re: Struts 2.0.9 release (was Re: S2 security fix release planning (XWork 2.0.4 is out))
Posted by Ted Husted <hu...@apache.org>.
Never mind. I thought my local copy was current, but it wasn't, and
after I updated, it started to build.
On 7/22/07, Ted Husted <hu...@apache.org> wrote:
> The bad news is that I'm having trouble building Struts 2.0.9 against
> XWork 2.0.4. Maven complained that it couldn't download the JAR, so I
> installed it locally (using the script generated command), and it
> still wouldn't build (mvn install).
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org
For additional commands, e-mail: dev-help@struts.apache.org