You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ws.apache.org by Colm O hEigeartaigh <co...@apache.org> on 2013/09/10 12:03:54 UTC

No more WSS4J 1.5.x releases

Hi all,

I would like to deprecate the WSS4J 1.5.x series of releases and announce
that the current 1.5.12 release is the last one. Previously I had proposed
(about a year ago) that we would do one more 1.5.13 release. However, there
has been next to no activity regarding 1.5.x on the mailing lists, JIRA,
etc. In addition, 1.6.x is now at 1.6.12 and we are not too far off a 2.0
release.

Most importantly, I don't feel like I can stand over another release from a
security POV.

Any objections?

Colm.


-- 
Colm O hEigeartaigh

Talend Community Coder
http://coders.talend.com

Re: No more WSS4J 1.5.x releases

Posted by Sagara Gunathunga <sa...@gmail.com>.
On Tue, Sep 10, 2013 at 3:03 AM, Colm O hEigeartaigh <co...@apache.org>wrote:

> Hi all,
>
> I would like to deprecate the WSS4J 1.5.x series of releases and announce
> that the current 1.5.12 release is the last one. Previously I had proposed
> (about a year ago) that we would do one more 1.5.13 release. However, there
> has been next to no activity regarding 1.5.x on the mailing lists, JIRA,
> etc. In addition, 1.6.x is now at 1.6.12 and we are not too far off a 2.0
> release.
>
> Most importantly, I don't feel like I can stand over another release from
> a security POV.
>
> Any objections?
>

+1

Thanks !

>
> Colm.
>
>
> --
> Colm O hEigeartaigh
>
> Talend Community Coder
> http://coders.talend.com
>



-- 
Sagara Gunathunga

Blog      - http://ssagara.blogspot.com
Web      - http://people.apache.org/~sagara/
LinkedIn - http://www.linkedin.com/in/ssagara

Re: No more WSS4J 1.5.x releases

Posted by Daniel Kulp <dk...@apache.org>.
On Sep 10, 2013, at 6:03 AM, Colm O hEigeartaigh <co...@apache.org> wrote:

> Hi all,
> 
> I would like to deprecate the WSS4J 1.5.x series of releases and announce that the current 1.5.12 release is the last one. Previously I had proposed (about a year ago) that we would do one more 1.5.13 release. However, there has been next to no activity regarding 1.5.x on the mailing lists, JIRA, etc. In addition, 1.6.x is now at 1.6.12 and we are not too far off a 2.0 release. 
> 
> Most importantly, I don't feel like I can stand over another release from a security POV.
> 
> Any objections?


I certainly agree with this.   There hasn't been any activity on 1.5.x so no point in even pretending we plan to do anything with it.


-- 
Daniel Kulp
dkulp@apache.org - http://dankulp.com/blog
Talend Community Coder - http://coders.talend.com