Potential Security Issues (was: Re: [VOTE] Release Apache Commons Text 1.11.0 based on RC1)

2023-10-27 Thread Rob Tompkins 
I would bring this up in secur...@commons.apache.org if you have something 
noteworthy. Though a lot of people don’t understand that text manipulation is 
an extremely general toolkit making security concerns something that would 
occur at a higher lever with regards to the system using commons-text. Granted, 
I don’t know your specific situation, thus I would suggest emailing the 
security list and having a conversation there as security conversations in the 
open yield the public knowing about defects before they can be remediated.

Cheers,
-Rob

> On Oct 24, 2023, at 11:46 AM, Elliotte Rusty Harold  
> wrote:
> 
> It's worth triaging the bug tracker sometime. At a quick glance I saw
> several other issues that are arguably security related, mostly around
> character escaping and unescaping.
> 
> On Tue, Oct 24, 2023 at 11:43 AM Gary Gregory  wrote:
>> 
>> The issue is a year old with zero comments, I downgraded it to "Major".
>> 
>> What's worse is that if it were a real security issue, it should have gone
>> through our security protocol and not a Jira (initially at least).
>> 
>> Gary
>> 
>> On Tue, Oct 24, 2023, 10:32 AM Elliotte Rusty Harold 
>> wrote:
>> 
>>> 
>>> https://issues.apache.org/jira/projects/TEXT/issues/TEXT-220?filter=allopenissues
>>> is prirotized as a blocker. I haven't analyzed it in detail so I'm not
>>> sure, but it is security related. If it is a blocker it should be
>>> resolved before 1.11.0. If it is not a blocker, then the priority
>>> should be downgraded.
>>> 
>>> On Tue, Oct 24, 2023 at 9:47 AM Gary Gregory 
>>> wrote:
 
 We have fixed quite a few bugs and added some significant enhancements
 since Apache Commons Text 1.10.0 was released, so I would like to
 release Apache Commons Text 1.11.0.
 
 Apache Commons Text 1.11.0 RC1 is available for review here:
https://dist.apache.org/repos/dist/dev/commons/text/1.11.0-RC1
 (svn revision 64797)
 
 The Git tag commons-text-1.11.0-RC1 commit for this RC is
 6e2be58f54bb8e376fbb5188ad964cde2ff6f362 which you can browse here:
 
>>> https://gitbox.apache.org/repos/asf?p=commons-text.git;a=commit;h=6e2be58f54bb8e376fbb5188ad964cde2ff6f362
 You may checkout this tag using:
git clone https://gitbox.apache.org/repos/asf/commons-text.git
 --branch commons-text-1.11.0-RC1 commons-text-1.11.0-RC1
 
 Maven artifacts are here:
 
>>> https://repository.apache.org/content/repositories/orgapachecommons-1670/org/apache/commons/commons-text/1.11.0/
 
 These are the artifacts and their hashes:
 
 #Release SHA-512s
 #Tue Oct 24 09:39:25 EDT 2023
 
>>> commons-text-1.11.0-bin.tar.gz=2e94877000dd270b69e2e8cbf49f258a90b4c628b6b6b0814e300a2f0e9c391f0816dceb0707e596ae3b7c9532f93e7a4917df47c77f44b3a810e14042ce5f3f
 
>>> commons-text-1.11.0-bin.zip=f2480ffc6e9d1d678233830602da1c525814cfb8e951872dc4725d3a8e1957dcef8291309dc6ad20789003f04d61e21901eeb606d8f7a946e41c599dd0f35141
 
>>> commons-text-1.11.0-bom.json=1acd3a1a3b297f7460b8eb13d0e156644076186de422eaefd74af38e35885190c87e1ff4179222b6d96537a06069df2d03eb77b1bb24ccce8f854bb491e78334
 
>>> commons-text-1.11.0-bom.xml=e17bdf02c8704b62b5a3e27d500675704ffba3dd6d934b5f0877261feebac52037faa6f85eea3823422d5dcdcbc35314ec874c189c0cd20a82093a8598bfa7b9
 
>>> commons-text-1.11.0-javadoc.jar=63eb0a2c9004854d43ed3ea6e113af07aa2d11632af5beb17a3b1da8f65ef0cecb74e10ac2b496f67e4760cdeaf6925647d4b1fccd40dd6ce66dc076009c42d8
 
>>> commons-text-1.11.0-sources.jar=d937fe2eb28fa28a7b345338cc05b5101f3303baa501f8f6ad4a0efb604375b90997292bcccbdc994889415c3ea709b8b18497a04f83f050661db92a7f5ccaae
 
>>> commons-text-1.11.0-src.tar.gz=3a97b58eae3e8a51fe46c3296021622bfe912869b2d9666c745f345d574bbc86307acfb39b329c6a544728b35d200487c6b752de1909a209692a2f00fb260460
 
>>> commons-text-1.11.0-src.zip=72d75261812df2f004aa680d6fbe5c71b77558f89ff03d117363f77811dfbda891c5f489dbae40132063ab1db1d5d30ca81da0674c79c817e9527b260d7a8560
 
>>> commons-text-1.11.0-test-sources.jar=44191a4135b572397131517eac9394564fef0129693110ced2e0d1c8585857b6eedebec8f653bb70f79d74e0334dcc7cc1f663a9101c262651e6e973251e875a
 
>>> commons-text-1.11.0-tests.jar=e7d8c3d6e8c056fe793864d8cac4aa84e49789609fc7ea73270a3ba9829451300d4b6663641a013e3fc25d0ae97f57fc1258b303d89f6ed23c44116b22c0989c
 
>>> org.apache.commons_commons-text-1.11.0.spdx.json=64b008e082a13db858015e8680183a83d4a29be73dba66b5eb49b6ea77e11b676f1f8b997ab4fce49f0778423b97612516139679af1cb552b3adf65f296cccb7
 
 I have tested this with:
 
 mvn -V -Prelease -Ptest-deploy -P jacoco -P japicmp clean package site
>>> deploy
 
 Using:
 
 Apache Maven 3.9.5 (57804ffe001d7215b5e7bcb531cf83df38f93546)
 Maven home: /usr/local/Cellar/maven/3.9.5/libexec
 Java version: 21, vendor: Homebrew, runtime:
 /usr/local/Cellar/openjdk/21/libexec/openjdk.jdk/Contents/Home
 Default locale: en_US, platform encoding: UTF-8
 OS name: "mac

Re: [VOTE] Release Apache Commons DBCP 2.11.0 based on RC1

2023-10-27 Thread Gary Gregory 
My +1

Gary

On Wed, Oct 25, 2023 at 6:26 AM Bruno Kinoshita  wrote:
>
>[x] +1 Release these artifacts
>
> Site reports OK, building fine on
>
> Apache Maven 3.8.5 (3599d3414f046de2324203b78ddcf9b5e4388aa0)
> Maven home: /opt/apache-maven-3.8.5
> Java version: 17.0.8.1, vendor: Private Build, runtime:
> /usr/lib/jvm/java-17-openjdk-amd64
> Default locale: en_US, platform encoding: UTF-8
> OS name: "linux", version: "5.15.0-87-generic", arch: "amd64", family:
> "unix"
>
> On Mon, 23 Oct 2023 at 19:55, Gary Gregory  wrote:
>
> > We have fixed a few bugs and added some enhancements since Apache
> > Commons DBCP 2.9.0 was released, so I would like to release Apache
> > Commons DBCP 2.11.0.
> >
> > Apache Commons DBCP 2.11.0 RC1 is available for review here:
> > https://dist.apache.org/repos/dist/dev/commons/dbcp/2.11.0-RC1
> > (svn revision 64680)
> >
> > The Git tag commons-dbcp-2.11.0-RC1 commit for this RC is
> > e57ce3cf019ffa9534b88735c454c54afbe9849f which you can browse here:
> >
> > https://gitbox.apache.org/repos/asf?p=commons-dbcp.git;a=commit;h=e57ce3cf019ffa9534b88735c454c54afbe9849f
> > You may checkout this tag using:
> > git clone https://gitbox.apache.org/repos/asf/commons-dbcp.git
> > --branch 
> > commons-dbcp-2.11.0-RC1 commons-dbcp-2.11.0-RC1
> >
> > Maven artifacts are here:
> >
> > https://repository.apache.org/content/repositories/orgapachecommons-1668/org/apache/commons/commons-dbcp2/2.11.0/
> >
> > These are the artifacts and their hashes:
> >
> > #Release SHA-512s
> > #Mon Oct 23 13:37:23 EDT 2023
> > Apache\ Commons\
> >
> > DBCP-2.11.0.spdx.rdf.xml=3d02a79fc5cfcb453195efe4a045f7b37ded7ba0fb0eadb301f7800e86019e3d7d9824e47f3db04ce530936cb770ad0c39cff2801070d9171c862085a79416c3
> >
> > commons-dbcp2-2.11.0-bin.tar.gz=34432889d6d973c6ff662c1189713fb48fdb431433a969b11186501fab338b6fe1ec3c402454dfebb7a16f8fb5e8e7c67633868a1a796faafb322d7a8215a527
> >
> > commons-dbcp2-2.11.0-bin.zip=b82e9e8e2c9df52424e59a0fbb2b1bd1cacd9f37686a237392d0801ab4bf69c7d0fe8b886442cc1a0613e04bb96039bf77e093bb0cd861d809ba9761d3a74359
> >
> > commons-dbcp2-2.11.0-bom.json=2c338fc5cea7e3210c4c489316b30c4313ae20139593b29e5d3970b01f17e094f2880e13230c83ac02373b8b8e30c162835bbcf85502084eab40f87b94bf4560
> >
> > commons-dbcp2-2.11.0-bom.xml=93a1d28bfa6e2f3d99452be23e02aae107b32a9cf7bdd5547c76f3bcb93a7f536a7a2f71231975e794e096c335618e14c43c52e53fd34bc12c626d10e6efb72b
> >
> > commons-dbcp2-2.11.0-javadoc.jar=bb4235fb91a74934ef408439019091a2f9938d3297fa932aa58f104532aab02911be77a674c945ea62b1d7dc1713466c375bedd87d0395db44f3a9aa3cf47870
> >
> > commons-dbcp2-2.11.0-sources.jar=a4f5f86a281853191a526d53dc05551cb7a72a83078d521c6e7a06e92a607db3a7627af4d819d90bbc168c20228f4e2e55a1763c77a4c7e085171964b692810b
> >
> > commons-dbcp2-2.11.0-src.tar.gz=2f73c4637a098925f7cf56fc49ee390a471f1f3faa50e8ee1595c762644437ea85683fa1c3ee44bf89b2f821716f6ee344ea09839cda6dee173b59dc49ba524b
> >
> > commons-dbcp2-2.11.0-src.zip=212e84f4a31a7b192ae4d534292b4d5c6dd48f3650c1caf844dad34b97c498d027266f5d3fae220efee1bbdb75df95adc9d6f58f35bb445b653dbbee3c485de2
> >
> > commons-dbcp2-2.11.0-test-sources.jar=78107b2437aa4b7232522f8c9791085da2f8421056208f7df220e327d7b45efb222da0eb2d1add99aa3d0d4c15e934d3a81f9cc6a5aa13bbd2f96370ca4d3365
> >
> > commons-dbcp2-2.11.0-tests.jar=553de32da56551a221fd7f974a6b704fc82a130546469ccb9de857504be4e4db3a8fde0911602270ca2c66b8dd61f5066c72ea935f39c1555ae5b7adc7b2af15
> >
> > I have tested this with:
> >
> > mvn -V -Ptest-deploy -P jacoco -P japicmp clean package site deploy
> >
> > Using:
> >
> > pache Maven 3.9.5 (57804ffe001d7215b5e7bcb531cf83df38f93546)
> > Maven home: /usr/local/Cellar/maven/3.9.5/libexec
> > Java version: 21, vendor: Homebrew, runtime:
> > /usr/local/Cellar/openjdk/21/libexec/openjdk.jdk/Contents/Home
> > Default locale: en_US, platform encoding: UTF-8
> > OS name: "mac os x", version: "14.0", arch: "x86_64", family: "mac"
> > Darwin gdg-mac-mini.local 23.0.0 Darwin Kernel Version 23.0.0: Fri Sep
> > 15 14:42:42 PDT 2023; root:xnu-10002.1.13~1/RELEASE_X86_64 x86_64
> >
> > Details of changes since 2.9.0 are in the release notes:
> >
> > https://dist.apache.org/repos/dist/dev/commons/dbcp/2.11.0-RC1/RELEASE-NOTES.txt
> >
> > https://dist.apache.org/repos/dist/dev/commons/dbcp/2.11.0-RC1/site/changes-report.html
> >
> > Site:
> >
> > https://dist.apache.org/repos/dist/dev/commons/dbcp/2.11.0-RC1/site/index.html
> > (note some *relative* links are broken and the 2.11.0 directories
> > are not yet created - these will be OK once the site is deployed.)
> >
> > JApiCmp Report (compared to 2.9.0):
> >
> > https://dist.apache.org/repos/dist/dev/commons/dbcp/2.11.0-RC1/site/japicmp.html
> >
> > RAT Report:
> >
> > https://dist.apache.org/repos/dist/dev/commons/dbcp/2.11.0-RC1/site/rat-report.html
> >
> > KEYS:
> >   https://downloads.apache.org/commons/KEYS
> >
> > Please review the release candidate and vote.
> > This vote will

Re: [ALL] parent uses commons.encoding=iso-8859-1; change to UTF-8?

2023-10-27 Thread Elliotte Rusty Harold 
https://survey.stackoverflow.co/2022#overview shows professional use
of OS by developers has Windows below 50%, more than Mac or Linux but
less than the combination of the two.

The JetBrains 2021 survey also shows Mac + Linux > Windows:
https://www.jetbrains.com/lp/devecosystem-2021/ (2022 doesn't seem to
have asked that question)

And if you've visited any US tech company or conference in the last
ten years, you're familiar with the sea of MacBooks in the audience.
Yes, there'll be a number of Thinkpads and those are as often as not
running Linux. Maybe things are different outside the US, but in the
US it's not even close.

As a development platform, Windows is primarily used by programmers
writing Windows apps, a large market but not one served by Java. It
also has some traction in enterprises that have standardized on
Windows across devs and non-devs alike.

It's silly to stay on ISO-8859-1 for a very minor convenience to
American and European Windows developers (an even smaller minority
than Windows developers since not Windows machines outside
Latin-alphabet languages already use other character sets.) UTF-8 is
the standard, well-supported character encoding for everyone.

On Fri, Oct 27, 2023 at 12:50 PM Gary Gregory  wrote:
>
> On Fri, Oct 27, 2023 at 8:43 AM Elliotte Rusty Harold
>  wrote:
> >
> > +1
> >
> > Using anything other than UTF-8 is a bug.
> >
> > There are more Java developers on Linux and Mac these days than
> > Windows, nor will development tools on Windows have any problem with
> > this.
>
> There is obviously no way to know that.
>
> Gary
>
> >
> > On Fri, Oct 27, 2023 at 10:16 AM sebb  wrote:
> > >
> > > As the subject says - it seems wrong to be using iso-8859-1 these days
> > > as the default encoding.
> > >
> > > Thoughts?
> > >
> > > Sebb
> > >
> > > -
> > > To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> > > For additional commands, e-mail: dev-h...@commons.apache.org
> > >
> >
> >
> > --
> > Elliotte Rusty Harold
> > elh...@ibiblio.org
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> > For additional commands, e-mail: dev-h...@commons.apache.org
> >
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> For additional commands, e-mail: dev-h...@commons.apache.org
>


-- 
Elliotte Rusty Harold
elh...@ibiblio.org

-
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org

Re: [ALL] parent uses commons.encoding=iso-8859-1; change to UTF-8?

2023-10-27 Thread Gary Gregory 
On Fri, Oct 27, 2023 at 8:43 AM Elliotte Rusty Harold
 wrote:
>
> +1
>
> Using anything other than UTF-8 is a bug.
>
> There are more Java developers on Linux and Mac these days than
> Windows, nor will development tools on Windows have any problem with
> this.

There is obviously no way to know that.

Gary

>
> On Fri, Oct 27, 2023 at 10:16 AM sebb  wrote:
> >
> > As the subject says - it seems wrong to be using iso-8859-1 these days
> > as the default encoding.
> >
> > Thoughts?
> >
> > Sebb
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> > For additional commands, e-mail: dev-h...@commons.apache.org
> >
>
>
> --
> Elliotte Rusty Harold
> elh...@ibiblio.org
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> For additional commands, e-mail: dev-h...@commons.apache.org
>

-
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org

Re: [ALL] parent uses commons.encoding=iso-8859-1; change to UTF-8?

2023-10-27 Thread Elliotte Rusty Harold 
+1

Using anything other than UTF-8 is a bug.

There are more Java developers on Linux and Mac these days than
Windows, nor will development tools on Windows have any problem with
this.

On Fri, Oct 27, 2023 at 10:16 AM sebb  wrote:
>
> As the subject says - it seems wrong to be using iso-8859-1 these days
> as the default encoding.
>
> Thoughts?
>
> Sebb
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> For additional commands, e-mail: dev-h...@commons.apache.org
>


-- 
Elliotte Rusty Harold
elh...@ibiblio.org

-
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org

Re: [VOTE] Release Apache Commons Text 1.11.0 based on RC1

2023-10-27 Thread Gary Gregory 
My +1

Gary

On Thu, Oct 26, 2023 at 10:08 AM Rob Tompkins  wrote:
>
> +1 - signatures good, rat good, reports good, builds good, site good, release 
> note good.
>
> Keep crushing it Gary!
>
> Cheers,
> -Rob
>
> > On Oct 24, 2023, at 9:47 AM, Gary Gregory  wrote:
> >
> > We have fixed quite a few bugs and added some significant enhancements
> > since Apache Commons Text 1.10.0 was released, so I would like to
> > release Apache Commons Text 1.11.0.
> >
> > Apache Commons Text 1.11.0 RC1 is available for review here:
> >https://dist.apache.org/repos/dist/dev/commons/text/1.11.0-RC1
> > (svn revision 64797)
> >
> > The Git tag commons-text-1.11.0-RC1 commit for this RC is
> > 6e2be58f54bb8e376fbb5188ad964cde2ff6f362 which you can browse here:
> >
> > https://gitbox.apache.org/repos/asf?p=commons-text.git;a=commit;h=6e2be58f54bb8e376fbb5188ad964cde2ff6f362
> > You may checkout this tag using:
> >git clone https://gitbox.apache.org/repos/asf/commons-text.git
> > --branch commons-text-1.11.0-RC1 commons-text-1.11.0-RC1
> >
> > Maven artifacts are here:
> >
> > https://repository.apache.org/content/repositories/orgapachecommons-1670/org/apache/commons/commons-text/1.11.0/
> >
> > These are the artifacts and their hashes:
> >
> > #Release SHA-512s
> > #Tue Oct 24 09:39:25 EDT 2023
> > commons-text-1.11.0-bin.tar.gz=2e94877000dd270b69e2e8cbf49f258a90b4c628b6b6b0814e300a2f0e9c391f0816dceb0707e596ae3b7c9532f93e7a4917df47c77f44b3a810e14042ce5f3f
> > commons-text-1.11.0-bin.zip=f2480ffc6e9d1d678233830602da1c525814cfb8e951872dc4725d3a8e1957dcef8291309dc6ad20789003f04d61e21901eeb606d8f7a946e41c599dd0f35141
> > commons-text-1.11.0-bom.json=1acd3a1a3b297f7460b8eb13d0e156644076186de422eaefd74af38e35885190c87e1ff4179222b6d96537a06069df2d03eb77b1bb24ccce8f854bb491e78334
> > commons-text-1.11.0-bom.xml=e17bdf02c8704b62b5a3e27d500675704ffba3dd6d934b5f0877261feebac52037faa6f85eea3823422d5dcdcbc35314ec874c189c0cd20a82093a8598bfa7b9
> > commons-text-1.11.0-javadoc.jar=63eb0a2c9004854d43ed3ea6e113af07aa2d11632af5beb17a3b1da8f65ef0cecb74e10ac2b496f67e4760cdeaf6925647d4b1fccd40dd6ce66dc076009c42d8
> > commons-text-1.11.0-sources.jar=d937fe2eb28fa28a7b345338cc05b5101f3303baa501f8f6ad4a0efb604375b90997292bcccbdc994889415c3ea709b8b18497a04f83f050661db92a7f5ccaae
> > commons-text-1.11.0-src.tar.gz=3a97b58eae3e8a51fe46c3296021622bfe912869b2d9666c745f345d574bbc86307acfb39b329c6a544728b35d200487c6b752de1909a209692a2f00fb260460
> > commons-text-1.11.0-src.zip=72d75261812df2f004aa680d6fbe5c71b77558f89ff03d117363f77811dfbda891c5f489dbae40132063ab1db1d5d30ca81da0674c79c817e9527b260d7a8560
> > commons-text-1.11.0-test-sources.jar=44191a4135b572397131517eac9394564fef0129693110ced2e0d1c8585857b6eedebec8f653bb70f79d74e0334dcc7cc1f663a9101c262651e6e973251e875a
> > commons-text-1.11.0-tests.jar=e7d8c3d6e8c056fe793864d8cac4aa84e49789609fc7ea73270a3ba9829451300d4b6663641a013e3fc25d0ae97f57fc1258b303d89f6ed23c44116b22c0989c
> > org.apache.commons_commons-text-1.11.0.spdx.json=64b008e082a13db858015e8680183a83d4a29be73dba66b5eb49b6ea77e11b676f1f8b997ab4fce49f0778423b97612516139679af1cb552b3adf65f296cccb7
> >
> > I have tested this with:
> >
> > mvn -V -Prelease -Ptest-deploy -P jacoco -P japicmp clean package site 
> > deploy
> >
> > Using:
> >
> > Apache Maven 3.9.5 (57804ffe001d7215b5e7bcb531cf83df38f93546)
> > Maven home: /usr/local/Cellar/maven/3.9.5/libexec
> > Java version: 21, vendor: Homebrew, runtime:
> > /usr/local/Cellar/openjdk/21/libexec/openjdk.jdk/Contents/Home
> > Default locale: en_US, platform encoding: UTF-8
> > OS name: "mac os x", version: "14.0", arch: "x86_64", family: "mac"
> > Darwin gdg-mac-mini.local 23.0.0 Darwin Kernel Version 23.0.0: Fri Sep
> > 15 14:42:42 PDT 2023; root:xnu-10002.1.13~1/RELEASE_X86_64 x86_64
> >
> > Details of changes since 1.10.0 are in the release notes:
> >
> > https://dist.apache.org/repos/dist/dev/commons/text/1.11.0-RC1/RELEASE-NOTES.txt
> >
> > https://dist.apache.org/repos/dist/dev/commons/text/1.11.0-RC1/site/changes-report.html
> >
> > Site:
> >
> > https://dist.apache.org/repos/dist/dev/commons/text/1.11.0-RC1/site/index.html
> >(note some *relative* links are broken and the 1.11.0 directories
> > are not yet created - these will be OK once the site is deployed.)
> >
> > JApiCmp Report (compared to 1.10.0):
> >
> > https://dist.apache.org/repos/dist/dev/commons/text/1.11.0-RC1/site/japicmp.html
> >
> > RAT Report:
> >
> > https://dist.apache.org/repos/dist/dev/commons/text/1.11.0-RC1/site/rat-report.html
> >
> > KEYS:
> >  https://downloads.apache.org/commons/KEYS
> >
> > Please review the release candidate and vote.
> > This vote will close no sooner than 72 hours from now.
> >
> >  [ ] +1 Release these artifacts
> >  [ ] +0 OK, but...
> >  [ ] -0 OK, but really should fix...
> >  [ ] -1 I oppose this release because...
> >
> > Thank you,
> >
> > Gary Gregory,
> > Release Manager (using key 86fdc7e2a11262cb)
> >
> > For following is intended as a helper

Re: [ALL] parent uses commons.encoding=iso-8859-1; change to UTF-8?

2023-10-27 Thread Gary Gregory 
That will likely mess up some people on Windows or who have that
encoding as their default OS encoding (Windows in US at least).

The good news is that modern Java 18 IIRC switched to UTF-8.

Gary

On Fri, Oct 27, 2023 at 6:17 AM sebb  wrote:
>
> As the subject says - it seems wrong to be using iso-8859-1 these days
> as the default encoding.
>
> Thoughts?
>
> Sebb
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> For additional commands, e-mail: dev-h...@commons.apache.org
>

-
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org

[ANNOUNCE] Apache Commons CLI 1.6.0

2023-10-27 Thread Gary Gregory 
The Apache Commons team announces Apache Commons CLI 1.6.0.

Apache Commons CLI provides a simple API for working with the command
line arguments and options.

This release contains small new features and bug fixes

Historical list of changes:
https://commons.apache.org/proper/commons-cli/changes-report.html

For complete information on Apache Commons CLI, including instructions
on how to submit bug reports, patches, or suggestions for improvement,
see the Apache Commons CLI website:

https://commons.apache.org/proper/commons-cli/

Download page: https://commons.apache.org/proper/commons-cli/download_cli.cgi

Have fun!
Gary Gregory
- The Apache Commons Team

-
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org

[ALL] parent uses commons.encoding=iso-8859-1; change to UTF-8?

2023-10-27 Thread sebb 
As the subject says - it seems wrong to be using iso-8859-1 these days
as the default encoding.

Thoughts?

Sebb

-
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org