Result of: [VOTE] Release Tobago 4.5.4, 5.0.0-alpha-1 and checkstyle-rules 14

2021-05-30 Thread Udo Schnurpfeil 
Hi,

thank you for checking and voting for the releases. The result is

+1

Henning Nöth
Werner Punz
Bernd Bohmann

so I will proceed with the next steps for the releases.

Regards,

Udo

Am 30.05.21 um 17:54 schrieb Bernd Bohmann:
> Here is my 
>
> +1
>
> Regards
>
> Bernd
>
> Werner Punz mailto:werner.p...@gmail.com>>
> schrieb am So., 30. Mai 2021, 16:16:
>
> +1
>
> Werner
>
>
> Am Fr., 28. Mai 2021 um 16:21 Uhr schrieb Henning Nöth
> mailto:henning.no...@irian.eu>>:
>
> +1 for all three
>
>
> Am 27.05.21 um 00:51 schrieb Udo Schnurpfeil:
> > Hello,
> >
> > I would like to release:
> > * Tobago 4.5.4
> > * Tobago 5.0.0-alpha
> > * checkstyle-rules 14
> >
> > The artifacts were deployed on nexus repository for binary
> and source
> > packages:
> > * Tobago 4.5.4 [1]
> > * Tobago 5.0.0-alpha [2]
> > * checkstyle-rules 14 [3]
> >
> > The release notes are in Jira:
> > * Tobago 4.5.4 [4]
> > * Tobago 5.0.0-alpha [5]
> >
> > The artifacts are available at the staging repository
> (Nexus) at:
> >
> > * Tobago 4.5.4 [6] (sha-256
> >
> 5928c18106628cdde5f47385e6204fa085bca696b67d20e4c38918e3c7844e3f)
> > * Tobago 5.0.0-alpha [7] (sha-256
> >
> cc9fd9ebf86dd90ba91233a3e480600490399eb93d3bd4ba3d0521dd6efc0900)
> >
> > * checkstyle-rules 14 [8] (sha-256
> >
> 1ff87988bdc152a0dbc80459ee1c4c35265a30881488efdf2f5081330b9d9940)
> >
> > Please vote now! (The vote is open for 72h.)
> >
> > [ ] +1
> > [ ] +0
> > [ ] -1
> >
> > Regards,
> >
> > Udo
> >
> > [1]
> 
> https://repository.apache.org/content/repositories/orgapachemyfaces-1191
> 
> 
> > [2]
> 
> https://repository.apache.org/content/repositories/orgapachemyfaces-1192
> 
> 
> > [3]
> 
> https://repository.apache.org/content/repositories/orgapachemyfaces-1189
> 
> 
> > [4]
> https://issues.apache.org/jira/projects/TOBAGO/versions/12350057
> 
> > [5]
> https://issues.apache.org/jira/projects/TOBAGO/versions/12350237
> 
> > [6]
> >
> 
> https://repository.apache.org/content/repositories/orgapachemyfaces-1191/org/apache/myfaces/tobago/tobago/4.5.4/tobago-4.5.4-source-release.zip
> 
> 
> > [7]
> >
> 
> https://repository.apache.org/content/repositories/orgapachemyfaces-1192/org/apache/myfaces/tobago/tobago/5.0.0-alpha-1/tobago-5.0.0-alpha-1-source-release.zip
> 
> 
> > [8]
> >
> 
> https://repository.apache.org/content/repositories/orgapachemyfaces-1189/org/apache/myfaces/buildtools/checkstyle-rules/14/checkstyle-rules-14-source-release.zip
> 
> 
> >
> >
>

Re: [VOTE] Release Tobago 4.5.4, 5.0.0-alpha-1 and checkstyle-rules 14

2021-05-30 Thread Udo Schnurpfeil 
Hi,

nice to see, there is an release now. I was waiting for it, but haven't
found any progress. We can remove the suppression in the next version.

Regards,

Udo

Am 31.05.21 um 06:39 schrieb Dennis Kieselhorst:
> Hi,
>
> why do we require a checkstyle suppression for CVE-2021-23343 path-parse? 
> https://nvd.nist.gov/vuln/detail/CVE-2021-23343 mentions that it's fixed in 
> 1.0.7, can't we just use that version?
>
> Best,
> Dennis

[jira] [Commented] (TOBAGO-2084) CVE suppression for Tobago 5

2021-05-30 Thread Dennis Kieselhorst (Jira) 


[ 
https://issues.apache.org/jira/browse/TOBAGO-2084?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17354216#comment-17354216
 ] 

Dennis Kieselhorst commented on TOBAGO-2084:


Why do we require a checkstyle suppression for CVE-2021-23343 path-parse? 
https://nvd.nist.gov/vuln/detail/CVE-2021-23343 mentions that it's fixed in 
1.0.7, can't we just use that version?


> CVE suppression for Tobago 5
> 
>
> Key: TOBAGO-2084
> URL: https://issues.apache.org/jira/browse/TOBAGO-2084
> Project: MyFaces Tobago
>  Issue Type: Task
>  Components: Build
>Reporter: Udo Schnurpfeil
>Assignee: Udo Schnurpfeil
>Priority: Minor
> Fix For: 4.5.4, 5.0.0
>
>
> Split CVE suppression list between Tobago 4 and 5
> Also:
>  * add CVE suppression for npm path-parse



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Re: [VOTE] Release Tobago 4.5.4, 5.0.0-alpha-1 and checkstyle-rules 14

2021-05-30 Thread Dennis Kieselhorst 
Hi,

why do we require a checkstyle suppression for CVE-2021-23343 path-parse? 
https://nvd.nist.gov/vuln/detail/CVE-2021-23343 mentions that it's fixed in 
1.0.7, can't we just use that version?

Best,
Dennis

Re: [VOTE] Release Tobago 4.5.4, 5.0.0-alpha-1 and checkstyle-rules 14

2021-05-30 Thread Bernd Bohmann 
Here is my

+1

Regards

Bernd

Werner Punz  schrieb am So., 30. Mai 2021, 16:16:

> +1
>
> Werner
>
>
> Am Fr., 28. Mai 2021 um 16:21 Uhr schrieb Henning Nöth <
> henning.no...@irian.eu>:
>
>> +1 for all three
>>
>>
>> Am 27.05.21 um 00:51 schrieb Udo Schnurpfeil:
>> > Hello,
>> >
>> > I would like to release:
>> > * Tobago 4.5.4
>> > * Tobago 5.0.0-alpha
>> > * checkstyle-rules 14
>> >
>> > The artifacts were deployed on nexus repository for binary and source
>> > packages:
>> > * Tobago 4.5.4 [1]
>> > * Tobago 5.0.0-alpha [2]
>> > * checkstyle-rules 14 [3]
>> >
>> > The release notes are in Jira:
>> > * Tobago 4.5.4 [4]
>> > * Tobago 5.0.0-alpha [5]
>> >
>> > The artifacts are available at the staging repository (Nexus) at:
>> >
>> > * Tobago 4.5.4 [6] (sha-256
>> > 5928c18106628cdde5f47385e6204fa085bca696b67d20e4c38918e3c7844e3f)
>> > * Tobago 5.0.0-alpha [7] (sha-256
>> > cc9fd9ebf86dd90ba91233a3e480600490399eb93d3bd4ba3d0521dd6efc0900)
>> >
>> > * checkstyle-rules 14 [8] (sha-256
>> > 1ff87988bdc152a0dbc80459ee1c4c35265a30881488efdf2f5081330b9d9940)
>> >
>> > Please vote now! (The vote is open for 72h.)
>> >
>> > [ ] +1
>> > [ ] +0
>> > [ ] -1
>> >
>> > Regards,
>> >
>> > Udo
>> >
>> > [1]
>> https://repository.apache.org/content/repositories/orgapachemyfaces-1191
>> > [2]
>> https://repository.apache.org/content/repositories/orgapachemyfaces-1192
>> > [3]
>> https://repository.apache.org/content/repositories/orgapachemyfaces-1189
>> > [4] https://issues.apache.org/jira/projects/TOBAGO/versions/12350057
>> > [5] https://issues.apache.org/jira/projects/TOBAGO/versions/12350237
>> > [6]
>> >
>> https://repository.apache.org/content/repositories/orgapachemyfaces-1191/org/apache/myfaces/tobago/tobago/4.5.4/tobago-4.5.4-source-release.zip
>> > [7]
>> >
>> https://repository.apache.org/content/repositories/orgapachemyfaces-1192/org/apache/myfaces/tobago/tobago/5.0.0-alpha-1/tobago-5.0.0-alpha-1-source-release.zip
>> > [8]
>> >
>> https://repository.apache.org/content/repositories/orgapachemyfaces-1189/org/apache/myfaces/buildtools/checkstyle-rules/14/checkstyle-rules-14-source-release.zip
>> >
>> >
>>
>

Re: [VOTE] Release Tobago 4.5.4, 5.0.0-alpha-1 and checkstyle-rules 14

2021-05-30 Thread Werner Punz 
+1

Werner


Am Fr., 28. Mai 2021 um 16:21 Uhr schrieb Henning Nöth <
henning.no...@irian.eu>:

> +1 for all three
>
>
> Am 27.05.21 um 00:51 schrieb Udo Schnurpfeil:
> > Hello,
> >
> > I would like to release:
> > * Tobago 4.5.4
> > * Tobago 5.0.0-alpha
> > * checkstyle-rules 14
> >
> > The artifacts were deployed on nexus repository for binary and source
> > packages:
> > * Tobago 4.5.4 [1]
> > * Tobago 5.0.0-alpha [2]
> > * checkstyle-rules 14 [3]
> >
> > The release notes are in Jira:
> > * Tobago 4.5.4 [4]
> > * Tobago 5.0.0-alpha [5]
> >
> > The artifacts are available at the staging repository (Nexus) at:
> >
> > * Tobago 4.5.4 [6] (sha-256
> > 5928c18106628cdde5f47385e6204fa085bca696b67d20e4c38918e3c7844e3f)
> > * Tobago 5.0.0-alpha [7] (sha-256
> > cc9fd9ebf86dd90ba91233a3e480600490399eb93d3bd4ba3d0521dd6efc0900)
> >
> > * checkstyle-rules 14 [8] (sha-256
> > 1ff87988bdc152a0dbc80459ee1c4c35265a30881488efdf2f5081330b9d9940)
> >
> > Please vote now! (The vote is open for 72h.)
> >
> > [ ] +1
> > [ ] +0
> > [ ] -1
> >
> > Regards,
> >
> > Udo
> >
> > [1]
> https://repository.apache.org/content/repositories/orgapachemyfaces-1191
> > [2]
> https://repository.apache.org/content/repositories/orgapachemyfaces-1192
> > [3]
> https://repository.apache.org/content/repositories/orgapachemyfaces-1189
> > [4] https://issues.apache.org/jira/projects/TOBAGO/versions/12350057
> > [5] https://issues.apache.org/jira/projects/TOBAGO/versions/12350237
> > [6]
> >
> https://repository.apache.org/content/repositories/orgapachemyfaces-1191/org/apache/myfaces/tobago/tobago/4.5.4/tobago-4.5.4-source-release.zip
> > [7]
> >
> https://repository.apache.org/content/repositories/orgapachemyfaces-1192/org/apache/myfaces/tobago/tobago/5.0.0-alpha-1/tobago-5.0.0-alpha-1-source-release.zip
> > [8]
> >
> https://repository.apache.org/content/repositories/orgapachemyfaces-1189/org/apache/myfaces/buildtools/checkstyle-rules/14/checkstyle-rules-14-source-release.zip
> >
> >
>