Re: Release Ant 1.10.15?

2024-02-23 Thread Stefan Bodewig
On 2024-02-21, Jaikiran Pai wrote: > If it's OK then I plan to do the next 1.10.x release in a few weeks, > unless someone is working on anything that needs to be part of this > release. +1 I currently haven't got anything I'd be working on. Stefan

Re: Issues with how Ivy processes maven dependency management dependencies compared to adding a classifier key

2024-02-15 Thread Stefan Bodewig
On 2024-02-15, Kittisopikul, Mark Andrew wrote: > I applied for an account again. Great, I've approved the request. Hope things are moving now. Stefan - To unsubscribe, e-mail: dev-unsubscr...@ant.apache.org For additional

Re: Issues with how Ivy processes maven dependency management dependencies compared to adding a classifier key

2024-02-05 Thread Stefan Bodewig
he project at dev@ant.apache.org to find out where to submit issues. > " > https://selfserve.apache.org/jira-account.html > Sincerely, > Mark > ____ > From: Stefan Bodewig > Sent: Sunday, November 19, 2023 5:04 AM > To: dev@ant.apache.org

Re: Issues with how Ivy processes maven dependency management dependencies compared to adding a classifier key

2024-02-03 Thread Stefan Bodewig
On 2024-02-03, Kittisopikul, Mark Andrew wrote: > I submitted a cleaner pull request here to add the maven classifier to the > extra info key. > https://github.com/apache/ant-ivy/pull/99 I haven't looked into it, yet, will do some time later - can't promise to do so this weekened. > I am not

Re: IVY-1576 still exist in 2.5.2

2024-01-07 Thread Stefan Bodewig
On 2024-01-07, Austin Zhang wrote: > So I think the tips for folks bumping into this issue is to clean the ivy > cache. Yes, absolutely. I'll try to carve out some time to update the Ivy release notes for 2.5.2 to reflect this. This seems to be true for all issues involving POM parsing errors.

Re: IVY-1576 still exist in 2.5.2

2024-01-07 Thread Stefan Bodewig
On 2023-12-13, Austin Zhang wrote: > java -jar apache-ivy-2.5.2/ivy-2.5.2.jar -dependency "org.tensorflow" > "tensorflow-core-platform-gpu" "0.5.0" -retrieve > "ivy/[organization]_[artifact]-[revision](-[classifier]).[ext]" -confs > "runtime" -debug > files in ivy folder are: >

Re: Future of Ivy and IvyDE

2023-12-04 Thread Stefan Bodewig
Hi Eric On 2023-12-04, Eric Milles wrote: > It sounds to me like Ivy and IvyDE -- even as a retired subproject -- should > move out from under Apache Ant. Just for my clarity, is Apache Ivy a > top-level project or a subproject of Apache Ant? The top level ASF project here is "Apache Ant"

Re: Need help with Ant tests

2023-11-26 Thread Stefan Bodewig
Hi Claude, I've created https://github.com/Claudenw/creadur-rat/pull/4 The AntUnit tests all pass for me when run via "ant -f run-antunit.xml" inside apache-rat-tasks. I don't know enough about the way classloaders and I/O redrections work in Maven's antrun to be of any help here. I needed to

[ANN] Apache IvyDE Retired

2023-11-26 Thread Stefan Bodewig
community grow around IvyDE, the subproject could be reactivated[3]. We want to thank the people who created or contributed to IvyDE over the years. Stefan Bodewig on behalf of the Ant PMC. [1] https://lists.apache.org/thread/wo32q8s8o8z9m126gz3m533q2fnqq21o [2] https://ant.apache.org/processes.html

Re: [RESULT] Retire the IvyDE Subproject

2023-11-26 Thread Stefan Bodewig
Stefan Bodewig writes: > I'll now proceeded with the process outlines at > https://ant.apache.org/processes.html#Retire%20a%20subproject%20or%20component https://issues.apache.org/jira/browse/INFRA-25209 https://issues.apache.org/jira/browse/INFRA-25210

[RESULT] Retire the IvyDE Subproject

2023-11-26 Thread Stefan Bodewig
Hi all, with +1s by PMC members Jaikiran Pai, Dominique Devienne, Nicolas Lalevée, Maarten Coene and Martijn Kruithof (I seem to have forgotten to vote myself, but am +1) - and no other votes, it is decided IvyDE is going to be retired. I'll now proceeded with the process outlines at

[VOTE] Retire the IvyDE Subproject

2023-11-22 Thread Stefan Bodewig
I'm really sorry and embarrassed but I seem to have misunderstood the purpose of the Attic, it is not responsible for retiring subprojects, only for top level projects like Ant as a whole with all subprojects. The correct process to follow is

Re: [RESULT] Send IvyDE to the Apache Attic

2023-11-22 Thread Stefan Bodewig
On 2023-11-22, Stefan Bodewig wrote: > I'll draft the board resolution and will coordinate adding it to the > next board meeting agenda. I'm really sorry and embarrassed but I seem to have misunderstood the purpose of the Attic, it is not responsible for retiring subprojects, only for top

[RESULT] Send IvyDE to the Apache Attic

2023-11-22 Thread Stefan Bodewig
Hi all with +1s by the PMC members Jaikiran Pai, Martijn Kruithof, Nicolas Lalevée, Maarten Coene, Dominique Devienne and myself - and no other votes - the vote has passed. I'll draft the board resolution and will coordinate adding it to the next board meeting agenda. Many thanks for those who

Re: [VOTE] Send IvyDE to the Apache Attic

2023-11-22 Thread Stefan Bodewig
On 2023-11-20, Nicolas Lalevée wrote: > PS: a little part of me is crying, this project was my first substantial > involvement in the ASF ^^ I understand you far better than you will know. Letting go is hard and I can't say I'd be happy calling for this vote.. Cheers Stefan

Re: Packaging ivy with Eclipse

2023-11-21 Thread Stefan Bodewig
On 2023-11-21, Jörn Guy Süß wrote: > Does anyone know how challenging it would be w.r.t. licenses to package ivy > with the main Eclipse distribution? I feel having ivy on board would make a > big difference to usability. After now having an Eclipse installation I thought it would be easy to

Re: [VOTE] Send IvyDE to the Apache Attic

2023-11-19 Thread Stefan Bodewig
officially recording my own vote On 2023-11-19, Stefan Bodewig wrote: > So here is the formal vote: > I hereby propose to create a board resolution that will send IvyDE to > the Apache Attic. +1 Stefan - To unsub

[VOTE] Send IvyDE to the Apache Attic

2023-11-19 Thread Stefan Bodewig
Hi all, within the "Future of Ivy and IvyDE" thread[1] I started about three months ago to me it seemed as if people wouldn't be happy if IvyDE died but I also didn't sense there was a community willing to keep it alive. Consequently I now call for a vote to send IvyDE to the Apache Attic

Trying my hands at an ivy-updatesite (was Re: Future of Ivy and IvyDE)

2023-11-19 Thread Stefan Bodewig
On 2023-09-05, Nicolas Lalevée wrote: > And we tried our best to be opened on how to build and release the > plugin and the updatesite, it is documented [2]. On my machine which > just have Ant and Java installed, I just tried and I have been able to > build of the updatesite with the last

Re: Issues with how Ivy processes maven dependency management dependencies compared to adding a classifier key

2023-11-19 Thread Stefan Bodewig
Hi Mark first of all please go and read https://lists.apache.org/thread/h372vt1ztd6gfmgmfkmqzrksx6fpw97g I very much doubt you will find any people who know Ivy's internals better than you do (by now) on this list. On 2023-11-17, Kittisopikul, Mark Andrew wrote: > Hello, > At the Howard

Re: Need help with Ant tests

2023-11-19 Thread Stefan Bodewig
Hi Claude On 2023-10-01, Claude Warren wrote: > I have been working on RAT-321 [1] and am trying to rework the ant tests > for the new structure. > My goal has been to get all options supported in any of the 3 configuration > interfaces (cli, Ant, Maven) to be supported in the

Re: Need help with release versions in bugzilla

2023-09-13 Thread Stefan Bodewig
t; -Jaikiran > On 08/09/23 12:13 pm, Stefan Bodewig wrote: >> On 2023-09-08, Jaikiran Pai wrote: >>> Can someone with admin permissions please mark 1.10.14 as a released >>> version in Ant bugzilla and create a new 1.10.15 release in it? >> I think I've already d

Re: Need help with release versions in bugzilla

2023-09-08 Thread Stefan Bodewig
On 2023-09-08, Jaikiran Pai wrote: > Can someone with admin permissions please mark 1.10.14 as a released > version in Ant bugzilla and create a new 1.10.15 release in it? I think I've already done so when the release was published, let me check. Yes, I see them in the admin interface. Cheers

Re: Future of Ivy and IvyDE

2023-08-29 Thread Stefan Bodewig
On 2023-08-28, Cohen, Ross wrote: > Perhaps someone from the Ant team can poke the Eclipse people and tell > them that there are devs/teams that will simply move to another IDE > rather than give up Ant/Ivy/IvyIDE; it might be very much in their > best interest to put a dev part time on

Re: Future of Ivy and IvyDE

2023-08-28 Thread Stefan Bodewig
On 2023-08-22, Jason Guild wrote: > I can confirm that in the not very distant past there were multiple > people (including myself) who submitted pull requests for Ivy to both > make improvements as well as address bugs. They were left to rot for > far too long. This is unfortunate. In a way

Re: Future of Ivy and IvyDE

2023-08-28 Thread Stefan Bodewig
Hi sorry for my bad timing sending out an email and then being unbale to answer for days. This is not what I intended. Let me try to answer what I've seen so far. And I'll try to keep my personal opinion out this time. It is pretty obvious Ivy is used today and maybe even loved by some. This is

Future of Ivy and IvyDE

2023-08-22 Thread Stefan Bodewig
Hi all before I get to the actual content of this mail: * I'm cross-posting to three lists but I ask you to keep responses to dev@ant only (and join the list if necessary) if you want to respond. * what I write is my personal opinion and not shared by the PMC as a whole. The people on the

CVE-2022-46751: Apache Ivy: XML External Entity vulnerability in Apache Ivy

2023-08-20 Thread Stefan Bodewig
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Severity: moderate Affected versions: - - Apache Ivy 1.0.0 through 2.5.1 Description: Improper Restriction of XML External Entity Reference, XML Injection (aka Blind XPath Injection) vulnerability in Apache Software Foundation Apache Ivy.This

[ANN] Apache Ivy 2.5.2 Released

2023-08-20 Thread Stefan Bodewig
the Apache Ivy website: https://ant.apache.org/ivy/ Stefan Bodewig, on behalf of the Apache Ant community - To unsubscribe, e-mail: dev-unsubscr...@ant.apache.org For additional commands, e-mail: dev-h...@ant.apache.org

[RESULT] Release Ivy 2.5.2 Based on RC2

2023-08-20 Thread Stefan Bodewig
Hi with three binding +1s by Maarten, Jaikiran and myself, the vote has passed. I'll proceed with publishing the release artifacts and will announce the release after the mirros had time to catch up. Thanks to all who took a look at the release candidate Stefan

Re: [VOTE] Release Ivy 2.5.2 Based on RC2

2023-08-19 Thread Stefan Bodewig
just officially registering my implicit +1 Stefan On 2023-08-17, Stefan Bodewig wrote: > Hi all > I've cancelled the previous vote as the NOTICE file didn't contain > 2023. sorry about this. Now I've built a new release candidate for Ivy > 2.5.2 > Changelog: > - FIX: ivy:r

[VOTE] Release Ivy 2.5.2 Based on RC2

2023-08-17 Thread Stefan Bodewig
Hi all I've cancelled the previous vote as the NOTICE file didn't contain 2023. sorry about this. Now I've built a new release candidate for Ivy 2.5.2 Changelog: - FIX: ivy:retrieve could fail because of a `NullPointerException` (IVY-1641) - FIX: reading POMs may loose dependencies when

Re: [VOTE] Release Ivy 2.5.2 Based on RC1

2023-08-17 Thread Stefan Bodewig
On 2023-08-17, Jaikiran Pai wrote: > On 17/08/23 10:02 am, Stefan Bodewig wrote: >> I have not built the update site because I couldn't get the build >> process to work, so if anybody with the proper build environment wants >> to create one, thank you. I'm sure we can create

[CANCELLED][VOTE] Release Ivy 2.5.2 Based on RC1

2023-08-17 Thread Stefan Bodewig
On 2023-08-17, Jaikiran Pai wrote: > The NOTICE file however will need an update to the year (it's > currently having 2022). Ah, too bad, let me re-roll the artifacts. Stefan - To unsubscribe, e-mail:

Re: [VOTE] Release Apache Ant 1.10.14 based on RC1

2023-08-17 Thread Stefan Bodewig
On 2023-08-16, Jaikiran Pai wrote: > I've created RC1 release candidate for Ant 1.10.14 release: +1 Stefan - To unsubscribe, e-mail: dev-unsubscr...@ant.apache.org For additional commands, e-mail: dev-h...@ant.apache.org

[VOTE] Release Ivy 2.5.2 Based on RC1

2023-08-16 Thread Stefan Bodewig
Hi all I've built a release candidate for Ivy 2.5.2 Changelog: - FIX: ivy:retrieve could fail because of a `NullPointerException` (IVY-1641) - FIX: reading POMs may loose dependencies when multiple Maven dependencies only differ in `classifier` (IVY-1642) - IMPROVEMENT: Upgrade Apache

Release Ivy 2.5.2

2023-08-13 Thread Stefan Bodewig
Hi all while Jaikiran talks about release Ant, I intend to cut a new Ivy release soonish. We've seen two bug fixes to Ivy and I believe IVY-1642 shows a serious incompatibility with Ivy. Cheers Stefan

Re: Release Ant 1.10.14?

2023-08-13 Thread Stefan Bodewig
Jaikiran Pai writes: > If there are no objections then I'll send out a formal vote mail for > the 1.10.14 release, this coming week. Sounds good to me. Thanks Stefan - To unsubscribe, e-mail:

Issues running tests on Gump after switching to Java 21

2023-05-14 Thread Stefan Bodewig
Hi all Mark has upgraded Gump to Java21 and it seems running tests with Ant is somehow broken. http://vmgump.apache.org/project_todos.html I haven't looked into the details myself, yet, just wanted to point out the issues. Stefan

Re: Need Help Understanding Ivy's dependency/artifacts

2023-04-25 Thread Stefan Bodewig
Maarten Coene writes: > thanks for looking into this. > After having a quick look at the diffs and without being able to look into > the code myself, I think I prefer your approach to solve the issue. > > Maybe Jaikiran can remember more details, but I'd go for backing out the > changes to 

Need Help Understanding Ivy's dependency/artifacts

2023-04-14 Thread Stefan Bodewig
Hi all tldr; there is a bug report about Ivy no handling dependencies to modules with multiple artifacts - some with classifier, but not all - and the way I fixed this seems to work. But I have no idea whether I am fixing it the correct way and need help by somebody understanding Ivy' semantics -

Re: Improvement ideas for Ant 1.10.13

2023-03-02 Thread Stefan Bodewig
On 2023-03-02, Stefan Bodewig wrote: > On 2023-02-27, KUNES Michael wrote: >> 1) I agree that this NPE might not occur under normal >> circumstances. Therefore, I am quite sure that the finding is due to >> our static code analysis tool remarks and just some >>

Re: Improvement ideas for Ant 1.10.13

2023-03-02 Thread Stefan Bodewig
On 2023-03-02, KUNES Michael wrote: > Thank you for the hint! We will evaluate that alternative soon. > Problem for such an evaluation is: we've a huge amount of different HW types > (all embedded) with SW from brand new to VERY old (10y+). Therefore, such > replacements always are dangerous

Re: Improvement ideas for Ant 1.10.13

2023-03-02 Thread Stefan Bodewig
On 2023-02-27, KUNES Michael wrote: > We are using tar as part of our software to prepare data sent to > devices that use tar or tgz format for receiving e.g.: CSV, > XML,... files Then I'd strongly recommend you look into replacing it with Commons Commpress at one point in time. The libary does

Re: Improvement ideas for Ant 1.10.13

2023-02-26 Thread Stefan Bodewig
Hi Michael many thanks for your suggestions. You could have just opened enahncement requests in Bugzilla but personally I appreciate you trying to have a discussion about the changes here first. I am wondering whether you are using the tar package directly or you are actually facing issues with

Re: Pass secret to Exec task

2023-01-31 Thread Stefan Bodewig
On 2023-01-30, Gilles Querret wrote: > I have to pass a secret to an Exec task (in a custom Ant plugin), and one > way to do that is to pipe the output of another command line to this exec > task. Unfortunately there is no direct support for pipes. > I've tried setInputString, but the

Re: Need help with Ant versions in bugzilla

2023-01-10 Thread Stefan Bodewig
On 2023-01-10, Jaikiran Pai wrote: > Now that we have released 1.10.13 of Ant, could someone with bugzilla > access please create a new 1.10.13 product version and a new 1.10.14 > milestone version, for Ant? I have already done so when you closed the vote :-) Stefan

Re: [VOTE] Release Apache Ant 1.10.13 based on RC1

2023-01-06 Thread Stefan Bodewig
On 2023-01-04, Jaikiran Pai wrote: > Happy new year, everyone :) to you as well > I've created RC1 release candidate for Ant 1.10.13 release: > git tag: ANT_1.10.13_RC1 >     on commit: 6996b80b5fb59cc2769f7098d837de32680a > tarballs: https://dist.apache.org/repos/dist/dev/ant/ +1

Re: Release Ant 1.10.13?

2022-12-18 Thread Stefan Bodewig
On 2022-12-11, Jaikiran Pai wrote: > On 26/11/22 11:33 pm, Stefan Bodewig wrote: >> On 2022-11-19, Stefan Bodewig wrote: >> Finding A solution was a nice puzzle, but that doesn't mean we have to >> use it. > I had a look at that commit and the PR discussion where the i

Re: Jira account with IvyDE issue reporting ability

2022-12-10 Thread Stefan Bodewig
On 2022-12-10, KDV wrote: > i would like to vote for a bug and add comment to it in IvyDE project. > could you please...? I've moderated this mail through to the list as at least I have missed the annoucement of our infra team which said we'd no longer allow public signup of JIRA ccounts. For

Re: Release Ant 1.10.13?

2022-11-26 Thread Stefan Bodewig
On 2022-11-19, Stefan Bodewig wrote: > while running all tests locally I realized > https://github.com/apache/ant/pull/194 introduces a bug when tars have > an encoding set. You can see this with UntarTest failing. A multibyte > encoding like UTF16 may contain NUL bytes inside of

Re: Release Ant 1.10.13?

2022-11-19 Thread Stefan Bodewig
On 2022-11-18, Stefan Bodewig wrote: > On my personal TODO list there are a few minor things like Java 20 > removing another target option that we may want to tell users > about. Nothing of this is critical AFAIR and shouldn't hold up a release > if I don't get to them soon enough.

Re: Release Ant 1.10.13?

2022-11-18 Thread Stefan Bodewig
On 2022-11-16, Jaikiran Pai wrote: > Users can still use the current released Ant version against these > recent Java versions, but they additionally have to set a system > property while launching Ant to allow setting the security > manager. Ant's mainline code has changes where it does the

Re: Pull request process

2022-11-07 Thread Stefan Bodewig
On 2022-11-07, Keith Campbell wrote: > I created https://github.com/apache/ant/pull/194, but since that > repository is just a mirror, perhaps I should instead create a pull > request at https://gitbox.apache.org/repos/asf?p=ant.git;a=summary > instead. No, everything you've done is correct. We

CVE-2022-37866: Apache Ivy: Ivy Path traversal

2022-11-04 Thread Stefan Bodewig
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Severity: medium Description: When Apache Ivy downloads artifacts from a repository it stores them in the local file system based on a user-supplied "pattern" that may include placeholders for artifacts coordinates like the organisation, module or

CVE-2022-37865: Apache Ivy allow create/overwrite any file on the system

2022-11-04 Thread Stefan Bodewig
Severity: medium Description: With Apache Ivy 2.4.0 an optional packaging attribute has been introduced that allows artifacts to be unpacked on the fly if they used pack200 or zip packaging. For artifacts using the "zip", "jar" or "war" packaging Ivy prior to 2.5.1 doesn't verify the target

[ANN] Apache Ivy 2.5.1 Released

2022-11-04 Thread Stefan Bodewig
on how to submit bug reports, patches, or suggestions for improvement, see the Apache Ivy website: https://ant.apache.org/ivy/ Stefan Bodewig, on behalf of the Apache Ant community -BEGIN PGP SIGNATURE- Version: GnuPG v1 iEYEARECAAYFAmNk8ecACgkQohFa4V9ri3KZ5wCgqMKXyK

[RESULT] Release Iyv 2.5.1 Based on RC1

2022-11-04 Thread Stefan Bodewig
Hi all with +1s by Jaikiran, Martijn and my own implicit one, the vote has passed. I'll start publishing the reease and send out the announcements soonish. Thanks to all who helped with the release Stefan - To unsubscribe,

[VOTE] Release Iyv 2.5.1 Based on RC1

2022-11-01 Thread Stefan Bodewig
Hi all I've built a release candidate for Ivy 2.5.1 Changelog: - BREAKING: Removed old fr\jayasoft\ivy\ant\antlib.xml AntLib definition file (jira:IVY-1612[]) - FIX: ResolveEngine resets dictator resolver to null in the global configuration (jira:IVY-1618[]) - FIX:

Ivy 2.5.1 Release

2022-10-31 Thread Stefan Bodewig
Hi all it's been three years since we last had a release of Ivy and there are a few fixes in master, so I'm planning to cut a patch release. For the release notes I'm going through the commits to make sure I've got all things covered. I should be labelling all JIRA issues that I find so

Re: Migrate from Bugzilla to GitHub Issues

2022-08-18 Thread Stefan Bodewig
Hi Vladimir I guess we have to agree that we disagree - and this is fine. Our perception of how development of Ant happens are quite different. The issue you are trying to solve is a non-issue for me. And the reasons I do not want to move to github issues are likely irrelevant to you. No need to

Re: Migrate from Bugzilla to GitHub Issues

2022-08-17 Thread Stefan Bodewig
On 2022-08-08, Vladimir Sitnikov wrote: > Have you considered migrating from Bugzilla to GitHub Issues? I don't think we ever talked about that, no. > I think co-locating issues and PRs at GitHub would make it easier to > navigate between issues and PRs. PRs are not the only way of

Re: synchronized and Loom

2022-06-25 Thread Stefan Bodewig
On 2022-06-06, Jaikiran Pai wrote: > My personal opinion is that we continue with our release plans > (whenever we do it) instead of waiting for completing these > changes. The virtual threads feature is a preview feature in JDK 19, > so I think as long as our tests pass and Ant is usable in Java

synchronized and Loom

2022-06-06 Thread Stefan Bodewig
Hi right now the Loom prototype doesn't play well with synchronized and the recommended approach is to use ReentrantLock instead. A quick grep over Ant's codebase turns up more than 500 hits for synchronized - many of which in method declarations. So updating it will be a bigger task, in

Re: [ant] branch master updated: support default value for scriptdef attribute

2022-03-06 Thread Stefan Bodewig
On 2022-03-06, Matt Benson wrote: > I fully planned to do so once I know what next version number we'd be > targeting. Ah, thanks > Minor or point? I believe the last time we did a minor release has been five years ago, it's just not going on that much anymore :-) Most likely we'll have to

Re: [ant] branch master updated: support default value for scriptdef attribute

2022-03-06 Thread Stefan Bodewig
On 2022-03-06, Stefan Bodewig wrote: > On 2022-02-25, wrote: >>> >>>default >>>the default value of the attribute >>>No >>> > please add "since ..." somewhere here and a small note in WHATSNEW. and please do the sa

Re: [ant] branch master updated: support default value for scriptdef attribute

2022-03-06 Thread Stefan Bodewig
On 2022-02-25, wrote: >> >>default >>the default value of the attribute >>No >> please add "since ..." somewhere here and a small note in WHATSNEW. Thanks Stefan - To unsubscribe, e-mail:

Re: Jenkins build became unstable: Ant » Ant-Build-Matrix-master-Linux » ubuntu,jdk_1.8_latest #128

2022-03-06 Thread Stefan Bodewig
On 2022-02-15, Matt Benson wrote: > So my tests for scriptcondition return values were using beanshell > because I couldn't figure out any way to get rhino to return a value > from the script. I can't understand which optional dependencies are > present during the build, where they are, nor how

Re: New Antlib

2022-02-21 Thread Stefan Bodewig
On 2022-02-20, Matt Benson wrote: > The plan from this thread is two years old, so I want to revisit. As > of now the extant antlibs seem to have their own repos. If I am > creating a new one, do I want to create its own repo now, or would we > rather create a sandbox repo and promote its

Re: Java 8 for AntUnit

2022-02-10 Thread Stefan Bodewig
On 2022-02-09, Matt Benson wrote: > Similarly to the question on Ivy, is there any compelling reason we should > continue to constrain this antlib to its current level of Java (1.)5? We still create Ant 1.9.x releases from time to time and 1.9.x would not be able to use newer releases. Having

Re: [ant] branch master updated: add java.security.manager=allow while launching against Java 19

2022-02-07 Thread Stefan Bodewig
On 2022-02-08, Jaikiran Pai wrote: > Hello Earl, > On 08/02/22 12:59 am, Earl Hood wrote: >> How exactly does setting the sysprop for only 18 and 19 allow folks to test >> their stuff? If Ant currently depends on the security manager to operate, >> why not set the sysprop regardless, then

Re: [ant] branch master updated: add java.security.manager=allow while launching against Java 19

2022-02-07 Thread Stefan Bodewig
On 2022-02-07, Jaikiran Pai wrote: > So the launch scripts (the Linux one and the .bat for Windows one) > have both been updated to set this system property only for Java 18 > and 19. I expect this to be a temporary thing till the new API is > available. Once the new API is available, I think we

Re: [ant] branch master updated: add java.security.manager=allow while launching against Java 19

2022-02-06 Thread Stefan Bodewig
On 2022-02-07, wrote: > - if [ "$JAVA_SPEC_VERSION" = "java.specification.version=18" ]; then > + if [ "$JAVA_SPEC_VERSION" = "java.specification.version=18" ] || [ > "$JAVA_SPEC_VERSION" = "java.specification.version=19" ]; then Bourne shell's case may make this more readable (not sure

Re: Antlib test classpath

2022-02-04 Thread Stefan Bodewig
On 2022-02-04, Matt Benson wrote: > I am working on a new antlib (discussed a couple of years ago on list), and > trying to figure out how to get antunit to run tests using Ivy's created > classpath.test from the common build framework. I have tried combinations > of the (hidden) classloader task

Re: Apache Ant Vulnerability

2022-02-02 Thread Stefan Bodewig
Hi Ashish On 2022-02-02, Ashish Verma V wrote: > We are using "maven-antrun-plugin" that internally uses apache ant. > Recently high severity vulnerability > (CVE-2020-11979) is observed > specific to apache ant > Kindly let us know the plan to take the

Re: Need help with new versions in bugzilla for Ant

2021-10-19 Thread Stefan Bodewig
On 2021-10-19, Jaikiran Pai wrote: > Can someone with access to Bugzilla please create a new 1.10.12 > product version and a new 1.10.13 milestone version, for Ant? Done. I don't think anybody else of the project team has enough karma. We may want to change that. Stefan

Re: [VOTE] Release Apache Ant 1.10.12 based on RC2

2021-10-15 Thread Stefan Bodewig
On 2021-10-13, Jaikiran Pai wrote: > I've created a new RC2 release candidate for 1.10.12: +1 Stefan - To unsubscribe, e-mail: dev-unsubscr...@ant.apache.org For additional commands, e-mail: dev-h...@ant.apache.org

Re: [VOTE] Release Apache Ant 1.10.12 based on RC1

2021-10-03 Thread Stefan Bodewig
On 2021-09-30, Jaikiran Pai wrote: > This release is mainly a bug fix release and the exact changes are > noted in > https://dist.apache.org/repos/dist/dev/ant/RELEASE-NOTES-1.10.12.html. Of > particular interest is the relatively minor bug fix in the javadoc > task which is necessary for it to

Re: Release 1.10.12 of Ant?

2021-09-28 Thread Stefan Bodewig
On 2021-09-26, Jaikiran Pai wrote: > I was planning to initiate a release tonight, but trying to upgrade > one of the optional dependencies has shown up some interesting issue > in the maven ant task (which apparently has been EOLed[1]) that we use > in our fetch.xml. Maybe you skip upgrading

Re: Impact of Java SecurityManager being deprecated for removal post Java 17

2021-09-19 Thread Stefan Bodewig
On 2021-09-19, Gintautas Grigelionis wrote: > On Mon, 23 Aug 2021 at 17:39, Stefan Bodewig wrote: >> On 2021-08-19, Gintautas Grigelionis wrote: >>> On Thu, 19 Aug 2021 at 12:01, Stefan Bodewig wrote: >>>> I didn't mean the Antlib to be backwards c

Re: Release 1.10.12 of Ant?

2021-09-19 Thread Stefan Bodewig
On 2021-09-16, Stefan Bodewig wrote: > On 2021-09-15, Jaikiran Pai wrote: >> I wanted to look into and sort out >> https://bz.apache.org/bugzilla/show_bug.cgi?id=65424 in this release >> too, but it looks like I may not be able to do that and I'm not sure >> how many

Re: Release 1.10.12 of Ant?

2021-09-16 Thread Stefan Bodewig
On 2021-09-15, Jaikiran Pai wrote: > Java 17 has been released yesterday. We have a relatively minor fix in > javadoc task which affects Java 17 in cases where > failonwarn=true. Should we consider releasing 1.10.12 of Ant in > upcoming days to provide this fix and other fixes that we have done >

Re: Impact of Java SecurityManager being deprecated for removal post Java 17

2021-08-23 Thread Stefan Bodewig
On 2021-08-23, Jaikiran Pai wrote: > On 19/08/21 3:23 pm, Stefan Bodewig wrote: >> On 2021-08-19, Jaikiran Pai wrote: >>> Hello Stefan, >>> On 19/08/21 1:15 pm, Stefan Bodewig wrote: >>>> At a cursory glance I only see JUnitTask and ExecuteJava deal with

Re: Impact of Java SecurityManager being deprecated for removal post Java 17

2021-08-23 Thread Stefan Bodewig
On 2021-08-19, Gintautas Grigelionis wrote: > On Thu, 19 Aug 2021 at 12:01, Stefan Bodewig wrote: >> I didn't mean the Antlib to be backwards compatible, but rather to offer >> it and tell people to switch over to it. It would be the first time we'd >> remove a core feat

Re: Impact of Java SecurityManager being deprecated for removal post Java 17

2021-08-19 Thread Stefan Bodewig
On 2021-08-19, Jaikiran Pai wrote: > On 19/08/21 1:15 pm, Stefan Bodewig wrote: >> ... One migration option might be to offer an antlib containing the >> permissions stuff and deprecate the core types - and remove them from >> core once the next Java LTS version without Se

Re: Impact of Java SecurityManager being deprecated for removal post Java 17

2021-08-19 Thread Stefan Bodewig
On 2021-08-19, Jaikiran Pai wrote: > Hello Stefan, > On 19/08/21 1:15 pm, Stefan Bodewig wrote: >> At a cursory glance I only see JUnitTask and ExecuteJava deal with the >> SecurityManager if permissions have been defined. Where else do we use >> one? > From what I

Re: Impact of Java SecurityManager being deprecated for removal post Java 17

2021-08-19 Thread Stefan Bodewig
On 2021-08-05, Gintautas Grigelionis wrote: > The most acute problem is this: SecurityManager seems to be involved in > handling of return code from forked processes. > How does JDK 17+ solve that? JDK17 doesn't try to solve that as I understand it, the use-case of "prevent System.exit" has been

Re: Impact of Java SecurityManager being deprecated for removal post Java 17

2021-08-19 Thread Stefan Bodewig
On 2021-08-05, Jaikiran Pai wrote: > Ant project will be impacted by this. Ant provides a "permissions" > type[1] whose whole goal is to integrate with the Java SecurityManager > to allow users to configure the necessary security permissions. With > the SecurityManager and the APIs potentially

[ANN] Apache Ant 1.9.16 and 1.10.11 Released

2021-07-13 Thread Stefan Bodewig
://ant.apache.org/ Stefan Bodewig, on behalf of the Apache Ant community -BEGIN PGP SIGNATURE- Version: GnuPG v1 iEYEARECAAYFAmDty0UACgkQohFa4V9ri3J/fACcDdV5LR1N/2Jrb8jNn/eZmwYq e/MAoM8OvDCeEYH76QbDWJYVfnE1raI3 =D8Oy -END PGP SIGNATURE

Re: [VOTE] Release Apache Ant 1.10.11 based on RC1

2021-07-13 Thread Stefan Bodewig
With +1s by Martijn Kruithof Jaikiran Pai Maarten Coene Stefan Bodewig the vote has passed, I'll publish the artifacts and after the mirrors had time to catch up will annpunce the release. Thanks to all who have verified the artifacts Stefan

[RESULT] Release Apache Ant 1.9.16 based on RC1

2021-07-13 Thread Stefan Bodewig
With +1s by Martijn Kruithof Jaikiran Pai Maarten Coene Stefan Bodewig the vote has passed, I'll publish the artifacts and after the mirrors had time to catch up will annpunce the release. Thanks to all who have verified the artifacts Stefan

Re: [VOTE] Release Apache Ant 1.10.11 based on RC1

2021-07-12 Thread Stefan Bodewig
making my own +1 explicit - To unsubscribe, e-mail: dev-unsubscr...@ant.apache.org For additional commands, e-mail: dev-h...@ant.apache.org

Re: [VOTE] Release Apache Ant 1.9.15 based on RC1

2021-07-12 Thread Stefan Bodewig
making my own +1 explicit - To unsubscribe, e-mail: dev-unsubscr...@ant.apache.org For additional commands, e-mail: dev-h...@ant.apache.org

[VOTE] Release Apache Ant 1.10.11 based on RC1

2021-07-10 Thread Stefan Bodewig
Hi all I've created a release candidate for 1.10.11: git tag: ANT_1.10.11_RC1 on commit: 01ce0c3b1 tarballs: https://dist.apache.org/repos/dist/dev/ant/ revision: 48767 Maven artifacts:

Re: [VOTE] Release Apache Ant 1.9.16 based on RC1

2021-07-10 Thread Stefan Bodewig
[re-send with fixed subject, sorry] Hi all I've created a release candidate for 1.9.16: git tag: ANT_1.9.16_RC1 on commit: ea698c454 tarballs: https://dist.apache.org/repos/dist/dev/ant/ revision: 48766 Maven artifacts:

[VOTE] Release Apache Ant 1.9.15 based on RC1

2021-07-10 Thread Stefan Bodewig
Hi all I've created a release candidate for 1.9.16: git tag: ANT_1.9.16_RC1 on commit: ea698c454 tarballs: https://dist.apache.org/repos/dist/dev/ant/ revision: 48766 Maven artifacts: https://repository.apache.org/content/repositories/orgapacheant-1049/org/apache/ant/

[ANN] Apache AntUnit 1.4.1 Released

2021-07-07 Thread Stefan Bodewig
. BugZilla Issue 65315 For complete information on AntUnit, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache AntUnit website: https://ant.apache.org/antlibs/antunit/index.html Stefan Bodewig, on behalf of the Apache Ant community -BEGIN

[RESULT][VOTE] Release Apache AntUnit 1.4.1 based on RC1

2021-07-07 Thread Stefan Bodewig
Hi all with +1s by Jaikiran Pai, Maarten Coene, Jan Materne, Martijn Kruithof and myself and no other votes the vote has passed. I'll publish the artifacts now and send out the announcement / update the site later today. Many thanks to all who evaluated the release Stefan

Re: [VOTE] Release Apache AntUnit 1.4.1 based on RC1

2021-07-07 Thread Stefan Bodewig
I completely forgot to vote myself. +1 Stefan - To unsubscribe, e-mail: dev-unsubscr...@ant.apache.org For additional commands, e-mail: dev-h...@ant.apache.org

[VOTE] Release Apache AntUnit 1.4.1 based on RC1

2021-07-03 Thread Stefan Bodewig
Hi all I've created a release candidate for AntUnit 1.4.1: git tag: 1_4_1_RC1 on commit: e436acf tarballs: https://dist.apache.org/repos/dist/dev/ant/antlibs/antunit/ revision: 48645 Maven artifacts:

  1   2   3   4   5   6   7   8   9   10   >