Re: URL resolver ignores port numbers specified in Ivysettings credentials element

2024-03-18 Thread Stefan Bodewig
Hi Alex On 2024-03-18, Alex Galvin wrote: > However, Ant/Ivy errors out in this configuration, and I can see from > logs that it is not using my credentials to authenticate to the server > at port 8080. I fixed this issue by editing the host attribute of the > credentials element to exclude the

Re: Differences in retrieve pattern between Ivy 2.5.0/2.5.1 & 2.5.2?

2024-03-13 Thread Stefan Bodewig
gether at https://github.com/apache/nutch/pull/803 > Hopefully this helps others who may be confused as I was. > Thank you > lewsmc > On 2024/03/12 18:57:51 Stefan Bodewig wrote: >> On 2024-03-11, lewis john mcgibbney wrote: >>> I am working on upgrading Ivy to latest

Re: Differences in retrieve pattern between Ivy 2.5.0/2.5.1 & 2.5.2?

2024-03-12 Thread Stefan Bodewig
On 2024-03-11, lewis john mcgibbney wrote: > I am working on upgrading Ivy to latest over in the Apache Nutch project. > The build works just fine with 2.5.0 and 2.5.1 but with 2.5.2 the CI > fails with the following complaint > /home/runner/work/nutch/nutch/src/plugin/build-plugin.xml:234: >

Re: Errors during install of optional libraries

2024-02-25 Thread Stefan Bodewig
On 2024-02-25, Stefan Bodewig wrote: > You can either wait until ReHat resolves this (maybe thell them) or try > to find jai-core in a different place. https://repo1.maven.org/maven2/javax/media/jai_core/1.1.3/ seems to work but jai_codec doesn't seem to be available in version 1.1.3 in

Re: Errors during install of optional libraries

2024-02-25 Thread Stefan Bodewig
Hi On 2024-02-25, wrote: > I'm hoping this has a simple solution that I am just missing... please let me > know if there is a simplr way to avoid / get past the following issue... ... > jai: > [resolver:resolve] Downloading >

[ANN] Apache IvyDE Retired

2023-11-26 Thread Stefan Bodewig
community grow around IvyDE, the subproject could be reactivated[3]. We want to thank the people who created or contributed to IvyDE over the years. Stefan Bodewig on behalf of the Ant PMC. [1] https://lists.apache.org/thread/wo32q8s8o8z9m126gz3m533q2fnqq21o [2] https://ant.apache.org/processes.html

[ANN] Apache IvyDE Retired

2023-11-26 Thread Stefan Bodewig
community grow around IvyDE, the subproject could be reactivated[3]. We want to thank the people who created or contributed to IvyDE over the years. Stefan Bodewig on behalf of the Ant PMC. [1] https://lists.apache.org/thread/wo32q8s8o8z9m126gz3m533q2fnqq21o [2] https://ant.apache.org/processes.html

Re: ant/jdk17, and badly generated jars

2023-10-27 Thread Stefan Bodewig
Hi Dave Dave Brosius writes: > HI folks, we have an odd situation where we have an ant build that > generates a jar file that includes a resource bundle property file > using , later in the same build  a custom ant task is executed, > which loads that class from  the classpath, and tries to

Re: Future of Ivy and IvyDE

2023-08-28 Thread Stefan Bodewig
Hi sorry for my bad timing sending out an email and then being unbale to answer for days. This is not what I intended. Let me try to answer what I've seen so far. And I'll try to keep my personal opinion out this time. It is pretty obvious Ivy is used today and maybe even loved by some. This is

Re: Future of Ivy and IvyDE

2023-08-28 Thread Stefan Bodewig
Hi sorry for my bad timing sending out an email and then being unbale to answer for days. This is not what I intended. Let me try to answer what I've seen so far. And I'll try to keep my personal opinion out this time. It is pretty obvious Ivy is used today and maybe even loved by some. This is

Future of Ivy and IvyDE

2023-08-22 Thread Stefan Bodewig
Hi all before I get to the actual content of this mail: * I'm cross-posting to three lists but I ask you to keep responses to dev@ant only (and join the list if necessary) if you want to respond. * what I write is my personal opinion and not shared by the PMC as a whole. The people on the

Future of Ivy and IvyDE

2023-08-22 Thread Stefan Bodewig
Hi all before I get to the actual content of this mail: * I'm cross-posting to three lists but I ask you to keep responses to dev@ant only (and join the list if necessary) if you want to respond. * what I write is my personal opinion and not shared by the PMC as a whole. The people on the

CVE-2022-46751: Apache Ivy: XML External Entity vulnerability in Apache Ivy

2023-08-20 Thread Stefan Bodewig
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Severity: moderate Affected versions: - - Apache Ivy 1.0.0 through 2.5.1 Description: Improper Restriction of XML External Entity Reference, XML Injection (aka Blind XPath Injection) vulnerability in Apache Software Foundation Apache Ivy.This

CVE-2022-46751: Apache Ivy: XML External Entity vulnerability in Apache Ivy

2023-08-20 Thread Stefan Bodewig
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Severity: moderate Affected versions: - - Apache Ivy 1.0.0 through 2.5.1 Description: Improper Restriction of XML External Entity Reference, XML Injection (aka Blind XPath Injection) vulnerability in Apache Software Foundation Apache Ivy.This

[ANN] Apache Ivy 2.5.2 Released

2023-08-20 Thread Stefan Bodewig
the Apache Ivy website: https://ant.apache.org/ivy/ Stefan Bodewig, on behalf of the Apache Ant community

[ANN] Apache Ivy 2.5.2 Released

2023-08-20 Thread Stefan Bodewig
the Apache Ivy website: https://ant.apache.org/ivy/ Stefan Bodewig, on behalf of the Apache Ant community - To unsubscribe, e-mail: user-unsubscr...@ant.apache.org For additional commands, e-mail: user-h...@ant.apache.org

[RESULT] Release Ivy 2.5.2 Based on RC2

2023-08-20 Thread Stefan Bodewig
Hi with three binding +1s by Maarten, Jaikiran and myself, the vote has passed. I'll proceed with publishing the release artifacts and will announce the release after the mirros had time to catch up. Thanks to all who took a look at the release candidate Stefan

Re: [VOTE] Release Ivy 2.5.2 Based on RC2

2023-08-19 Thread Stefan Bodewig
just officially registering my implicit +1 Stefan On 2023-08-17, Stefan Bodewig wrote: > Hi all > I've cancelled the previous vote as the NOTICE file didn't contain > 2023. sorry about this. Now I've built a new release candidate for Ivy > 2.5.2 > Changelog: > - FIX: ivy:r

[VOTE] Release Ivy 2.5.2 Based on RC2

2023-08-17 Thread Stefan Bodewig
Hi all I've cancelled the previous vote as the NOTICE file didn't contain 2023. sorry about this. Now I've built a new release candidate for Ivy 2.5.2 Changelog: - FIX: ivy:retrieve could fail because of a `NullPointerException` (IVY-1641) - FIX: reading POMs may loose dependencies when

[VOTE] Release Ivy 2.5.2 Based on RC1

2023-08-16 Thread Stefan Bodewig
Hi all I've built a release candidate for Ivy 2.5.2 Changelog: - FIX: ivy:retrieve could fail because of a `NullPointerException` (IVY-1641) - FIX: reading POMs may loose dependencies when multiple Maven dependencies only differ in `classifier` (IVY-1642) - IMPROVEMENT: Upgrade Apache

Re: Problem with resolving dependencies for saxon-HE on Maven repo

2023-04-26 Thread Stefan Bodewig
On 2023-04-26, LINUS FERNANDES wrote: > Thanks, Stefan. > I think that was caused by me trying the Ant way to install Ivy as > https://ant.apache.org/ivy/history/2.4.0/install.html > That's the one that shows up first when I Google it. I don't think we can influence Google's decisions ...

Re: Problem with resolving dependencies for saxon-HE on Maven repo

2023-04-26 Thread Stefan Bodewig
[you ran a different command than I asked for, this way we still don't see which version of Ivy you use ;-)] > init-ivy: parsing > buildfile jar:file:/root/.ant/lib/ivy.jar!/org/apache/ivy/ant/antlib.xml > with URI =

Re: Problem with resolving dependencies for saxon-HE on Maven repo

2023-04-26 Thread Stefan Bodewig
On 2023-04-26, LINUS FERNANDES wrote: > I have the same error on Arch Linux on Termux: > echo $ANT_HOME > /usr/share/ant > root07:40IvySample$ ls /usr/share/ant/lib > ant-antlr.jar > ant-apache-bcel.jar > ant-apache-bsf.jar > ant-apache-log4j.jar > ant-apache-oro.jar > ant-apache-regexp.jar >

Re: Problem with resolving dependencies for saxon-HE on Maven repo

2023-04-26 Thread Stefan Bodewig
On 2023-04-26, LINUS FERNANDES wrote: > No, it doesn't . Ivy 2.5.1 is complaining that the task does not have the > attribute pathid or pathId either. I don't see any error here $ cat ivy.xml $ cat ivysettings.xml $ cat build.xml

Re: Problem with resolving dependencies for saxon-HE on Maven repo

2023-04-25 Thread Stefan Bodewig
On 2023-04-26, LINUS FERNANDES wrote: > Could you also let me know in which release of ivy was pathid removed as an > attribute in the retrieve task and why? Documentation for that is hard to > come by. I must admit that I'm not really that familiar with Ivy myself, I just jumped in to fix a

Re: Problem with resolving dependencies for saxon-HE on Maven repo

2023-04-25 Thread Stefan Bodewig
Stefan Bodewig writes: > I believe there is a bug in PomModuleDescriptoBuilder that assumes it is > just looking at the same dependency twice as it doesn't take the > classifier into account. > > I've opened https://issues.apache.org/jira/browse/IVY-1642 should be fixed with htt

Re: Problem with resolving dependencies for saxon-HE on Maven repo

2023-04-13 Thread Stefan Bodewig
Hi Linus On 2023-04-13, LINUS FERNANDES wrote: > There is a problem downloading the dependencies for Saxon-HE from Maven > using Ivy. > The xmlresolver-5.1.1.jar does not download but it's classified jar > xmlresolver-data-5.1.1.jar does. Both jars are listed as dependencies in > the pom for

Re: NullPointerException while resolving dependency

2023-03-22 Thread Stefan Bodewig
For now, I may look into creating a custom resolver for resolving > dependency from Bitbucket. If you have any pointers to any example of > custom resolvers, then please do share otherwise i may ask ChatGPT to help > here :D > Thanks again for all your help and time. > Kind Regard

Re: NullPointerException while resolving dependency

2023-03-20 Thread Stefan Bodewig
On 2023-03-20, Stefan Bodewig wrote: > On 2023-03-20, Stefan Bodewig wrote: >> Hi >> On 2023-03-20, Kamran Manzoor wrote: >>> Thanks a lot for looking into this. I thought the issue was request related >>> but it is in response handling. It means it does tri

Re: NullPointerException while resolving dependency

2023-03-20 Thread Stefan Bodewig
On 2023-03-20, Stefan Bodewig wrote: > Hi > On 2023-03-20, Kamran Manzoor wrote: >> Thanks a lot for looking into this. I thought the issue was request related >> but it is in response handling. It means it does trigger the request which >> I have verified and it se

Re: NullPointerException while resolving dependency

2023-03-20 Thread Stefan Bodewig
Hi On 2023-03-20, Kamran Manzoor wrote: > Thanks a lot for looking into this. I thought the issue was request related > but it is in response handling. It means it does trigger the request which > I have verified and it seems like the auth header is missing :(. I have > tried with default URL

Re: NullPointerException while resolving dependency

2023-03-17 Thread Stefan Bodewig
On 2023-03-17, Stefan Bodewig wrote: > On 2023-03-17, Stefan Bodewig wrote: >> and will open a JIRA ticket attaching oyur files when using Apache >> HttpClient. > https://issues.apache.org/jira/browse/IVY-1641 should be fixed by https://github.com/apa

Re: NullPointerException while resolving dependency

2023-03-17 Thread Stefan Bodewig
On 2023-03-17, Stefan Bodewig wrote: > and will open a JIRA ticket attaching oyur files when using Apache > HttpClient. https://issues.apache.org/jira/browse/IVY-1641 Stefan

Re: NullPointerException while resolving dependency

2023-03-17 Thread Stefan Bodewig
On 2023-03-16, Kamran Manzoor wrote: > I am new to Apache Ivy and I am using it to manage dependency in one of my > ant projects. All I want is to retrieve a jar from a custom URL (Bitbucket) > which requires Basic Authentication. However, I am getting > NullPointerException when I am trying to

Re: Problems with ftp download

2023-03-04 Thread Stefan Bodewig
On 2023-03-03, Frank Tornack wrote: > I am trying to build apache ant from source and unfortunately have a > problem. > -fetch-netrexx-no-commons-net: > Getting: ftp://ftp.software.ibm.com/software/awdtools/netrexx/NetRexx.zip > To: /root/.ant/tempcache/NetRexx.zip > Error getting >

Re: SSHEXEC Command Line Equivalent

2022-12-28 Thread Stefan Bodewig
On 2022-12-28, Eric Fetzer wrote: > Hi! Can anyone tell me what the command line equivalent to the following > directive in ant is? I'm afraid this is not easy to answer as Ant does not use the command line for this. Ant uses http://www.jcraft.com/jsch/ in order to execute the command and it is

CVE-2022-37866: Apache Ivy: Ivy Path traversal

2022-11-04 Thread Stefan Bodewig
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Severity: medium Description: When Apache Ivy downloads artifacts from a repository it stores them in the local file system based on a user-supplied "pattern" that may include placeholders for artifacts coordinates like the organisation, module or

CVE-2022-37865: Apache Ivy allow create/overwrite any file on the system

2022-11-04 Thread Stefan Bodewig
Severity: medium Description: With Apache Ivy 2.4.0 an optional packaging attribute has been introduced that allows artifacts to be unpacked on the fly if they used pack200 or zip packaging. For artifacts using the "zip", "jar" or "war" packaging Ivy prior to 2.5.1 doesn't verify the target

[ANN] Apache Ivy 2.5.1 Released

2022-11-04 Thread Stefan Bodewig
on how to submit bug reports, patches, or suggestions for improvement, see the Apache Ivy website: https://ant.apache.org/ivy/ Stefan Bodewig, on behalf of the Apache Ant community -BEGIN PGP SIGNATURE- Version: GnuPG v1 iEYEARECAAYFAmNk8ecACgkQohFa4V9ri3KZ5wCgqMKXyK

Re: No junitlauncher in Debian Bullseye

2022-09-02 Thread Stefan Bodewig
Hi Ronald On 2022-09-02, Ronald Bergmann wrote: > this is my first message here and I hope it's the correct place to put > this. I was trying to install ant and run jUnit tests via ant in > Debian Bullseye but apparently the junitlauncher jar is not > available. The Debian packages of Ant are

Re: Bundling Ant Tasks

2022-08-23 Thread Stefan Bodewig
On 2022-08-22, Hiran Chaudhuri wrote: > If it is a bit buried but exists it might be nice to have a reference > from the 'Developing with Ant' guide. This is true. Have you got any suggestion where and how to do that? Maybe even a blurb of text that you could contribute given that you are

Re: Bundling Ant Tasks

2022-08-19 Thread Stefan Bodewig
On 2022-08-19, Hiran Chaudhuri wrote: > From other libraries I have seen there are things like property or XML > files bundled with the tasks that can host such information - but they > seem to be an undocumented feature? You are describing tasks bundled as an antlib. The documentation is a bit

Re: Variable substitution in target descriptions

2022-08-07 Thread Stefan Bodewig
Hi Roger sorry for the delay On 2022/07/20 16:43:16 Roger Whitcomb wrote: > Would it be as simple as calling PropertyHelper.replaceProperties(…) at line > 1143 in Main with the “targetDescription” string? or a few lines later when you can be sure targetDescription is not null. Yes, that would

Re: Variable substitution in target descriptions

2022-07-20 Thread Stefan Bodewig
On 2022-07-19, Roger Whitcomb wrote: > I have a target description that has “${result.jar}” embedded > within. But “ant -p” doesn’t do the substitution. I’m presuming that’s > because the “-p” processing doesn’t evaluate condition or property > tasks. But, should it? Would that be a huge code

Re: Please need help in ANT.

2022-07-11 Thread Stefan Bodewig
Hi Deepack On 2022-07-10, Deepak Lalchandani wrote: > Screenshot is attached to this email which depicts the folder structure. > RecentError.txt has part of build.xml file and project_build.properties > file. The mailing list is set up to strip all attachments, so nobody has seen your

Re: Ant does not work unless with debug option

2022-06-25 Thread Stefan Bodewig
On 2022-06-23, W wrote: > I got a new laptop, so I build my work environment on new laptop. I > call  ant distit should build my dist. But it only execute default > task, not "dist". But if I add debug option like:  ant -d distIt build > "dist" as expected. What is wrong please? I use Windows

Re: Apache Ant: Log4j 1.x Vulnerabilities

2022-01-13 Thread Stefan Bodewig
On 2022-01-13, Christopher Schultz wrote: > On 1/12/22 15:57, Stefan Bodewig wrote: >> On 2022-01-12, wrote: >>>1. Do you have any mitigation options available for addressing both >>> CVE-2019-17571 and CVE-2021-4104? >>> https://nvd.nist.gov/

Re: Need Input to resolve error

2022-01-13 Thread Stefan Bodewig
On 2022-01-13, Manjunath S wrote: > Path to, File ant-contrib-1.0b3.jar file is valid and it is downloaded from > Git via jenkins script. The same is working on the Windows platform. could still be corrupted locally. Can you open it with your ZIP tool of choice (JARs are ZIPs after all). zip

Re: Need Input to resolve error

2022-01-12 Thread Stefan Bodewig
On 2022-01-12, Manjunath S wrote: > Hi, > Using ANT tool to build my project in MAC Platform. > Getting the following error > CLASSPATH element > /Users/rrr/workspace/_xxx_/_yyy_/ant-contrib-1.0b2.jar is not a JAR. > when below is executed. > > >

Re: Apache Ant: Log4j 1.x Vulnerabilities

2022-01-12 Thread Stefan Bodewig
On 2022-01-12, wrote: > Can the following questions be confirmed for Ant? easily > 1. Which versions of your products utilize Log4j 1.x, if any? By default Ant doesn't use any version of Apache Log4J at all. There is a deprecated BuildLogger using Log4J 1.x. It will only be used if you

Re: Query regarding impact due to Log4j Tool : Zero Day in Ubiquitous Under Active Attack (CVE-2021-44228)

2021-12-16 Thread Stefan Bodewig
Hi Apache Ant does not depend on log4j 2.x at all and never has. There is an optional Log4JListener that can be used to send Ant's logs through log4j 1.x that has been deprecated for quite some time now. Even if you still use it, logj 1.x is not affected by CVE-2021-44228 (but by several others,

[ANN] Apache Ant 1.9.16 and 1.10.11 Released

2021-07-13 Thread Stefan Bodewig
://ant.apache.org/ Stefan Bodewig, on behalf of the Apache Ant community -BEGIN PGP SIGNATURE- Version: GnuPG v1 iEYEARECAAYFAmDty0UACgkQohFa4V9ri3J/fACcDdV5LR1N/2Jrb8jNn/eZmwYq e/MAoM8OvDCeEYH76QbDWJYVfnE1raI3 =D8Oy -END PGP SIGNATURE

CVE-2021-36374: Apache Ant ZIP, and ZIP based, archive denial of service vulerability

2021-07-13 Thread Stefan Bodewig
Description: When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats

CVE-2021-36373: Apache Ant TAR archive denial of service vulnerability

2021-07-13 Thread Stefan Bodewig
Description: When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Mitigation: Apache Ant 1.9.x users should

[ANN] Apache AntUnit 1.4.1 Released

2021-07-07 Thread Stefan Bodewig
. BugZilla Issue 65315 For complete information on AntUnit, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache AntUnit website: https://ant.apache.org/antlibs/antunit/index.html Stefan Bodewig, on behalf of the Apache Ant community -BEGIN

Re: Can I load a project from a String / InputStream?

2021-01-01 Thread Stefan Bodewig
On 2020-12-31, Eugen Stan wrote: > Thanks but I want/need to build the xml file dynamically and build the > project from that and then maybe customize it.I think this feature > should make it easier to test ant as well. Would this be ok for a > PR?Add a parse function in ProjectHelper similar to

Re: a tricky case of running an executable from an ant build script

2020-12-25 Thread Stefan Bodewig
On 2020-12-19, Alan Snyder wrote: > The case of interest is where I perform the build directly within a Java > application process. [...] > Is there a way that within my application I can configure ant with a > different $PATH to provide to the build script, so that it will find > the

Re: junitlauncher hangs after execution tests

2020-12-06 Thread Stefan Bodewig
On 2020-12-01, Dave Brosius wrote: > I have an ant task using ant 1.10.9 that run in forked > mode, the tests run immediately, but then it just hangs with no > further output with either -v or -d Could this be https://bz.apache.org/bugzilla/show_bug.cgi?id=64733 ? Stefan

[CVE-2020-11979] Apache Ant insecure temporary file vulnerability

2020-09-30 Thread Stefan Bodewig
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 CVE-2020-11979: Apache Ant insecure temporary file vulnerability Severity: Medium Vendor: The Apache Software Foundation Versions Affected: Apache Ant 1.10.8 Description: As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions

[ANN] Apache Ant 1.10.9 Released

2020-09-30 Thread Stefan Bodewig
tempdir as soon as a temporary file is created for the first time, For complete information on Ant, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Ant website: https://ant.apache.org/ Stefan Bodewig, on behalf of the Apache Ant

Re: jar task with duplicate="preserve"

2020-09-22 Thread Stefan Bodewig
Hi Dave On 2020-09-21, Dave Brosius wrote: > In the end i just wrote my own custom ant task to do what jar was > supposed to do. What i noticed was that one of the jars had >     1) no entries for the directories themselves >     2) items out of alphabetical order. > Don't know if that

Re: inline use of antlib with namespace?

2020-09-22 Thread Stefan Bodewig
On 2020-09-21, Alan Snyder wrote: > I think you are understanding correctly. > It sounds like what I want might require either an include statement (textual > inclusion) or project inheritance. If you wanted something like project inheritance, then the projects need to be aware and use "their

Re: inline use of antlib with namespace?

2020-09-21 Thread Stefan Bodewig
On 2020-09-21, Alan Snyder wrote: > If I have to include the xmlns attribute at each use of a task from the > library, then this is not what I want. Then either I don't understand what you want or you want something that is not possible with XML namespaces :-) XML namespaces care for URIs, not

Re: jar task with duplicate="preserve"

2020-09-21 Thread Stefan Bodewig
On 2020-09-15, Dave Brosius wrote: > I have an ant task using ant 1.10.8, that includes use of the > task as such: >         **duplicate="preserve"*> >             includes="**/*" /> >             > ... >             >         > There are in fact file collsions between the

Re: inline use of antlib with namespace?

2020-09-21 Thread Stefan Bodewig
On 2020-09-13, Alan Snyder wrote: > Given that I have installed an external ant task library in an appropriate > location, I know of two ways to make the tasks accessible in a build script: > 1. Add an xmlns attribute to some element, such as > > 2. Add a taskdef inline, such as > >

Re: Can the Ant task "patch" be used in Linux for patching files with DOS linefeeds?

2020-09-04 Thread Stefan Bodewig
On 2020-09-02, Harri T. wrote: > 1. use the Ant task |patch| in Linux for patching files with DOS linefeeds? > 2. apply the option |--binary| with the Ant task |patch|? Th patch task doesn't support --binary, yet, but it would be very easy to add. Actually is really a simple wrapper for , the

Re: replaceregexp task overrides the file permissions

2020-08-09 Thread Stefan Bodewig
> After replacement, replaceregexp task overrode the permissions. It does, as do or or any other task where Ant creates a file by itself. Historically this all stems from Java not providing access to permissions of files or directories at all. Neither reading permissions nor writing them.

Re: Knowledge sharing related to Apache Ant, mainly ZipFile class…

2020-06-22 Thread Stefan Bodewig
Hello Roman many thanks for your comments and your interest in Ant's zip support. Ant's zip package has been the inspiration and nucleus for the zip package in Apache Commons Compress and the code has become more evolved and more versatile over there:

Re: Queries regarding Apache Ant 1.7.0

2020-06-22 Thread Stefan Bodewig
just adding one more detail to what Jaikiran said: On 2020-06-17, Shrey Bhatt wrote: > 2. Were there any security vulnerabilities reported for Apache Ant 1.7.0 > which could affect the application Yes, there have been. Please see https://ant.apache.org/security.html Stefan

[CVE-2020-1945] Apache Ant insecure temporary file vulnerability

2020-05-13 Thread Stefan Bodewig
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 CVE-2020-1945: Apache Ant insecure temporary file vulnerability Severity: Medium Vendor: The Apache Software Foundation Versions Affected: Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 Description: Apache Ant uses the default temporary directory

[ANN] Apache Ant 1.9.15 and 1.10.8 Released

2020-05-13 Thread Stefan Bodewig
o submit bug reports, patches, or suggestions for improvement, see the Apache Ant website: https://ant.apache.org/ Stefan Bodewig, on behalf of the Apache Ant community -BEGIN PGP SIGNATURE- Version: GnuPG v1 iEYEARECAAYFAl68IIoACgkQohFa4V9ri3IYIQCgy9n0AdDobpZVte08jT27ndPj HqsAnRHHrPk1

Re: more detail on patch-module error

2020-04-11 Thread Stefan Bodewig
On 2020-04-08, Martin Gainty wrote: > contents of build.xml > > > > > > > > source="1.9" target="1.9"> > > > location="$USER_HOME/.m2/REPOSI~1/org/slf4j/SLF4J-~1/1.7.9/slf4j-api-1.7.9.jar"/> >

Re: quick question

2020-04-11 Thread Stefan Bodewig
On 2020-04-08, Martin Gainty wrote: > how does task accomplish > --patch-module java.base=src > directive? You can always use a nested element for the task. Stefan - To unsubscribe, e-mail: user-unsubscr...@ant.apache.org

Re: Classpath generation (migrating from old to new)

2020-03-25 Thread Stefan Bodewig
On 2020-03-24, Pennington, Dale wrote: > The particular issue is the classpath generated. On the old system, the > classpath included all the local user defined .jars, as well as a large > number of jars from /usr/share/java, that were not specified in the build.xml > file. The new system only

Re: Redefining things which aren't properties

2020-02-21 Thread Stefan Bodewig
On 2020-02-15, Christopher Schultz wrote: > Due to a mistake in a somewhat complicated build file, I discovered > that pattern sets can be redefined in a way that is fairly surprising > to this seasoned ant user. Yes, you references can be re-assigned. I'm not sure whether we have this

Re: task to print uploaded filenames

2020-02-21 Thread Stefan Bodewig
On 2020-02-20, Basin Ilya wrote: > Hi. How do I make the scp task print the filenames? verbose="true" is > too verbose. For the task itself, there is no in-between. > It also outputs the handshake details. I invoke it by passing a nested > fileset You can log the contents of the fileset by

Re: Issue with sshexec and 1.10.7

2019-10-18 Thread Stefan Bodewig
On 2019-10-17, Arnold, Thomas L. (LARC-D321)[LITES II] wrote: > On 2019-10-17, Stefan Bodewig wrote: >> Should be fixed with >> https://github.com/apache/ant/commit/8511719cf38cfe9be3c000e89d448f7f13f49cba#diff-bb49f6b85622e35296971c8d0f10284a >> - will be fixed in 1.1

Re: Issue with sshexec and 1.10.7

2019-10-17 Thread Stefan Bodewig
On 2019-10-17, Stefan Bodewig wrote: > On 2019-10-17, Arnold, Thomas L. (LARC-D321)[LITES II] wrote: >> I'm having an issue with 1.10.7. This behavior doesn't exist in 1.10.6. >> > keyfile="${user.home}/.ssh/id_rsa" >> output="/

Re: Issue with sshexec and 1.10.7

2019-10-17 Thread Stefan Bodewig
On 2019-10-17, Arnold, Thomas L. (LARC-D321)[LITES II] wrote: > I'm having an issue with 1.10.7. This behavior doesn't exist in 1.10.6. > keyfile="${user.home}/.ssh/id_rsa" > output="/home/user/anthell/CheckHost-Server1.txt" > failonerror="true" append="true"

Re: Issue with sql task accessing MySql

2019-08-28 Thread Stefan Bodewig
On 2019-08-28, Eric Fetzer wrote: > Is there a way to set that version JUST for this call? I'm afraid there is no way to run the task in a different JVM than the rest of Ant. Judging from https://dev.mysql.com/doc/connector-j/8.0/en/connector-j-versions.html your MySQL Connector requires

Re: Issue with sql task accessing MySql

2019-08-28 Thread Stefan Bodewig
On 2019-08-28, Eric Fetzer wrote: > Thanks Stefan, a bit better: > $ ant -f test.xmlBuildfile: test.xml > main: > BUILD FAILEDc:\BuildDeployScripts\test.xml:22: > java.lang.UnsupportedClassVersionError: (com/mysql/jdbc/Driver) bad major > version at offset=6 > Total time: 0 seconds You are

Re: Issue with sql task accessing MySql

2019-08-28 Thread Stefan Bodewig
On 2019-08-28, Eric Fetzer wrote: > The MySql server I'm accessing upgraded to version 8.0.17: > So, accordingly, I downloaded the proper driver and linked to it in my task: > > BUILD FAILEDc:\BuildDeployScripts\test.xml:22: > com.mysql.jdbc.exceptions.MySQLNonTransientConnectionException:

Re: please why ANT do not support latest Java JDK

2019-08-17 Thread Stefan Bodewig
On 2019-08-17, Mgr. Janusz Chmiel wrote: > OH. I Am very sorry for my chaos. No problem. > So please, if some moderators can remove my previous message, please > remove it. This is a mailing list, nobody can remove the messages you've sent from the inboxes of the recipients :-) But at least

Re: please why ANT do not support latest Java JDK

2019-08-17 Thread Stefan Bodewig
On 2019-08-17, Mgr. Janusz Chmiel wrote: > I AM very sad, that perfect tool Ant is not compatible with latest > Java JDK from Oracle. Why do you believe it is not compatible? We run nightly tests against a lot of JDKs including the early access builds of JDKs without any problems. Stefan

Re: module naming syntax

2019-05-14 Thread Stefan Bodewig
On 2019-05-14, Glenn Burkhardt wrote: >module="com.sun.tools.xjc/com.sun.tools.xjc.XJCFacade"> > > > > > Running 'ant' in verbose mode, it shows that the argument "-m > com.sun.tools.xjc\com.sun.tools.xjc.XJCFacade" is passed to the Java >

Re: module naming syntax

2019-05-14 Thread Stefan Bodewig
On 2019-05-14, Stefan Bodewig wrote: > On 2019-05-14, Jaikiran Pai wrote: >> On 14/05/19 11:48 AM, Stefan Bodewig wrote: >>> On 2019-05-14, Jaikiran Pai wrote: >>>> I don't expect the module name's front slash to be replaced with a file >>>>

Re: module naming syntax

2019-05-14 Thread Stefan Bodewig
On 2019-05-14, Jaikiran Pai wrote: > On 14/05/19 11:48 AM, Stefan Bodewig wrote: >> On 2019-05-14, Jaikiran Pai wrote: >>> I don't expect the module name's front slash to be replaced with a file >>> separator. >> Ant does, I'm pretty sure. >> T

Re: module naming syntax

2019-05-14 Thread Stefan Bodewig
On 2019-05-14, Jaikiran Pai wrote: > I don't expect the module name's front slash to be replaced with a file > separator. Ant does, I'm pretty sure. The type of 's modulepath is an Ant Path and as such each entry is treated as a file name and the usual file separator suspects are mapped to

Re: Security Questions - Ant

2018-11-27 Thread Stefan Bodewig
Hi Jack On 2018-11-27, Jack O'Connor wrote: > 1) Is the software compliant with U.S. Federal Information Processing > Standard (FIPS) 140-2? It is not certified in any way. Not sure what "is compliant" means but the I guess the answer is somewhere between "we don't know" and "no". > 2) Is any

Re: Jar task: --module-version and --main-class options

2018-10-02 Thread Stefan Bodewig
On 2018-10-02, Bruce Alspaugh wrote: > As requested, I've created a new issue. Thank you. > Is there some reason why Ant does not use the JDK's jar tool? Most of them are historical. For many years the archives created by the jar tool simply have not really been valid ZIP files - actually

Re: Jar task: --module-version and --main-class options

2018-10-01 Thread Stefan Bodewig
On 2018-10-01, Bruce Alspaugh wrote: > Java 9 and later add several new options to the jar tool: > https://docs.oracle.com/en/java/javase/11/tools/jar.html > I would like to use the --module-version and --main-class options with > Ant's Jar task, but I could not find them in the manual: >

[ANN] Apache AntUnit 1.4 Released

2018-06-25 Thread Stefan Bodewig
in LogCapturer. For complete information on AntUnit, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache AntUnit website: https://ant.apache.org/antlibs/antunit/index.html Stefan Bodewig, on behalf of the Apache Ant community -BEGIN PGP

[ANN] Apache Ant 1.9.12 and 1.10.4 Released

2018-06-22 Thread Stefan Bodewig
complete information on Ant, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Ant website: http://ant.apache.org/ Stefan Bodewig, on behalf of the Apache Ant community -BEGIN PGP SIGNATURE- Version: GnuPG v1 iEYEARECAAYFA

Re: generating module-aware javadoc with ant

2018-06-04 Thread Stefan Bodewig
On 2018-06-04, Rick Hillegas wrote: > I have attached the tarball to the following ant/bugzilla issue: > https://bz.apache.org/bugzilla/show_bug.cgi?id=62424 Thank you Rick Stefan - To unsubscribe, e-mail:

Re: generating module-aware javadoc with ant

2018-06-02 Thread Stefan Bodewig
On 2018-06-02, Rick Hillegas wrote: > I don't see any module attributes or nested elements documented for > the task here: > https://ant.apache.org/manual/Tasks/javadoc.html Googling around > doesn't tease out any more information on how to generate module-aware > javadoc with ant. So far it

[ANN] Apache Ant 1.9.11 and 1.10.3 Released

2018-03-27 Thread Stefan Bodewig
l fail early if iiop or idl are requested. Java11 removes support for CORBA and the switches have been removed from the rmic tool. For complete information on Ant, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Ant website: http://ant

Re: Fwd: [VOTE] Release Ant 1.10.3 based on RC1

2018-03-24 Thread Stefan Bodewig
On 2018-03-24, Jaikiran Pai wrote: > For those users who were waiting for JUnit5 support in Ant, the > initial version of this support is now available. Please read the > junitlauncher task manual (available under manual/Tasks/ directory of > this new version) to get started and give it a try.

Re: apparently not passing keystore password along

2018-03-20 Thread Stefan Bodewig
On 2018-03-19, Phil Edwards wrote: > On Sat, Mar 17, 2018 at 4:36 AM, Jaikiran Pai wrot\ e: >> Would you like to file a bug here >> https://bz.apache.org/bugzilla/describecomponents.cgi?product=Ant > I will try, although my toleration for bugzilla in general has about

Re: Question about the task life cycle (one shot or not)

2018-02-19 Thread Stefan Bodewig
On 2018-02-19, Al Le wrote: > I have a question about how many times a task is instantiated during a > build. I've read the description at > https://ant.apache.org/manual/develop.html but still a question > remains. > [BTW, there is a typo on that page: "addCondifgired"] will be fixed soon,

Re: API to create a temp file for the duration of task execution

2018-02-18 Thread Stefan Bodewig
On 2018-02-18, Al Le wrote: > 1. Is there an Ant API to create a temp file? Or should I just use the > standard Java API for this? There is FileUtils.createTempFile which of course uses the standard Java API under the covers, but allows you to specify whether the file should actually be created

  1   2   3   4   5   6   7   8   9   >