I'll start by saying I dont think this vote should have been opened, especially not without prior discussion as was done, given that 5.16.5 was already announced as the final intended 5.16.x over 9 months ago, noted as such on the website this entire time, and has been left in that state since even despite various security related dep updates being made to 5.17.x in the period. Doing this now after that time rather muddies the waters on that previous notice and also future such notices.
I would also expect a 5.17.4 to be coming, with recent stuff included in this already-announced-done 5.16.x stream release that has weirdly not actually been released in the newer more active 5.17.x stream yet. That shouldnt happen and itself only further muddies the waters of direction to upgrade given long ago. As I expect someone else would come along and +1 this eventually, I did check it over myself and having done so will add the needed push myself, this time...though typing this reply and realising the above did make me really consider voting against it instead of my original intent. +1 I checked things out as follows: - Verified the signature and checksum files. - Checked for LICENCE + NOTICE files present in the archives. -- The notice date is stale as already noted by Chris, and fixed on main+5.17.x. - Checked headers in the source archive with: mvn apache-rat:check - Ran the source build and the AMQP tests on JDK 8. - Ran the Qpid JMS 2.2.0 HelloWorld, against a broker started from the tar.gz binary on JDK 8. Robbie On Wed, 15 Feb 2023 at 05:37, Jean-Baptiste Onofré <j...@nanthrax.net> wrote: > > Gentle reminder: we would need an additional binding vote to get 5.16.6 pass. > > Thanks > Regards > JB > > On Fri, Feb 10, 2023 at 4:56 PM Jean-Baptiste Onofré <j...@nanthrax.net> > wrote: > > > > Hi guys, > > > > We receive several requests to provide a new (final) ActiveMQ 5.16.6 > > release, including few security fixes/improvements. > > > > So, I submit ActiveMQ 5.16.6 release to your vote. This one should be > > the last version on the 5.16.x series, inviting our users to upgrade > > to at least 5.17.x (or 5.18.x that should be available soon). > > > > Please take a look on the Release Notes for details: > > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12351793 > > > > Maven Staging Repository: > > https://repository.apache.org/content/repositories/orgapacheactivemq-1269/ > > > > Dist Staging Repository: > > https://dist.apache.org/repos/dist/dev/activemq/activemq/5.16.6/ > > > > Git tag: activemq-5.16.6 > > > > Please vote to approve this release: > > [ ] +1 Approve the release > > [ ] -1 Don't approve the release (please provide specific comments) > > > > This vote will be open for at least 72 hours. > > > > Thanks ! > > Regards > > JB