I've called a vote on Santuario today, so I'll try to release and get a WSS4J vote started by end of week.
Colm. On Tue, Feb 13, 2024 at 11:09 PM Andriy Redko <drr...@gmail.com> wrote: > > Hi Colm, > > I think it would be good to have a release soon-ish, but by and large, I > don't think > we have hard deadline for it, please feel free to proceed as per your > judgement. > Thank you. > > Best Regards, > Andriy Redko > > > Sorry it turns out I'll need to get Santuario 3.0.4 out first. Do I > > have time to do this and WSS4J before the next CXF release? > > > Colm. > > > On Tue, Feb 13, 2024 at 3:28 PM Freeman Fang <freeman.f...@gmail.com> wrote: > >> Thanks Colm! > >> On Tue, Feb 13, 2024 at 10:18 AM Colm O hEigeartaigh <cohei...@apache.org> > >> wrote: > >>> Yes, I'll call a vote today on WSS4J 3.0.3. > >>> Colm. > >>> On Tue, Feb 13, 2024 at 2:28 PM Freeman Fang <freeman.f...@gmail.com> > >>> wrote: > >>>> +1 to release Apache CXF 4.0.4 > >>>> @Colm O hEigeartaigh Any chance we could have a WSS4J 3.0.3 release soon? > >>>> Thanks! > >>>> Freeman > >>>> On Tue, Feb 13, 2024 at 7:15 AM Jiri Ondrusek <jondr...@redhat.com> > >>>> wrote: > >>>>> Hi, > >>>>> just for your information, the PR > >>>>> (https://github.com/apache/cxf/pull/1660) > >>>>> requires version of wss4f to be 3.0.3 (to contain > >>>>> https://issues.apache.org/jira/browse/WSS-709) > >>>>> Best regards, > >>>>> Jiri > >>>>> On Tue, Feb 13, 2024 at 10:53 AM Peter Palaga <ppal...@redhat.com> > >>>>> wrote: > >>>>>> Thanks, great to hear that, Andriy. > > >>>>>> It would be great if we could get > >>>>>> https://github.com/apache/cxf/pull/1660 merged in some form before the > >>>>>> release. > >>>>>> The main motivation is to be able to run CXF on FIPS-enabled systems. > >>>>>> If > >>>>>> the customized algo suite, that the PR proposes, is questionable, I'd > >>>>>> be > >>>>>> also fine with introducing a couple of new suites with fixed > >>>>>> non-standard names, like already done in the past for fixing CVEs. It > >>>>>> would be nice to hear other community members' thoughts. > >>>>>> Thanks again, > >>>>>> -- Peter > >>>>>> On 13/02/2024 02:35, Andriy Redko wrote: > >>>>>>> Hi Peter, > >>>>>>> Thanks a lot for reminding, I belive we are long overdue on that, > >>>>>>> @Dan, > >>>>>> @Colm > >>>>>>> may need your help please preparing the next release train (or any > >>>>>> objection folks)? > >>>>>>> Thank you! > >>>>>>> Best Regards, > >>>>>>> Andriy Redko > >>>>>>>> Hi, > >>>>>>>> we are preparing Quarkus CXF to release it for Quarkus 3.8 which is > >>>>>> going to be a LTS (Long Term Support) release. > >>>>>>>> I wonder whether we could count on getting CXF 4.0.4 by February 21st > >>>>>> to be able to use it in that release? > >>>>>>>> Thanks, > >>>>>>>> -- Peter > >>>>> -- > >>>>> Jiri Ondrusek <jondr...@redhat.com> > >>>>> Senior Software Engineer > >>>>> Red Hat Fuse >
