Hi Folks, Please VOTE on the Apache Flagon 2.0.2 Release Candidate # 1 Context: v2.0.1 release had a major, uncaught flaw in the package.json file. Once the VOTE passed to release 2.0.1, this was published to the npm registry resulting in an unusable npm package. This was immediately unpublished. However, npm prohibits republishing over the same package version number. As such, we are treating v2.0.1 as a failed release. v2.0.2 resolves the package.json issue, and adds the final npm dev dependency update to resolve all install audit warnings rel to Prototype Pollution, and package deprecation notices. See changelog for full details. Additionally, see the newly added UserALE.js testing framework (on confluence, link below) for instructions for how to build, perform unit and integration tests, and test the npm distribution as though it was installed directly from the npm registry.
VOTE details follow: About Flagon: http://flagon.incubator.apache.org/ <http://flagon.incubator.apache.org/> This Patch release includes : • Updates to package.json and package-lock.json to resolve downstream Prototype Pollution vulnerabilities in dev dependencies • Updates to package.json and package-lock.json to modernize deprecated npm modules • Minor updates to README documentation for UserALE.js' Example Test Utilities. We solved 11 issues: https://issues.apache.org/jira/projects/FLAGON/versions/12345954 <https://issues.apache.org/jira/projects/FLAGON/versions/12345954> Git source tag (43de2fc1e1c5d5e1a83119a91947f7bbe6d313f3): https://github.com/apache/incubator-flagon-useralejs/releases/tag/2.0.2-RC1-08_06_2019 <https://github.com/apache/incubator-flagon-useralejs/releases/tag/2.0.2-RC1-08_06_2019> Staging repo: https://dist.apache.org/repos/dist/dev/incubator/flagon/ <https://dist.apache.org/repos/dist/dev/incubator/flagon/> Source Release Artifacts: https://dist.apache.org/repos/dist/dev/incubator/flagon/apache-flagon-useralejs-incubating-2.0.2-RC1/ <https://dist.apache.org/repos/dist/dev/incubator/flagon/apache-flagon-useralejs-incubating-2.0.2-RC1/> PGP release keys (signed using F937rFAE3FCADF6E): https://dist.apache.org/repos/dist/release/incubator/flagon/KEYS <https://dist.apache.org/repos/dist/release/incubator/flagon/KEYS> Reference the {product} testing framework to assist in your unit and integration tests: https://cwiki.apache.org/confluence/display/FLAGON/UserALE.js+Testing+Framework <https://cwiki.apache.org/confluence/display/FLAGON/UserALE.js+Testing+Framework> Link to Successful Jenkins Build(s): https://builds.apache.org/job/useralejs-ci/91/ <https://builds.apache.org/job/useralejs-ci/91/>, https://builds.apache.org/job/useralejs-ci/92/ <https://builds.apache.org/job/useralejs-ci/92/> Vote will be open for 72 hours. Please VOTE as follows: [ ] +1, let's get it released!!! [ ] +/-0, fine, but consider to fix few issues before... [ ] -1, nope, because... (and please explain why) Thank you to everyone that is able to VOTE as well as everyone that contributed to Apache Flagon 2.0.0
