+1 I tested the h*** out of this. Don’t forget to VOTE y’all!
> On Aug 6, 2019, at 10:16 PM, Joshua Poore <[email protected]> wrote: > > > Hi Folks, > > Please VOTE on the Apache Flagon 2.0.2 Release Candidate # 1 > > Context: v2.0.1 release had a major, uncaught flaw in the package.json file. > Once the VOTE passed to release 2.0.1, this was published to the npm registry > resulting in an unusable npm package. This was immediately unpublished. > However, npm prohibits republishing over the same package version number. As > such, we are treating v2.0.1 as a failed release. v2.0.2 resolves the > package.json issue, and adds the final npm dev dependency update to resolve > all install audit warnings rel to Prototype Pollution, and package > deprecation notices. See changelog for full details. Additionally, see the > newly added UserALE.js testing framework (on confluence, link below) for > instructions for how to build, perform unit and integration tests, and test > the npm distribution as though it was installed directly from the npm > registry. > > VOTE details follow: > > About Flagon: http://flagon.incubator.apache.org/ > <http://flagon.incubator.apache.org/> > > This Patch release includes : > > • Updates to package.json and package-lock.json to resolve downstream > Prototype Pollution vulnerabilities in dev dependencies > • Updates to package.json and package-lock.json to modernize deprecated > npm modules > • Minor updates to README documentation for UserALE.js' Example Test > Utilities. > > We solved 11 issues: > https://issues.apache.org/jira/projects/FLAGON/versions/12345954 > <https://issues.apache.org/jira/projects/FLAGON/versions/12345954> > > Git source tag (43de2fc1e1c5d5e1a83119a91947f7bbe6d313f3): > https://github.com/apache/incubator-flagon-useralejs/releases/tag/2.0.2-RC1-08_06_2019 > > <https://github.com/apache/incubator-flagon-useralejs/releases/tag/2.0.2-RC1-08_06_2019> > > Staging repo: https://dist.apache.org/repos/dist/dev/incubator/flagon/ > <https://dist.apache.org/repos/dist/dev/incubator/flagon/> > > Source Release Artifacts: > https://dist.apache.org/repos/dist/dev/incubator/flagon/apache-flagon-useralejs-incubating-2.0.2-RC1/ > > <https://dist.apache.org/repos/dist/dev/incubator/flagon/apache-flagon-useralejs-incubating-2.0.2-RC1/> > > PGP release keys (signed using F937rFAE3FCADF6E): > https://dist.apache.org/repos/dist/release/incubator/flagon/KEYS > <https://dist.apache.org/repos/dist/release/incubator/flagon/KEYS> > > Reference the {product} testing framework to assist in your unit and > integration tests: > https://cwiki.apache.org/confluence/display/FLAGON/UserALE.js+Testing+Framework > > <https://cwiki.apache.org/confluence/display/FLAGON/UserALE.js+Testing+Framework> > > > Link to Successful Jenkins Build(s): > https://builds.apache.org/job/useralejs-ci/91/ > <https://builds.apache.org/job/useralejs-ci/91/>, > https://builds.apache.org/job/useralejs-ci/92/ > <https://builds.apache.org/job/useralejs-ci/92/> > > Vote will be open for 72 hours. Please VOTE as follows: > > [ ] +1, let's get it released!!! > [ ] +/-0, fine, but consider to fix few issues before... > [ ] -1, nope, because... (and please explain why) > Thank you to everyone that is able to VOTE as well as everyone that > contributed to Apache Flagon 2.0.0
