Dear Piergiorgio,

Congratulations on the release, and thank you for following announce and 
download requirements.

The download page https://manifoldcf.apache.org/en_US/download.html needs a bit 
of work in order to conform.

The use of md5 is no longer appropriate as it is easily compromised. 

The links to the artifacts are properly to closer.lua. But all the links to 
KEYS must be to the single KEYS file 
https://downloads.apache.org/manifoldcf/KEYS . This file must be kept up to 
date with the latest public keys.

The links to the signatures and checksums similarly must not be to 
dist/manifoldcf but must be to e.g. 
https://downloads.apache.org/manifoldcf/apache-manifoldcf-2.28/...

Warm regards,
Craig


> On Jan 16, 2025, at 13:16, Piergiorgio Lucidi <piergior...@apache.org> wrote:
> 
> The Apache ManifoldCF team is pleased to announce the 2.28 release.
> 
> Apache ManifoldCF is an effort to provide an open source framework for
> connecting source content repositories like Microsoft Sharepoint and
> EMC Documentum, to target repositories or indexes, such as Apache
> Solr, Open Search Server, or ElasticSearch. Apache ManifoldCF also
> defines a security model for target repositories that permits them to
> enforce source-repository security policies.
> 
> Project website: https://manifoldcf.apache.org/
> 
> Download page: https://manifoldcf.apache.org/en_US/download.html
> 
> Apache ManifoldCF SDK: https://github.com/apache/manifoldcf-sdk
> 
> == Release Notes
> 
> This release was focused on:
> - Resolving the most critical vulnerabilities updating some of the 
> dependencies
> - Introducing a new Generic Authority Connector based on the JSON format
> - Upgrading the connectors libraries
> 
> Changelog:
> 
> Bugs
> [CONNECTORS-1766] - Fix JDBC authority edition error on "Database type" tab
> [CONNECTORS-1768] - Wrong branch version tag generated in GitHub Workflow
> 
> New Features
> [CONNECTORS-1748] - Add "User-Agent platform" option for crawling
> mobile websites
> 
> Improvements
> [CONNECTORS-1105] - Add maven delivery targets to poms
> [CONNECTORS-1752] - Solr 9 Ingester connector
> [CONNECTORS-1758] - Google drive api upgrade
> [CONNECTORS-1759] - A new generic authority connector for JSON data
> exchange format
> [CONNECTORS-1761] - Add Groups management for Active Directory Connector
> [CONNECTORS-1762] - Web Connector: Fix SSL issues in redirections
> [CONNECTORS-1763] - Update the default PostgreSQL JDBC Driver
> [CONNECTORS-1764] - Error publishing Maven artifacts due to the Maven
> Source Plugin change
> [CONNECTORS-1765] - Fixing vulnerabilities in MCF
> Task
> [CONNECTORS-1767] - Update the documentation adding the New Generic
> Authority Connector
> 
> List of fixed issues: [1]
> 
> The Docker Image is available at the following URL: [2]
> 
> Please report any feedback to the mailing lists ([3], [4]).
> 
> For more information on Apache ManifoldCF please visit project home page:
> https://manifoldcf.apache.org/
> 
> Regards,
> The Apache ManifoldCF Team
> 
> [1] - 
> https://issues.apache.org/jira/issues/?jql=project%20=%2012311050%20AND%20fixVersion%20=%2012355177%20ORDER%20BY%20priority%20DESC,%20key%20ASC
> [2] - 
> https://hub.docker.com/layers/apache/manifoldcf/2.28/images/sha256-e8481df17289202ac7c050ca82ef1df4e3b1d78ef72d5b942a6480a300d52903
> [3] - https://lists.apache.org/list.html?dev@manifoldcf.apache.org
> [4] - https://lists.apache.org/list.html?u...@manifoldcf.apache.org

Craig L Russell
c...@apache.org

Reply via email to