Yes agree, native is used in production a lot. So we should take the opportunity to include that now, as the release process can be quite a lot of work to get right.

I'll add the missing headers and ensure the native is up to date.

Andy.


On 14/04/2014 08:45, Romain Manni-Bucau wrote:
since it is a *security* fix it should also include new tc native IMHO
otherwise the release is 50% useful only and we need a 1.6.0.2 just
after (in particular with all the buzz does heartbleed and even if it
affects only apr users - which are numerous actually).
Romain Manni-Bucau
Twitter: @rmannibucau
Blog: http://rmannibucau.wordpress.com/
LinkedIn: http://fr.linkedin.com/in/rmannibucau
Github: https://github.com/rmannibucau



2014-04-14 7:48 GMT+02:00 Jean-Louis MONTEIRO <[email protected]>:
-1

I'm sorry Andy, not your fault at all. We probably missed them last time,
but we can't leave that again.
I've seen some ASF headers missing
container/openejb-concurrency-utilities-ee/src/main/java/org/apache/openejb/concurrencyutilities/ee/factory/ManagedThreadFactoryImplFactory.java
container/openejb-core/src/main/java/org/apache/openejb/resource/jdbc/managed/xa/CommonDataSourceAdapter.java
container/openejb-core/src/main/java/org/apache/openejb/resource/jdbc/pool/XADataSourceResource.java
server/openejb-hessian/src/main/java/org/apache/openejb/server/hessian/HessianRegistryImpl.java
tomee/tomee-common/src/main/java/org/apache/tomee/installer/InstallerTools.java

Would you please fix that both on the 1.6.0.1 branch and trunk please.
A part from that, did not see anything else blocking. So you should be able
to reroll during the day. If you have any issues pushing a new set of
binaries, I can push them by the end of the day. Go with all other steps.

@Thiago, I added JS handlebars to RAT exclusions because right now, you did
not finished yet on the UI part. Would be great if you could start adding
headers on the static and webaccess part or at least check to finer exclude
in the RAT configuration.


JLouis




2014-04-12 12:04 GMT+02:00 Romain Manni-Bucau <[email protected]>:

Hi

Should be a constant in our release tool but tag is tomee-1.6.0.1 anf not
openejb-4.6.0.1
Le 11 avr. 2014 13:34, "Andy Gumbrecht" <[email protected]> a
écrit :

[generated email]

SVN Tag:

  https://svn.apache.org/repos/asf/tomee/tomee/tags/openejb-4.6.0.1/

Maven Repo:

  https://repository.apache.org/content/repositories/orgapachetomee-1011

Binaries & Source:


https://dist.apache.org/repos/dist/dev/tomee/staging-1011/tomee-1.6.0.1/

Vote will be open for 72 hours or as needed.
The TCK ran through on this so we should be good to go this time.

--
--
Andy Gumbrecht

http://www.tomitribe.com | [email protected]





--
Jean-Louis

--
--
Andy Gumbrecht

http://www.tomitribe.com | [email protected]

Reply via email to