Alexandre, do you have any thoughts? All, Just a quick note - I'm very happy to re-roll as many times as needed (I'm just happy to be doing a 7.0.5 release), but please do be mindful that it takes something like 4-6 hours each time, so knowing anything that needs changing _before_ I start is appreciated. Once the [VOTE] thread hits the list, a considerable amount of time has gone in already.
I'd prefer to invest that time on things like: * Fixing the opensaml issue * Fixing the security manager for EAR deployment issue * Looking at the JACC issue reported recently * Java 10 and Java 11 support * Watching England in the world cup :-) Alex originally asked for the Tomcat 8.5.32 so I'd like to get his view on using 8.5.31. For reference, the changelog is here: https://tomcat.apache.org/tomcat-8.5-doc/changelog.html#Tomcat_8.5.32_(markt). For users using the CORSFilter, please note CVE-2018-8014. This can be mitigated by configuring the filter correctly. Cheers Jon On Wed, Jul 11, 2018 at 9:31 AM, Romain Manni-Bucau <[email protected]> wrote: > +1 release is now ok (thanks Jon) and time we workaround the new tomcat > behavior or tomcat reverts this regression we would have a release usable > by users having abandonned direct JNDI (which is most of our users now). > Hopefully we'll include the opensaml fix with this jndi fix next time. > > Romain Manni-Bucau > @rmannibucau <https://twitter.com/rmannibucau> | Blog > <https://rmannibucau.metawerx.net/> | Old Blog > <http://rmannibucau.wordpress.com> | Github <https://github.com/ > rmannibucau> | > LinkedIn <https://www.linkedin.com/in/rmannibucau> | Book > <https://www.packtpub.com/application-development/java- > ee-8-high-performance> > > > Le mer. 11 juil. 2018 à 10:16, Jean-Louis Monteiro < > [email protected]> > a écrit : > > > Last release was June 26th or so. So it gives us still a solid 3 or 4 > weeks > > ahead. > > So either we downgrade and we re-roll > > Or we let it go and we re-roll in few weeks from now. > > > > Second option would allow for incorporating additional user feedback > along > > side with the Tomcat upgrade. > > > > > > -- > > Jean-Louis Monteiro > > http://twitter.com/jlouismonteiro > > http://www.tomitribe.com > > > > On Wed, Jul 11, 2018 at 9:42 AM, Romain Manni-Bucau < > [email protected] > > > > > wrote: > > > > > They try to release each ~month/6weeks. > > > > > > Romain Manni-Bucau > > > @rmannibucau <https://twitter.com/rmannibucau> | Blog > > > <https://rmannibucau.metawerx.net/> | Old Blog > > > <http://rmannibucau.wordpress.com> | Github <https://github.com/ > > > rmannibucau> | > > > LinkedIn <https://www.linkedin.com/in/rmannibucau> | Book > > > <https://www.packtpub.com/application-development/java- > > > ee-8-high-performance> > > > > > > > > > Le mer. 11 juil. 2018 à 09:41, Matthew Broadhead > > > <[email protected]> a écrit : > > > > > > > when might they release 8.5.33? > > > > > > > > On 11/07/18 02:17, Gurkan Erdogdu wrote: > > > > > Hi Jon > > > > > Thanks for initiating this. > > > > > I opened a bug in Tomcat regarding java:/ namespace and it will be > > > > > corrected in 8.5.33 and upper versions. If we distribute the TomEE > > with > > > > > 8.5.32, it will be a problem for users who uses lookups with > openejb. > > > So, > > > > > for this release we can stick to 8.5.31. WDYT? > > > > > Regards. > > > > > Gurkan > > > > > > > > > > > > > > > On Tue, Jul 10, 2018 at 9:26 PM, Jonathan Gallimore < > > > > > [email protected]> wrote: > > > > > > > > > >> Hi Everyone, > > > > >> > > > > >> Here is the second roll of TomEE 7.0.5. Please can you take a look > > and > > > > >> vote? Everyone, committer or not, is encouraged to test and vote. > > > > >> > > > > >> Staging repo: > > > > >> https://repository.apache.org/content/repositories/ > > > orgapachetomee-1115 > > > > >> > > > > >> Source zip: > > > > >> https://repository.apache.org/content/repositories/ > > > > >> orgapachetomee-1115/org/apache/tomee/tomee-project/7. > > > > >> 0.5/tomee-project-7.0.5-source-release.zip > > > > >> > > > > >> Dist area: > > > > >> https://dist.apache.org/repos/dist/dev/tomee/staging-1115/ > > > > >> > > > > >> Legal: > > > > >> https://dist.apache.org/repos/dist/dev/tomee/staging-1115/ > legal.zip > > > > >> > > > > >> Keys: > > > > >> https://dist.apache.org/repos/dist/release/tomee/KEYS > > > > >> > > > > >> Libraries changed since TomEE 7.0.4: > > > > >> > > > > >> Tomcat => 8.5.32 > > > > >> CXF => 3.1.15 > > > > >> Johnzon => 1.0.1 > > > > >> OWB => 1.7.5 > > > > >> XBean => 4.9 > > > > >> XmlSchema core => 2.2.3 > > > > >> OpenJPA => 2.4.3 > > > > >> > > > > >> Changes since the last roll: > > > > >> > > > > >> - Remove javax.xml.soap-api-1.3.5.jar library which was > incorrectly > > > > >> included > > > > >> - Update to Tomcat 8.5.32 > > > > >> - Change JNDI name used for datasource in CDI TCK test to use an > > > > equivalent > > > > >> name under the java: namespace > > > > >> > > > > >> Changelog: > > > > >> https://issues.apache.org/jira/browse/TOMEE-2175?jql=project > > > > >> %20%3D%20TOMEE%20AND%20(status%20%3D%20Resolved%20OR%20statu > > > > >> s%20%3D%20CLOSED)%20AND%20fixVersion%20%3D%207.0.5%20O > > > > >> RDER%20BY%20priority%20DESC%2C%20updated%20DESC > > > > >> > > > > >> (If anyone knows a better way to get that list, let me know ;-) ) > > > > >> > > > > >> Please vote: > > > > >> +1: Release > > > > >> -1 Do not release because ... > > > > >> > > > > >> The vote will be open for 3 days or the consensus is binding (At > > > least 3 > > > > >> binding votes). > > > > >> > > > > >> Many thanks > > > > >> > > > > >> Jon > > > > >> > > > > > > > > > > > > > >
