Claude,

On 3/23/21 03:06, Claude Brisson wrote:
If I go to this page:

     https://wiki.shibboleth.net/confluence/display/OS30/Home

the first thing I see is the not at the top which states:

    "The OpenSAML 3 software has reached its End of Life and is no longer supported. This space is available for historical purposes only."

So why bother patching Velocity 1.7 since the transitive dependency you refer to has reached end of life?

Amusingly enough, "OpenSAML 3.0 is EOL" but "OpenSAML 4.0 isn't released yet".

The people at OpenSAML seem not to have their stuff together.

-chris

On 2021-03-23 05 h 02, Cesar Hernandez wrote:
Hi all,

I opened https://issues.apache.org/jira/browse/VELOCITY-941 along with the
Pull Request  https://github.com/apache/velocity-engine/pull/21 to
accomplish the backport of the patch applied to master via
https://issues.apache.org/jira/browse/VELOCITY-931
Hope the backport makes sense since there is still transitive dependencies
from the 1.7 release [1]

[1]
https://issues.apache.org/jira/browse/WSS-683
https://github.com/apache/velocity-engine/pull/16#issuecomment-799180202

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@velocity.apache.org
For additional commands, e-mail: dev-h...@velocity.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@velocity.apache.org
For additional commands, e-mail: dev-h...@velocity.apache.org

Reply via email to