Re: Re: Release Commons Fileupload 1.4.1?

2023-03-27 Thread Maxim Solodovnik
Q1 is almost over :(
Are you still planning to release 2.0?
Do you need any help? :))

On 2022/12/07 17:30:35 Gary Gregory wrote:
> The next release will be 2.0 which will hopefully happen Q1 2023.
> 
> Gary
> 
> On Wed, Dec 7, 2022, 11:28 Dennis Kieselhorst  wrote:
> 
> > Well this is the change I'm particularly interested in to have clean
> > transitive dependencies but looking at the commit logs other useful
> > things happened as well. The last release happened in 2019. I understand
> > though that fileupload is implemented differently nowadays and
> > maintaining this project no longer is a priority.
> >
> > Dennis
> >
> >
> > On 2022/12/07 16:01:48 Gary Gregory wrote:
> >  > This is unlikely to happen for only a dependency update, and also
> > since it
> >  > is simple to override in Maven, Ivy, and so on.
> >  > Recall that we are volunteers here where each person spends their
> >  > valuable time as they best see fit ;-)
> >  >
> >  > Gary
> >  >
> >  > On Wed, Dec 7, 2022, 10:49 Dennis Kieselhorst  wrote:
> >  >
> >  > > Hi folks,
> >  > >
> >  > > would it be possible to release Commons Fileupload 1.4.1? 1.4 still
> >  > > contains commons-io 2.2 and requires to explicitly exclude it
> >  > > (CVE-2021-29425).
> >  > >
> >  > > Thanks,
> >  > > Dennis
> >  > >
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> > For additional commands, e-mail: dev-h...@commons.apache.org
> >
> >
> 

-
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org



Re: Volunteering

2023-03-27 Thread Gary Gregory
While a thankless task, you could wield a Mournebalde or Stormbringer at
the Commoms VFS tests which are in need of modernization: Most are still
based on JUnit 3, some 4, where 5 is the goal.

Gary

On Mon, Mar 27, 2023, 18:17  wrote:

> Greetings,
>
> I've got some time on my hands the next couple of weeks, and I figured I
> could spend some of that time on the commons.
>
> In particular, I've noticed that commons-cli, commons-lang, and
> commons-io have a lot of jira issues and pull requests that have been
> open for a long time. Is there anything I can do to help out there?
> Triage, comment, test, whatever?
>
> Thanks,
>
> Elric
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> For additional commands, e-mail: dev-h...@commons.apache.org
>
>


Re: Volunteering

2023-03-27 Thread Gilles Sadowski
Hi.

Le mar. 28 mars 2023 à 00:17,  a écrit :
>
> Greetings,
>
> I've got some time on my hands the next couple of weeks, and I figured I
> could spend some of that time on the commons.

Thanks!

>
> In particular, I've noticed that commons-cli, commons-lang, and
> commons-io have a lot of jira issues and pull requests that have been
> open for a long time. Is there anything I can do to help out there?
> Triage, comment, test, whatever?

Also: Commons Math (towards a non-beta release...)

Regards,
Gilles

-
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org



Volunteering

2023-03-27 Thread elric

Greetings,

I've got some time on my hands the next couple of weeks, and I figured I 
could spend some of that time on the commons.


In particular, I've noticed that commons-cli, commons-lang, and 
commons-io have a lot of jira issues and pull requests that have been 
open for a long time. Is there anything I can do to help out there? 
Triage, comment, test, whatever?


Thanks,

Elric

-
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org



Re: [VOTE] Release Apache Commons Configuration 2.9.0 based on RC1

2023-03-27 Thread Bruno Kinoshita
   [x] +1 Release these artifacts

Tested from tag with:

Apache Maven 3.8.5 (3599d3414f046de2324203b78ddcf9b5e4388aa0)
Maven home: /opt/apache-maven-3.8.5
Java version: 17.0.6, vendor: Private Build, runtime:
/usr/lib/jvm/java-17-openjdk-amd64
Default locale: en_US, platform encoding: UTF-8
OS name: "linux", version: "5.15.0-67-generic", arch: "amd64", family:
"unix"

Building OK, reports look good.

Thanks!

-Bruno


On Sun, 26 Mar 2023 at 01:40, Gary Gregory  wrote:

> We have fixed a few bugs and made some enhancements since Apache
> Commons Configuration 2.8.0 was released, so I would like to release
> Apache Commons Configuration 2.9.0.
>
> Apache Commons Configuration 2.9.0 RC1 is available for review here:
> https://dist.apache.org/repos/dist/dev/commons/configuration/2.9.0-RC1
> (svn revision 60824)
>
> The Git tag commons-configuration-2.9.0-RC1 commit for this RC is
> 1208fcf3697fc04aaff51c7fdaf15123e41db2a5 which you can browse here:
>
> https://gitbox.apache.org/repos/asf?p=commons-configuration.git;a=commit;h=1208fcf3697fc04aaff51c7fdaf15123e41db2a5
> You may checkout this tag using:
> git clone
> https://gitbox.apache.org/repos/asf/commons-configuration.git
> --branch
> 
> commons-configuration-2.9.0-RC1
> commons-configuration-2.9.0-RC1
>
> Maven artifacts are here:
>
> https://repository.apache.org/content/repositories/orgapachecommons-1629/org/apache/commons/commons-configuration2/2.9.0/
>
> These are the artifacts and their hashes:
>
> #Release SHA-512s
> #Sat Mar 25 20:26:08 EDT 2023
>
> org.apache.commons_commons-configuration2-2.9.0.spdx.json=e44968793cfc3e76e7219f3eee77b9ea9cf563f08210145443d688d31a227fa034c7406508a94454b9b1c61c1e673ef7ea6a057aef909e1a6733010c164a6b1d
>
> commons-configuration2-2.9.0-test-sources.jar=81afa85b7e9106456d2f39e0048acd952ce61c91a399472ce1dcf85658b56e6f8490b78d8dda7a7ac55bd1c15e84e7547c9aedf813aada2c34576dfdfc12
>
> commons-configuration2-2.9.0-src.zip=df79d8a2d51029bae1700b67e2567a219a4d74fb1cc91ea92998ecd9c68c50c5ddfa67f06533348a03292c2c097fe8baa7fba1a441ceb84c741c80f7e293349a
>
> commons-configuration2-2.9.0-sources.jar=1057ff30b5bd3ed49a9e7a374a26ed4d34caaa7ab7efa11b0c674843ca1cb5d6ce00e434e014a6758d697d66686c1f511025f07f1840c3fb29c06fef7c73b669
>
> commons-configuration2-2.9.0-bin.zip=aa3d52bd9ceb0dfdc1cba953e1819a0296240c3d75f0bcb65b32f636d7394c65885397c44439be3276d532fcd95e5aaa628b2084b7f96d426979ecf8a856bdf6
>
> commons-configuration2-2.9.0-bom.json=fa7030cf2fe9671124245ed02e0609d943d8e60886b6c02f95e0d9975839bb463e83a174097ced929fb0772eafab0e89656e98b5ab07b2526ba3cfcdf290a8e1
>
> commons-configuration2-2.9.0-bom.xml=531a85f638fb7e5b08313296c2e322d21127b48ea2977d33e2ddbc1514dc3c6c4e8be26a3954f72a55291d9cbc3a36bc14c7d21090fdc15023e74785fe0badf4
>
> commons-configuration2-2.9.0-src.tar.gz=61091f483aa531b52e4b97b5671042bd6b8b6080c5f8951c3de27fbf1beb5c5d93c2deb2e641bb39b3fd4e7e24de6f49e931ff248501f864ea2e2f9804defdfa
>
> commons-configuration2-2.9.0-bin.tar.gz=b8116991f587e7cb708d4fa693fac8a2501d6c2523db50233d17eb388aff2ecc1b1181fca3001b7276a1e41c7c7675e996d543356f1894253a8b8858213a8021
>
> commons-configuration2-2.9.0-javadoc.jar=69841bda81d36fcb4a2bb7d2774966badcf1254009813d55e612df22fe62da3afd5ff144916a7367d8c682b48d0d65250dd0ffdfbca2e7b50373345600f8c2f9
>
> commons-configuration2-2.9.0-tests.jar=03ef15faa363247050be985cd8e7c8dfdcbb3c4ad6d2992b36bc07eacef78d20b76e7352bf647846d73f6ed64169cf5d981ff77592a572460ef2cee06073b746
>
> I have tested this with:
>
> mvn -V -Prelease -Ptest-deploy -P jacoco -P japicmp clean package site
> deploy
>
> Using:
>
> Apache Maven 3.9.1 (2e178502fcdbffc201671fb2537d0cb4b4cc58f8)
> Maven home: /usr/local/Cellar/maven/3.9.1/libexec
> Java version: 11.0.18, vendor: Homebrew, runtime:
> /usr/local/Cellar/openjdk@11/11.0.18/libexec/openjdk.jdk/Contents/Home
> Default locale: en_US, platform encoding: UTF-8
> OS name: "mac os x", version: "13.2.1", arch: "x86_64", family: "mac"
> Darwin gdg-mac-mini.local 22.3.0 Darwin Kernel Version 22.3.0: Mon Jan
> 30 20:42:11 PST 2023; root:xnu-8792.81.3~2/RELEASE_X86_64 x86_64
>
> Note that I had to use Java 11 instead of Java 8 to get one of the
> SBOM plugins to play nice.
>
> Details of changes since 2.8.0 are in the release notes:
>
> https://dist.apache.org/repos/dist/dev/commons/configuration/2.9.0-RC1/RELEASE-NOTES.txt
>
> https://dist.apache.org/repos/dist/dev/commons/configuration/2.9.0-RC1/site/changes-report.html
>
> Site:
>
> https://dist.apache.org/repos/dist/dev/commons/configuration/2.9.0-RC1/site/index.html
> (note some *relative* links are broken and the 2.9.0 directories
> are not yet created - these will be OK once the site is deployed.)
>
> JApiCmp Report (compared to 2.8.0):
>
> https://dist.apache.org/repos/dist/dev/commons/configuration/2.9.0-RC1/site/japicmp.html
>
> RAT Report:
>
> https://dist.apache.org/repos/dist/dev/commons/configuration/2.9.0-RC1/site/rat-report.html
>
> 

Re: [VOTE] Release Apache Commons Configuration 2.9.0 based on RC1

2023-03-27 Thread Henri Biestro


+1

Checked src & bin signatures, site reports.

Apache Maven 3.8.1 (05c21c65bdfed0f71a2f2ada8b84da59348c4c5d)
Maven home: /Users/henri.biestro/Java/apache-maven-3.8.1
Java version: 1.8.0_345, vendor: Azul Systems, Inc., runtime: 
/Library/Java/JavaVirtualMachines/zulu-8.jdk/Contents/Home/jre
Default locale: en_FR, platform encoding: UTF-8
OS name: "mac os x", version: "13.2.1", arch: "aarch64", family: "Mac"

Darwin l-hbiestro.home 22.3.0 Darwin Kernel Version 22.3.0: Mon Jan 30 20:38:37 
PST 2023; root:xnu-8792.81.3~2/RELEASE_ARM64_T6000 arm64

-
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org



[ANNOUNCEMENT] Apache Commons JEXL 3.3

2023-03-27 Thread Henri Biestro
The Apache Commons JEXL team is happy to announce the release of version
3.3.

JEXL is a library intended to facilitate the implementation of dynamic and
scripting features in applications and frameworks written in Java.

This is a feature and bug-fix release.

Site: https://commons.apache.org/proper/commons-jexl/
Changes: https://commons.apache.org/proper/commons-jexl/changes-report.html
Download it from:
https://commons.apache.org/proper/commons-jexl/download_jexl.cgi

Henri Biestro,
for the Apache Commons JEXL team


[VOTE][RESULT] Release Apache Commons JEXL 3.3 based on RC2

2023-03-27 Thread Henri Biestro (Apache)
This VOTE passes with the following binding +1 votes:
- Bruno Kinoshita
- Gary Gregory
- Henri Biestro