Re: lib/README file and .DS_Store in .gitignore

[Jacques Le Roux]

Thanks Michael,

I add a doubt, fixed

Jacques

Le 15/12/2021 à 20:43, Michael Brohl a écrit :

Hi Jacques,

thanks for bringing this up.

The lib dir is a mechanism which allows users to use and load external libs which can not (or should not) be loaded from external repositories 
through the Gradle mechanism. It is used in build.gradle at the end of the dependencies section.


We do not use this library path but others may be using it. It's a feature to 
extend OFBiz, does no harm and might be useful in some cases.

I would propose to keep it and change the README inside the folder to point to 
Maven Central instead of jCenter.

Yes, .DS_Store is Mac related (https://file.org/extension/ds_store) and should 
stay in .gitignore.

Thanks

Michael

ecomify GmbH - www.ecomify.de

Am 15.12.21 um 17:36 schrieb Jacques Le Roux:

Hi All,

The lib/README file contains deprecated information, like using jcenter. I propose to get rid of the whole lib dir, except if I miss something (I 
know .DS_Store is Apple-Mac related)?


Jacques

Re: lib/README file and .DS_Store in .gitignore

[Michael Brohl]

Hi Jacques,

thanks for bringing this up.

The lib dir is a mechanism which allows users to use and load external 
libs which can not (or should not) be loaded from external repositories 
through the Gradle mechanism. It is used in build.gradle at the end of 
the dependencies section.


We do not use this library path but others may be using it. It's a 
feature to extend OFBiz, does no harm and might be useful in some cases.


I would propose to keep it and change the README inside the folder to 
point to Maven Central instead of jCenter.


Yes, .DS_Store is Mac related (https://file.org/extension/ds_store) and 
should stay in .gitignore.


Thanks

Michael

ecomify GmbH - www.ecomify.de

Am 15.12.21 um 17:36 schrieb Jacques Le Roux:

Hi All,

The lib/README file contains deprecated information, like using 
jcenter. I propose to get rid of the whole lib dir, except if I miss 
something (I know .DS_Store is Apple-Mac related)?


Jacques

Re: lib/README file and .DS_Store in .gitignore

[Pierre Smits]

Hi Jacques,

Maybe you forgot, but ...
As a privileged contributor you have the discretionary power to remove
deprecated elements at any time from the files in the OFBiz repository
without a proposal for (and a discussion regarding) such removal.

Met vriendelijke groet,

Pierre Smits
*Proud* *contributor** of* Apache OFBiz  since
2008 (without privileges)
Proud contributor to the ASF since 2006

*Apache Directory , PMC Member*


On Wed, Dec 15, 2021 at 5:38 PM Jacques Le Roux <
jacques.le.r...@les7arts.com> wrote:

> Hi All,
>
> The lib/README file contains deprecated information, like using jcenter. I
> propose to get rid of the whole lib dir, except if I miss something (I know
> .DS_Store is Apple-Mac related)?
>
> Jacques
>
>

Re: Migration from ci.a.o

[Pierre Smits]

HI Jacques,

If the project still sees XMLRPC functionality as an important OFBiz
service, we should work to get the CI to work with the tests. If the
project feels it has outlived its usefulness, we should work to get this
attic-ed.

Met vriendelijke groet,

Pierre Smits
*Proud* *contributor** of* Apache OFBiz  since
2008 (without privileges)
Proud contributor to the ASF since 2006

*Apache Directory , PMC Member*


On Wed, Dec 15, 2021 at 5:24 PM Jacques Le Roux <
jacques.le.r...@les7arts.com> wrote:

> Le 14/12/2021 à 09:34, Jacques Le Roux a écrit :
> > I also wonder if we should not get rid of Apache XMLRPC knowing that
> it's no longer maintained:
> https://github.com/advisories/GHSA-6vwp-35w3-xph8
>
> A milder mitigation would be to simply comment out the 2 tests that fail
> on BuildBot. That would allow to keep XMLRPC for those interested. Like
> people working in a safe (ie no internet) environment. We also know that
> only post-auth attacks are possible.
>
> Opinions?
>
> Jacques
>
>

lib/README file and .DS_Store in .gitignore

[Jacques Le Roux]

Hi All,

The lib/README file contains deprecated information, like using jcenter. I propose to get rid of the whole lib dir, except if I miss something (I know 
.DS_Store is Apple-Mac related)?


Jacques

Re: Migration from ci.a.o

[Jacques Le Roux]

Le 14/12/2021 à 09:34, Jacques Le Roux a écrit :

I also wonder if we should not get rid of Apache XMLRPC knowing that it's no 
longer maintained: https://github.com/advisories/GHSA-6vwp-35w3-xph8


A milder mitigation would be to simply comment out the 2 tests that fail on BuildBot. That would allow to keep XMLRPC for those interested. Like 
people working in a safe (ie no internet) environment. We also know that only post-auth attacks are possible.


Opinions?

Jacques