[VOTE] [RELEASE] Apache OFBiz 18.12.14

[Jacopo Cappellato]

This is the vote thread to publish "Apache OFBiz 18.12.14", the 14th
release from the release18.12 branch.

The release files can be downloaded from here:
https://dist.apache.org/repos/dist/dev/ofbiz/
and are:
* apache-ofbiz-18.12.14.zip
* KEYS: text file with keys
* apache-ofbiz-18.12.14.zip.asc: the detached signature file
* apache-ofbiz-18.12.14.zip.sha512: checksum file

Please download and test the zip file and its signatures (for
instructions on testing the signatures see
http://www.apache.org/info/verification.html).

Vote:
[ +1] release as Apache OFBiz 18.12.14
[ -1] do not release

This vote is open for at least 5 days.

For more details about this process please refer to
http://www.apache.org/foundation/voting.html

Re: [VOTE] [RESULT] Apache OFBiz 18.12.13

[Jacopo Cappellato]

Yes, it is normal because that is the dev distribution folder: as soon
as the release becomes official the files are moved to the official
distribution folder: https://downloads.apache.org/ofbiz/

Jacopo

On Tue, May 7, 2024 at 4:07 PM Jacques Le Roux
 wrote:
>
> Hi Jacopo,
>
> I see only KEYS
>
> TIA
>
> Jacqued
>
> Le 07/05/2024 à 11:41, Jacopo Cappellato a écrit :
> > The vote is successful with seven positive votes (all binding) and no
> > negative votes.
> > I am going to publish and announce the release soon.
> >
> > Jacopo
> >
> > On Tue, Apr 30, 2024 at 5:06 PM Jacopo Cappellato
> >  wrote:
> >> This is the vote thread to publish "Apache OFBiz 18.12.13", the thirteenth
> >> release from the release18.12 branch.
> >>
> >> The release files can be downloaded from here:
> >> https://dist.apache.org/repos/dist/dev/ofbiz/
> >> and are:
> >> * apache-ofbiz-18.12.13.zip
> >> * KEYS: text file with keys
> >> * apache-ofbiz-18.12.13.zip.asc: the detached signature file
> >> * apache-ofbiz-18.12.13.zip.sha512: checksum file
> >>
> >> Please download and test the zip file and its signatures (for
> >> instructions on testing the signatures see
> >> http://www.apache.org/info/verification.html).
> >>
> >> Vote:
> >> [ +1] release as Apache OFBiz 18.12.13
> >> [ -1] do not release
> >>
> >> This vote is open for at least 5 days.
> >>
> >> For more details about this process please refer to
> >> http://www.apache.org/foundation/voting.html

[ANNOUNCE] Apache OFBiz 18.12.13 released

[Jacopo Cappellato]

The Apache OFBiz community is pleased to announce the new release "Apache
OFBiz 18.12.13".

Apache OFBiz® is an open source product for the automation of enterprise
processes that includes framework components and business applications.

http://ofbiz.apache.org/

"Apache OFBiz 18.12.13" is the 13th release of the 18.12 series.

For details of the changes introduced with this new version
please refer to http://ofbiz.apache.org/release-notes-18.12.13.html

The history of security related fixes included in each release is
available here:
https://ofbiz.apache.org/security.html

The release files can be downloaded following the instructions in the OFBiz
download page:

http://ofbiz.apache.org/download.html

[VOTE] [RESULT] Apache OFBiz 18.12.13

[Jacopo Cappellato]

The vote is successful with seven positive votes (all binding) and no
negative votes.
I am going to publish and announce the release soon.

Jacopo

On Tue, Apr 30, 2024 at 5:06 PM Jacopo Cappellato
 wrote:
>
> This is the vote thread to publish "Apache OFBiz 18.12.13", the thirteenth
> release from the release18.12 branch.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
> and are:
> * apache-ofbiz-18.12.13.zip
> * KEYS: text file with keys
> * apache-ofbiz-18.12.13.zip.asc: the detached signature file
> * apache-ofbiz-18.12.13.zip.sha512: checksum file
>
> Please download and test the zip file and its signatures (for
> instructions on testing the signatures see
> http://www.apache.org/info/verification.html).
>
> Vote:
> [ +1] release as Apache OFBiz 18.12.13
> [ -1] do not release
>
> This vote is open for at least 5 days.
>
> For more details about this process please refer to
> http://www.apache.org/foundation/voting.html

Re: [VOTE] [RELEASE] Apache OFBiz 18.12.13

[Jacopo Cappellato]

+1

Jacopo

On Tue, Apr 30, 2024 at 5:06 PM Jacopo Cappellato
 wrote:
>
> This is the vote thread to publish "Apache OFBiz 18.12.13", the thirteenth
> release from the release18.12 branch.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
> and are:
> * apache-ofbiz-18.12.13.zip
> * KEYS: text file with keys
> * apache-ofbiz-18.12.13.zip.asc: the detached signature file
> * apache-ofbiz-18.12.13.zip.sha512: checksum file
>
> Please download and test the zip file and its signatures (for
> instructions on testing the signatures see
> http://www.apache.org/info/verification.html).
>
> Vote:
> [ +1] release as Apache OFBiz 18.12.13
> [ -1] do not release
>
> This vote is open for at least 5 days.
>
> For more details about this process please refer to
> http://www.apache.org/foundation/voting.html

[VOTE] [RELEASE] Apache OFBiz 18.12.13

[Jacopo Cappellato]

This is the vote thread to publish "Apache OFBiz 18.12.13", the thirteenth
release from the release18.12 branch.

The release files can be downloaded from here:
https://dist.apache.org/repos/dist/dev/ofbiz/
and are:
* apache-ofbiz-18.12.13.zip
* KEYS: text file with keys
* apache-ofbiz-18.12.13.zip.asc: the detached signature file
* apache-ofbiz-18.12.13.zip.sha512: checksum file

Please download and test the zip file and its signatures (for
instructions on testing the signatures see
http://www.apache.org/info/verification.html).

Vote:
[ +1] release as Apache OFBiz 18.12.13
[ -1] do not release

This vote is open for at least 5 days.

For more details about this process please refer to
http://www.apache.org/foundation/voting.html

[ANNOUNCE] Apache OFBiz 18.12.12 released

[Jacopo Cappellato]

The Apache OFBiz community is pleased to announce the new release "Apache
OFBiz 18.12.12".

Apache OFBiz® is an open source product for the automation of enterprise
processes that includes framework components and business applications.

http://ofbiz.apache.org/

"Apache OFBiz 18.12.12" is the twelfth release of the 18.12 series.

For details of the changes introduced with this new version
please refer to http://ofbiz.apache.org/release-notes-18.12.12.html

The history of security related fixes included in each release is
available here:
https://ofbiz.apache.org/security.html

The release files can be downloaded following the instructions in the OFBiz
download page:

http://ofbiz.apache.org/download.html

[VOTE] [RESULT] [RELEASE] Apache OFBiz 18.12.12 - third attempt

[Jacopo Cappellato]

The vote was successful with 4 positive votes (all binding) and no
negative votes.

Thank you,

Jacopo

On Tue, Feb 13, 2024 at 9:34 AM Jacopo Cappellato
 wrote:
>
> This is the vote thread, third attempt, to publish "Apache OFBiz
> 18.12.12", twelfth
> release from the release18.12 branch.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
> and are:
> * apache-ofbiz-18.12.12.zip
> * KEYS: text file with keys
> * apache-ofbiz-18.12.12.zip.asc: the detached signature file
> * apache-ofbiz-18.12.12.zip.sha512: checksum file
>
> Please download and test the zip file and its signatures (for
> instructions on testing the signatures see
> http://www.apache.org/info/verification.html).
>
> Vote:
> [ +1] release as Apache OFBiz 18.12.12
> [ -1] do not release
>
> This vote is open for at least 5 days.
>
> For more details about this process please refer to
> http://www.apache.org/foundation/voting.html

Re: [VOTE] [RELEASE] Apache OFBiz 18.12.12 - third attempt

[Jacopo Cappellato]

+1

Jacopo

On Tue, Feb 13, 2024 at 9:34 AM Jacopo Cappellato
 wrote:
>
> This is the vote thread, third attempt, to publish "Apache OFBiz
> 18.12.12", twelfth
> release from the release18.12 branch.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
> and are:
> * apache-ofbiz-18.12.12.zip
> * KEYS: text file with keys
> * apache-ofbiz-18.12.12.zip.asc: the detached signature file
> * apache-ofbiz-18.12.12.zip.sha512: checksum file
>
> Please download and test the zip file and its signatures (for
> instructions on testing the signatures see
> http://www.apache.org/info/verification.html).
>
> Vote:
> [ +1] release as Apache OFBiz 18.12.12
> [ -1] do not release
>
> This vote is open for at least 5 days.
>
> For more details about this process please refer to
> http://www.apache.org/foundation/voting.html

Re: [VOTE] [RELEASE] Apache OFBiz 18.12.12 - third attempt

[Jacopo Cappellato]

Did anyone else experience similar issues? I'd like to make sure the
signatures and digest work fine before publishing the release.

Thanks

Jacopo

On Wed, Feb 14, 2024 at 8:57 AM Jacques Le Roux
 wrote:
>
> Hi,
>
> And this is what get on Ubuntu 20.04, better for SHA512 (but not right it 
> seems), weird for GPG. All that was working before, notably with last
> versions of apache-ofbiz-18.12.12.
>
> jacques@jacques-VirtualBox:~/ofbiz-tools$ ./verify-ofbiz-release.sh -v 
> apache-ofbiz-18.12.12  2>&1 | tee verify.log
> Processing files for release: apache-ofbiz-18.12.12...
> Verifying files...
> sha check of file: apache-ofbiz-18.12.12.zip
> Using sha file: apache-ofbiz-18.12.12.zip.sha512
> apache-ofbiz-18.12.12.zip: 67AA5932 53FFF35F 3AA89DC9 73951B33 8396F95D 
> ECF26EBD 1DB58C66 50EE37E5 D053CD02 C9CB3FC4 B06D8CCC 747FAAA1 45B251CA
> 5F95A606 B1CC6C1A A8CBC42C
> apache-ofbiz-18.12.12.zip: 67AA5932 53FFF35F 3AA89DC9 73951B33 8396F95D 
> ECF26EBD 1DB58C66 50EE37E5 D053CD02 C9CB3FC4 B06D8CCC 747FAAA1 45B251CA
> 5F95A606 B1CC6C1A A8CBC42C
> sha sums mismatch!
>
> GPG verification output
> gpg: Signature made jeu. 08 févr. 2024 11:03:49 CET
> gpg:using RSA key 3545C5E31CC2D029B2CCAD067A580908847AF9E0
> gpg: Can't check signature: No public key
>
> Done processing files for release apache-ofbiz-18.12.12
>
> "sha sums mismatch!" sounds weird to me as the two lines compare
>
> Also I don't understand what's going on with GPG since I have both KEYS and 
> apache-ofbiz-18.12.12.zip.asc
>
> Do I miss something?
>
> Jacques
>
>
> Le 13/02/2024 à 14:09, Jacques Le Roux a écrit :
> > Since I'm on win7 using PowerShell:
> >
> >PS C:\projectsASF\Git\ofbiz-framework\tools> Get-Filehash 
> > apache-ofbiz-18.12.12.zip -a SHA512
> >Algorithm Hash Path
> >-  
> >SHA512 
> > D6CC35969BD53A4C34E267A9221AE76AF416E2A0D442A2195B16227F2A431B2CBDC... 
> > C:\projectsASF\Git\ofbiz-framework\tools\apache-ofbiz-18.12.12.zip
> >
> >PS C:\projectsASF\Git\ofbiz-framework\tools> Get-Filehash 
> > apache-ofbiz-18.12.12.zip.sha512 -a SHA512
> >Algorithm Hash Path
> >-  
> >SHA512 
> > EB5E9CEAF1250D1D78BE0ADC9F729BCDBB90646EBFC7434F47EAEE73BCF5008...
> > C:\projectsASF\Git\ofbiz-framework\tools\apache-ofbiz-18.12.12.zip.sha512
> >
> > Not sure why it's different from verify-ofbiz-release.sh result :/
> >
> > Le 13/02/2024 à 13:51, Jacques Le Roux a écrit :
> >> Hi Jacopo,
> >>
> >> It seems there is at least a hash issue:
> >>
> >> sha check of file: apache-ofbiz-18.12.12.zip
> >> Using sha file: apache-ofbiz-18.12.12.zip.sha512
> >> apache-ofbiz-18.12.12.zip: D6CC3596 9BD53A4C 34E267A9 221AE76A F416E2A0 
> >> D442A219 5B16227F 2A431B2C BDCB0E05 87C334C6 19DB5EE4 ED0D1F21 5EC90253
> >> 88AB6487 DC5B71E7 5BA97A17
> >> apache-ofbiz-18.12.12.zip: 67AA5932 53FFF35F 3AA89DC9 73951B33 8396F95D 
> >> ECF26EBD 1DB58C66 50EE37E5 D053CD02 C9CB3FC4 B06D8CCC 747FAAA1 45B251CA
> >> 5F95A606 B1CC6C1A A8CBC42C
> >> sha sums mismatch!
> >>
> >> Thanks
> >>
> >> Jacques
> >>
> >> Le 13/02/2024 à 09:34, Jacopo Cappellato a écrit :
> >>> This is the vote thread, third attempt, to publish "Apache OFBiz
> >>> 18.12.12", twelfth
> >>> release from the release18.12 branch.
> >>>
> >>> The release files can be downloaded from here:
> >>> https://dist.apache.org/repos/dist/dev/ofbiz/
> >>> and are:
> >>> * apache-ofbiz-18.12.12.zip
> >>> * KEYS: text file with keys
> >>> * apache-ofbiz-18.12.12.zip.asc: the detached signature file
> >>> * apache-ofbiz-18.12.12.zip.sha512: checksum file
> >>>
> >>> Please download and test the zip file and its signatures (for
> >>> instructions on testing the signatures see
> >>> http://www.apache.org/info/verification.html).
> >>>
> >>> Vote:
> >>> [ +1] release as Apache OFBiz 18.12.12
> >>> [ -1] do not release
> >>>
> >>> This vote is open for at least 5 days.
> >>>
> >>> For more details about this process please refer to
> >>> http://www.apache.org/foundation/voting.html

Re: [VOTE] [RELEASE] Apache OFBiz 18.12.12 - third attempt

[Jacopo Cappellato]

Hi Daniel,

I have created the two tags (one for the ofbiz-framework and one for
the ofbiz-plugins). Please have a look when you can and let me know if
you want me to modify them.
As a side note, if you want, I can also create the ones missing for
the previous releases.

Thanks,

Jacopo

PS: did anyone else experience the same issues that Jacques is
reporting about the hash and signature?

On Thu, Feb 15, 2024 at 8:09 PM Daniel Watford  wrote:
>
> +1
>
> Jacopo, please could you try tagging the commit you used for
> the release sources as 'release18.12.12'. That should then trigger the
> building of a non-snapshot docker container image.
>
> Building of docker container images is not an official release channel for
> OFBiz, so no need to publicise that any such images exist. But it would be
> good to test that images are getting built by GitHub actions in response to
> tagging releases in case we want to highlight the availability of docker
> images in future.
>
> If this vote fails, we should be able to 'move' the release tag for the
> next release attempt, prompting the build of the next non-snapshot docker
> image.
>
> Thanks,
>
> Dan.
>
> On Tue, 13 Feb 2024 at 08:35, Jacopo Cappellato 
> wrote:
>
> > This is the vote thread, third attempt, to publish "Apache OFBiz
> > 18.12.12", twelfth
> > release from the release18.12 branch.
> >
> > The release files can be downloaded from here:
> > https://dist.apache.org/repos/dist/dev/ofbiz/
> > and are:
> > * apache-ofbiz-18.12.12.zip
> > * KEYS: text file with keys
> > * apache-ofbiz-18.12.12.zip.asc: the detached signature file
> > * apache-ofbiz-18.12.12.zip.sha512: checksum file
> >
> > Please download and test the zip file and its signatures (for
> > instructions on testing the signatures see
> > http://www.apache.org/info/verification.html).
> >
> > Vote:
> > [ +1] release as Apache OFBiz 18.12.12
> > [ -1] do not release
> >
> > This vote is open for at least 5 days.
> >
> > For more details about this process please refer to
> > http://www.apache.org/foundation/voting.html
> >
>
>
> --
> Daniel Watford

[VOTE] [RELEASE] Apache OFBiz 18.12.12 - third attempt

[Jacopo Cappellato]

This is the vote thread, third attempt, to publish "Apache OFBiz
18.12.12", twelfth
release from the release18.12 branch.

The release files can be downloaded from here:
https://dist.apache.org/repos/dist/dev/ofbiz/
and are:
* apache-ofbiz-18.12.12.zip
* KEYS: text file with keys
* apache-ofbiz-18.12.12.zip.asc: the detached signature file
* apache-ofbiz-18.12.12.zip.sha512: checksum file

Please download and test the zip file and its signatures (for
instructions on testing the signatures see
http://www.apache.org/info/verification.html).

Vote:
[ +1] release as Apache OFBiz 18.12.12
[ -1] do not release

This vote is open for at least 5 days.

For more details about this process please refer to
http://www.apache.org/foundation/voting.html

Re: [VOTE] [RELEASE] Apache OFBiz 18.12.12 - second attempt

[Jacopo Cappellato]

I'd like to cancel this vote in order to prepare a new tentative
release that includes the latest commits by Jacques.
Thank you all for your votes and I apologize for the inconvenience:
please stay tuned as the new vote will start soon!

Jacopo

On Thu, Feb 8, 2024 at 2:29 PM Jacopo Cappellato
 wrote:
>
> This is the vote thread, second attempt, to publish "Apache OFBiz
> 18.12.12", twelfth
> release from the release18.12 branch.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
> and are:
> * apache-ofbiz-18.12.12.zip
> * KEYS: text file with keys
> * apache-ofbiz-18.12.12.zip.asc: the detached signature file
> * apache-ofbiz-18.12.12.zip.sha512: checksum file
>
> Please download and test the zip file and its signatures (for
> instructions on testing the signatures see
> http://www.apache.org/info/verification.html).
>
> Vote:
> [ +1] release as Apache OFBiz 18.12.12
> [ -1] do not release
>
> This vote is open for at least 5 days.
>
> For more details about this process please refer to
> http://www.apache.org/foundation/voting.html

[VOTE] [RELEASE] Apache OFBiz 18.12.12 - second attempt

[Jacopo Cappellato]

This is the vote thread, second attempt, to publish "Apache OFBiz
18.12.12", twelfth
release from the release18.12 branch.

The release files can be downloaded from here:
https://dist.apache.org/repos/dist/dev/ofbiz/
and are:
* apache-ofbiz-18.12.12.zip
* KEYS: text file with keys
* apache-ofbiz-18.12.12.zip.asc: the detached signature file
* apache-ofbiz-18.12.12.zip.sha512: checksum file

Please download and test the zip file and its signatures (for
instructions on testing the signatures see
http://www.apache.org/info/verification.html).

Vote:
[ +1] release as Apache OFBiz 18.12.12
[ -1] do not release

This vote is open for at least 5 days.

For more details about this process please refer to
http://www.apache.org/foundation/voting.html

Re: [VOTE] Release Apache OFBiz 18.12.12

[Jacopo Cappellato]

Hi all,

I'd like to cancel this vote in order to allow some more time to
include some more bug fixes to the new release.
Thank you for your tests and please stay tuned for the new release vote!

Jacopo

On Sat, Jan 13, 2024 at 8:17 PM Jacopo Cappellato
 wrote:
>
> This is the vote thread to publish "Apache OFBiz 18.12.12", twelfth
> release from the release18.12 branch.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
> and are:
> * apache-ofbiz-18.12.12.zip
> * KEYS: text file with keys
> * apache-ofbiz-18.12.12.zip.asc: the detached signature file
> * apache-ofbiz-18.12.12.zip.sha512: checksum file
>
> Please download and test the zip file and its signatures (for
> instructions on testing the signatures see
> http://www.apache.org/info/verification.html).
>
> Vote:
> [ +1] release as Apache OFBiz 18.12.12
> [ -1] do not release
>
> This vote is open for at least 5 days.
>
> For more details about this process please refer to
> http://www.apache.org/foundation/voting.html

[VOTE] Release Apache OFBiz 18.12.12

[Jacopo Cappellato]

This is the vote thread to publish "Apache OFBiz 18.12.12", twelfth
release from the release18.12 branch.

The release files can be downloaded from here:
https://dist.apache.org/repos/dist/dev/ofbiz/
and are:
* apache-ofbiz-18.12.12.zip
* KEYS: text file with keys
* apache-ofbiz-18.12.12.zip.asc: the detached signature file
* apache-ofbiz-18.12.12.zip.sha512: checksum file

Please download and test the zip file and its signatures (for
instructions on testing the signatures see
http://www.apache.org/info/verification.html).

Vote:
[ +1] release as Apache OFBiz 18.12.12
[ -1] do not release

This vote is open for at least 5 days.

For more details about this process please refer to
http://www.apache.org/foundation/voting.html

[ANNOUNCE] Apache OFBiz 18.12.11 released

[Jacopo Cappellato]

The Apache OFBiz community is pleased to announce the new release "Apache
OFBiz 18.12.11".

Apache OFBiz® is an open source product for the automation of enterprise
processes that includes framework components and business applications.

http://ofbiz.apache.org/

"Apache OFBiz 18.12.11" is the eleventh release of the 18.12 series.

For details of the changes introduced with this new version
please refer to http://ofbiz.apache.org/release-notes-18.12.11.html

The history of security related fixes included in each release is
available here:
https://ofbiz.apache.org/security.html

The release files can be downloaded following the instructions in the OFBiz
download page:

http://ofbiz.apache.org/download.html

[VOTE] [RESULT] Release Apache OFBiz 18.12.11

[Jacopo Cappellato]

The vote was successful with 8 positive votes (of which 7 are binding)
and no negative votes.

Thank you,

Jacopo

On Sat, Dec 16, 2023 at 11:02 AM Jacopo Cappellato
 wrote:
>
> This is the vote thread to publish "Apache OFBiz 18.12.11", eleventh
> release from the release18.12 branch.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
> and are:
> * apache-ofbiz-18.12.11.zip
> * KEYS: text file with keys
> * apache-ofbiz-18.12.11.zip.asc: the detached signature file
> * apache-ofbiz-18.12.11.zip.sha512: checksum file
>
> Please download and test the zip file and its signatures (for
> instructions on testing the signatures see
> http://www.apache.org/info/verification.html).
>
> Vote:
> [ +1] release as Apache OFBiz 18.12.11
> [ -1] do not release
>
> This vote is open for at least 5 days.
>
> For more details about this process please refer to
> http://www.apache.org/foundation/voting.html

Re: [VOTE] Release Apache OFBiz 18.12.11

[Jacopo Cappellato]

+1

Jacopo

On Sat, Dec 16, 2023 at 11:02 AM Jacopo Cappellato
 wrote:
>
> This is the vote thread to publish "Apache OFBiz 18.12.11", eleventh
> release from the release18.12 branch.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
> and are:
> * apache-ofbiz-18.12.11.zip
> * KEYS: text file with keys
> * apache-ofbiz-18.12.11.zip.asc: the detached signature file
> * apache-ofbiz-18.12.11.zip.sha512: checksum file
>
> Please download and test the zip file and its signatures (for
> instructions on testing the signatures see
> http://www.apache.org/info/verification.html).
>
> Vote:
> [ +1] release as Apache OFBiz 18.12.11
> [ -1] do not release
>
> This vote is open for at least 5 days.
>
> For more details about this process please refer to
> http://www.apache.org/foundation/voting.html

[VOTE] Release Apache OFBiz 18.12.11

[Jacopo Cappellato]

This is the vote thread to publish "Apache OFBiz 18.12.11", eleventh
release from the release18.12 branch.

The release files can be downloaded from here:
https://dist.apache.org/repos/dist/dev/ofbiz/
and are:
* apache-ofbiz-18.12.11.zip
* KEYS: text file with keys
* apache-ofbiz-18.12.11.zip.asc: the detached signature file
* apache-ofbiz-18.12.11.zip.sha512: checksum file

Please download and test the zip file and its signatures (for
instructions on testing the signatures see
http://www.apache.org/info/verification.html).

Vote:
[ +1] release as Apache OFBiz 18.12.11
[ -1] do not release

This vote is open for at least 5 days.

For more details about this process please refer to
http://www.apache.org/foundation/voting.html

[ANNOUNCE] Apache OFBiz 18.12.10 released

[Jacopo Cappellato]

The Apache OFBiz community is pleased to announce the new release "Apache
OFBiz 18.12.10".

Apache OFBiz® is an open source product for the automation of enterprise
processes that includes framework components and business applications.

http://ofbiz.apache.org/

"Apache OFBiz 18.12.10" is the tenth release of the 18.12 series.

For details of the changes introduced with this new version
please refer to http://ofbiz.apache.org/release-notes-18.12.10.html

The history of security related fixes included in each release is
available here:
https://ofbiz.apache.org/security.html

The release files can be downloaded following the instructions in the OFBiz
download page:

http://ofbiz.apache.org/download.html

[VOTE] [RESULT] Apache OFBiz 18.12.10

[Jacopo Cappellato]

The vote was successful with 8 positive votes (of which 6 are binding)
and no negative votes.

Thank you,

Jacopo

Re: [VOTE] Apache OFBiz 18.12.10

[Jacopo Cappellato]

+1

Jacopo

On Mon, Nov 27, 2023 at 11:48 AM Jacopo Cappellato
 wrote:
>
> This is the vote thread to publish "Apache OFBiz 18.12.10", tenth
> release from the release18.12 branch.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
> and are:
> * apache-ofbiz-18.12.10.zip
> * KEYS: text file with keys
> * apache-ofbiz-18.12.10.zip.asc: the detached signature file
> * apache-ofbiz-18.12.10.zip.sha512: checksum file
>
> Please download and test the zip file and its signatures (for
> instructions on testing the signatures see
> http://www.apache.org/info/verification.html).
>
> Vote:
> [ +1] release as Apache OFBiz 18.12.10
> [ -1] do not release
>
> This vote is open for at least 5 days.
>
> For more details about this process please refer to
> http://www.apache.org/foundation/voting.html

[VOTE] Apache OFBiz 18.12.10

[Jacopo Cappellato]

This is the vote thread to publish "Apache OFBiz 18.12.10", tenth
release from the release18.12 branch.

The release files can be downloaded from here:
https://dist.apache.org/repos/dist/dev/ofbiz/
and are:
* apache-ofbiz-18.12.10.zip
* KEYS: text file with keys
* apache-ofbiz-18.12.10.zip.asc: the detached signature file
* apache-ofbiz-18.12.10.zip.sha512: checksum file

Please download and test the zip file and its signatures (for
instructions on testing the signatures see
http://www.apache.org/info/verification.html).

Vote:
[ +1] release as Apache OFBiz 18.12.10
[ -1] do not release

This vote is open for at least 5 days.

For more details about this process please refer to
http://www.apache.org/foundation/voting.html

[ANNOUNCE] Apache OFBiz 18.12.09 released

[Jacopo Cappellato]

The Apache OFBiz community is pleased to announce the new release "Apache
OFBiz 18.12.09".

Apache OFBiz® is an open source product for the automation of enterprise
processes that includes framework components and business applications.

http://ofbiz.apache.org/

"Apache OFBiz 18.12.09" is the ninth release of the 18.12 series.

For details of the changes introduced with this new version
please refer to http://ofbiz.apache.org/release-notes-18.12.09.html

The history of security related fixes included in each release is
available here:
https://ofbiz.apache.org/security.html

The release files can be downloaded following the instructions in the OFBiz
download page:

http://ofbiz.apache.org/download.html

[VOTE] [RESULT] Apache OFBiz 18.12.09

[Jacopo Cappellato]

The vote was successful with 4 positive votes (of which 3 are binding)
and no negative votes (after Michael withdrew his vote).

Thank you,

Jacopo

On Sun, Oct 29, 2023 at 1:16 PM Jacopo Cappellato
 wrote:
>
> This is the vote thread to publish "Apache OFBiz 18.12.09", ninth
> release from the release18.12 branch.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
> and are:
> * apache-ofbiz-18.12.09.zip
> * KEYS: text file with keys
> * apache-ofbiz-18.12.09.zip.asc: the detached signature file
> * apache-ofbiz-18.12.09.zip.sha512: checksum file
>
> Please download and test the zip file and its signatures (for
> instructions on testing the signatures see
> http://www.apache.org/info/verification.html).
>
> Vote:
> [ +1] release as Apache OFBiz 18.12.09
> [ -1] do not release
>
> This vote is open for at least 5 days.
>
> For more details about this process please refer to
> http://www.apache.org/foundation/voting.html

Re: [VOTE] Apache OFBiz 18.12.09

[Jacopo Cappellato]

+1

Jacopo

On Sun, Oct 29, 2023 at 1:16 PM Jacopo Cappellato
 wrote:
>
> This is the vote thread to publish "Apache OFBiz 18.12.09", ninth
> release from the release18.12 branch.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
> and are:
> * apache-ofbiz-18.12.09.zip
> * KEYS: text file with keys
> * apache-ofbiz-18.12.09.zip.asc: the detached signature file
> * apache-ofbiz-18.12.09.zip.sha512: checksum file
>
> Please download and test the zip file and its signatures (for
> instructions on testing the signatures see
> http://www.apache.org/info/verification.html).
>
> Vote:
> [ +1] release as Apache OFBiz 18.12.09
> [ -1] do not release
>
> This vote is open for at least 5 days.
>
> For more details about this process please refer to
> http://www.apache.org/foundation/voting.html

Re: [VOTE] Apache OFBiz 18.12.09

[Jacopo Cappellato]

Hello Michael,

Yes, the plugins are included in all the releases of 18.12; for newer
release branches we can definitely revisit this decision (in fact I
think it would be nice to have framework only distributions).
As regards the build issues you have experimented, could you please
double check if they are consistent? If it is the case then we should
address them, otherwise I'd like to proceed with this release.

Thank you,

Jacopo

On Mon, Oct 30, 2023 at 2:42 PM Michael Brohl  wrote:
>
> -1
>
> The build fails with some exceptions for converters, solr-server and
> others (see attached log).
>
> I'm not completely sure but I do not expect the plugins to be shipped in
> the framework distribution?
>
> Best regards,
>
> Michael Brohl
>
> ecomify GmbH - www.ecomify.de
>
>
> Am 29.10.23 um 13:16 schrieb Jacopo Cappellato:
> > This is the vote thread to publish "Apache OFBiz 18.12.09", ninth
> > release from the release18.12 branch.
> >
> > The release files can be downloaded from here:
> > https://dist.apache.org/repos/dist/dev/ofbiz/
> > and are:
> > * apache-ofbiz-18.12.09.zip
> > * KEYS: text file with keys
> > * apache-ofbiz-18.12.09.zip.asc: the detached signature file
> > * apache-ofbiz-18.12.09.zip.sha512: checksum file
> >
> > Please download and test the zip file and its signatures (for
> > instructions on testing the signatures see
> > http://www.apache.org/info/verification.html).
> >
> > Vote:
> > [ +1] release as Apache OFBiz 18.12.09
> > [ -1] do not release
> >
> > This vote is open for at least 5 days.
> >
> > For more details about this process please refer to
> > http://www.apache.org/foundation/voting.html

[VOTE] Apache OFBiz 18.12.09

[Jacopo Cappellato]

This is the vote thread to publish "Apache OFBiz 18.12.09", ninth
release from the release18.12 branch.

The release files can be downloaded from here:
https://dist.apache.org/repos/dist/dev/ofbiz/
and are:
* apache-ofbiz-18.12.09.zip
* KEYS: text file with keys
* apache-ofbiz-18.12.09.zip.asc: the detached signature file
* apache-ofbiz-18.12.09.zip.sha512: checksum file

Please download and test the zip file and its signatures (for
instructions on testing the signatures see
http://www.apache.org/info/verification.html).

Vote:
[ +1] release as Apache OFBiz 18.12.09
[ -1] do not release

This vote is open for at least 5 days.

For more details about this process please refer to
http://www.apache.org/foundation/voting.html

[ANNOUNCE] Apache OFBiz 18.12.08 released

[Jacopo Cappellato]

The Apache OFBiz community is pleased to announce the new release "Apache
OFBiz 18.12.08".

Apache OFBiz® is an open source product for the automation of enterprise
processes that includes framework components and business applications.

http://ofbiz.apache.org/

"Apache OFBiz 18.12.08" is the eighth and final release of the 18.12 series.

For details of the changes introduced with this new version
please refer to http://ofbiz.apache.org/release-notes-18.12.08.html

The history of security related fixes included in each release is
available here:
https://ofbiz.apache.org/security.html

The release files can be downloaded following the instructions in the OFBiz
download page:

http://ofbiz.apache.org/download.html

[VOTE] [RESULT] Apache OFBiz 18.12.08

[Jacopo Cappellato]

The vote is successful with 7 positive votes, of which 6 binding
votes, and no negative votes. Thank you!

Jacopo


On Fri, May 26, 2023 at 11:33 AM Jacopo Cappellato
 wrote:
>
> This is the vote thread to publish "Apache OFBiz 18.12.08", eighth
> release from the release18.12 branch.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
> and are:
> * apache-ofbiz-18.12.08.zip
> * KEYS: text file with keys
> * apache-ofbiz-18.12.08.zip.asc: the detached signature file
> * apache-ofbiz-18.12.08.zip.sha512: checksum file
>
> Please download and test the zip file and its signatures (for
> instructions on testing the signatures see
> http://www.apache.org/info/verification.html).
>
> Vote:
> [ +1] release as Apache OFBiz 18.12.08
> [ -1] do not release
>
> This vote is open for at least 5 days.
>
> For more details about this process please refer to
> http://www.apache.org/foundation/voting.html

Re: [VOTE] Apache OFBiz 18.12.08

[Jacopo Cappellato]

+1

Jacopo

On Fri, May 26, 2023 at 11:33 AM Jacopo Cappellato
 wrote:
>
> This is the vote thread to publish "Apache OFBiz 18.12.08", eighth
> release from the release18.12 branch.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
> and are:
> * apache-ofbiz-18.12.08.zip
> * KEYS: text file with keys
> * apache-ofbiz-18.12.08.zip.asc: the detached signature file
> * apache-ofbiz-18.12.08.zip.sha512: checksum file
>
> Please download and test the zip file and its signatures (for
> instructions on testing the signatures see
> http://www.apache.org/info/verification.html).
>
> Vote:
> [ +1] release as Apache OFBiz 18.12.08
> [ -1] do not release
>
> This vote is open for at least 5 days.
>
> For more details about this process please refer to
> http://www.apache.org/foundation/voting.html

[VOTE] Apache OFBiz 18.12.08

[Jacopo Cappellato]

This is the vote thread to publish "Apache OFBiz 18.12.08", eighth
release from the release18.12 branch.

The release files can be downloaded from here:
https://dist.apache.org/repos/dist/dev/ofbiz/
and are:
* apache-ofbiz-18.12.08.zip
* KEYS: text file with keys
* apache-ofbiz-18.12.08.zip.asc: the detached signature file
* apache-ofbiz-18.12.08.zip.sha512: checksum file

Please download and test the zip file and its signatures (for
instructions on testing the signatures see
http://www.apache.org/info/verification.html).

Vote:
[ +1] release as Apache OFBiz 18.12.08
[ -1] do not release

This vote is open for at least 5 days.

For more details about this process please refer to
http://www.apache.org/foundation/voting.html

Re: OFBiz 22.01 - Eclipse - Issues on setting up a debugging environment.

[Jacopo Cappellato]

On Tue, May 2, 2023 at 9:17 AM Daniel Watford  wrote:
[...]
> I'll ask one more question (and then run for cover!): Rather than carry out
> this work twice.  What if we abandon the 22.01 release and instead make a
> new release branch (23.xx) soon after moving the Groovy sources?
>

Yes, we could do this. Abandon 22.01, perform the refactoring, create
a new release branch, stabilize (we could consider a shorter
stabilization period).
We could also extend our support (mostly for security vulnerability
fixes) to 18.12, at least until 1 or 2 releases have been published
out of the new branch.

Jacopo

Re: [jira] [Commented] (OFBIZ-12808) Eclipse build problems and proper dependency setup

[Jacopo Cappellato]

+1

Jacopo

On Wed, Apr 26, 2023 at 3:11 PM Michael Brohl  wrote:
>
> Hi everyone,
>
> any objections against merging those pr's for framework/plugins in
> trunk/release22.01?
>
> I think it would be good to test the changes on the demo servers as well
> to detect possible runtime problems caused by the changed dependencies.
>
> If there are no objections, I would like to merge the changes tomorrow.
>
> Thanks,
>
> Michael Brohl
>
> ecomify GmbH - www.ecomify.de
>
>
> Am 21.04.23 um 14:54 schrieb Michael Brohl (Jira):
> >  [ 
> > https://issues.apache.org/jira/browse/OFBIZ-12808?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17714986#comment-17714986
> >  ]
> >
> > Michael Brohl commented on OFBIZ-12808:
> > ---
> >
> > Fixes for framework / plugins for trunk and release22.01 are now in the 
> > pull requests.
> >
> > To test, the corresponding pr's for framework and plugins have to be 
> > checked out respectively.
> >
> >> Eclipse build problems and proper dependency setup
> >> --
> >>
> >>  Key: OFBIZ-12808
> >>  URL: https://issues.apache.org/jira/browse/OFBIZ-12808
> >>  Project: OFBiz
> >>   Issue Type: Bug
> >>   Components: ALL APPLICATIONS, ALL COMPONENTS, ALL PLUGINS
> >> Affects Versions: 22.01.01, Upcoming Branch
> >> Reporter: Michael Brohl
> >> Assignee: Michael Brohl
> >> Priority: Major
> >>  Fix For: 22.01.01, Upcoming Branch
> >>
> >>
> >> Due to improper dependency configurations and the JPMS (Java Plattform 
> >> Module System) which was introduced to Java since version 9, the Eclipse 
> >> build and running/debugging is not working with JDK 17 (trunk and 
> >> release22.01).
> >> The reason is that there are dependencies to libraries which are also 
> >> shipped with the JDK which causes a conflict leading to ignore those 
> >> packages/classes in the build.
> >> We have a working solution for this.
> >
> >
> > --
> > This message was sent by Atlassian Jira
> > (v8.20.10#820010)

Re: Need help finding where JCrop is used

[Jacopo Cappellato]

Hello,

For cases like this one, i.e. an external dependency from old code
that is only partially functional for a long time, I think it is
acceptable to remove it (if its presence is making it more difficult
to do some new work or refactoring).

Jacopo

On Mon, Apr 17, 2023 at 7:25 PM Jacques Le Roux
 wrote:
>
> Hi Daniel,
>
> It's used in ImageCrop.ftl. Itself used in  
> inside ImageManagementScreens.xml
> There is a  and a  inside ImageManagementForms.xml related to  uri="CropImage">, etc.
>
> I guess it's used to resize images but it does not seems to work well (at 
> least a jpg file was blurred)
>
> This was initially put in in 2010 : https://s.apache.org/ak8s6 (can be seen 
> in https://markmail.org/message/udi25j4wyqyrowcu)
> Not sure of the current quality
>
> HTH
>
> Jacques
>
> Le 17/04/2023 à 13:43, Daniel Watford a écrit :
> > Hello,
> >
> > As part of https://issues.apache.org/jira/browse/OFBIZ-12789 I wanted to
> > understand how the javascript library jcrop was being used by OFBiz. This
> > is so I can ensure any replacement library sourced from npm would continue
> > to work correctly.
> >
> > I have found the various screen and form definitions
> > (ImageManagementScreens and ImageManagementForms) in
> > applications/product/widget/catalog, but cannot find any path through the
> > UI that would take a user to these screens.
> >
> > I have found the Image Management sub-application under
> > https://localhost:8443/catalog/control/Imagemanagement, but this screen
> > does not appear to make use of image cropping or resizing.
> >
> > Please could someone guide me to the correct part of the UI where
> > jquery.jcrop.js is used? Or perhaps this functionality was removed at some
> > point and we just have some old library files let in the OFBiz sources that
> > can be cleaned up?
> >
> > Thanks,
> >
> > Dan.
> >

[ANNOUNCE] Apache OFBiz 18.12.07 released

[Jacopo Cappellato]

The Apache OFBiz community is pleased to announce the new release "Apache
OFBiz 18.12.07".

Apache OFBiz® is an open source product for the automation of enterprise
processes that includes framework components and business applications.

http://ofbiz.apache.org/

"Apache OFBiz 18.12.07" is the seventh and final release of the 18.12
series.

For details of the changes introduced with this new version
please refer to http://ofbiz.apache.org/release-notes-18.12.07.html

The history of security related fixes included in each release is
available here:
https://ofbiz.apache.org/security.html

The release files can be downloaded following the instructions in the OFBiz
download page:

http://ofbiz.apache.org/download.html

[VOTE] [RESULT] Apache OFBiz 18.12.07

[Jacopo Cappellato]

The vote is successful with 8 positive votes, of which 7 binding votes, and
no negative votes. Thank you!

Jacopo

On Mon, Apr 3, 2023 at 9:47 AM Jacopo Cappellato <
jacopo.cappell...@gmail.com> wrote:

> This is the vote thread to publish "Apache OFBiz 18.12.07", seventh
> and probably final release from the release18.12 branch.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
> and are:
> * apache-ofbiz-18.12.07.zip
> * KEYS: text file with keys
> * apache-ofbiz-18.12.07.zip.asc: the detached signature file
> * apache-ofbiz-18.12.07.zip.sha512: checksum file
>
> Please download and test the zip file and its signatures (for
> instructions on testing the signatures see
> http://www.apache.org/info/verification.html).
>
> Vote:
> [ +1] release as Apache OFBiz 18.12.07
> [ -1] do not release
>
> This vote is open for at least 5 days.
>
> For more details about this process please refer to
> http://www.apache.org/foundation/voting.html
>

Re: [VOTE] Apache OFBiz 18.12.07

[Jacopo Cappellato]

+1

Jacopo

On Mon, Apr 3, 2023 at 9:47 AM Jacopo Cappellato <
jacopo.cappell...@gmail.com> wrote:

> This is the vote thread to publish "Apache OFBiz 18.12.07", seventh
> and probably final release from the release18.12 branch.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
> and are:
> * apache-ofbiz-18.12.07.zip
> * KEYS: text file with keys
> * apache-ofbiz-18.12.07.zip.asc: the detached signature file
> * apache-ofbiz-18.12.07.zip.sha512: checksum file
>
> Please download and test the zip file and its signatures (for
> instructions on testing the signatures see
> http://www.apache.org/info/verification.html).
>
> Vote:
> [ +1] release as Apache OFBiz 18.12.07
> [ -1] do not release
>
> This vote is open for at least 5 days.
>
> For more details about this process please refer to
> http://www.apache.org/foundation/voting.html
>

[VOTE] Apache OFBiz 18.12.07

[Jacopo Cappellato]

This is the vote thread to publish "Apache OFBiz 18.12.07", seventh
and probably final release from the release18.12 branch.

The release files can be downloaded from here:
https://dist.apache.org/repos/dist/dev/ofbiz/
and are:
* apache-ofbiz-18.12.07.zip
* KEYS: text file with keys
* apache-ofbiz-18.12.07.zip.asc: the detached signature file
* apache-ofbiz-18.12.07.zip.sha512: checksum file

Please download and test the zip file and its signatures (for
instructions on testing the signatures see
http://www.apache.org/info/verification.html).

Vote:
[ +1] release as Apache OFBiz 18.12.07
[ -1] do not release

This vote is open for at least 5 days.

For more details about this process please refer to
http://www.apache.org/foundation/voting.html

Re: Should balance sheet fixes be added to 22.01 release branch?

[Jacopo Cappellato]

Hello Dan,

On Tue, Feb 7, 2023 at 11:36 PM Daniel Watford  wrote:
>
> [...]
> - If we decide to fix the bugs in release 22.01, is it acceptable to bring
> in the refactored code to do so? In my opinion the refactoring has made it
> easier to reason about the correctness of the resultant balance sheet so I
> think bringing the refactoring into 22.01 will result in quicker bug fixes.

Yes, I think it is totally acceptable, considering that the risk of
regressions in this particular case is rather small.

>
> Side question:
> If the bug reports are valid, why haven't we heard about them already from
> the users? I didn't find anything similar in Jira. Could it be the case
> that the Accounting Balance Sheet Report is not really used? If so, how are
> users preparing their financial statements? Perhaps users export accounting
> entries to another accounting tool?

It is possible that most users export transactions to external tools;
others may instead use the script, that is quite basic, as a template
for a customized version (in which the issues are resolved).

Regards,

Jacopo

Welcome to Daniel Watford as new PMC member

[Jacopo Cappellato]

The OFBiz PMC has invited Daniel Watford as a new PMC member and we
are glad to announce that Daniel has accepted the nomination.

On behalf of the OFBiz PMC, welcome on board!

Re: Welcome to Leila Mekika as new committer

[Jacopo Cappellato]

Welcome Leila!

Jacopo

Il Lun 3 Ott 2022, 14:57 Nicolas Malin  ha
scritto:

> The OFBiz PMC has invited Leila Mekika as new
> committer and we are glad to announce that she have accepted the
> nomination.
>
> On behalf of the OFBiz PMC, welcome on board!
>
>
>

[ANNOUNCE] Apache OFBiz 18.12.06 released

[Jacopo Cappellato]

The Apache OFBiz community is pleased to announce the new release "Apache
OFBiz 18.12.06".

Apache OFBiz® is an open source product for the automation of enterprise
processes that includes framework components and business applications.

http://ofbiz.apache.org/

"Apache OFBiz 18.12.06" is the sixth and final release of the 18.12 series.

For details of the changes introduced with this new version
please refer to http://ofbiz.apache.org/release-notes-18.12.06.html

The history of security related fixes included in each release is
available here:
https://ofbiz.apache.org/security.html

The release files can be downloaded following the instructions in the OFBiz
download page:

http://ofbiz.apache.org/download.html

[VOTE] [RESULT]Apache OFBiz 18.12.06

[Jacopo Cappellato]

The vote to release Apache OFBiz 18.12.06 is successful with 8 positive
votes (of which 6 are binding) and no negative ones.
Thank you all for voting.
I am going to proceed with the steps to publish the release.

Jacopo


On Thu, Aug 25, 2022 at 10:10 AM Jacopo Cappellato <
jacopo.cappell...@gmail.com> wrote:

> This is the vote thread to publish "Apache OFBiz 18.12.06", the sixth and
> final release from the release18.12 branch.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
> and are:
> * apache-ofbiz-18.12.06.zip
> * KEYS: text file with keys
> * apache-ofbiz-18.12.06.zip.asc: the detached signature file
> * apache-ofbiz-18.12.06.zip.sha512: checksum file
>
> Please download and test the zip file and its signatures (for instructions
> on testing the signatures see http://www.apache.org/info/verification.html
> ).
>
> Vote:
> [ +1] release as Apache OFBiz 18.12.06
> [ -1] do not release
>
> This vote is open for 5 days.
>
> For more details about this process please refer to
> http://www.apache.org/foundation/voting.html
>
>

Re: [VOTE] Apache OFBiz 18.12.06

[Jacopo Cappellato]

+1

Jacopo

On Thu, Aug 25, 2022 at 10:10 AM Jacopo Cappellato <
jacopo.cappell...@gmail.com> wrote:

> This is the vote thread to publish "Apache OFBiz 18.12.06", the sixth and
> final release from the release18.12 branch.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
> and are:
> * apache-ofbiz-18.12.06.zip
> * KEYS: text file with keys
> * apache-ofbiz-18.12.06.zip.asc: the detached signature file
> * apache-ofbiz-18.12.06.zip.sha512: checksum file
>
> Please download and test the zip file and its signatures (for instructions
> on testing the signatures see http://www.apache.org/info/verification.html
> ).
>
> Vote:
> [ +1] release as Apache OFBiz 18.12.06
> [ -1] do not release
>
> This vote is open for 5 days.
>
> For more details about this process please refer to
> http://www.apache.org/foundation/voting.html
>
>

[VOTE] Apache OFBiz 18.12.06

[Jacopo Cappellato]

This is the vote thread to publish "Apache OFBiz 18.12.06", the sixth and
final release from the release18.12 branch.

The release files can be downloaded from here:
https://dist.apache.org/repos/dist/dev/ofbiz/
and are:
* apache-ofbiz-18.12.06.zip
* KEYS: text file with keys
* apache-ofbiz-18.12.06.zip.asc: the detached signature file
* apache-ofbiz-18.12.06.zip.sha512: checksum file

Please download and test the zip file and its signatures (for instructions
on testing the signatures see http://www.apache.org/info/verification.html).

Vote:
[ +1] release as Apache OFBiz 18.12.06
[ -1] do not release

This vote is open for 5 days.

For more details about this process please refer to
http://www.apache.org/foundation/voting.html

Re: Codenarc integration, rules to use.

[Jacopo Cappellato]

+1

Thank you Gil!

Jacopo


On Mon, Jul 4, 2022 at 5:24 PM Gil Portenseigne 
wrote:

> Hello Devs,
>
> I would like to continue Codenarc integration in OFBiz (OFBIZ-11167).
>
> For those who are not aware, Codenarc is an analysis tools for Groovy
> for defects, bad practices, inconsistencies, style issues and more.
>
> For this purpose we need to agree about the ruleset to put in place.
>
> I took as a basis the ruleset :
> https://codenarc.org/StarterRuleSet-AllRulesByCategory.groovy.txt
>
> And started to fix some in
> https://github.com/apache/ofbiz-framework/pull/517
>
> Before doing the complete work, a first rule made me wonder if that is a
> choice that we will be doing as a community :
>
> IfStatementBraces - Use braces for if statements, even for a single
> statement.
>
> There are 234 occurrences in the project, and I guess that some opinions
> might diverge on this subject.
>
> Moreover, some rules needs lots of fixes in the project (those with more
> than 200 occurrences) :
>
>
> ++-+
> | Number of  | Rule name and details
>  |
> | occurrence |
>  |
>
> ++=+
> | 9883   | UnnecessaryGString  - String objects should be created with
> single  |
> ||  quotes, and GString  objects created with double quotes.
> Creating  |
> ||  normal String objects with  double quotes is confusing to
> readers. |
>
> ++-+
> | 4569   | DuplicateStringLiteral  - Code containing duplicate String
> literals |
> ||  can usually be improved by  declaring the String as a
> constant |
> || field. The ignoreStrings property ()  can optionally
> specify a  |
> || comma-separated list of Strings to ignore.
> |
>
> ++-+
> | 4209   | SpaceAroundMapEntryColon  - Check for configured formatting
> of  |
> || whitespace around colons for  literal Map entries.
> |
> || The characterBeforeColonRegex and
> characterAfterColonRegex |
> || properties specify a regular expression that  must match
> the|
> || character before/after the colon.
>  |
>
> ++-+
> | 1448   | LineLength  - Checks the maximum length for each line of
> |
> || source code. It checks for  number of characters, so lines
> |
> ||  that include tabs may appear longer than  the allowed
> number   |
> ||  when viewing the file. The maximum line length can  be
>  |
> || configured by setting the length property, which defaults
> to 120.   |
>
> ++-+
> | 885| UnnecessaryGetter  - Checks for explicit calls to
> getter/accessor   |
> ||  methods which can, for  the most part, be replaced by
> property |
> ||  access. A getter is defined as a  method call that
> matches |
> || get[A-Z] but not getClass() or get[A-Z][A-Z]  such as
> getURL(). |
> ||  Getters do not take method arguments. The
> ignoreMethodNames   |
> || property (null) can specify method names that should  be
> ignored|
> || , optionally containing wildcard characters ('*' or '?').
>  |
>
> ++-+
> | 601| NoDef - def should not be used. You should replace it with
> |
> || concrete type.
> |
>
> ++-+
> | 485| MethodReturnTypeRequired  - Checks that method return
> types |
> ||  are not dynamic, that is they are  explicitly stated and
>  |
> ||  different than def.
> |
>
> ++-+
> | 484| Indentation - Check indentation for class and method
> |
> || declarations, and initial statements.
>  |
>
> ++-+
> | 482| UnnecessaryReturnKeyword  - In Groovy, the return keyword
>  |
> ||  is often optional. If a statement is  the last line in a
>  |
> || method or closure then you do not need to have the return
> keyword.  |
>
> ++-+
> | 407| UnnecessaryObjectReferences  - Violations are triggered
> when  

Welcome to Nicola Mazzoni and Giulio Speri as new committers

[Jacopo Cappellato]

The OFBiz PMC has invited Nicola Mazzoni and Giulio Speri as new
committers and we are glad to announce that they have accepted the
nomination.

On behalf of the OFBiz PMC, welcome on board!

Re: [jira] [Commented] (OFBIZ-12489) Product Prices - VIEW permissions

[Jacopo Cappellato]

I want to personally thank Michael Brohl for the thorough and valuable
reviews.
I also greatly respect Michael for his wisdom and patience to ignore such
troublesome posts.

Thank you,

Jacopo


On Tue, Feb 8, 2022 at 9:40 AM Pierre Smits  wrote:

> My thanks goes out to those members of the OFBiz PMC who recognised (and
> agreed with me) that volunteers feeling attacked ("trolled") by feedback of
> PMC and ASF Member Michael Brohl is detrimental to the health of the
> project,.
>
> His behaviour, as displayed in various comments on tickets and pull
> requests over the past two months, has caused engagement of and healthy,
> constructive discussions between collaborating volunteers to not only
> decline, but also swing like a pendulum. Making it more difficult for
> collaborating contributors to come to conclusions and consensus to move
> forward.
> Thanks for recognising, like me, that the heated and fruitless debates
> caused by this behaviour is a waste of my and fellow contributors' precious
> time.
>
> I trust that talks within the PMC has shown Michael the error of his ways,
> and can learn from this.. And I hope that, now this has been addressed, the
> community can come back together and get healed. Leading to more happy
> collaborations working towards a better community and its works with each
> of the engaging interactions.
>
> I also thank the members of the ASF who stepped up and advised the members
> of the OFBiz PMC, regarding the inappropriate behaviour of Michael Brohl.
>
>
> Met vriendelijke groet,
>
> Pierre Smits
> *Proud* *contributor** of* Apache OFBiz <https://ofbiz.apache.org/> since
> 2008 (without privileges)
> Proud contributor to the ASF since 2006
> *Apache Directory <https://directory.apache.org>, PMC Member*
>
> Anyone could have been you, whereas I've always been anyone.
>
>
> On Mon, Feb 7, 2022 at 9:06 PM Jacopo Cappellato <
> jacopo.cappell...@gmail.com> wrote:
>
> > Pierre,
> >
> > The OFBiz PMC has reviewed your complaints and has received some advice
> > from various ASF members: with this response we are implementing some of
> > those.
> > The PMC considers troublesome the fact that you feel attacked ("trolled")
> > by the feedback you receive by Michael (and possibly others) and that you
> > consider the feedback being "inappropriate", because it prevents any
> > possibility to discuss your contributions in a constructive manner, it
> > leads to heated and fruitless debates that may be unhealthy for the OFBiz
> > community and a waste of time for its contributors.
> >
> > The PMC has thus decided to ask the project's volunteers (PMC members,
> > committers and contributors) to put "on hold" or reject or disregard any
> > of your contributions, such as code, documentation, mailing list
> > discussions
> > etc. and close Jira issues and pull requests that are not straightforward
> > and require further interactions/discussions with you before they can be
> > approved or accepted.
> >
> > On behalf of the Apache OFBiz PMC,
> >
> > Jacopo
> >
> >
> > On Tue, Jan 25, 2022 at 2:01 AM Pierre Smits 
> > wrote:
> >
> >> Michael,
> >>
> >> I told you before in (other) tickets to stop trolling me through your
> >> complaints in the tickets I am working on. You continue to do this.
> >> Your remarks about you not committing the code contributions of
> >> unprivileged contributors are totally inappropriate.  Not appropriate in
> >> ticket comments, nor in the mailing lists of the project. Nobody is
> >> strong-arming you to commit or merge improvements. Nobody is expecting
> you
> >> ever will.
> >> Stop trying to pressure fellow contributors, collaborating to improve
> >> OFBiz, to follow your dictate by your attempt to frame a narrative that
> >> there is an agreement about how contributors are to contribute what,
> where
> >> and when.
> >> Such narrative is solely intended to dictate the direction of the
> project
> >> for your self serving purposes, resulting in alienating fellow
> >> contributors
> >> from collaborating in the OFBiz project to get improvements into its
> >> repositories.
> >>
> >> There has never been such an agreement on how, what, where and when to
> >> contribute in the OFBiz community. Nor on the specific subject of what
> the
> >> correct translation label that is to be used in OFBiz screens and forms.
> >> No discussion on that latter subject has ever been started on the dev
> >> mailing l

Re: [jira] [Commented] (OFBIZ-12489) Product Prices - VIEW permissions

[Jacopo Cappellato]

Pierre,

The OFBiz PMC has reviewed your complaints and has received some advice
from various ASF members: with this response we are implementing some of
those.
The PMC considers troublesome the fact that you feel attacked ("trolled")
by the feedback you receive by Michael (and possibly others) and that you
consider the feedback being "inappropriate", because it prevents any
possibility to discuss your contributions in a constructive manner, it
leads to heated and fruitless debates that may be unhealthy for the OFBiz
community and a waste of time for its contributors.

The PMC has thus decided to ask the project's volunteers (PMC members,
committers and contributors) to put "on hold" or reject or disregard any
of your contributions, such as code, documentation, mailing list discussions
etc. and close Jira issues and pull requests that are not straightforward
and require further interactions/discussions with you before they can be
approved or accepted.

On behalf of the Apache OFBiz PMC,

Jacopo


On Tue, Jan 25, 2022 at 2:01 AM Pierre Smits  wrote:

> Michael,
>
> I told you before in (other) tickets to stop trolling me through your
> complaints in the tickets I am working on. You continue to do this.
> Your remarks about you not committing the code contributions of
> unprivileged contributors are totally inappropriate.  Not appropriate in
> ticket comments, nor in the mailing lists of the project. Nobody is
> strong-arming you to commit or merge improvements. Nobody is expecting you
> ever will.
> Stop trying to pressure fellow contributors, collaborating to improve
> OFBiz, to follow your dictate by your attempt to frame a narrative that
> there is an agreement about how contributors are to contribute what, where
> and when.
> Such narrative is solely intended to dictate the direction of the project
> for your self serving purposes, resulting in alienating fellow contributors
> from collaborating in the OFBiz project to get improvements into its
> repositories.
>
> There has never been such an agreement on how, what, where and when to
> contribute in the OFBiz community. Nor on the specific subject of what the
> correct translation label that is to be used in OFBiz screens and forms.
> No discussion on that latter subject has ever been started on the dev
> mailing list, nor is there any series of postings on that list that could
> lead to someone being able to claim that a kind of consensus could be
> derived from such a thread.
>
> It appears, IMO, that you don't want what is for the good of the public
> through the deliverables of the OFBiz project.
> Your business needs and goals are not the concerns of the project, nor the
> concerns of the contributors not paid by you(r company).
> You keep your Ecomify rules re OFBiz to yourself and for your employees,
> instead of presenting them as rules (or agreements) of the project. In this
> project there are no such 'contribution' rules.
> There are only guidelines, and precedents established over time within the
> project. And these indicate that anything goes.
>
> If you want to change what the way is how contributions are done to the
> project, you start a discussion on the dev mailing list of the project and
> work that discussion towards a consensus. Alternatively you follow the lead
> of what many of your fellow privileged contributors do in this project
> nowadays.
>
> Again: s*top trolling me*. You bring nothing new to the tickets I am
> working. Keep your complaints to yourself, or use them to create a positive
> change to the project that will make OFBiz more appealing, more
> trustworthy, attracting a greater diversity of contributors instead of a
> negative change.
>
> If you want to improve OFBiz, go work the tickets that have your name as
> the assignee to a successful conclusion (or take those of the contributors
> paid by your company, or - if that is all done - take those that are
> unassigned as there are plenty of possibilities there), instead of
> harassing fellow contributors and me collaborating to improve OFBiz.
>
> Pierre Smits
> *Proud* *contributor** of* Apache OFBiz  since
> 2008 (without privileges)
> Proud contributor to the ASF since 2006
>
> *Apache Directory , PMC Member*
>

Re: Fwd: Returned post for annou...@apache.org

[Jacopo Cappellato]

Hi Jacques,

I see your announcement went through the announce list, I think we are good
now.

Jacopo


On Fri, Jan 21, 2022 at 9:57 AM Jacques Le Roux <
jacques.le.r...@les7arts.com> wrote:

> Better, I'll use https://downloads.apache.org/ofbiz/
>
> Le 21/01/2022 à 09:52, Jacques Le Roux a écrit :
> > Hi,
> >
> > As we prefer to advertise about R18 than 17.12.09, I picked
> https://downloads.apache.org/ofbiz/apache-ofbiz-17.12.09.zip and will
> resend the announce.
> >
> > Mark Thomas should let it pass.
> >
> > Jacques
> >
> > Le 20/01/2022 à 20:22, Jacques Le Roux a écrit :
> >> We could also use modified
> https://ofbiz.apache.org/release-notes-17.12.09.html (a bit more work...)
> >>
> >> Le 20/01/2022 à 20:19, Jacques Le Roux a écrit :
> >>> Hi Jacopo,
> >>>
> >>> The announce was refused (moderated) because there is no direct link
> to download 17.12.09 in the announce.
> >>>
> >>> I found we could use
> https://downloads.apache.org/ofbiz/apache-ofbiz-17.12.09.zip. Is that
> correct, and enough?
> >>>
> >>> TIA
> >>>
> >>> Jacques
> >>>
> >>> Le 20/01/2022 à 17:08, jler...@apache.org a écrit :
> 
>  Hi,
> 
>  I see no reasons why this message did not pass, is there one?
> 
>  TIA
> 
>  Jacques
> 
> 
> 
>   Message transféré 
>  Sujet : Returned post for annou...@apache.org
>  Date : 20 Jan 2022 14:49:21 -
>  De : announce-h...@apache.org
>  Pour : jler...@apache.org
> 
> 
> 
> 
>  Hi! This is the ezmlm program. I'm managing the
>  annou...@apache.org mailing list.
> 
>  I'm working for my owner, who can be reached
>  at announce-ow...@apache.org.
> 
>  I'm sorry, the list moderators for the announce list
>  have failed to act on your post. Thus, I'm returning it to you.
>  If you feel that this is in error, please repost the message
>  or contact a list moderator directly.
> 
>  --- Enclosed, please find the message you sent.
> 
> 
> 
>

Re: [VOTE] [RESULT] Apache OFBiz 17.12.09

[Jacopo Cappellato]

Hi Pierre,

The EOL announcement that Jacques prepared and sent a few minutes ago
contains such information for our users.

 Best regards,

Jacopo

On Sat, Jan 15, 2022 at 1:30 PM Pierre Smits  wrote:
>
> Hi Jacopo,
>
> Doing an announcement would bring the opportunity to increase the awareness
> (as a reminder - again) that use of anything but the latest release is not
> advised. And that existing users are invited/urged to migrate/upgrade.
>
> Why forgo on such opportunities to communicate to the outside world?
>
> Met vriendelijke groet,
>
> Pierre Smits
> *Proud* *contributor** of* Apache OFBiz <https://ofbiz.apache.org/> since
> 2008 (without privileges)
> Proud contributor to the ASF since 2006
>
> *Apache Directory <https://directory.apache.org>, PMC Member*
>
>
> On Sat, Jan 15, 2022 at 1:24 PM Jacopo Cappellato <
> jacopo.cappell...@gmail.com> wrote:
>
> > The publish process is now complete.
> > I am not going to send an announcement for this release since we are
> > publishing it just to have it in our archives for the few that may
> > want to use it after our announcement of the EOL of the 17.12. branch.
> >
> > Jacopo
> >
> > On Sat, Jan 15, 2022 at 1:04 PM Jacopo Cappellato
> >  wrote:
> > >
> > > The vote is successful with 5 positive votes, all binding.
> > >
> > > I am going to publish the release.
> > >
> > > Jacopo
> > >
> > > On Mon, Jan 10, 2022 at 6:56 PM Jacopo Cappellato
> > >  wrote:
> > > >
> > > > This is the vote thread to release a new bug fix release for the
> > > > release17.12 branch. This new release, "Apache OFBiz 17.12.09"
> > > > supersedes all the previous releases from the same branch and is
> > > > probably the last release of the 17.12 series.
> > > >
> > > > The release files can be downloaded from here:
> > > > https://dist.apache.org/repos/dist/dev/ofbiz/
> > > >
> > > > and are:
> > > > * apache-ofbiz-17.12.09.zip
> > > > * KEYS: text file with keys
> > > > * apache-ofbiz-17.12.09.zip.asc: the detached signature file
> > > > * apache-ofbiz-17.12.09.zip.sha512: checksum file
> > > >
> > > > Please download and test the zip file and its signatures (for
> > > > instructions on testing the signatures see [*]).
> > > >
> > > > Vote:
> > > >
> > > > [ +1] release as Apache OFBiz 17.12.09
> > > > [ -1] do not release
> > > >
> > > > For more details about this process please read [**].
> > > > [*]
> > https://cwiki.apache.org/confluence/display/OFBIZ/Release+Management+Guide+for+OFBiz#ReleaseManagementGuideforOFBiz-Votingonarelease
> > > > [**] http://www.apache.org/foundation/voting.html
> >

Re: svn commit: r52095 - /release/ofbiz/README.html

[Jacopo Cappellato]

Thank you Pierre,

I have fixed it in rev. 52096

Jacopo



On Sat, Jan 15, 2022 at 1:25 PM Pierre Smits  wrote:
>
> Hi Jacopo,
>
> Thank you for doing this.
>
> Are you aware that the description of the following line (the addition) is
> the same as the line beneath it?
>
> +apache-ofbiz-*17.12.08.zip* - Released in January 2022.  target="external"
> href="http://ofbiz.apache.org/release-notes-17.12.09.html;>Release
> notes.
>
>
>
> Met vriendelijke groet,
>
> Pierre Smits
> *Proud* *contributor** of* Apache OFBiz  since
> 2008 (without privileges)
> Proud contributor to the ASF since 2006
>
> *Apache Directory , PMC Member*
>
>
> On Sat, Jan 15, 2022 at 1:20 PM  wrote:
>
> > Author: jacopoc
> > Date: Sat Jan 15 12:20:44 2022
> > New Revision: 52095
> >
> > Log:
> > Update release history log with the release 17.12.09.
> >
> > Modified:
> > release/ofbiz/README.html
> >
> > Modified: release/ofbiz/README.html
> >
> > ==
> > --- release/ofbiz/README.html (original)
> > +++ release/ofbiz/README.html Sat Jan 15 12:20:44 2022
> > @@ -15,6 +15,7 @@ This series has been stabilized with bug
> >  17.12 series (closed)
> >  This series has been stabilized with bug fixes since December 2017.
> >  
> > +apache-ofbiz-17.12.08.zip - Released in January 2022.  > target="external" href="
> > http://ofbiz.apache.org/release-notes-17.12.09.html;>Release
> > notes.
> >  apache-ofbiz-17.12.08.zip - Released in August 2021.  > target="external" href="
> > http://ofbiz.apache.org/release-notes-17.12.08.html;>Release
> > notes.
> >  apache-ofbiz-17.12.07.zip - Released in April 2021.  > target="external" href="
> > http://ofbiz.apache.org/release-notes-17.12.07.html;>Release
> > notes.
> >  apache-ofbiz-17.12.06.zip - Released in March 2021.  > target="external" href="
> > http://ofbiz.apache.org/release-notes-17.12.06.html;>Release
> > notes.
> >
> >
> >

Re: [VOTE] [RESULT] Apache OFBiz 17.12.09

[Jacopo Cappellato]

The publish process is now complete.
I am not going to send an announcement for this release since we are
publishing it just to have it in our archives for the few that may
want to use it after our announcement of the EOL of the 17.12. branch.

Jacopo

On Sat, Jan 15, 2022 at 1:04 PM Jacopo Cappellato
 wrote:
>
> The vote is successful with 5 positive votes, all binding.
>
> I am going to publish the release.
>
> Jacopo
>
> On Mon, Jan 10, 2022 at 6:56 PM Jacopo Cappellato
>  wrote:
> >
> > This is the vote thread to release a new bug fix release for the
> > release17.12 branch. This new release, "Apache OFBiz 17.12.09"
> > supersedes all the previous releases from the same branch and is
> > probably the last release of the 17.12 series.
> >
> > The release files can be downloaded from here:
> > https://dist.apache.org/repos/dist/dev/ofbiz/
> >
> > and are:
> > * apache-ofbiz-17.12.09.zip
> > * KEYS: text file with keys
> > * apache-ofbiz-17.12.09.zip.asc: the detached signature file
> > * apache-ofbiz-17.12.09.zip.sha512: checksum file
> >
> > Please download and test the zip file and its signatures (for
> > instructions on testing the signatures see [*]).
> >
> > Vote:
> >
> > [ +1] release as Apache OFBiz 17.12.09
> > [ -1] do not release
> >
> > For more details about this process please read [**].
> > [*] 
> > https://cwiki.apache.org/confluence/display/OFBIZ/Release+Management+Guide+for+OFBiz#ReleaseManagementGuideforOFBiz-Votingonarelease
> > [**] http://www.apache.org/foundation/voting.html

[VOTE] [RESULT] Apache OFBiz 17.12.09

[Jacopo Cappellato]

The vote is successful with 5 positive votes, all binding.

I am going to publish the release.

Jacopo

On Mon, Jan 10, 2022 at 6:56 PM Jacopo Cappellato
 wrote:
>
> This is the vote thread to release a new bug fix release for the
> release17.12 branch. This new release, "Apache OFBiz 17.12.09"
> supersedes all the previous releases from the same branch and is
> probably the last release of the 17.12 series.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
>
> and are:
> * apache-ofbiz-17.12.09.zip
> * KEYS: text file with keys
> * apache-ofbiz-17.12.09.zip.asc: the detached signature file
> * apache-ofbiz-17.12.09.zip.sha512: checksum file
>
> Please download and test the zip file and its signatures (for
> instructions on testing the signatures see [*]).
>
> Vote:
>
> [ +1] release as Apache OFBiz 17.12.09
> [ -1] do not release
>
> For more details about this process please read [**].
> [*] 
> https://cwiki.apache.org/confluence/display/OFBIZ/Release+Management+Guide+for+OFBiz#ReleaseManagementGuideforOFBiz-Votingonarelease
> [**] http://www.apache.org/foundation/voting.html

Re: [VOTE] [RELEASE] Apache OFBiz 17.12.09

[Jacopo Cappellato]

+1

Jacopo

On Mon, Jan 10, 2022 at 6:56 PM Jacopo Cappellato
 wrote:
>
> This is the vote thread to release a new bug fix release for the
> release17.12 branch. This new release, "Apache OFBiz 17.12.09"
> supersedes all the previous releases from the same branch and is
> probably the last release of the 17.12 series.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
>
> and are:
> * apache-ofbiz-17.12.09.zip
> * KEYS: text file with keys
> * apache-ofbiz-17.12.09.zip.asc: the detached signature file
> * apache-ofbiz-17.12.09.zip.sha512: checksum file
>
> Please download and test the zip file and its signatures (for
> instructions on testing the signatures see [*]).
>
> Vote:
>
> [ +1] release as Apache OFBiz 17.12.09
> [ -1] do not release
>
> For more details about this process please read [**].
> [*] 
> https://cwiki.apache.org/confluence/display/OFBIZ/Release+Management+Guide+for+OFBiz#ReleaseManagementGuideforOFBiz-Votingonarelease
> [**] http://www.apache.org/foundation/voting.html

[VOTE] [RELEASE] Apache OFBiz 17.12.09

[Jacopo Cappellato]

This is the vote thread to release a new bug fix release for the
release17.12 branch. This new release, "Apache OFBiz 17.12.09"
supersedes all the previous releases from the same branch and is
probably the last release of the 17.12 series.

The release files can be downloaded from here:
https://dist.apache.org/repos/dist/dev/ofbiz/

and are:
* apache-ofbiz-17.12.09.zip
* KEYS: text file with keys
* apache-ofbiz-17.12.09.zip.asc: the detached signature file
* apache-ofbiz-17.12.09.zip.sha512: checksum file

Please download and test the zip file and its signatures (for
instructions on testing the signatures see [*]).

Vote:

[ +1] release as Apache OFBiz 17.12.09
[ -1] do not release

For more details about this process please read [**].
[*] 
https://cwiki.apache.org/confluence/display/OFBIZ/Release+Management+Guide+for+OFBiz#ReleaseManagementGuideforOFBiz-Votingonarelease
[**] http://www.apache.org/foundation/voting.html

Re: OFBiz releases EOL (End Of Life) announcement

[Jacopo Cappellato]

On Mon, Jan 10, 2022 at 11:26 AM Jacques Le Roux
 wrote:
>
> Hi Jacopo,
>
> Would you be available soon to start the release work?

Yes, I can work on it later today.

>
> Also what about freezing a 22.01 branch?

For the freezing of 22.01, we can proceed anytime: is there a
volunteer to create the reales branches?

Jacopo

Re: [VOTE] [RESULT] Apache OFBiz 18.12.05 (second attempt)

[Jacopo Cappellato]

I have updated our release management guide in Confluence accordingly.

Jacopo

On Tue, Jan 4, 2022 at 5:16 PM Jacques Le Roux
 wrote:
>
> It's up to date:
>
> *< uses a global content distribution network (CDN) which collects new
> releases almost as soon as you post them. The files therefore become 
> available for download almost immediately. You probably don't need to wait
> more than fifteen minutes before announcing a release.>>
>
> Le 04/01/2022 à 15:56, Jacques Le Roux a écrit :
> > I have asked, Greg answered:
> >
> >< >The experiment is related to usage statistics.>>
> >
> > So it's official, it's now 15 mins :) I have tried stats. twice (once in 
> > Nov. one today) it does not work or is really, really, really slow...
> >
> > I have asked on members if we should not update 
> > https://infra.apache.org/release-publishing.html#faqs
> >
> > Jacques
> >
> > Le 04/01/2022 à 12:29, Jacopo Cappellato a écrit :
> >> Thank you Jacques, it is indeed good news.
> >> However, I think we should stick to the current workflow, at least
> >> until the Infra updates their recommendations here:
> >>
> >> https://infra.apache.org/release-publishing.html#faqs
> >>
> >> Thanks,
> >>
> >> Jacopo
> >>
> >>
> >> On Tue, Jan 4, 2022 at 12:16 PM Jacques Le Roux
> >>   wrote:
> >>> Hi Jacopo,
> >>>
> >>> 2 months ago the ASF moved from a mirrors architecture to a CDNs 
> >>> architecture.
> >>>
> >>> It's described 
> >>> athttps://fossforce.com/2021/10/apache-foundation-moves-from-mirrors-to-a-cdn-to-distribute-software/
> >>>
> >>> In the related members thread* (only accessible to ASF members) Daniel 
> >>> Gruno said**:
> >>>
> >>>  < >>> commit to svn.>>
> >>>
> >>> I guess it's the same for Git.
> >>>
> >>> *https://lists.apache.org/thread/4k6t1702xtctylozt9jzhtq6nqgvs2p2
> >>> **https://lists.apache.org/thread/gfoprg8215sdpx8kwjcpv0z74lfyvmq5
> >>>
> >>> Sounds like a nice change, hopefully it will stay.
> >>>
> >>> Jacques
> >>>
> >>> Le 03/01/2022 à 09:47, Jacopo Cappellato a écrit :
> >>>> Thank you, the vote is successful (3 binding votes).
> >>>>
> >>>> I am going to publish the release, wait 24 hours to let the release files
> >>>> propagate through the download mirror network and finally announce the
> >>>> release and update our site.
> >>>>
> >>>> Jacopo
> >>>>
> >>>> On Sun, Jan 2, 2022 at 12:29 PM Jacopo Cappellato <
> >>>> jacopo.cappell...@gmail.com> wrote:
> >>>>
> >>>>> This is the second vote thread to release a new bug fix release for the
> >>>>> release18.12 branch. This new release, "Apache OFBiz 18.12.05"
> >>>>> supersedes all the previous releases from the same branch.
> >>>>>
> >>>>> The release files can be downloaded from here:
> >>>>> https://dist.apache.org/repos/dist/dev/ofbiz/
> >>>>>
> >>>>> and are:
> >>>>> * apache-ofbiz-18.12.05.zip
> >>>>> * KEYS: text file with keys
> >>>>> * apache-ofbiz-18.12.05.zip.asc: the detached signature file
> >>>>> * apache-ofbiz-18.12.05.zip.sha512: checksum file
> >>>>>
> >>>>> Please download and test the zip file and its signatures (for
> >>>>> instructions on testing the signatures see [*]).
> >>>>>
> >>>>> Vote:
> >>>>>
> >>>>> [ +1] release as Apache OFBiz 18.12.05
> >>>>> [ -1] do not release
> >>>>>
> >>>>> For more details about this process please read [**].
> >>>>> [*]
> >>>>> https://cwiki.apache.org/confluence/display/OFBIZ/Release+Management+Guide+for+OFBiz#ReleaseManagementGuideforOFBiz-Votingonarelease
> >>>>> [**]http://www.apache.org/foundation/voting.html
> >>>>>

Re: [VOTE] [RESULT] Apache OFBiz 18.12.05 (second attempt)

[Jacopo Cappellato]

great, thanks!

Jacopo

On Tue, Jan 4, 2022 at 5:16 PM Jacques Le Roux
 wrote:
>
> It's up to date:
>
> *< uses a global content distribution network (CDN) which collects new
> releases almost as soon as you post them. The files therefore become 
> available for download almost immediately. You probably don't need to wait
> more than fifteen minutes before announcing a release.>>
>
> Le 04/01/2022 à 15:56, Jacques Le Roux a écrit :
> > I have asked, Greg answered:
> >
> >< >The experiment is related to usage statistics.>>
> >
> > So it's official, it's now 15 mins :) I have tried stats. twice (once in 
> > Nov. one today) it does not work or is really, really, really slow...
> >
> > I have asked on members if we should not update 
> > https://infra.apache.org/release-publishing.html#faqs
> >
> > Jacques
> >
> > Le 04/01/2022 à 12:29, Jacopo Cappellato a écrit :
> >> Thank you Jacques, it is indeed good news.
> >> However, I think we should stick to the current workflow, at least
> >> until the Infra updates their recommendations here:
> >>
> >> https://infra.apache.org/release-publishing.html#faqs
> >>
> >> Thanks,
> >>
> >> Jacopo
> >>
> >>
> >> On Tue, Jan 4, 2022 at 12:16 PM Jacques Le Roux
> >>   wrote:
> >>> Hi Jacopo,
> >>>
> >>> 2 months ago the ASF moved from a mirrors architecture to a CDNs 
> >>> architecture.
> >>>
> >>> It's described 
> >>> athttps://fossforce.com/2021/10/apache-foundation-moves-from-mirrors-to-a-cdn-to-distribute-software/
> >>>
> >>> In the related members thread* (only accessible to ASF members) Daniel 
> >>> Gruno said**:
> >>>
> >>>  < >>> commit to svn.>>
> >>>
> >>> I guess it's the same for Git.
> >>>
> >>> *https://lists.apache.org/thread/4k6t1702xtctylozt9jzhtq6nqgvs2p2
> >>> **https://lists.apache.org/thread/gfoprg8215sdpx8kwjcpv0z74lfyvmq5
> >>>
> >>> Sounds like a nice change, hopefully it will stay.
> >>>
> >>> Jacques
> >>>
> >>> Le 03/01/2022 à 09:47, Jacopo Cappellato a écrit :
> >>>> Thank you, the vote is successful (3 binding votes).
> >>>>
> >>>> I am going to publish the release, wait 24 hours to let the release files
> >>>> propagate through the download mirror network and finally announce the
> >>>> release and update our site.
> >>>>
> >>>> Jacopo
> >>>>
> >>>> On Sun, Jan 2, 2022 at 12:29 PM Jacopo Cappellato <
> >>>> jacopo.cappell...@gmail.com> wrote:
> >>>>
> >>>>> This is the second vote thread to release a new bug fix release for the
> >>>>> release18.12 branch. This new release, "Apache OFBiz 18.12.05"
> >>>>> supersedes all the previous releases from the same branch.
> >>>>>
> >>>>> The release files can be downloaded from here:
> >>>>> https://dist.apache.org/repos/dist/dev/ofbiz/
> >>>>>
> >>>>> and are:
> >>>>> * apache-ofbiz-18.12.05.zip
> >>>>> * KEYS: text file with keys
> >>>>> * apache-ofbiz-18.12.05.zip.asc: the detached signature file
> >>>>> * apache-ofbiz-18.12.05.zip.sha512: checksum file
> >>>>>
> >>>>> Please download and test the zip file and its signatures (for
> >>>>> instructions on testing the signatures see [*]).
> >>>>>
> >>>>> Vote:
> >>>>>
> >>>>> [ +1] release as Apache OFBiz 18.12.05
> >>>>> [ -1] do not release
> >>>>>
> >>>>> For more details about this process please read [**].
> >>>>> [*]
> >>>>> https://cwiki.apache.org/confluence/display/OFBIZ/Release+Management+Guide+for+OFBiz#ReleaseManagementGuideforOFBiz-Votingonarelease
> >>>>> [**]http://www.apache.org/foundation/voting.html
> >>>>>

Re: [ofbiz-site] branch master updated: More information about security and EOL (End Of Life)

[Jacopo Cappellato]

Thank you Jacques,

I have now published the change.

Jacopo


On Tue, Jan 4, 2022 at 11:53 AM Jacques Le Roux
 wrote:
>
> I agree Jacopo,
>
> Will you handle it?
>
> I made those tiny changes after an answer Mark J. Cox made to Mark Thomas in 
> a discussion I read on security-disc...@community.apache.org :
>
> MT:  < regularly really are healthy. Could they realistically respond to a
> security vulnerability in a reasonable time frame? If not, we need to
> move them to the attic.>>
>
> MC: < users so
> they know the status of what they're using.  There are quite a number of
> examples where a project has responded to a vulnerability reporter that
> some version is EOL but it's not been clear enough on their pages, nor any
> real announcement ever having being made.  We need a consistent policy on
> what to do about vulnerabilities that come up in EOL versions, and when to
> allocate them CVE names ('there's an unfixed issue in X") in order to help
> users with scanning tools also notice when they're using out of date and
> now insecure projects.>>
>
> There are at least 340+ TLPs*. So I guess it becomes worrying for the ASF.
>
> I don't think we are concerned by those worries. So was just a small effort 
> in this direction.
> I think though that we should discuss about how to handle EOL announcements.
>
> * 
> https://blogs.apache.org/foundation/entry/apache-software-foundation-security-report1
>
> Jacques
>
> Le 04/01/2022 à 10:45, Jacopo Cappellato a écrit :
> > Thank you Jacques for adding the statement: however I think it is  > time 
> > to remove the entire section of 17.12.08 since we have enough > releases 
> > out of 18.12 already. The release 17.12.08 will always be >
> available in the archive. > > Jacopo

Re: [VOTE] [RESULT] Apache OFBiz 18.12.05 (second attempt)

[Jacopo Cappellato]

Thank you Jacques, it is indeed good news.
However, I think we should stick to the current workflow, at least
until the Infra updates their recommendations here:

https://infra.apache.org/release-publishing.html#faqs

Thanks,

Jacopo


On Tue, Jan 4, 2022 at 12:16 PM Jacques Le Roux
 wrote:
>
> Hi Jacopo,
>
> 2 months ago the ASF moved from a mirrors architecture to a CDNs architecture.
>
> It's described at 
> https://fossforce.com/2021/10/apache-foundation-moves-from-mirrors-to-a-cdn-to-distribute-software/
>
> In the related members thread* (only accessible to ASF members) Daniel Gruno 
> said**:
>
> < to svn.>>
>
> I guess it's the same for Git.
>
> * https://lists.apache.org/thread/4k6t1702xtctylozt9jzhtq6nqgvs2p2
> ** https://lists.apache.org/thread/gfoprg8215sdpx8kwjcpv0z74lfyvmq5
>
> Sounds like a nice change, hopefully it will stay.
>
> Jacques
>
> Le 03/01/2022 à 09:47, Jacopo Cappellato a écrit :
> > Thank you, the vote is successful (3 binding votes).
> >
> > I am going to publish the release, wait 24 hours to let the release files
> > propagate through the download mirror network and finally announce the
> > release and update our site.
> >
> > Jacopo
> >
> > On Sun, Jan 2, 2022 at 12:29 PM Jacopo Cappellato <
> > jacopo.cappell...@gmail.com> wrote:
> >
> >> This is the second vote thread to release a new bug fix release for the
> >> release18.12 branch. This new release, "Apache OFBiz 18.12.05"
> >> supersedes all the previous releases from the same branch.
> >>
> >> The release files can be downloaded from here:
> >> https://dist.apache.org/repos/dist/dev/ofbiz/
> >>
> >> and are:
> >> * apache-ofbiz-18.12.05.zip
> >> * KEYS: text file with keys
> >> * apache-ofbiz-18.12.05.zip.asc: the detached signature file
> >> * apache-ofbiz-18.12.05.zip.sha512: checksum file
> >>
> >> Please download and test the zip file and its signatures (for
> >> instructions on testing the signatures see [*]).
> >>
> >> Vote:
> >>
> >> [ +1] release as Apache OFBiz 18.12.05
> >> [ -1] do not release
> >>
> >> For more details about this process please read [**].
> >> [*]
> >> https://cwiki.apache.org/confluence/display/OFBIZ/Release+Management+Guide+for+OFBiz#ReleaseManagementGuideforOFBiz-Votingonarelease
> >> [**]http://www.apache.org/foundation/voting.html
> >>

Re: [ofbiz-site] branch master updated: More information about security and EOL (End Of Life)

[Jacopo Cappellato]

Thank you Jacques for adding the statement: however I think it is time
to remove the entire section of 17.12.08 since we have enough releases
out of 18.12 already. The release 17.12.08 will always be available in
the archive.

Jacopo

On Sun, Jan 2, 2022 at 6:55 PM  wrote:
>
> This is an automated email from the ASF dual-hosted git repository.
>
> jleroux pushed a commit to branch master
> in repository https://gitbox.apache.org/repos/asf/ofbiz-site.git
>
>
> The following commit(s) were added to refs/heads/master by this push:
>  new a69cf9f  More information about security and EOL (End Of Life)
> a69cf9f is described below
>
> commit a69cf9f4cdeb1b23e3b1db30ada47b52aa7f3dd0
> Author: Jacques Le Roux 
> AuthorDate: Sun Jan 2 18:55:24 2022 +0100
>
> More information about security and EOL (End Of Life)
> ---
>  download.html  | 2 +-
>  security.html  | 2 +-
>  template/page/download.tpl.php | 2 +-
>  template/page/security.tpl.php | 2 +-
>  4 files changed, 4 insertions(+), 4 deletions(-)
>
> diff --git a/download.html b/download.html
> index be0b541..51a7d62 100644
> --- a/download.html
> +++ b/download.html
> @@ -198,7 +198,7 @@
>
>  Apache OFBiz 17.12.08
>  
> - Released on August 2021, this is the eighth and final 
> release of the 17.12 series, that has been stabilized since December 2017.
> + Released on August 2021, this is the eighth and final 
> release of the 17.12 series, that has been stabilized since December 2017. 
> That means that the release17.12 branch has reached its End Of Life (EOL) and 
> is no longer supported from a security perspective
>   href="https://www.apache.org/dyn/closer.lua/ofbiz/apache-ofbiz-17.12.08.zip; 
> target="external" >Download OFBiz 17.12.08
>   href="https://downloads.apache.org/ofbiz/apache-ofbiz-17.12.08.zip.asc; 
> target="external">[PGP]
>   href="https://downloads.apache.org/ofbiz/apache-ofbiz-17.12.08.zip.sha512; 
> target="external">[SHA512]
> diff --git a/security.html b/security.html
> index 12efce9..0a05ab9 100644
> --- a/security.html
> +++ b/security.html
> @@ -136,7 +136,7 @@
>  Note that we no longer create CVEs for post-auth attacks done 
> using demo credentials, notably using the admin user.
>   https://s.apache.org/dsj2p;> Rather create 
> bugs reports in our issue tracker (Jira) for that.
>
> -The main reason why we no longer create CVEs for post-auth 
> attacks done using demo credentials is because
> +The main reason we no longer create CVEs for post-auth 
> attacks done using demo credentials is because
>   href="https://ci.apache.org/projects/ofbiz/site/trunk/readme/html5/README.html#security;>
>  we highly suggest to OFBiz users to not use credentials demo in 
> production
>   and we expect OFBiz users to do so. We also reject post-auth 
> vulnerabilities because we have a solid CSRF defense.
>
> diff --git a/template/page/download.tpl.php b/template/page/download.tpl.php
> index d4ec4d5..892cc2f 100644
> --- a/template/page/download.tpl.php
> +++ b/template/page/download.tpl.php
> @@ -87,7 +87,7 @@
>
>  Apache OFBiz 17.12.08
>  
> - Released on August 2021, this is the eighth and final 
> release of the 17.12 series, that has been stabilized since December 2017.
> + Released on August 2021, this is the eighth and final 
> release of the 17.12 series, that has been stabilized since December 2017. 
> That means that the release17.12 branch has reached its End Of Life (EOL) and 
> is no longer supported from a security perspective
>   href="https://www.apache.org/dyn/closer.lua/ofbiz/apache-ofbiz-17.12.08.zip; 
> target="external" >Download OFBiz 17.12.08
>   href="https://downloads.apache.org/ofbiz/apache-ofbiz-17.12.08.zip.asc; 
> target="external">[PGP]
>   href="https://downloads.apache.org/ofbiz/apache-ofbiz-17.12.08.zip.sha512; 
> target="external">[SHA512]
> diff --git a/template/page/security.tpl.php b/template/page/security.tpl.php
> index 532a9f7..c6ee66a 100644
> --- a/template/page/security.tpl.php
> +++ b/template/page/security.tpl.php
> @@ -25,7 +25,7 @@
>  Note that we no longer create CVEs for post-auth attacks done 
> using demo credentials, notably using the admin user.
>   https://s.apache.org/dsj2p;> Rather create 
> bugs reports in our issue tracker (Jira) for that.
>
> -The main reason why we no longer create CVEs for post-auth 
> attacks done using demo credentials is because
> +The main reason we no longer create CVEs for post-auth 
> attacks done using demo credentials is because
>   href="https://ci.apache.org/projects/ofbiz/site/trunk/readme/html5/README.html#security;>
>  we highly suggest to OFBiz users to not use credentials demo in 
> production
>   and we expect 

[ANNOUNCE] Apache OFBiz 18.12.05 released

[Jacopo Cappellato]

The Apache OFBiz community is pleased to announce the new release "Apache
OFBiz 18.12.05".

Apache OFBiz® is an open source product for the automation of enterprise
processes that includes framework components and business applications.

http://ofbiz.apache.org/

"Apache OFBiz 18.12.05" is the fifth release of the 18.12 series.

For details of the changes introduced with this new version
please refer to http://ofbiz.apache.org/release-notes-18.12.05.html

The history of security related fixes included in each release is
available here:
https://ofbiz.apache.org/security.html

The release files can be downloaded following the instructions in the OFBiz
download page:

http://ofbiz.apache.org/download.html

Re: [VOTE] [RELEASE] Apache OFBiz 18.12.05 (second attempt)

[Jacopo Cappellato]

Thank you Nicolas!
(BTW it is fine to mark as released in Jira the version 18.12.05 since it
is now official... however we have to wait some time before we announce and
update our download page because we need some time to make sure all mirrors
around the World have received the release files).

Jacopo

On Mon, Jan 3, 2022 at 11:10 AM Nicolas Malin 
wrote:

>
> On 03/01/2022 10:31, Nicolas Malin wrote:
> > Jacopo, I can publish to 18.12.05 on jira and open the 18.12.06 if it's
> > ok for you
> I opened the 18.12.06 and I wait your official announce to release the
> 18.12.05 (and update the date)
>
> Cheers,
> Nicolas
>

[VOTE] [RESULT] Apache OFBiz 18.12.05 (second attempt)

[Jacopo Cappellato]

Thank you, the vote is successful (3 binding votes).

I am going to publish the release, wait 24 hours to let the release files
propagate through the download mirror network and finally announce the
release and update our site.

Jacopo

On Sun, Jan 2, 2022 at 12:29 PM Jacopo Cappellato <
jacopo.cappell...@gmail.com> wrote:

> This is the second vote thread to release a new bug fix release for the
> release18.12 branch. This new release, "Apache OFBiz 18.12.05"
> supersedes all the previous releases from the same branch.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
>
> and are:
> * apache-ofbiz-18.12.05.zip
> * KEYS: text file with keys
> * apache-ofbiz-18.12.05.zip.asc: the detached signature file
> * apache-ofbiz-18.12.05.zip.sha512: checksum file
>
> Please download and test the zip file and its signatures (for
> instructions on testing the signatures see [*]).
>
> Vote:
>
> [ +1] release as Apache OFBiz 18.12.05
> [ -1] do not release
>
> For more details about this process please read [**].
> [*]
> https://cwiki.apache.org/confluence/display/OFBIZ/Release+Management+Guide+for+OFBiz#ReleaseManagementGuideforOFBiz-Votingonarelease
> [**] http://www.apache.org/foundation/voting.html
>

Re: [VOTE] [RELEASE] Apache OFBiz 18.12.05 (second attempt)

[Jacopo Cappellato]

+1

Jacopo


On Sun, Jan 2, 2022 at 12:29 PM Jacopo Cappellato <
jacopo.cappell...@gmail.com> wrote:

> This is the second vote thread to release a new bug fix release for the
> release18.12 branch. This new release, "Apache OFBiz 18.12.05"
> supersedes all the previous releases from the same branch.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
>
> and are:
> * apache-ofbiz-18.12.05.zip
> * KEYS: text file with keys
> * apache-ofbiz-18.12.05.zip.asc: the detached signature file
> * apache-ofbiz-18.12.05.zip.sha512: checksum file
>
> Please download and test the zip file and its signatures (for
> instructions on testing the signatures see [*]).
>
> Vote:
>
> [ +1] release as Apache OFBiz 18.12.05
> [ -1] do not release
>
> For more details about this process please read [**].
> [*]
> https://cwiki.apache.org/confluence/display/OFBIZ/Release+Management+Guide+for+OFBiz#ReleaseManagementGuideforOFBiz-Votingonarelease
> [**] http://www.apache.org/foundation/voting.html
>

[VOTE] [RELEASE] Apache OFBiz 18.12.05 (second attempt)

[Jacopo Cappellato]

This is the second vote thread to release a new bug fix release for the
release18.12 branch. This new release, "Apache OFBiz 18.12.05"
supersedes all the previous releases from the same branch.

The release files can be downloaded from here:
https://dist.apache.org/repos/dist/dev/ofbiz/

and are:
* apache-ofbiz-18.12.05.zip
* KEYS: text file with keys
* apache-ofbiz-18.12.05.zip.asc: the detached signature file
* apache-ofbiz-18.12.05.zip.sha512: checksum file

Please download and test the zip file and its signatures (for
instructions on testing the signatures see [*]).

Vote:

[ +1] release as Apache OFBiz 18.12.05
[ -1] do not release

For more details about this process please read [**].
[*]
https://cwiki.apache.org/confluence/display/OFBIZ/Release+Management+Guide+for+OFBiz#ReleaseManagementGuideforOFBiz-Votingonarelease
[**] http://www.apache.org/foundation/voting.html

Re: [VOTE] [RELEASE] Apache OFBiz 18.12.05

[Jacopo Cappellato]

This vote is now canceled (see Jacques' message).

Jacopo

On Sun, Jan 2, 2022 at 8:38 AM Jacopo Cappellato <
jacopo.cappell...@gmail.com> wrote:

> This is the vote thread to release a new bug fix release for the
> release18.12 branch. This new release, "Apache OFBiz 18.12.05"
> supersedes all the previous releases from the same branch.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
>
> and are:
> * apache-ofbiz-18.12.05.zip
> * KEYS: text file with keys
> * apache-ofbiz-18.12.05.zip.asc: the detached signature file
> * apache-ofbiz-18.12.05.zip.sha512: checksum file
>
> Please download and test the zip file and its signatures (for
> instructions on testing the signatures see [*]).
>
> Vote:
>
> [ +1] release as Apache OFBiz 18.12.05
> [ -1] do not release
>
> For more details about this process please read [**].
> [*]
> https://cwiki.apache.org/confluence/display/OFBIZ/Release+Management+Guide+for+OFBiz#ReleaseManagementGuideforOFBiz-Votingonarelease
> [**] http://www.apache.org/foundation/voting.html
>

[VOTE] [RELEASE] Apache OFBiz 18.12.05

[Jacopo Cappellato]

This is the vote thread to release a new bug fix release for the
release18.12 branch. This new release, "Apache OFBiz 18.12.05"
supersedes all the previous releases from the same branch.

The release files can be downloaded from here:
https://dist.apache.org/repos/dist/dev/ofbiz/

and are:
* apache-ofbiz-18.12.05.zip
* KEYS: text file with keys
* apache-ofbiz-18.12.05.zip.asc: the detached signature file
* apache-ofbiz-18.12.05.zip.sha512: checksum file

Please download and test the zip file and its signatures (for
instructions on testing the signatures see [*]).

Vote:

[ +1] release as Apache OFBiz 18.12.05
[ -1] do not release

For more details about this process please read [**].
[*]
https://cwiki.apache.org/confluence/display/OFBIZ/Release+Management+Guide+for+OFBiz#ReleaseManagementGuideforOFBiz-Votingonarelease
[**] http://www.apache.org/foundation/voting.html

[ANNOUNCE] Apache OFBiz 18.12.04 released

[Jacopo Cappellato]

The Apache OFBiz community is pleased to announce the new release "Apache
OFBiz 18.12.04".

Apache OFBiz® is an open source product for the automation of enterprise
processes that includes framework components and business applications.

http://ofbiz.apache.org/

"Apache OFBiz 18.12.04" is the fourth release of the 18.12 series.

For details of the changes introduced with this new version
please refer to http://ofbiz.apache.org/release-notes-18.12.04.html

The release file can be downloaded following the instructions in the OFBiz
download page:

http://ofbiz.apache.org/download.html

Re: [VOTE] [RELEASE] Apache OFBiz 18.12.04 (third attempt)

[Jacopo Cappellato]

This vote was successful with 4 binding votes from PMC members.
I am going to publish the release files, then wait a few hours for
them to propagate in the mirrors network and finally announce the
release and update the OFBiz download page and release notes; after
that, if someone could take care of updating the security page that
would be great.

Jacopo

On Sun, Dec 19, 2021 at 11:20 AM Jacopo Cappellato
 wrote:
>
> This is the third vote thread to release a new bug fix release for the
> release18.12 branch. This new release, "Apache OFBiz 18.12.04" will
> supersede all the previous releases from the same branch.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
>
> and are:
> * apache-ofbiz-18.12.04.zip
> * KEYS: text file with keys
> * apache-ofbiz-18.12.04.zip.asc: the detached signature file
> * apache-ofbiz-18.12.04.zip.sha512: checksum file
>
> Please download and test the zip file and its signatures (for
> instructions on testing the signatures see [*]).
>
> Vote:
>
> [ +1] release as Apache OFBiz 18.12.04
> [ -1] do not release
>
> For more details about this process please read [**].
> [*] 
> https://cwiki.apache.org/confluence/display/OFBIZ/Release+Management+Guide+for+OFBiz#ReleaseManagementGuideforOFBiz-Votingonarelease
> [**] http://www.apache.org/foundation/voting.html

Re: [VOTE] [RELEASE] Apache OFBiz 18.12.04 (third attempt)

[Jacopo Cappellato]

+1

Jacopo

Il Dom 19 Dic 2021, 11:20 Jacopo Cappellato 
ha scritto:

> This is the third vote thread to release a new bug fix release for the
> release18.12 branch. This new release, "Apache OFBiz 18.12.04" will
> supersede all the previous releases from the same branch.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
>
> and are:
> * apache-ofbiz-18.12.04.zip
> * KEYS: text file with keys
> * apache-ofbiz-18.12.04.zip.asc: the detached signature file
> * apache-ofbiz-18.12.04.zip.sha512: checksum file
>
> Please download and test the zip file and its signatures (for
> instructions on testing the signatures see [*]).
>
> Vote:
>
> [ +1] release as Apache OFBiz 18.12.04
> [ -1] do not release
>
> For more details about this process please read [**].
> [*]
> https://cwiki.apache.org/confluence/display/OFBIZ/Release+Management+Guide+for+OFBiz#ReleaseManagementGuideforOFBiz-Votingonarelease
> [**] http://www.apache.org/foundation/voting.html
>

[VOTE] [RELEASE] Apache OFBiz 18.12.04 (third attempt)

[Jacopo Cappellato]

This is the third vote thread to release a new bug fix release for the
release18.12 branch. This new release, "Apache OFBiz 18.12.04" will
supersede all the previous releases from the same branch.

The release files can be downloaded from here:
https://dist.apache.org/repos/dist/dev/ofbiz/

and are:
* apache-ofbiz-18.12.04.zip
* KEYS: text file with keys
* apache-ofbiz-18.12.04.zip.asc: the detached signature file
* apache-ofbiz-18.12.04.zip.sha512: checksum file

Please download and test the zip file and its signatures (for
instructions on testing the signatures see [*]).

Vote:

[ +1] release as Apache OFBiz 18.12.04
[ -1] do not release

For more details about this process please read [**].
[*] 
https://cwiki.apache.org/confluence/display/OFBIZ/Release+Management+Guide+for+OFBiz#ReleaseManagementGuideforOFBiz-Votingonarelease
[**] http://www.apache.org/foundation/voting.html

Re: [VOTE] [RELEASE] Apache OFBiz 18.12.04 (second attempt)

[Jacopo Cappellato]

This vote is canceled. We are going to start a new one soon.

Jacopo

On Sun, Dec 19, 2021 at 9:53 AM Jacopo Cappellato
 wrote:
>
> This is the second vote thread to release a new bug fix release for the
> release18.12 branch. This new release, "Apache OFBiz 18.12.04" will
> supersede all the previous releases from the same branch.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
>
> and are:
> * apache-ofbiz-18.12.04.zip
> * KEYS: text file with keys
> * apache-ofbiz-18.12.04.zip.asc: the detached signature file
> * apache-ofbiz-18.12.04.zip.sha512: checksum file
>
> Please download and test the zip file and its signatures (for
> instructions on testing the signatures see [*]).
>
> Vote:
>
> [ +1] release as Apache OFBiz 18.12.04
> [ -1] do not release
>
> For more details about this process please read [**].
> [*] 
> https://cwiki.apache.org/confluence/display/OFBIZ/Release+Management+Guide+for+OFBiz#ReleaseManagementGuideforOFBiz-Votingonarelease
> [**] http://www.apache.org/foundation/voting.html

Re: [ofbiz-framework] branch release18.12 updated: Fixed: Bug in HtmlFormMacroLibrary.ftl::makeHyperlinkString macro (OFBIZ-12468)

[Jacopo Cappellato]

Jacques,
Is it worth canceling the vote and starting a new one?

Jacopo

On Sun, Dec 19, 2021 at 10:29 AM  wrote:
>
> This is an automated email from the ASF dual-hosted git repository.
>
> jleroux pushed a commit to branch release18.12
> in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
>
>
> The following commit(s) were added to refs/heads/release18.12 by this push:
>  new ddc238a  Fixed: Bug in HtmlFormMacroLibrary.ftl::makeHyperlinkString 
> macro (OFBIZ-12468)
> ddc238a is described below
>
> commit ddc238a49d4b0a58bce91215b6392cd6e32c86f7
> Author: Jacques Le Roux 
> AuthorDate: Sun Dec 19 10:29:21 2021 +0100
>
> Fixed: Bug in HtmlFormMacroLibrary.ftl::makeHyperlinkString macro 
> (OFBIZ-12468)
>
> Fixes a typo I already fixed in trunk but forgot in demo
> ---
>  themes/common-theme/template/macro/HtmlFormMacroLibrary.ftl | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/themes/common-theme/template/macro/HtmlFormMacroLibrary.ftl 
> b/themes/common-theme/template/macro/HtmlFormMacroLibrary.ftl
> index de63a3f..8a6e04e 100644
> --- a/themes/common-theme/template/macro/HtmlFormMacroLibrary.ftl
> +++ b/themes/common-theme/template/macro/HtmlFormMacroLibrary.ftl
> @@ -695,7 +695,7 @@ Parameter: delegatorName, String, optional - name of the 
> delegator in context.
>  <#macro makeHyperlinkString hiddenFormName imgSrc title  alternate linkUrl 
> description linkStyle="" event="" action="" targetParameters="" 
> targetWindow="" confirmation="" uniqueItemName="" height="" width="" id="">
>  <#if uniqueItemName?has_content>
>  <#local params = "{presentation: layer">
> -<#if targetParameters?has_content && && !targetParameters?is_hash>
> +<#if targetParameters?has_content && !targetParameters?is_hash>
><#local parameterMap = targetParameters?eval>
><#local parameterKeys = parameterMap?keys>
><#list parameterKeys as key>

Re: [VOTE] [RELEASE] Apache OFBiz 18.12.04

[Jacopo Cappellato]

Thank you Jacques.
Can we mark as fixed in 18.12.04 the thicket OFBIZ-12470?

Jacopo


On Sun, Dec 19, 2021 at 9:09 AM Jacques Le Roux
 wrote:
>
> It's now OK for both trunk and R18.
>
> I have to check why it worked for stable demo. There is an update issue 
> there, not a problem for releasing
>
> Le 19/12/2021 à 08:32, Jacques Le Roux a écrit :
> > Hi Jacopo,
> >
> > Please wait, there is an issue with this last version of Log4j:
> > java.lang.NoClassDefFoundError: org/apache/logging/log4j/core/util/SetUtils
> >
> > Checking that...
> >
> > Jacques
> >
> > Le 19/12/2021 à 08:29, Jacques Le Roux a écrit :
> >> +1
> >>
> >> Jacques
> >>
> >> Le 19/12/2021 à 08:19, Jacopo Cappellato a écrit :
> >>> I think we should cancel this vote and start a new one.
> >>>
> >>> Jacopo
> >>>
> >>> On Sun, Dec 19, 2021 at 3:32 AM Jacques Le Roux
> >>>  wrote:
> >>>> Hi Jacopo, All,
> >>>>
> >>>> Maybe better to integrate OFBIZ-12470: "[SECURITY] CVE-2021-45105: 
> >>>> Apache Log4j2" in 18.12.04, or create 18.12.05?
> >>>>
> >>>> Thanks
> >>>>
> >>>> Jacques
> >>>>
> >>>> Le 17/12/2021 à 10:32, Jacopo Cappellato a écrit :
> >>>>> This is the vote thread to release a new bug fix release for the
> >>>>> release18.12 branch. This new release, "Apache OFBiz 18.12.04" will
> >>>>> supersede all the previous releases from the same branch.
> >>>>>
> >>>>> The release files can be downloaded from here:
> >>>>>
> >>>>> https://dist.apache.org/repos/dist/dev/ofbiz/
> >>>>>
> >>>>> and are:
> >>>>> * apache-ofbiz-18.12.04.zip
> >>>>> * KEYS: text file with keys
> >>>>> * apache-ofbiz-18.12.04.zip.asc: the detached signature file
> >>>>> * apache-ofbiz-18.12.04.zip.sha512: checksum file
> >>>>>
> >>>>> Please download and test the zip file and its signatures (for
> >>>>> instructions on testing the signatures see [*]).
> >>>>>
> >>>>> Vote:
> >>>>>
> >>>>> [ +1] release as Apache OFBiz 18.12.04
> >>>>> [ -1] do not release
> >>>>>
> >>>>> For more details about this process please read [**].
> >>>>> [*] 
> >>>>> https://cwiki.apache.org/confluence/display/OFBIZ/Release+Management+Guide+for+OFBiz#ReleaseManagementGuideforOFBiz-Votingonarelease
> >>>>> [**] http://www.apache.org/foundation/voting.html
> >>

[VOTE] [RELEASE] Apache OFBiz 18.12.04 (second attempt)

[Jacopo Cappellato]

This is the second vote thread to release a new bug fix release for the
release18.12 branch. This new release, "Apache OFBiz 18.12.04" will
supersede all the previous releases from the same branch.

The release files can be downloaded from here:
https://dist.apache.org/repos/dist/dev/ofbiz/

and are:
* apache-ofbiz-18.12.04.zip
* KEYS: text file with keys
* apache-ofbiz-18.12.04.zip.asc: the detached signature file
* apache-ofbiz-18.12.04.zip.sha512: checksum file

Please download and test the zip file and its signatures (for
instructions on testing the signatures see [*]).

Vote:

[ +1] release as Apache OFBiz 18.12.04
[ -1] do not release

For more details about this process please read [**].
[*] 
https://cwiki.apache.org/confluence/display/OFBIZ/Release+Management+Guide+for+OFBiz#ReleaseManagementGuideforOFBiz-Votingonarelease
[**] http://www.apache.org/foundation/voting.html

Re: [VOTE] [RELEASE] Apache OFBiz 18.12.04

[Jacopo Cappellato]

I think we should cancel this vote and start a new one.

Jacopo

On Sun, Dec 19, 2021 at 3:32 AM Jacques Le Roux
 wrote:
>
> Hi Jacopo, All,
>
> Maybe better to integrate OFBIZ-12470: "[SECURITY] CVE-2021-45105: Apache 
> Log4j2" in 18.12.04, or create 18.12.05?
>
> Thanks
>
> Jacques
>
> Le 17/12/2021 à 10:32, Jacopo Cappellato a écrit :
> > This is the vote thread to release a new bug fix release for the
> > release18.12 branch. This new release, "Apache OFBiz 18.12.04" will
> > supersede all the previous releases from the same branch.
> >
> > The release files can be downloaded from here:
> >
> > https://dist.apache.org/repos/dist/dev/ofbiz/
> >
> > and are:
> > * apache-ofbiz-18.12.04.zip
> > * KEYS: text file with keys
> > * apache-ofbiz-18.12.04.zip.asc: the detached signature file
> > * apache-ofbiz-18.12.04.zip.sha512: checksum file
> >
> > Please download and test the zip file and its signatures (for
> > instructions on testing the signatures see [*]).
> >
> > Vote:
> >
> > [ +1] release as Apache OFBiz 18.12.04
> > [ -1] do not release
> >
> > For more details about this process please read [**].
> > [*] 
> > https://cwiki.apache.org/confluence/display/OFBIZ/Release+Management+Guide+for+OFBiz#ReleaseManagementGuideforOFBiz-Votingonarelease
> > [**] http://www.apache.org/foundation/voting.html
>

Re: Removing from Jira the some of the unnecessary "versions"

[Jacopo Cappellato]

I have now cleaned up the versions in Jira.

Thank you

Jacopo

On Fri, Dec 17, 2021 at 3:29 PM Jacopo Cappellato
 wrote:
>
> Jacques,
>
> A few minutes ago I updated and expanded the notes about Jira version
> handling when a new branch is created.
>
> Thanks
>
> Jacopo
>
> On Fri, Dec 17, 2021 at 11:00 AM Jacques Le Roux
>  wrote:
> >
> > +1
> >
> > So we need to update the "Release Plan" wiki page to note that "next 
> > releaseS" must be created when releasing current ones. Thanks for having 
> > done it
> > for 18.12.04, was very convenient this morning :)
> >
> > Jacques
> >
> > Le 17/12/2021 à 10:30, Jacopo Cappellato a écrit :
> > > Hi all,
> > >
> > > I think we should remove some "versions" from Jira because they are
> > > redundant and may cause confusion to users and contributors.
> > >
> > > I am specifically talking about:
> > > "Release branch 17.12" and "Release branch 18.12": if bugs or fixes
> > > concern a specific branch (rather than a release) then they should be
> > > assigned to the unreleased latest version (e.g. currently "18.12.04",
> > > that is the next release, instead of "release branch 18.12")
> > > "Trunk": if a bug or a fix concerns the trunk (rather than a release)
> > > then they should be assigned to the "Upcoming branch" version
> > >
> > > Jacopo
> >

Re: [VOTE] [RELEASE] Apache OFBiz 18.12.04

[Jacopo Cappellato]

+1

Jacopo

PS: we need one more vote from a PMC member to make the vote successful.

On Fri, Dec 17, 2021 at 10:32 AM Jacopo Cappellato
 wrote:
>
> This is the vote thread to release a new bug fix release for the
> release18.12 branch. This new release, "Apache OFBiz 18.12.04" will
> supersede all the previous releases from the same branch.
>
> The release files can be downloaded from here:
>
> https://dist.apache.org/repos/dist/dev/ofbiz/
>
> and are:
> * apache-ofbiz-18.12.04.zip
> * KEYS: text file with keys
> * apache-ofbiz-18.12.04.zip.asc: the detached signature file
> * apache-ofbiz-18.12.04.zip.sha512: checksum file
>
> Please download and test the zip file and its signatures (for
> instructions on testing the signatures see [*]).
>
> Vote:
>
> [ +1] release as Apache OFBiz 18.12.04
> [ -1] do not release
>
> For more details about this process please read [**].
> [*] 
> https://cwiki.apache.org/confluence/display/OFBIZ/Release+Management+Guide+for+OFBiz#ReleaseManagementGuideforOFBiz-Votingonarelease
> [**] http://www.apache.org/foundation/voting.html

Re: Removing from Jira the some of the unnecessary "versions"

[Jacopo Cappellato]

Jacques,

A few minutes ago I updated and expanded the notes about Jira version
handling when a new branch is created.

Thanks

Jacopo

On Fri, Dec 17, 2021 at 11:00 AM Jacques Le Roux
 wrote:
>
> +1
>
> So we need to update the "Release Plan" wiki page to note that "next 
> releaseS" must be created when releasing current ones. Thanks for having done 
> it
> for 18.12.04, was very convenient this morning :)
>
> Jacques
>
> Le 17/12/2021 à 10:30, Jacopo Cappellato a écrit :
> > Hi all,
> >
> > I think we should remove some "versions" from Jira because they are
> > redundant and may cause confusion to users and contributors.
> >
> > I am specifically talking about:
> > "Release branch 17.12" and "Release branch 18.12": if bugs or fixes
> > concern a specific branch (rather than a release) then they should be
> > assigned to the unreleased latest version (e.g. currently "18.12.04",
> > that is the next release, instead of "release branch 18.12")
> > "Trunk": if a bug or a fix concerns the trunk (rather than a release)
> > then they should be assigned to the "Upcoming branch" version
> >
> > Jacopo
>

Re: Removing from Jira the some of the unnecessary "versions"

[Jacopo Cappellato]

Hi Jacques,

the note about Jira version is already in the wiki page:

"In Jira, mark the version as "released" and create a new version for
the next release"

I think I added that note the last time I edited the page, a few weeks ago.

Jacopo

On Fri, Dec 17, 2021 at 11:00 AM Jacques Le Roux
 wrote:
>
> +1
>
> So we need to update the "Release Plan" wiki page to note that "next 
> releaseS" must be created when releasing current ones. Thanks for having done 
> it
> for 18.12.04, was very convenient this morning :)
>
> Jacques
>
> Le 17/12/2021 à 10:30, Jacopo Cappellato a écrit :
> > Hi all,
> >
> > I think we should remove some "versions" from Jira because they are
> > redundant and may cause confusion to users and contributors.
> >
> > I am specifically talking about:
> > "Release branch 17.12" and "Release branch 18.12": if bugs or fixes
> > concern a specific branch (rather than a release) then they should be
> > assigned to the unreleased latest version (e.g. currently "18.12.04",
> > that is the next release, instead of "release branch 18.12")
> > "Trunk": if a bug or a fix concerns the trunk (rather than a release)
> > then they should be assigned to the "Upcoming branch" version
> >
> > Jacopo
>

[VOTE] [RELEASE] Apache OFBiz 18.12.04

[Jacopo Cappellato]

This is the vote thread to release a new bug fix release for the
release18.12 branch. This new release, "Apache OFBiz 18.12.04" will
supersede all the previous releases from the same branch.

The release files can be downloaded from here:

https://dist.apache.org/repos/dist/dev/ofbiz/

and are:
* apache-ofbiz-18.12.04.zip
* KEYS: text file with keys
* apache-ofbiz-18.12.04.zip.asc: the detached signature file
* apache-ofbiz-18.12.04.zip.sha512: checksum file

Please download and test the zip file and its signatures (for
instructions on testing the signatures see [*]).

Vote:

[ +1] release as Apache OFBiz 18.12.04
[ -1] do not release

For more details about this process please read [**].
[*] 
https://cwiki.apache.org/confluence/display/OFBIZ/Release+Management+Guide+for+OFBiz#ReleaseManagementGuideforOFBiz-Votingonarelease
[**] http://www.apache.org/foundation/voting.html

Removing from Jira the some of the unnecessary "versions"

[Jacopo Cappellato]

Hi all,

I think we should remove some "versions" from Jira because they are
redundant and may cause confusion to users and contributors.

I am specifically talking about:
"Release branch 17.12" and "Release branch 18.12": if bugs or fixes
concern a specific branch (rather than a release) then they should be
assigned to the unreleased latest version (e.g. currently "18.12.04",
that is the next release, instead of "release branch 18.12")
"Trunk": if a bug or a fix concerns the trunk (rather than a release)
then they should be assigned to the "Upcoming branch" version

Jacopo

Re: [ofbiz-framework] branch release18.12 updated: Improved: Apache Log4j2 (OFBIZ-12449)

[Jacopo Cappellato]

I think it would be a good idea to prepare a new release with this change. WDYT?

Jacopo

On Tue, Dec 14, 2021 at 12:30 PM  wrote:
>
> This is an automated email from the ASF dual-hosted git repository.
>
> jleroux pushed a commit to branch release18.12
> in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
>
>
> The following commit(s) were added to refs/heads/release18.12 by this push:
>  new e83559d  Improved: Apache Log4j2 (OFBIZ-12449)
> e83559d is described below
>
> commit e83559d1516f69b127552a58c1e7fb288030abf2
> Author: Jacques Le Roux 
> AuthorDate: Tue Dec 14 12:28:38 2021 +0100
>
> Improved: Apache Log4j2 (OFBIZ-12449)
>
> Updates log4j2 from 2.15.0 to 2.16.0 because of
> https://lists.apache.org/thread/d6v4r6nosxysyq9rvnr779336yf0woz4
>
> It's not a security issue, I lazily use OFBIZ-12449 because it can improve
> security even if it's not necessary (dixit the announce)
> ---
>  build.gradle | 12 ++--
>  1 file changed, 6 insertions(+), 6 deletions(-)
>
> diff --git a/build.gradle b/build.gradle
> index f8efad1..b6772f9 100644
> --- a/build.gradle
> +++ b/build.gradle
> @@ -190,7 +190,7 @@ dependencies {
>  compile 'org.apache.geronimo.components:geronimo-transaction:3.1.4'
>  compile 'org.apache.geronimo.specs:geronimo-jms_1.1_spec:1.1.1'
>  compile 'org.apache.httpcomponents:httpclient-cache:4.5.6'
> -compile 'org.apache.logging.log4j:log4j-api:2.15.0' // the API of log4j 2
> +compile 'org.apache.logging.log4j:log4j-api:2.16.0' // the API of log4j 2
>  compile 'org.apache.poi:poi:3.17'
>  compile 'org.apache.pdfbox:pdfbox:2.0.24'
>  compile 'org.apache.shiro:shiro-core:1.4.0'
> @@ -231,11 +231,11 @@ dependencies {
>  runtime 'org.apache.axis2:axis2-transport-local:1.7.8'
>  runtime 'org.apache.derby:derby:10.14.2.0'
>  runtime 'org.apache.geronimo.specs:geronimo-jaxrpc_1.1_spec:1.1'
> -runtime 'org.apache.logging.log4j:log4j-1.2-api:2.15.0' // for external 
> jars using the old log4j1.2: routes logging to log4j 2
> -runtime 'org.apache.logging.log4j:log4j-core:2.15.0' // the 
> implementation of the log4j 2 API
> -runtime 'org.apache.logging.log4j:log4j-jul:2.15.0' // for external jars 
> using the java.util.logging: routes logging to log4j 2
> -runtime 'org.apache.logging.log4j:log4j-slf4j-impl:2.15.0' // for 
> external jars using slf4j: routes logging to log4j 2
> -runtime 'org.apache.logging.log4j:log4j-jcl:2.15.0' // need to constrain 
> to version to avoid classpath conflict (ReflectionUtil)
> +runtime 'org.apache.logging.log4j:log4j-1.2-api:2.16.0' // for external 
> jars using the old log4j1.2: routes logging to log4j 2
> +runtime 'org.apache.logging.log4j:log4j-core:2.16.0' // the 
> implementation of the log4j 2 API
> +runtime 'org.apache.logging.log4j:log4j-jul:2.16.0' // for external jars 
> using the java.util.logging: routes logging to log4j 2
> +runtime 'org.apache.logging.log4j:log4j-slf4j-impl:2.16.0' // for 
> external jars using slf4j: routes logging to log4j 2
> +runtime 'org.apache.logging.log4j:log4j-jcl:2.16.0' // need to constrain 
> to version to avoid classpath conflict (ReflectionUtil)
>  runtime 'org.codeartisans.thirdparties.swing:batik-all:1.8pre-r1084380'
>
>  // plugin libs

Re: svn commit: r51352 - /release/ofbiz/README.html

[Jacopo Cappellato]

The website and tags have been updated, the announcement sent (I was
just waiting to let the release files propagate through the mirrors
network, usually we wait for 48 hours but this time is a bit special).

Jacopo

On Mon, Dec 13, 2021 at 8:15 PM Jacopo Cappellato
 wrote:
>
> yes, please prepare the changes for the security page, thanks!
>
> On Mon, Dec 13, 2021 at 5:13 PM Jacques Le Roux
>  wrote:
> >
> > I'll also do the security page but not "Release Notes 18.12.03"
> >
> > Le 13/12/2021 à 17:04, Jacques Le Roux a écrit :
> > > Hi Jacopo, All,
> > >
> > > I'm working on updating download and (later) developers pages on site...
> > >
> > > Also doap_OFBiz.rdf
> > >
> > > Jacques
> > >
> > > Le 12/12/2021 à 19:46, jaco...@apache.org a écrit :
> > >> Author: jacopoc
> > >> Date: Sun Dec 12 18:46:15 2021
> > >> New Revision: 51352
> > >>
> > >> Log:
> > >> Add to history log the new release 18.12.03
> > >>
> > >> Modified:
> > >>  release/ofbiz/README.html
> > >>
> > >> Modified: release/ofbiz/README.html
> > >> ==
> > >> --- release/ofbiz/README.html (original)
> > >> +++ release/ofbiz/README.html Sun Dec 12 18:46:15 2021
> > >> @@ -5,6 +5,7 @@ Note: old releases can be downloaded fro
> > >>   18.12 series
> > >>   This series has been stabilized with bug fixes since December 2018.
> > >>   
> > >> +apache-ofbiz-18.12.03.zip - Released in December 2021.  > >> target="external" 
> > >> href="http://ofbiz.apache.org/release-notes-18.12.03.html;>Release
> > >> notes.
> > >>   apache-ofbiz-18.12.02.zip - Released in November 2021.  > >> target="external"
> > >> href="http://ofbiz.apache.org/release-notes-18.12.02.html;>Release 
> > >> notes.
> > >>   apache-ofbiz-18.12.01.zip - Released in October 2021.  > >> target="external" 
> > >> href="http://ofbiz.apache.org/release-notes-18.12.01.html;>Release
> > >> notes.
> > >>   
> > >>
> > >>

[ANNOUNCE] Apache OFBiz 18.12.03 released

[Jacopo Cappellato]

The Apache OFBiz community is pleased to announce the new release "Apache
OFBiz 18.12.03".

Apache OFBiz® is an open source product for the automation of enterprise
processes that includes framework components and business applications.

http://ofbiz.apache.org/

"Apache OFBiz 18.12.03" is the third release of the 18.12 series.

For more details of the changes introduced with this new version
please refer to http://ofbiz.apache.org/release-notes-18.12.03.html

The release file can be downloaded following the instructions in the OFBiz
download page:

http://ofbiz.apache.org/download.html

Re: svn commit: r51352 - /release/ofbiz/README.html

[Jacopo Cappellato]

yes, please prepare the changes for the security page, thanks!

On Mon, Dec 13, 2021 at 5:13 PM Jacques Le Roux
 wrote:
>
> I'll also do the security page but not "Release Notes 18.12.03"
>
> Le 13/12/2021 à 17:04, Jacques Le Roux a écrit :
> > Hi Jacopo, All,
> >
> > I'm working on updating download and (later) developers pages on site...
> >
> > Also doap_OFBiz.rdf
> >
> > Jacques
> >
> > Le 12/12/2021 à 19:46, jaco...@apache.org a écrit :
> >> Author: jacopoc
> >> Date: Sun Dec 12 18:46:15 2021
> >> New Revision: 51352
> >>
> >> Log:
> >> Add to history log the new release 18.12.03
> >>
> >> Modified:
> >>  release/ofbiz/README.html
> >>
> >> Modified: release/ofbiz/README.html
> >> ==
> >> --- release/ofbiz/README.html (original)
> >> +++ release/ofbiz/README.html Sun Dec 12 18:46:15 2021
> >> @@ -5,6 +5,7 @@ Note: old releases can be downloaded fro
> >>   18.12 series
> >>   This series has been stabilized with bug fixes since December 2018.
> >>   
> >> +apache-ofbiz-18.12.03.zip - Released in December 2021.  >> target="external" 
> >> href="http://ofbiz.apache.org/release-notes-18.12.03.html;>Release
> >> notes.
> >>   apache-ofbiz-18.12.02.zip - Released in November 2021.  >> target="external"
> >> href="http://ofbiz.apache.org/release-notes-18.12.02.html;>Release 
> >> notes.
> >>   apache-ofbiz-18.12.01.zip - Released in October 2021.  >> target="external" 
> >> href="http://ofbiz.apache.org/release-notes-18.12.01.html;>Release
> >> notes.
> >>   
> >>
> >>

Re: svn commit: r51352 - /release/ofbiz/README.html

[Jacopo Cappellato]

Hi Jacques,

I can push all these changes (apart from DOAP) as soon as we will
announce the release (I have them ready); including the tag

Jacopo

On Mon, Dec 13, 2021 at 5:13 PM Jacques Le Roux
 wrote:
>
> I'll also do the security page but not "Release Notes 18.12.03"
>
> Le 13/12/2021 à 17:04, Jacques Le Roux a écrit :
> > Hi Jacopo, All,
> >
> > I'm working on updating download and (later) developers pages on site...
> >
> > Also doap_OFBiz.rdf
> >
> > Jacques
> >
> > Le 12/12/2021 à 19:46, jaco...@apache.org a écrit :
> >> Author: jacopoc
> >> Date: Sun Dec 12 18:46:15 2021
> >> New Revision: 51352
> >>
> >> Log:
> >> Add to history log the new release 18.12.03
> >>
> >> Modified:
> >>  release/ofbiz/README.html
> >>
> >> Modified: release/ofbiz/README.html
> >> ==
> >> --- release/ofbiz/README.html (original)
> >> +++ release/ofbiz/README.html Sun Dec 12 18:46:15 2021
> >> @@ -5,6 +5,7 @@ Note: old releases can be downloaded fro
> >>   18.12 series
> >>   This series has been stabilized with bug fixes since December 2018.
> >>   
> >> +apache-ofbiz-18.12.03.zip - Released in December 2021.  >> target="external" 
> >> href="http://ofbiz.apache.org/release-notes-18.12.03.html;>Release
> >> notes.
> >>   apache-ofbiz-18.12.02.zip - Released in November 2021.  >> target="external"
> >> href="http://ofbiz.apache.org/release-notes-18.12.02.html;>Release 
> >> notes.
> >>   apache-ofbiz-18.12.01.zip - Released in October 2021.  >> target="external" 
> >> href="http://ofbiz.apache.org/release-notes-18.12.01.html;>Release
> >> notes.
> >>   
> >>
> >>

[VOTE][RESULT] Apache OFBiz 18.12.03

[Jacopo Cappellato]

Thank you all,

The vote was successful with 3 positive votes from PMC members and no
negative votes.

I am going to proceed with the steps to publish the release.

Jacopo

Re: [VOTE] Apache OFBiz 18.12.03

[Jacopo Cappellato]

+1

Jacopo

On Sun, Dec 12, 2021 at 1:14 PM Jacopo Cappellato
 wrote:
>
> This is the vote thread to publish "Apache OFBiz 18.12.03", the third
> release from the release18.12 branch.
>
> The release files can be downloaded from here:
> https://dist.apache.org/repos/dist/dev/ofbiz/
> and are:
> * apache-ofbiz-18.12.03.zip
> * KEYS: text file with keys
> * apache-ofbiz-18.12.03.zip.asc: the detached signature file
> * apache-ofbiz-18.12.03.zip.sha512: checksum file
>
> Please download and test the zip file and its signatures (for
> instructions on testing the signatures see
> http://www.apache.org/info/verification.html).
>
> Vote:
> [ +1] release as Apache OFBiz 18.12.03
> [ -1] do not release
>
> For more details about this process please refer to
> http://www.apache.org/foundation/voting.html
>
> Best Regards,
>
> Jacopo

Re: Release 18.12.03

[Jacopo Cappellato]

thanks, I have started the release vote

Jacopo

On Sun, Dec 12, 2021 at 12:10 PM Nicolas Malin  wrote:
>
> No it's me, I'm to speed this morning and I made some link error ^^'
>
> The back port is done :)
>
> Nicolas
>
> On 12/12/2021 11:48, Jacopo Cappellato wrote:
> > Hi Nicolas,
> >
> > please ignore my previous email, I got now that you are going to
> > backport two different tickets.
> >
> > Jacopo
> >
> > On Sun, Dec 12, 2021 at 11:46 AM Jacopo Cappellato
> >  wrote:
> >> Hi Nicola,
> >>
> >> it seems to me that Jacques already backported the fix to 18.12 with
> >> commit bccf14066cb2ca6fc5861eb457d06a2d0429d00b
> >> Please let me know if anything else needs to be done.
> >>
> >> Thanks,
> >>
> >> Jacopo
> >>
> >> On Sun, Dec 12, 2021 at 11:37 AM Nicolas Malin  
> >> wrote:
> >>> +1
> >>> Jacopo just wait one hour before create I will backport a trunk fix to
> >>> 18.12 (OFBIZ-12437, OFBIZ-10695)
> >>>
> >>> Thanks,
> >>> Nicolas
> >>>
> >>> On 12/12/2021 11:18, Jacopo Cappellato wrote:
> >>>> thank you Jacques,
> >>>>
> >>>> I am preparing the release files and will start the vote today; it may
> >>>> be a good idea to close the vote and proceed with the release as soon
> >>>> as we have enough votes to feel confident (and of course at least 3
> >>>> binding votes from PMC members), so please stay tuned.
> >>>>
> >>>> Jacopo
> >>>>
> >>>> On Sat, Dec 11, 2021 at 6:20 PM Jacques Le Roux
> >>>>  wrote:
> >>>>> Hi,
> >>>>>
> >>>>> With https://issues.apache.org/jira/browse/OFBIZ-12449 we need to 
> >>>>> release 18.12.03 ASAP
> >>>>>
> >>>>> TIA
> >>>>>
> >>>>> Jacques
> >>>>>
>

[VOTE] Apache OFBiz 18.12.03

[Jacopo Cappellato]

This is the vote thread to publish "Apache OFBiz 18.12.03", the third
release from the release18.12 branch.

The release files can be downloaded from here:
https://dist.apache.org/repos/dist/dev/ofbiz/
and are:
* apache-ofbiz-18.12.03.zip
* KEYS: text file with keys
* apache-ofbiz-18.12.03.zip.asc: the detached signature file
* apache-ofbiz-18.12.03.zip.sha512: checksum file

Please download and test the zip file and its signatures (for
instructions on testing the signatures see
http://www.apache.org/info/verification.html).

Vote:
[ +1] release as Apache OFBiz 18.12.03
[ -1] do not release

For more details about this process please refer to
http://www.apache.org/foundation/voting.html

Best Regards,

Jacopo

Re: Release 18.12.03

[Jacopo Cappellato]

Hi Nicolas,

please ignore my previous email, I got now that you are going to
backport two different tickets.

Jacopo

On Sun, Dec 12, 2021 at 11:46 AM Jacopo Cappellato
 wrote:
>
> Hi Nicola,
>
> it seems to me that Jacques already backported the fix to 18.12 with
> commit bccf14066cb2ca6fc5861eb457d06a2d0429d00b
> Please let me know if anything else needs to be done.
>
> Thanks,
>
> Jacopo
>
> On Sun, Dec 12, 2021 at 11:37 AM Nicolas Malin  
> wrote:
> >
> > +1
> > Jacopo just wait one hour before create I will backport a trunk fix to
> > 18.12 (OFBIZ-12437, OFBIZ-10695)
> >
> > Thanks,
> > Nicolas
> >
> > On 12/12/2021 11:18, Jacopo Cappellato wrote:
> > > thank you Jacques,
> > >
> > > I am preparing the release files and will start the vote today; it may
> > > be a good idea to close the vote and proceed with the release as soon
> > > as we have enough votes to feel confident (and of course at least 3
> > > binding votes from PMC members), so please stay tuned.
> > >
> > > Jacopo
> > >
> > > On Sat, Dec 11, 2021 at 6:20 PM Jacques Le Roux
> > >  wrote:
> > >> Hi,
> > >>
> > >> With https://issues.apache.org/jira/browse/OFBIZ-12449 we need to 
> > >> release 18.12.03 ASAP
> > >>
> > >> TIA
> > >>
> > >> Jacques
> > >>
> >

Re: Release 18.12.03

[Jacopo Cappellato]

Hi Nicola,

it seems to me that Jacques already backported the fix to 18.12 with
commit bccf14066cb2ca6fc5861eb457d06a2d0429d00b
Please let me know if anything else needs to be done.

Thanks,

Jacopo

On Sun, Dec 12, 2021 at 11:37 AM Nicolas Malin  wrote:
>
> +1
> Jacopo just wait one hour before create I will backport a trunk fix to
> 18.12 (OFBIZ-12437, OFBIZ-10695)
>
> Thanks,
> Nicolas
>
> On 12/12/2021 11:18, Jacopo Cappellato wrote:
> > thank you Jacques,
> >
> > I am preparing the release files and will start the vote today; it may
> > be a good idea to close the vote and proceed with the release as soon
> > as we have enough votes to feel confident (and of course at least 3
> > binding votes from PMC members), so please stay tuned.
> >
> > Jacopo
> >
> > On Sat, Dec 11, 2021 at 6:20 PM Jacques Le Roux
> >  wrote:
> >> Hi,
> >>
> >> With https://issues.apache.org/jira/browse/OFBIZ-12449 we need to release 
> >> 18.12.03 ASAP
> >>
> >> TIA
> >>
> >> Jacques
> >>
>

Re: Release 18.12.03

[Jacopo Cappellato]

thank you Jacques,

I am preparing the release files and will start the vote today; it may
be a good idea to close the vote and proceed with the release as soon
as we have enough votes to feel confident (and of course at least 3
binding votes from PMC members), so please stay tuned.

Jacopo

On Sat, Dec 11, 2021 at 6:20 PM Jacques Le Roux
 wrote:
>
> Hi,
>
> With https://issues.apache.org/jira/browse/OFBIZ-12449 we need to release 
> 18.12.03 ASAP
>
> TIA
>
> Jacques
>

Re: [ANNOUNCE] Apache OFBiz 18.12.02 released

[Jacopo Cappellato]

Good point.

I have added a reference to the 18.12.01 release notes under the
"Release note" section of the download page.

Jacopo

On Fri, Nov 26, 2021 at 8:55 AM Pierre Smits  wrote:
>
> Hi Jacopo, All,
>
> Thank you Jacopo.
> It is a pity though that so shortly after the release of 18.12.01,
> potential adopters will have a hard time finding what is in the total
> package (improvements and bugfixes) since the start of releasing from the
> 18 branch.
>
> Met vriendelijke groet,
>
> Pierre Smits
> *Proud* *contributor** of* Apache OFBiz <https://ofbiz.apache.org/> since
> 2008 (without privileges)
> Proud contributor to the ASF since 2006
>
> *Apache Directory <https://directory.apache.org>, PMC Member*
>
>
> On Wed, Nov 24, 2021 at 11:50 AM Jacopo Cappellato 
> wrote:
>
> > The Apache OFBiz community is pleased to announce the new release "Apache
> > OFBiz 18.12.02".
> >
> > Apache OFBiz® is an open source product for the automation of enterprise
> > processes that includes framework components and business applications.
> >
> > http://ofbiz.apache.org/
> >
> > "Apache OFBiz 18.12.02" is the second release of the 18.12 series.
> >
> > For more details of the changes introduced with this new version
> > please refer to http://ofbiz.apache.org/release-notes-18.12.02.html
> >
> > The release file can be downloaded following the instructions in the OFBiz
> > download page:
> >
> > http://ofbiz.apache.org/download.html
> >

[ANNOUNCE] Apache OFBiz 18.12.02 released

[Jacopo Cappellato]

The Apache OFBiz community is pleased to announce the new release "Apache
OFBiz 18.12.02".

Apache OFBiz® is an open source product for the automation of enterprise
processes that includes framework components and business applications.

http://ofbiz.apache.org/

"Apache OFBiz 18.12.02" is the second release of the 18.12 series.

For more details of the changes introduced with this new version
please refer to http://ofbiz.apache.org/release-notes-18.12.02.html

The release file can be downloaded following the instructions in the OFBiz
download page:

http://ofbiz.apache.org/download.html