Re: [VOTE] - Release Apache Santuario - XML Security for Java 2.2.5

2023-08-18 Thread Colm O hEigeartaigh 
With 6 +1 votes, and at least 3 binding +1 votes, and no other votes
this vote passes. I'll do the release.

Colm.

On Wed, Aug 16, 2023 at 9:27 PM Alessio Soldano  wrote:
>
> +1, thanks
>
> On Tue, Aug 15, 2023 at 1:36 PM Colm O hEigeartaigh  
> wrote:
>>
>> This is a vote to release Apache Santuario - XML Security for Java
>> 2.2.5. It just contains some dependency updates to fix CVEs.
>>
>> Artifacts: 
>> https://repository.apache.org/content/repositories/orgapachesantuario-1041/
>> Git tag: 
>> https://github.com/apache/santuario-xml-security-java/releases/tag/xmlsec-2.2.5
>> Issues fixed: 
>> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311231=12351693
>>
>> +1 from me.
>>
>> Colm.
>>

Re: [VOTE] - Release Apache Santuario - XML Security for Java 2.2.5

2023-08-16 Thread Alessio Soldano 
+1, thanks

On Tue, Aug 15, 2023 at 1:36 PM Colm O hEigeartaigh 
wrote:

> This is a vote to release Apache Santuario - XML Security for Java
> 2.2.5. It just contains some dependency updates to fix CVEs.
>
> Artifacts:
> https://repository.apache.org/content/repositories/orgapachesantuario-1041/
> Git tag:
> https://github.com/apache/santuario-xml-security-java/releases/tag/xmlsec-2.2.5
> Issues fixed:
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311231=12351693
>
> +1 from me.
>
> Colm.
>
>

Re: [VOTE] - Release Apache Santuario - XML Security for Java 2.2.5

2023-08-16 Thread Jim Ma 
+1

On Tue, Aug 15, 2023 at 7:30 PM Colm O hEigeartaigh 
wrote:

> This is a vote to release Apache Santuario - XML Security for Java
> 2.2.5. It just contains some dependency updates to fix CVEs.
>
> Artifacts:
> https://repository.apache.org/content/repositories/orgapachesantuario-1041/
> Git tag:
> https://github.com/apache/santuario-xml-security-java/releases/tag/xmlsec-2.2.5
> Issues fixed:
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311231=12351693
>
> +1 from me.
>
> Colm.
>

Re: [VOTE] - Release Apache Santuario - XML Security for Java 2.2.5

2023-08-16 Thread Sean Mullan 

+1

--Sean

On 8/16/23 2:50 AM, Colm O hEigeartaigh wrote:

Hi Scott,

You can review all changes between 2.2.5 and 2.2.4 here:
https://github.com/apache/santuario-xml-security-java/compare/xmlsec-2.2.4...xmlsec-2.2.5

Essentially it's just Xalan, BouncyCastle, Woodstox and Jetty upgrades.

Colm.

On Tue, Aug 15, 2023 at 3:34 PM Cantor, Scott  wrote:



Issues fixed:


This was empty: could you update Jira to capture what's been changed?

All I saw in git seemed to be updating BC (which I'm aware had some CVEs, so 
that might be what you meant).

-- Scott

Re: [VOTE] - Release Apache Santuario - XML Security for Java 2.2.5

2023-08-16 Thread Daniel Kulp 
+1

Dan


> On Aug 15, 2023, at 7:30 AM, Colm O hEigeartaigh  wrote:
> 
> This is a vote to release Apache Santuario - XML Security for Java
> 2.2.5. It just contains some dependency updates to fix CVEs.
> 
> Artifacts: 
> https://repository.apache.org/content/repositories/orgapachesantuario-1041/
> Git tag: 
> https://github.com/apache/santuario-xml-security-java/releases/tag/xmlsec-2.2.5
> Issues fixed: 
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311231=12351693
> 
> +1 from me.
> 
> Colm.

-- 
Daniel Kulp
dk...@apache.org 
Talend - https://talend.com

Re: [VOTE] - Release Apache Santuario - XML Security for Java 2.2.5

2023-08-16 Thread Cantor, Scott 
+1 from me

-- Scott

Re: [VOTE] - Release Apache Santuario - XML Security for Java 2.2.5

2023-08-16 Thread Colm O hEigeartaigh 
Hi Scott,

You can review all changes between 2.2.5 and 2.2.4 here:
https://github.com/apache/santuario-xml-security-java/compare/xmlsec-2.2.4...xmlsec-2.2.5

Essentially it's just Xalan, BouncyCastle, Woodstox and Jetty upgrades.

Colm.

On Tue, Aug 15, 2023 at 3:34 PM Cantor, Scott  wrote:
>
> > Issues fixed:
>
> This was empty: could you update Jira to capture what's been changed?
>
> All I saw in git seemed to be updating BC (which I'm aware had some CVEs, so 
> that might be what you meant).
>
> -- Scott
>
>

Re: [VOTE] - Release Apache Santuario - XML Security for Java 2.2.5

2023-08-15 Thread Cantor, Scott 
> Issues fixed: 

This was empty: could you update Jira to capture what's been changed?

All I saw in git seemed to be updating BC (which I'm aware had some CVEs, so 
that might be what you meant).

-- Scott