[RESULT] [VOTE] Release Apache Sling XSS Protection Bundle version 1.0.0
Hi, The vote has passed with the following result : +1 (binding): Bertrand Delacretaz, Robert Munteanu, Carsten Ziegeler I will copy this release to the Sling dist directory (if my account allows me, otherwise I'll ask someone from the PMC to do this) and promote the artifacts to the central Maven repository. Thanks, Radu
Re: [RESULT] [VOTE] Release Apache Sling XSS Protection Bundle version 1.0.0
Hi Robert, I've just taken care of the JIRA updates. How long should I wait until I update the site, given your experience with previous releases? Cheers, Radu On Fri, Mar 20, 2015 at 11:46 AM, Robert Munteanu romb...@apache.org wrote: Hi Radu, On Fri, 2015-03-20 at 10:54 +0200, Radu Cotescu wrote: Hi, I was able to complete most of the release promotion tasks, with the exception of moving the artifacts to Sling dist and updating the News Downloads pages - my account doesn't allow me to commit to Sling dist. Can someone from the PMC please help me with this? I have committed the artifacts to dist. For the other tasks, you should be able to edit the news download pages, those live under [1] . Also, can you please close the issues fixed in this release [2] and mark the issue as released ( see [3] for details ) ? Robert [1]: https://svn.apache.org/repos/asf/sling/site/ [2]: https://issues.apache.org/jira/issues/?jql=project%20%3D%20SLING% 20AND%20fixVersion%20%3D%20%22XSS%20Protection%20API%201.0.0%22%20ORDER% 20BY%20updated%20DESC%2C%20priority%20DESC%2C%20created%20ASC [3]: https://sling.apache.org/documentation/development/release-management.html#update-jira
Re: [RESULT] [VOTE] Release Apache Sling XSS Protection Bundle version 1.0.0
Hi Radu, On Fri, 2015-03-20 at 10:54 +0200, Radu Cotescu wrote: Hi, I was able to complete most of the release promotion tasks, with the exception of moving the artifacts to Sling dist and updating the News Downloads pages - my account doesn't allow me to commit to Sling dist. Can someone from the PMC please help me with this? I have committed the artifacts to dist. For the other tasks, you should be able to edit the news download pages, those live under [1] . Also, can you please close the issues fixed in this release [2] and mark the issue as released ( see [3] for details ) ? Robert [1]: https://svn.apache.org/repos/asf/sling/site/ [2]: https://issues.apache.org/jira/issues/?jql=project%20%3D%20SLING% 20AND%20fixVersion%20%3D%20%22XSS%20Protection%20API%201.0.0%22%20ORDER% 20BY%20updated%20DESC%2C%20priority%20DESC%2C%20created%20ASC [3]: https://sling.apache.org/documentation/development/release-management.html#update-jira
Re: [RESULT] [VOTE] Release Apache Sling XSS Protection Bundle version 1.0.0
Hi, I was able to complete most of the release promotion tasks, with the exception of moving the artifacts to Sling dist and updating the News Downloads pages - my account doesn't allow me to commit to Sling dist. Can someone from the PMC please help me with this? Thanks, Radu On Fri, Mar 20, 2015 at 10:01 AM, Radu Cotescu r...@apache.org wrote: Hi, The vote has passed with the following result : +1 (binding): Bertrand Delacretaz, Robert Munteanu, Carsten Ziegeler I will copy this release to the Sling dist directory (if my account allows me, otherwise I'll ask someone from the PMC to do this) and promote the artifacts to the central Maven repository. Thanks, Radu
Re: [RESULT] [VOTE] Release Apache Sling XSS Protection Bundle version 1.0.0
On Fri, Mar 20, 2015 at 12:01 PM, Radu Cotescu r...@apache.org wrote: Hi Robert, I've just taken care of the JIRA updates. How long should I wait until I update the site, given your experience with previous releases? TBH I don't worry too much about that and just push the website changes :-) . I haven't heard anyone complain so far and my intuition is that everyone either uses Maven central or checks out the source. The notable exception would be launchpad releases. Robert Cheers, Radu On Fri, Mar 20, 2015 at 11:46 AM, Robert Munteanu romb...@apache.org wrote: Hi Radu, On Fri, 2015-03-20 at 10:54 +0200, Radu Cotescu wrote: Hi, I was able to complete most of the release promotion tasks, with the exception of moving the artifacts to Sling dist and updating the News Downloads pages - my account doesn't allow me to commit to Sling dist. Can someone from the PMC please help me with this? I have committed the artifacts to dist. For the other tasks, you should be able to edit the news download pages, those live under [1] . Also, can you please close the issues fixed in this release [2] and mark the issue as released ( see [3] for details ) ? Robert [1]: https://svn.apache.org/repos/asf/sling/site/ [2]: https://issues.apache.org/jira/issues/?jql=project%20%3D%20SLING% 20AND%20fixVersion%20%3D%20%22XSS%20Protection%20API%201.0.0%22%20ORDER% 20BY%20updated%20DESC%2C%20priority%20DESC%2C%20created%20ASC [3]: https://sling.apache.org/documentation/development/release-management.html#update-jira
Re: [VOTE] Release Apache Sling XSS Protection Bundle version 1.0.0
On Mon, Mar 16, 2015 at 12:33 PM, Radu Cotescu r...@apache.org wrote: ...Staging repository: https://repository.apache.org/content/repositories/orgapachesling-1213* ... +1, checked signatures, build and that the below archive matches the corresponding svn tag. -Bertrand SHA1(org.apache.sling.xss-1.0.0-source-release.zip)= a6b9f713c55fec7a1180fd6dfa1d8f90245c9fd8
Re: [VOTE] Release Apache Sling XSS Protection Bundle version 1.0.0
Hi Daniel, The launchpad needs to provide that missing dependency: bundle groupIdjavax.mail/groupId artifactIdmail/artifactId version1.4.7/version startLevel20/startLevel /bundle Cheers, Radu On Mon, Mar 16, 2015 at 7:18 PM, Daniel Klco dk...@apache.org wrote: When I install the bundle into a vanilla Sling 7 instance, I get a missing dependency: javax.mail.internet -- Cannot be resolved Is this just a bundle not included in the released Sling 7 or is this a missing dependency? On Mon, Mar 16, 2015 at 10:24 AM, Robert Munteanu rob...@lmn.ro wrote: On Mon, Mar 16, 2015 at 4:17 PM, Radu Cotescu r...@apache.org wrote: Hi Robert, Those are outstanding issues for the XSS module which will be addressed with 1.0.2. We're currently voting for 1.0.0. You're right, of course. Sorry for the noise. Robert Cheers, Radu On Mon, Mar 16, 2015 at 2:02 PM, Robert Munteanu romb...@apache.org wrote: On Mon, 2015-03-16 at 13:33 +0200, Radu Cotescu wrote: There are still some outstanding issues: http://s.apache.org/sling_xss_1.0.2 Is this the right link? We're voting on 1.0.0 Robert -- Sent from my (old) computer
Re: [VOTE] Release Apache Sling XSS Protection Bundle version 1.0.0
+1 Carsten -- Carsten Ziegeler Adobe Research Switzerland cziege...@apache.org
Re: [VOTE] Release Apache Sling XSS Protection Bundle version 1.0.0
On Mon, 2015-03-16 at 13:33 +0200, Radu Cotescu wrote: Hi, We solved 8 issues in this release: https://issues.apache.org/jira/browse/SLING/fixforversion/12329024/ There are still some outstanding issues: http://s.apache.org/sling_xss_1.0.2 Staging repository: *https://repository.apache.org/content/repositories/orgapachesling-1213 https://repository.apache.org/content/repositories/orgapachesling-1213* You can use this UNIX script to download the release and verify the signatures: http://svn.apache.org/repos/asf/sling/trunk/check_staged_release.sh Usage: sh check_staged_release.sh 1213 /tmp/sling-staging Please vote to approve this release: [ ] +1 Approve the release [ ] 0 Don't care [ ] -1 Don't release, because ... This majority vote is open for at least 72 hours. Thanks, Radu +1 Robert
Re: [VOTE] Release Apache Sling XSS Protection Bundle version 1.0.0
On Mon, Mar 16, 2015 at 4:17 PM, Radu Cotescu r...@apache.org wrote: Hi Robert, Those are outstanding issues for the XSS module which will be addressed with 1.0.2. We're currently voting for 1.0.0. You're right, of course. Sorry for the noise. Robert Cheers, Radu On Mon, Mar 16, 2015 at 2:02 PM, Robert Munteanu romb...@apache.org wrote: On Mon, 2015-03-16 at 13:33 +0200, Radu Cotescu wrote: There are still some outstanding issues: http://s.apache.org/sling_xss_1.0.2 Is this the right link? We're voting on 1.0.0 Robert -- Sent from my (old) computer
[VOTE] Release Apache Sling XSS Protection Bundle version 1.0.0
Hi, We solved 8 issues in this release: https://issues.apache.org/jira/browse/SLING/fixforversion/12329024/ There are still some outstanding issues: http://s.apache.org/sling_xss_1.0.2 Staging repository: *https://repository.apache.org/content/repositories/orgapachesling-1213 https://repository.apache.org/content/repositories/orgapachesling-1213* You can use this UNIX script to download the release and verify the signatures: http://svn.apache.org/repos/asf/sling/trunk/check_staged_release.sh Usage: sh check_staged_release.sh 1213 /tmp/sling-staging Please vote to approve this release: [ ] +1 Approve the release [ ] 0 Don't care [ ] -1 Don't release, because ... This majority vote is open for at least 72 hours. Thanks, Radu
Re: [VOTE] Release Apache Sling XSS Protection Bundle version 1.0.0
On Mon, 2015-03-16 at 13:33 +0200, Radu Cotescu wrote: There are still some outstanding issues: http://s.apache.org/sling_xss_1.0.2 Is this the right link? We're voting on 1.0.0 Robert
Re: [VOTE] Release Apache Sling XSS Protection Bundle version 1.0.0
Hi Robert, Those are outstanding issues for the XSS module which will be addressed with 1.0.2. We're currently voting for 1.0.0. Cheers, Radu On Mon, Mar 16, 2015 at 2:02 PM, Robert Munteanu romb...@apache.org wrote: On Mon, 2015-03-16 at 13:33 +0200, Radu Cotescu wrote: There are still some outstanding issues: http://s.apache.org/sling_xss_1.0.2 Is this the right link? We're voting on 1.0.0 Robert
Re: [VOTE] Release Apache Sling XSS Protection Bundle version 1.0.0
When I install the bundle into a vanilla Sling 7 instance, I get a missing dependency: javax.mail.internet -- Cannot be resolved Is this just a bundle not included in the released Sling 7 or is this a missing dependency? On Mon, Mar 16, 2015 at 10:24 AM, Robert Munteanu rob...@lmn.ro wrote: On Mon, Mar 16, 2015 at 4:17 PM, Radu Cotescu r...@apache.org wrote: Hi Robert, Those are outstanding issues for the XSS module which will be addressed with 1.0.2. We're currently voting for 1.0.0. You're right, of course. Sorry for the noise. Robert Cheers, Radu On Mon, Mar 16, 2015 at 2:02 PM, Robert Munteanu romb...@apache.org wrote: On Mon, 2015-03-16 at 13:33 +0200, Radu Cotescu wrote: There are still some outstanding issues: http://s.apache.org/sling_xss_1.0.2 Is this the right link? We're voting on 1.0.0 Robert -- Sent from my (old) computer
Re: [VOTE] Release Apache Sling XSS Protection Bundle version 1.0.0
I'll re-release version 1.0.0 once SLING-4492 [0] is fixed. Sorry for the noise. Cheers, Radu [0] - https://issues.apache.org/jira/browse/SLING-4492 On Tue, Mar 10, 2015 at 2:26 PM, Radu Cotescu r...@apache.org wrote: Hi, I have updated the apache rat plugin configuration for the XSS module and I've restaged the release. Staging repository: *https://repository.apache.org/content/repositories/orgapachesling-1209 https://repository.apache.org/content/repositories/orgapachesling-1209* You can use this UNIX script to download the release and verify the signatures: http://svn.apache.org/repos/asf/sling/trunk/check_staged_release.sh Usage: sh check_staged_release.sh 1209 /tmp/sling-staging Please vote to approve this release: [ ] +1 Approve the release [ ] 0 Don't care [ ] -1 Don't release, because ... This majority vote is open for at least 72 hours. Thanks, Radu
Re: [VOTE] Release Apache Sling XSS Protection Bundle version 1.0.0
Hi, I have updated the apache rat plugin configuration for the XSS module and I've restaged the release. Staging repository: *https://repository.apache.org/content/repositories/orgapachesling-1209 https://repository.apache.org/content/repositories/orgapachesling-1209* You can use this UNIX script to download the release and verify the signatures: http://svn.apache.org/repos/asf/sling/trunk/check_staged_release.sh Usage: sh check_staged_release.sh 1209 /tmp/sling-staging Please vote to approve this release: [ ] +1 Approve the release [ ] 0 Don't care [ ] -1 Don't release, because ... This majority vote is open for at least 72 hours. Thanks, Radu
[VOTE] Release Apache Sling XSS Protection Bundle version 1.0.0
Hi, We solved 7 issues in this release: https://issues.apache.org/jira/browse/SLING/fixforversion/12329024/ There are still some outstanding issues: http://s.apache.org/sling_xss_1.0.2 Staging repository: https://repository.apache.org/content/repositories/orgapachesling-1206 You can use this UNIX script to download the release and verify the signatures: http://svn.apache.org/repos/asf/sling/trunk/check_staged_release.sh Usage: sh check_staged_release.sh 1206 /tmp/sling-staging Please vote to approve this release: [ ] +1 Approve the release [ ] 0 Don't care [ ] -1 Don't release, because ... This majority vote is open for at least 72 hours. Thanks, Radu
Re: [VOTE] Release Apache Sling XSS Protection Bundle version 1.0.0
Hi, On Mon, Mar 9, 2015 at 6:30 PM, Radu Cotescu r...@apache.org wrote: Hi, We solved 7 issues in this release: https://issues.apache.org/jira/browse/SLING/fixforversion/12329024/ There are still some outstanding issues: http://s.apache.org/sling_xss_1.0.2 Staging repository: https://repository.apache.org/content/repositories/orgapachesling-1206 You can use this UNIX script to download the release and verify the signatures: http://svn.apache.org/repos/asf/sling/trunk/check_staged_release.sh Usage: sh check_staged_release.sh 1206 /tmp/sling-staging Please vote to approve this release: [ ] +1 Approve the release [ ] 0 Don't care [ ] -1 Don't release, because ... This majority vote is open for at least 72 hours. Thanks, Radu The -Prat build fails for me $ svn co https://svn.apache.org/repos/asf/sling/tags/org.apache.sling.xss-1.0.0/ $ cd org.apache.sling.xss-1.0.0/ $ mvn verify -Prat (snip...) [ERROR] Failed to execute goal org.apache.rat:apache-rat-plugin:0.10:check (default) on project org.apache.sling.xss: Too many files with unapproved license: 3 See RAT report in: /home/ADOBENET/rmuntean/w/workspace/org.apache.sling.xss-1.0.0/target/rat.txt - [Help 1] I think this should be fixed for the initial release, even if the failures are trivial. Thanks, Robert
Re: [VOTE] Release Apache Sling XSS Protection Bundle version 1.0.0
Hi Robert, Thanks for the heads up. I did include a rat file for the module since donating the code; I guess I just have to configure the plug-in to take it into consideration. Cheers, Radu On Mon, Mar 9, 2015 at 6:34 PM, Robert Munteanu romb...@apache.org wrote: Hi, On Mon, Mar 9, 2015 at 6:30 PM, Radu Cotescu r...@apache.org wrote: Hi, We solved 7 issues in this release: https://issues.apache.org/jira/browse/SLING/fixforversion/12329024/ There are still some outstanding issues: http://s.apache.org/sling_xss_1.0.2 Staging repository: https://repository.apache.org/content/repositories/orgapachesling-1206 You can use this UNIX script to download the release and verify the signatures: http://svn.apache.org/repos/asf/sling/trunk/check_staged_release.sh Usage: sh check_staged_release.sh 1206 /tmp/sling-staging Please vote to approve this release: [ ] +1 Approve the release [ ] 0 Don't care [ ] -1 Don't release, because ... This majority vote is open for at least 72 hours. Thanks, Radu The -Prat build fails for me $ svn co https://svn.apache.org/repos/asf/sling/tags/org.apache.sling.xss-1.0.0/ $ cd org.apache.sling.xss-1.0.0/ $ mvn verify -Prat (snip...) [ERROR] Failed to execute goal org.apache.rat:apache-rat-plugin:0.10:check (default) on project org.apache.sling.xss: Too many files with unapproved license: 3 See RAT report in: /home/ADOBENET/rmuntean/w/workspace/org.apache.sling.xss-1.0.0/target/rat.txt - [Help 1] I think this should be fixed for the initial release, even if the failures are trivial. Thanks, Robert
Re: [VOTE] Release Apache Sling XSS Protection Bundle version 1.0.0
Hi Radu, On Mon, Mar 9, 2015 at 7:59 PM, Radu Cotescu r...@apache.org wrote: Hi Robert, Thanks for the heads up. I did include a rat file for the module since donating the code; I guess I just have to configure the plug-in to take it into consideration. The rat parameters are configured in the parent pom for all projects. However, I don't think you need to exclude anything more. The files which cause the rat check to fail are: !? src/main/resources/ESAPI.properties !? src/main/resources/validation.properties !? rat.exclude rat.exclude is not needed, and the two properties files should get a Apache-2.0 license, see [1] for an example Robert [1]: https://svn.apache.org/repos/asf/sling/trunk/tooling/maven/archetypes/launchpad-standalone/src/main/resources/archetype-resources/src/test/config/sling.properties Cheers, Radu On Mon, Mar 9, 2015 at 6:34 PM, Robert Munteanu romb...@apache.org wrote: Hi, On Mon, Mar 9, 2015 at 6:30 PM, Radu Cotescu r...@apache.org wrote: Hi, We solved 7 issues in this release: https://issues.apache.org/jira/browse/SLING/fixforversion/12329024/ There are still some outstanding issues: http://s.apache.org/sling_xss_1.0.2 Staging repository: https://repository.apache.org/content/repositories/orgapachesling-1206 You can use this UNIX script to download the release and verify the signatures: http://svn.apache.org/repos/asf/sling/trunk/check_staged_release.sh Usage: sh check_staged_release.sh 1206 /tmp/sling-staging Please vote to approve this release: [ ] +1 Approve the release [ ] 0 Don't care [ ] -1 Don't release, because ... This majority vote is open for at least 72 hours. Thanks, Radu The -Prat build fails for me $ svn co https://svn.apache.org/repos/asf/sling/tags/org.apache.sling.xss-1.0.0/ $ cd org.apache.sling.xss-1.0.0/ $ mvn verify -Prat (snip...) [ERROR] Failed to execute goal org.apache.rat:apache-rat-plugin:0.10:check (default) on project org.apache.sling.xss: Too many files with unapproved license: 3 See RAT report in: /home/ADOBENET/rmuntean/w/workspace/org.apache.sling.xss-1.0.0/target/rat.txt - [Help 1] I think this should be fixed for the initial release, even if the failures are trivial. Thanks, Robert -- Sent from my (old) computer
