Re: [VOTE] Release Apache Pekko(incubating) Core 1.0.2-RC1
Thanks Justin. I'll look into those files again. With this RC, it includes a security hardening change. Akka issued a CVE for the issue but we don't think it really needs one. At the same time, I'd like to get out a change. Can we delay getting a fix for the possible license issue with these test files? On Thu 23 Nov 2023, 01:45 Justin Mclean, wrote: > Hi, > > > We have not modified these files since the Akka split so I do not > > think we should put Apache headers on them. > > Nor do I. 3rd party files should not have ASF headers. > > > I removed one file using > https://github.com/apache/incubator-pekko/pull/810 > > > > I cannot find any other files that appear to be based on > > https://github.com/isc-projects/bind9 > > It looks like most files in the /actor-tests/src/test/bind/etc/ directory? > See, for example, > https://wiki.debian.org/Bind9#Files_in_.2Fvar.2Flib.2Fbind.2F and > https://wiki.debian.org/Bind9#File_.2Fetc.2Fbind.2Fnamed.conf.default-zones > > These files I can find identical copies of: > /actor-tests/src/test/bind/etc/db.local > /actor-tests/src/test/bind/etc/named.conf.default-zones > /actor-tests/src/test/bind/etc/db.root > /actor-tests/src/test/bind/etc/zones.rfc1918 > /actor-tests/src/test/bind/etc/bind.keys > /actor-tests/src/test/bind/etc/db.127 > /actor-tests/src/test/bind/etc/db.empty > > But it’s unclear how these files are licensed. > > Kind Regards, > Justin > > > > - > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > For additional commands, e-mail: general-h...@incubator.apache.org > >
Re: [VOTE] Release Apache Pekko(incubating) Core 1.0.2-RC1
Hi, > We have not modified these files since the Akka split so I do not > think we should put Apache headers on them. Nor do I. 3rd party files should not have ASF headers. > I removed one file using https://github.com/apache/incubator-pekko/pull/810 > > I cannot find any other files that appear to be based on > https://github.com/isc-projects/bind9 It looks like most files in the /actor-tests/src/test/bind/etc/ directory? See, for example, https://wiki.debian.org/Bind9#Files_in_.2Fvar.2Flib.2Fbind.2F and https://wiki.debian.org/Bind9#File_.2Fetc.2Fbind.2Fnamed.conf.default-zones These files I can find identical copies of: /actor-tests/src/test/bind/etc/db.local /actor-tests/src/test/bind/etc/named.conf.default-zones /actor-tests/src/test/bind/etc/db.root /actor-tests/src/test/bind/etc/zones.rfc1918 /actor-tests/src/test/bind/etc/bind.keys /actor-tests/src/test/bind/etc/db.127 /actor-tests/src/test/bind/etc/db.empty But it’s unclear how these files are licensed. Kind Regards, Justin - To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
[CANCEL] Release Apache SDAP (incubating) 1.2.0-rc2
Hello everyone, I'm cancelling this vote due to the chardet license issue found in the vote thread. I will start a new vote process once we've fixed the issue and re-voted in dev@sdap. Thank you very much to everyone who contributed to the 1.2.0-rc2 vote. Thank you, Stepheny Perez - To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
Re: [VOTE] Release Apache Pekko(incubating) Core 1.0.2-RC1
We have not modified these files since the Akka split so I do not think we should put Apache headers on them. I removed one file using https://github.com/apache/incubator-pekko/pull/810 I cannot find any other files that appear to be based on https://github.com/isc-projects/bind9 files Removing any other files is likely to break tests (removing them all did break a number of tests). I don't think it is a good idea to remove the tests that rely on these files. On Wed, 22 Nov 2023 at 14:36, Justin Mclean wrote: > > Hi, > > > Justin - if you are aware of more matches other than the bind.keys > > file, could you make us aware of them? > > I think there are about 1/2 a dozen files in that directory from Bind9, but > nothing outside of that I’ve found. I’ve not done an extensive check, but at > a glance, the file names and contents show similarity. They didn’t have ASF > or Pekko headers which first alerted me. > > Kind Regards, > Justin > - > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > For additional commands, e-mail: general-h...@incubator.apache.org > - To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
Re: [VOTE] Release Apache Pekko(incubating) Core 1.0.2-RC1
Hi, > Justin - if you are aware of more matches other than the bind.keys > file, could you make us aware of them? I think there are about 1/2 a dozen files in that directory from Bind9, but nothing outside of that I’ve found. I’ve not done an extensive check, but at a glance, the file names and contents show similarity. They didn’t have ASF or Pekko headers which first alerted me. Kind Regards, Justin - To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
Re: [VOTE] Release Apache Pekko(incubating) Core 1.0.2-RC1
I've raised https://github.com/apache/incubator-pekko/issues/809 to investigate. Justin - if you are aware of more matches other than the bind.keys file, could you make us aware of them? On Wed, 22 Nov 2023 at 07:28, Justin Mclean wrote: > > HI, > > I’ve not finished my review, but I may have found an issue. Some of the > content in /actor-tests/src/test/bind/etc/ seems to come from Bind9 > (https://github.com/isc-projects/bind9). The project is under a Category B > license (MPL 2.0), but given the nature of these files and their use, I’m > unsure if that license applies. Assuming it is OK to include them, something > should be mentioned LICENSE. > > Kind Regards, > Justin > > > On 19 Nov 2023, at 12:56 am, PJ Fanning wrote: > > > > Hello Incubator Community, > > > > This is a call for a vote to release Apache Pekko(incubating) > > Core version 1.0.2-RC1. > > > > The discussion thread: > > https://lists.apache.org/thread/zy84yk5gxp54bkn81ntlj5ps5o2z9w4j > > > > Pekko Vote Thread > > https://lists.apache.org/thread/0ojxypkm650bhk6pf53cp7h8036jgyol > > > > Pekko Result: > > https://lists.apache.org/thread/mh398gtjm751fq4fhss5c0xfwxnvx2xy > > > > The release candidate: > > > > https://dist.apache.org/repos/dist/dev/incubator/pekko/1.0.2-RC1/ > > > > This release has been signed with a PGP key, available here: > > > > https://dist.apache.org/repos/dist/release/incubator/pekko/KEYS > > > > Git branch for the release: > > > > https://github.com/apache/incubator-pekko/tree/v1.0.2-RC1 > > Git commit ID: 58fa510455190bd62d04f92a83c9506a7588d29c > > > > Release Notes: > > > > https://nightlies.apache.org/pekko/docs/pekko/1.0/docs/release-notes/index.html#1-0-2 > > > > Please download, verify, and test. > > > > We have also staged jars in the Apache Nexus Repository. These were > > built with the same code > > as appears in this Source Release Candidate. We would appreciate if > > users could test with these too. > > If anyone finds any serious problems with these jars, please also > > notify us on this thread. > > > > https://repository.apache.org/content/groups/staging/org/apache/pekko/ > > > > In sbt, you can add this resolver. > > > > resolvers += "Apache Pekko Staging" at > > "https://repository.apache.org/content/groups/staging; > > > > > > The vote will be left open for at least 72 hours. > > > > [ ] +1 approve > > [ ] +0 no opinion > > [ ] -1 disapprove with the reason > > > > To learn more about Apache Pekko, please see https://pekko.apache.org/ > > > > Checklist for reference: > > > > [ ] Download links are valid. > > [ ] Checksums and signatures. > > [ ] LICENSE/NOTICE files exist > > [ ] No unexpected binary files > > [ ] Source files have ASF headers > > [ ] Can compile from source > > > > To compile from the source, please refer to: > > > > https://github.com/apache/incubator-pekko/blob/main/README.md#building-from-source > > > > Some notes about verifying downloads can be found at: > > > > https://pekko.apache.org/download.html#verifying-downloads > > > > > > Here is my +1 (binding). > > > > Thanks, > > > > PJ Fanning > > > > - > > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > > For additional commands, e-mail: general-h...@incubator.apache.org > > > - To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
