Re: [CRYPTO] Progress with macOS and Windows

2022-07-06 Thread sebb
On Mon, 4 Jul 2022 at 23:53, sebb wrote: > > On Mon, 4 Jul 2022 at 17:20, sebb wrote: > > > > The JNA code should now be able to support all combinations of methods. > > > > Also JNA supports the property jna.library.path when loading the crypto > > library. > > This allows one to override the

CVE-2022-33980: Apache Commons Configuration insecure interpolation defaults

2022-07-06 Thread Matt Juntunen
Severity: Moderate Description: Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "${prefix:name}", where "prefix" is used to locate an instance of

Re: [VOTE] Release Apache Commons Configuration 2.8.0 based on RC3

2022-07-06 Thread Gary Gregory
Agreed on switching to JUnit 5. Gary On Sun, Jul 3, 2022, 22:41 Matt Juntunen wrote: > Thanks, Bruno and Gary! > > Gary, > I think the unit tests as a whole could use some upgrading. I'm > picturing a conversion to JUnit 5, during which we could ensure > compatibility with the latest JDK

Re: [VOTE] Release Apache Commons Configuration 2.8.0 based on RC3

2022-07-06 Thread Gary Gregory
Agreed, we want to keep them in the Javadoc. An interesting side quest would be to investigate switching to the latest version of JavaCC or switching to Antlr. Gary On Mon, Jul 4, 2022, 10:38 Matt Juntunen wrote: > Hello Alex, > > That would remove those files from the javadoc completely. As

Re: [collections] Recording the BloomFilter package in changes

2022-07-06 Thread Alex Herbert
On Tue, 5 Jul 2022 at 14:34, Gilles Sadowski wrote: > > > > > I resolved a recent ticket as 'Fixed'. However it will then appear in the > > changes report on the site. Perhaps these should be resolved as 'Done' so > > will be ignored in the report. > > There is an automatically generated "JIRA