Re: [Parent] RAT check

On Sat, Mar 9, 2019 at 11:45 PM Gary Gregory wrote: > How about making apache-rat:check run automatically in commons-parent? In > the Maven validate phase? Not being a Maven expert: When would that check run, exactly? If that would include a simple "mvn clean install", then I'd definitely be -1,

Re: [Parent] RAT check

On Mon, Mar 11, 2019 at 5:58 PM Gary Gregory wrote: > The idea, for me, is that a contributor should not be able to test and > submit a PR with a failing RAT check. If so, then I'd suggest a server-side Git hook for that. Jochen -

GitHub Pull Requests (and Confluence)

Hi, just FIY: Today I tried to accept a pull request from Github, following the procedure, as outlined on https://cwiki.apache.org/confluence/display/ROLLER/How+to+accept+a+GitHub+Pull+Request (Of course, the Git URL has to be adjusted to your subproject, in my case https://gitbox.apache.

Re: New Confluence space created: COMMONS

FYI (Migration of the Moinmoin wiki has been requested). On Mon, Mar 25, 2019 at 8:55 PM ASF Self-Service Platform wrote: > > > Hi there, > As requested by joc...@apache.org, a new Confluence space has been set up at: > https://cwiki.apache.org/confluence/display/COMMONS > > > > With regards, > A

Re: [lang] Towards 3.9

On Fri, Apr 5, 2019 at 4:27 AM Rob Tompkins wrote: > > > On Apr 4, 2019, at 9:20 AM, Gilles Sadowski wrote: > > > >> Any thoughts on doing a 3.9 release of [lang]. I think Benedikt want’s us > >> to go up with what we have. Any thoughts for or against doing a release? > > > > Any objection to fi

***UNCHECKED*** [parent] Introducing Automatic-Module-Name

Hi, I have studied EMAIL-186. My impression is, that all commons jar files should provide a fixed module name, rather than trusting in the choice of the JDK. Thus, it seems best to handle this in parent. So, here's my proposal for a change. Please, let me know, what you think of that, so that I ca

Re: ***UNCHECKED*** [parent] Introducing Automatic-Module-Name

On Tue, Apr 9, 2019 at 9:54 AM sebb wrote: > > I have studied EMAIL-186. My impression is, that all commons jar files > > should provide a fixed module name, rather than trusting in the choice > > of the JDK. Thus, it seems best to handle this in parent. So, here's > > my proposal for a change. P

Re: ***UNCHECKED*** [parent] Introducing Automatic-Module-Name

On Tue, Apr 9, 2019 at 10:48 AM John Patrick wrote: > As commons-lang3 has the module name org.apache.commons.lang3, not > commons-lang3 which is the artifactId, because "-" is invalid in a > real module name and they realised this when starting to support jpms. Commons-lang, and others, can fi

Re: ***UNCHECKED*** [parent] Introducing Automatic-Module-Name

On Tue, Apr 9, 2019 at 1:22 PM Gilles Sadowski wrote: > From > https://blog.joda.org/2017/04/java-se-9-jpms-module-naming.html > ---CUT--- > Module names must be valid Java identifiers! E.g. no Java keywords, no > dashes, no... > ---CUT--- Wasn't aware of that, thanks for the hint. Jochen

Re: ***UNCHECKED*** [parent] Introducing Automatic-Module-Name

On Tue, Apr 9, 2019 at 2:37 PM Gary Gregory wrote: > Can't we do this in a more lightweight manner in Checkstyle or in our build > Maven plugin? I'll leave the former idea to you, and the latter to Rob. Myself, I don't know in both cases. But I am open. Jochen -

Re: ***UNCHECKED*** [parent] Introducing Automatic-Module-Name

On Tue, Apr 9, 2019 at 12:43 PM Gilles Sadowski wrote: > ${commons.automatic.module.name} Fine with me. > Then the release plugin could be enhanced (?) so that it would check > whether the variable has been defined for each JAR to be created (and > fail the build otherwise). As already written

Re: ***UNCHECKED*** [parent] Introducing Automatic-Module-Name

On Tue, Apr 9, 2019 at 2:43 PM sebb wrote: > Unless I am misunderstanding this, the property value won't be checked > to see if i is changed when an incompatible versioni s released. True, but that applies in either case, as soon as we have module names, doesn't it? So, I'd like to keep this out

Re: ***UNCHECKED*** [parent] Introducing Automatic-Module-Name

On Tue, Apr 9, 2019 at 3:51 PM sebb wrote: > We already have a process for ensuring that Maven coords and package > names are changed when API breaks. > Do we really want to have yet another name that has to be maintained? What's the alternative? > Being able to define the module name independ

Re: [All] Help with GitHub "support"

I think, that Gilles is right in pointing out, that the current policy (accept patches only with explicit, or implicit, acceptance of contribution under the ASL) clashes somehow with Github PR's in that it is difficult to assume implicit acceptance in that cases. However, I don't think that this q

Re: [lang] Giant StringUtils vs. NullSafeStrings.

On Tue, Jun 4, 2019 at 1:07 PM Xeno Amess wrote: > > Then 10 years later JDK has its own Strings, and users get confused then. If we (and the users) wouldn't be ready to accept that risk, then we could forget the whole project. Jochen

Re: New Sub-project Proposal.

Hi, Claude, having read, what a bloom filter is, a subproject sounds unnecessary to me. I'd recommend, that you contribute your code to Commons Collections, which seems to me to be a logical target. Jochen On Tue, Sep 10, 2019 at 8:45 PM Claude Warren wrote: > > Having spoken with several peopl

Re: [lang] New Streams code breaks build

On Mon, Feb 3, 2020 at 3:57 PM Gary Gregory wrote: > The commit > https://gitbox.apache.org/repos/asf?p=commons-lang.git;a=commit;h=2ea44b2adae8da8e3e7f55cc226479f9431feda9 > broke > the Travis build due to Checktyle errors. As the responsible person, I apologize for that. I am sure, that I did

Re: [lang] New Streams code breaks build

Hi, Alex, On Tue, Feb 4, 2020 at 10:06 PM Alex Herbert wrote: > Travis just uses ‘mvn’. This triggers the default goal in the pom which does > this: Thanks for the information. I wasn't even aware, that there is a default goal. > I did note when I had a look that the main javadoc gives the e

Re: [all] How PRs could be better

I understand your intention, *if* the PR is a bug fix. But, what about the others? On Thu, Feb 20, 2020, 14:53 Gary Gregory wrote: > Hi All: > > I wonder if any of you have an ideas regarding the following. > > When looking at _some_ PRs (that are green on GitHub, build with tests and > other c

Re: [VOTE] Release Apache Commons Configuration 2.7 based on RC2

+1 (Binding) On Mon, Mar 9, 2020 at 3:55 PM Rob Tompkins wrote: > > We have fixed quite a few bugs and added some significant enhancements since > Apache Commons Configuration 2.6 was released, so I would like to release > Apache Commons Configuration 2.7. > > Apache Commons Configuration 2.7

JEXL: How to use non-map objects

Hi, slightly off-topic for the dev list (sorry!), but still: Any changes, one of you guys (and girls, of course) would be able to help with https://stackoverflow.com/questions/60632217/jexl-how-to-use-non-map-objects Thanks, Jochen -- Look, that's why there's rules, understand? So that you

Re: [IO] org.apache.commons.io.FileSystem for 2.7 or later

Looking at that class, it certainly seems to be a candidate for refactoring. For example, I could imagine to split the actual enumeration, and the implementation code into separate classes. But that can be done after a release, just as well. So, I'd say: Just go for it, and don't bother ("Include

Re: [Graph] moving to git

On Tue, Jun 2, 2020 at 3:30 AM Amey Jadiye wrote: > I wanted to fetch opinion about moving commons-graph to git and possibly > creation of github mirror. We still haven't completed the move? Sure, as quick as possible. - To un

Re: About binary compatibility

On Tue, Jun 16, 2020 at 1:07 AM Gary Gregory wrote: > I kind of like inaging1 even if it is weird and even though we do not have > a precedent here in Commons. I'm curious what others think. I'm always in favour of saving characters. So, let's avoid the additional 1. It is not strictly necessary

Re: [lang] org.apache.commons.lang3.concurrent.Locks is missing Javadocs for ALL public methods

On Thu, Jun 18, 2020 at 2:19 PM Gary Gregory wrote: > > Hi All and to the author of the new Locks class: It is missing Javadocs for > ALL public methods. > > May you please add them? I will. Sorry for missing this. -- Look, that's why there's rules, understand? So that you think before you br

Proposal Commons-JNDI

Hi, I'd like to propose a new component Commons JNDI for the sandbox. The aim would be to have a very lightweight JNDI implementation (no server, or something like that) that's not necessarily suitable for production, but ideally suited for use in test suites, and the like. For example, commons d

Re: Proposal Commons-JNDI

On Wed, Aug 8, 2012 at 10:29 AM, Jörg Schaible wrote: > Jochen Wiedmann wrote: > >> Hi, >> >> I'd like to propose a new component Commons JNDI for the sandbox. >> >> The aim would be to have a very lightweight JNDI implementation (no >> server,

Re: Proposal Commons-JNDI

>> As a user of Simple JNDI I am all for having a simple JNDI implementation >> in ASF. >> >> +1 (non-binding) from me. >> >> Regards >> Felix >> >> Am 08.08.2012 um 08:02 schrieb Jochen Wiedmann: >> >>> Hi, >>> >&

Re: [VOTE] Release Commons Parent 27-RC1

+1 (binding) On Mon, Sep 24, 2012 at 7:08 PM, Gary Gregory wrote: > Hello All, > > This is a VOTE to release Commons Parent 27-RC1. > > Changes in this version include: > > - update maven-site-plugin to 3.1 in reporting section > - use properties for all reporting plugins to ensure consistency >

Re: My Jira Privileges

Thanks, Luc! On Wed, Nov 21, 2012 at 8:43 PM, Luc Maisonobe wrote: > Le 21/11/2012 20:05, Jochen Wiedmann a écrit : > > Hi, > > > > I'd like to close > > FILEUPLOAD-213<https://issues.apache.org/jira/browse/FILEUPLOAD-213>, > > but don't seem

Re: [COMPRESS] Java 7- > 8

> > On Sat, 8 Aug 2020 at 13:05, Gary Gregory wrote: > > > > > > Hi All: > > > If we can update to Java 8, I can drop some code duplication very > > cleanly. Go for it. -- Look, that's why there's rules, understand? So that you think before you break 'em. -- (Terry Pratchett, Thief of Ti

Re: [LOGGING][DAEMON] Update Java 6 to 7

On Sun, Aug 16, 2020 at 12:13 PM Xeno Amess wrote: > 2. we wait for user argue about this. Mark Thomas just did, no need to wait. :-) -- Look, that's why there's rules, understand? So that you think before you break 'em. -- (Terry Pratchett, Thief of Time)

Re: opinions about @NotNull and @Nullable ?

On Tue, Aug 25, 2020 at 9:08 PM sebb wrote: > AFAIK that means Maven won't download the dependency. > Surely that makes it harder for the developer? No, it means that Maven won't add the dependency to a distribution. However, I've got a question: These annotations have @Retention(Runtime). (See

No more dependabot

For the record: Mails from dependabot are now being deleted automatically from my inbox. I consider this to be a failed experiment, and would like us to terminate it. Jochen -- Look, that's why there's rules, understand? So that you think before you break 'em. -- (Terry Pratchett, Thief

Re: No more dependabot

On Mon, Sep 14, 2020 at 2:48 PM Gary Gregory wrote: > - Jochen: What you do with your inbox is your business ;-) What is > the happy compromise here? Do you want a separate email list? Zero > Dependabot emails anywhere? If you feel strongly about this, please > create a [POLL] thread for what yo

Re: No more dependabot

On Wed, Sep 16, 2020 at 12:37 PM Gilles Sadowski wrote: > As I've already stated in the previous "discussion" (from > where I was left with the only solution of filtering out), a lot > of the bot-generated messages is just spam. > IMO, it's not needed for traceability, and nobody/norobot is > goi

Re: [vfs] consider about making FileObjectUtils be more like FileUtils in commons-io?

On Sun, Sep 6, 2020 at 3:39 PM Gary Gregory wrote: > The idea behind making *Util constructors private is that it does not make > sense to instantiate a class that only has static methods. True, but that also eliminates reuse by subclassing, and similar techniques. In my opinion, static utility

Re: [All] New repo for all proper components as submodules?

On Sun, Aug 30, 2020 at 12:53 AM Gary Gregory wrote: > Any thoughts for or against creating a new git repository which would > contain all 'proper' Commons components as git submodules? > > The idea is to be able to checkout all of Commons 'proper' in one go in one > place. Sounds to me like a l

Re: No more dependabot

On Wed, Sep 16, 2020 at 2:38 PM Gilles Sadowski wrote: > Isn't what >https://spamassassin.apache.org/ > is about? Not that I am uptodate, but at least historically it hasn't. It's mostly about blocking spam. Related, but not necessarily reusable for the suggested purpose. Jochen --- Look,

Re: [All] About Commons snapshot versions

On Thu, Sep 10, 2020 at 4:18 AM Peter Lee wrote: > I noticed that some Commons components snapshot versions released in > https://repository.apache.org/content/groups/snapshots/org/apache/commons > have not been updated for some time. > > Just curious about how do we publish snapshot versions and

History blocked on Gitbox

Hi, on Gitbox, I noted the following: Clicking on any file in the tree, and then on the files history, I get the message "Forbidden You don't have permission to access this resource.". I'd expect that our Gitbox repos are completely open, so that came as a surprise to me. What do you think? Joch

[lang] Introduce @NonNull, and @Nullable

Hi, as a followup to a discussion, that we had in August 2020, I'd like to propose, that we introduce the @NonNull, and @Nullable annotations into commons-lang. Since that discussion, I began to gradually introduce those annotations into my own code. From that, I have learned three things:

Re: [lang] Introduce @NonNull, and @Nullable

On Mon, Feb 1, 2021 at 2:34 PM Gary Gregory wrote: > 1) Don't add and use custom annotations, this opens the door to each of our > 20+ components doing the same thing, so pick a library and stick with it. I suggested starting with lang, because that would be the template for most others. (At lea

Re: [lang] Introduce @NonNull, and @Nullable

On 2021/02/01 16:45:46, Tomo Suzuki wrote: > I like "javax.annotation namespace" too. > > Would you be willing to share more about why the annotation dependency > should have "provided" scope? If a library (commons-lang) requires a > dependency at runtime, I believe it should declare it as "c

Re: [lang] Introduce @NonNull, and @Nullable

On 2021/02/02 11:34:09, sebb wrote: > In which case it should surely be listed as a compile dependency so > that it is picked up automatically? It is also picked up automatically with scope=provided. - To unsubscribe, e-ma

Re: [lang] Introduce @NonNull, and @Nullable

On 2021/02/02 08:10:33, Julian Reschke wrote: > Please see . I may be missing the point here, so help me: My impression is, that the user doesn't need the jsr305 jar in the classpath, if we use it in out sources. If so, how should the Java 9 JRE detect t

Announce: CVE-2021-29425 (Possible limited path traversal vulnerabily in Apache Commons IO up to version 2.6)

team, Jochen Wiedmann Description: In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, bu

Re: [compress] [Poll] Dealing with uncaught RuntimeExceptions

On Tue, Jun 29, 2021 at 10:24 PM Stefan Bodewig wrote: > (4) don't catch RuntimeExceptions at all, just document broken archives > can cause arbitrary RuntimeExceptions and code that tries to read > archives from untrusted sources is expected to deal with them > itself. Strongly in f

Re: [VOTE] Release Compress 1.21 based on RC1

On Fri, Jul 9, 2021 at 10:09 PM Gary Gregory wrote: > "Details of changes since 1.19 are in the release notes:" > > 1.19 -> 1.20 ;-) Well observed. That said, I'd recommend to ignore this, since we want this release to be out of the door. Jochen -- Look, that's why there's rules, understan

[lang] What does the animal-sniffer-maven-plugin compare against?

Hi, I am currently preparing a feature for Lang, that makes use of MethodHandle.invoke(Object...) According to the Javadocs [1], this should be fine, but I am getting this from the animal-sniffer-maven-plugin: [INFO] --- animal-sniffer-maven-plugin:1.21:check (checkAPIcompatibility) @ commons-la

Re: [lang] What does the animal-sniffer-maven-plugin compare against?

}${javaTarget.minorVersion} java${javaTarget.majorVersion}${javaTarget.minorVersion} On Mon, May 2, 2022 at 7:57 PM Jochen Wiedmann wrote: > > Hi, > > I am currently preparing a feature for Lang, that makes use of > MethodHandle.invoke(Object...) > > According to the Javadoc

Re: [lang] What does the animal-sniffer-maven-plugin compare against?

repo1.maven.org/maven2/org/codehaus/mojo/signature/ > > Older major versions have vendor specific suffixes, none of them use minor > version numbers. > > Gruss > Bernd > -- > http://bernd.eckenfels.net > ____ > Von: Jochen Wiedmann > Gesen

[crypto] How to get the native library?

Hi, trying to run the unit tests for commons-crypto, I get the error message Native library is not loaded I understand, what it tells me. However, I do not find any hints on how to get the native library. Not on the website, not in the top-level docs. Can anyone help with that? Thanks, Jo

[Crypto] How to build?

Hi, I recently had the questionable pleasure to get in touch with Commons Crypto, and could not build it. There are some instructions in the BUILDING.txt file, but they aren't really helpful. In case, you don't know: Crypto is not a simple Java library. Instead, it requires building some shared li

Re: [Crypto] How to build?

On Wed, May 18, 2022 at 9:15 PM Gary Gregory wrote: > > Yeah, I recall wanting to add a dockerfile... but if it's not there I'll > have to go hunt around for it and the notes I might have from that > release... Please do, Gary. Thanks, Jochen ---

Re: [Crypto] How to build?

Thanks, Bruno. Big help! On Thu, May 19, 2022 at 4:05 AM Bruno Kinoshita wrote: > There's a Dockerfile in the commons-crypto repo on GitHub. Not sure if it's > used for building it... but just in case it helps. - To unsubscribe

Re: [Crypto] What is it ?

On Tue, Jun 14, 2022 at 3:08 PM Gilles Sadowski wrote: > Is it a Java wrapper around a specific library ("openssl")? > Is it a set of tools (a.o. strong random number generators) for developing > cryptographic applications in Java? > Is it both? Does it intend to be more? > > In order to simplif

Re: [Crypto] What is it ?

On Wed, Jun 15, 2022 at 12:51 AM sebb wrote: > However, it might make it easier to release the binaries if they were > packaged separately, one per OS. That is a good point, of course! I would completely support that! Jochen -

Re: [Crypto] What is it ?

aps Gary can find it and check > it in. In the meantime, I'll see if I can build one and provide it for > review. I think it would address many of the frustrations that people have > voiced here lately. Thanks for bringing up the issue. > > Alex > > On Wed, Jun

Re: [Crypto] What is it ?

On Thu, Jun 16, 2022 at 1:03 AM sebb wrote: > But unless one can host macOS on Windows or vice-versa, AFAICT it will > still require two hosts to generate a release. Well, that's the advantage of your suggestion to release the binaries separately. Jochen ---

Re: [Crypto] What is it ?

On Wed, Jun 15, 2022 at 6:33 PM Matt Sicker wrote: > > We could always request a Windows VM from Infra if necessary for building > releases. Same for a Mac VM or Linux VM, though the Linux one can be done > fairly easily via Docker on any OS (even FreeBSD supports Linux containers > now). Didn

Re: [CRYPTO] Multiple Docker files - are they both needed?

On Thu, Jun 16, 2022 at 7:00 PM sebb wrote: > [1] src/docker/Dockerfile > [2] src/conf/Docker/Dockerfile-luw Have to admit, that I wasn't aware of [2], when I created [1]. Mine is incomplete, and can easily be removed. Was basically just an attempt to reproduce the build instructions in the hope

Re: [CRYPTO] Drop support for OpenSSL < 1.1.x

On Wed, Jun 29, 2022 at 7:08 PM Gary Gregory wrote: > > An important aspect to consider is compatibility, we do not want to break > anything within a major version. True, but nothing prevents us from incrementing the major version number at this point. That would also enable us, to address more

Re: [jira] [Resolved] (CRYPTO-158) Illegal reflective access

Has this really been resolved? My understanding is, that Gary's remark applies to the comment by Matthew L. only, but not to the original reporters issue. Just asking, because I have recently learned to use method handles as a solution for this kind of messages. Jochen On Thu, Jun 30, 2022 at 3:

Re: [fileupload] Have a FileUpload release (after 3.5 years)

On Tue, Jul 12, 2022 at 4:49 AM Matt Juntunen wrote: > Does anyone know what the state of 2.0 development is here? It looks > like the last feature-related changes were from Sept 2021. Is there > anything preventing a release? Mostly, that it is untested. On the other hand, it should be sufficie

Re: [VOTE][LAZY] Release Apache Commons Parent 54 based on RC1

On Sun, Sep 18, 2022 at 5:47 PM Gary Gregory wrote: > Details of changes since 53 are in the release notes: > > https://dist.apache.org/repos/dist/dev/commons/commons-parent/54-RC1/RELEASE-NOTES.txt > > https://dist.apache.org/repos/dist/dev/commons/commons-parent/54-RC1/site/changes-re

Re: Math: Yearly patch for commons-math3

Hi, David, if you want to be sure, that commons-math3 is being maintained, then I suggest that you take a look at the Git repository log. That should be sufficient: https://gitbox.apache.org/repos/asf?p=commons-math.git;a=log Jochen On Tue, Dec 6, 2022 at 3:57 PM Darrell Merryweather wrote: >

Re: [FILEUPLOAD] State of the 1.6 branch

On Wed, Dec 14, 2022 at 12:20 PM Mark Thomas wrote: > - Delete the b2_0 branch > - Move the head of the b1_4 branch to the 1.4 tag > - Update the b1_4 branch for development of 1.4.1 >(or should that be 1.5 and start a new branch?) > - Back-port my recent file count limit change If you can d

Re: [VOTE] Release Apache Commons FileUpload 1.5 based on RC1

Here's my +1. Thanks for your work! On Thu, Feb 9, 2023 at 2:39 PM Mark Thomas wrote: > > Ping. One more PMC member vote required. > > Mark > > On 01/02/2023 12:57, Mark Thomas wrote: > > We have fixed a few bugs and added some small enhancements since > > FileUpload 1.4 was released, so I would

Re: [Beanutils] BeanUtilsBean2

On Thu, Feb 9, 2023 at 1:47 PM Gary Gregory wrote: > > For 2.0, I think we should make the BeanUtilsBean2 class introduced in > 1.8.0 the only behavior, removing the need for the class. I think, these kind of ideas are exactly, what we have major updates for. Jochen -- Philosophy is useless,

Re: [lang] Considering a new String utility class

On Wed, Mar 15, 2023 at 1:58 PM Gary Gregory wrote: > Instead, I can see adding a new String utility class that tracks such > attributes on its instance such that you'd say something like: > - Strings.caseSensitive().someOperation(...) > - Strings.caseInsensitive().someOperation(...). Agreed 100

Re: [apache/commons-configuration] Use relocated artifact directly (PR #445)

Are we really using slf4j within Commons? Jochen On Sun, Jul 7, 2024 at 12:38 PM Piotrek Żygieło wrote: > [INFO] -< org.apache.commons:commons-configuration2 > >-- > [INFO] Building Apache Commons Configuration 2.11.1-SNAPSHOT > [INFO] from pom.xml > [INFO] -

Re: Announce: Commons Inject

o position this framework for specific use cases? In >> >>>> which way is it different or special from other implementations? >> >>>> >> >>>> Just as one example: In the company I am working for, we are using >> CDI >> >>>

Re: [DISCUSS] Jira karma for ASF committers? (Was: Re: [ANNOUNCEMENT] Apache Commons grants write access to all ASF committers)

> You're bringing up a valid point here... If ASF committers can change the > code/fix bugs/implement new features, they should be able to modify the > corresponding jira tickets. They should be able... yes. But does thatt mean we've got to enable it for all ASF now? I don't think so. If someone's

Re: [All] Moving to git

On Mon, Dec 29, 2014 at 3:16 PM, Stefan Bodewig wrote: > Just as a "letter of intent" - I'd prefer to cut Compress 1.10 while > we're still in svn (as I know how to do it, I'm in the "avoid the > release plugin" camp) and call for a vote for moving to git after that. 1.) And why don't you intend

Re: [ALL] Commons Parent - additional minimal site building profile?

On Tue, Jan 20, 2015 at 8:50 AM, Benedikt Ritter wrote: >> But that only works for Unix OSes; and it has to be downloaded. You're not being serious, aren't you? +1 to one or more profiles being added to the parent POM. These are easily usable, regardless of the platform/development environment

Publishing a Sandbox Site

Hi, could anybody advise me on how to publish the website (more precisely: The docs) for a sandbox project? Thanks, Jochen -- Our time is just a point along a line that runs forever with no end. (Al Stewart, Lord Grenville)

Re: Publishing a Sandbox Site

On Wed, Jan 21, 2015 at 6:13 PM, Gary Gregory wrote: > Is it different than publishing any other site? I would hope the > instructions on how to use our CMS apply here too. No idea. Bu anyways: What are those instructions? Thanks, Jochen > On Tue, Jan 20, 2015 at 7:34 AM, Jochen

Creating a Wiki Page

Hi, are there any special privileges, one needs to create a new page on wiki.apache.org/commons? If so, could I have those privileges? Thanks, Jochen -- Our time is just a point along a line that runs forever with no end. (Al Stewart, Lord Grenville) --

Re: Creating a Wiki Page

Same as user ID: jochen On Thu, Jan 22, 2015 at 11:23 AM, Stefan Bodewig wrote: > On 2015-01-22, Jochen Wiedmann wrote: > >> are there any special privileges, one needs to create a new page on >> wiki.apache.org/commons? > > Yes, you need to be added to the contributors

Re: Publishing a Sandbox Site

On Thu, Jan 22, 2015 at 12:44 PM, Benedikt Ritter wrote: > You can find the instructions here [1]. Basically you'll need to inherit > from our parent pom. For sandbox components there is a special sandbox pom. > Further more some properties need to be set up. Probably it's best to have > a look a

Re: [compress] (Internal)LZWInputStream

On Sun, Feb 1, 2015 at 7:04 AM, Stefan Bodewig wrote: > * (Internal)LZWInputStream has a bunch of protected fields that slipped > through a few releases ago. We should add getter/setter pairs and > deprecate using the fields. Sebb would like to even make the fields > private assuming the

Re: [RDF] grant Commons RDF (incubating) permission to deploy artifacts to org.apache.commons groupId

On Sun, May 3, 2015 at 4:44 PM, Sergio Fernández wrote: > we're discussing our first incubating release, and we came to the issue > that we are not grant with permissions to deploy maven artifacts to the > org.apache.commons groupId [1]. Why org.apache.commons, and not, say, org.apache.commons.rd

Re: [RDF] grant Commons RDF (incubating) permission to deploy artifacts to org.apache.commons groupId

On Sun, May 3, 2015 at 9:03 PM, Phil Steitz wrote: > On 5/3/15 11:56 AM, Jochen Wiedmann wrote: >> On Sun, May 3, 2015 at 4:44 PM, Sergio Fernández wrote: >>> we're discussing our first incubating release, and we came to the issue >>> that we are not grant

Re: [Git] drop SVN repos for components using Git?

On Sat, May 9, 2015 at 12:14 PM, Benedikt Ritter wrote: > hm, the problem may be, that the scm section of the poms in the pre-git > releases point to the svn location. If so, then the project hasn't really migrated to git, has it? Jochen -- Any world that can produce the Taj Mahal, William S

Re: [Git] drop SVN repos for components using Git?

On Sat, May 9, 2015 at 2:35 PM, sebb wrote: > Poms cannot be changed *after* release. No, but you can release a new one. > There may even be some CVS references in early POMs; that does not > mean the ASF has not migrated away from CVS. Quite so. And I can't remember a single case where that p

Automatic rebuild of the site with foopubsub

Hi, sorry, if this is off topic. Anyways: On behalf of another Apache project (Incubator AsterixDB), I am researching the possibility to have an automated rebuild of the site in conjunction with svnpubsub, or gitpubsub. (Should be a fairly generic question.) Namely, I am interested in the followi

Re: Automatic rebuild of the site with foopubsub

On Tue, Jun 23, 2015 at 9:36 AM, Benedikt Ritter wrote: > At Commons we publish the site manually via mvn clean site-deploy. But I > think we would be interested in an automated solution. Thanks, Benedikt, that's all I need to know right now. Jochen -- Any world that can produce the Taj Mah

Re: Need permissions to make release....

On Sun, Jun 21, 2015 at 9:56 AM, Kristian Rosenvold wrote: >> I also suspect that I'll fully be lacking any permissions to publish to >> repository.apache.org. Quite likely, but thats an entirely different matter. AFAIK, you need a separate Jira issue for that. Please create one. Jochen --

Re: [ALL] re-organise dist directory layout?

-1 for existing stuff. I don't see any need to spend work on breaking things. +0 for new stuff I don't see any real advantages. On Tue, Jun 23, 2015 at 3:38 PM, Phil Steitz wrote: > -0 > Would break some scripts I have and might break some things others > use to grab distributions. On the ot

Re: [DISCUSSION] jlibaio proposal

On Wed, Jul 15, 2015 at 8:43 AM, Benedikt Ritter wrote: > Apache Commons is open to all ASF committers and we invite anybody to share > code here [1]. So generally speaking this is something that would fit into > commons. Are you the only one working on this right now? It is better to > have at l

Re: Proposed Contribution to Apache Commons,

Hi, Norman, On Tue, Sep 29, 2015 at 10:06 PM, wrote: > My colleague Jeff Rothenberg and I, retirees, have developed an alternative to > using regular expressions for searching for (and optionally replacing) > patterns in text. I admit that I am becoming somewhat cautious by reading about "an a

Re: [SANDBOX][BEANUTILS2] Using Java 8?

As this is fairly new stuff, and you're the one doing it: Go ahead, as you like. Jochen On Sun, Nov 8, 2015 at 10:05 AM, Benedikt Ritter wrote: > Hi all, > > I've started work on beanutils2 again. I see a lot of potential regarding > the API, when we upgrade the project to Java 8. For example,

Re: [collection][security] InvokerTransformer missused in java object serialisation exploits

I like the property based approach. In particular, because we can evaltuate that property within private void readObject Or, in other words: We can ship a jar that has the vulnerability disabled by default (property isn't set). However, if the user attempts to deserialize an InvokerTransforme

Re: [collection][security] InvokerTransformer missused in java object serialisation exploits

Makes sense. On Sun, Nov 8, 2015 at 3:47 PM, Gary Gregory wrote: > I like the property option as a stopgap. > > Should we add a programatic option so that programmers can also control > this on a per invoker basis? > > Gary > On Nov 8, 2015 6:43 AM, "Jochen Wiedman

Re: Blog post "commons" vulnerability

I think that two important actions are missing: - Cut new releases. - Create a CVE id. (No idea, who can do that or how its done.) We should wait with any publication until these are completed. Jochen On Tue, Nov 10, 2015 at 8:19 AM, Benedikt Ritter wrote: > Hi, > > I think it is appropr

Re: Blog post "commons" vulnerability

On Tue, Nov 10, 2015 at 10:51 AM, Mark Thomas > You only need a CVE ID if there is a vulnerability. > > I would argue (and the OPs appear to agree with me) that this is NOT a > vulnerability in Apache Commons Collections. The vulnerability lies in > applications that are blindly deserializing dat

Re: [LANG] Why is project.build.sourceencoding set to ISO-8859-1?

On Thu, Nov 19, 2015 at 8:38 AM, Emmanuel Bourg wrote: > Because we don't use any non latin character in the source code (yet) ? Which hopefully remains just like that, because we do it for good reason. -- The next time you hear: "Don't reinvent the wheel!" http://www.keystonedevelopment.co.

Re: Eirik Bjørsnøs' notsoserial deserialization protection agent, for Commons?

On Wed, Nov 18, 2015 at 10:58 PM, Bertrand Delacretaz wrote: > I tested his agent in a variety of scenarios and it looks to me like a > great solution for the COLLECTIONS-580 deserialization issue, for > cases when one cannot modify their source code to use something like > IO-487. Be that as it

Re: [ANNOUNCE] Commons Build Plugin 1.5

On Sun, Nov 29, 2015 at 1:27 AM, sebb wrote: > The Commons Build Plugin is a Maven 2.x Ant Plugin used by Apache Commons > developers to create/update various files related to building component sites. As we are practically all using Maven now: What is the sense in maintaining an Ant plugin? So

  1   2   3   4   5   6   >