Re: [VOTE] Release Apache Maven version 3.8.5

2022-03-05 Thread Christoph Läubrich

+1 (even though I don't know if my vote counts for anything)

I have run the Tycho build and integration tests without an issue using 
the maven 3.8.5 from the dev dist directory.


Am 05.03.22 um 17:47 schrieb Michael Osipov:

Hi,

We solved 27 issues:
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316922=12351105 



There are still hundreds of issues left in JIRA:
https://issues.apache.org/jira/issues/?jql=project%20%3D%20MNG%20AND%20resolution%20%3D%20Unresolved 



Staging repo:
https://repository.apache.org/content/repositories/maven-1724/

Dev dist directory:
https://dist.apache.org/repos/dist/dev/maven/maven-3/3.8.5/

Source release checksums:
apache-maven-3.8.5-src.zip sha512: 
7edb6864834a81c11cf9d22a8110abc3f5f96360bdbc4bc33ec0c98dc389dd9fc71465253a87729dbe7b8a011b2ec38afa0e011172657c3a97ef96fb6f40292b 

apache-maven-3.8.5-src.tar.gz sha512: 
1aa1b2dcba794b7e4cbc8e2ff9baf64283fb3883ae93efff26fe259578504b60a8b68404a074f4741922e462fa696cbbe71f9d74e4e6316ed0e389d25667 



Binary release checksums:
apache-maven-3.8.5-bin.zip sha512: 
f9f838b4adaf23db0204a6cafa52bf1125bd2d649fd676843fd05e82866b596ec19c4f3de60d5e3ff17f10a63d96c141311ff9bc2bfa816eade7a5cbff2bd925 

apache-maven-3.8.5-bin.tar.gz sha512: 
89ab8ece99292476447ef6a6800d9842bbb60787b9b8a45c103aa61d2f205a971d8c3ddfb8b03e514455b4173602bd015e82958c0b3ddc1728a57126f773c743 



Draft for release notes:
https://github.com/apache/maven-site/pull/292


Guide to testing staged releases:
http://maven.apache.org/guides/development/guide-testing-releases.html

Vote open until 2021-03-13T12:00Z

[ ] +1
[ ] +0
[ ] -1

-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



Re: [VOTE] Release Apache Maven version 3.8.5

2022-03-05 Thread Dan Tran
Hello

In maven 3.8.4,  Maven team reverted a number of fixes (which caused
regressions) related to concurrency issues.  does 3.8.5 add back the fixes?

The release notes mention a couple of parallel build related fixes, but i
am not sure if they do address all the fixes before the revert

Thanks

-D

On Sat, Mar 5, 2022 at 8:47 AM Michael Osipov  wrote:

> Hi,
>
> We solved 27 issues:
>
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316922=12351105
>
> There are still hundreds of issues left in JIRA:
>
> https://issues.apache.org/jira/issues/?jql=project%20%3D%20MNG%20AND%20resolution%20%3D%20Unresolved
>
> Staging repo:
> https://repository.apache.org/content/repositories/maven-1724/
>
> Dev dist directory:
> https://dist.apache.org/repos/dist/dev/maven/maven-3/3.8.5/
>
> Source release checksums:
> apache-maven-3.8.5-src.zip sha512:
>
> 7edb6864834a81c11cf9d22a8110abc3f5f96360bdbc4bc33ec0c98dc389dd9fc71465253a87729dbe7b8a011b2ec38afa0e011172657c3a97ef96fb6f40292b
> apache-maven-3.8.5-src.tar.gz sha512:
>
> 1aa1b2dcba794b7e4cbc8e2ff9baf64283fb3883ae93efff26fe259578504b60a8b68404a074f4741922e462fa696cbbe71f9d74e4e6316ed0e389d25667
>
> Binary release checksums:
> apache-maven-3.8.5-bin.zip sha512:
>
> f9f838b4adaf23db0204a6cafa52bf1125bd2d649fd676843fd05e82866b596ec19c4f3de60d5e3ff17f10a63d96c141311ff9bc2bfa816eade7a5cbff2bd925
> apache-maven-3.8.5-bin.tar.gz sha512:
>
> 89ab8ece99292476447ef6a6800d9842bbb60787b9b8a45c103aa61d2f205a971d8c3ddfb8b03e514455b4173602bd015e82958c0b3ddc1728a57126f773c743
>
> Draft for release notes:
> https://github.com/apache/maven-site/pull/292
>
>
> Guide to testing staged releases:
> http://maven.apache.org/guides/development/guide-testing-releases.html
>
> Vote open until 2021-03-13T12:00Z
>
> [ ] +1
> [ ] +0
> [ ] -1
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> For additional commands, e-mail: dev-h...@maven.apache.org
>
>


Re: [VOTE] Release Apache Maven Dependency Plugin version 3.3.0

2022-03-05 Thread Olivier Lamy
+1

On Sun, 6 Mar 2022 at 05:08, Slawomir Jaranowski 
wrote:

> Hi,
>
> We solved 24 issues:
>
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12340588=Text=12317227
>
> There are still a couple of issues left in JIRA:
>
> https://issues.apache.org/jira/issues/?jql=project%20%3D%20MDEP%20AND%20resolution%20%3D%20Unresolved%20ORDER%20BY%20key%20DESC%2C%20priority%20DESC
>
> Staging repo:
> https://repository.apache.org/content/repositories/maven-1725/
>
> https://repository.apache.org/content/repositories/maven-1725/org/apache/maven/plugins/maven-dependency-plugin/3.3.0/maven-dependency-plugin-3.3.0-source-release.zip
>
> Source release checksum(s):
> maven-dependency-plugin-3.3.0-source-release.zip - SHA-512 :
>
> b0c650fa440078fcc63c7af70219e937be92ed16aeb6c12057e43c66e605c0d3c31f8f681b014fc0adffe1e20d5a73c5e4bbedc9c70d91637f7d85ea4d60c27c
>
> Staging site:
> https://maven.apache.org/plugins-archives/maven-dependency-plugin-LATEST/
>
> Guide to testing staged releases:
> https://maven.apache.org/guides/development/guide-testing-releases.html
>
> Vote open for at least 72 hours.
>
> [ ] +1
> [ ] +0
> [ ] -1
>
> --
> Sławomir Jaranowski
>


Re: [VOTE] Release Apache Maven Dependency Plugin version 3.3.0

2022-03-05 Thread Sylwester Lachiewicz
+1

sob., 5 mar 2022, 20:17 użytkownik Michael Osipov 
napisał:

> Am 2022-03-05 um 20:07 schrieb Slawomir Jaranowski:
> > Hi,
> >
> > We solved 24 issues:
> >
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12340588=Text=12317227
> >
> > There are still a couple of issues left in JIRA:
> >
> https://issues.apache.org/jira/issues/?jql=project%20%3D%20MDEP%20AND%20resolution%20%3D%20Unresolved%20ORDER%20BY%20key%20DESC%2C%20priority%20DESC
> >
> > Staging repo:
> > https://repository.apache.org/content/repositories/maven-1725/
> >
> https://repository.apache.org/content/repositories/maven-1725/org/apache/maven/plugins/maven-dependency-plugin/3.3.0/maven-dependency-plugin-3.3.0-source-release.zip
> >
> > Source release checksum(s):
> > maven-dependency-plugin-3.3.0-source-release.zip - SHA-512 :
> >
> b0c650fa440078fcc63c7af70219e937be92ed16aeb6c12057e43c66e605c0d3c31f8f681b014fc0adffe1e20d5a73c5e4bbedc9c70d91637f7d85ea4d60c27c
> >
> > Staging site:
> >
> https://maven.apache.org/plugins-archives/maven-dependency-plugin-LATEST/
> >
> > Guide to testing staged releases:
> > https://maven.apache.org/guides/development/guide-testing-releases.html
> >
> > Vote open for at least 72 hours.
>
> +1
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> For additional commands, e-mail: dev-h...@maven.apache.org
>
>


Re: [VOTE] Release Apache Maven Dependency Plugin version 3.3.0

2022-03-05 Thread Michael Osipov

Am 2022-03-05 um 20:07 schrieb Slawomir Jaranowski:

Hi,

We solved 24 issues:
https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12340588=Text=12317227

There are still a couple of issues left in JIRA:
https://issues.apache.org/jira/issues/?jql=project%20%3D%20MDEP%20AND%20resolution%20%3D%20Unresolved%20ORDER%20BY%20key%20DESC%2C%20priority%20DESC

Staging repo:
https://repository.apache.org/content/repositories/maven-1725/
https://repository.apache.org/content/repositories/maven-1725/org/apache/maven/plugins/maven-dependency-plugin/3.3.0/maven-dependency-plugin-3.3.0-source-release.zip

Source release checksum(s):
maven-dependency-plugin-3.3.0-source-release.zip - SHA-512 :
b0c650fa440078fcc63c7af70219e937be92ed16aeb6c12057e43c66e605c0d3c31f8f681b014fc0adffe1e20d5a73c5e4bbedc9c70d91637f7d85ea4d60c27c

Staging site:
https://maven.apache.org/plugins-archives/maven-dependency-plugin-LATEST/

Guide to testing staged releases:
https://maven.apache.org/guides/development/guide-testing-releases.html

Vote open for at least 72 hours.


+1

-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



[VOTE] Release Apache Maven Dependency Plugin version 3.3.0

2022-03-05 Thread Slawomir Jaranowski
Hi,

We solved 24 issues:
https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12340588=Text=12317227

There are still a couple of issues left in JIRA:
https://issues.apache.org/jira/issues/?jql=project%20%3D%20MDEP%20AND%20resolution%20%3D%20Unresolved%20ORDER%20BY%20key%20DESC%2C%20priority%20DESC

Staging repo:
https://repository.apache.org/content/repositories/maven-1725/
https://repository.apache.org/content/repositories/maven-1725/org/apache/maven/plugins/maven-dependency-plugin/3.3.0/maven-dependency-plugin-3.3.0-source-release.zip

Source release checksum(s):
maven-dependency-plugin-3.3.0-source-release.zip - SHA-512 :
b0c650fa440078fcc63c7af70219e937be92ed16aeb6c12057e43c66e605c0d3c31f8f681b014fc0adffe1e20d5a73c5e4bbedc9c70d91637f7d85ea4d60c27c

Staging site:
https://maven.apache.org/plugins-archives/maven-dependency-plugin-LATEST/

Guide to testing staged releases:
https://maven.apache.org/guides/development/guide-testing-releases.html

Vote open for at least 72 hours.

[ ] +1
[ ] +0
[ ] -1

-- 
Sławomir Jaranowski


[VOTE] Release Apache Maven version 3.8.5

2022-03-05 Thread Michael Osipov

Hi,

We solved 27 issues:
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316922=12351105

There are still hundreds of issues left in JIRA:
https://issues.apache.org/jira/issues/?jql=project%20%3D%20MNG%20AND%20resolution%20%3D%20Unresolved

Staging repo:
https://repository.apache.org/content/repositories/maven-1724/

Dev dist directory:
https://dist.apache.org/repos/dist/dev/maven/maven-3/3.8.5/

Source release checksums:
apache-maven-3.8.5-src.zip sha512: 
7edb6864834a81c11cf9d22a8110abc3f5f96360bdbc4bc33ec0c98dc389dd9fc71465253a87729dbe7b8a011b2ec38afa0e011172657c3a97ef96fb6f40292b
apache-maven-3.8.5-src.tar.gz sha512: 
1aa1b2dcba794b7e4cbc8e2ff9baf64283fb3883ae93efff26fe259578504b60a8b68404a074f4741922e462fa696cbbe71f9d74e4e6316ed0e389d25667


Binary release checksums:
apache-maven-3.8.5-bin.zip sha512: 
f9f838b4adaf23db0204a6cafa52bf1125bd2d649fd676843fd05e82866b596ec19c4f3de60d5e3ff17f10a63d96c141311ff9bc2bfa816eade7a5cbff2bd925
apache-maven-3.8.5-bin.tar.gz sha512: 
89ab8ece99292476447ef6a6800d9842bbb60787b9b8a45c103aa61d2f205a971d8c3ddfb8b03e514455b4173602bd015e82958c0b3ddc1728a57126f773c743


Draft for release notes:
https://github.com/apache/maven-site/pull/292


Guide to testing staged releases:
http://maven.apache.org/guides/development/guide-testing-releases.html

Vote open until 2021-03-13T12:00Z

[ ] +1
[ ] +0
[ ] -1

-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



Re: Switch to Matomo Tracking code

2022-03-05 Thread Arnaud Héritier
It’s around 40 to 50k active users per day (week days)

Le sam. 5 mars 2022 à 13:41, Benjamin Marwell  a
écrit :

> Hi everyone!
>
> The ASF now runs a public Matomo instance [1].
> They are open for more projects now.
>
> If it is okay with you, we could add a tracking code to our site.xml file
> [2].
> It is an easy change, just add a body-head section [4].
>
> Even if you do not agree to add Matomo, I will create a PR to remove
> the Google Analytics tracking code, as it violates our privacy policy
> [3] and is already illegal to use in some countries, e.g. France.
>
> Let me know what you think.
>
> - Ben
>
> PS: Someone with access to Google Analytics, please provide some rough
> numbers (daily hits) to Martijn, who is CC'd. Thanks!
>
> [1]: https://matomo.privacy.apache.org/
> [2]: https://github.com/apache/maven-parent/blob/master/src/site/site.xml
> [3]:
> https://www.apache.org/foundation/policies/privacy.html#:~:text=We%20do%20not%20track%20or,for%20the%20purpose%20described%20above
> .
> [4]:
> https://maven.apache.org/plugins/maven-site-plugin/examples/sitedescriptor.html#Inject_xhtml_into_.3Chead.3E
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
> For additional commands, e-mail: dev-h...@maven.apache.org
>
> --
Arnaud Héritier
Twitter/GitHub/... : aheritier


Switch to Matomo Tracking code

2022-03-05 Thread Benjamin Marwell
Hi everyone!

The ASF now runs a public Matomo instance [1].
They are open for more projects now.

If it is okay with you, we could add a tracking code to our site.xml file [2].
It is an easy change, just add a body-head section [4].

Even if you do not agree to add Matomo, I will create a PR to remove
the Google Analytics tracking code, as it violates our privacy policy
[3] and is already illegal to use in some countries, e.g. France.

Let me know what you think.

- Ben

PS: Someone with access to Google Analytics, please provide some rough
numbers (daily hits) to Martijn, who is CC'd. Thanks!

[1]: https://matomo.privacy.apache.org/
[2]: https://github.com/apache/maven-parent/blob/master/src/site/site.xml
[3]: 
https://www.apache.org/foundation/policies/privacy.html#:~:text=We%20do%20not%20track%20or,for%20the%20purpose%20described%20above.
[4]: 
https://maven.apache.org/plugins/maven-site-plugin/examples/sitedescriptor.html#Inject_xhtml_into_.3Chead.3E

-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org



Re: Maven Dependency Plugin - Log4j vulnerabilities

2022-03-05 Thread Michael Osipov

Guys,

please stop spamming the dev mailing list with this. Take the problem 
off list, since this is not a Maven problem.


M

-
To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org
For additional commands, e-mail: dev-h...@maven.apache.org