[Jenkins] Sling » Modules » sling-org-apache-sling-launchpad-testing » master #1014 is FIXED

2022-04-07 Thread Apache Jenkins Server
Please see https://ci-builds.apache.org/job/Sling/job/modules/job/sling-org-apache-sling-launchpad-testing/job/master/1014/ for details. No further emails will be sent until the status of the build is changed.

Re: [NOTICE] Dependabot Updates enabled for all projects

2022-04-07 Thread Konrad Windszus
I created https://issues.apache.org/jira/browse/INFRA-23111 to allow disabling dependabot for repos. Konrad > On 7. Apr 2022, at 11:51, Konrad Windszus wrote: > > I fully agree here. I don’t think dependabot can be controlled via .asf.yaml

[GitHub] [sling-org-apache-sling-caconfig-integration-tests] sonarcloud[bot] commented on pull request #1: SLING-11114 update SLING API to 2.21.0

2022-04-07 Thread GitBox
sonarcloud[bot] commented on PR #1: URL: https://github.com/apache/sling-org-apache-sling-caconfig-integration-tests/pull/1#issuecomment-1092021340 Kudos, SonarCloud Quality Gate passed! [![Quality Gate

Re: [NOTICE] Dependabot Updates enabled for all projects

2022-04-07 Thread Eric Norman
You can certainly (correctly) argue the technical details about how we often aren't affected by whatever vulnerability that dependabot is warning about, The problem is that the third-party security scanning tools aren't going to understand that nuance and you will have to keep explaining those

[jira] [Updated] (SLING-11248) Post empty body should fail gracefully

2022-04-07 Thread Radu Cotescu (Jira)
[ https://issues.apache.org/jira/browse/SLING-11248?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Radu Cotescu updated SLING-11248: - Description: We observed following stacktrace, while this is apparently produced by some bot

[jira] [Assigned] (SLING-11248) Post empty body should fail gracefully

2022-04-07 Thread Radu Cotescu (Jira)
[ https://issues.apache.org/jira/browse/SLING-11248?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Radu Cotescu reassigned SLING-11248: Assignee: Radu Cotescu > Post empty body should fail gracefully >

[jira] [Updated] (SLING-11248) Post empty body should fail gracefully

2022-04-07 Thread Radu Cotescu (Jira)
[ https://issues.apache.org/jira/browse/SLING-11248?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Radu Cotescu updated SLING-11248: - Fix Version/s: GraphQL Core 0.0.14 > Post empty body should fail gracefully >

Re: [VOTE] Release Apache Sling JCR Jackrabbit User Manager version 2.2.20

2022-04-07 Thread Radu Cotescu
+1 > On 5 Apr 2022, at 00:54, Eric Norman wrote: > > Please vote to approve this release: > > [ ] +1 Approve the release > [ ] 0 Don't care > [ ] -1 Don't release, because ...

[jira] [Commented] (SLING-11251) Apache Sling Post Servlet consumes too much resources during content ingestion

2022-04-07 Thread Robert Munteanu (Jira)
[ https://issues.apache.org/jira/browse/SLING-11251?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17518893#comment-17518893 ] Robert Munteanu commented on SLING-11251: - Thanks for the report [~artika4biz]. Is the script

Re: confirm unsubscribe from dev@sling.apache.org

2022-04-07 Thread ben
Zitat von dev-h...@sling.apache.org: Hi! This is the ezmlm program. I'm managing the dev@sling.apache.org mailing list. I'm working for my owner, who can be reached at dev-ow...@sling.apache.org. To confirm that you would like   b...@hitthecodejack.com removed from the dev mailing list,

Re: Fwd: [NOTICE] Dependabot Updates enabled for all projects

2022-04-07 Thread Robert Munteanu
On Wed, 2022-04-06 at 11:35 -0700, Eric Norman wrote: > Perhaps some analysis of whether bumping the dependency version > changes the > generated Import-Package instruction can provide some insight > regarding the > compatibility.  If the new version of the dependency only has changes > in >

Re: [VOTE] Release Apache Sling JCR Jackrabbit User Manager version 2.2.20

2022-04-07 Thread Robert Munteanu
On Mon, 2022-04-04 at 15:54 -0700, Eric Norman wrote: > Please vote to approve this release: +1 Robert signature.asc Description: This is a digitally signed message part

[Jenkins] Sling » Modules » sling-org-apache-sling-launchpad-testing » master #1013 is BROKEN

2022-04-07 Thread Apache Jenkins Server
22-04-07T11:31:45Z [INFO] [INFO] [jenkins-event-spy] Generated /home/jenkins/jenkins-agent/workspace/e-sling-launchpad-testing_master@tmp/withMaven40030dec/maven-spy-20220407-112815-41313545225007099728839.log [ERROR] Failed to execute goal org.apache.maven.plugins:mave

Re: [NOTICE] Dependabot Updates enabled for all projects

2022-04-07 Thread Konrad Windszus
I fully agree here. I don’t think dependabot can be controlled via .asf.yaml yet, so for now we need to disable manually per repo… > Am 07.04.2022 um 10:18 schrieb Stefan Seifert > : > > i agree with robert that probably for most of our modules dependabot is not > helpful (exceptions are the

[jira] [Updated] (SLING-11181) Emit metrics that distinguish transient and permanent distribution failures

2022-04-07 Thread Timothee Maret (Jira)
[ https://issues.apache.org/jira/browse/SLING-11181?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Timothee Maret updated SLING-11181: --- Fix Version/s: Content Distribution Journal Core 0.1.26 > Emit metrics that distinguish

[jira] [Assigned] (SLING-11181) Emit metrics that distinguish transient and permanent distribution failures

2022-04-07 Thread Timothee Maret (Jira)
[ https://issues.apache.org/jira/browse/SLING-11181?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Timothee Maret reassigned SLING-11181: -- Assignee: José Correia > Emit metrics that distinguish transient and permanent

[jira] [Commented] (SLING-11181) Emit metrics that distinguish transient and permanent distribution failures

2022-04-07 Thread Timothee Maret (Jira)
[ https://issues.apache.org/jira/browse/SLING-11181?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17518696#comment-17518696 ] Timothee Maret commented on SLING-11181: Thanks for addressing the comments [~jose-correia]. I

RE: [NOTICE] Dependabot Updates enabled for all projects

2022-04-07 Thread Stefan Seifert
i agree with robert that probably for most of our modules dependabot is not helpful (exceptions are the maven plugins and that part of sling starter which controls which bundles are really deployed at runtime). in our OSGi world, the dependency just defines the contract against which