Hi Ruben,
On Fri, 2020-11-27 at 15:13 -0800, Ruben Reusser wrote:
> thank you - there seems to be quite a list of outdated bundles int
> the
> starter even outside of sling itself. I am trying to wrap my head
> around
> how to make bring everything safely up to date.
>
> it looks like some of t
Eric,
thank you - there seems to be quite a list of outdated bundles int the
starter even outside of sling itself. I am trying to wrap my head around
how to make bring everything safely up to date.
it looks like some of the versions in use have known security
vulnerabilities.
Ruben
On 11/
Hi Ruben,
I've just fixed the org.apache.sling.jcr.contentloader item from your
list. It might be worth opening a new issue in jira for tracking the
others.
FYI: I usually use the following command to produce a report on
dependencies that are not the latest version:
*mvn versions:display-depend
here's the current list of mismatches:
org.apache.sling.commons.fsclassloader starter: 1.0.14 downloads: 1.0.8
org.apache.sling.commons.scheduler starter: 2.7.6 downloads: 2.7.2
org.apache.sling.models.impl starter: 1.4.12 downloads: 1.4.16
org.apache.sling.serviceusermapper starter: 1.4.4 downlo
Hi Ruben,
On Tue, Nov 24, 2020 at 4:29 PM Ruben Reusser wrote:
> ...is there a process to update the starter and the downloads page when a
> new version of a bundle is released?...
Updating it is part of our release instructions at
https://sling.apache.org/documentation/development/release-manag
dear sling devs
I was looking at the feature files in sling starter as bit today and
noticed some discrepancies between the sling starter and the latest
released modules list on the sling website
just some examples:
org.apache.sling:org.apache.sling.commons.osgi starter: 2.4.0, downloads
pa