Re: [VOTE] TomEE 8.0.15

2023-05-16 Thread Richard Zowalla
Hi, the vote passes with 5 +1 Cesar Hernandez (binding) Daniel Dias Dos Santos Alex The Rocker Richard Zowalla (binding) Jean-Louis Monteiro (binding) I'll proceed with the steps. Gruß Richard Am Montag, dem 08.05.2023 um 14:50 +0200 schrieb Richard Zowalla: > Hi all, > > this is a vote for

Re: [VOTE] TomEE 8.0.15

2023-05-16 Thread Jean-Louis Monteiro
+1 (binding) Thanks Richard and sorry for the delay. I started the review yesterday and it looks good to me. -- Jean-Louis Monteiro http://twitter.com/jlouismonteiro http://www.tomitribe.com On Tue, May 16, 2023 at 10:51 AM Richard Zowalla wrote: > Here is my own +1 (binding) > > Am Montag, de

Re: [VOTE] TomEE 8.0.15

2023-05-16 Thread Richard Zowalla
Here is my own +1 (binding) Am Montag, dem 08.05.2023 um 14:50 +0200 schrieb Richard Zowalla: > Hi all, > > this is a vote for a release of Apache TomEE 8.0.15. > > It is a maintenance release with some bug fixes and dependencies > upgrades (addressing some CVEs) > > ### > > Maven

Re: [VOTE] TomEE 8.0.15

2023-05-14 Thread Rod Jenkins
This is a good week for me to get the docker images out. I’ll be ready. Rod. Sent from my iPhone > On May 14, 2023, at 1:15 PM, Jean-Louis Monteiro wrote: > > I promise I'll have a look tomorrow morning > > Le dim. 14 mai 2023, 20:02, Richard Zowalla a écrit : > >> Any more votes? >> >

Re: [VOTE] TomEE 8.0.15

2023-05-14 Thread Jean-Louis Monteiro
I promise I'll have a look tomorrow morning Le dim. 14 mai 2023, 20:02, Richard Zowalla a écrit : > Any more votes? > > > Am Montag, dem 08.05.2023 um 14:50 +0200 schrieb Richard Zowalla: > > Hi all, > > > > this is a vote for a release of Apache TomEE 8.0.15. > > > > It is a maintenance release

Re: [VOTE] TomEE 8.0.15

2023-05-14 Thread Richard Zowalla
Any more votes? Am Montag, dem 08.05.2023 um 14:50 +0200 schrieb Richard Zowalla: > Hi all, > > this is a vote for a release of Apache TomEE 8.0.15. > > It is a maintenance release with some bug fixes and dependencies > upgrades (addressing some CVEs) > > ### > > Maven Repo: > htt

Re: [VOTE] TomEE 8.0.15

2023-05-14 Thread Richard Zowalla
Thanks for testing the release candidate, Alex! It is very much appreciated. Regarding TomEE 9.0.x / 9.1.x - yes, we were discussing doing a release. We need to run the tck to get some actual numbers after the updates for it, but I am confident, that we didn't broke too much. Stay tuned. Gruß Ric

Re: [VOTE] TomEE 8.0.15

2023-05-14 Thread Alex The Rocker
On a side note, shouldn't there be a TomEE 9.0.1 with al least same fixes as 8.0.15 - security fixes of course, but bug fixes as well if any ? Having TomEE 9.0.0 lagging behind in term of security & bug fixes wouldn't be a good incentive for Jakarta EE adoption, isn't it ? Thanks, Alex Le dim. 14

Re: [VOTE] TomEE 8.0.15

2023-05-14 Thread Alex The Rocker
+1 (non-binding) Tested with several web apps based on servlet, JAX-RS, JAX-WS, websockets, JMS, EJB ; with IBM Semeru 17.0.6 Java runtime on Linux CentOS 7.9, and found no regressions. (I was curious about impact of snakeyaml update to major 2.0 version, my web apps rely on snakeyaml, and got no

Re: [VOTE] TomEE 8.0.15

2023-05-10 Thread Richard Zowalla
Hi Alex, importing the KEYS does not mean, that you "trust" the imported keys. After importing the KEYS, you can verify, that the signature is good, i.e. the file has not been tampered with. However, due to the nature of public key cryptography, you need to additionally verify that the key was cr

Re: [VOTE] TomEE 8.0.15

2023-05-10 Thread Alex The Rocker
Hello Richard, Thanks for your answer, but I'm still confused: I previously imported TOMEE's Keys from https://downloads.apache.org/tomee/KEYS, so the "you should get knowledge of my key id (better complete fingerprint) on another, trustfully way" step is done, and yet gpg prints the warning. Am

Re: [VOTE] TomEE 8.0.15

2023-05-10 Thread Richard Zowalla
Hi, the signature could be successfully verified, that means it was really signed with my private key. The key claims it belongs to "Richard Zowalla". Yet, your GnuPG setup does not trustthis key. Everybody could create a key for "Richard Zowalla"; all you know is somebody that created a key with

Re: [VOTE] TomEE 8.0.15

2023-05-10 Thread Jean-Louis Monteiro
Hi Alexandre, I haven't checked the release yet. Maybe his signing key changed. Best -- Jean-Louis Monteiro http://twitter.com/jlouismonteiro http://www.tomitribe.com On Wed, May 10, 2023 at 10:47 AM Alex The Rocker wrote: > Hello, > > I have a doubt with this signature test: > > wget > https

Re: [VOTE] TomEE 8.0.15

2023-05-10 Thread Alex The Rocker
Hello, I have a doubt with this signature test: wget https://dist.apache.org/repos/dist/dev/tomee/staging-1214/tomee-8.0.15/apache-tomee-8.0.15-plus.tar.gz cat > apache-tomee-8.0.15-plus.tar.gz.asc (here I copy paste the contents of https://dist.apache.org/repos/dist/dev/tomee/staging-1214/tomee

Re: [VOTE] TomEE 8.0.15

2023-05-09 Thread Daniel Dias Dos Santos
Hello, +1 On Tue, May 9, 2023, 14:45 Cesar Hernandez wrote: > Reviewed latest CI builds, sanity checks and release notes. > +1, thank you! > > El lun, 8 may 2023 a las 6:50, Richard Zowalla () > escribió: > > > Hi all, > > > > this is a vote for a release of Apache TomEE 8.0.15. > > > > It is a

Re: [VOTE] TomEE 8.0.15

2023-05-09 Thread Cesar Hernandez
Reviewed latest CI builds, sanity checks and release notes. +1, thank you! El lun, 8 may 2023 a las 6:50, Richard Zowalla () escribió: > Hi all, > > this is a vote for a release of Apache TomEE 8.0.15. > > It is a maintenance release with some bug fixes and dependencies > upgrades (addressing som

[VOTE] TomEE 8.0.15

2023-05-08 Thread Richard Zowalla
Hi all, this is a vote for a release of Apache TomEE 8.0.15. It is a maintenance release with some bug fixes and dependencies upgrades (addressing some CVEs) ### Maven Repo: https://repository.apache.org/content/repositories/orgapachetomee-1214/ tomee-8.0.15-rc1 Testing TomEE 8.0