Re: 8.0.16 release

2023-10-27 Thread Jonathan S. Fisher
I got another good build locally and CI is happy too. I'm going to stage the release! On Thu, Oct 26, 2023 at 9:27 AM Jonathan S. Fisher wrote: > > Yep! I just logged that one and pushed a PR. Waiting on CI > > On Thu, Oct 26, 2023 at 9:24 AM Jamie Johnson wrote: > > > > Should this be

Re: 8.0.16 release

2023-10-27 Thread Jonathan S. Fisher
Alright, I have the build completed, signed, and uploaded the the Nexus staging repository: orgapachetomee-1221 What's next? I'm a little apprehensive to close out the staging repo for fear of prematurely publishing a release... On Fri, Oct 27, 2023 at 9:42 AM Jonathan S. Fisher wrote: > > I

Re: [PR] Regenerated BOMs after dependency upgrades (tomee)

2023-10-27 Thread via GitHub
exabrial merged PR #1075: URL: https://github.com/apache/tomee/pull/1075 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail:

[PR] Regenerated BOMs after dependency upgrades (tomee)

2023-10-27 Thread via GitHub
github-actions[bot] opened a new pull request, #1075: URL: https://github.com/apache/tomee/pull/1075 Found some uncommited changes (from BOM regeneration) after running build on TomEE 8.x branch -- This is an automated message from the Apache Git Service. To respond to the message,

[PR] Regenerated BOMs after dependency upgrades (tomee)

2023-10-27 Thread via GitHub
github-actions[bot] opened a new pull request, #1077: URL: https://github.com/apache/tomee/pull/1077 Found some uncommited changes (from BOM regeneration) after running build on TomEE main -- This is an automated message from the Apache Git Service. To respond to the message, please log

Re: [PR] Regenerated BOMs after dependency upgrades (tomee)

2023-10-27 Thread via GitHub
jgallimore merged PR #1077: URL: https://github.com/apache/tomee/pull/1077 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail:

Re: 8.0.16 release

2023-10-27 Thread Jonathan Gallimore
Thanks Jonathan. If it helps, the changeset from 5.17.5 to 5.17.6 isn't massive: https://github.com/apache/activemq/commits/activemq-5.17.x. Jon On Fri, Oct 27, 2023 at 10:00 PM Jonathan S. Fisher wrote: > ope, it's in there now. Just popped up and I merged. > > ActiveMQ merges make a be a bit

Re: 8.0.16 release

2023-10-27 Thread Jonathan S. Fisher
Ok repository is uploaded and closed: https://repository.apache.org/content/repositories/orgapachetomee-1222/org/apache/tomee/apache-tomee/8.0.16/ What's next? The directions say to upload but that seems a bit premature before calling for a vote or what not... sorry I'm new here!

Re: 8.0.16 release

2023-10-27 Thread Jonathan S. Fisher
No problemo. I'll cancel, do the pr two step, and rebuild On Fri, Oct 27, 2023 at 3:39 PM Jonathan Gallimore wrote: > > I was about to ask the same. Happy to push the update to the branch before > a release is kicked off. > > Jon > > On Fri, 27 Oct 2023, 21:23 Alex The Rocker, wrote: > > > Hi >

Re: 8.0.16 release

2023-10-27 Thread Jonathan Gallimore
Done: https://github.com/apache/tomee/commit/c63eacac4956c29454a0efc3e75e933dd4316b26 On Fri, Oct 27, 2023 at 9:46 PM Jonathan Gallimore < jonathan.gallim...@gmail.com> wrote: > Thanks. That commit is incoming in about 1 minute. > > Jon > > On Fri, Oct 27, 2023 at 9:43 PM Jonathan S. Fisher >

Re: 8.0.16 release

2023-10-27 Thread Jonathan Gallimore
Those should be there for 8.0.x, 9.1.x and 10.0.x (I think you merged the PR for 8.0.x yourself :-) ) Jon On Fri, Oct 27, 2023 at 9:56 PM Jonathan Gallimore < jonathan.gallim...@gmail.com> wrote: > It should be done by the build, but I can do that and push it as well. > > Jon > > On Fri, Oct

Re: 8.0.16 release

2023-10-27 Thread Jonathan S. Fisher
Thanks, do we need to do the bom thing? On Fri, Oct 27, 2023 at 3:53 PM Jonathan Gallimore wrote: > > Done: > https://github.com/apache/tomee/commit/c63eacac4956c29454a0efc3e75e933dd4316b26 > > On Fri, Oct 27, 2023 at 9:46 PM Jonathan Gallimore < > jonathan.gallim...@gmail.com> wrote: > > >

[PR] Regenerated BOMs after dependency upgrades (tomee)

2023-10-27 Thread via GitHub
github-actions[bot] opened a new pull request, #1076: URL: https://github.com/apache/tomee/pull/1076 Found some uncommited changes (from BOM regeneration) after running build on TomEE 9.x branch -- This is an automated message from the Apache Git Service. To respond to the message,

Re: [PR] Regenerated BOMs after dependency upgrades (tomee)

2023-10-27 Thread via GitHub
jgallimore merged PR #1076: URL: https://github.com/apache/tomee/pull/1076 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail:

Re: 8.0.16 release

2023-10-27 Thread Jonathan S. Fisher
ope, it's in there now. Just popped up and I merged. ActiveMQ merges make a be a bit nervous :) I'll go ahead release:perform but stop again before closing the repository. I'll try running this too with some of our bigger apps and see if I can find anything wrong. On Fri, Oct 27, 2023 at 3:58 

Re: 8.0.16 release

2023-10-27 Thread Jonathan S. Fisher
Thanks to you and Richard for helping me stumble through. I'm stuck at this step: ~/opensource/tomee-release-tools$ ./target/release release-notes generate 8.0.16 No jira accounts configured. Run `account add` to configure a jira account ~/opensource/tomee-release-tools$ ./target/release

Re: 8.0.16 release

2023-10-27 Thread Alex The Rocker
Hi Before it's too late, can 8.0.16 release include (if not already done) the dependency update to ActiveMQ version fixing CVE-2023-46604 (which has High 8.8 score by https://nvd.nist.gov/vuln/detail/CVE-2022-46604), as it's enabling remote code execution ? As a reminder, ActiveMQ is embedded in

Re: 8.0.16 release

2023-10-27 Thread Jonathan Gallimore
I was about to ask the same. Happy to push the update to the branch before a release is kicked off. Jon On Fri, 27 Oct 2023, 21:23 Alex The Rocker, wrote: > Hi > > Before it's too late, can 8.0.16 release include (if not already done) > the dependency update to ActiveMQ version fixing

Re: 8.0.16 release

2023-10-27 Thread Jonathan Gallimore
Thanks. That commit is incoming in about 1 minute. Jon On Fri, Oct 27, 2023 at 9:43 PM Jonathan S. Fisher wrote: > No problemo. I'll cancel, do the pr two step, and rebuild > > On Fri, Oct 27, 2023 at 3:39 PM Jonathan Gallimore > wrote: > > > > I was about to ask the same. Happy to push the

Re: 8.0.16 release

2023-10-27 Thread Jonathan Gallimore
It should be done by the build, but I can do that and push it as well. Jon On Fri, Oct 27, 2023 at 9:55 PM Jonathan S. Fisher wrote: > Thanks, do we need to do the bom thing? > > On Fri, Oct 27, 2023 at 3:53 PM Jonathan Gallimore > wrote: > > > > Done: > > >

Re: 8.0.16 release

2023-10-27 Thread Jonathan Gallimore
Upload to here: https://dist.apache.org/repos/dist/dev/tomee/ - this is where we'll all be getting the artifacts to vote on. If you're using the release tools, you'll be on this step: "Deploy Source and Distributions to dist/dev". Thanks for all your work on this. Jon On Fri, Oct 27, 2023 at