Hello Richard,
I vote for the following option:
(b) Fork from CXF 4.1.0-SNAPSHOT and release something indermediate
under org.apache.tomee
because I think it will help to validate ahead of time the upcoming
CXF 4.1.0 with TomEE 10 milestone testers ; rather than rolling back
to released CXF 4.0.4
Hello Richard,
First of all, thank you very much for these updates, and a big thanks
to Markus for his major contribution !
To answer your question, I beleive that indeed a Milestone 2 release
end of June would be perfect timing on my side to run many tests on
(relatively) various uses of TomEE.
Thank you very much Richard for having carried out this release !
Alex
Le lun. 15 avr. 2024 à 20:12, Richard Zowalla a écrit :
>
> Hi all,
>
> this vote passed with the following votes:
>
> +1 Frank Jung
> +1 Martin Wiesner
> +1 Alex The Rocker
> +1 Thomas Andr
(my two cents)
wouln't it be better to wait a little bit for 9.1.3 to be released, so
as to avoid releasing a Docker image with high CVEs ?
Alex
Le mar. 9 avr. 2024 à 23:50, Rod Jenkins a écrit :
>
> All,
>
> I was looking at the "latest" tag for the official images. The latest tag is
> pointe
à 14:57, Alex The Rocker a écrit :
>
> Thank you very much Richard for this very kind effort !
> I have started some validations with this TomEE 9.1.3 candidate
> release, so far so good, but I want to run as many tests as possible
> with the broadest possible scope.
> I shou
+1 to drop TomEE 8 Docker images (non-binding)
Alex
Le mar. 9 avr. 2024 à 09:36, Richard Zowalla a écrit :
>
> +1
>
> Note: TomEE docker images are not officially distributed by the project
> itself (ASF), so no real decision space from our side, imho.
>
> Am Dienstag, dem 09.04.2024 um 09:34 +0
Thank you very much Richard for this very kind effort !
I have started some validations with this TomEE 9.1.3 candidate
release, so far so good, but I want to run as many tests as possible
with the broadest possible scope.
I should be able to provide a vote Wednesday this week at most.
Alex
Le lu
ht now, IMHO.
> >
> > Personally, I don't have the time to do another release right now, but
> > I would review a release candidate and support a committer taking over
> > as release manager, helping them through all the necessary steps (if
> > needed).
> >
>
Hello Richard,
Just in case my position on this question was not clear:
HUGE +1 for Java 17 base line, to get both AMQ6 & CXF 4.1 in a near future.
(non binding, sorry)
Alex
Le ven. 5 avr. 2024 à 16:01, Richard Zowalla a écrit :
>
> Hi JB,
>
> thanks for the info. Guess we will come back to y
ch in IDE and it's code
> doesn't seem to be actually used, so no big deal here (aside from
> confusing vulnerability scanners).
>
> Am Freitag, dem 29.03.2024 um 13:07 +0100 schrieb Alex The Rocker:
> > Hi Richard,
> >
> > Maybe not fully answering your re
Hello,
+1 for my own tests with TomEE+10 M1 and with a Jakarta EE 9
unmodified set of web apps relying on servlets, EJB, CDI, JMS, JSON-P,
JAX-RS, JAX-XML and Websockets.
On side note, I have heard from a folk testing his own web app having
an Hibernate/ehcache-based web app which works with TomE
Excellent !
I will use this opportunity to try answering my own question on
whether or not a Jakarta EE 9 web app can run unmodified over an EE 10
application server :)
Alex
Le mar. 2 avr. 2024 à 08:27, Jean-Louis Monteiro
a écrit :
>
> Awesome Richard
>
> Le mar. 2 avr. 2024, 07:59, Richard Zo
No objection on my side, as long as OAuth2 support works with Eclipse Mail 1.6.
(but if there's no hurry for this one, then I'm more interested in AMQ
upgrade previously mentionned)
Alex
Le dim. 31 mars 2024 à 21:54, Richard Zowalla a écrit :
>
> Hi all,
>
> I was looking in more depth into the
Huge +1 for AMQ6.
Requiring Java 17+ isn't a problem, since (unless I'm mistaken)
Jakarta EE 10 requires Java 17.
Thanks,
Alex
Le dim. 31 mars 2024 à 11:59, Thomas Andraschko
a écrit :
>
> If we are allowed to set baseline to +17, im ok with it.
> New user can just use 17 and existing users ca
Great answer !
But something puzzles me: unless I have missed something, for year
with TomEE versions before TomEE 9, I have seen web application
relying on very old Java EE specifications running fine ; for example
Java EE 6 ones running with TomEE 8, and quite many still at Java EE 7
running als
About "I don't really understand why many projects focused on EE 9, since
this still looks like a useless release"
=> I disagree, having a Java EE 8 -> Jakarta EE 9 migration path
needing developers to rename javax into jakarta & find compatible
dependencies has been a good "baby step" to leave Ja
dency (Servlet 5
etc)
Is there anything else I could do to help on a 9.1.3 within coming weeks?
Thanks,
Alex
Le ven. 29 mars 2024 à 13:07, Alex The Rocker a écrit :
>
> Hi Richard,
>
> Maybe not fully answering your request to get dependencies analysis on
> lib/, but running latest gry
e any additional dependencies we need to update for 9.1.3 ?
>
> If someone can have a quick look into /lib of a 9.1.3-SNAPSHOT, we
> might be able to do the updates quickly and get some CI feedback, so we
> can start with release preperations.
>
> Gruß
> Richard
>
> Am Fr
Hi there,
It's been more than 3 monthes since TomEE 9.1.2 was released.
Couples of updates have been delivered in 9.1.3 in-work, including 2 CVE fixes.
Wouln't it be a good thing to release a 9.1.3 within coming weeks?
(I know we would like to have 10.0.0 asap, but a small patch release
on 9.2.x
Welcome Thomas to the glorious team of TomEE contributors and thank
you much very much!
Alex
Le mar. 26 mars 2024 à 22:45, Daniel Dias Dos Santos
a écrit :
>
> Welcome!
>
> On Tue, Mar 26, 2024, 17:50 Jonathan S. Fisher wrote:
>
> > Welcome!
> >
> > On Tue, Mar 26, 2024 at 3:43 PM Richard Zowal
+1 for a TomEE 10 milestone build which can be used for
non-regression testing with real apps!
Would it include an ActiveMQ 6 for JMS 2 compatibility in TomEE+ ?
Alex
Le mar. 6 févr. 2024 à 12:40, Thomas Andraschko
a écrit :
>
> +1 to release a M1 ASAP after (4)
> As you already said, we need
Hello,
My feedbacks:
1. I'm using TomEE+ 9 with IBM Semeru Java 21 Milestone 1 for about 1
month and I have seen no particular issue.
2. For Docker, I build my own images because I have
customization/hardnening/monitoring and I don't trust a 3rd party
source for "doing thing like I do". While I ca
I agreed that this EclipseLink specific issue is not a blocker for
releasing TomEE 9.1.2.
As I mentioned, I tested TomEE+ with IBM Semeru 21 Milestone 1 without
issue (but okay, I use no JPA so maybe that's why), and right now
moving to Java 21 isn't critical, as running with Java 17 is still
fine
+1 (non-binding)
Tested with a large set of different web application, with JAX-WS,
JAX-RS, EJB, CDI, Servlets, Websockets and JMS (including embedded
ActiveMQ in TomEE+) mainly with IBM Semeru JDK 17.0.9 on RedHat Linux 8,
but also with IBM Semeru 21 Milestone 1 on RedHat Linux 8.
Validated the
+1 (non-binding)
Tested with a large set of different web application, with JAX-WS,
JAX-RS, EJB, CDI, Servlets, Websockets and JMS (including embedded
ActiveMQ in TomEE+) mainly with IBM Semeru JDK 17 on RedHat Linux 8,
but also with IBM Semeru 21 Milestone 1 on RedHat Linux 8.
Validated the neat
+1 and thanks Richard for raising attention on CVE-2023-46589 which is
fairly new
Le mer. 29 nov. 2023 à 12:51, Richard Zowalla a écrit :
>
> +1 and yes, CVE-2023-46589 is missing.
>
> Am Mittwoch, dem 29.11.2023 um 11:23 + schrieb Jonathan Gallimore:
> > +1
> >
> > I think there's one CVE to
+1 for this change, given that there's still some time before end of
this year (=potential for some critical CVEs fixing anyway)
Le lun. 20 nov. 2023 à 12:05, Jean-Louis Monteiro
a écrit :
>
> Based on the timing (mid-November) and the EOL end of this year, is it
> worth it?
> I'd say no. But it'
/jira/browse/TOMEE-4269 merged.
Thanks,
Alex
Le mar. 7 nov. 2023 à 21:55, Richard Zowalla a écrit :
>
> Hi
>
> https://repository.apache.org/content/groups/snapshots/org/apache/tomee/apache-tomee/
>
> Gruß
> Richard
>
> Am 7. November 2023 21:39:56 MEZ schrieb Al
Hello,
I am looking for TomEE 9.x in-work (future 9.1.2) snapshot builds.
I ran a quick google search "apache tomee snapshot" and found
super-old TomEE page referring to snapshot builds:
* https://tomee.apache.org/download/tomee-1.5.3-snapshot.html
* https://tomee.apache.org/download/tomee-1.6.0-
Excellent, thanks !
Le jeu. 2 nov. 2023 à 20:15, Richard Zowalla a écrit :
>
> Hi all,
>
> this vote passes with the following +1 votes:
>
> - Alex The Rocker
> - Jonathan Gallimore (binding)
> - Cesar Hernandez (binding)
> - Richard Zowalla (binding)
>
> Ind
added some
> > > explanation to that vote thread in May.
> > >
> > > Gruß
> > > Richard
> > >
> > > [1] https://lists.apache.org/thread/fkvb28gx3ll4t8srdol49c7jjpdv5sbr
> > >
> > >
> > > Am Montag, dem 30.10.2023 um 1
your version should be sufficient if you
> import the key map from the file Richard linked
>
> On Mon, Oct 30, 2023 at 9:48 AM Alex The Rocker wrote:
> >
> > Here's my gpg version:
> >
> > $ gpg --version
> > gpg (GnuPG) 2.2.20
> > libgcrypt 1.8.5
>
aka "Jonathan S. Fisher
> " [ultimate]
> gpg: aka "Jonathan S. Fisher " [ultimate]
>
>
> On Mon, Oct 30, 2023 at 8:55 AM Alex The Rocker wrote:
> >
> > Thanks Richard,
> >
> > Next issue:
> >
> > $
6/
>
> is the correct one (siumilar to the staging repo id)
>
> Gruß
> Richard
>
> Am Montag, dem 30.10.2023 um 14:50 +0100 schrieb Alex The Rocker:
> > Hello,
> >
> > There is a issue with the link to binaries & source:
> > https://dist.apache.org/r
Hello,
There is a issue with the link to binaries & source:
https://dist.apache.org/repos/dist/dev/tomee/staging-1222/tomee-8.0.16/
leads to nowhere, maybe did you mean
https://dist.apache.org/repos/dist/dev/tomee/staging-1223/tomee-8.0.16/
?
Thanks,
Alex
Le dim. 29 oct. 2023 à 19:35, Richard Zo
Awesome!
Thanks a lot Jonathan S. Fisher for making this release happen.
I'm going to run my usual tests - take me few days to have enough
coverage on various setups, but I will provide feedback for sure!
Alex
Le sam. 28 oct. 2023 à 21:10, Richard Zowalla a écrit :
>
> Hi all,
>
> This is a vo
Hi
Before it's too late, can 8.0.16 release include (if not already done)
the dependency update to ActiveMQ version fixing CVE-2023-46604 (which
has High 8.8 score by
https://nvd.nist.gov/vuln/detail/CVE-2022-46604), as it's enabling
remote code execution ?
As a reminder, ActiveMQ is embedded in
lex The Rocker a écrit :
>
> Excellent news!
> I'm going to run some deep (applicative) tests with this candidate
> release and I will provide feedbacks asap
>
> Le jeu. 12 oct. 2023 à 15:28, Daniel Dias Dos Santos
> a écrit :
> >
> > Hi
> >
> >
Excellent news!
I'm going to run some deep (applicative) tests with this candidate
release and I will provide feedbacks asap
Le jeu. 12 oct. 2023 à 15:28, Daniel Dias Dos Santos
a écrit :
>
> Hi
>
> +1
>
> Thanks
>
> On Thu, Oct 12, 2023, 10:26 benedict wrote:
>
> > +1
> > Ursprüngliche
+1 for a 8.0.16 to get these recent urgent CVEs fixed ASAP
Le mar. 10 oct. 2023 à 21:25, Jean-Louis Monteiro
a écrit :
>
> I think most of the energy is currently on TomEE 9 and the new TomEE 10.
> I've also noticed some Tomcat CVE today if I remember correctly.
>
> I'm all hands on TomEE 10 curr
Huge +1 !
Le ven. 29 sept. 2023 à 15:58, Thomas Andraschko
a écrit :
>
> +1
>
> Am Fr., 29. Sept. 2023 um 15:40 Uhr schrieb Richard Zowalla >:
>
> > Hi all,
> >
> > since we have now dropped our cxf shade in favour of 4.0.3 and fixed
> > some dependencies, etc. in the last weeks, what do you thi
Hello,
+1 (non binding) tested with our web app migrated to Jakarta EE 9
(including a small subset migrated using Eclipse Transformer) using
JMS, JAX-RS ,Servlets) and found no regression.
Thanks,
Alexandre
Le mar. 6 juin 2023 à 13:01, Richard Zowalla a écrit :
>
> Hi all,
>
> this is a vote fo
hanks,
Alex
Le dim. 14 mai 2023 à 18:26, Alex The Rocker a écrit :
>
> +1 (non-binding)
>
> Tested with several web apps based on servlet, JAX-RS, JAX-WS,
> websockets, JMS, EJB ; with IBM Semeru 17.0.6 Java runtime on Linux
> CentOS 7.9, and found no regressions.
> (I was cur
+1 (non-binding)
Tested with several web apps based on servlet, JAX-RS, JAX-WS,
websockets, JMS, EJB ; with IBM Semeru 17.0.6 Java runtime on Linux
CentOS 7.9, and found no regressions.
(I was curious about impact of snakeyaml update to major 2.0 version,
my web apps rely on snakeyaml, and got no
in future.
>
> The process is also described in [1]
>
> Hope it helps.
>
> Gruß
> Richard
>
> [1] https://www.apache.org/info/verification.html#Validating
>
> Am Mittwoch, dem 10.05.2023 um 10:46 +0200 schrieb Alex The Rocker:
> > Hello,
> >
> > I have
Hello,
I have a doubt with this signature test:
wget
https://dist.apache.org/repos/dist/dev/tomee/staging-1214/tomee-8.0.15/apache-tomee-8.0.15-plus.tar.gz
cat > apache-tomee-8.0.15-plus.tar.gz.asc
(here I copy paste the contents of
https://dist.apache.org/repos/dist/dev/tomee/staging-1214/tomee
Yes please release TomEE 8.0.15 !
Thanks,
Alexandre
Le mar. 2 mai 2023 à 14:47, Richard Zowalla a écrit :
>
> Hi all,
>
> any objections in doing a 8.0.15?
>
> We have a few pending CVE fixes in 3rd party libs: [1].
>
> Or does anyone see any major blockers?
>
> Gruß
> Richard
>
>
> [1] https://
Here's my +1 (non-binding)
Alex
Le jeu. 19 janv. 2023 à 15:54, Richard Zowalla a écrit :
>
> Here is my own +1 (binding)
>
> Am Dienstag, dem 17.01.2023 um 14:40 +0100 schrieb Richard Zowalla:
> > Hi all,
> >
> > this is a vote for a release of Apache TomEE 8.0.14.
> >
> > It is a maintenance re
mer. 11 janv. 2023 à 19:17, Alex The Rocker a écrit :
>
> Thanks Richard for this clarification (hope it's available in TomE
> Security page to avoid people asking the same question)
>
> => When can TomEE 8.0.14 vote start ?
>
> Alex
>
> Le mer. 11 janv. 202
; Gruß
> Richard
>
>
> [1] https://issues.apache.org/jira/projects/TOMEE/issues/TOMEE-4169
> [2] https://github.com/FasterXML/jackson-dataformats-text/issues/361
>
>
> Am Mittwoch, dem 11.01.2023 um 14:32 +0100 schrieb Alex The Rocker:
> > Hello Richard,
> >
>
Hello Richard,
I give a big +1 for having a 8.0.14 release ASAP.
I have nothing to ask in into beyond the (many) CVE fixes done so far,
except maybe if it could be checked if TomEE+ usage of snakeyaml
(which is part of TomEE+ libraries) systematically relies on
SnakeYaml's SafeConstructor, so as
karta.html
>
> Hope it helps
>
> --
> Jean-Louis Monteiro
> http://twitter.com/jlouismonteiro
> http://www.tomitribe.com
>
>
> On Wed, Jan 4, 2023 at 8:34 PM Alex The Rocker wrote:
>
> > Hi there,
> >
> > And happy new year to TomEE contributors!
> >
Hi there,
And happy new year to TomEE contributors!
I wish I could give this TomEE 9.0.0 release candidate a try, but all
my web apps currently still have EE dependencies on javax namespace.
Where is the tool which used to be mentioned to convert an existing
.war having EE dependencies into a wa
bring the discussion up to the community.
>
> There is no outcome for the moment. There are too many edge cases and
> restrictions. I don't know if it's a good idea and if it would work for
> real enterprise cases.
>
> Le mer. 2 nov. 2022, 22:48, Alex The Rocker a éc
Hello,
I'm confused, as I don't find the webapps-ee/ directory in extracted
TomEE+ 9 RC1.
Do I miss something ?
How to test automatic Java EE compatibility tricks proposed by Jean-Louis?
Thanks,
Alex
Le mer. 2 nov. 2022 à 11:54, Jonathan Gallimore
a écrit :
>
> +1
>
> Jon
>
> On Mon, Oct 31, 20
+1 provided Jean-Louis's proposal for including javaee automatic
converter from webapp-javaee/ directory is part of it :)
Thanks,
Alexandre
Le ven. 28 oct. 2022 à 10:19, Zowalla, Richard
a écrit :
>
> Hi JL,
>
> +1 - let's roll out an M9 / RC1.
>
> Feedback from the community is super valuable a
Hi here, the vote for TomEE 8.0.13 launched 1 week ago was supposed to
hold for 72 hours...
Is it still valid or will a new release candidate show up ?
Alex
Le dim. 16 oct. 2022 à 08:33, Wiesner, Martin
a écrit :
>
> Hi all,
>
> +1 (non-binding)
>
> Tested with several projects (primarily web se
Hello David,
Is the full build:
* CPU bound
* Memory bound
* IOPS bound
?
Which can be found using top/iostat metrics during its run.
If the later, then I guess that a good test would be to run the build
on an EBS volume of GP3 type (minimum 3000 IOPS, up to 16000 IOPS) and
see if that improves
27;t show up in grype
> at all.
>
> Gruß
> Richard
>
>
>
> Am Mittwoch, dem 12.10.2022 um 08:49 +0200 schrieb Alex The Rocker:
> > Hello Again,
> >
> > Completed some basic tests with TomEE+ 8.0.13 (more complex tests to
> > come), but also I ran ht
ky9dr2sf99cs2hrj95j81w1rhrtdfn
>
> Gruß
> Richard
>
> Am Dienstag, dem 11.10.2022 um 22:23 +0200 schrieb Alex The Rocker:
> > okay I probably make a mistake somewhere.
> > Also I see ehcache*.jar is removed in TomEE+ 8.0.13 => is it
> > intentional (I love seeing les
mittels RSA-Schlüssel
> B83D15E72253ED1104EB4FBBDAB472F0E5B8A431
> gpg: Korrekte Signatur von "Richard Zowalla (Code Signing Key)
> " [unbekannt]
>
>
> Gruß
> Richard
>
> Am Dienstag, dem 11.10.2022 um 22:04 +0200 schrieb Alex The Rocker:
> > Sorry previous mail sent too
Sorry previous mail sent too quickly.
What's wrong here ?
$ gpg --verify /tmp/tomee8013.asc apache-tomee-8.0.13-plus.tar.gz
gpg: Signature made Tue 11 Oct 2022 01:14:04 PM CEST using RSA key ID E5B8A431
gpg: Can't check signature: No public key
Le mar. 11 oct. 2022 à 22:03, Alex The
Hum... what's wrong here:
Le mar. 11 oct. 2022 à 21:22, Alex The Rocker a écrit :
>
> +1 for more frequent releases (at least based on CVE with at least
> high severity)
> and yes, I have a relatively large test base ; stay tuned!
>
> Le mar. 11 oct. 2022 à 21:16, R
ions and didn't notice
> that for some time now.
>
> Gruß
> Richard
>
>
>
> Am Dienstag, dem 11.10.2022 um 21:05 +0200 schrieb Alex The Rocker:
> > Hi Richard,
> >
> > Thanks for this quick TomEE 8.0.3 release after not so long
> > discussi
Hi Richard,
Thanks for this quick TomEE 8.0.3 release after not so long discussions!
I'll run some tests ASAP and then give my vote (non-binding).
Why do you mention "1st attempt"? Any regrets ?
Alex
Le mar. 11 oct. 2022 à 20:01, Richard Zowalla a écrit :
>
> Hi all,
>
> this is a first attempt
Hello,
Regarding # (1): CVE-2022-42003 (jackson-databind), given that the
only reason for having Jackson in TomEE is because of embedded TomEE;
so the discussion here
https://lists.apache.org/thread/ttmdc4l9z9oz9lqw3cd22sjdz451dh25 to
replace Jackson by the Apache Johnzon (which is already part of
athan
> Gallimore:
> > +1. And yes, this willinclude the fix to mitigate CVE-2021-43980.
> >
> > Jon
> >
> > On Wed, Sep 28, 2022 at 6:45 PM Alex The Rocker > >
> > wrote:
> >
> > > Hi there,
> > >
> > > +1 for a TomEE 8.
But how does it links to and/or from
https://tomee.apache.org/dev/itests-overview.html ?
Le ven. 30 sept. 2022 à 07:48, Alex The Rocker a écrit :
>
> Hi,
>
> I read the page on itests's definition & goals: it sounds crystal
> clear to me, good job!
>
> Alex
>
Hi,
I read the page on itests's definition & goals: it sounds crystal
clear to me, good job!
Alex
Le ven. 30 sept. 2022 à 06:22, David Blevins a écrit :
>
> Was writing some itests and nearly broke one of the primary rules I had in
> mind when those were created, so I thought it would be smart
Hi there,
+1 for a TomEE 8.013 ASAP provided it includes fix for:
CVE-2021-43980 Apache Tomcat - Information Disclosure
Kind regards,
Alex
Le mer. 28 sept. 2022 à 18:45, Zowalla, Richard
a écrit :
>
> Hi all,
>
> our last 8.x release was in June and we have 22 pending updates/issues
> for 8.0.
Hello David,
I agree that on (my) customer side, dependency upgrade of the
build/test tools aren't as important as dependency upgrades of code
actually part of TomEE runtime, so if it is possible to split the list
in release notes between runtime dependencies upgrade versus
build/test-time ones, t
e concerns raised. Better to check the CVE report and do
> > a
> > re-roll ;-)
> >
> > @JL: Will take a look.
> >
> > @Alex Thanks. We might not be able to address all CVEs as some of the
> > libs
> > used for EE7 aren't patched / updated anymore. I will have a
Hello,
[-1] (non binding)
Indeed, I downloaded TomEE+ 7.1.5 binary (from
https://dist.apache.org/repos/dist/dev/tomee/staging-1206/tomee-7.1.5/apache-tomee-7.1.5-plus.tar.gz)
and then I ran Grype (https://github.com/anchore/grype) on TomEE+'s
archive extract directory.
That gives 2 Critical and
hello, a bit late (and non-binding), but here's my own +1 !
(had to run tons of tests in various configurations
VM/containers/OpenJ9/Java 17 & 11, what a rush)
Alex
Le mar. 14 juin 2022 à 13:52, Jean-Louis Monteiro
a écrit :
>
> With my own +1 (binding).
>
> This vote passes with 6 +1 and no ot
2/apache-tomee-8.0.12-webprofile.zip
>
> as they are only a few bytes in size.
>
> Just checked the build and the zips are generated with correct sizes.
> Might be a SVN commit / upload issue, i.e. should be an easy fix :)
>
> Gruß
> Richard
>
> Am Freitag, dem 10.06.2022 u
Hello,
Test are currently on-going on my side, will update soon.
But it looks like
https://dist.apache.org/repos/dist/dev/tomee/tomee-8.0.12/apache-tomee-8.0.12-plus.zip
is corrupted (the .tar.gz version is fine)
=> can the .zip be fixed ?
Kind regards,
Alex
Le mar. 7 juin 2022 à 14:43, Jean-Lou
n updated as part of a bulk update to issues for the last few releases -
> that's my mistake, sorry. I've corrected the JIRA. For info, the commit is
> here:
> https://github.com/apache/tomee/commit/accb2418a736916d724a3abd491bde998516021f
>
> Thanks
>
> Jon
>
>
Sorry I'm a bit lost, is TomEE 8.0.12 release vote going to take place soon?
I see that TOMEE-2941 is targeted for 8.0.13, so that's a bit confusing...
Thanks,
Alex
Le ven. 3 juin 2022 à 13:16, Daniel Dias Dos Santos
a écrit :
>
> +1
>
> On Fri, Jun 3, 2022, 04:49
+1
Le ven. 3 juin 2022 à 09:14, Zowalla, Richard
a écrit :
>
> +1
>
> Von: Jean-Louis Monteiro
> Gesendet: Freitag, 3. Juni 2022 08:49:23
> An: dev@tomee.apache.org
> Betreff: Release TomEE 8.0.12
>
> Hi all,
>
> We have a couple of requested fixes on the TomEE 8
with the APIs brought in by Tomcat, there is "javaee-api-XY-
> >> tomcat.jar", which excludes those already provided APIs (via Tomcat)
> >> from the shaded JAR.
> >>
> >> I admit, that the naming with the classifier "tomcat" is a bit
> >&g
vaee-api/8.0-5/
>
> And the staging repo for 8.0-6
> https://repository.apache.org/content/repositories/orgapachetomee-1202/org/apache/tomee/javaee-api/8.0-6/
>
> Both the tomcat and the non-tomcat version are smaller in 8.0-6
>
>
> --
> Jean-Louis Monteiro
> http://twitter.com/j
Hi Jean-Louis,
I have tested, and JDK11 build issue which I had with
javaee-api-8.0-5-tomcat.jar as not reproducible so the issue is fixed
from my perspective
However, one detail worries me:
javaee-api-8.0-5-tomcat.jar size is 1040753 bytes large
javaee-api-8.0-6.jar size is 1437502 bytes l
Hello Jean-Louis,
Huge, you rock !
Alex
Le jeu. 24 mars 2022 à 10:27, Jean-Louis Monteiro
a écrit :
>
> Hi,
>
> Some additional notes based on current progress.
>
> We have successfully created a maintenance branch for TomEE 8.x with all
> associated builds on Jenkins.
>
> We have been able to
Hi Rod,
You won't find any Semeru/OpenJ9 image based on Alpine, because this
JVM is not supporter on Alpine (alas...)
Thanks,
Alex
Le sam. 30 avr. 2022 à 18:10, Jenkins, Rodney J (Rod)
a écrit :
>
> Richard,
>
> I am fine with providing a Semeru/OpenJ9. Would we want that or 8, 11, and
> 17?
Hello,
I already use TomEE+ with IBM Semeru-based images (with Java 17) for a
while, it works quite well.
Note: it's based on our own CentOS 7.x image for legacy compatibility
reasons. Of course that's quite "outdated" part of it, so nothing that
I would recommend to anyone else ;)
Thanks,
Alex
5:02 PM Daniel Cunha wrote:
>
> > +1
> >
> > Em sex., 15 de abr. de 2022 às 11:37, Alex The Rocker <
> > alex.m3...@gmail.com>
> > escreveu:
> >
> > > Hello,
> > >
> > > So far so good:
> > > - Tested with IBM Semeru Runti
Hello,
So far so good:
- Tested with IBM Semeru Runtimes 17.0.2 (aka OpenJ9) on a service
running as Docker containers in K8S
- Tested with a web app using JAX-RS, JAX-WS, JMS, Websockets &
Servlets on a VM with CentOS 7 with IBM Semeru 11.0.4
- Tested with a web app using JAX-RS and websockets on
[-1] non-binding : verification of signature fails (I have copied
https://dist.apache.org/repos/dist/dev/tomee/staging-1200/tomee-8.0.11/apache-tomee-8.0.11-plus.tar.gz.asc's
content to /tmp/apache-tomee-8.0.11-plus.tar.gz.asc and ran:
$ gpg --verify /tmp/apache-tomee-8.0.11-plus.tar.gz.asc
apache
[-1] non binding : the binaries link only proposes ZIP files, it's
missing the usual .tar.gz artifacts.
can you please fix that before I can assess TomEE 8.0.11 ?
Alex
Le mer. 13 avr. 2022 à 12:52, Jean-Louis Monteiro
a écrit :
>
> Hi All,
>
> This is the first attempt at a vote for a release of
Hello,
May I suggest [-1] until TOMEE-3838 is solved (it's a CVE-related
issue, marked as a blocker, CVE's score is High at 75) ?
Thanks,
Alex
Le ven. 11 févr. 2022 à 11:12, Zowalla, Richard
a écrit :
>
> Hi,
>
> +1 from my side.
>
> I tested the 8.0.10 plus artifact with our fullstack EAR app
Hello,
Would it be possible to get the list of fixed CVEs in the release
notes, regardless whether it's directly or through embedded stuff
(like Tomcat, CXF, etc) ?
Indeed, we are more and more challenged by security scans, so the more
accurate TomEE's community is about security fixes, the better
+1 of course :)
Alex
Le mar. 8 févr. 2022 à 15:49, Jean-Louis Monteiro
a écrit :
>
> +1
> Thanks
> --
> Jean-Louis Monteiro
> http://twitter.com/jlouismonteiro
> http://www.tomitribe.com
>
>
> On Tue, Feb 8, 2022 at 3:39 PM Zowalla, Richard <
> richard.zowa...@hs-heilbronn.de> wrote:
>
> > Hi Jo
Hello,
Sorry for ignorance, but what is this "TomEE patch" component about ?
Best regards,
Alex
Le mar. 18 janv. 2022 à 10:55, Jonathan Gallimore
a écrit :
>
> +1
>
> Jon
>
> On Tue, Jan 18, 2022 at 6:54 AM Zowalla, Richard <
> richard.zowa...@hs-heilbronn.de> wrote:
>
> > +1
> >
> > Am Montag
Hello Jean-Louis,
Not sure what you mean by "Eclipse JRE", but maybe it's IBM Semeru
Runtimes JRE, which is based on Eclipse OpenJ9 (IBM Semer open edition
was previously branded as "AdoptOpenJDK OpenJ9").
That's what we use both our our container & VM based services
Hope it helps,
Alex
Le mer
Hello all,
I'm afraid it'll be necessary to keep TomEE 8.x maintained for a long
while, as it's the last version supporting javax namespace for EE
APIs.
Like it or not, but migration from javax to jakarta namespace is a
very slow process for applications developed a while ago...
Kind regards,
Ale
Hello,
With Jon's vote, there should now be enough bindings votes for TomEE
8.0.9 to be released, isn't it ?
Alex.
Le jeu. 6 janv. 2022 à 12:32, Jonathan Gallimore
a écrit :
>
> +1 (binding).
>
> Jon
>
> On Thu, Dec 23, 2021 at 12:24 PM Jean-Louis Monteiro <
> jlmonte...@tomitribe.com> wrote:
>
Hello,
Is the TomEE 8.0.8 vote about to end soon?
How many binding votes are missing?
Kind regards,
Alex.
Le lun. 3 janv. 2022 à 19:21, Mark Struberg
a écrit :
>
> +1 with the new dist.
>
> txs and LieGrue,
> strub
>
>
> > Am 23.12.2021 um 13:24 schrieb Jean-Louis Monteiro
> > :
> >
> > Hi All
Best regards,
Alexandre
Le mar. 28 déc. 2021 à 17:56, Alex The Rocker a écrit :
>
> Hello,
>
> Update:
> 1. Since ZIP pointed by the announce are corrupted, I used the .tar.gz
> archives for my tests.
> But I guess that for the vote being meaningful it would make sense
> to
it :
>
> > Looks like it does only impacts the artifacts on dist.a.o
> > Can confirm, that the ZIPs on dist.a.o are broken
> >
> > However, the ZIPs via Maven
> >
> > https://repository.apache.org/content/repositories/orgapachetomee-1188/org/apache/tomee/apache-t
éc. 2021 à 12:15, Alex The Rocker a écrit :
>
> Hello Jean-Louis,
>
> I'll check today this 8.0.9 with our apps, sorry for being late - I
> was on vacations!
>
> Thanks,
> Alex
>
> Le mar. 28 déc. 2021 à 12:00, Jean-Louis Monteiro
> a écrit :
> >
>
1 - 100 of 243 matches
Mail list logo
