Re: [RESULT] [VOTE] Release Apache TomEE 9.1.2 (take 2)

2023-12-20 Thread Richard Zowalla
Hey Jon,

the links to the certification results are 404/not found from the
download page.

Either we should comment them out or update them with the actual pages
(maybe missed in the commit).

Gruß
Richard


Am Dienstag, dem 19.12.2023 um 21:22 + schrieb Jonathan Gallimore:
> That should all be done. Any issues, please let me know. Thanks to
> everyone
> for the review and votes.
> 
> Jon
> 
> On Tue, Dec 19, 2023 at 2:04 PM Jonathan Gallimore <
> jonathan.gallim...@gmail.com> wrote:
> 
> > +1s:
> > 
> > Richard Zowalla (binding)
> > Martin Wiesner
> > Alex The Rocker
> > Jean-Louis Monteiro (binding)
> > Daniel Dias Dos Santos
> > Jonathan Gallimore (binding)
> > 
> > Also noting the -1 (with a ?) from Frank Jung, which has been
> > discussed
> > and we'll be tackling in 9.1.3. I note that Frank has filed a JIRA
> > here:
> > https://issues.apache.org/jira/browse/TOMEE-4291. I suspect this
> > may
> > require XBean updates as well as EclipseLink, but I haven't looked
> > at it.
> > Frank - thank you very much for taking the time to review the
> > release and
> > feedback - I want to assure you it is greatly appreciated, and
> > we'll work
> > through the JIRA ticket.
> > 
> > With 6 +1's (3 binding), I declare this has passed, and will
> > proceed with
> > the release.
> > 
> > Jon
> > 
> > On Mon, Dec 18, 2023 at 10:11 PM Daniel Dias Dos Santos <
> > daniel.dias.analist...@gmail.com> wrote:
> > 
> > > Hello
> > > +1
> > > 
> > > On Mon, Dec 18, 2023, 17:37 Alex The Rocker
> > >  wrote:
> > > 
> > > > I agreed that this EclipseLink specific issue is not a blocker
> > > > for
> > > > releasing TomEE 9.1.2.
> > > > 
> > > > As I mentioned, I tested TomEE+ with IBM Semeru 21 Milestone 1
> > > > without
> > > > issue (but okay, I use no JPA so maybe that's why), and right
> > > > now
> > > > moving to Java 21 isn't critical, as running with Java 17 is
> > > > still
> > > > fine for the short term.
> > > > 
> > > > However it will be nice to fix that EclipseLink issue shortly
> > > > after
> > > > 9.1.2 is released, so as to make sure it won't be forgotten and
> > > > to
> > > > allow tests with wider scope than mine with Java 21
> > > > 
> > > > So again +1 (non-binding)
> > > > 
> > > > Thanks,
> > > > Alex
> > > > 
> > > > Le lun. 18 déc. 2023 à 21:08, Jean-Louis Monteiro
> > > >  a écrit :
> > > > > 
> > > > > Not a show stopper. Jakarta EE 9 does not require Java 21.
> > > > > So we are good, the upgrade can go later for the next
> > > > > maintenance
> > > > release.
> > > > > 
> > > > > Also here is my own +1
> > > > > Thank you Jon for the release
> > > > > --
> > > > > Jean-Louis Monteiro
> > > > > http://twitter.com/jlouismonteiro
> > > > > http://www.tomitribe.com
> > > > > 
> > > > > 
> > > > > On Mon, Dec 18, 2023 at 11:35 AM Richard Zowalla
> > > > > 
> > > > wrote:
> > > > > 
> > > > > > IMHO it isn't a show stopper because users can just replace
> > > > > > the lib
> > > in
> > > > > > /lib - I feel like it is more important to get the CVE
> > > > > > patches out
> > > very
> > > > > > soonish but finally up to the release manager :)
> > > > > > 
> > > > > > Am Montag, dem 18.12.2023 um 11:21 +0100 schrieb Frank
> > > > > > Jung:
> > > > > > > -1 ?
> > > > > > > I'm not sure if this is considered to be a showstopper,
> > > > > > > concerning
> > > > > > > only Java 21:
> > > > > > > 
> > > > > > > Eclipselink needs a dependency update to work with Code
> > > > > > > compiled
> > > with
> > > > > > > JDK 21.
> > > > > > > Created a ticket for that:
> > > > > > > https://issues.apache.org/jira/browse/TOMEE-4291
> > > > > > > 
> > > > > > > > -Ursprüngliche Nachricht-
> > &g

Re: [RESULT] [VOTE] Release Apache TomEE 9.1.2 (take 2)

2023-12-19 Thread Jonathan Gallimore
That should all be done. Any issues, please let me know. Thanks to everyone
for the review and votes.

Jon

On Tue, Dec 19, 2023 at 2:04 PM Jonathan Gallimore <
jonathan.gallim...@gmail.com> wrote:

> +1s:
>
> Richard Zowalla (binding)
> Martin Wiesner
> Alex The Rocker
> Jean-Louis Monteiro (binding)
> Daniel Dias Dos Santos
> Jonathan Gallimore (binding)
>
> Also noting the -1 (with a ?) from Frank Jung, which has been discussed
> and we'll be tackling in 9.1.3. I note that Frank has filed a JIRA here:
> https://issues.apache.org/jira/browse/TOMEE-4291. I suspect this may
> require XBean updates as well as EclipseLink, but I haven't looked at it.
> Frank - thank you very much for taking the time to review the release and
> feedback - I want to assure you it is greatly appreciated, and we'll work
> through the JIRA ticket.
>
> With 6 +1's (3 binding), I declare this has passed, and will proceed with
> the release.
>
> Jon
>
> On Mon, Dec 18, 2023 at 10:11 PM Daniel Dias Dos Santos <
> daniel.dias.analist...@gmail.com> wrote:
>
>> Hello
>> +1
>>
>> On Mon, Dec 18, 2023, 17:37 Alex The Rocker  wrote:
>>
>> > I agreed that this EclipseLink specific issue is not a blocker for
>> > releasing TomEE 9.1.2.
>> >
>> > As I mentioned, I tested TomEE+ with IBM Semeru 21 Milestone 1 without
>> > issue (but okay, I use no JPA so maybe that's why), and right now
>> > moving to Java 21 isn't critical, as running with Java 17 is still
>> > fine for the short term.
>> >
>> > However it will be nice to fix that EclipseLink issue shortly after
>> > 9.1.2 is released, so as to make sure it won't be forgotten and to
>> > allow tests with wider scope than mine with Java 21
>> >
>> > So again +1 (non-binding)
>> >
>> > Thanks,
>> > Alex
>> >
>> > Le lun. 18 déc. 2023 à 21:08, Jean-Louis Monteiro
>> >  a écrit :
>> > >
>> > > Not a show stopper. Jakarta EE 9 does not require Java 21.
>> > > So we are good, the upgrade can go later for the next maintenance
>> > release.
>> > >
>> > > Also here is my own +1
>> > > Thank you Jon for the release
>> > > --
>> > > Jean-Louis Monteiro
>> > > http://twitter.com/jlouismonteiro
>> > > http://www.tomitribe.com
>> > >
>> > >
>> > > On Mon, Dec 18, 2023 at 11:35 AM Richard Zowalla 
>> > wrote:
>> > >
>> > > > IMHO it isn't a show stopper because users can just replace the lib
>> in
>> > > > /lib - I feel like it is more important to get the CVE patches out
>> very
>> > > > soonish but finally up to the release manager :)
>> > > >
>> > > > Am Montag, dem 18.12.2023 um 11:21 +0100 schrieb Frank Jung:
>> > > > > -1 ?
>> > > > > I'm not sure if this is considered to be a showstopper, concerning
>> > > > > only Java 21:
>> > > > >
>> > > > > Eclipselink needs a dependency update to work with Code compiled
>> with
>> > > > > JDK 21.
>> > > > > Created a ticket for that:
>> > > > > https://issues.apache.org/jira/browse/TOMEE-4291
>> > > > >
>> > > > > > -Ursprüngliche Nachricht-
>> > > > > > Von: Richard Zowalla 
>> > > > > > Gesendet: Montag, 18. Dezember 2023 09:37
>> > > > > > An: dev@tomee.apache.org
>> > > > > > Betreff: Re: [VOTE] Release Apache TomEE 9.1.2 (take 2)
>> > > > > >
>> > > > > > Any more votes?
>> > > > > >
>> > > > > > Am Dienstag, dem 12.12.2023 um 16:57 + schrieb Jonathan
>> > > > > > Gallimore:
>> > > > > > > Hi All,
>> > > > > > >
>> > > > > > > I'd like to start a vote for the release of Apache TomEE
>> 9.1.2.
>> > > > > > > TomEE
>> > > > > > > 9.1.2
>> > > > > > > is a maintenance release with dependencies upgrades and bug
>> > > > > > > fixes. It
>> > > > > > > also fixes the latest Tomcat vulnerabilities as well as other
>> > > > > > > CVEs.
>> > > > > > >
>> > > > > > > ###
>> > > > > > >
>> > > > > > >

[RESULT] [VOTE] Release Apache TomEE 9.1.2 (take 2)

2023-12-19 Thread Jonathan Gallimore
+1s:

Richard Zowalla (binding)
Martin Wiesner
Alex The Rocker
Jean-Louis Monteiro (binding)
Daniel Dias Dos Santos
Jonathan Gallimore (binding)

Also noting the -1 (with a ?) from Frank Jung, which has been discussed and
we'll be tackling in 9.1.3. I note that Frank has filed a JIRA here:
https://issues.apache.org/jira/browse/TOMEE-4291. I suspect this may
require XBean updates as well as EclipseLink, but I haven't looked at it.
Frank - thank you very much for taking the time to review the release and
feedback - I want to assure you it is greatly appreciated, and we'll work
through the JIRA ticket.

With 6 +1's (3 binding), I declare this has passed, and will proceed with
the release.

Jon

On Mon, Dec 18, 2023 at 10:11 PM Daniel Dias Dos Santos <
daniel.dias.analist...@gmail.com> wrote:

> Hello
> +1
>
> On Mon, Dec 18, 2023, 17:37 Alex The Rocker  wrote:
>
> > I agreed that this EclipseLink specific issue is not a blocker for
> > releasing TomEE 9.1.2.
> >
> > As I mentioned, I tested TomEE+ with IBM Semeru 21 Milestone 1 without
> > issue (but okay, I use no JPA so maybe that's why), and right now
> > moving to Java 21 isn't critical, as running with Java 17 is still
> > fine for the short term.
> >
> > However it will be nice to fix that EclipseLink issue shortly after
> > 9.1.2 is released, so as to make sure it won't be forgotten and to
> > allow tests with wider scope than mine with Java 21
> >
> > So again +1 (non-binding)
> >
> > Thanks,
> > Alex
> >
> > Le lun. 18 déc. 2023 à 21:08, Jean-Louis Monteiro
> >  a écrit :
> > >
> > > Not a show stopper. Jakarta EE 9 does not require Java 21.
> > > So we are good, the upgrade can go later for the next maintenance
> > release.
> > >
> > > Also here is my own +1
> > > Thank you Jon for the release
> > > --
> > > Jean-Louis Monteiro
> > > http://twitter.com/jlouismonteiro
> > > http://www.tomitribe.com
> > >
> > >
> > > On Mon, Dec 18, 2023 at 11:35 AM Richard Zowalla 
> > wrote:
> > >
> > > > IMHO it isn't a show stopper because users can just replace the lib
> in
> > > > /lib - I feel like it is more important to get the CVE patches out
> very
> > > > soonish but finally up to the release manager :)
> > > >
> > > > Am Montag, dem 18.12.2023 um 11:21 +0100 schrieb Frank Jung:
> > > > > -1 ?
> > > > > I'm not sure if this is considered to be a showstopper, concerning
> > > > > only Java 21:
> > > > >
> > > > > Eclipselink needs a dependency update to work with Code compiled
> with
> > > > > JDK 21.
> > > > > Created a ticket for that:
> > > > > https://issues.apache.org/jira/browse/TOMEE-4291
> > > > >
> > > > > > -Ursprüngliche Nachricht-
> > > > > > Von: Richard Zowalla 
> > > > > > Gesendet: Montag, 18. Dezember 2023 09:37
> > > > > > An: dev@tomee.apache.org
> > > > > > Betreff: Re: [VOTE] Release Apache TomEE 9.1.2 (take 2)
> > > > > >
> > > > > > Any more votes?
> > > > > >
> > > > > > Am Dienstag, dem 12.12.2023 um 16:57 + schrieb Jonathan
> > > > > > Gallimore:
> > > > > > > Hi All,
> > > > > > >
> > > > > > > I'd like to start a vote for the release of Apache TomEE 9.1.2.
> > > > > > > TomEE
> > > > > > > 9.1.2
> > > > > > > is a maintenance release with dependencies upgrades and bug
> > > > > > > fixes. It
> > > > > > > also fixes the latest Tomcat vulnerabilities as well as other
> > > > > > > CVEs.
> > > > > > >
> > > > > > > ###
> > > > > > >
> > > > > > > Maven Repo:
> > > > > > >
> > > >
> https://repository.apache.org/content/repositories/orgapachetomee-1225
> > > > > > > /
> > > > > > >
> > > > > > > ###
> > > > > > >
> > > > > > > Binaries & Sources:
> > > > > > >
> > > >
> https://dist.apache.org/repos/dist/dev/tomee/staging-1225/tomee-9.1.2/
> > > > > > >
> > > > > > > ###
> > > > > > >
> > > > > > > Tags:

Re: [VOTE] Release Apache TomEE 9.1.2 (take 2)

2023-12-18 Thread Daniel Dias Dos Santos
Hello
+1

On Mon, Dec 18, 2023, 17:37 Alex The Rocker  wrote:

> I agreed that this EclipseLink specific issue is not a blocker for
> releasing TomEE 9.1.2.
>
> As I mentioned, I tested TomEE+ with IBM Semeru 21 Milestone 1 without
> issue (but okay, I use no JPA so maybe that's why), and right now
> moving to Java 21 isn't critical, as running with Java 17 is still
> fine for the short term.
>
> However it will be nice to fix that EclipseLink issue shortly after
> 9.1.2 is released, so as to make sure it won't be forgotten and to
> allow tests with wider scope than mine with Java 21
>
> So again +1 (non-binding)
>
> Thanks,
> Alex
>
> Le lun. 18 déc. 2023 à 21:08, Jean-Louis Monteiro
>  a écrit :
> >
> > Not a show stopper. Jakarta EE 9 does not require Java 21.
> > So we are good, the upgrade can go later for the next maintenance
> release.
> >
> > Also here is my own +1
> > Thank you Jon for the release
> > --
> > Jean-Louis Monteiro
> > http://twitter.com/jlouismonteiro
> > http://www.tomitribe.com
> >
> >
> > On Mon, Dec 18, 2023 at 11:35 AM Richard Zowalla 
> wrote:
> >
> > > IMHO it isn't a show stopper because users can just replace the lib in
> > > /lib - I feel like it is more important to get the CVE patches out very
> > > soonish but finally up to the release manager :)
> > >
> > > Am Montag, dem 18.12.2023 um 11:21 +0100 schrieb Frank Jung:
> > > > -1 ?
> > > > I'm not sure if this is considered to be a showstopper, concerning
> > > > only Java 21:
> > > >
> > > > Eclipselink needs a dependency update to work with Code compiled with
> > > > JDK 21.
> > > > Created a ticket for that:
> > > > https://issues.apache.org/jira/browse/TOMEE-4291
> > > >
> > > > > -Ursprüngliche Nachricht-
> > > > > Von: Richard Zowalla 
> > > > > Gesendet: Montag, 18. Dezember 2023 09:37
> > > > > An: dev@tomee.apache.org
> > > > > Betreff: Re: [VOTE] Release Apache TomEE 9.1.2 (take 2)
> > > > >
> > > > > Any more votes?
> > > > >
> > > > > Am Dienstag, dem 12.12.2023 um 16:57 + schrieb Jonathan
> > > > > Gallimore:
> > > > > > Hi All,
> > > > > >
> > > > > > I'd like to start a vote for the release of Apache TomEE 9.1.2.
> > > > > > TomEE
> > > > > > 9.1.2
> > > > > > is a maintenance release with dependencies upgrades and bug
> > > > > > fixes. It
> > > > > > also fixes the latest Tomcat vulnerabilities as well as other
> > > > > > CVEs.
> > > > > >
> > > > > > ###
> > > > > >
> > > > > > Maven Repo:
> > > > > >
> > > https://repository.apache.org/content/repositories/orgapachetomee-1225
> > > > > > /
> > > > > >
> > > > > > ###
> > > > > >
> > > > > > Binaries & Sources:
> > > > > >
> > > https://dist.apache.org/repos/dist/dev/tomee/staging-1225/tomee-9.1.2/
> > > > > >
> > > > > > ###
> > > > > >
> > > > > > Tags:
> > > > > > https://github.com/apache/tomee/releases/tag/tomee-9.1.2
> > > > > >
> > > > > > ###
> > > > > >
> > > > > > = Apache TomEE 9.1.2 Release Notes
> > > > > > :index-group: Release Notes
> > > > > > :jbake-type: page
> > > > > > :jbake-status: published
> > > > > >
> > > > > > == Dependency upgrade
> > > > > >
> > > > > > [.compact]
> > > > > >  -
> > > > > > link:
> https://issues.apache.org/jira/browse/TOMEE-4266[TOMEE-4266]
> > > > > > ActiveMQ 5.16.7 / 5.18.3
> > > > > >  -
> > > > > > link:
> https://issues.apache.org/jira/browse/TOMEE-4278[TOMEE-4278]
> > > > > > Commons CLI 1.6.0
> > > > > >  -
> > > > > > link:
> https://issues.apache.org/jira/browse/TOMEE-4277[TOMEE-4277]
> > > > > > Commons Codec 1.16.0
> > > > > >  -
> > > > > > link:
> https://issues.apache.org/jira/browse/TOMEE-4274[TOMEE-4274]
> > > > &

Re: [VOTE] Release Apache TomEE 9.1.2 (take 2)

2023-12-18 Thread Alex The Rocker
I agreed that this EclipseLink specific issue is not a blocker for
releasing TomEE 9.1.2.

As I mentioned, I tested TomEE+ with IBM Semeru 21 Milestone 1 without
issue (but okay, I use no JPA so maybe that's why), and right now
moving to Java 21 isn't critical, as running with Java 17 is still
fine for the short term.

However it will be nice to fix that EclipseLink issue shortly after
9.1.2 is released, so as to make sure it won't be forgotten and to
allow tests with wider scope than mine with Java 21

So again +1 (non-binding)

Thanks,
Alex

Le lun. 18 déc. 2023 à 21:08, Jean-Louis Monteiro
 a écrit :
>
> Not a show stopper. Jakarta EE 9 does not require Java 21.
> So we are good, the upgrade can go later for the next maintenance release.
>
> Also here is my own +1
> Thank you Jon for the release
> --
> Jean-Louis Monteiro
> http://twitter.com/jlouismonteiro
> http://www.tomitribe.com
>
>
> On Mon, Dec 18, 2023 at 11:35 AM Richard Zowalla  wrote:
>
> > IMHO it isn't a show stopper because users can just replace the lib in
> > /lib - I feel like it is more important to get the CVE patches out very
> > soonish but finally up to the release manager :)
> >
> > Am Montag, dem 18.12.2023 um 11:21 +0100 schrieb Frank Jung:
> > > -1 ?
> > > I'm not sure if this is considered to be a showstopper, concerning
> > > only Java 21:
> > >
> > > Eclipselink needs a dependency update to work with Code compiled with
> > > JDK 21.
> > > Created a ticket for that:
> > > https://issues.apache.org/jira/browse/TOMEE-4291
> > >
> > > > -Ursprüngliche Nachricht-----
> > > > Von: Richard Zowalla 
> > > > Gesendet: Montag, 18. Dezember 2023 09:37
> > > > An: dev@tomee.apache.org
> > > > Betreff: Re: [VOTE] Release Apache TomEE 9.1.2 (take 2)
> > > >
> > > > Any more votes?
> > > >
> > > > Am Dienstag, dem 12.12.2023 um 16:57 + schrieb Jonathan
> > > > Gallimore:
> > > > > Hi All,
> > > > >
> > > > > I'd like to start a vote for the release of Apache TomEE 9.1.2.
> > > > > TomEE
> > > > > 9.1.2
> > > > > is a maintenance release with dependencies upgrades and bug
> > > > > fixes. It
> > > > > also fixes the latest Tomcat vulnerabilities as well as other
> > > > > CVEs.
> > > > >
> > > > > ###
> > > > >
> > > > > Maven Repo:
> > > > >
> > https://repository.apache.org/content/repositories/orgapachetomee-1225
> > > > > /
> > > > >
> > > > > ###
> > > > >
> > > > > Binaries & Sources:
> > > > >
> > https://dist.apache.org/repos/dist/dev/tomee/staging-1225/tomee-9.1.2/
> > > > >
> > > > > ###
> > > > >
> > > > > Tags:
> > > > > https://github.com/apache/tomee/releases/tag/tomee-9.1.2
> > > > >
> > > > > ###
> > > > >
> > > > > = Apache TomEE 9.1.2 Release Notes
> > > > > :index-group: Release Notes
> > > > > :jbake-type: page
> > > > > :jbake-status: published
> > > > >
> > > > > == Dependency upgrade
> > > > >
> > > > > [.compact]
> > > > >  -
> > > > > link:https://issues.apache.org/jira/browse/TOMEE-4266[TOMEE-4266]
> > > > > ActiveMQ 5.16.7 / 5.18.3
> > > > >  -
> > > > > link:https://issues.apache.org/jira/browse/TOMEE-4278[TOMEE-4278]
> > > > > Commons CLI 1.6.0
> > > > >  -
> > > > > link:https://issues.apache.org/jira/browse/TOMEE-4277[TOMEE-4277]
> > > > > Commons Codec 1.16.0
> > > > >  -
> > > > > link:https://issues.apache.org/jira/browse/TOMEE-4274[TOMEE-4274]
> > > > > Commons DBCP 2.11.0
> > > > >  -
> > > > > link:https://issues.apache.org/jira/browse/TOMEE-4275[TOMEE-4275]
> > > > > Commons Lang3 3.13.0
> > > > >  -
> > > > > link:https://issues.apache.org/jira/browse/TOMEE-4276[TOMEE-4276]
> > > > > Jackson 2.15.3
> > > > >  -
> > > > > link:
> > > > > https://issues.apache.org/jira/browse/TOMEE-4279[TOMEE-4279] Log
> > > > > 4J2
> > > > > 2.21.1
> > > > >  -
> > > > > link:
&

Re: [VOTE] Release Apache TomEE 9.1.2 (take 2)

2023-12-18 Thread Jean-Louis Monteiro
Not a show stopper. Jakarta EE 9 does not require Java 21.
So we are good, the upgrade can go later for the next maintenance release.

Also here is my own +1
Thank you Jon for the release
--
Jean-Louis Monteiro
http://twitter.com/jlouismonteiro
http://www.tomitribe.com


On Mon, Dec 18, 2023 at 11:35 AM Richard Zowalla  wrote:

> IMHO it isn't a show stopper because users can just replace the lib in
> /lib - I feel like it is more important to get the CVE patches out very
> soonish but finally up to the release manager :)
>
> Am Montag, dem 18.12.2023 um 11:21 +0100 schrieb Frank Jung:
> > -1 ?
> > I'm not sure if this is considered to be a showstopper, concerning
> > only Java 21:
> >
> > Eclipselink needs a dependency update to work with Code compiled with
> > JDK 21.
> > Created a ticket for that:
> > https://issues.apache.org/jira/browse/TOMEE-4291
> >
> > > -Ursprüngliche Nachricht-
> > > Von: Richard Zowalla 
> > > Gesendet: Montag, 18. Dezember 2023 09:37
> > > An: dev@tomee.apache.org
> > > Betreff: Re: [VOTE] Release Apache TomEE 9.1.2 (take 2)
> > >
> > > Any more votes?
> > >
> > > Am Dienstag, dem 12.12.2023 um 16:57 + schrieb Jonathan
> > > Gallimore:
> > > > Hi All,
> > > >
> > > > I'd like to start a vote for the release of Apache TomEE 9.1.2.
> > > > TomEE
> > > > 9.1.2
> > > > is a maintenance release with dependencies upgrades and bug
> > > > fixes. It
> > > > also fixes the latest Tomcat vulnerabilities as well as other
> > > > CVEs.
> > > >
> > > > ###
> > > >
> > > > Maven Repo:
> > > >
> https://repository.apache.org/content/repositories/orgapachetomee-1225
> > > > /
> > > >
> > > > ###
> > > >
> > > > Binaries & Sources:
> > > >
> https://dist.apache.org/repos/dist/dev/tomee/staging-1225/tomee-9.1.2/
> > > >
> > > > ###
> > > >
> > > > Tags:
> > > > https://github.com/apache/tomee/releases/tag/tomee-9.1.2
> > > >
> > > > ###
> > > >
> > > > = Apache TomEE 9.1.2 Release Notes
> > > > :index-group: Release Notes
> > > > :jbake-type: page
> > > > :jbake-status: published
> > > >
> > > > == Dependency upgrade
> > > >
> > > > [.compact]
> > > >  -
> > > > link:https://issues.apache.org/jira/browse/TOMEE-4266[TOMEE-4266]
> > > > ActiveMQ 5.16.7 / 5.18.3
> > > >  -
> > > > link:https://issues.apache.org/jira/browse/TOMEE-4278[TOMEE-4278]
> > > > Commons CLI 1.6.0
> > > >  -
> > > > link:https://issues.apache.org/jira/browse/TOMEE-4277[TOMEE-4277]
> > > > Commons Codec 1.16.0
> > > >  -
> > > > link:https://issues.apache.org/jira/browse/TOMEE-4274[TOMEE-4274]
> > > > Commons DBCP 2.11.0
> > > >  -
> > > > link:https://issues.apache.org/jira/browse/TOMEE-4275[TOMEE-4275]
> > > > Commons Lang3 3.13.0
> > > >  -
> > > > link:https://issues.apache.org/jira/browse/TOMEE-4276[TOMEE-4276]
> > > > Jackson 2.15.3
> > > >  -
> > > > link:
> > > > https://issues.apache.org/jira/browse/TOMEE-4279[TOMEE-4279] Log
> > > > 4J2
> > > > 2.21.1
> > > >  -
> > > > link:
> > > > https://issues.apache.org/jira/browse/TOMEE-4280[TOMEE-4280] WSS
> > > > 4J
> > > > 3.0.2
> > > >
> > > > == New Feature
> > > >
> > > > [.compact]
> > > >  -
> > > > link:https://issues.apache.org/jira/browse/TOMEE-4281[TOMEE-4281]
> > > > Improve logging when failing to load a class
> > > >  -
> > > > link:
> > > > https://issues.apache.org/jira/browse/TOMEE-4268[TOMEE-4268] Cre
> > > > ate MicroProfile OpenAPI Reader exemple
> > > >
> > > > == Bug
> > > >
> > > > [.compact]
> > > >  -
> > > > link:https://issues.apache.org/jira/browse/TOMEE-4267[TOMEE-4267]
> > > > MicroProfile Metrics JMX Registrar must be initialized once
> > > >
> > > > == Improvement
> > > >
> > > > [.compact]
> > > >  -
> > > > link:
> > > > https://issues.apache.org/jira/browse/TOMEE-4285[TOMEE-4285] Por
> > > > t fix for CVE-2023-46589 for TomEE 9.x
> > > >  -
> > > > link:https://issues.apache.org/jira/browse/TOMEE-4286[TOMEE-4286]
> > > > Namespace error when processing web-fragment.xml
> > > >  -
> > > > link:
> > > > https://issues.apache.org/jira/browse/TOMEE-4287[TOMEE-4287] Bet
> > > > ter information when XBean Finder fails to read a class/jar file
> > > >  -
> > > > link:https://issues.apache.org/jira/browse/TOMEE-4289[TOMEE-4289]
> > > >  java.util.NoSuchElementException in SystemLogHandler
> > > >  -
> > > > link:
> > > > https://issues.apache.org/jira/browse/TOMEE-4269[TOMEE-4269] Ena
> > > > ble SLF4J 2.x webapps to include bindings in their WEB-INF/lib
> > > >
> > > > == Task
> > > >
> > > > [.compact]
> > > >  -
> > > > link:https://issues.apache.org/jira/browse/TOMEE-4284[TOMEE-4284]
> > > > Implement tomee.mp.jwt.allow.no-exp property over
> > > > mp.jwt.tomee.allow.no-exp
> > > >
> > > > ###
> > > >
> > > > Please VOTE
> > > >
> > > > [+1] go ship it
> > > > [+0] meh, don't care
> > > > [-1] stop, there is a ${showstopper}
> > > >
> > > > The VOTE is open for 72h or as long as needed.
> > > >
> > > > Thanks
> > > >
> > > > Jon
> >
> >
>
>


Re: [VOTE] Release Apache TomEE 9.1.2 (take 2)

2023-12-18 Thread Richard Zowalla
IMHO it isn't a show stopper because users can just replace the lib in
/lib - I feel like it is more important to get the CVE patches out very
soonish but finally up to the release manager :)

Am Montag, dem 18.12.2023 um 11:21 +0100 schrieb Frank Jung:
> -1 ?
> I'm not sure if this is considered to be a showstopper, concerning
> only Java 21:
> 
> Eclipselink needs a dependency update to work with Code compiled with
> JDK 21. 
> Created a ticket for that:
> https://issues.apache.org/jira/browse/TOMEE-4291
> 
> > -Ursprüngliche Nachricht-
> > Von: Richard Zowalla 
> > Gesendet: Montag, 18. Dezember 2023 09:37
> > An: dev@tomee.apache.org
> > Betreff: Re: [VOTE] Release Apache TomEE 9.1.2 (take 2)
> > 
> > Any more votes?
> > 
> > Am Dienstag, dem 12.12.2023 um 16:57 + schrieb Jonathan
> > Gallimore:
> > > Hi All,
> > > 
> > > I'd like to start a vote for the release of Apache TomEE 9.1.2.
> > > TomEE
> > > 9.1.2
> > > is a maintenance release with dependencies upgrades and bug
> > > fixes. It
> > > also fixes the latest Tomcat vulnerabilities as well as other
> > > CVEs.
> > > 
> > > ###
> > > 
> > > Maven Repo:
> > > https://repository.apache.org/content/repositories/orgapachetomee-1225
> > > /
> > > 
> > > ###
> > > 
> > > Binaries & Sources:
> > > https://dist.apache.org/repos/dist/dev/tomee/staging-1225/tomee-9.1.2/
> > > 
> > > ###
> > > 
> > > Tags:
> > > https://github.com/apache/tomee/releases/tag/tomee-9.1.2
> > > 
> > > ###
> > > 
> > > = Apache TomEE 9.1.2 Release Notes
> > > :index-group: Release Notes
> > > :jbake-type: page
> > > :jbake-status: published
> > > 
> > > == Dependency upgrade
> > > 
> > > [.compact]
> > >  -
> > > link:https://issues.apache.org/jira/browse/TOMEE-4266[TOMEE-4266]
> > > ActiveMQ 5.16.7 / 5.18.3
> > >  -
> > > link:https://issues.apache.org/jira/browse/TOMEE-4278[TOMEE-4278]
> > > Commons CLI 1.6.0
> > >  -
> > > link:https://issues.apache.org/jira/browse/TOMEE-4277[TOMEE-4277]
> > > Commons Codec 1.16.0
> > >  -
> > > link:https://issues.apache.org/jira/browse/TOMEE-4274[TOMEE-4274]
> > > Commons DBCP 2.11.0
> > >  -
> > > link:https://issues.apache.org/jira/browse/TOMEE-4275[TOMEE-4275]
> > > Commons Lang3 3.13.0
> > >  -
> > > link:https://issues.apache.org/jira/browse/TOMEE-4276[TOMEE-4276]
> > > Jackson 2.15.3
> > >  -
> > > link:
> > > https://issues.apache.org/jira/browse/TOMEE-4279[TOMEE-4279] Log
> > > 4J2
> > > 2.21.1
> > >  -
> > > link:
> > > https://issues.apache.org/jira/browse/TOMEE-4280[TOMEE-4280] WSS
> > > 4J
> > > 3.0.2
> > > 
> > > == New Feature
> > > 
> > > [.compact]
> > >  -
> > > link:https://issues.apache.org/jira/browse/TOMEE-4281[TOMEE-4281]
> > > Improve logging when failing to load a class
> > >  -
> > > link:
> > > https://issues.apache.org/jira/browse/TOMEE-4268[TOMEE-4268] Cre
> > > ate MicroProfile OpenAPI Reader exemple
> > > 
> > > == Bug
> > > 
> > > [.compact]
> > >  -
> > > link:https://issues.apache.org/jira/browse/TOMEE-4267[TOMEE-4267]
> > > MicroProfile Metrics JMX Registrar must be initialized once
> > > 
> > > == Improvement
> > > 
> > > [.compact]
> > >  -
> > > link:
> > > https://issues.apache.org/jira/browse/TOMEE-4285[TOMEE-4285] Por
> > > t fix for CVE-2023-46589 for TomEE 9.x
> > >  -
> > > link:https://issues.apache.org/jira/browse/TOMEE-4286[TOMEE-4286]
> > > Namespace error when processing web-fragment.xml
> > >  -
> > > link:
> > > https://issues.apache.org/jira/browse/TOMEE-4287[TOMEE-4287] Bet
> > > ter information when XBean Finder fails to read a class/jar file
> > >  -
> > > link:https://issues.apache.org/jira/browse/TOMEE-4289[TOMEE-4289]
> > >  java.util.NoSuchElementException in SystemLogHandler
> > >  -
> > > link:
> > > https://issues.apache.org/jira/browse/TOMEE-4269[TOMEE-4269] Ena
> > > ble SLF4J 2.x webapps to include bindings in their WEB-INF/lib
> > > 
> > > == Task
> > > 
> > > [.compact]
> > >  -
> > > link:https://issues.apache.org/jira/browse/TOMEE-4284[TOMEE-4284]
> > > Implement tomee.mp.jwt.allow.no-exp property over
> > > mp.jwt.tomee.allow.no-exp
> > > 
> > > ###
> > > 
> > > Please VOTE
> > > 
> > > [+1] go ship it
> > > [+0] meh, don't care
> > > [-1] stop, there is a ${showstopper}
> > > 
> > > The VOTE is open for 72h or as long as needed.
> > > 
> > > Thanks
> > > 
> > > Jon
> 
> 



signature.asc
Description: This is a digitally signed message part


AW: [VOTE] Release Apache TomEE 9.1.2 (take 2)

2023-12-18 Thread Frank Jung
-1 ?
I'm not sure if this is considered to be a showstopper, concerning only Java 21:

Eclipselink needs a dependency update to work with Code compiled with JDK 21. 
Created a ticket for that:
https://issues.apache.org/jira/browse/TOMEE-4291

> -Ursprüngliche Nachricht-
> Von: Richard Zowalla 
> Gesendet: Montag, 18. Dezember 2023 09:37
> An: dev@tomee.apache.org
> Betreff: Re: [VOTE] Release Apache TomEE 9.1.2 (take 2)
> 
> Any more votes?
> 
> Am Dienstag, dem 12.12.2023 um 16:57 + schrieb Jonathan Gallimore:
> > Hi All,
> >
> > I'd like to start a vote for the release of Apache TomEE 9.1.2. TomEE
> > 9.1.2
> > is a maintenance release with dependencies upgrades and bug fixes. It
> > also fixes the latest Tomcat vulnerabilities as well as other CVEs.
> >
> > ###
> >
> > Maven Repo:
> > https://repository.apache.org/content/repositories/orgapachetomee-1225
> > /
> >
> > ###
> >
> > Binaries & Sources:
> > https://dist.apache.org/repos/dist/dev/tomee/staging-1225/tomee-9.1.2/
> >
> > ###
> >
> > Tags:
> > https://github.com/apache/tomee/releases/tag/tomee-9.1.2
> >
> > ###
> >
> > = Apache TomEE 9.1.2 Release Notes
> > :index-group: Release Notes
> > :jbake-type: page
> > :jbake-status: published
> >
> > == Dependency upgrade
> >
> > [.compact]
> >  - link:https://issues.apache.org/jira/browse/TOMEE-4266[TOMEE-4266]
> > ActiveMQ 5.16.7 / 5.18.3
> >  - link:https://issues.apache.org/jira/browse/TOMEE-4278[TOMEE-4278]
> > Commons CLI 1.6.0
> >  - link:https://issues.apache.org/jira/browse/TOMEE-4277[TOMEE-4277]
> > Commons Codec 1.16.0
> >  - link:https://issues.apache.org/jira/browse/TOMEE-4274[TOMEE-4274]
> > Commons DBCP 2.11.0
> >  - link:https://issues.apache.org/jira/browse/TOMEE-4275[TOMEE-4275]
> > Commons Lang3 3.13.0
> >  - link:https://issues.apache.org/jira/browse/TOMEE-4276[TOMEE-4276]
> > Jackson 2.15.3
> >  -
> > link:https://issues.apache.org/jira/browse/TOMEE-4279[TOMEE-4279] Log
> > 4J2
> > 2.21.1
> >  -
> > link:https://issues.apache.org/jira/browse/TOMEE-4280[TOMEE-4280] WSS
> > 4J
> > 3.0.2
> >
> > == New Feature
> >
> > [.compact]
> >  - link:https://issues.apache.org/jira/browse/TOMEE-4281[TOMEE-4281]
> > Improve logging when failing to load a class
> >  -
> > link:https://issues.apache.org/jira/browse/TOMEE-4268[TOMEE-4268] Cre
> > ate MicroProfile OpenAPI Reader exemple
> >
> > == Bug
> >
> > [.compact]
> >  - link:https://issues.apache.org/jira/browse/TOMEE-4267[TOMEE-4267]
> > MicroProfile Metrics JMX Registrar must be initialized once
> >
> > == Improvement
> >
> > [.compact]
> >  -
> > link:https://issues.apache.org/jira/browse/TOMEE-4285[TOMEE-4285] Por
> > t fix for CVE-2023-46589 for TomEE 9.x
> >  - link:https://issues.apache.org/jira/browse/TOMEE-4286[TOMEE-4286]
> > Namespace error when processing web-fragment.xml
> >  -
> > link:https://issues.apache.org/jira/browse/TOMEE-4287[TOMEE-4287] Bet
> > ter information when XBean Finder fails to read a class/jar file
> >  - link:https://issues.apache.org/jira/browse/TOMEE-4289[TOMEE-4289]
> >  java.util.NoSuchElementException in SystemLogHandler
> >  -
> > link:https://issues.apache.org/jira/browse/TOMEE-4269[TOMEE-4269] Ena
> > ble SLF4J 2.x webapps to include bindings in their WEB-INF/lib
> >
> > == Task
> >
> > [.compact]
> >  - link:https://issues.apache.org/jira/browse/TOMEE-4284[TOMEE-4284]
> > Implement tomee.mp.jwt.allow.no-exp property over
> > mp.jwt.tomee.allow.no-exp
> >
> > ###
> >
> > Please VOTE
> >
> > [+1] go ship it
> > [+0] meh, don't care
> > [-1] stop, there is a ${showstopper}
> >
> > The VOTE is open for 72h or as long as needed.
> >
> > Thanks
> >
> > Jon




Re: [VOTE] Release Apache TomEE 9.1.2 (take 2)

2023-12-18 Thread Richard Zowalla
Any more votes?

Am Dienstag, dem 12.12.2023 um 16:57 + schrieb Jonathan Gallimore:
> Hi All,
> 
> I'd like to start a vote for the release of Apache TomEE 9.1.2. TomEE
> 9.1.2
> is a maintenance release with dependencies upgrades and bug fixes. It
> also
> fixes the latest Tomcat vulnerabilities
> as well as other CVEs.
> 
> ###
> 
> Maven Repo:
> https://repository.apache.org/content/repositories/orgapachetomee-1225/
> 
> ###
> 
> Binaries & Sources:
> https://dist.apache.org/repos/dist/dev/tomee/staging-1225/tomee-9.1.2/
> 
> ###
> 
> Tags:
> https://github.com/apache/tomee/releases/tag/tomee-9.1.2
> 
> ###
> 
> = Apache TomEE 9.1.2 Release Notes
> :index-group: Release Notes
> :jbake-type: page
> :jbake-status: published
> 
> == Dependency upgrade
> 
> [.compact]
>  - link:https://issues.apache.org/jira/browse/TOMEE-4266[TOMEE-4266]
> ActiveMQ 5.16.7 / 5.18.3
>  - link:https://issues.apache.org/jira/browse/TOMEE-4278[TOMEE-4278]
> Commons CLI 1.6.0
>  - link:https://issues.apache.org/jira/browse/TOMEE-4277[TOMEE-4277]
> Commons Codec 1.16.0
>  - link:https://issues.apache.org/jira/browse/TOMEE-4274[TOMEE-4274]
> Commons DBCP 2.11.0
>  - link:https://issues.apache.org/jira/browse/TOMEE-4275[TOMEE-4275]
> Commons Lang3 3.13.0
>  - link:https://issues.apache.org/jira/browse/TOMEE-4276[TOMEE-4276]
> Jackson 2.15.3
>  -
> link:https://issues.apache.org/jira/browse/TOMEE-4279[TOMEE-4279] Log
> 4J2
> 2.21.1
>  -
> link:https://issues.apache.org/jira/browse/TOMEE-4280[TOMEE-4280] WSS
> 4J
> 3.0.2
> 
> == New Feature
> 
> [.compact]
>  - link:https://issues.apache.org/jira/browse/TOMEE-4281[TOMEE-4281]
> Improve logging when failing to load a class
>  -
> link:https://issues.apache.org/jira/browse/TOMEE-4268[TOMEE-4268] Cre
> ate
> MicroProfile OpenAPI Reader exemple
> 
> == Bug
> 
> [.compact]
>  - link:https://issues.apache.org/jira/browse/TOMEE-4267[TOMEE-4267]
> MicroProfile Metrics JMX Registrar must be initialized once
> 
> == Improvement
> 
> [.compact]
>  -
> link:https://issues.apache.org/jira/browse/TOMEE-4285[TOMEE-4285] Por
> t
> fix for CVE-2023-46589 for TomEE 9.x
>  - link:https://issues.apache.org/jira/browse/TOMEE-4286[TOMEE-4286]
> Namespace error when processing web-fragment.xml
>  -
> link:https://issues.apache.org/jira/browse/TOMEE-4287[TOMEE-4287] Bet
> ter
> information when XBean Finder fails to read a class/jar file
>  - link:https://issues.apache.org/jira/browse/TOMEE-4289[TOMEE-4289]
>  java.util.NoSuchElementException in SystemLogHandler
>  -
> link:https://issues.apache.org/jira/browse/TOMEE-4269[TOMEE-4269] Ena
> ble
> SLF4J 2.x webapps to include bindings in their WEB-INF/lib
> 
> == Task
> 
> [.compact]
>  - link:https://issues.apache.org/jira/browse/TOMEE-4284[TOMEE-4284]
> Implement tomee.mp.jwt.allow.no-exp property over
> mp.jwt.tomee.allow.no-exp
> 
> ###
> 
> Please VOTE
> 
> [+1] go ship it
> [+0] meh, don't care
> [-1] stop, there is a ${showstopper}
> 
> The VOTE is open for 72h or as long as needed.
> 
> Thanks
> 
> Jon



signature.asc
Description: This is a digitally signed message part


Re: [VOTE] Release Apache TomEE 9.1.2 (take 2)

2023-12-14 Thread Alex The Rocker
+1 (non-binding)

Tested with a large set of different web application, with JAX-WS,
JAX-RS, EJB, CDI, Servlets, Websockets and JMS (including embedded
ActiveMQ in TomEE+) mainly with IBM Semeru JDK 17.0.9 on RedHat Linux 8,
but also with IBM Semeru 21 Milestone 1 on RedHat Linux 8.

Validated the neat capacity to use SLFJ4v2 with Logback 1.4.x, also
validated the
better logs on JARs containing references to Java EE packages, and of
identification of
corrupted signed JARs, and much more...

Many thanks!

Alex

Le mer. 13 déc. 2023 à 23:20, Martin Wiesner  a écrit :
>
> Hi Jon,
>
> +1 (non-binding)
>
> Thanks,
> Martin
> --
>
> > Am 13.12.2023 um 11:13 schrieb Jonathan Gallimore 
> > :
> >
> > Here's my own +1 (binding).
> >
> > Jon
> >
> > On Tue, Dec 12, 2023 at 4:57 PM Jonathan Gallimore <
> > jonathan.gallim...@gmail.com> wrote:
> >
> >> Hi All,
> >>
> >> I'd like to start a vote for the release of Apache TomEE 9.1.2. TomEE
> >> 9.1.2 is a maintenance release with dependencies upgrades and bug fixes. It
> >> also fixes the latest Tomcat vulnerabilities
> >> as well as other CVEs.
> >>
> >> ###
> >>
> >> Maven Repo:
> >> https://repository.apache.org/content/repositories/orgapachetomee-1225/
> >>
> >> ###
> >>
> >> Binaries & Sources:
> >> https://dist.apache.org/repos/dist/dev/tomee/staging-1225/tomee-9.1.2/
> >>
> >> ###
> >>
> >> Tags:
> >> https://github.com/apache/tomee/releases/tag/tomee-9.1.2
> >>
> >> ###
> >>
> >> = Apache TomEE 9.1.2 Release Notes
> >> :index-group: Release Notes
> >> :jbake-type: page
> >> :jbake-status: published
> >>
> >> == Dependency upgrade
> >>
> >> [.compact]
> >> - link:https://issues.apache.org/jira/browse/TOMEE-4266[TOMEE-4266]
> >> ActiveMQ 5.16.7 / 5.18.3
> >> - link:https://issues.apache.org/jira/browse/TOMEE-4278[TOMEE-4278]
> >> Commons CLI 1.6.0
> >> - link:https://issues.apache.org/jira/browse/TOMEE-4277[TOMEE-4277]
> >> Commons Codec 1.16.0
> >> - link:https://issues.apache.org/jira/browse/TOMEE-4274[TOMEE-4274]
> >> Commons DBCP 2.11.0
> >> - link:https://issues.apache.org/jira/browse/TOMEE-4275[TOMEE-4275]
> >> Commons Lang3 3.13.0
> >> - link:https://issues.apache.org/jira/browse/TOMEE-4276[TOMEE-4276]
> >> Jackson 2.15.3
> >> - link:https://issues.apache.org/jira/browse/TOMEE-4279[TOMEE-4279]
> >> Log4J2 2.21.1
> >> - link:https://issues.apache.org/jira/browse/TOMEE-4280[TOMEE-4280]
> >> WSS4J 3.0.2
> >>
> >> == New Feature
> >>
> >> [.compact]
> >> - link:https://issues.apache.org/jira/browse/TOMEE-4281[TOMEE-4281]
> >> Improve logging when failing to load a class
> >> - link:https://issues.apache.org/jira/browse/TOMEE-4268[TOMEE-4268]
> >> Create MicroProfile OpenAPI Reader exemple
> >>
> >> == Bug
> >>
> >> [.compact]
> >> - link:https://issues.apache.org/jira/browse/TOMEE-4267[TOMEE-4267]
> >> MicroProfile Metrics JMX Registrar must be initialized once
> >>
> >> == Improvement
> >>
> >> [.compact]
> >> - link:https://issues.apache.org/jira/browse/TOMEE-4285[TOMEE-4285] Port
> >> fix for CVE-2023-46589 for TomEE 9.x
> >> - link:https://issues.apache.org/jira/browse/TOMEE-4286[TOMEE-4286]
> >> Namespace error when processing web-fragment.xml
> >> - link:https://issues.apache.org/jira/browse/TOMEE-4287[TOMEE-4287]
> >> Better information when XBean Finder fails to read a class/jar file
> >> - link:https://issues.apache.org/jira/browse/TOMEE-4289[TOMEE-4289]
> >> java.util.NoSuchElementException in SystemLogHandler
> >> - link:https://issues.apache.org/jira/browse/TOMEE-4269[TOMEE-4269]
> >> Enable SLF4J 2.x webapps to include bindings in their WEB-INF/lib
> >>
> >> == Task
> >>
> >> [.compact]
> >> - link:https://issues.apache.org/jira/browse/TOMEE-4284[TOMEE-4284]
> >> Implement tomee.mp.jwt.allow.no-exp property over mp.jwt.tomee.allow.no-exp
> >>
> >> ###
> >>
> >> Please VOTE
> >>
> >> [+1] go ship it
> >> [+0] meh, don't care
> >> [-1] stop, there is a ${showstopper}
> >>
> >> The VOTE is open for 72h or as long as needed.
> >>
> >> Thanks
> >>
> >> Jon


Re: [VOTE] Release Apache TomEE 9.1.2 (take 2)

2023-12-13 Thread Martin Wiesner
Hi Jon,

+1 (non-binding)

Thanks,
Martin
--

> Am 13.12.2023 um 11:13 schrieb Jonathan Gallimore 
> :
> 
> Here's my own +1 (binding).
> 
> Jon
> 
> On Tue, Dec 12, 2023 at 4:57 PM Jonathan Gallimore <
> jonathan.gallim...@gmail.com> wrote:
> 
>> Hi All,
>> 
>> I'd like to start a vote for the release of Apache TomEE 9.1.2. TomEE
>> 9.1.2 is a maintenance release with dependencies upgrades and bug fixes. It
>> also fixes the latest Tomcat vulnerabilities
>> as well as other CVEs.
>> 
>> ###
>> 
>> Maven Repo:
>> https://repository.apache.org/content/repositories/orgapachetomee-1225/
>> 
>> ###
>> 
>> Binaries & Sources:
>> https://dist.apache.org/repos/dist/dev/tomee/staging-1225/tomee-9.1.2/
>> 
>> ###
>> 
>> Tags:
>> https://github.com/apache/tomee/releases/tag/tomee-9.1.2
>> 
>> ###
>> 
>> = Apache TomEE 9.1.2 Release Notes
>> :index-group: Release Notes
>> :jbake-type: page
>> :jbake-status: published
>> 
>> == Dependency upgrade
>> 
>> [.compact]
>> - link:https://issues.apache.org/jira/browse/TOMEE-4266[TOMEE-4266]
>> ActiveMQ 5.16.7 / 5.18.3
>> - link:https://issues.apache.org/jira/browse/TOMEE-4278[TOMEE-4278]
>> Commons CLI 1.6.0
>> - link:https://issues.apache.org/jira/browse/TOMEE-4277[TOMEE-4277]
>> Commons Codec 1.16.0
>> - link:https://issues.apache.org/jira/browse/TOMEE-4274[TOMEE-4274]
>> Commons DBCP 2.11.0
>> - link:https://issues.apache.org/jira/browse/TOMEE-4275[TOMEE-4275]
>> Commons Lang3 3.13.0
>> - link:https://issues.apache.org/jira/browse/TOMEE-4276[TOMEE-4276]
>> Jackson 2.15.3
>> - link:https://issues.apache.org/jira/browse/TOMEE-4279[TOMEE-4279]
>> Log4J2 2.21.1
>> - link:https://issues.apache.org/jira/browse/TOMEE-4280[TOMEE-4280]
>> WSS4J 3.0.2
>> 
>> == New Feature
>> 
>> [.compact]
>> - link:https://issues.apache.org/jira/browse/TOMEE-4281[TOMEE-4281]
>> Improve logging when failing to load a class
>> - link:https://issues.apache.org/jira/browse/TOMEE-4268[TOMEE-4268]
>> Create MicroProfile OpenAPI Reader exemple
>> 
>> == Bug
>> 
>> [.compact]
>> - link:https://issues.apache.org/jira/browse/TOMEE-4267[TOMEE-4267]
>> MicroProfile Metrics JMX Registrar must be initialized once
>> 
>> == Improvement
>> 
>> [.compact]
>> - link:https://issues.apache.org/jira/browse/TOMEE-4285[TOMEE-4285] Port
>> fix for CVE-2023-46589 for TomEE 9.x
>> - link:https://issues.apache.org/jira/browse/TOMEE-4286[TOMEE-4286]
>> Namespace error when processing web-fragment.xml
>> - link:https://issues.apache.org/jira/browse/TOMEE-4287[TOMEE-4287]
>> Better information when XBean Finder fails to read a class/jar file
>> - link:https://issues.apache.org/jira/browse/TOMEE-4289[TOMEE-4289]
>> java.util.NoSuchElementException in SystemLogHandler
>> - link:https://issues.apache.org/jira/browse/TOMEE-4269[TOMEE-4269]
>> Enable SLF4J 2.x webapps to include bindings in their WEB-INF/lib
>> 
>> == Task
>> 
>> [.compact]
>> - link:https://issues.apache.org/jira/browse/TOMEE-4284[TOMEE-4284]
>> Implement tomee.mp.jwt.allow.no-exp property over mp.jwt.tomee.allow.no-exp
>> 
>> ###
>> 
>> Please VOTE
>> 
>> [+1] go ship it
>> [+0] meh, don't care
>> [-1] stop, there is a ${showstopper}
>> 
>> The VOTE is open for 72h or as long as needed.
>> 
>> Thanks
>> 
>> Jon


Re: [VOTE] Release Apache TomEE 9.1.2 (take 2)

2023-12-13 Thread Jonathan Gallimore
Here's my own +1 (binding).

Jon

On Tue, Dec 12, 2023 at 4:57 PM Jonathan Gallimore <
jonathan.gallim...@gmail.com> wrote:

> Hi All,
>
> I'd like to start a vote for the release of Apache TomEE 9.1.2. TomEE
> 9.1.2 is a maintenance release with dependencies upgrades and bug fixes. It
> also fixes the latest Tomcat vulnerabilities
> as well as other CVEs.
>
> ###
>
> Maven Repo:
> https://repository.apache.org/content/repositories/orgapachetomee-1225/
>
> ###
>
> Binaries & Sources:
> https://dist.apache.org/repos/dist/dev/tomee/staging-1225/tomee-9.1.2/
>
> ###
>
> Tags:
> https://github.com/apache/tomee/releases/tag/tomee-9.1.2
>
> ###
>
> = Apache TomEE 9.1.2 Release Notes
> :index-group: Release Notes
> :jbake-type: page
> :jbake-status: published
>
> == Dependency upgrade
>
> [.compact]
>  - link:https://issues.apache.org/jira/browse/TOMEE-4266[TOMEE-4266]
> ActiveMQ 5.16.7 / 5.18.3
>  - link:https://issues.apache.org/jira/browse/TOMEE-4278[TOMEE-4278]
> Commons CLI 1.6.0
>  - link:https://issues.apache.org/jira/browse/TOMEE-4277[TOMEE-4277]
> Commons Codec 1.16.0
>  - link:https://issues.apache.org/jira/browse/TOMEE-4274[TOMEE-4274]
> Commons DBCP 2.11.0
>  - link:https://issues.apache.org/jira/browse/TOMEE-4275[TOMEE-4275]
> Commons Lang3 3.13.0
>  - link:https://issues.apache.org/jira/browse/TOMEE-4276[TOMEE-4276]
> Jackson 2.15.3
>  - link:https://issues.apache.org/jira/browse/TOMEE-4279[TOMEE-4279]
> Log4J2 2.21.1
>  - link:https://issues.apache.org/jira/browse/TOMEE-4280[TOMEE-4280]
> WSS4J 3.0.2
>
> == New Feature
>
> [.compact]
>  - link:https://issues.apache.org/jira/browse/TOMEE-4281[TOMEE-4281]
> Improve logging when failing to load a class
>  - link:https://issues.apache.org/jira/browse/TOMEE-4268[TOMEE-4268]
> Create MicroProfile OpenAPI Reader exemple
>
> == Bug
>
> [.compact]
>  - link:https://issues.apache.org/jira/browse/TOMEE-4267[TOMEE-4267]
> MicroProfile Metrics JMX Registrar must be initialized once
>
> == Improvement
>
> [.compact]
>  - link:https://issues.apache.org/jira/browse/TOMEE-4285[TOMEE-4285] Port
> fix for CVE-2023-46589 for TomEE 9.x
>  - link:https://issues.apache.org/jira/browse/TOMEE-4286[TOMEE-4286]
> Namespace error when processing web-fragment.xml
>  - link:https://issues.apache.org/jira/browse/TOMEE-4287[TOMEE-4287]
> Better information when XBean Finder fails to read a class/jar file
>  - link:https://issues.apache.org/jira/browse/TOMEE-4289[TOMEE-4289]
>  java.util.NoSuchElementException in SystemLogHandler
>  - link:https://issues.apache.org/jira/browse/TOMEE-4269[TOMEE-4269]
> Enable SLF4J 2.x webapps to include bindings in their WEB-INF/lib
>
> == Task
>
> [.compact]
>  - link:https://issues.apache.org/jira/browse/TOMEE-4284[TOMEE-4284]
> Implement tomee.mp.jwt.allow.no-exp property over mp.jwt.tomee.allow.no-exp
>
> ###
>
> Please VOTE
>
> [+1] go ship it
> [+0] meh, don't care
> [-1] stop, there is a ${showstopper}
>
> The VOTE is open for 72h or as long as needed.
>
> Thanks
>
> Jon
>
>
>
>


Re: [VOTE] Release Apache TomEE 9.1.2 (take 2)

2023-12-12 Thread Richard Zowalla
Hi Jon,

thanks.

+1 (binding)

Gruß
Richard

Am Dienstag, dem 12.12.2023 um 16:57 + schrieb Jonathan Gallimore:
> Hi All,
> 
> I'd like to start a vote for the release of Apache TomEE 9.1.2. TomEE
> 9.1.2
> is a maintenance release with dependencies upgrades and bug fixes. It
> also
> fixes the latest Tomcat vulnerabilities
> as well as other CVEs.
> 
> ###
> 
> Maven Repo:
> https://repository.apache.org/content/repositories/orgapachetomee-1225/
> 
> ###
> 
> Binaries & Sources:
> https://dist.apache.org/repos/dist/dev/tomee/staging-1225/tomee-9.1.2/
> 
> ###
> 
> Tags:
> https://github.com/apache/tomee/releases/tag/tomee-9.1.2
> 
> ###
> 
> = Apache TomEE 9.1.2 Release Notes
> :index-group: Release Notes
> :jbake-type: page
> :jbake-status: published
> 
> == Dependency upgrade
> 
> [.compact]
>  - link:https://issues.apache.org/jira/browse/TOMEE-4266[TOMEE-4266]
> ActiveMQ 5.16.7 / 5.18.3
>  - link:https://issues.apache.org/jira/browse/TOMEE-4278[TOMEE-4278]
> Commons CLI 1.6.0
>  - link:https://issues.apache.org/jira/browse/TOMEE-4277[TOMEE-4277]
> Commons Codec 1.16.0
>  - link:https://issues.apache.org/jira/browse/TOMEE-4274[TOMEE-4274]
> Commons DBCP 2.11.0
>  - link:https://issues.apache.org/jira/browse/TOMEE-4275[TOMEE-4275]
> Commons Lang3 3.13.0
>  - link:https://issues.apache.org/jira/browse/TOMEE-4276[TOMEE-4276]
> Jackson 2.15.3
>  -
> link:https://issues.apache.org/jira/browse/TOMEE-4279[TOMEE-4279] Log
> 4J2
> 2.21.1
>  -
> link:https://issues.apache.org/jira/browse/TOMEE-4280[TOMEE-4280] WSS
> 4J
> 3.0.2
> 
> == New Feature
> 
> [.compact]
>  - link:https://issues.apache.org/jira/browse/TOMEE-4281[TOMEE-4281]
> Improve logging when failing to load a class
>  -
> link:https://issues.apache.org/jira/browse/TOMEE-4268[TOMEE-4268] Cre
> ate
> MicroProfile OpenAPI Reader exemple
> 
> == Bug
> 
> [.compact]
>  - link:https://issues.apache.org/jira/browse/TOMEE-4267[TOMEE-4267]
> MicroProfile Metrics JMX Registrar must be initialized once
> 
> == Improvement
> 
> [.compact]
>  -
> link:https://issues.apache.org/jira/browse/TOMEE-4285[TOMEE-4285] Por
> t
> fix for CVE-2023-46589 for TomEE 9.x
>  - link:https://issues.apache.org/jira/browse/TOMEE-4286[TOMEE-4286]
> Namespace error when processing web-fragment.xml
>  -
> link:https://issues.apache.org/jira/browse/TOMEE-4287[TOMEE-4287] Bet
> ter
> information when XBean Finder fails to read a class/jar file
>  - link:https://issues.apache.org/jira/browse/TOMEE-4289[TOMEE-4289]
>  java.util.NoSuchElementException in SystemLogHandler
>  -
> link:https://issues.apache.org/jira/browse/TOMEE-4269[TOMEE-4269] Ena
> ble
> SLF4J 2.x webapps to include bindings in their WEB-INF/lib
> 
> == Task
> 
> [.compact]
>  - link:https://issues.apache.org/jira/browse/TOMEE-4284[TOMEE-4284]
> Implement tomee.mp.jwt.allow.no-exp property over
> mp.jwt.tomee.allow.no-exp
> 
> ###
> 
> Please VOTE
> 
> [+1] go ship it
> [+0] meh, don't care
> [-1] stop, there is a ${showstopper}
> 
> The VOTE is open for 72h or as long as needed.
> 
> Thanks
> 
> Jon



signature.asc
Description: This is a digitally signed message part


[VOTE] Release Apache TomEE 9.1.2 (take 2)

2023-12-12 Thread Jonathan Gallimore
Hi All,

I'd like to start a vote for the release of Apache TomEE 9.1.2. TomEE 9.1.2
is a maintenance release with dependencies upgrades and bug fixes. It also
fixes the latest Tomcat vulnerabilities
as well as other CVEs.

###

Maven Repo:
https://repository.apache.org/content/repositories/orgapachetomee-1225/

###

Binaries & Sources:
https://dist.apache.org/repos/dist/dev/tomee/staging-1225/tomee-9.1.2/

###

Tags:
https://github.com/apache/tomee/releases/tag/tomee-9.1.2

###

= Apache TomEE 9.1.2 Release Notes
:index-group: Release Notes
:jbake-type: page
:jbake-status: published

== Dependency upgrade

[.compact]
 - link:https://issues.apache.org/jira/browse/TOMEE-4266[TOMEE-4266]
ActiveMQ 5.16.7 / 5.18.3
 - link:https://issues.apache.org/jira/browse/TOMEE-4278[TOMEE-4278]
Commons CLI 1.6.0
 - link:https://issues.apache.org/jira/browse/TOMEE-4277[TOMEE-4277]
Commons Codec 1.16.0
 - link:https://issues.apache.org/jira/browse/TOMEE-4274[TOMEE-4274]
Commons DBCP 2.11.0
 - link:https://issues.apache.org/jira/browse/TOMEE-4275[TOMEE-4275]
Commons Lang3 3.13.0
 - link:https://issues.apache.org/jira/browse/TOMEE-4276[TOMEE-4276]
Jackson 2.15.3
 - link:https://issues.apache.org/jira/browse/TOMEE-4279[TOMEE-4279] Log4J2
2.21.1
 - link:https://issues.apache.org/jira/browse/TOMEE-4280[TOMEE-4280] WSS4J
3.0.2

== New Feature

[.compact]
 - link:https://issues.apache.org/jira/browse/TOMEE-4281[TOMEE-4281]
Improve logging when failing to load a class
 - link:https://issues.apache.org/jira/browse/TOMEE-4268[TOMEE-4268] Create
MicroProfile OpenAPI Reader exemple

== Bug

[.compact]
 - link:https://issues.apache.org/jira/browse/TOMEE-4267[TOMEE-4267]
MicroProfile Metrics JMX Registrar must be initialized once

== Improvement

[.compact]
 - link:https://issues.apache.org/jira/browse/TOMEE-4285[TOMEE-4285] Port
fix for CVE-2023-46589 for TomEE 9.x
 - link:https://issues.apache.org/jira/browse/TOMEE-4286[TOMEE-4286]
Namespace error when processing web-fragment.xml
 - link:https://issues.apache.org/jira/browse/TOMEE-4287[TOMEE-4287] Better
information when XBean Finder fails to read a class/jar file
 - link:https://issues.apache.org/jira/browse/TOMEE-4289[TOMEE-4289]
 java.util.NoSuchElementException in SystemLogHandler
 - link:https://issues.apache.org/jira/browse/TOMEE-4269[TOMEE-4269] Enable
SLF4J 2.x webapps to include bindings in their WEB-INF/lib

== Task

[.compact]
 - link:https://issues.apache.org/jira/browse/TOMEE-4284[TOMEE-4284]
Implement tomee.mp.jwt.allow.no-exp property over mp.jwt.tomee.allow.no-exp

###

Please VOTE

[+1] go ship it
[+0] meh, don't care
[-1] stop, there is a ${showstopper}

The VOTE is open for 72h or as long as needed.

Thanks

Jon