Re: [VOTE] Release Apache Wicket 9.0.0-M5 TAKE 3
+1 release Sven On 02.04.20 11:43, Andrea Del Bene wrote: This is a vote to release Apache Wicket 9.0.0-M5 Please download the source distributions found in our staging area linked below. I have included the signatures for both the source archives. This vote lasts for 72 hours minimum. [ ] Yes, release Apache Wicket 9.0.0-M5 [ ] No, don't release Apache Wicket 9.0.0-M5, because ... Distributions, changelog, keys and signatures can be found at: https://dist.apache.org/repos/dist/dev/wicket/9.0.0-M5 Staging repository: https://repository.apache.org/content/repositories/orgapachewicket-1141/ The binaries are available in the above link, as are a staging repository for Maven. Typically the vote is on the source, but should you find a problem with one of the binaries, please let me know, I can re-roll them some way or the other. Staging git repository data: Repository: g...@github.com:bitstorm/wicket.git Branch: build/wicket-9.0.0-M5 Release tag: rel/wicket-9.0.0-M5 The signatures for the source release artefacts: Signature for apache-wicket-9.0.0-M5.zip: -BEGIN PGP SIGNATURE- iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6FsXoACgkQh48B+qjT VuEZiA//fgy42gNrnUBO6Cbs6ZvJwzMLURlVuD/mrHZx5iLgnr7p9qgJzEZSfdF/ U0JPztMq6/crgi+aXPCjxzKdnGNlu665g3Xxyc3dr+N8psoWptGsBREBTtynQU2n Pu9ir1THAE9qdr4MbqRZbH5wQGklPnLTfoTV6BS0HK4mmPCblK7eYBZlz7QnbOAL MwuShMRLZ0phKZ3rwXFSJcWoZGyx6cmHPjs04VJkCdbtcOwBMNIzoU5CgbShvVt9 eXobPkOniJ2Ijr/B1ROVMrFOC7uduJilFj2dk+icZZgrO6177pDO57bX1It3Ts3J UbOJKdtBIHMD9XNe1ANPodMMwxA5Q0hUpjsehPqZVFgYpEfHxyPENVkjlabqHOt/ 8ySL79MfOGzckNPUrR16HS0RTrBjsSrLnif5bHcaFyIg6UL0RrdOlJaI6CU01V/Y zPBtI3Dm1R4acUCrU08nScoeR+uS7F6oTSQD2X+pEsBG6euX0q1fV4HhtVQSRIFU pSrSAavkQjUL0tl6ik8HeGOlMFXT66U0Q6gnI/KmxcHZAroWU6j2qvYOcfawIEkw qZfgo0ZnJN4/VxAl51+On64LkaxpCCBCh8+yZ2DW7efcKDWElXpC1IOhvuFTYDgt WouuIOaT0Hdura6SBdp6WYwwLzUP/nk1s6A6EfYtpanlWxblzLE= =062g -END PGP SIGNATURE- Signature for apache-wicket-9.0.0-M5.tar.gz: -BEGIN PGP SIGNATURE- iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6FsXoACgkQh48B+qjT VuHV3Q//QlqtUlnAtEn2KN0XdinerjOrG8Ny9M7/apRqVjij57Ye+LrIPWnd0+Bj WqTVx/4nuJ/HcC+e1fwrSkekSZW0n2ecO9GKo/k7KyDRxsbKnPyCP3JjqJfhDf/R 6seFXrGJWLfQo844kuLJz5Ug3wjEqiOQk2HmgXTQmUdcGlTsXAioSkHttLNQjLZC bF2LD3ZqwJw0R/7o1t4WAi1h7iriGKGrehgk6k/9h8DKTvKGduEDfWtSPu4R8Ogr /i71FQt5w+87wKLP/viUHkIg0+KAHGmVu9Qz1AYHLc20oJv63N273ZeiIRuFWmCj jw+1WfJUQvxFxfV1CxNCl/IBGPjD4FS3sygg867uEgShNFVNzVA+vplEDRl3i9e9 GaMgQsfVBi8eZzoGtgga0cQhgOU4hvOwv8lHNaC6XHYV18/p6j9P1tthtPsL2Krk AzFfJ3Ym/gRf2thKop4iMn2xU16bu1D33zSPJ3C0kGlWqHQFw5+gBLNLOthv3YyV LZGqSmsPg2sNcWDPqaUGQAVGNXmogjpbw6X9aEx2VtXfLQItRMNJq6lpoCtPQryK UhgTTb4z4wE1dUDhyuIAVgKXgtUdKg7Q8oxmIfV4zl4OdRzBCYuHJ8md0Q7Tg0PC BiSUhll+1igfRg1tUYItJ7TtV6uqdRZIg+YMsZ98ZKp24xcy1rI= =GdAn -END PGP SIGNATURE- CHANGELOG for 9.0.0-M5: ** Bug * [WICKET-6715] - FileUpload class should not implement IClusterable * [WICKET-6745] - CSP: inline JS in server and client time response filters * [WICKET-6746] - HttpsMapper cannot deal with resources over websockets * [WICKET-6752] - Some dependencies contain CVEs * [WICKET-6753] - res/modal.js using aria-labelledby where it should be using aria-label * [WICKET-6754] - Iteration stops with nested containers * [WICKET-6755] - MockServletContext does not decode real path * [WICKET-6756] - Avoid URL.getFile() when actually expecting paths. * [WICKET-6757] - Avoid URL.getFile during mime type detection. * [WICKET-6758] - NPE in AbstractWebSocketProcessor after session times out ** New Feature * [WICKET-6727] - Configurable CSP * [WICKET-6729] - allow adding IHeaderResponseDecorator without replacing all others * [WICKET-6730] - Global access to secure random data ** Improvement * [WICKET-6724] - CSP: Inline Javascript in AjaxLink * [WICKET-6725] - CSP: display:none in Component.renderPlaceholderTag * [WICKET-6726] - CSP: inline styling and js in Form submitbutton handling * [WICKET-6731] - CSP: inline JS in SubmitLink * [WICKET-6732] - CSP: inline JS in Link and ExternalLink * [WICKET-6733] - CSP: enable by default * [WICKET-6735] - CSP: inline styling in FormComponentFeedbackBorder/Indicator * [WICKET-6736] - CSP: Inline styling in BrowserInfoForm * [WICKET-6737] - CSP: violations in examples * [WICKET-6738] - CSP: inline styling in UploadProgressBar * [WICKET-6739] - CSP: inline JS in Palette * [WICKET-6740] - CSP: inline JS in Button * [WICKET-6741] - CSP: inline JS in FormComponentUpdatingBehavior * [WICKET-6749] - CSP: Inline styling in ExceptionErrorPage.html * [WICKET-6759] - Support disabling error notification for websockets * [WICKET-6760] - Nested Form placeholder should preserve tag name *
Re: [VOTE] Release Apache Wicket 9.0.0-M5 TAKE 3
+1 On Thu, Apr 2, 2020, 18:23 Martin Grigorov wrote: > +1 > > On Thu, Apr 2, 2020 at 12:43 PM Andrea Del Bene > wrote: > > > This is a vote to release Apache Wicket 9.0.0-M5 > > > > Please download the source distributions found in our staging area > > linked below. > > > > I have included the signatures for both the source archives. This vote > > lasts for 72 hours minimum. > > > > [ ] Yes, release Apache Wicket 9.0.0-M5 > > [ ] No, don't release Apache Wicket 9.0.0-M5, because ... > > > > Distributions, changelog, keys and signatures can be found at: > > > > https://dist.apache.org/repos/dist/dev/wicket/9.0.0-M5 > > > > Staging repository: > > > > https://repository.apache.org/content/repositories/orgapachewicket-1141/ > > > > The binaries are available in the above link, as are a staging > > repository for Maven. Typically the vote is on the source, but should > > you find a problem with one of the binaries, please let me know, I can > > re-roll them some way or the other. > > > > Staging git repository data: > > > > Repository: g...@github.com:bitstorm/wicket.git > > Branch: build/wicket-9.0.0-M5 > > Release tag: rel/wicket-9.0.0-M5 > > > > > > > > > > The signatures for the source release artefacts: > > > > > > Signature for apache-wicket-9.0.0-M5.zip: > > > > -BEGIN PGP SIGNATURE- > > > > iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6FsXoACgkQh48B+qjT > > VuEZiA//fgy42gNrnUBO6Cbs6ZvJwzMLURlVuD/mrHZx5iLgnr7p9qgJzEZSfdF/ > > U0JPztMq6/crgi+aXPCjxzKdnGNlu665g3Xxyc3dr+N8psoWptGsBREBTtynQU2n > > Pu9ir1THAE9qdr4MbqRZbH5wQGklPnLTfoTV6BS0HK4mmPCblK7eYBZlz7QnbOAL > > MwuShMRLZ0phKZ3rwXFSJcWoZGyx6cmHPjs04VJkCdbtcOwBMNIzoU5CgbShvVt9 > > eXobPkOniJ2Ijr/B1ROVMrFOC7uduJilFj2dk+icZZgrO6177pDO57bX1It3Ts3J > > UbOJKdtBIHMD9XNe1ANPodMMwxA5Q0hUpjsehPqZVFgYpEfHxyPENVkjlabqHOt/ > > 8ySL79MfOGzckNPUrR16HS0RTrBjsSrLnif5bHcaFyIg6UL0RrdOlJaI6CU01V/Y > > zPBtI3Dm1R4acUCrU08nScoeR+uS7F6oTSQD2X+pEsBG6euX0q1fV4HhtVQSRIFU > > pSrSAavkQjUL0tl6ik8HeGOlMFXT66U0Q6gnI/KmxcHZAroWU6j2qvYOcfawIEkw > > qZfgo0ZnJN4/VxAl51+On64LkaxpCCBCh8+yZ2DW7efcKDWElXpC1IOhvuFTYDgt > > WouuIOaT0Hdura6SBdp6WYwwLzUP/nk1s6A6EfYtpanlWxblzLE= > > =062g > > -END PGP SIGNATURE- > > > > Signature for apache-wicket-9.0.0-M5.tar.gz: > > > > -BEGIN PGP SIGNATURE- > > > > iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6FsXoACgkQh48B+qjT > > VuHV3Q//QlqtUlnAtEn2KN0XdinerjOrG8Ny9M7/apRqVjij57Ye+LrIPWnd0+Bj > > WqTVx/4nuJ/HcC+e1fwrSkekSZW0n2ecO9GKo/k7KyDRxsbKnPyCP3JjqJfhDf/R > > 6seFXrGJWLfQo844kuLJz5Ug3wjEqiOQk2HmgXTQmUdcGlTsXAioSkHttLNQjLZC > > bF2LD3ZqwJw0R/7o1t4WAi1h7iriGKGrehgk6k/9h8DKTvKGduEDfWtSPu4R8Ogr > > /i71FQt5w+87wKLP/viUHkIg0+KAHGmVu9Qz1AYHLc20oJv63N273ZeiIRuFWmCj > > jw+1WfJUQvxFxfV1CxNCl/IBGPjD4FS3sygg867uEgShNFVNzVA+vplEDRl3i9e9 > > GaMgQsfVBi8eZzoGtgga0cQhgOU4hvOwv8lHNaC6XHYV18/p6j9P1tthtPsL2Krk > > AzFfJ3Ym/gRf2thKop4iMn2xU16bu1D33zSPJ3C0kGlWqHQFw5+gBLNLOthv3YyV > > LZGqSmsPg2sNcWDPqaUGQAVGNXmogjpbw6X9aEx2VtXfLQItRMNJq6lpoCtPQryK > > UhgTTb4z4wE1dUDhyuIAVgKXgtUdKg7Q8oxmIfV4zl4OdRzBCYuHJ8md0Q7Tg0PC > > BiSUhll+1igfRg1tUYItJ7TtV6uqdRZIg+YMsZ98ZKp24xcy1rI= > > =GdAn > > -END PGP SIGNATURE- > > > > > > > > CHANGELOG for 9.0.0-M5: > > > > ** Bug > > > > * [WICKET-6715] - FileUpload class should not implement > IClusterable > > * [WICKET-6745] - CSP: inline JS in server and client time response > > filters > > * [WICKET-6746] - HttpsMapper cannot deal with resources over > > websockets > > * [WICKET-6752] - Some dependencies contain CVEs > > * [WICKET-6753] - res/modal.js using aria-labelledby where it > > should be using aria-label > > * [WICKET-6754] - Iteration stops with nested containers > > * [WICKET-6755] - MockServletContext does not decode real path > > * [WICKET-6756] - Avoid URL.getFile() when actually expecting paths. > > * [WICKET-6757] - Avoid URL.getFile during mime type detection. > > * [WICKET-6758] - NPE in AbstractWebSocketProcessor after session > > times out > > > > ** New Feature > > > > * [WICKET-6727] - Configurable CSP > > * [WICKET-6729] - allow adding IHeaderResponseDecorator without > > replacing all others > > * [WICKET-6730] - Global access to secure random data > > > > ** Improvement > > > > * [WICKET-6724] - CSP: Inline Javascript in AjaxLink > > * [WICKET-6725] - CSP: display:none in > Component.renderPlaceholderTag > > * [WICKET-6726] - CSP: inline styling and js in Form submitbutton > > handling > > * [WICKET-6731] - CSP: inline JS in SubmitLink > > * [WICKET-6732] - CSP: inline JS in Link and ExternalLink > > * [WICKET-6733] - CSP: enable by default > > * [WICKET-6735] - CSP: inline styling in > > FormComponentFeedbackBorder/Indicator > > * [WICKET-6736] - CSP: Inline styling in
Re: [VOTE] Release Apache Wicket 9.0.0-M5 TAKE 3
+1 On Thu, Apr 2, 2020 at 12:43 PM Andrea Del Bene wrote: > This is a vote to release Apache Wicket 9.0.0-M5 > > Please download the source distributions found in our staging area > linked below. > > I have included the signatures for both the source archives. This vote > lasts for 72 hours minimum. > > [ ] Yes, release Apache Wicket 9.0.0-M5 > [ ] No, don't release Apache Wicket 9.0.0-M5, because ... > > Distributions, changelog, keys and signatures can be found at: > > https://dist.apache.org/repos/dist/dev/wicket/9.0.0-M5 > > Staging repository: > > https://repository.apache.org/content/repositories/orgapachewicket-1141/ > > The binaries are available in the above link, as are a staging > repository for Maven. Typically the vote is on the source, but should > you find a problem with one of the binaries, please let me know, I can > re-roll them some way or the other. > > Staging git repository data: > > Repository: g...@github.com:bitstorm/wicket.git > Branch: build/wicket-9.0.0-M5 > Release tag: rel/wicket-9.0.0-M5 > > > > > The signatures for the source release artefacts: > > > Signature for apache-wicket-9.0.0-M5.zip: > > -BEGIN PGP SIGNATURE- > > iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6FsXoACgkQh48B+qjT > VuEZiA//fgy42gNrnUBO6Cbs6ZvJwzMLURlVuD/mrHZx5iLgnr7p9qgJzEZSfdF/ > U0JPztMq6/crgi+aXPCjxzKdnGNlu665g3Xxyc3dr+N8psoWptGsBREBTtynQU2n > Pu9ir1THAE9qdr4MbqRZbH5wQGklPnLTfoTV6BS0HK4mmPCblK7eYBZlz7QnbOAL > MwuShMRLZ0phKZ3rwXFSJcWoZGyx6cmHPjs04VJkCdbtcOwBMNIzoU5CgbShvVt9 > eXobPkOniJ2Ijr/B1ROVMrFOC7uduJilFj2dk+icZZgrO6177pDO57bX1It3Ts3J > UbOJKdtBIHMD9XNe1ANPodMMwxA5Q0hUpjsehPqZVFgYpEfHxyPENVkjlabqHOt/ > 8ySL79MfOGzckNPUrR16HS0RTrBjsSrLnif5bHcaFyIg6UL0RrdOlJaI6CU01V/Y > zPBtI3Dm1R4acUCrU08nScoeR+uS7F6oTSQD2X+pEsBG6euX0q1fV4HhtVQSRIFU > pSrSAavkQjUL0tl6ik8HeGOlMFXT66U0Q6gnI/KmxcHZAroWU6j2qvYOcfawIEkw > qZfgo0ZnJN4/VxAl51+On64LkaxpCCBCh8+yZ2DW7efcKDWElXpC1IOhvuFTYDgt > WouuIOaT0Hdura6SBdp6WYwwLzUP/nk1s6A6EfYtpanlWxblzLE= > =062g > -END PGP SIGNATURE- > > Signature for apache-wicket-9.0.0-M5.tar.gz: > > -BEGIN PGP SIGNATURE- > > iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6FsXoACgkQh48B+qjT > VuHV3Q//QlqtUlnAtEn2KN0XdinerjOrG8Ny9M7/apRqVjij57Ye+LrIPWnd0+Bj > WqTVx/4nuJ/HcC+e1fwrSkekSZW0n2ecO9GKo/k7KyDRxsbKnPyCP3JjqJfhDf/R > 6seFXrGJWLfQo844kuLJz5Ug3wjEqiOQk2HmgXTQmUdcGlTsXAioSkHttLNQjLZC > bF2LD3ZqwJw0R/7o1t4WAi1h7iriGKGrehgk6k/9h8DKTvKGduEDfWtSPu4R8Ogr > /i71FQt5w+87wKLP/viUHkIg0+KAHGmVu9Qz1AYHLc20oJv63N273ZeiIRuFWmCj > jw+1WfJUQvxFxfV1CxNCl/IBGPjD4FS3sygg867uEgShNFVNzVA+vplEDRl3i9e9 > GaMgQsfVBi8eZzoGtgga0cQhgOU4hvOwv8lHNaC6XHYV18/p6j9P1tthtPsL2Krk > AzFfJ3Ym/gRf2thKop4iMn2xU16bu1D33zSPJ3C0kGlWqHQFw5+gBLNLOthv3YyV > LZGqSmsPg2sNcWDPqaUGQAVGNXmogjpbw6X9aEx2VtXfLQItRMNJq6lpoCtPQryK > UhgTTb4z4wE1dUDhyuIAVgKXgtUdKg7Q8oxmIfV4zl4OdRzBCYuHJ8md0Q7Tg0PC > BiSUhll+1igfRg1tUYItJ7TtV6uqdRZIg+YMsZ98ZKp24xcy1rI= > =GdAn > -END PGP SIGNATURE- > > > > CHANGELOG for 9.0.0-M5: > > ** Bug > > * [WICKET-6715] - FileUpload class should not implement IClusterable > * [WICKET-6745] - CSP: inline JS in server and client time response > filters > * [WICKET-6746] - HttpsMapper cannot deal with resources over > websockets > * [WICKET-6752] - Some dependencies contain CVEs > * [WICKET-6753] - res/modal.js using aria-labelledby where it > should be using aria-label > * [WICKET-6754] - Iteration stops with nested containers > * [WICKET-6755] - MockServletContext does not decode real path > * [WICKET-6756] - Avoid URL.getFile() when actually expecting paths. > * [WICKET-6757] - Avoid URL.getFile during mime type detection. > * [WICKET-6758] - NPE in AbstractWebSocketProcessor after session > times out > > ** New Feature > > * [WICKET-6727] - Configurable CSP > * [WICKET-6729] - allow adding IHeaderResponseDecorator without > replacing all others > * [WICKET-6730] - Global access to secure random data > > ** Improvement > > * [WICKET-6724] - CSP: Inline Javascript in AjaxLink > * [WICKET-6725] - CSP: display:none in Component.renderPlaceholderTag > * [WICKET-6726] - CSP: inline styling and js in Form submitbutton > handling > * [WICKET-6731] - CSP: inline JS in SubmitLink > * [WICKET-6732] - CSP: inline JS in Link and ExternalLink > * [WICKET-6733] - CSP: enable by default > * [WICKET-6735] - CSP: inline styling in > FormComponentFeedbackBorder/Indicator > * [WICKET-6736] - CSP: Inline styling in BrowserInfoForm > * [WICKET-6737] - CSP: violations in examples > * [WICKET-6738] - CSP: inline styling in UploadProgressBar > * [WICKET-6739] - CSP: inline JS in Palette > * [WICKET-6740] - CSP: inline JS in Button > * [WICKET-6741] - CSP: inline JS in FormComponentUpdatingBehavior
Re: [VOTE] Release Apache Wicket 9.0.0-M5 TAKE 3
+1 :-) kind regards Tobias > Am 02.04.2020 um 11:43 schrieb Andrea Del Bene : > > This is a vote to release Apache Wicket 9.0.0-M5 > > Please download the source distributions found in our staging area > linked below. > > I have included the signatures for both the source archives. This vote > lasts for 72 hours minimum. > > [ ] Yes, release Apache Wicket 9.0.0-M5 > [ ] No, don't release Apache Wicket 9.0.0-M5, because ... > > Distributions, changelog, keys and signatures can be found at: > > https://dist.apache.org/repos/dist/dev/wicket/9.0.0-M5 > > Staging repository: > > https://repository.apache.org/content/repositories/orgapachewicket-1141/ > > The binaries are available in the above link, as are a staging > repository for Maven. Typically the vote is on the source, but should > you find a problem with one of the binaries, please let me know, I can > re-roll them some way or the other. > > Staging git repository data: > > Repository: g...@github.com:bitstorm/wicket.git > Branch: build/wicket-9.0.0-M5 > Release tag: rel/wicket-9.0.0-M5 > > > > > The signatures for the source release artefacts: > > > Signature for apache-wicket-9.0.0-M5.zip: > > -BEGIN PGP SIGNATURE- > > iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6FsXoACgkQh48B+qjT > VuEZiA//fgy42gNrnUBO6Cbs6ZvJwzMLURlVuD/mrHZx5iLgnr7p9qgJzEZSfdF/ > U0JPztMq6/crgi+aXPCjxzKdnGNlu665g3Xxyc3dr+N8psoWptGsBREBTtynQU2n > Pu9ir1THAE9qdr4MbqRZbH5wQGklPnLTfoTV6BS0HK4mmPCblK7eYBZlz7QnbOAL > MwuShMRLZ0phKZ3rwXFSJcWoZGyx6cmHPjs04VJkCdbtcOwBMNIzoU5CgbShvVt9 > eXobPkOniJ2Ijr/B1ROVMrFOC7uduJilFj2dk+icZZgrO6177pDO57bX1It3Ts3J > UbOJKdtBIHMD9XNe1ANPodMMwxA5Q0hUpjsehPqZVFgYpEfHxyPENVkjlabqHOt/ > 8ySL79MfOGzckNPUrR16HS0RTrBjsSrLnif5bHcaFyIg6UL0RrdOlJaI6CU01V/Y > zPBtI3Dm1R4acUCrU08nScoeR+uS7F6oTSQD2X+pEsBG6euX0q1fV4HhtVQSRIFU > pSrSAavkQjUL0tl6ik8HeGOlMFXT66U0Q6gnI/KmxcHZAroWU6j2qvYOcfawIEkw > qZfgo0ZnJN4/VxAl51+On64LkaxpCCBCh8+yZ2DW7efcKDWElXpC1IOhvuFTYDgt > WouuIOaT0Hdura6SBdp6WYwwLzUP/nk1s6A6EfYtpanlWxblzLE= > =062g > -END PGP SIGNATURE- > > Signature for apache-wicket-9.0.0-M5.tar.gz: > > -BEGIN PGP SIGNATURE- > > iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6FsXoACgkQh48B+qjT > VuHV3Q//QlqtUlnAtEn2KN0XdinerjOrG8Ny9M7/apRqVjij57Ye+LrIPWnd0+Bj > WqTVx/4nuJ/HcC+e1fwrSkekSZW0n2ecO9GKo/k7KyDRxsbKnPyCP3JjqJfhDf/R > 6seFXrGJWLfQo844kuLJz5Ug3wjEqiOQk2HmgXTQmUdcGlTsXAioSkHttLNQjLZC > bF2LD3ZqwJw0R/7o1t4WAi1h7iriGKGrehgk6k/9h8DKTvKGduEDfWtSPu4R8Ogr > /i71FQt5w+87wKLP/viUHkIg0+KAHGmVu9Qz1AYHLc20oJv63N273ZeiIRuFWmCj > jw+1WfJUQvxFxfV1CxNCl/IBGPjD4FS3sygg867uEgShNFVNzVA+vplEDRl3i9e9 > GaMgQsfVBi8eZzoGtgga0cQhgOU4hvOwv8lHNaC6XHYV18/p6j9P1tthtPsL2Krk > AzFfJ3Ym/gRf2thKop4iMn2xU16bu1D33zSPJ3C0kGlWqHQFw5+gBLNLOthv3YyV > LZGqSmsPg2sNcWDPqaUGQAVGNXmogjpbw6X9aEx2VtXfLQItRMNJq6lpoCtPQryK > UhgTTb4z4wE1dUDhyuIAVgKXgtUdKg7Q8oxmIfV4zl4OdRzBCYuHJ8md0Q7Tg0PC > BiSUhll+1igfRg1tUYItJ7TtV6uqdRZIg+YMsZ98ZKp24xcy1rI= > =GdAn > -END PGP SIGNATURE- > > > > CHANGELOG for 9.0.0-M5: > > ** Bug > > * [WICKET-6715] - FileUpload class should not implement IClusterable > * [WICKET-6745] - CSP: inline JS in server and client time response > filters > * [WICKET-6746] - HttpsMapper cannot deal with resources over websockets > * [WICKET-6752] - Some dependencies contain CVEs > * [WICKET-6753] - res/modal.js using aria-labelledby where it should be > using aria-label > * [WICKET-6754] - Iteration stops with nested containers > * [WICKET-6755] - MockServletContext does not decode real path > * [WICKET-6756] - Avoid URL.getFile() when actually expecting paths. > * [WICKET-6757] - Avoid URL.getFile during mime type detection. > * [WICKET-6758] - NPE in AbstractWebSocketProcessor after session times > out > > ** New Feature > > * [WICKET-6727] - Configurable CSP > * [WICKET-6729] - allow adding IHeaderResponseDecorator without replacing > all others > * [WICKET-6730] - Global access to secure random data > > ** Improvement > > * [WICKET-6724] - CSP: Inline Javascript in AjaxLink > * [WICKET-6725] - CSP: display:none in Component.renderPlaceholderTag > * [WICKET-6726] - CSP: inline styling and js in Form submitbutton handling > * [WICKET-6731] - CSP: inline JS in SubmitLink > * [WICKET-6732] - CSP: inline JS in Link and ExternalLink > * [WICKET-6733] - CSP: enable by default > * [WICKET-6735] - CSP: inline styling in > FormComponentFeedbackBorder/Indicator > * [WICKET-6736] - CSP: Inline styling in BrowserInfoForm > * [WICKET-6737] - CSP: violations in examples > * [WICKET-6738] - CSP: inline styling in UploadProgressBar > * [WICKET-6739] - CSP: inline JS in Palette > * [WICKET-6740] - CSP: inline JS in Button > * [WICKET-6741] - CSP: inline JS in
[VOTE] Release Apache Wicket 9.0.0-M5 TAKE 3
This is a vote to release Apache Wicket 9.0.0-M5 Please download the source distributions found in our staging area linked below. I have included the signatures for both the source archives. This vote lasts for 72 hours minimum. [ ] Yes, release Apache Wicket 9.0.0-M5 [ ] No, don't release Apache Wicket 9.0.0-M5, because ... Distributions, changelog, keys and signatures can be found at: https://dist.apache.org/repos/dist/dev/wicket/9.0.0-M5 Staging repository: https://repository.apache.org/content/repositories/orgapachewicket-1141/ The binaries are available in the above link, as are a staging repository for Maven. Typically the vote is on the source, but should you find a problem with one of the binaries, please let me know, I can re-roll them some way or the other. Staging git repository data: Repository: g...@github.com:bitstorm/wicket.git Branch: build/wicket-9.0.0-M5 Release tag: rel/wicket-9.0.0-M5 The signatures for the source release artefacts: Signature for apache-wicket-9.0.0-M5.zip: -BEGIN PGP SIGNATURE- iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6FsXoACgkQh48B+qjT VuEZiA//fgy42gNrnUBO6Cbs6ZvJwzMLURlVuD/mrHZx5iLgnr7p9qgJzEZSfdF/ U0JPztMq6/crgi+aXPCjxzKdnGNlu665g3Xxyc3dr+N8psoWptGsBREBTtynQU2n Pu9ir1THAE9qdr4MbqRZbH5wQGklPnLTfoTV6BS0HK4mmPCblK7eYBZlz7QnbOAL MwuShMRLZ0phKZ3rwXFSJcWoZGyx6cmHPjs04VJkCdbtcOwBMNIzoU5CgbShvVt9 eXobPkOniJ2Ijr/B1ROVMrFOC7uduJilFj2dk+icZZgrO6177pDO57bX1It3Ts3J UbOJKdtBIHMD9XNe1ANPodMMwxA5Q0hUpjsehPqZVFgYpEfHxyPENVkjlabqHOt/ 8ySL79MfOGzckNPUrR16HS0RTrBjsSrLnif5bHcaFyIg6UL0RrdOlJaI6CU01V/Y zPBtI3Dm1R4acUCrU08nScoeR+uS7F6oTSQD2X+pEsBG6euX0q1fV4HhtVQSRIFU pSrSAavkQjUL0tl6ik8HeGOlMFXT66U0Q6gnI/KmxcHZAroWU6j2qvYOcfawIEkw qZfgo0ZnJN4/VxAl51+On64LkaxpCCBCh8+yZ2DW7efcKDWElXpC1IOhvuFTYDgt WouuIOaT0Hdura6SBdp6WYwwLzUP/nk1s6A6EfYtpanlWxblzLE= =062g -END PGP SIGNATURE- Signature for apache-wicket-9.0.0-M5.tar.gz: -BEGIN PGP SIGNATURE- iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6FsXoACgkQh48B+qjT VuHV3Q//QlqtUlnAtEn2KN0XdinerjOrG8Ny9M7/apRqVjij57Ye+LrIPWnd0+Bj WqTVx/4nuJ/HcC+e1fwrSkekSZW0n2ecO9GKo/k7KyDRxsbKnPyCP3JjqJfhDf/R 6seFXrGJWLfQo844kuLJz5Ug3wjEqiOQk2HmgXTQmUdcGlTsXAioSkHttLNQjLZC bF2LD3ZqwJw0R/7o1t4WAi1h7iriGKGrehgk6k/9h8DKTvKGduEDfWtSPu4R8Ogr /i71FQt5w+87wKLP/viUHkIg0+KAHGmVu9Qz1AYHLc20oJv63N273ZeiIRuFWmCj jw+1WfJUQvxFxfV1CxNCl/IBGPjD4FS3sygg867uEgShNFVNzVA+vplEDRl3i9e9 GaMgQsfVBi8eZzoGtgga0cQhgOU4hvOwv8lHNaC6XHYV18/p6j9P1tthtPsL2Krk AzFfJ3Ym/gRf2thKop4iMn2xU16bu1D33zSPJ3C0kGlWqHQFw5+gBLNLOthv3YyV LZGqSmsPg2sNcWDPqaUGQAVGNXmogjpbw6X9aEx2VtXfLQItRMNJq6lpoCtPQryK UhgTTb4z4wE1dUDhyuIAVgKXgtUdKg7Q8oxmIfV4zl4OdRzBCYuHJ8md0Q7Tg0PC BiSUhll+1igfRg1tUYItJ7TtV6uqdRZIg+YMsZ98ZKp24xcy1rI= =GdAn -END PGP SIGNATURE- CHANGELOG for 9.0.0-M5: ** Bug * [WICKET-6715] - FileUpload class should not implement IClusterable * [WICKET-6745] - CSP: inline JS in server and client time response filters * [WICKET-6746] - HttpsMapper cannot deal with resources over websockets * [WICKET-6752] - Some dependencies contain CVEs * [WICKET-6753] - res/modal.js using aria-labelledby where it should be using aria-label * [WICKET-6754] - Iteration stops with nested containers * [WICKET-6755] - MockServletContext does not decode real path * [WICKET-6756] - Avoid URL.getFile() when actually expecting paths. * [WICKET-6757] - Avoid URL.getFile during mime type detection. * [WICKET-6758] - NPE in AbstractWebSocketProcessor after session times out ** New Feature * [WICKET-6727] - Configurable CSP * [WICKET-6729] - allow adding IHeaderResponseDecorator without replacing all others * [WICKET-6730] - Global access to secure random data ** Improvement * [WICKET-6724] - CSP: Inline Javascript in AjaxLink * [WICKET-6725] - CSP: display:none in Component.renderPlaceholderTag * [WICKET-6726] - CSP: inline styling and js in Form submitbutton handling * [WICKET-6731] - CSP: inline JS in SubmitLink * [WICKET-6732] - CSP: inline JS in Link and ExternalLink * [WICKET-6733] - CSP: enable by default * [WICKET-6735] - CSP: inline styling in FormComponentFeedbackBorder/Indicator * [WICKET-6736] - CSP: Inline styling in BrowserInfoForm * [WICKET-6737] - CSP: violations in examples * [WICKET-6738] - CSP: inline styling in UploadProgressBar * [WICKET-6739] - CSP: inline JS in Palette * [WICKET-6740] - CSP: inline JS in Button * [WICKET-6741] - CSP: inline JS in FormComponentUpdatingBehavior * [WICKET-6749] - CSP: Inline styling in ExceptionErrorPage.html * [WICKET-6759] - Support disabling error notification for websockets * [WICKET-6760] - Nested Form placeholder should preserve tag name * [WICKET-6761] - Support multiple connections to the same websocket
Re: [VOTE] Release Apache Wicket 9.0.0-M5 TAKE 2
This vote is cancelled. I will start a new one shortly. On 4/2/20 10:38 AM, Andrea Del Bene wrote: Yes at this point I think it's safer starting a new vote. On 4/2/20 9:33 AM, Maxim Solodovnik wrote: I see no other way :( On Thu, 2 Apr 2020 at 14:29, Andrea Del Bene wrote: On 4/1/20 5:39 AM, Martin Grigorov wrote: Hi, The CHANGELOG should not contain https://issues.apache.org/jira/browse/WICKET-6750 since it is not Resolved. I don't know how it managed to go into the CHANGELOG. I've fixed it at code base level but it requires a to start again a new release to fix also distribution archives. Should we cancel this vote? On Tue, Mar 31, 2020 at 9:56 PM Andrea Del Bene wrote: This is a vote to release Apache Wicket 9.0.0-M5 Please download the source distributions found in our staging area linked below. I have included the signatures for both the source archives. This vote lasts for 72 hours minimum. [ ] Yes, release Apache Wicket 9.0.0-M5 [ ] No, don't release Apache Wicket 9.0.0-M5, because ... Distributions, changelog, keys and signatures can be found at: https://dist.apache.org/repos/dist/dev/wicket/9.0.0-M5 Staging repository: https://repository.apache.org/content/repositories/orgapachewicket-1140/ The binaries are available in the above link, as are a staging repository for Maven. Typically the vote is on the source, but should you find a problem with one of the binaries, please let me know, I can re-roll them some way or the other. Staging git repository data: Repository: g...@github.com:bitstorm/wicket.git Branch: build/wicket-9.0.0-M5 Release tag: rel/wicket-9.0.0-M5 The signatures for the source release artefacts: Signature for apache-wicket-9.0.0-M5.zip: -BEGIN PGP SIGNATURE- iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT VuEPnQ/9Gc7bH7Y/s6PZceoLV0t9gkhtsJaC8jhuZhOWCqj1Uu/3VfJPRYma2eSs z7XpgU1+x8qTMMUm27Z0HWMjUrMOevH5B0w4z9bb3yq9kmgwHGqH0o8lenjlZBAB sKQKKNFcdEP4uzIOW5B6TWa9MHzkwQjKS2SYMSNfRsZps7p0pHylcb2S9QvEB/7R ajSaNvF8C9J1vjkm8Qcutj8SUa+CwxuySe6rhCzj4VjslNMNTxUlyZxeicTipL3K dB2UkG1ziTcHsgYLmDXOyta4eloMSGC+X/8UFNJsob7KkdQxqT64VW++8VQ166ND UOkDZBPwTRislVf6c1cnLVZg+cIdNeNK9i2KDEIIChLhPStBpA9MVnaKAQjIYC7O EZcYzliQmr1dVIx/6XakgaCsIRifkkPyEkCIdg0fnMSoaKs4qc5Q0p1IXiWO6vJP mpnrtC7WzQ9ThnvQek6A1kz3ls3QlE9fqtDUmvE+XE/9E4Xko9ufe2tscPZ4Dr1b RUCRix+hmtisRWCjcTZ9oqxtzB+vxDYsuVAo0Q1+ckSf/xSIlzrtfidtOgifft0v FMKOlplmBzSmcmZrTJ2/DgpNgvX+tJJaBIEXUrXgFyuf1bRJBiwse9x/EGpBRcjC 3HlOcXG3o/W+SrVutxez49kt3Eaksa2AI+CYUvDJjl7wgHA3J9A= =fMOR -END PGP SIGNATURE- Signature for apache-wicket-9.0.0-M5.tar.gz: -BEGIN PGP SIGNATURE- iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT VuFP/A/7BPiVX8FkifrsxVMcD7jgbiCEGTxO6adDIoZNPYA9vrapE3XCEVY9qyaW vHjqs/qFRtnhZY8dLcC6GKX5nnvIP0PoFvfw48yMx6/xidNoNnNrcxDzg4fpB3uW KzaqKbHb/tH7ndTsB/EF5CRejUxuQXYqiUIYDToHQwc/XT6to7TUpPL7FM/lEfUk xSdCK4EhsD1U4XvhZYKL7R1SfhyC5tvmm609UXLxFli7DBn5Sq/mcPlbA+BWbQQF GtLxFwYTrYONPfSyABUzi7CkKgeSXoK3ffnQlDqc5L8/cUYJQurU55jP5GP39Urk wGv3D2/glxEIeDUN77U0PxQzHDULwCXlX2Ng+npbUTS7COc8wTSpYFH+WzeyVATU RO5WIDG0RF1/y9CWm3S0gdXfeWSO0bP1VWX7MOeefVBm1c6vgHYdHctmwiHX9owB 4wfKqT9LbKMuaMY/A9ZpGt24X6N7ujAVMEIBJ+UGF2sSCnMNJK5XCSgnUkMNZwex 6h+rM6NUMl3nc8z6FEXPLvdJDdtx73O0LtL0REV5bINlIpRmXqMvTF1RvdhKR0jl vWFH5xBzW7/sKmJ5zQkh/Nw+VG9l0qewqwBh5sOHzWZXROqsVvrDXvGwXIOJKNMW 2881MlEJLLB9V59N7PIC7shxKl300W36Z1fIRSp3c9DiEoC4Y+E= =G/ZG -END PGP SIGNATURE- CHANGELOG for 9.0.0-M5: ** Bug * [WICKET-6715] - FileUpload class should not implement IClusterable * [WICKET-6745] - CSP: inline JS in server and client time response filters * [WICKET-6746] - HttpsMapper cannot deal with resources over websockets * [WICKET-6752] - Some dependencies contain CVEs * [WICKET-6753] - res/modal.js using aria-labelledby where it should be using aria-label * [WICKET-6754] - Iteration stops with nested containers * [WICKET-6755] - MockServletContext does not decode real path * [WICKET-6756] - Avoid URL.getFile() when actually expecting paths. * [WICKET-6757] - Avoid URL.getFile during mime type detection. * [WICKET-6758] - NPE in AbstractWebSocketProcessor after session times out ** New Feature * [WICKET-6727] - Configurable CSP * [WICKET-6729] - allow adding IHeaderResponseDecorator without replacing all others * [WICKET-6730] - Global access to secure random data ** Improvement * [WICKET-6724] - CSP: Inline Javascript in AjaxLink * [WICKET-6725] - CSP: display:none in Component.renderPlaceholderTag * [WICKET-6726] - CSP: inline styling and js in Form submitbutton handling * [WICKET-6731] - CSP: inline JS in SubmitLink * [WICKET-6732] - CSP: inline JS
Re: [VOTE] Release Apache Wicket 9.0.0-M5 TAKE 2
Yes at this point I think it's safer starting a new vote. On 4/2/20 9:33 AM, Maxim Solodovnik wrote: I see no other way :( On Thu, 2 Apr 2020 at 14:29, Andrea Del Bene wrote: On 4/1/20 5:39 AM, Martin Grigorov wrote: Hi, The CHANGELOG should not contain https://issues.apache.org/jira/browse/WICKET-6750 since it is not Resolved. I don't know how it managed to go into the CHANGELOG. I've fixed it at code base level but it requires a to start again a new release to fix also distribution archives. Should we cancel this vote? On Tue, Mar 31, 2020 at 9:56 PM Andrea Del Bene wrote: This is a vote to release Apache Wicket 9.0.0-M5 Please download the source distributions found in our staging area linked below. I have included the signatures for both the source archives. This vote lasts for 72 hours minimum. [ ] Yes, release Apache Wicket 9.0.0-M5 [ ] No, don't release Apache Wicket 9.0.0-M5, because ... Distributions, changelog, keys and signatures can be found at: https://dist.apache.org/repos/dist/dev/wicket/9.0.0-M5 Staging repository: https://repository.apache.org/content/repositories/orgapachewicket-1140/ The binaries are available in the above link, as are a staging repository for Maven. Typically the vote is on the source, but should you find a problem with one of the binaries, please let me know, I can re-roll them some way or the other. Staging git repository data: Repository: g...@github.com:bitstorm/wicket.git Branch: build/wicket-9.0.0-M5 Release tag: rel/wicket-9.0.0-M5 The signatures for the source release artefacts: Signature for apache-wicket-9.0.0-M5.zip: -BEGIN PGP SIGNATURE- iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT VuEPnQ/9Gc7bH7Y/s6PZceoLV0t9gkhtsJaC8jhuZhOWCqj1Uu/3VfJPRYma2eSs z7XpgU1+x8qTMMUm27Z0HWMjUrMOevH5B0w4z9bb3yq9kmgwHGqH0o8lenjlZBAB sKQKKNFcdEP4uzIOW5B6TWa9MHzkwQjKS2SYMSNfRsZps7p0pHylcb2S9QvEB/7R ajSaNvF8C9J1vjkm8Qcutj8SUa+CwxuySe6rhCzj4VjslNMNTxUlyZxeicTipL3K dB2UkG1ziTcHsgYLmDXOyta4eloMSGC+X/8UFNJsob7KkdQxqT64VW++8VQ166ND UOkDZBPwTRislVf6c1cnLVZg+cIdNeNK9i2KDEIIChLhPStBpA9MVnaKAQjIYC7O EZcYzliQmr1dVIx/6XakgaCsIRifkkPyEkCIdg0fnMSoaKs4qc5Q0p1IXiWO6vJP mpnrtC7WzQ9ThnvQek6A1kz3ls3QlE9fqtDUmvE+XE/9E4Xko9ufe2tscPZ4Dr1b RUCRix+hmtisRWCjcTZ9oqxtzB+vxDYsuVAo0Q1+ckSf/xSIlzrtfidtOgifft0v FMKOlplmBzSmcmZrTJ2/DgpNgvX+tJJaBIEXUrXgFyuf1bRJBiwse9x/EGpBRcjC 3HlOcXG3o/W+SrVutxez49kt3Eaksa2AI+CYUvDJjl7wgHA3J9A= =fMOR -END PGP SIGNATURE- Signature for apache-wicket-9.0.0-M5.tar.gz: -BEGIN PGP SIGNATURE- iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT VuFP/A/7BPiVX8FkifrsxVMcD7jgbiCEGTxO6adDIoZNPYA9vrapE3XCEVY9qyaW vHjqs/qFRtnhZY8dLcC6GKX5nnvIP0PoFvfw48yMx6/xidNoNnNrcxDzg4fpB3uW KzaqKbHb/tH7ndTsB/EF5CRejUxuQXYqiUIYDToHQwc/XT6to7TUpPL7FM/lEfUk xSdCK4EhsD1U4XvhZYKL7R1SfhyC5tvmm609UXLxFli7DBn5Sq/mcPlbA+BWbQQF GtLxFwYTrYONPfSyABUzi7CkKgeSXoK3ffnQlDqc5L8/cUYJQurU55jP5GP39Urk wGv3D2/glxEIeDUN77U0PxQzHDULwCXlX2Ng+npbUTS7COc8wTSpYFH+WzeyVATU RO5WIDG0RF1/y9CWm3S0gdXfeWSO0bP1VWX7MOeefVBm1c6vgHYdHctmwiHX9owB 4wfKqT9LbKMuaMY/A9ZpGt24X6N7ujAVMEIBJ+UGF2sSCnMNJK5XCSgnUkMNZwex 6h+rM6NUMl3nc8z6FEXPLvdJDdtx73O0LtL0REV5bINlIpRmXqMvTF1RvdhKR0jl vWFH5xBzW7/sKmJ5zQkh/Nw+VG9l0qewqwBh5sOHzWZXROqsVvrDXvGwXIOJKNMW 2881MlEJLLB9V59N7PIC7shxKl300W36Z1fIRSp3c9DiEoC4Y+E= =G/ZG -END PGP SIGNATURE- CHANGELOG for 9.0.0-M5: ** Bug * [WICKET-6715] - FileUpload class should not implement IClusterable * [WICKET-6745] - CSP: inline JS in server and client time response filters * [WICKET-6746] - HttpsMapper cannot deal with resources over websockets * [WICKET-6752] - Some dependencies contain CVEs * [WICKET-6753] - res/modal.js using aria-labelledby where it should be using aria-label * [WICKET-6754] - Iteration stops with nested containers * [WICKET-6755] - MockServletContext does not decode real path * [WICKET-6756] - Avoid URL.getFile() when actually expecting paths. * [WICKET-6757] - Avoid URL.getFile during mime type detection. * [WICKET-6758] - NPE in AbstractWebSocketProcessor after session times out ** New Feature * [WICKET-6727] - Configurable CSP * [WICKET-6729] - allow adding IHeaderResponseDecorator without replacing all others * [WICKET-6730] - Global access to secure random data ** Improvement * [WICKET-6724] - CSP: Inline Javascript in AjaxLink * [WICKET-6725] - CSP: display:none in Component.renderPlaceholderTag * [WICKET-6726] - CSP: inline styling and js in Form submitbutton handling * [WICKET-6731] - CSP: inline JS in SubmitLink * [WICKET-6732] - CSP: inline JS in Link and ExternalLink * [WICKET-6733] - CSP: enable by default * [WICKET-6735] - CSP: inline
Re: [VOTE] Release Apache Wicket 9.0.0-M5 TAKE 2
I see no other way :( On Thu, 2 Apr 2020 at 14:29, Andrea Del Bene wrote: > > On 4/1/20 5:39 AM, Martin Grigorov wrote: > > Hi, > > > > The CHANGELOG should not contain > > https://issues.apache.org/jira/browse/WICKET-6750 since it is not > Resolved. > > I don't know how it managed to go into the CHANGELOG. I've fixed it at > code base level but it requires a to start again a new release to fix > also distribution archives. > > Should we cancel this vote? > > > On Tue, Mar 31, 2020 at 9:56 PM Andrea Del Bene > > wrote: > > > >> This is a vote to release Apache Wicket 9.0.0-M5 > >> > >> Please download the source distributions found in our staging area > >> linked below. > >> > >> I have included the signatures for both the source archives. This vote > >> lasts for 72 hours minimum. > >> > >> [ ] Yes, release Apache Wicket 9.0.0-M5 > >> [ ] No, don't release Apache Wicket 9.0.0-M5, because ... > >> > >> Distributions, changelog, keys and signatures can be found at: > >> > >> https://dist.apache.org/repos/dist/dev/wicket/9.0.0-M5 > >> > >> Staging repository: > >> > >> > https://repository.apache.org/content/repositories/orgapachewicket-1140/ > >> > >> The binaries are available in the above link, as are a staging > >> repository for Maven. Typically the vote is on the source, but should > >> you find a problem with one of the binaries, please let me know, I can > >> re-roll them some way or the other. > >> > >> Staging git repository data: > >> > >> Repository: g...@github.com:bitstorm/wicket.git > >> Branch: build/wicket-9.0.0-M5 > >> Release tag: rel/wicket-9.0.0-M5 > >> > >> > >> > >> > >> The signatures for the source release artefacts: > >> > >> > >> Signature for apache-wicket-9.0.0-M5.zip: > >> > >> -BEGIN PGP SIGNATURE- > >> > >> iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT > >> VuEPnQ/9Gc7bH7Y/s6PZceoLV0t9gkhtsJaC8jhuZhOWCqj1Uu/3VfJPRYma2eSs > >> z7XpgU1+x8qTMMUm27Z0HWMjUrMOevH5B0w4z9bb3yq9kmgwHGqH0o8lenjlZBAB > >> sKQKKNFcdEP4uzIOW5B6TWa9MHzkwQjKS2SYMSNfRsZps7p0pHylcb2S9QvEB/7R > >> ajSaNvF8C9J1vjkm8Qcutj8SUa+CwxuySe6rhCzj4VjslNMNTxUlyZxeicTipL3K > >> dB2UkG1ziTcHsgYLmDXOyta4eloMSGC+X/8UFNJsob7KkdQxqT64VW++8VQ166ND > >> UOkDZBPwTRislVf6c1cnLVZg+cIdNeNK9i2KDEIIChLhPStBpA9MVnaKAQjIYC7O > >> EZcYzliQmr1dVIx/6XakgaCsIRifkkPyEkCIdg0fnMSoaKs4qc5Q0p1IXiWO6vJP > >> mpnrtC7WzQ9ThnvQek6A1kz3ls3QlE9fqtDUmvE+XE/9E4Xko9ufe2tscPZ4Dr1b > >> RUCRix+hmtisRWCjcTZ9oqxtzB+vxDYsuVAo0Q1+ckSf/xSIlzrtfidtOgifft0v > >> FMKOlplmBzSmcmZrTJ2/DgpNgvX+tJJaBIEXUrXgFyuf1bRJBiwse9x/EGpBRcjC > >> 3HlOcXG3o/W+SrVutxez49kt3Eaksa2AI+CYUvDJjl7wgHA3J9A= > >> =fMOR > >> -END PGP SIGNATURE- > >> > >> Signature for apache-wicket-9.0.0-M5.tar.gz: > >> > >> -BEGIN PGP SIGNATURE- > >> > >> iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT > >> VuFP/A/7BPiVX8FkifrsxVMcD7jgbiCEGTxO6adDIoZNPYA9vrapE3XCEVY9qyaW > >> vHjqs/qFRtnhZY8dLcC6GKX5nnvIP0PoFvfw48yMx6/xidNoNnNrcxDzg4fpB3uW > >> KzaqKbHb/tH7ndTsB/EF5CRejUxuQXYqiUIYDToHQwc/XT6to7TUpPL7FM/lEfUk > >> xSdCK4EhsD1U4XvhZYKL7R1SfhyC5tvmm609UXLxFli7DBn5Sq/mcPlbA+BWbQQF > >> GtLxFwYTrYONPfSyABUzi7CkKgeSXoK3ffnQlDqc5L8/cUYJQurU55jP5GP39Urk > >> wGv3D2/glxEIeDUN77U0PxQzHDULwCXlX2Ng+npbUTS7COc8wTSpYFH+WzeyVATU > >> RO5WIDG0RF1/y9CWm3S0gdXfeWSO0bP1VWX7MOeefVBm1c6vgHYdHctmwiHX9owB > >> 4wfKqT9LbKMuaMY/A9ZpGt24X6N7ujAVMEIBJ+UGF2sSCnMNJK5XCSgnUkMNZwex > >> 6h+rM6NUMl3nc8z6FEXPLvdJDdtx73O0LtL0REV5bINlIpRmXqMvTF1RvdhKR0jl > >> vWFH5xBzW7/sKmJ5zQkh/Nw+VG9l0qewqwBh5sOHzWZXROqsVvrDXvGwXIOJKNMW > >> 2881MlEJLLB9V59N7PIC7shxKl300W36Z1fIRSp3c9DiEoC4Y+E= > >> =G/ZG > >> -END PGP SIGNATURE- > >> > >> > >> > >> CHANGELOG for 9.0.0-M5: > >> > >> ** Bug > >> > >> * [WICKET-6715] - FileUpload class should not implement > IClusterable > >> * [WICKET-6745] - CSP: inline JS in server and client time > response > >> filters > >> * [WICKET-6746] - HttpsMapper cannot deal with resources over > >> websockets > >> * [WICKET-6752] - Some dependencies contain CVEs > >> * [WICKET-6753] - res/modal.js using aria-labelledby where it > >> should be using aria-label > >> * [WICKET-6754] - Iteration stops with nested containers > >> * [WICKET-6755] - MockServletContext does not decode real path > >> * [WICKET-6756] - Avoid URL.getFile() when actually expecting > paths. > >> * [WICKET-6757] - Avoid URL.getFile during mime type detection. > >> * [WICKET-6758] - NPE in AbstractWebSocketProcessor after session > >> times out > >> > >> ** New Feature > >> > >> * [WICKET-6727] - Configurable CSP > >> * [WICKET-6729] - allow adding IHeaderResponseDecorator without > >> replacing all others > >> * [WICKET-6730] - Global access to secure random data > >> > >> ** Improvement > >> > >> *
Re: [VOTE] Release Apache Wicket 9.0.0-M5 TAKE 2
On 4/1/20 5:39 AM, Martin Grigorov wrote: Hi, The CHANGELOG should not contain https://issues.apache.org/jira/browse/WICKET-6750 since it is not Resolved. I don't know how it managed to go into the CHANGELOG. I've fixed it at code base level but it requires a to start again a new release to fix also distribution archives. Should we cancel this vote? On Tue, Mar 31, 2020 at 9:56 PM Andrea Del Bene wrote: This is a vote to release Apache Wicket 9.0.0-M5 Please download the source distributions found in our staging area linked below. I have included the signatures for both the source archives. This vote lasts for 72 hours minimum. [ ] Yes, release Apache Wicket 9.0.0-M5 [ ] No, don't release Apache Wicket 9.0.0-M5, because ... Distributions, changelog, keys and signatures can be found at: https://dist.apache.org/repos/dist/dev/wicket/9.0.0-M5 Staging repository: https://repository.apache.org/content/repositories/orgapachewicket-1140/ The binaries are available in the above link, as are a staging repository for Maven. Typically the vote is on the source, but should you find a problem with one of the binaries, please let me know, I can re-roll them some way or the other. Staging git repository data: Repository: g...@github.com:bitstorm/wicket.git Branch: build/wicket-9.0.0-M5 Release tag: rel/wicket-9.0.0-M5 The signatures for the source release artefacts: Signature for apache-wicket-9.0.0-M5.zip: -BEGIN PGP SIGNATURE- iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT VuEPnQ/9Gc7bH7Y/s6PZceoLV0t9gkhtsJaC8jhuZhOWCqj1Uu/3VfJPRYma2eSs z7XpgU1+x8qTMMUm27Z0HWMjUrMOevH5B0w4z9bb3yq9kmgwHGqH0o8lenjlZBAB sKQKKNFcdEP4uzIOW5B6TWa9MHzkwQjKS2SYMSNfRsZps7p0pHylcb2S9QvEB/7R ajSaNvF8C9J1vjkm8Qcutj8SUa+CwxuySe6rhCzj4VjslNMNTxUlyZxeicTipL3K dB2UkG1ziTcHsgYLmDXOyta4eloMSGC+X/8UFNJsob7KkdQxqT64VW++8VQ166ND UOkDZBPwTRislVf6c1cnLVZg+cIdNeNK9i2KDEIIChLhPStBpA9MVnaKAQjIYC7O EZcYzliQmr1dVIx/6XakgaCsIRifkkPyEkCIdg0fnMSoaKs4qc5Q0p1IXiWO6vJP mpnrtC7WzQ9ThnvQek6A1kz3ls3QlE9fqtDUmvE+XE/9E4Xko9ufe2tscPZ4Dr1b RUCRix+hmtisRWCjcTZ9oqxtzB+vxDYsuVAo0Q1+ckSf/xSIlzrtfidtOgifft0v FMKOlplmBzSmcmZrTJ2/DgpNgvX+tJJaBIEXUrXgFyuf1bRJBiwse9x/EGpBRcjC 3HlOcXG3o/W+SrVutxez49kt3Eaksa2AI+CYUvDJjl7wgHA3J9A= =fMOR -END PGP SIGNATURE- Signature for apache-wicket-9.0.0-M5.tar.gz: -BEGIN PGP SIGNATURE- iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAl6DejwACgkQh48B+qjT VuFP/A/7BPiVX8FkifrsxVMcD7jgbiCEGTxO6adDIoZNPYA9vrapE3XCEVY9qyaW vHjqs/qFRtnhZY8dLcC6GKX5nnvIP0PoFvfw48yMx6/xidNoNnNrcxDzg4fpB3uW KzaqKbHb/tH7ndTsB/EF5CRejUxuQXYqiUIYDToHQwc/XT6to7TUpPL7FM/lEfUk xSdCK4EhsD1U4XvhZYKL7R1SfhyC5tvmm609UXLxFli7DBn5Sq/mcPlbA+BWbQQF GtLxFwYTrYONPfSyABUzi7CkKgeSXoK3ffnQlDqc5L8/cUYJQurU55jP5GP39Urk wGv3D2/glxEIeDUN77U0PxQzHDULwCXlX2Ng+npbUTS7COc8wTSpYFH+WzeyVATU RO5WIDG0RF1/y9CWm3S0gdXfeWSO0bP1VWX7MOeefVBm1c6vgHYdHctmwiHX9owB 4wfKqT9LbKMuaMY/A9ZpGt24X6N7ujAVMEIBJ+UGF2sSCnMNJK5XCSgnUkMNZwex 6h+rM6NUMl3nc8z6FEXPLvdJDdtx73O0LtL0REV5bINlIpRmXqMvTF1RvdhKR0jl vWFH5xBzW7/sKmJ5zQkh/Nw+VG9l0qewqwBh5sOHzWZXROqsVvrDXvGwXIOJKNMW 2881MlEJLLB9V59N7PIC7shxKl300W36Z1fIRSp3c9DiEoC4Y+E= =G/ZG -END PGP SIGNATURE- CHANGELOG for 9.0.0-M5: ** Bug * [WICKET-6715] - FileUpload class should not implement IClusterable * [WICKET-6745] - CSP: inline JS in server and client time response filters * [WICKET-6746] - HttpsMapper cannot deal with resources over websockets * [WICKET-6752] - Some dependencies contain CVEs * [WICKET-6753] - res/modal.js using aria-labelledby where it should be using aria-label * [WICKET-6754] - Iteration stops with nested containers * [WICKET-6755] - MockServletContext does not decode real path * [WICKET-6756] - Avoid URL.getFile() when actually expecting paths. * [WICKET-6757] - Avoid URL.getFile during mime type detection. * [WICKET-6758] - NPE in AbstractWebSocketProcessor after session times out ** New Feature * [WICKET-6727] - Configurable CSP * [WICKET-6729] - allow adding IHeaderResponseDecorator without replacing all others * [WICKET-6730] - Global access to secure random data ** Improvement * [WICKET-6724] - CSP: Inline Javascript in AjaxLink * [WICKET-6725] - CSP: display:none in Component.renderPlaceholderTag * [WICKET-6726] - CSP: inline styling and js in Form submitbutton handling * [WICKET-6731] - CSP: inline JS in SubmitLink * [WICKET-6732] - CSP: inline JS in Link and ExternalLink * [WICKET-6733] - CSP: enable by default * [WICKET-6735] - CSP: inline styling in FormComponentFeedbackBorder/Indicator * [WICKET-6736] - CSP: Inline styling in BrowserInfoForm * [WICKET-6737] - CSP: violations in examples * [WICKET-6738] - CSP: inline styling in
