[GitHub] [ws-axiom] dependabot[bot] opened a new pull request #126: Bump commons-io from 2.8.0 to 2.9.0

2021-05-25 Thread GitBox
dependabot[bot] opened a new pull request #126: URL: https://github.com/apache/ws-axiom/pull/126 Bumps commons-io from 2.8.0 to 2.9.0. [![Dependabot compatibility

[GitHub] [ws-axiom] dependabot[bot] opened a new pull request #125: Bump truth from 1.1.2 to 1.1.3

2021-05-25 Thread GitBox
dependabot[bot] opened a new pull request #125: URL: https://github.com/apache/ws-axiom/pull/125 Bumps [truth](https://github.com/google/truth) from 1.1.2 to 1.1.3. Release notes Sourced from https://github.com/google/truth/releases;>truth's releases. 1.1.3 Fixed a

Re: Axis2 needs an Axiom release

2021-05-25 Thread robertlazarski
Bump. The situation here is that Axis2 is getting a lot of community requests for a release due to security scanners showing outdated jars - rightly or wrongly. We are getting several Jira issues related to security opened per month. I'd be willing to become a committer to help push an Axiom

[jira] [Closed] (WSS-685) Signature before timestamp results in signing after encryption

2021-05-25 Thread Colm O hEigeartaigh (Jira)
[ https://issues.apache.org/jira/browse/WSS-685?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed WSS-685. --- > Signature before timestamp results in signing after encryption >

Re: [VOTE] - Release Apache WSS4J 2.3.2

2021-05-25 Thread Colm O hEigeartaigh
With 3 binding +1 votes, and no other votes, this vote passes - I'll do the release. Colm. On Mon, May 24, 2021 at 10:05 AM Alessio Soldano wrote: > > +1 > > Thanks! > > On Tue, May 18, 2021 at 10:41 AM Colm O hEigeartaigh > wrote: >> >> This is a vote to release Apache WSS4J 2.3.2. It only