[Geotools-devel] [JIRA] (GEOT-5487) Cropped coverage with longitudes in (0, 360) can be rendered black

2016-08-12 Thread Ben Caradoc-Davies [Administrator] (JIRA)
Title: Message Title Ben Caradoc-Davies [A

Re: [Geotools-devel] GeoTools 16-M0 release artifacts available for testing

2016-08-12 Thread Torben Barsballe
Yes, I couldn't quite tell the impelmentation of the dependency from the dependency-tree output, but the pom.xml shows the dependency more accurately. Indeed we did. Torben On Fri, Aug 12, 2016 at 5:58 PM, Ben Caradoc-Davies wrote: > Yes, but the dependency is a direct dependency with incorrec

Re: [Geotools-devel] GeoTools 16-M0 release artifacts available for testing

2016-08-12 Thread Ben Caradoc-Davies
Yes, but the dependency is a direct dependency with incorrect scope, not transitive. We sent our emails at the same moment. :-) Kind regards, Ben. On 13/08/16 12:54, Torben Barsballe wrote: > Doing a mvn:dependency:tree, I found this: > > [INFO] > --

Re: [Geotools-devel] GeoTools 16-M0 release artifacts available for testing

2016-08-12 Thread Torben Barsballe
Doing a mvn:dependency:tree, I found this: [INFO] [INFO] Building Application Schema DataAccess 15-SNAPSHOT [INFO] [INFO] [INFO] --- maven-dependency-pl

Re: [Geotools-devel] GeoTools 16-M0 release artifacts available for testing

2016-08-12 Thread Ben Caradoc-Davies
Ah, here is the problem: gt-app-schema has a compile (non-test) phase dependency on the tests jar: org.geotools gt-complex ${project.version} tests This causes gt-complex-*-test.jar to be included in the bin.zip. Adding test should fix; I will add to my to-do list. Kind r

Re: [Geotools-devel] GeoTools 16-M0 release artifacts available for testing

2016-08-12 Thread Ben Caradoc-Davies
Torben, neither are blockers, just observations, and I agree that addressing them should be deferred for future work. Including tests jars causes no harm. commons-beanutils is only a vulnerability in specific types of applications. There is also a hardcoded commons-beanutils 1.7.0 in gt-app-sc

Re: [Geotools-devel] GeoTools 16-M0 release artifacts available for testing

2016-08-12 Thread Ben Caradoc-Davies
But then why is gt-app-schema-*-tests.jar not present? It has the same stanza in its pom.xml. Kind regards, Ben. On 13/08/16 12:24, Devon Tucker wrote: >> (2) gt-complex-16-M0-tests.jar is present. This is the only *-tests.jar >> included > in the bin-zip. I wonder why? > > Maybe something do d

Re: [Geotools-devel] GeoTools 16-M0 release artifacts available for testing

2016-08-12 Thread Torben Barsballe
Ben: (1) Doing a mvn dependency:tree shows that the commons-beanutils jar is coming from gt-imagemosaic. This is probably something we should fix. Talking to Kevin, upgrading this will include a version update of the jar, so will need some testing. Also note that the gt-imagemosaic jar is a dependa

Re: [Geotools-devel] GeoTools 16-M0 release artifacts available for testing

2016-08-12 Thread Devon Tucker
> (2) gt-complex-16-M0-tests.jar is present. This is the only *-tests.jar > included in the bin-zip. I wonder why? Maybe something do do with the following? Only a guess. org.apache.maven.plugins maven-source-plugin package test-ja

Re: [Geotools-devel] GeoTools 16-M0 release artifacts available for testing

2016-08-12 Thread Torben Barsballe
Looks like my failed test refers to the JAI version, and is thus system-specific. Given that it works on other systems, I am not especially concerned about this failure (although I evedently need to the JAI version on my system) Torben On Fri, Aug 12, 2016 at 5:06 PM, Torben Barsballe < tbarsba..

Re: [Geotools-devel] GeoTools 16-M0 release artifacts available for testing

2016-08-12 Thread Ben Caradoc-Davies
Looking through the bin.zip, I noticed: (1) commons-beanutils-1.7.0.jar is present. This JAR was removed from GeoServer and replaced with the customised commons-beanutils-1.9.2-noclassprop.jar because it enabled a remote code execution vulnerability. See Kevin and Andrea for details. Should Ge

Re: [Geotools-devel] GeoTools 16-M0 release artifacts available for testing

2016-08-12 Thread Devon Tucker
Install succeeded for me. On Fri, Aug 12, 2016 at 5:06 PM, Torben Barsballe < tbarsba...@boundlessgeo.com> wrote: > I'm seeing this error in the gt-metadata module, but others are unable to > reproduce: > Failed tests: > GeoToolsTest.testVersion:162 expected:<1.1.[3]> but was:<1.1.[2]> > > Torb

Re: [Geotools-devel] GeoTools 16-M0 release artifacts available for testing

2016-08-12 Thread Torben Barsballe
I'm seeing this error in the gt-metadata module, but others are unable to reproduce: Failed tests: GeoToolsTest.testVersion:162 expected:<1.1.[3]> but was:<1.1.[2]> Torben On Fri, Aug 12, 2016 at 5:02 PM, Devon Tucker wrote: > Running a mvn install now. > > On Fri, Aug 12, 2016 at 4:50 PM, To

Re: [Geotools-devel] GeoTools 16-M0 release artifacts available for testing

2016-08-12 Thread Devon Tucker
Running a mvn install now. On Fri, Aug 12, 2016 at 4:50 PM, Torben Barsballe < tbarsba...@boundlessgeo.com> wrote: > The GeoTools 16-M0 release artifacts available for testing from: > http://ares.boundlessgeo.com/geotools/release/16-M0/ > > Torben > > -

[Geotools-devel] GeoTools 16-M0 release artifacts available for testing

2016-08-12 Thread Torben Barsballe
The GeoTools 16-M0 release artifacts available for testing from: http://ares.boundlessgeo.com/geotools/release/16-M0/ Torben -- What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic patterns at an in

Re: [Geotools-devel] Draft GeoTools 14.5 release blog post ready for review

2016-08-12 Thread Jody Garnett
Thanks for publishing this release Ben! -- Jody Garnett On 10 August 2016 at 20:03, Ben Caradoc-Davies wrote: > GeoTools bloggers, please review the draft GeoTools 14.5 release blog post. > > -- > Ben Caradoc-Davies > Director > Transient Software Limited > New Zealand >

[Geotools-devel] [JIRA] (GEOT-5486) dependency convergence commons-collections

2016-08-12 Thread Mark Prins (JIRA)
Title: Message Title Mark Prins created an