Sorry to be dropping in so late on the Shindig 1.1 release party...

-1 on releasing BETA5 because of LGPL in the release files


If you pull the Shindig beta 5 WAR binary from the directory below,
you will find that it includes code build from source that is under
LGPL license.

https://repository.apache.org/content/repositories/orgapacheshindig-004/org/apache/shindig/shindig-server/1.1-BETA5-incubating/

The problem is the json_simple-r1.jar file in the generated war file.
It has the same md5 checksum (c88c9efb46aae24829c3461d0a59c653) as the
json_simple.jar extracted
fromhttp://json-simple.googlecode.com/files/json_simple.zip.  Inside
that source download is an LGPL license, and the same generated
json_simple.jar.

I think we can resolve this by changing Shindig (or is it Caja) to
depend on a later release of simple-json because later releases are
under ASL 2.0.

- Dave



On Tue, Nov 17, 2009 at 5:55 AM, Paul Lindner <lind...@inuus.com> wrote:
> Hi,
>
>>
> I have prepared the shindig-1.1-BETA5-incubating release. This version
> includes the fix for the packaged java NOTICE file and is signed with a key
> that is in the Apache Web of Trust.  I expect that these changes should
> allow for an official release.
>
>>
> This release encompasses the withdrawn BETA1-3 releases, the BETA4 release
> and BETA5 release.
>
> We resolved 9 issues in BETA5, 34 issues in BETA4, 16 issues in BETA3, 16
> issues in BETA2 and 268 issues in BETA1.
>
>>
> Staging repo:
>
>> https://repository.apache.org/content/repositories/orgapacheshindig-004/
>
> Web site:
>
>> http://incubator.apache.org/shindig/
>
>>
> Documentation/Reports:
>
>> http://incubator.apache.org/shindig/shindig-1.1.x/
>
>>
> Vote open for 72 hours.
>
>>
> [ ] +1
>
>> [ ] +0
>
>> [ ] -1
>
>>
>
> ------ BETA5 -------
>
> Sub-task
>
>   - [SHINDIG-346 <https://issues.apache.org/jira/browse/SHINDIG-346>] -
>   Implement gadgets.util.sanitizeHtml
>
> Bug
>
>   - [SHINDIG-344 <https://issues.apache.org/jira/browse/SHINDIG-344>] -
>   Tracking issue: Spec Compliance [javascript]
>   - [SHINDIG-848 <https://issues.apache.org/jira/browse/SHINDIG-848>] -
>   core.io/io.js does not look at the return code from the request
>   - [SHINDIG-1132 <https://issues.apache.org/jira/browse/SHINDIG-1132>] -
>   ClassLoader memory leak caused by XmlUtil ThreadLocal
>   - [SHINDIG-1190 <https://issues.apache.org/jira/browse/SHINDIG-1190>] -
>   userprefs don't get saved
>   - [SHINDIG-1220 <https://issues.apache.org/jira/browse/SHINDIG-1220>] -
>   Charset guessing code in BasicRemoteContentFetcher gets lost when no charset
>   is informed
>   - [SHINDIG-1222 <https://issues.apache.org/jira/browse/SHINDIG-1222>] -
>   Duplicate dependency in shindig-common.
>   - [SHINDIG-1224 <https://issues.apache.org/jira/browse/SHINDIG-1224>] -
>   DOMImplementationProvider tries to load Xerces DOMImplementationImpl with
>   the wrong package name
>
>
> ------ BETA4 -------
>
> Sub-task
>
>   - [SHINDIG-342 <https://issues.apache.org/jira/browse/SHINDIG-342>] -
>   Support /ModulePrefs/OAuth (standardization of the "oauth" feature)
>
> Bug
>
>   - [SHINDIG-133 <https://issues.apache.org/jira/browse/SHINDIG-133>] -
>   forwarding browser headers on remote content requests
>   - [SHINDIG-860 <https://issues.apache.org/jira/browse/SHINDIG-860>] -
>   Shindig javascript feature code uses new opensocial.IdSpec but should not
>   - [SHINDIG-884 <https://issues.apache.org/jira/browse/SHINDIG-884>] -
>   Signed <Preloads> lead to null pointer exceptions if security token not
>   available
>   - [SHINDIG-890 <https://issues.apache.org/jira/browse/SHINDIG-890>] -
>   Make URL Template example from opensocial spec actually work with shindig
>   - [SHINDIG-1096 <https://issues.apache.org/jira/browse/SHINDIG-1096>] -
>   Need a more accurate content length check
>   - [SHINDIG-1117 <https://issues.apache.org/jira/browse/SHINDIG-1117>] -
>   Lists returned for JSON-RPC do not include all properties
>   - [SHINDIG-1181 <https://issues.apache.org/jira/browse/SHINDIG-1181>] -
>   Cannot use accept headers with makeRequest
>   - [SHINDIG-1184 <https://issues.apache.org/jira/browse/SHINDIG-1184>] -
>   Updated log.js to support Opera 9 & 10
>   - [SHINDIG-1185 <https://issues.apache.org/jira/browse/SHINDIG-1185>] -
>   Wrap console.log instead of directly exposing console
>   - [SHINDIG-1186 <https://issues.apache.org/jira/browse/SHINDIG-1186>] -
>   /gadgets/metadata does not handle Transfer-Encoding according to the
>   HTTP/1.1 spec
>   - [SHINDIG-1189 <https://issues.apache.org/jira/browse/SHINDIG-1189>] -
>   Output of cajoling is not cached
>   - [SHINDIG-1192 <https://issues.apache.org/jira/browse/SHINDIG-1192>] -
>   content-rewrite is not compliant with Open Social v0.9, plus some bugs
>   - [SHINDIG-1194 <https://issues.apache.org/jira/browse/SHINDIG-1194>] -
>   IE7 XHR requests fail when gadgets contain a <base href="..."> tag
>   - [SHINDIG-1195 <https://issues.apache.org/jira/browse/SHINDIG-1195>] -
>   BasicHttpFetcher requests compressed encoding on HEAD requests
>   - [SHINDIG-1196 <https://issues.apache.org/jira/browse/SHINDIG-1196>] -
>   Wrong multi-line splitting of long string constant in wpm RPC transport
>   - [SHINDIG-1198 <https://issues.apache.org/jira/browse/SHINDIG-1198>] -
>   Wrong construction of URIs in gadgets.rpc feature
>   - [SHINDIG-1200 <https://issues.apache.org/jira/browse/SHINDIG-1200>] -
>   Simpler taming of opensocial, gadgets and related apis
>   - [SHINDIG-1202 <https://issues.apache.org/jira/browse/SHINDIG-1202>] -
>   Exceptions thrown in js Shindig code
>   - [SHINDIG-1209 <https://issues.apache.org/jira/browse/SHINDIG-1209>] -
>   PersonImpl can construct malformed urls/photos lists
>   - [SHINDIG-1215 <https://issues.apache.org/jira/browse/SHINDIG-1215>] -
>   Honor the maxObjSize in BasicHttpFetcher and make it configurable
>   - [SHINDIG-1219 <https://issues.apache.org/jira/browse/SHINDIG-1219>] -
>   JsServlet doesn't generate a proper document.write call
>   - [SHINDIG-1221 <https://issues.apache.org/jira/browse/SHINDIG-1221>] -
>   Rome 1.0 Upgrade / get jstl from sun java2 repo
>
> Improvement
>
>   - [SHINDIG-100 <https://issues.apache.org/jira/browse/SHINDIG-100>] - Add
>   common proxy headers to help reduce abuse
>   - [SHINDIG-796 <https://issues.apache.org/jira/browse/SHINDIG-796>] -
>   Make it simpler to launch a fully working sample server in IDEs for
>   debugging
>   - [SHINDIG-828 <https://issues.apache.org/jira/browse/SHINDIG-828>] -
>   Move all resources in a resources directory
>   - [SHINDIG-1019 <https://issues.apache.org/jira/browse/SHINDIG-1019>] -
>   Proxied requests do not force a content-type on the response
>   - [SHINDIG-1193 <https://issues.apache.org/jira/browse/SHINDIG-1193>] -
>   Support feature=osapi via a container
>   - [SHINDIG-1199 <https://issues.apache.org/jira/browse/SHINDIG-1199>] -
>   OpenSocialI18NGadgetRewriter's creation of JsLibrary should be consistent
>   with JsFeatureLoader
>   - [SHINDIG-1211 <https://issues.apache.org/jira/browse/SHINDIG-1211>] -
>   Only show settings menu in sample gadget if there are user editable prefs
>   - [SHINDIG-1213 <https://issues.apache.org/jira/browse/SHINDIG-1213>] -
>   Feature=osapi fails to run in container mode
>   - [SHINDIG-1214 <https://issues.apache.org/jira/browse/SHINDIG-1214>] -
>   Bump minor versions of dependencies
>   - [SHINDIG-1216 <https://issues.apache.org/jira/browse/SHINDIG-1216>] -
>   OAuth Proxy should allow for viewer access on secured owner pages.
>   - [SHINDIG-1218 <https://issues.apache.org/jira/browse/SHINDIG-1218>] -
>   Support HTTP Retry-After header for failed requests
>
>
> ------ BETA3 -------
>
>> Bug
>
>>  <http://incubator.apache.org/shindig/>
>> [SHINDIG-1083 <https://issues.apache.org/jira/browse/SHINDIG-1083>] -
>> SampleContainer uses Content-Type application/x-www-form-urlencoded, even
>> though Shindig Java disallows it
>> [SHINDIG-1142 <https://issues.apache.org/jira/browse/SHINDIG-1142>] -
>> JSON-RPC service SHOULD permit application/json-rpc for Accept and
>> Content-Type headers according to the spec
>> [SHINDIG-1143 <https://issues.apache.org/jira/browse/SHINDIG-1143>] -
>> Compilation fails in common java library: GuiceServletContextListener
>> [SHINDIG-1145 <https://issues.apache.org/jira/browse/SHINDIG-1145>] -
>> opensocial-0.9 feature is broken
>> [SHINDIG-1157 <https://issues.apache.org/jira/browse/SHINDIG-1157>] -
>> Flash support in cajoled gadgets
>> [SHINDIG-1159 <https://issues.apache.org/jira/browse/SHINDIG-1159>] - Not
>> able to access gadgets.i18n.DateTimeConstants
>> [SHINDIG-1160 <https://issues.apache.org/jira/browse/SHINDIG-1160>] -
>> [patch] Make the flash min version configurable
>> [SHINDIG-1161 <https://issues.apache.org/jira/browse/SHINDIG-1161>] -
>> Multi MediaItems request failed.
>> [SHINDIG-1163 <https://issues.apache.org/jira/browse/SHINDIG-1163>] -
>> gadgets.js overrides gadgets.log/gadgets.error
>> [SHINDIG-1169 <https://issues.apache.org/jira/browse/SHINDIG-1169>] -
>> gadgets.util.registerOnLoadHandler does not work in cajoled gadgets
>> [SHINDIG-1170 <https://issues.apache.org/jira/browse/SHINDIG-1170>] -
>> "sign_viwer" should be "sign_viewer" ?
>>
>>
>> Improvement
>
>> [SHINDIG-1164 <https://issues.apache.org/jira/browse/SHINDIG-1164>] -
>> Shindig default Executor can block shutdown
>> [SHINDIG-1165 <https://issues.apache.org/jira/browse/SHINDIG-1165>] -
>> Upgrade data underlying opensocial-i18n feature to CLDR version 1.7
>> [SHINDIG-1171 <https://issues.apache.org/jira/browse/SHINDIG-1171>] -
>> Upgrade maven plugins for 1.1-BETA3
>> [SHINDIG-1179 <https://issues.apache.org/jira/browse/SHINDIG-1179>] -
>> Allow for GadgetSpec/ModulePrefs flexibility
>>
> New Feature
>
>> [SHINDIG-1136 <https://issues.apache.org/jira/browse/SHINDIG-1136>] -
>> Content upload for php shindig
>>
> ------ BETA2 -------
>
>> Bug
>
>> [SHINDIG-609 <https://issues.apache.org/jira/browse/SHINDIG-609>] - fix
>> oauth url parameters
>> [SHINDIG-926 <https://issues.apache.org/jira/browse/SHINDIG-926>] -
>> XML/ATOM converter failure for appdata REST api
>> [SHINDIG-1026 <https://issues.apache.org/jira/browse/SHINDIG-1026>] - fix
>> signing fetcher warning for empty path
>> [SHINDIG-1068 <https://issues.apache.org/jira/browse/SHINDIG-1068>] - Some
>> tests fail when building with IBM's JVM
>> [SHINDIG-1124 <https://issues.apache.org/jira/browse/SHINDIG-1124>] -
>> Upgrade to caja r3574
>> [SHINDIG-1126 <https://issues.apache.org/jira/browse/SHINDIG-1126>] -
>> Documentation error
>> [SHINDIG-1129 <https://issues.apache.org/jira/browse/SHINDIG-1129>] -
>> Dynamic height is over-calculated for Webkit-based browsers
>> [SHINDIG-1133 <https://issues.apache.org/jira/browse/SHINDIG-1133>] -
>> NullPointerException in RenderingGadgetRewriter
>> [SHINDIG-1134 <https://issues.apache.org/jira/browse/SHINDIG-1134>] -
>> JsonProperty Annotations not working properly for both
>> marshalling/unmarshalling
>>
> Improvement
>
>> [SHINDIG-678 <https://issues.apache.org/jira/browse/SHINDIG-678>] -
>> Autoloader chain
>> [SHINDIG-822 <https://issues.apache.org/jira/browse/SHINDIG-822>] - Remove
>> caja's dependence on opensocial feature
>> [SHINDIG-855 <https://issues.apache.org/jira/browse/SHINDIG-855>] - Enum
>> value should be checked if it is empty
>> [SHINDIG-856 <https://issues.apache.org/jira/browse/SHINDIG-856>] -
>> Defaults to cont...@type="html" when omitted
>> [SHINDIG-857 <https://issues.apache.org/jira/browse/SHINDIG-857>] - public
>> key id param key should be xoauth_public_key
>> [SHINDIG-1107 <https://issues.apache.org/jira/browse/SHINDIG-1107>] -
>> Clean up shindig dependencies
>> [SHINDIG-1135 <https://issues.apache.org/jira/browse/SHINDIG-1135>] - Bump
>> ehcache to 1.6.1
>>
>
> BETA1 issues not listed for brevity.  See web site for all 268 issues.
>

Reply via email to