Per an off-list request that the fix for https://issues.jasig.org/browse/UP-4210
that is https://github.com/Jasig/uPortal/commit/86426ad21745330d6a110c0c274aede54b65ef42#diff-d41d8cd98f00b204e9800998ecf8427e be included in 4.1.1, I’ll cherry-pick that in. Andrew From: Andrew Petro <[email protected]<mailto:[email protected]>> Reply-To: "[email protected]<mailto:[email protected]>" <[email protected]<mailto:[email protected]>> Date: Friday, August 22, 2014 at 10:41 AM To: "[email protected]<mailto:[email protected]>" <[email protected]<mailto:[email protected]>> Subject: Re:[uportal-dev] 4.1-patches FREEZE for 4.1.1 release uPortal developers, I apologize for the growingly ridiculous delay between freeze and actual release of 4.1.1. At the time of the freeze request my expectation was that blocking the Java CAS Client vulnerability, a primary purpose of the release, was going to be trivial and not require development of a Filter that did not yet exist. However, I do request that the branch remain frozen so that that release process can go to completion. ---- As I went to push the 4.1.1 release commits and tag just now, I ran into new commits on the branch that are not included in that release tag https://github.com/Jasig/uPortal/commits/rel-4-1-patches Since I had not yet released the 4.1.1 Maven artifacts via sonatype, I think I can drop the staged Maven artifacts, discard the local release commits, and try again on the 4.1.1 release process after updating my local 4.1-patches branch. I probably have a big enough chunk of uninterrupted time this evening to try again then on the 4.1.1 release process. Kind regards, Andrew From: Andrew Petro <[email protected]<mailto:[email protected]>> Date: Monday, August 11, 2014 at 1:08 PM To: "[email protected]<mailto:[email protected]>" <[email protected]<mailto:[email protected]>> Subject: 4.1-patches FREEZE for 4.1.1 release uPortal developers, I request that rel_4-1-patches FREEZE starting 5pm Eastern today for release of uPortal 4.1.1. 4.1.1 will consist of the change already in the branch regarding the Activity portlet using the portal’s jQuery as well as fixes for pending security issues. I expect to be able to start working through the 4.1.1 release process tonight. Kind regards, Andrew From: Andrew Petro <[email protected]<mailto:[email protected]>> Reply-To: "[email protected]<mailto:[email protected]>" <[email protected]<mailto:[email protected]>> Date: Monday, August 4, 2014 at 12:36 PM To: "[email protected]<mailto:[email protected]>" <[email protected]<mailto:[email protected]>> Subject: RE: [uportal-dev] uPortal 4.1.1 release march James, Yes, the primary purpose of the releases is to ship a fix for that pending security issue, executing in coordination with the initial vulnerability disclosure to adopters and the instructions for locally working around / locally patching short of upgrading to the fixed releases. So, actual timeline for when freeze-and-release executes is in flux and depends on working through the rest of this process. Conceivably may not even be this week. I'm guessing that gels mid-week, though, so the heads up to up-dev@ wrt the impending branch freezes. Kind regards, Andrew ________________________________ From:[email protected]<mailto:[email protected]> <[email protected]<mailto:[email protected]>> on behalf of James Wennmacher <[email protected]<mailto:[email protected]>> Sent: Monday, August 04, 2014 11:55 AM To: [email protected]<mailto:[email protected]> Subject: Re: [uportal-dev] uPortal 4.1.1 release march I assume this will include the recently-mentioned CAS security fix, along with a 4.0.x version? James Wennmacher - Unicon 480.558.2420 On 08/04/2014 06:20 AM, Andrew Petro wrote: uPortal developers, I intend to request a freeze of 4.1-patches to allow release of 4.1.1. I expect that process will be able to execute middle of this week sometime. Andrew Sent from my phone On Jul 31, 2014, at 11:34 PM, "Andrew Petro" <[email protected]<mailto:[email protected]>> wrote: That 4.1.1 patch release may be coming sooner than August 15th. Anyone have fixes not already on the minds of the typical release engineers that desperately need to be included in a 4.1.1 release (and couldn't comfortably wait until, say, sometime in September?) Kind regards, Andrew ________________________________ From: Andrew Petro Sent: Wednesday, July 16, 2014 1:31 PM To: [email protected]<mailto:[email protected]> Subject: uPortal 4.1.0 release now available [...snip...] I'd like to tentatively set the expectation that there will be a 4.1.1 patch release around August 15th, that is, a month out. It certainly doesn't have to be me cutting that release at that time, but I think that's the right timeline to be thinking about. -- You are currently subscribed to [email protected]<mailto:[email protected]> as: [email protected]<mailto:[email protected]> To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/uportal-dev -- You are currently subscribed to [email protected]<mailto:[email protected]> as: [email protected]<mailto:[email protected]> To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/uportal-dev -- You are currently subscribed to [email protected]<mailto:[email protected]> as: [email protected]<mailto:[email protected]> To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/uportal-dev -- You are currently subscribed to [email protected]<mailto:[email protected]> as: [email protected]<mailto:[email protected]> To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/uportal-dev -- You are currently subscribed to [email protected]<mailto:[email protected]> as: [email protected]<mailto:[email protected]> To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/uportal-dev -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/uportal-dev
