Sigs, hashes, release contents look good. Ant, Maven builds clean on OSX: 1.7.0_71, 1.8.0_45 Ubuntu: 1.6.0_43 Tests run clean against binary jar
+1 Thanks, Thomas! Phil On 11/25/15 3:20 PM, Thomas Neidhart wrote: > Hi all, > > we have accumulated enough changes since the last 4.0 release as well as > we need to provide a fix for the known remote code exploit via java > de-serialization. Therefore, I would like to start a vote to release > Commons Collections 4.1 based on RC2. > > Note: > > * The fix for the security related issue results in Clirr errors as > unsafe classes in the functor package do not implement the > Serializable interface anymore. This is mentioned in the release > notes. > > * There are 2 test failures with the IBM 6 JDK. The same failures were > reported for the 4.0 release and are related to a buggy Map > implementation in this JDK > > * Commons Collections 4.X does not successfully compile with JDK 9 EA > This will be tackled in a later release. > > Changes since RC1: > > * fixed compilation problems of test classes with some Java 8 compilers > * fixed some javadoc in IterableUtils and MultiValuedMap > * added travis configuration (only in the repository, not part of the > release) to help a RM by building with different jdks > > Collections 4.1 RC2 is available for review here: > https://dist.apache.org/repos/dist/dev/commons/collections/ > (svn revision 11307) > > Maven artifacts are here: > > https://repository.apache.org/content/repositories/orgapachecommons-1129/org/apache/commons/commons-collections4/4.1/ > > Details of changes since 4.0 are in the release notes: > > https://dist.apache.org/repos/dist/dev/commons/collections/RELEASE-NOTES.txt > > http://people.apache.org/builds/commons/collections/4.1/RC2/changes-report.html > > The tag is here: > > https://svn.apache.org/repos/asf/commons/proper/collections/tags/COLLECTIONS_4_1_RC2 > (svn revision 1716550) > > Site: > http://people.apache.org/builds/commons/collections/4.1/RC2/ > > Clirr Report (compared to 4.0): > > http://people.apache.org/builds/commons/collections/4.1/RC2/clirr-report.html > > RAT Report: > > http://people.apache.org/builds/commons/collections/4.1/RC2/rat-report.html > > KEYS: > https://www.apache.org/dist/commons/KEYS > > Please review the release candidate and vote. > > This vote will close no sooner than 24 hours from now, i.e. after 2400 > GMT 26-November 2015 > > [ ] +1 Release these artifacts > [ ] +0 OK, but... > [ ] -0 OK, but really should fix... > [ ] -1 I oppose this release because... > > Thanks, > > Thomas > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org > For additional commands, e-mail: dev-h...@commons.apache.org > > --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org For additional commands, e-mail: dev-h...@commons.apache.org
