Sorry it turns out I'll need to get Santuario 3.0.4 out first. Do I have time to do this and WSS4J before the next CXF release?
Colm. On Tue, Feb 13, 2024 at 3:28 PM Freeman Fang <freeman.f...@gmail.com> wrote: > > Thanks Colm! > > On Tue, Feb 13, 2024 at 10:18 AM Colm O hEigeartaigh <cohei...@apache.org> > wrote: >> >> Yes, I'll call a vote today on WSS4J 3.0.3. >> >> Colm. >> >> On Tue, Feb 13, 2024 at 2:28 PM Freeman Fang <freeman.f...@gmail.com> wrote: >> > >> > +1 to release Apache CXF 4.0.4 >> > >> > @Colm O hEigeartaigh Any chance we could have a WSS4J 3.0.3 release soon? >> > >> > Thanks! >> > Freeman >> > >> > On Tue, Feb 13, 2024 at 7:15 AM Jiri Ondrusek <jondr...@redhat.com> wrote: >> >> >> >> Hi, >> >> >> >> just for your information, the PR >> >> (https://github.com/apache/cxf/pull/1660) >> >> requires version of wss4f to be 3.0.3 (to contain >> >> https://issues.apache.org/jira/browse/WSS-709) >> >> >> >> Best regards, >> >> Jiri >> >> >> >> On Tue, Feb 13, 2024 at 10:53 AM Peter Palaga <ppal...@redhat.com> wrote: >> >> >> >> > Thanks, great to hear that, Andriy. >> >> > >> >> > It would be great if we could get >> >> > https://github.com/apache/cxf/pull/1660 merged in some form before the >> >> > release. >> >> > The main motivation is to be able to run CXF on FIPS-enabled systems. If >> >> > the customized algo suite, that the PR proposes, is questionable, I'd be >> >> > also fine with introducing a couple of new suites with fixed >> >> > non-standard names, like already done in the past for fixing CVEs. It >> >> > would be nice to hear other community members' thoughts. >> >> > >> >> > Thanks again, >> >> > >> >> > -- Peter >> >> > >> >> > On 13/02/2024 02:35, Andriy Redko wrote: >> >> > > Hi Peter, >> >> > > >> >> > > Thanks a lot for reminding, I belive we are long overdue on that, >> >> > > @Dan, >> >> > @Colm >> >> > > may need your help please preparing the next release train (or any >> >> > objection folks)? >> >> > > Thank you! >> >> > > >> >> > > Best Regards, >> >> > > Andriy Redko >> >> > > >> >> > >> Hi, >> >> > >> we are preparing Quarkus CXF to release it for Quarkus 3.8 which is >> >> > going to be a LTS (Long Term Support) release. >> >> > >> I wonder whether we could count on getting CXF 4.0.4 by February 21st >> >> > to be able to use it in that release? >> >> > >> Thanks, >> >> > >> -- Peter >> >> > > >> >> > >> >> > >> >> >> >> -- >> >> Jiri Ondrusek <jondr...@redhat.com> >> >> Senior Software Engineer >> >> Red Hat Fuse
