Hi Colm, I think it would be good to have a release soon-ish, but by and large, I don't think we have hard deadline for it, please feel free to proceed as per your judgement. Thank you. Best Regards, Andriy Redko
> Sorry it turns out I'll need to get Santuario 3.0.4 out first. Do I > have time to do this and WSS4J before the next CXF release? > Colm. > On Tue, Feb 13, 2024 at 3:28 PM Freeman Fang <freeman.f...@gmail.com> wrote: >> Thanks Colm! >> On Tue, Feb 13, 2024 at 10:18 AM Colm O hEigeartaigh <cohei...@apache.org> >> wrote: >>> Yes, I'll call a vote today on WSS4J 3.0.3. >>> Colm. >>> On Tue, Feb 13, 2024 at 2:28 PM Freeman Fang <freeman.f...@gmail.com> wrote: >>>> +1 to release Apache CXF 4.0.4 >>>> @Colm O hEigeartaigh Any chance we could have a WSS4J 3.0.3 release soon? >>>> Thanks! >>>> Freeman >>>> On Tue, Feb 13, 2024 at 7:15 AM Jiri Ondrusek <jondr...@redhat.com> wrote: >>>>> Hi, >>>>> just for your information, the PR >>>>> (https://github.com/apache/cxf/pull/1660) >>>>> requires version of wss4f to be 3.0.3 (to contain >>>>> https://issues.apache.org/jira/browse/WSS-709) >>>>> Best regards, >>>>> Jiri >>>>> On Tue, Feb 13, 2024 at 10:53 AM Peter Palaga <ppal...@redhat.com> wrote: >>>>>> Thanks, great to hear that, Andriy. >>>>>> It would be great if we could get >>>>>> https://github.com/apache/cxf/pull/1660 merged in some form before the >>>>>> release. >>>>>> The main motivation is to be able to run CXF on FIPS-enabled systems. If >>>>>> the customized algo suite, that the PR proposes, is questionable, I'd be >>>>>> also fine with introducing a couple of new suites with fixed >>>>>> non-standard names, like already done in the past for fixing CVEs. It >>>>>> would be nice to hear other community members' thoughts. >>>>>> Thanks again, >>>>>> -- Peter >>>>>> On 13/02/2024 02:35, Andriy Redko wrote: >>>>>>> Hi Peter, >>>>>>> Thanks a lot for reminding, I belive we are long overdue on that, @Dan, >>>>>> @Colm >>>>>>> may need your help please preparing the next release train (or any >>>>>> objection folks)? >>>>>>> Thank you! >>>>>>> Best Regards, >>>>>>> Andriy Redko >>>>>>>> Hi, >>>>>>>> we are preparing Quarkus CXF to release it for Quarkus 3.8 which is >>>>>> going to be a LTS (Long Term Support) release. >>>>>>>> I wonder whether we could count on getting CXF 4.0.4 by February 21st >>>>>> to be able to use it in that release? >>>>>>>> Thanks, >>>>>>>> -- Peter >>>>> -- >>>>> Jiri Ondrusek <jondr...@redhat.com> >>>>> Senior Software Engineer >>>>> Red Hat Fuse
