log4j2 2.17 is (almost) released. https://mail-archives.apache.org/mod_mbox/logging-dev/202112.mbox/%3C66E7128B-B0FC-47AF-ABB3-BB360B40FAB6%40dslextreme.com%3E
should we bump the dependencies again, add the CommentServlet PR and spin another rc?
-michael On 14.12.21 23:09, Dave wrote:
I propose that we release Roller v6.1.0 based on the code that is currently in the master branch. I have prepared a release candidate and some release notes, below. Please vote in the next 72 hours to approve this release. +1 to release -1 not to release (with reasons) Thanks to Michael Bien for all his work since the 6.0.1 release on bug fixes, general improvements and dependency updates like the important one he made today to upgrade Log4j. The release candidate files are here: https://dist.apache.org/repos/dist/dev/roller/roller-6.1/v6.1.0/ Release notes This is a bug fix and dependency update release that includes all changes made to the master branch since Dev 27, 2019. It also includes the new patched Log4j release. This release should be a drop-in replacement of the previous v6.0.1 release. Here is a summary of the changes. All Pull Requests that were merged since Dec 27, 2019 https://github.com/apache/roller/pulls?q=is%3Apr+is%3Aclosed+is%3Amerged Bug resolved since Dec 27, 2019 https://issues.apache.org/jira/issues/?jql=project%20%3D%20ROL%20AND%20status%20in%20(Resolved%2C%20Closed)%20AND%20resolutiondate%20%3E%20%272019%2F12%2F27%27 And there is one database change: in the weblog table, the column blacklist has been renamed to bannedwordslist.
