Attendees: Michael Bouschen, Tilmann Zäschke, Craig Russell Next Meeting: Tuesday November 19 1100 PST 2000 CET
1. SBOM discussion see https://cwiki.apache.org/confluence/display/SECURITY/SBOM+Software+Bill+of+Materials Michael has started to try to create SBOM files using the CycloneDX plugin. Some issues are reported by the plugin. We are using a fairly old Apache parent pom which might cause issues. We need to find a version that allows us to compile the API. Also take a look at other dependencies. Try asking security-disc...@community.apache.org if we cannot figure it out. It appears that having an SBOM for the TCK is not really useful since no one runs the TCK in production. 2. JIRA JDO-844 "Add SampleReadQuery test methods with variables of type String" https://issues.apache.org/jira/projects/JDO/issues/JDO-844 PR #97 https://github.com/apache/db-jdo/pull/97 Overall looks good. Ok to merge. AI Michael see if it makes sense to add Map.contains(Entry e) to the JDO API. This would be useful to have queries where e.g. the user is interested in finding all Employees where the phone number is of key "home" and value "+16508617767". 3. JIRA JDO-842 "Q class specification of candidate() method" https://issues.apache.org/jira/browse/JDO-842 A new update to the specification has been merged into the branch. 4. JIRA JDO-812 "Move to JDK 11 as the lowest supported version" https://issues.apache.org/jira/browse/JDO-812 5. sonarcloud issues * JIRA JDO-819 "Code quality analysis" https://issues.apache.org/jira/browse/JDO-819 * JIRA JDO-823 "Fix sonarcloud issues of type Code Smells" https://issues.apache.org/jira/browse/JDO-823 * Sonarcloud link: https://sonarcloud.io/summary/overall?id=db-jdo * Cognitive Complexity of methods should not be too high: https://sonarcloud.io/project/issues?resolved=false&rules=java%3AS3776&severities=CRITICAL&types=CODE_SMELL&id=db-jdo * Raw types should not be used: https://sonarcloud.io/project/issues?resolved=false&rules=java%3AS3740&severities=MAJOR&id=db-jdo 6. Other issues Action Items from weeks past: [Nov 05 2024] AI Michael create a JIRA for containsEntry, include the current test case and we can continue from here. [Jul 13 2023] AI All Open a new JIRA for Android since having JNDI in the API disallows use with Android [Jun 08 2023] AI All make a JIRA: JDO support for Java Records https://openjdk.org/jeps/395 [Dec 09 2021] AI Craig: Try to contact all current/former participants in JDO development and see if and how they want to be recognized on the JDO and DB web sites.https://db.apache.org/whoweare.html [Oct 07 2021] AI Craig send a private message to all JSR-243 Expert Group members asking if they wish to continue. [Mar 25 2021] AI Craig: investigate "merging" papajdo and apache.clr accounts [Oct 17 2014] AI Matthew any updates for "Modify specification to address NoSQL datastores "https://issues.apache.org/jira/browse/JDO-651 Craig L Russell c...@apache.org
