Re: JCS packaging

2015-06-02 Thread Sebastiaan Couwenberg
On 05/31/2015 02:01 AM, Sebastiaan Couwenberg wrote: > On 04/27/2015 09:59 PM, Sebastiaan Couwenberg wrote: >> The new JOSM tested snapshot (8279) released today requires two >> additional Java dependencies: Commons JCS & Commons Logging, the latter >> is already packaged

Bug#779974: josm: invalid certificate (incomplete /etc/ssl/certs/java/cacert)

2015-08-26 Thread Sebastiaan Couwenberg
Hi Salvo & Java Team, As reported in the #779974 josm is not working for Salvo because the tile.openstreetmap.org SSL certificates are not trusted. This is caused by the /etc/ssl/certs/java/cacert list being incomplete, it doesn't include the entries other systems with ca-certificates-java have.

Re: Bug#779974: josm: invalid certificate (incomplete /etc/ssl/certs/java/cacert)

2015-08-26 Thread Sebastiaan Couwenberg
On 26-08-15 13:15, Salvo Tomaselli wrote: > I tried using it today again. > > I've noticed that after I get the initial error asking me to configure > a proxy, if I just hit "cancel" I can go on working normally. Shall we just close this bugreport, since a workaround is available? Kind Regards,

Re: Java problem when upgrading pixelmed

2015-10-08 Thread Sebastiaan Couwenberg
Hi Emmanuel, On 09-10-15 00:05, Emmanuel Bourg wrote: > Le 08/10/2015 13:40, Bas Couwenberg a écrit : > >> Due to the difficulties getting JCS [0] and its dependencies [1] >> packaged, I've not been able to update to any of the newer JOSM upstream >> releases making the josm package increasingly

Re: Java problem when upgrading pixelmed

2015-10-08 Thread Sebastiaan Couwenberg
On 09-10-15 00:58, Emmanuel Bourg wrote: > Le 08/10/2015 13:40, Bas Couwenberg a écrit : > >> Due to the difficulties getting JCS [0] and its dependencies [1] >> packaged, I've not been able to update to any of the newer JOSM upstream >> releases making the josm package increasingly irrelevant. An

Re: Java problem when upgrading pixelmed

2015-10-09 Thread Sebastiaan Couwenberg
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 09-10-15 17:06, Wookey wrote: > +++ Andreas Tille [2015-10-08 17:22 +0200]: >> Uhmmm, it would be a shame if we would loose JOSM. :-( > > A shame? - It would be a disaster! (Unless there is a replacement > with that offline functionality that I d

Moving JTS 1.13 to unstable, h2database & elasticsearch need changes

2015-11-07 Thread Sebastiaan Couwenberg
JTS 1.13 has been available in experimental for some time now, and I'd like to move it to unstable soon. We have GEOS 3.5.0 in unstable for some time too, but JTS 1.13 it's a port of is not in unstable yet. Because the two libjts-java reverse dependencies are both maintained by the Java team, I'd

Re: Moving JTS 1.13 to unstable, h2database & elasticsearch need changes

2015-11-10 Thread Sebastiaan Couwenberg
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 10-11-15 17:33, Markus Koschany wrote: > Am 07.11.2015 um 16:46 schrieb Sebastiaan Couwenberg: >> JTS 1.13 has been available in experimental for some time now, >> and I'd like to move it to unstable soon. We have GEOS 3.5.

Re: Hopefully final problems with maven rules (Re: Continuing work on qualimap)

2015-11-26 Thread Sebastiaan Couwenberg
On 26-11-15 08:53, Andreas Tille wrote: > [0] 'groupId' with value 'net/sf' does not match a valid id pattern. > [...] > The problem might be that there are two directories in sam.jar and I > have no good idea which one to use as groupId. I assumed net/sf would > be the right one - but either t

Re: Moving JTS 1.13 to unstable, h2database & elasticsearch need changes

2015-11-27 Thread Sebastiaan Couwenberg
On 10-11-15 22:26, Sebastiaan Couwenberg wrote: > On 10-11-15 17:33, Markus Koschany wrote: >> Am 07.11.2015 um 16:46 schrieb Sebastiaan Couwenberg: >>> JTS 1.13 has been available in experimental for some time now, >>> and I'd like to move it to unstable soon. We

JTS 1.14

2016-01-15 Thread Sebastiaan Couwenberg
JTS 1.14 was released a few days ago. It has split the project into separate artifacts on Maven Central [0] where the old 'jts' artefact is now 'jts-core'. The upstream SVN repository and its ant build.xml [1] do not build these individual artefacts. That has remained largely unchanged compared to

Re: gradle clean not called

2016-02-02 Thread Sebastiaan Couwenberg
On 02-02-16 13:47, Emmanuel Bourg wrote: > Le 2/02/2016 13:20, Felix Natter a écrit : >> "gradle clean" is not called when running "debian/rules clean". > > This is intended for several reasons: > - 'gradle clean' is horribly slow > - 'gradle clean' triggers the compilation of the buildSrc and oft

Re: JTS 1.14

2016-02-13 Thread Sebastiaan Couwenberg
I've done a round of rebuilds of the jts reverse dependencies, and all rebuilt successfully. So I see no issue moving JTS 1.14 to unstable. If you do, please speak up now, otherwise I'll upload JTS 1.14 to unstable next week. Transition: jts libjts-java (1.13+ds-1) -> libjts-java (1.14+ds-1~ex

Re: API changes tracker for Java libraries

2016-03-26 Thread Sebastiaan Couwenberg
On 03/26/2016 04:15 PM, Ponomarenko Andrey wrote: > I'd like to ask the community what other libraries would you like to see in > the tracker? Thanks for the very useful service. I'd like to suggest the important geospatial Java libraries: JTS [0], GeoTools [1] & Spatial4j [2]. [0] https://sourc

Re: RFS: svgsalamander/1.0.0+dfsg1-1

2016-07-30 Thread Sebastiaan Couwenberg
Hi Felix, I've had a look at your package and some comments follow. In general the package looks good, but there is room for improvement. Please consider bumping the debhelper compatibility to 9. Also change the LGPL-2.0 shortname to LGPL-2+ to better reflects the "or (at your option) any later

Re: Bug#832985: RFS: svgsalamander/1.0.0+dfsg1-1

2016-08-06 Thread Sebastiaan Couwenberg
Hi Felix, Thanks for your changes. On 08/06/2016 04:35 PM, Felix Natter wrote: > Sebastiaan Couwenberg writes: >> Consider adding the --parallel option to dh in debian/rules to enable >> the use of parallel builds with DEB_BUILD_OPTIONS="parallel=". > > done. (

libpgjava 9.4.1212-1 broke osmosis (PGObject class was removed)

2017-01-11 Thread Sebastiaan Couwenberg
The recent update of the libpgjava to 9.4.1212-1 has caused osmosis to FTBFS (#850993) which will cause its removal from stretch. Emmanuel, as the person who updated libpgjava, can you provide a patch for osmosis to make it work with the new libpgjava? Kind Regards, Bas -- GPG Key ID: 4096R/6

Re: libpgjava 9.4.1212-1 broke osmosis (PGObject class was removed)

2017-01-11 Thread Sebastiaan Couwenberg
Hi Emmanuel, Thanks for the quick feedback, and for updating libpgjava it was hopelessly outdated. On 01/11/2017 10:16 PM, Emmanuel Bourg wrote: > Le 11/01/2017 à 21:19, Sebastiaan Couwenberg a écrit : >> The recent update of the libpgjava to 9.4.1212-1 has caused osmosis to >>

Re: CVE-2017-5617: svgSalamander

2017-02-01 Thread Sebastiaan Couwenberg
Control: tags -1 pending On 02/01/2017 10:08 AM, Bas Couwenberg wrote: > On 2017-02-01 09:35, Bas Couwenberg wrote: >> Including the JOSM developers (josm-...@openstreetmap.org) is also a >> good idea, they (and Vincent Privat in particular) have contributed >> patches to svgSalamander recently. >

Re: CVE-2017-5617: svgSalamander

2017-02-02 Thread Sebastiaan Couwenberg
On 02/02/2017 07:44 AM, Sebastiaan Couwenberg wrote: > Control: tags -1 pending > > On 02/01/2017 10:08 AM, Bas Couwenberg wrote: >> On 2017-02-01 09:35, Bas Couwenberg wrote: >>> Including the JOSM developers (josm-...@openstreetmap.org) is also a >>> good

Re: CVE-2017-5617: svgSalamander

2017-02-03 Thread Sebastiaan Couwenberg
On 02/02/2017 07:09 PM, Sebastiaan Couwenberg wrote: > On 02/02/2017 07:44 AM, Sebastiaan Couwenberg wrote: >> On 02/01/2017 10:08 AM, Bas Couwenberg wrote: >>> On 2017-02-01 09:35, Bas Couwenberg wrote: >>>> Including the JOSM developers (josm-...@openstreetmap.org)

Fixing CVE-2017-5617 (SSRF) for svgsalamander

2017-02-03 Thread Sebastiaan Couwenberg
Dear Security Team, Vincent Privat of the JOSM development team have provided a fix for CVE-2017-5617 (#853134). I've included a patch with his changes in the Debian package, and uploaded it to unstable, and backported the patch for the jessie & wheezy packages. Affected versions: * jessie: 0~

Fixing CVE-2017-5617 (SSRF) for svgsalamander in wheezy

2017-02-03 Thread Sebastiaan Couwenberg
Dear LTS Team, Vincent Privat of the JOSM development team have provided a fix for CVE-2017-5617 (#853134). I've included a patch with his changes in the Debian package, and uploaded it to unstable, and backported the patch for the jessie & wheezy packages. Affected versions: * jessie: 0~svn95

Re: Fixing CVE-2017-5617 (SSRF) for svgsalamander

2017-02-03 Thread Sebastiaan Couwenberg
On 02/03/2017 10:13 AM, Moritz Muehlenhoff wrote: > On Fri, Feb 03, 2017 at 10:06:19AM +0100, Sebastiaan Couwenberg wrote: >> Fixed versions: >> >> * jessie: 0~svn95-1+deb8u1 >> * wheezy: 0~svn95-1+deb7u1 >> >> Are these changes OK for upload to secu

Re: Fixing CVE-2017-5617 (SSRF) for svgsalamander in wheezy

2017-02-03 Thread Sebastiaan Couwenberg
On 02/03/2017 11:06 AM, Guido Günther wrote: > On Fri, Feb 03, 2017 at 10:07:55AM +0100, Sebastiaan Couwenberg wrote: >> Dear LTS Team, >> >> Vincent Privat of the JOSM development team have provided a fix for >> CVE-2017-5617 (#853134). >> >> I've inc

Re: freeplane auto removal

2017-08-17 Thread Sebastiaan Couwenberg
On 08/17/2017 09:01 PM, Felix Natter wrote: > --> So what do I do with #870103, which is grave, but is not > reproducible and it seems it does not affect all users? Downgrade the severity to important. Kind Regards, Bas -- GPG Key ID: 4096R/6750F10AE88D4AF1 Fingerprint: 8182 DE41 7056 408D 61

Re: freeplane auto removal

2017-08-18 Thread Sebastiaan Couwenberg
On 08/18/2017 09:13 PM, Felix Natter wrote: > What am I missing? The mailer on your system is likely not sending the mails the bts utility generates correctly. Kind Regards, Bas -- GPG Key ID: 4096R/6750F10AE88D4AF1 Fingerprint: 8182 DE41 7056 408D 6146 50D1 6750 F10A E88D 4AF1

Re: freeplane auto removal

2017-08-19 Thread Sebastiaan Couwenberg
On 08/19/2017 10:11 AM, Felix Natter wrote: >> Am 18.08.2017 um 21:26 schrieb Sebastiaan Couwenberg : >> >>> On 08/18/2017 09:13 PM, Felix Natter wrote: >>> What am I missing? >> >> The mailer on your system is likely not sending the mails the bts >

Re: freeplane auto removal

2017-08-19 Thread Sebastiaan Couwenberg
On 08/19/2017 05:17 PM, Felix Natter wrote: > Sebastiaan Couwenberg writes: >> On 08/19/2017 10:11 AM, Felix Natter wrote: >>>> Am 18.08.2017 um 21:26 schrieb Sebastiaan Couwenberg : >>>> >>>>> On 08/18/2017 09:13 PM, Felix Natter wrote: >&

maven-debian-helper & module inter-dependencies

2017-12-15 Thread Sebastiaan Couwenberg
How should maven-debian-helper be used in a package that builds modules which depend on other jars in the project? The case in question is JTS 1.15 [0] which builds, among others, jts-core.jar which is required by the jts-io module. While building the latter the jts-core that was built earlier in

Re: maven-debian-helper & module inter-dependencies

2017-12-16 Thread Sebastiaan Couwenberg
On 12/15/2017 02:51 PM, Emmanuel Bourg wrote: > Le 15/12/2017 à 10:53, Sebastiaan Couwenberg a écrit : >> How should maven-debian-helper be used in a package that builds modules >> which depend on other jars in the project? >> >> The case in question is JTS 1.15 [0]

Re: maven-debian-helper & module inter-dependencies

2017-12-16 Thread Sebastiaan Couwenberg
On 12/16/2017 03:43 PM, Markus Koschany wrote: > Am 16.12.2017 um 14:03 schrieb Sebastiaan Couwenberg: > [...] >> Thanks for the feedback. Unfortunately I still cannot get the build to work. >> >> I'm giving up on this package, and request the Debian Java Ma

Re: maven-debian-helper & module inter-dependencies

2017-12-16 Thread Sebastiaan Couwenberg
On 12/16/2017 04:39 PM, Markus Koschany wrote: > Am 16.12.2017 um 15:52 schrieb Sebastiaan Couwenberg: >> On 12/16/2017 03:43 PM, Markus Koschany wrote: >>> Am 16.12.2017 um 14:03 schrieb Sebastiaan Couwenberg: >>> [...] >>>> Thanks for the feedback. Unfort

Re: maven-debian-helper & module inter-dependencies

2017-12-16 Thread Sebastiaan Couwenberg
On 12/16/2017 06:07 PM, Emmanuel Bourg wrote: > Le 16/12/2017 à 14:03, Sebastiaan Couwenberg a écrit : >> Thanks for the feedback. Unfortunately I still cannot get the build to work. > > I got a look and I committed a fix. This one was a bit tricky, it was > mostly about igno

Re: Import git repo from alioth to salsa

2018-02-01 Thread Sebastiaan Couwenberg
On 02/02/2018 12:31 AM, gregor herrmann wrote: > On Thu, 01 Feb 2018 17:13:53 +0100, Bas Couwenberg wrote: > >>> Mehdi Dogguy wrote some scripts performing most of these operations [1], >>> I'd like to assemble them into a unique script tailored for the Java >>> team. >> For the Debian GIS team I

Re: OpenJFX 9 integration

2018-04-03 Thread Sebastiaan Couwenberg
On 10/23/2017 01:00 AM, Emmanuel Bourg wrote: > Le 22/10/2017 à 12:57, Matthias Klose a écrit : >> (C) looks like the best workaround for now. Looking at at least four >> security >> releases per year, and maybe the double amount of package uploads, the >> OpenJDK >> package has a higher upload

Re: Bug#895619: plexus-compiler: use --release instead of -source/-target for jdk9+ when setting defaults

2018-07-02 Thread Sebastiaan Couwenberg
On 07/02/2018 05:26 PM, Emmanuel Bourg wrote: > Le 13/04/2018 à 17:14, Tiago Stürmer Daitx a écrit : > >> plexus-compiler currently will default -source and/or -target to 1.7 >> whenever the following occours: >> 1) whenever either has not being set >> 2) whenever either has been set to 1.6 or ear

Re: Minor update to libsvgsalamander-java

2018-09-23 Thread Sebastiaan Couwenberg
On 9/23/18 5:35 PM, Felix Natter wrote: > hello Debian-gis, > > for svgSalamander 1.1.2, a fix for CVE-2017-5617 [1] (#853134) was > upstreamed by Vincent Privat. > > [1] https://security-tracker.debian.org/tracker/CVE-2017-5617 > > However, upstream included the patch modified [2], with a flag

Re: Request to join Java team

2020-08-25 Thread Sebastiaan Couwenberg
On 8/25/20 11:06 PM, Emmanuel Bourg wrote: > On 25/08/2020 19:59, Mechtilde wrote: >> is it possible to use some of the commands in the script manually to fix >> some repos, I created before? > > I think we need a script to normalize the settings of the existing > repositories but I've never found

Re: Divergence in salsa.debian.org/java-team/xom

2021-08-25 Thread Sebastiaan Couwenberg
On 8/25/21 11:17 AM, Andrius Merkys wrote: > Any ideas how to solve this? Something like this may work. Import the changes from the NMU: gbp import-dsc /tmp/xom_1.2.10-1.1.dsc Review the changes since -1: git diff debian/1.2.10-1{,.1} debian/ Restore changes that were reverted by the NMU i

libjpf-java

2021-12-20 Thread Sebastiaan Couwenberg
libjpf-java is affected by an RC which in turn affects its rdepds like osmosis. I've updated the package in git to modernize the packaging. tony, do you want to make any changes before upload? Kind Regards, Bas -- GPG Key ID: 4096R/6750F10AE88D4AF1 Fingerprint: 8182 DE41 7056 408D 6146 50D

Re: libjpf-java

2021-12-20 Thread Sebastiaan Couwenberg
On 12/20/21 22:40, tony mancill wrote: On Mon, Dec 20, 2021 at 10:22:04PM +0100, Sebastiaan Couwenberg wrote: libjpf-java is affected by an RC which in turn affects its rdepds like osmosis. I've updated the package in git to modernize the packaging. tony, do you want to make any ch

javacc5 issues

2022-05-18 Thread Sebastiaan Couwenberg
javacc5 is not built on the buildds preventing testing migration: https://qa.debian.org/excuses.php?package=javacc5 This is why it's good practice to upload NEW packages to experimental, which can then be followed-up with a source-only upload to unstable. The git repo is empty: https://sal

Re: Tomcat 10 packaging

2022-09-28 Thread Sebastiaan Couwenberg
On 9/28/22 17:53, Emmanuel Bourg wrote: - the unique repository will probably have multiple upstream branches when Tomcat upgrades are uploaded to oldstable as part of the LTS, this may be tricky with gbp Just set debian-branch & upstream-branch accordingly in debian/gbp.conf. See for example

Intended use of ${maven:CompileDepends}

2023-11-11 Thread Sebastiaan Couwenberg
What's the intended use of the ${maven:CompileDepends} substvar? It shouldn't be added to Depends nor Built-Using. The dpkg-gencontrol warning makes it very tempting to add it to Depends as some package in the archive have incorrectly done. I've resorted to stripping it from the generated sub

Re: Removing freeplane 1.7.x from Debian?

2024-04-01 Thread Sebastiaan Couwenberg
On 4/1/24 8:49 AM, Felix Natter wrote: tony mancill writes: In my opinion we should be remove the outdated freeplane package from Debian. the only thing that speaks against this is the user comment in #1030150 [1]. Is it true that "as Debian (and many derivates) still ship with old JDK"? [2]

Re: About Freeplane

2024-09-15 Thread Sebastiaan Couwenberg
On 9/15/24 8:59 PM, stephane wrote: Would it be possible to upgrade the freeplane version in the next stable version ? Not easily as it requires a newer gradle which has proven near impossible to bootstrap See: https://lists.debian.org/debian-java/2024/03/msg00016.html Kind Regards, Bas --

Re: javadocs

2025-02-19 Thread Sebastiaan Couwenberg
On 2/19/25 9:31 AM, Julien Plissonneau Duquène wrote: Le 2025-02-19 09:08, Sebastiaan Couwenberg a écrit : Building something on top of snapshot.d.o might be feasible for separately maintained javadocs. I don't see how this could help to prevent the source package duplication, coul

Re: javadocs

2025-02-19 Thread Sebastiaan Couwenberg
On 2/19/25 8:57 AM, Julien Plissonneau Duquène wrote: Le 2025-02-18 10:59, Sebastiaan Couwenberg a écrit : I doubt those "other maintainers" have the discipline to target their uploads reintroducing -java-doc packages to experimental where they'll land after NEW processing.

Re: javadocs

2025-02-18 Thread Sebastiaan Couwenberg
On 2/18/25 10:46 AM, Julien Plissonneau Duquène wrote: I'm thus proposing the following policy from now on, to be revisited after the toolchain is fixed and we see how it goes with a few JDK and build tool updates (so maybe 3 years from now, let's say 2028): - maintainers may at their discretio