Re: Going Emeritus ...

2025-02-13 Thread Woonsan Ko
Hi Siegfried, Sorry to hear that you are going emeritus. I recall I met you in Atlanta at a food-truck lunch. You showed me how I should behave in what I was doing in some projects. I also recall that you told me how Turbine got started. Lessons, priceless. Thank you very much! Cheers, Woonsan

Re: Going Emeritus ...

2025-02-13 Thread Eric Pugh
I remember those Turbine days! We’ll miss you, and the door is more then open to have you come back as things evolve/change! > On Feb 13, 2025, at 8:06 AM, Thomas Vandahl wrote: > > Hi Siggi, > >> Am 12.02.2025 um 20:57 schrieb Siegfried Goeschl >> : >> >> Hi folks, >> >> after long & car

Re: Going Emeritus ...

2025-02-13 Thread Siegfried Goeschl
Yes Sent from my iPhone > On 13.02.2025, at 14:12, Thomas Vandahl wrote: > > Hi Siggi, > >> Am 12.02.2025 um 20:57 schrieb Siegfried Goeschl >> : >> >> Hi folks, >> >> after long & careful consideration I decided to become an emeritus member. >> The good news is, that it has nothing to w

Re: is it meaningful to make a commons-bom or something?

2025-02-13 Thread Gilles Sadowski
Hi. Le lun. 10 févr. 2025 à 14:42, Xeno Amess a écrit : > > I really worried about if our repos can even runs in a same jvm(I mean > normally, not osgi or shading) > Maybe a commons-bom repo and monthly release be useful? Gary what do you > think? Please provide more details, and perhaps a speci

[ALL] SBOMs are still experimental

2025-02-13 Thread Gary Gregory
Hi All, [Piotr, Arnout, please correct me and clarify or refine what's below.] Apache Commons publishes SBOMs using the Maven plugins for SPDX and CycloneDX. We currently publish hashes and versions for dependencies in these SBOMs which will not be the case in the future as it is not the role of

Re: [ALL] Maven module expert needed please

2025-02-13 Thread sebb
On Thu, 13 Feb 2025 at 01:58, Xeno Amess wrote: > > > AFAICT the same problem does not apply to VFS, which is a multi-module > project. > because vfs has its all modules snapshot on snapshot repository ( As an experiment, I tried changing the snapshot version to 2.10.99-SNAPSHOT, which does not e

Re: Going Emeritus ...

2025-02-13 Thread Thomas Vandahl
Hi Siggi, > Am 12.02.2025 um 20:57 schrieb Siegfried Goeschl > : > > Hi folks, > > after long & careful consideration I decided to become an emeritus member. > The good news is, that it has nothing to with the ASF itself (and all of the > lengthy email threads). Having said that, I have nothi

Re: Commons Collections 3.2.2 End of Life?

2025-02-13 Thread Arnout Engelen
On Wed, Feb 12, 2025 at 4:22 PM Volodymyr Siedlecki wrote: > We are looking at collections4 as a possibility, but haven't determined if > we can upgrade yet. > That sounds reasonable. > The main issue is COLLECTIONS-701which is flagged by security scanners: > > ``` > The framework Apache Commo

[RESULT][VOTE] Release Apache Commons BeanUtils 1.10.1 based on RC1

2025-02-13 Thread Gary Gregory
This release vote passes with the following +1 votes: - Gary Gregory (ggregory, binding) - melloware...@gmail.com (non-binding) - Henri Biestro (binding, henrib) - Piotr P. Karwasz (binding, pkarwasz) TY all, Gary On Thu, Feb 13, 2025 at 6:08 AM Piotr P. Karwasz wrote: > > Hi Gary, > > On 31.01

Re: [VOTE] Release Apache Commons BeanUtils 1.10.1 based on RC1

2025-02-13 Thread Piotr P. Karwasz
Hi Gary, On 31.01.2025 16:34, Gary Gregory wrote: Please review the release candidate and vote. This vote will close no sooner than 72 hours from now. [ ] +1 Release these artifacts [ ] +0 OK, but... [ ] -0 OK, but really should fix... [ ] -1 I oppose this release because... I che

Re: [VOTE] Release Apache Commons VFS Project 2.10.0 based on RC1

2025-02-13 Thread Piotr P. Karwasz
Hi Gary, On 3.02.2025 00:26, Gary Gregory wrote: Please review the release candidate and vote. This vote will close no sooner than 72 hours from now. [ ] +1 Release these artifacts [ ] +0 OK, but... [ ] -0 OK, but really should fix... [ ] -1 I oppose this release because... The ha

Re: Commons Collections 3.2.2 End of Life?

2025-02-13 Thread Julian Reschke
Am 12.02.2025 um 16:22 schrieb Volodymyr Siedlecki: We are looking at collections4 as a possibility, but haven't determined if we can upgrade yet. The main issue is COLLECTIONS-701which is flagged by security scanners: ``` The framework Apache Commons Collections before 4.3 is vulnerable to St