Re: [All] RAT check fails on Jenkins but not locally

2022-01-23 Thread Bruno Kinoshita
Hi Gilles, You can click on the job link, then using the sidebar locate the link to "Workspace". There, navigate to the target directory and you should locate the report file. If logged in, the link is: https://ci-builds.apache.org/job/Commons/job/commons-imaging/ws/target/ It looks like I forgot

Re: [All] RAT check fails on Jenkins but not locally

2022-01-23 Thread Bruno Kinoshita
separate file will simplify both and make them more homogenous. Thanks Gilles! Bruno On Mon, 24 Jan 2022 at 14:24, Gilles Sadowski wrote: > Hello. > > Le lun. 24 janv. 2022 à 00:49, Bruno Kinoshita > a écrit : > > > > Hi Gilles, > > > > You can click on

Re: [All][Math] Jenkins: multiple branches (how to ...?)

2022-01-28 Thread Bruno Kinoshita
Normally I'd set up Jenkins jobs to build all branches in the main repo, similar to GitHub Actions. However, I'd normally use a git hook in the repo to avoid having Jenkins polling the server and getting faster builds. The only other ASF project I'm involved with that uses Jenkins is Jena, but the

Re: [All][Math] Jenkins: multiple branches (how to ...?)

2022-01-29 Thread Bruno Kinoshita
el Wed/Thu/Friday. So if you join you should be able to get it answered pretty quickly over the next week, or use JIRA if you don't want to use Slack, they normally respond quickly over there too. Bruno On Sun, 30 Jan 2022 at 08:02, Gilles Sadowski wrote: > Hello. > > Le v

Re: [All][Math] Jenkins: multiple branches (how to ...?)

2022-01-29 Thread Bruno Kinoshita
at 10:40, Bruno Kinoshita wrote: > Hi, > > There is a password entry form at >>https://the-asf.slack.com/ >> However, it is not the "apache.org" domain; thus I'm wary of >> supplying the ASF credentials there... >> > > Yes, for Slack I u

Re: Build failed in Jenkins: Commons » commons-codec #138

2022-02-19 Thread Bruno Kinoshita
Not sure, but the console output is similar to this build from 2 days ago, that also failed: https://ci-builds.apache.org/job/Commons/job/commons-codec/commons-codec$commons-codec/134/console Maybe it's due to Maven version, or to some Maven plugin? Travis/GH Actions appear to be running OK. -Bru

Re: [VOTE] Release Apache Commons Daemon 1.3.0 based on RC1

2022-03-14 Thread Bruno Kinoshita
On it, as soon as I have some spare time between tasks at $work. Voting in the next hours. Cheers, Bruno On Tue, 15 Mar 2022 at 09:48, Gary Gregory wrote: > Hi PMC folk, we need more reviews please. > > Gary > > On Fri, Mar 11, 2022, 08:32 Mark Thomas wrote: > > > Since the 1.2.4 release, the

Re: [VOTE] Release Apache Commons Daemon 1.3.0 based on RC1

2022-03-14 Thread Bruno Kinoshita
", arch: "amd64", family: "unix" Thanks Mark! Bruno On Tue, 15 Mar 2022 at 10:16, Bruno Kinoshita wrote: > On it, as soon as I have some spare time between tasks at $work. Voting in > the next hours. > > Cheers, > Bruno > > On Tue, 15 Mar 2022 at 09:48

Re: [DBCP] archive versions prior to Java 7

2022-03-15 Thread Bruno Kinoshita
+1 to archiving <7 versions. Thanks On Wed, 16 Mar 2022, 00:33 Gary Gregory, wrote: > Hi Sebb, > > I don't plan on supporting pre-Java 8 versions, others may feel different > of course. I say: go for it. > > Gary > > On Tue, Mar 15, 2022, 07:06 sebb wrote: > > > The DBCP versions for Java 6 an

Re: [lang] how to submit a proposal for a new component?

2022-04-27 Thread Bruno Kinoshita
Came here to suggest Commons Graph too. The GH repo had some recent-ish activity, Amey created some issues in JIRA too and submitted PR's. I haven't had time yet to look into that again, but I have a couple cases with graphs that I've been saving to have fun in either Graph or RDF/Jena. https://gi

Re: [dbutils] Project release cycle

2022-05-02 Thread Bruno Kinoshita
Hi, The reason is probably the lack of volunteer time by one of the committers. I am planning a release soon as I am leaving my current $work and must have 1 month in-between jobs to release components. I can try dbutils, but no promises since I never released it (not sure if I ever worked on it)

Re: [VOTE] Release Apache Commons Daemon 1.3.1 based on RC1

2022-05-04 Thread Bruno Kinoshita
[x] +1 Release these artifacts Building OK on Apache Maven 3.8.2 (ea98e05a04480131370aa0c110b8c54cf726c06f) Maven home: /opt/apache-maven-3.8.2 Java version: 11.0.15, vendor: Private Build, runtime: /usr/lib/jvm/java-11-openjdk-amd64 Default locale: en_US, platform encoding: UTF-8 OS name: "l

Re: [configuration] 2.8.0 Release Prep

2022-05-09 Thread Bruno Kinoshita
Nothing I can think of, but I will have a look tonight. There's one PR that I think I worked on some time ago, but not a must for this release. Thanks Matt! On Tue, 10 May 2022 at 14:50, Matt Juntunen wrote: > Hello, > > I'm getting ready to create the commons-configuration 2.8.0 release > and

[configuration] javamail 2.0 and javax.mail.* renamed to jakarta.mail.*

2022-05-09 Thread Bruno Kinoshita
Hi all, Was having a look at the pull requests and issues for Configuration, and found one from Dependabot where it's updating mailapi/javamail from 1.6 to 2.0.1 (2.0 was released Oct 2020 [1]). The 2.0 release includes a change in namespace, from javax.mail.* to jakarta.mail.*. I created CONFIG

Re: [configuration] 2.8.0 Release Prep

2022-05-09 Thread Bruno Kinoshita
d/worked too, if you'd like. Thanks!!! Bruno On Tue, 10 May 2022 at 14:57, Bruno Kinoshita wrote: > Nothing I can think of, but I will have a look tonight. There's one PR > that I think I worked on some time ago, but not a must for this release. > > Thanks Matt! > >

[imaging] Preparing vote for imaging-1-0-alpha3 (last alpha release)

2022-05-11 Thread Bruno Kinoshita
Hi, We have fixed all the issues that were raised as blockers for 1.0 some years ago (4? maybe 5 years ago?). I'm finishing the preparations for the 1.0-alpha3 vote for Imaging. It's the last alpha release I have planned. I started working on Imaging when I became curious if we could use it as an

[VOTE] Release Apache Commons Imaging 1.0-alpha3 based on RC1

2022-05-12 Thread Bruno Kinoshita
We have fixed quite a few bugs and added some significant enhancements since Apache Commons Imaging 1.0-alpha2 was released, so I would like to release Apache Commons Imaging 1.0-alpha3. Apache Commons Imaging 1.0-alpha3 RC1 is available for review here: https://dist.apache.org/repos/dist/dev/

Re: [imaging] Preparing vote for imaging-1-0-alpha3 (last alpha release)

2022-05-12 Thread Bruno Kinoshita
Thank you Matt! :) On Thu, 12 May 2022 at 22:16, Matt Benson wrote: > Nice job, Bruno! Thanks for pushing this. > > Matt > > On Wed, May 11, 2022, 11:32 PM Bruno Kinoshita > wrote: > > > Hi, > > > > We have fixed all the issues that were raised as blocke

Re: [imaging] Preparing vote for imaging-1-0-alpha3 (last alpha release)

2022-05-12 Thread Bruno Kinoshita
> > Anyway, I am looking forward to seeing the alpha-3 release be available via > the Maven Central Repository. Bruno has introduced some significant > improvements to the API. Having them available via Maven will be a boon to > the Java developer community. > > Thanks, > &g

Re: [VOTE] Release Apache Commons Imaging 1.0-alpha3 based on RC1

2022-05-12 Thread Bruno Kinoshita
;s/notes from pom.xml and upgrade to commons-parent-53 Thanks! -Bruno [1] https://github.com/apache/commons-imaging/blob/b1cfcaad38de7c30f7814a5b3d80e45fe2bd9af1/pom.xml#L29-L32 [2] https://github.com/apache/commons-imaging/blob/b1cfcaad38de7c30f7814a5b3d80e45fe2bd9af1/pom.xml#L29-L32 On Fri, 13

Re: [VOTE] Release Apache Commons Imaging 1.0-alpha3 based on RC1

2022-05-13 Thread Bruno Kinoshita
Hi Bruno > > > Am 13.05.2022 um 07:26 schrieb Bruno Kinoshita : > > > > > https://gitbox.apache.org/repos/asf?p=commons-imaging.git;a=commit;h=b1cfcaad38de7c30f7814a5b3d80e45fe2bd9af1 > > You may checkout this tag using: > >git clone https://gitbox.apache.org/repos/

[CANCEL][VOTE] Release Apache Commons Imaging 1.0-alpha3 based on RC1

2022-05-13 Thread Bruno Kinoshita
RC1 vote is cancelled due to an issue in the build related to a Maven Plug-in. I am preparing a new release at the moment. Thanks Bruno On Fri, 13 May 2022 at 17:26, Bruno Kinoshita wrote: > We have fixed quite a few bugs and added some significant enhancements > since Apache Commons I

[VOTE] Release Apache Commons Imaging 1.0-alpha3 based on RC2

2022-05-13 Thread Bruno Kinoshita
We have fixed quite a few bugs and added some significant enhancements since Apache Commons Imaging 1.0-alpha2 was released, so I would like to release Apache Commons Imaging 1.0-alpha3. Apache Commons Imaging 1.0-alpha3 RC2 is available for review here: https://dist.apache.org/repos/dist/dev/

Re: [VOTE] Release Apache Commons Imaging 1.0-alpha3 based on RC2

2022-05-15 Thread Bruno Kinoshita
commons PMC member) > > > > > > I've succesfully build the alpha release using > > > > > > mvn clean install site > > > > > > Apache Maven 3.6.3 (Red Hat 3.6.3-13) > > > Java version: 11.0.15, vendor: Red Hat, Inc., run

Re: [VOTE] Release Apache Commons Imaging 1.0-alpha3 based on RC2

2022-05-15 Thread Bruno Kinoshita
My own vote [x] +1 Release these artifacts Leaving the vote thread open until Wednesday or Thursday NZ time since I called it just before a weekend (and NZ is normally one day ahead, so giving more time if others want to test the RC2). Thanks! Bruno On Sat, 14 May 2022 at 00:02, Bruno

Re: [configuration] CONFIGURATION-753 Interpolation Consistency

2022-05-16 Thread Bruno Kinoshita
I've approved the PR, and also set the fixVersion for the next 2.8.0 release. This change doesn't break binary compatibility, but does change behavior/feature. Users who were - for one reason or another - handling array values, instead of the first value, will have to update their code after this

Re: [VOTE] Release Apache Commons Imaging 1.0-alpha3 based on RC2

2022-05-16 Thread Bruno Kinoshita
g a post-it to look into it after the release. Thanks Thomas -Bruno On Mon, 16 May 2022 at 21:18, Thomas Vandahl wrote: > Hi Bruno, > > > Am 13.05.2022 um 14:02 schrieb Bruno Kinoshita : > > > > We have fixed quite a few bugs and added some significant enhancements >

Re: [Crypto] How to build?

2022-05-18 Thread Bruno Kinoshita
Hi, There's a Dockerfile in the commons-crypto repo on GitHub. Not sure if it's used for building it... but just in case it helps. https://github.com/apache/commons-crypto/blob/master/src/conf/Docker/Dockerfile-luw -Bruno On Thu, 19 May 2022 at 07:58, Jochen Wiedmann wrote: > On Wed, May 18

[RESULT[[VOTE] Release Apache Commons Imaging 1.0-alpha3 based on RC2

2022-05-18 Thread Bruno Kinoshita
lot to everybody who voted and helped test this release, as well as other contributors and users that helped with the changes in it. -Bruno On Sat, 14 May 2022 at 00:02, Bruno Kinoshita wrote: > We have fixed quite a few bugs and added some significant enhancements > since Apache C

Fwd: [RESULT[[VOTE] Release Apache Commons Imaging 1.0-alpha3 based on RC2

2022-05-18 Thread Bruno Kinoshita
Forgot to include Gary Lucas' +1 (non-binding), sorry! Got confused with the Gary's when counting the votes, sorry :) -Bruno -- Forwarded message ----- From: Bruno Kinoshita Date: Thu, 19 May 2022 at 14:16 Subject: [RESULT[[VOTE] Release Apache Commons Imaging 1.0-alpha

[ANNOUNCEMENT] Apache Commons Imaging 1.0-alpha3 Released

2022-05-19 Thread Bruno Kinoshita
The Apache Commons Team is pleased to announce the availability of Apache Commons Imaging 1.0-alpha3. Apache Commons Imaging, previously known as Apache Commons Sanselan, is a library that reads and writes a variety of image formats, including fast parsing of image info (size, color space, ICC pro

Re: [ANNOUNCEMENT] Apache Commons Imaging 1.0-alpha3 Released

2022-05-19 Thread Bruno Kinoshita
put into this > release. > > Gary > > > On Thu, May 19, 2022 at 3:56 AM Bruno Kinoshita wrote: > > > The Apache Commons Team is pleased to announce the availability of > > Apache Commons Imaging 1.0-alpha3. > > > > Apache Commons Imaging, previously known a

[COMMONSITE] Patch to release notes and update commons.apache.org

2022-05-20 Thread Bruno Kinoshita
Hi all, After the Apache Commons Imaging 1.0-alpha3 I noticed the release instructions had a few things that needed to be updated. Could someone review this PR for the Release Plug-in (mainly typos) https://github.com/apache/commons-release-plugin/pull/113, and this other SVN diff for the Commons

Re: [COMMONSITE] Patch to release notes and update commons.apache.org

2022-05-20 Thread Bruno Kinoshita
pache.org/releases/release.html [2] https://github.com/apache/commons-imaging/tags On Fri, 20 May 2022 at 21:02, Bruno Kinoshita wrote: > Hi all, > > After the Apache Commons Imaging 1.0-alpha3 I noticed the release > instructions had a few things that needed to be updated. Could so

Re: [COMMONSITE] Patch to release notes and update commons.apache.org

2022-05-20 Thread Bruno Kinoshita
Ah, good to know. Thanks Gary! On Fri, 20 May 2022, 10:12 pm Gary Gregory, wrote: > The rel/ prefix is special to Apache and is supposed to be read-only. > > Gary > > On Fri, May 20, 2022, 05:06 Bruno Kinoshita wrote: > > > Almost forgot, quick question about the rele

Re: [text] Hexadecimal characters in decimal numeric entities

2022-05-20 Thread Bruno Kinoshita
Hi Richard, Thanks for the explanation and patience. Being a team of volunteers means that for some discussions and issues like this one we may take a while to find a solution/decision. I think the pull request/issue is valid since the code allows symbols without the semicolon to be escaped, but

Re: [commons-text] branch master updated: Bump checkstyle from 9.3 to 10.2

2022-05-21 Thread Bruno Kinoshita
Ah, good point. I saw builds in other projects failing, and the PR's being closed due to the upgrade, but looks like Text's GH Actions set up needs to be fixed too. The build for checkstyle passed (even though it appears to include Java 8), maybe it's not calling checkstyle. https://github.com/apa

Re: [commons-text] branch master updated: Bump checkstyle from 9.3 to 10.2

2022-05-21 Thread Bruno Kinoshita
d now the build passed. Thanks On Sun, 22 May 2022 at 10:39, Bruno Kinoshita wrote: > Ah, good point. I saw builds in other projects failing, and the PR's being > closed due to the upgrade, but looks like Text's GH Actions set up needs to > be fixed too. The build for checkstyl

Re: [commons-lang] 02/02: Add Spotbugs exclusions after dependabot update (no code modification)

2022-05-21 Thread Bruno Kinoshita
Hi Gary, Fair enough. I only checked on case, in the Functions.java where a generic type extends Throwable and triggers the issue in Spotbugs [1] But I agree other cases might be legit code smells that need fixing. I will revert the change on the master branch, and when/if Dependabot triggers a n

Re: [ALL] components still using Travis

2022-05-26 Thread Bruno Kinoshita
+1 Thanks Alex! On Fri, 27 May 2022, 3:13 am Alex Herbert, wrote: > Continuing the thread about switching Travis to GitHub actions... > > Commons RNG has been running travis and GH actions in parallel now for 6 > weeks as an experiment. > > Some PRs have been missed by Travis. The master branch

Re: [compress]

2022-06-03 Thread Bruno Kinoshita
Hi Hans, Thanks for pointing that out. I had a look at the latest version of that page in GitHub, and it looks like some CVEs were added post-release: https://github.com/apache/commons-compress/blob/master/src/site/xdoc/security-reports.xml I tried building it locally to deploy a new version, but

Re: [Validator] Update to Java 8 and from Apache Commons Collections 3.x to 4.x

2022-06-06 Thread Bruno Kinoshita
+1 On Tue, 7 Jun 2022 at 01:43, Gary Gregory wrote: > Hi All: > > I propose that we migrate Validator from Java 7 to 8 and from Apache > Commons Collections 3.x to 4.x. > > Thoughts? > > Gary > > - > To unsubscribe, e-mail: dev-

Re: [collections] EOL 3.x?

2022-06-06 Thread Bruno Kinoshita
Hi Gary, No objections from me. I can't recall if we did that for other components. We could also, I think, have a document for Commons to reference when releasing a major version update of a component. In that document we could explain we are a team of volunteers, that if 4.x is out, users can o

Re: [configuration] Jakarta mailapi 2.0.1

2022-06-11 Thread Bruno Kinoshita
No objections from me. I'm +1 to normally killing old code too, but I think in this case it might be simple to keep both working in [configuration] as users appear to be still transitioning JEE apps to the jakarta namespace. We might just need to remember to remove the old package/namespace when we

Re: [VOTE] Release Apache Commons Configuration 2.8 based on RC1

2022-06-20 Thread Bruno Kinoshita
Hi Matt, Inspected NOTICE, LICENSE, RELEASE-NOTES, and found no issues. Checked out the tag, and `mvn clean test install site` passed with no errors. The README is still showing 2.7 in the download instructions. I **think** one of the preparation steps uses a release-plugin goal that re-generates

Re: [VOTE] Release Apache Commons Configuration 2.8 based on RC2

2022-06-21 Thread Bruno Kinoshita
[x] +1 Release these artifacts Thanks Matt! -Bruno On Wed, 22 Jun 2022 at 15:47, Matt Juntunen wrote: > We have fixed quite a few bugs and added some significant enhancements > since Apache Commons Configuration 2.7 was released, so I would like > to release Apache Commons Configuration 2.

Re: [VOTE] Release Apache Commons Configuration 2.8.0 based on RC3

2022-07-02 Thread Bruno Kinoshita
Missed this RC, sorry. Thanks for the reminder, on it. On Sun, 3 Jul 2022 at 16:35, Matt Juntunen wrote: > Could we get some votes on RC3, please? > > Regards, > Matt J > > On Fri, Jul 1, 2022 at 8:23 AM Gary Gregory > wrote: > > > > Well, not fix the warnings since these are in generated code

Re: [VOTE] Release Apache Commons Configuration 2.8.0 based on RC3

2022-07-02 Thread Bruno Kinoshita
[x] +1 Release these artifacts Building tag OK with mvn clean test install site -e -X on Apache Maven 3.8.5 (3599d3414f046de2324203b78ddcf9b5e4388aa0) Maven home: /opt/apache-maven-3.8.5 Java version: 17.0.3, vendor: Private Build, runtime: /usr/lib/jvm/java-17-openjdk-amd64 Default locale: en_US

Re: [collections] JMH results for IndexedLinkedList

2022-07-10 Thread Bruno Kinoshita
Hi Rodde, It has been almost a week since your last response. Did you take a look at > my work? > Please note that we are all volunteers here, so sometimes we may be able to respond quickly, others we may take a few days/weeks/months/... I know Matt is active in other Apache mailing lists, and t

Re: Integration of commons-math into oss-fuzz

2022-07-21 Thread Bruno Kinoshita
Hi There is an oss-fuzz project for commons where multiple modules are hosted (I am sure Imaging is there, and I think Compress too). It is a single project with fuzzers for different components. I think it may be simpler to add your new fuzzer there. That project had some changes in the reporti

Re: Re: Re: [fileupload] Have a FileUpload release (after 3.5 years)

2022-08-05 Thread Bruno Kinoshita
Is anyone able to make a summary of what's necessary for the release? I read the thread and looked at the latest commits for commons-fileupload, and from what I understand the RM would need to: - Locate and remove any code marked as deprecated, updating the changes.xml & release notes afterwards -

Re: [CSV] New feature to allow access to leading/trailing comments in CSV files?

2022-09-06 Thread Bruno Kinoshita
Hi Peter, I think not keeping comments may help with memory management in cases where you have an enormous amount of comments, or maybe speed up processing if you discard them? Not sure. But in any case, if you already have the patch working, I'd suggest 1) taking a look at the JIRA of CSV and se

Re: [DRAFT] Board report

2022-09-12 Thread Bruno Kinoshita
+1 On Tue, 13 Sept 2022 at 10:57, Gary Gregory wrote: > Here the board report I plan to submit tomorrow at the latest: > > ## Description: > The mission of Apache Commons is the creation and maintenance of Java > focused > reusable libraries and components > > ## Issues: > There are no issues re

Re: [VOTE][LAZY] Release Apache Commons Parent 54 based on RC1

2022-09-18 Thread Bruno Kinoshita
[x] +1 Release these artifacts Thanks! On Mon, 19 Sept 2022 at 03:47, Gary Gregory wrote: > We have fixed a few bugs and added enhancements since Apache Commons > Parent 53 was released, so I would like to release Apache Commons > Parent 54. > > Apache Commons Parent 54 RC1 is available for

Re: [VOTE] Release Apache Commons Text 1.10.0 based on RC1

2022-09-24 Thread Bruno Kinoshita
[x] +1 Release these artifacts Build passed with no issues, with `mvn clean test install site -e -x` on kinow@ranma:~/Development/java/apache/commons-text$ mvn -v Apache Maven 3.8.5 (3599d3414f046de2324203b78ddcf9b5e4388aa0) Maven home: /opt/apache-maven-3.8.5 Java version: 17.0.4, vendor: Privat

Re: [VOTE] Release Apache Commons Text 1.10.0 based on RC1

2022-09-24 Thread Bruno Kinoshita
these are to be used by cyclonedx.org and spdx.dev, for SBOM (out of the loop, sorry). Shouldn't be a problem as these provide more metadata about artefacts, build, provenance, and security, so +1 On Sun, 25 Sept 2022 at 11:58, Bruno Kinoshita wrote: > [x] +1 Release these artifacts > >

Re: [VOTE] Release Apache Commons Daemon 1.3.2 based on RC1

2022-10-07 Thread Bruno Kinoshita
[x] +1 Release these artifacts Built from tag with mvn clean test install site on Apache Maven 3.8.5 (3599d3414f046de2324203b78ddcf9b5e4388aa0) Maven home: /opt/apache-maven-3.8.5 Java version: 17.0.4, vendor: Private Build, runtime: /usr/lib/jvm/java-17-openjdk-amd64 Default locale: en_US, p

Re: [VOTE] Release Apache Commons BCEL 6.6.0 based on RC1

2022-10-08 Thread Bruno Kinoshita
[x] +1 Release these artifacts (assuming the changes.xml date can be fixed later) Build passed with no issues, running `mvn clean test install site` on Apache Maven 3.8.5 (3599d3414f046de2324203b78ddcf9b5e4388aa0) Maven home: /opt/apache-maven-3.8.5 Java version: 17.0.4, vendor: Private Build

Re: [VOTE][RC1] Release Commons RNG 1.5

2022-10-09 Thread Bruno Kinoshita
I have 20 mins before a quick dinner and meeting. Cloning the repository now. On Mon, 10 Oct 2022 at 19:38, Alex Herbert wrote: > Can I get another PMC vote for this please? > > Thanks, > > Alex > > On Wed, 5 Oct 2022 at 11:25, Alex Herbert wrote: > > > We have fixed quite a few bugs and added

Re: [VOTE][RC1] Release Commons RNG 1.5

2022-10-10 Thread Bruno Kinoshita
age. Also had a very brief look at the Maven repository and everything seems to be OK (expected files are present, non-empty; didn't have time to check signatures of maven staged repo, sorry). Thanks! Bruno On Mon, 10 Oct 2022 at 19:42, Bruno Kinoshita wrote: > I have 20 mins before a q

Re: [VOTE][RC1] Release Commons RNG 1.5

2022-10-10 Thread Bruno Kinoshita
at 01:53, Alex Herbert wrote: > On Mon, 10 Oct 2022 at 09:22, Alex Herbert > wrote: > > > > > > On Mon, 10 Oct 2022 at 08:26, Bruno Kinoshita wrote: > >> > >> > >> Changes report > >> look OK too, confirmed the Java version in the des

Re: [VOTE][RC1] Release Commons RNG 1.5

2022-10-10 Thread Bruno Kinoshita
(I mean, to customize RNG's CONTRIBUTING.md to add that info, not the templated file from the parent or release-plugin) On Tue, 11 Oct 2022 at 09:37, Bruno Kinoshita wrote: > Hi Alex, > > The updated changes report looks great! > > The Unit Tests [2] looks really useful to

Re: Re: [jxpath] reported CVE and path forward

2022-10-10 Thread Bruno Kinoshita
Hi Matt, I am also subscribed to oss-fuzz for Imaging. Looks like someone added jxpath to oss-fuzz here: https://github.com/google/oss-fuzz/pull/7582 The initial oss-fuzz for ASF was, if I recall correctly, all put under a single project: https://github.com/google/oss-fuzz/tree/master/projects/a

Re: [jxpath] reported CVE and path forward

2022-10-10 Thread Bruno Kinoshita
Hi, I commented in another thread about oss-fuzz and new components, maybe that could be part of the issue here. See that thread in the archives, or TL;DR: someone is adding more Commons Components to oss-fuzz, directly as components instead of using the shared apache-commons project. This latter

Re: [jxpath] reported CVE and path forward

2022-10-10 Thread Bruno Kinoshita
ed as a bug and > fix as applicable? > > > Get Outlook for iOS<https://aka.ms/o0ukef> > > From: Bruno Kinoshita > Sent: Monday, October 10, 2022 3:51:30 PM > To: Commons Developers List > Subject: Re: Re: [jxpath] reported CVE

Re: [jxpath] reported CVE and path forward

2022-10-10 Thread Bruno Kinoshita
commons-jxpath/mail-lists.html > 2. https://commons.apache.org/proper/commons-jxpath/issue-tracking.html > > > Get Outlook for iOS<https://aka.ms/o0ukef> > > From: Bruno Kinoshita > Sent: Monday, October 10, 2022 4:15:03 PM > To: Com

Re: [jxpath] reported CVE and path forward

2022-10-10 Thread Bruno Kinoshita
rity process to tackle the issue and release a new version. -Bruno On Tue, 11 Oct 2022 at 10:36, Bruno Kinoshita wrote: > Hi Eric, > > As far as I know, there is no integration between issues found in OSS Fuzz > and our JIRA. Issues reported in OSS Fuzz exist only there. And securi

Re: [jxpath] reported CVE and path forward

2022-10-10 Thread Bruno Kinoshita
S project > staffed with Google employees. > > On Mon, Oct 10, 2022 at 4:41 PM Bruno Kinoshita wrote: > > > > The JIRA issue linked appears to be one of those reported based on the > > existing CVE's that were generated for jxpath. > > > > I opened the CV

Re: [VOTE] Release Apache Commons CSV 1.10.0 based on RC1

2022-10-16 Thread Bruno Kinoshita
+1 Built successfully from tag, using: Apache Maven 3.8.5 (3599d3414f046de2324203b78ddcf9b5e4388aa0) Maven home: /opt/apache-maven-3.8.5 Java version: 17.0.4, vendor: Private Build, runtime: /usr/lib/jvm/java-17-openjdk-amd64 Default locale: en_US, platform encoding: UTF-8 OS name: "linux", versi

Re: Publish statement on Commons Text CVE

2022-10-19 Thread Bruno Kinoshita
I had a look at the browser network tab, and saw an HTTP 302 location redirect from Varnish. These redirects normally need to be configured in Varnish with some sort of rule. I went back to your email, grabbed the SVN URL, stepped up a few directories and saw an .htaccess at a parent level, that h

Re: Publish statement on Commons Text CVE

2022-10-19 Thread Bruno Kinoshita
gt; wrote: > > > > Thank you for the brilliant detective work Bruno! > > > > Gary > > > > On Wed, Oct 19, 2022, 16:16 Bruno Kinoshita wrote: > >> > >> I had a look at the browser network tab, and saw an HTTP 302 location > >> redirect from

Re: [VOTE] Release Apache Commons Compress 1.22 based on RC1

2022-10-27 Thread Bruno Kinoshita
Hi Matt, 1) Clone and checkout the RC tag > > git clone https://gitbox.apache.org/repos/asf/commons-compress.git > --branch commons-compress-1.22-RC1 commons-compress-1.22-RC1 > cd commons-compress-1.22-RC1 > Tried checking it out after `git fetch --all --tags`, but found nothing. Opened gitbox a

Re: [VOTE] Release Apache Commons Compress 1.22 based on RC1

2022-10-28 Thread Bruno Kinoshita
liased to the RC1 tag, but it appears I might not have pushed the > second tag. I’ll fix the tag later today, though in the meantime, you can > use the same tag without “-RC1” appended. > > > On Oct 27, 2022, at 9:38 PM, Bruno Kinoshita wrote: > > > > Hi Matt, > > &

Re: [VOTE] Release Apache Commons Numbers 1.1 based on RC1

2022-10-28 Thread Bruno Kinoshita
Hi Alex, [x] +1 Release these artifacts Built from tag, with `mvn clean test install site` using Apache Maven 3.8.5 (3599d3414f046de2324203b78ddcf9b5e4388aa0) Maven home: /opt/apache-maven-3.8.5 Java version: 17.0.4, vendor: Private Build, runtime: /usr/lib/jvm/java-17-openjdk-amd64 Default lo

Re: [VOTE] Release Apache Commons Numbers 1.1 based on RC1

2022-10-28 Thread Bruno Kinoshita
Ah good spot Alex. I believe we can sort out these site issues after the release if needed (in case the site is rendered correctly after the release/deploy). Bruno On Sat, 29 Oct 2022, 9:55 am Alex Herbert, wrote: > I included the wrong link to the changes report. It is here: > > > https://home

Re: [VOTE] Release Apache Commons BCEL 6.6.1 based on RC2

2022-10-31 Thread Bruno Kinoshita
[x] +1 Release these artifacts Build passing OK from tag, with `mvn clean test install site` on: Apache Maven 3.8.5 (3599d3414f046de2324203b78ddcf9b5e4388aa0) Maven home: /opt/apache-maven-3.8.5 Java version: 17.0.4, vendor: Private Build, runtime: /usr/lib/jvm/java-17-openjdk-amd64 Default lo

Re: [ANNOUNCEMENT] Apache Commons BCEL 6.6.1

2022-11-03 Thread Bruno Kinoshita
I think by accident the announcement email message has SNAPSHOT in the version. The subject has the correct version. Thanks for RM'ing Gary! Bruno On Thu, 3 Nov 2022, 11:17 pm Gary Gregory, wrote: > The Apache Commons BCEL team is pleased to announce the release of > Apache Commons BCEL 6.6.1

Re: [VOTE] Release Apache Commons BCEL 6.7.0 based on RC1

2022-11-28 Thread Bruno Kinoshita
[x] +1 Release these artifacts Building OK from tag with: Apache Maven 3.8.5 (3599d3414f046de2324203b78ddcf9b5e4388aa0) Maven home: /opt/apache-maven-3.8.5 Java version: 17.0.5, vendor: Private Build, runtime: /usr/lib/jvm/java-17-openjdk-amd64 Default locale: en_US, platform encoding: UTF-8 O

Re: [VOTE] Release Apache Commons Daemon 1.3.3 based on RC1

2022-11-28 Thread Bruno Kinoshita
+1 Tested from tag on: Apache Maven 3.8.5 (3599d3414f046de2324203b78ddcf9b5e4388aa0) Maven home: /opt/apache-maven-3.8.5 Java version: 17.0.5, vendor: Private Build, runtime: /usr/lib/jvm/java-17-openjdk-amd64 Default locale: en_US, platform encoding: UTF-8 OS name: "linux", version: "5.15.0-53-g

Re: [VOTE] Release Apache Commons Net 3.9.0 based on RC1

2022-11-28 Thread Bruno Kinoshita
[X] +1 Release these artifacts Building OK from the tag, with `mvn clean test install site` on: Apache Maven 3.8.5 (3599d3414f046de2324203b78ddcf9b5e4388aa0) Maven home: /opt/apache-maven-3.8.5 Java version: 17.0.5, vendor: Private Build, runtime: /usr/lib/jvm/java-17-openjdk-amd64 Default loc

Re: [VOTE] Release Apache Commons Statistics 1.0 based on RC1

2022-12-05 Thread Bruno Kinoshita
[x] +1 Release these artifacts Tested with Apache Maven 3.8.5 (3599d3414f046de2324203b78ddcf9b5e4388aa0) Maven home: /opt/apache-maven-3.8.5 Java version: 17.0.5, vendor: Private Build, runtime: /usr/lib/jvm/java-17-openjdk-amd64 Default locale: en_US, platform encoding: UTF-8 OS name: "linux"

Re: [rng][lang] Shuffling arrays

2022-12-06 Thread Bruno Kinoshita
Hi Alex, I also don't have a use case for this right now. What about creating a JIRA issue to wait to see if someone has the need for this feature? Maybe users will confirm they need it, or provide other suggestions? -Bruno On Tue, 6 Dec 2022 at 15:36, Alex Herbert wrote: > Currently the [rng

Re: [imaging] I want to know the roadmap up to the version 1.0 in the future

2022-12-08 Thread Bruno Kinoshita
No objection from me :) 1.0b or 1.0, doing any progress on [Imaging] would be grand. -Bruno On Thu, 8 Dec 2022 at 17:11, Gilles Sadowski wrote: > [Moving to "dev" ML...] > > Le jeu. 8 déc. 2022 à 16:56, Gary Gregory a > écrit : > > > > Since we had alpha releases, should we have a beta? > > +1

Re: [VOTE][RC1] Release Commons Math 4.0-beta1

2022-12-15 Thread Bruno Kinoshita
[x] +1 Release it. Didn't have time to look at all reports, so ignored the legacy modules, and looked briefly just at spotbugs/rat/checkstyle/pmd. Forgot to check coverage. But it's looking good for a beta release IMO. Built from tag with `mvn` on: Apache Maven 3.8.5 (3599d3414f046de2324203b78d

Re: [VOTE] Release Apache Commons Crypto 1.2.0 based on RC1

2023-01-15 Thread Bruno Kinoshita
Built from git tag with Apache Maven 3.8.5 (3599d3414f046de2324203b78ddcf9b5e4388aa0) Maven home: /opt/apache-maven-3.8.5 Java version: 17.0.5, vendor: Private Build, runtime: /usr/lib/jvm/java-17-openjdk-amd64 Default locale: en_US, platform encoding: UTF-8 OS name: "linux", version: "5.15.0-57-g

Re: [VOTE] Release Apache Commons Crypto 1.2.0 based on RC1

2023-01-15 Thread Bruno Kinoshita
Bruno, > > > > Thank you for reviewing. What does "openssl version" say for you? We only > > support 1.1.1. > > > > Gary > > > > > > On Sun, Jan 15, 2023, 08:54 Bruno Kinoshita wrote: > > > >> Built from git tag with >

Re: [VOTE] Release Apache Commons CSV 1.10.0 based on RC2

2023-01-28 Thread Bruno Kinoshita
[x] +1 Release these artifacts Built from tag with `mvn clean test install site` with no issues, on Apache Maven 3.8.5 (3599d3414f046de2324203b78ddcf9b5e4388aa0) Maven home: /opt/apache-maven-3.8.5 Java version: 17.0.5, vendor: Private Build, runtime: /usr/lib/jvm/java-17-openjdk-amd64 Default

Re: [VOTE] Release Apache Commons CSV 1.10.0 based on RC2

2023-01-31 Thread Bruno Kinoshita
install site` with no issues, on > >> > >> Apache Maven 3.8.1 (05c21c65bdfed0f71a2f2ada8b84da59348c4c5d) > >> Maven home: /opt/apache-maven-3.8.1 > >> Java version: 17.0.2, vendor: Oracle Corporation, runtime: > >> /Library/Java/JavaVirtualMachines/jdk-17.0

Re: [VOTE] Release Apache Commons FileUpload 1.5 based on RC1

2023-02-01 Thread Bruno Kinoshita
[x] +1 Release these artifacts Build passing from tag, with `mvn clean test install site` on Apache Maven 3.8.5 (3599d3414f046de2324203b78ddcf9b5e4388aa0) Maven home: /opt/apache-maven-3.8.5 Java version: 1.8.0_352, vendor: Private Build, runtime: /usr/lib/jvm/java-8-openjdk-amd64/jre Defaul

Re: [VOTE] Release Apache Commons CSV 1.10.0 based on RC2

2023-02-01 Thread Bruno Kinoshita
Been there and done that too, Arturo. Thanks for confirming and for testing the release & voting,! -Bruno On Wed, 1 Feb 2023 at 21:09, Arturo Bernal wrote: > Hi, > > My problem was as Bruno say a sub folder. > > Everything looks ok now. > > Tested with ```mvn -v``` > > Maven home: /opt/apache-m

Re: [Beanutils] BeanUtilsBean2

2023-02-09 Thread Bruno Kinoshita
+1 BeanUtilsBean2 extends BeanUtilsBean. Merging the two into a single class sounds OK for a major release and a good simplification. -Bruno On Thu, 9 Feb 2023 at 13:47, Gary Gregory wrote: > For 2.0, I think we should make the BeanUtilsBean2 class introduced in > 1.8.0 the only behavior, remo

Re: [text] Performance regression in StringMatcher (used by StringSubstitutor) v1.9+

2023-02-09 Thread Bruno Kinoshita
Hi David, however there’s no public signup for the ASF Jira anymore. I’m hoping my > report here will suffice. If not, please create an account for me and I’ll > file a proper ticket for it. > If you provide this information we can set up an account for you (sorry about this two-step process; our

Re: [VOTE] Release Apache Commons JEXL 3.3 based on RC1

2023-03-14 Thread Bruno Kinoshita
+1 Building OK from tag, with Apache Maven 3.8.5 (3599d3414f046de2324203b78ddcf9b5e4388aa0) Maven home: /opt/apache-maven-3.8.5 Java version: 17.0.6, vendor: Private Build, runtime: /usr/lib/jvm/java-17-openjdk-amd64 Default locale: en_US, platform encoding: UTF-8 OS name: "linux", version: "5.15

Re: [VOTE] Release Apache Commons JEXL 3.3 based on RC2

2023-03-17 Thread Bruno Kinoshita
+1 Built from tag with Apache Maven 3.8.5 (3599d3414f046de2324203b78ddcf9b5e4388aa0) Maven home: /opt/apache-maven-3.8.5 Java version: 17.0.6, vendor: Private Build, runtime: /usr/lib/jvm/java-17-openjdk-amd64 Default locale: en_US, platform encoding: UTF-8 OS name: "linux", version: "5.15.0-67-g

Re: [VOTE] Release Apache Commons Compress 1.23.0 based on RC1

2023-03-20 Thread Bruno Kinoshita
+1 Built from the tag with Apache Maven 3.8.5 (3599d3414f046de2324203b78ddcf9b5e4388aa0) Maven home: /opt/apache-maven-3.8.5 Java version: 17.0.6, vendor: Private Build, runtime: /usr/lib/jvm/java-17-openjdk-amd64 Default locale: en_US, platform encoding: UTF-8 OS name: "linux", version: "5.15.0-

Re: [VOTE] Release Apache Commons Configuration 2.9.0 based on RC1

2023-03-27 Thread Bruno Kinoshita
[x] +1 Release these artifacts Tested from tag with: Apache Maven 3.8.5 (3599d3414f046de2324203b78ddcf9b5e4388aa0) Maven home: /opt/apache-maven-3.8.5 Java version: 17.0.6, vendor: Private Build, runtime: /usr/lib/jvm/java-17-openjdk-amd64 Default locale: en_US, platform encoding: UTF-8 OS nam

Re: [JEXL] Compatibility bug?

2023-04-07 Thread Bruno Kinoshita
Hmm, doesn't seem easy to assess what broke it in the 3.3. release: https://github.com/apache/commons-scxml/actions/runs/4570451737/jobs/8067797349?pr=121 Error: Tests run: 11, Failures: 1, Errors: 0, Skipped: 0, Time elapsed: 0.085 s <<< FAILURE! - in org.apache.commons.scxml2.model.CustomActionT

Re: [IO] 2 Patches for SymbolicLinkFileFilter

2023-04-18 Thread Bruno Kinoshita
> > Or as a Github PR: > +1 On Tue, 18 Apr 2023 at 11:18, sebb wrote: > Or as a Github PR: > > https://github.com/apache/commons-io/pulls > > These systems are easier for developers to track than emails, which > can get overlooked. > > On Tue, 18 Apr 2023 at 09:54, Gilles Sadowski > wrote: > >

Re: [Parent] releasing 57

2023-04-21 Thread Bruno Kinoshita
Sounds good. Thanks Gary!! On Fri, 21 Apr 2023, 4:09 pm Gary Gregory, wrote: > Hi all, > > I plan on cutting a release candidate ASAP, likely tonight or tomorrow. > > Gary >

Re: [VOTE] Release Apache Commons IO 2.12.0 based on RC1

2023-04-29 Thread Bruno Kinoshita
+1 Build from tag passed with no errors on Apache Maven 3.8.5 (3599d3414f046de2324203b78ddcf9b5e4388aa0) Maven home: /opt/apache-maven-3.8.5 Java version: 17.0.6, vendor: Private Build, runtime: /usr/lib/jvm/java-17-openjdk-amd64 Default locale: en_US, platform encoding: UTF-8 OS name: "linux", v

  1   2   >