Re: Adopt OpenJDK 11 support for running programs built with POI 3.15 and oracle JDK1.8

2021-01-05 Thread PJ Fanning
Noone can provide you with any guarantees. Apache POI is open source and free. It is a collaboration between many volunteers. The Microsoft file formats are too complex and varied for us to have coverage for all use cases. If your use case is similar to use cases of individuals and teams who have

Re: [VOTE] Apache POI 5.0.0 release (RC1)

2021-01-13 Thread PJ Fanning
One possible minor doc in issue in the bin zip. The docs folder in the bin zip does not have the api javadocs for v5.0. The equivalent page to https://poi.apache.org/apidocs/index.html Not a big deal if we choose to update the docs on the core web site after the release.  On Wednesday 13

Re: Regression in POI 5.0.0

2021-01-18 Thread PJ Fanning
If we log an issue and include a Known Issues section in the release notes, then maybe that's enough. We can follow up with a v5.0.1 in the coming weeks. There could be another issue or 2 that turn up.  On Monday 18 January 2021, 22:55:23 GMT, Andreas Beeker wrote: Hi Devs, I was j

Re: Logging

2021-01-23 Thread PJ Fanning
If we change the logging to log4j2 then I think we should at least bump the POI version to 5.1.0. I would prefer to see a 5.0.1 release before we make the logging change - since we raised awareness of a known issue in the release notes. I would like to see POILogger removed. I dislike having to

Re: How to find why seven files are failing the integration tests?

2021-02-13 Thread PJ Fanning
Hi Alain, WithChart.xlsx fails with Caused by: java.lang.NullPointerException         at org.apache.poi.xddf.usermodel.chart.XDDFDataSourcesFactory.fromDataSource(XDDFDataSourcesFactory.java:45)         at org.apache.poi.xddf.usermodel.chart.XDDFLineChartData$Series.(XDDFLineChartData.java:119

Re: XMLBeans command line scripts

2021-02-27 Thread PJ Fanning
I'm not a big fan of maintaining linux/windows command line scripts but would prefer them to handwriting java command line scripts. If we were to change approach, I would prefer something like gradle scripts. On Saturday 27 February 2021, 17:54:07 GMT, Andreas Beeker wrote: Hi Devs,

Re: [VOTE] Apache XmlBeans 5.0.0 release (RC1)

2021-03-11 Thread PJ Fanning
+1 Thanks for taking on the release. On Thursday 11 March 2021, 14:51:42 GMT, Dominik Stadler wrote: Ok, then I am +1 based mostly on comparing the two releases as I don't use XmlBeans outside of POI at all and thus don't know much about using/testing it. Having it running in Apache

Re: integration test failures

2021-03-15 Thread PJ Fanning
Thanks Marius, I'll try to put POIFSStream back to where it was. On Monday 15 March 2021, 17:49:36 GMT, Marius Volkhart wrote: Hi PJ, It looks like the changes to POIFSStream from r1887657 are the cause. Those didn't get reverted in r1887660. When I revert those, the tests pass again

Re: svn commit: r1889815 - in /poi/trunk: build.gradle gradle/wrapper/gradle-wrapper.jar gradle/wrapper/gradle-wrapper.properties gradlew gradlew.bat

2021-05-13 Thread PJ Fanning
Hi, The gradle-wrapper.jar was already part of our builds. It is in our POI 5.0.0 source distribution. If we remove gradle wrapper dir from source distribution, we should remove the gradlew scripts too. On Thursday 13 May 2021, 10:30:30 IST, Nick Burch wrote: On Wed, 12 May 2021, f

Re: Github Actions TestSignatureInfo failing

2021-07-05 Thread PJ Fanning
Thanks Dominik. The tests do pass with java 11. It does seem likely the java 8 fix will be released when the next patch release (8.0.302) comes out. On Sunday 4 July 2021, 22:10:18 IST, Dominik Stadler wrote: When reproducing this in a VM locally I get the failure-details below, mayb

ant build

2021-08-16 Thread PJ Fanning
Hi, I've had a look at the getting the POI ant build to use xmlbeans 5.0.1 but with little success. The immediate issue is in the poi-ooxml-lite jar creation logic. Would someone else be able to have a look? Regards, PJ - To un

Re: ant build

2021-08-16 Thread PJ Fanning
ently omitted * use gradle in the windows builds ... as I usually don't use windows for building, this will be either a Jenkins trial-and-error or I have to scrap my principles :) Andi On 16.08.21 18:37, PJ Fanning wrote: > Hi, > I've had a look at the getting the POI ant build

Re: Next release of POI

2021-08-29 Thread PJ Fanning
Hi Andi, a) I think we need a new release b) I don't think we need to solve all the build issues before the next release c) I'd prefer to call the next release 6.0.0 or failing that 5.1.0. The log4j change makes calling next release 5.0.1 problematic for me.  On Sunday 29 August 2021, 18:

Re: [VOTE] Apache POI 5.1.0 release (RC1)

2021-09-03 Thread PJ Fanning
Thanks Andi for prepping the RC. Have we run the test suite with the large number of test files to see if the results are ok? On Friday 3 September 2021, 23:40:08 IST, Andreas Beeker wrote: Hi *, I've prepared artifacts for the release of Apache POI 5.1.0 (RC1). The most notable ch

Re: [VOTE] Apache POI 5.1.0 release (RC1)

2021-09-04 Thread PJ Fanning
pdated the items I found to say POI 5.1.0. I will try out the jars later in the weekend. On Saturday 4 September 2021, 12:00:42 IST, Dominik Stadler wrote: Hi, I started the test-suite today and hopefully can report on it before voting ends. Dominik. On Sat, Sep 4, 2021 at 1:10 AM

Re: [VOTE] Apache POI 5.1.0 release (RC1)

2021-09-04 Thread PJ Fanning
The poi-bin-5.1.0 zip is missing the poi-ooxml-lite jar. Should we add it in future distributions? On Saturday 4 September 2021, 13:05:45 IST, PJ Fanning wrote: Thanks Dominik. The version numbers in the pom files of trunk now seem to have version 5.0.1-SNAPSHOT - shouldn't

Re: [VOTE] Apache POI 5.1.0 release (RC1)

2021-09-04 Thread PJ Fanning
The java jars on https://dist.apache.org/repos/dist/dev/poi/5.1.0-RC1/maven/ seem to have been built with Java 14 and do not work with Java 8. I'm getting this when trying to use poi-ooxml jar: Caused by: java.lang.UnsupportedClassVersionError: org/apache/poi/openxml4j/opc/OPCPackage has been co

Re: [VOTE] Apache POI 5.1.0 release (RC1)

2021-09-04 Thread PJ Fanning
I think there is an issue in the poi-ooxml-lite pom - it has a dependency on  poi-ooxml-full. https://dist.apache.org/repos/dist/dev/poi/5.1.0-RC1/maven/org/apache/poi/poi-ooxml-lite/5.1.0/poi-ooxml-lite-5.1.0.pom On Saturday 4 September 2021, 15:10:03 IST, PJ Fanning wrote: The

Re: [VOTE] Apache POI 5.1.0 release (RC1)

2021-09-05 Thread PJ Fanning
ion-*": not sure if this is needed, but we should include those too. @poi-integration: that's test stuff, I've omit it on-purpose @XmlBeans *Factory classes: that's on purpose - I've changed the XmlBeans generation @org.apache.poi.Version: again, needs to be added  Andi

Re: [VOTE] Apache POI 5.1.0 release (RC1)

2021-09-10 Thread PJ Fanning
port on it before > voting ends. > > Dominik. > > On Sat, Sep 4, 2021 at 1:10 AM PJ Fanning > wrote: > >> Thanks Andi for prepping the RC. >> >> Have we run the test suite with the large number of test files to see if >> the results are ok? >> &

Re: Optional dependencies and JPMS?

2021-09-12 Thread PJ Fanning
I must admit to not knowing much about JPMs and worry more about Maven POM definitions. >From a pom perspective, generally, I think we should include all the >transitive dependencies and document how users can choose to exclude certain >dependencies that might lead to bigger deployments but may

Re: [VOTE] Apache POI 5.1.0 release (RC1)

2021-09-19 Thread PJ Fanning
adle again - it might take another few days until it is working correctly. Andi On 10.09.21 10:51, PJ Fanning wrote: > What do we think is the best way to get the missing xsbs added to > poi-ooxml-lite? Maybe, adding more files to test-data dir and adding tests > that read them is t

Re: Possible License Problems in BitmapImageRenderer and StringCodepointsIterable

2021-09-20 Thread PJ Fanning
Hi Stefan, I believe both classes you mentioned have been changed over last few days. This is just my opinion but if these issues are really important to your company, then you could contribute patches yourselves. Apache POI is a volunteer project. On Monday 20 September 2021, 12:24:33 IST,

Re: [VOTE] Apache POI 5.1.0 release (RC1)

2021-09-20 Thread PJ Fanning
Seems best to fix any issues like this. It's been a while since the last release but there don't seem to be too many messages from people pushing for one. On Monday 20 September 2021, 21:36:26 IST, Andreas Beeker wrote: Hi Devs, in the process of modifying the BitmapImageRenderer,

Re: [VOTE] Apache POI 5.1.0 release (RC1)

2021-09-23 Thread PJ Fanning
as Dornhof wrote: Hi, I wait for the release because vulnerability issues (CVE-2021-35515, CVE-2021-35516, CVE-2021-35517 and CVE-2021-36090)  in common-compress. When do you think you can release? Thanks... Andreas On 2021/09/05 15:43:23, PJ Fanning wrote: > I put in a change to poi-ooxml/bu

Re: Vulnerabilities with poi-ooxml dependencies

2021-09-23 Thread PJ Fanning
Hi Mark, I'm just repeating the response I just sent to another user on this email list - just in case you missed that thread. These CVEs are not POI issues. We will release POI 5.1.0 when it is ready which should be soon. But the real fix on your side is to upgrade the Batik, commons-compress a

slf4j dependency on an beta version

2021-09-23 Thread PJ Fanning
Hi, Does anyone know why we don't just rely on slf4j-api 1.7.x? https://mvnrepository.com/artifact/org.apache.logging.log4j/log4j-core/2.14.1  shows that log4j has a slf4j-api 1.7.x dependency. I know a lot of projects have dependencies on slf4j-api 1.8.x-beta versions or 2.0.x alpha versions - th

Re: slf4j dependency on an beta version

2021-09-23 Thread PJ Fanning
Thanks Andi - I'll change to 1.7.32. On Thursday 23 September 2021, 20:15:38 IST, Andreas Beeker wrote: Hi PJ, On 23.09.21 20:54, PJ Fanning wrote: > Does anyone know why we don't just rely on slf4j-api 1.7.x? > I've raised the dependency to the beta version,

Re: svn commit: r1893606 - /poi/site/src/documentation/content/xdocs/components/index.xml

2021-09-24 Thread PJ Fanning
Thanks Dave, I've fixed that now. On Friday 24 September 2021, 19:14:42 IST, Dave Fisher wrote: > On Sep 24, 2021, at 11:10 AM, fannin...@apache.org wrote: > > It may be possible to use newer XMLBeans jars but there no guarantees, > especially of the XMLBeans version It may be po

forrest question

2021-09-24 Thread PJ Fanning
When I run forrest on the POI docs, all the google search URLs come up with http schemes instead of the https schemes. I generally hand edit the files before committing them to put back the https scheme. I've tried a variety of sed commands to try to global replace the value but with no success.

Re: forrest question

2021-09-27 Thread PJ Fanning
-xhtml.xsl :                    http://www.google.com/search";> /opt/apache/forrest/apache-forrest-0.9/main/webapp/skins/pelt/xslt/html/site-to-xhtml.xsl :              http://www.google.com/search";> ... Dominik. On Fri, Sep 24, 2021 at 9:06 PM PJ Fanning wrote: > When I run forrest on

Re: Build instructions on web site

2021-10-03 Thread PJ Fanning
Thanks Viru. I have now removed the details about the old Ant build and added some notes about Gradle. https://poi.apache.org/devel/index.html On Sunday 3 October 2021, 05:51:53 IST, Viru Gajanayake wrote: Hi, I am new to Apache POI, about a week ago I submitted a patch.  I just wan

Re: Sheets name can not be read

2021-10-06 Thread PJ Fanning
The XSSF code relies on the JAXP DocumentBuilder. Depending on how your JRE is setup and how it is configured, you might get different behaviours. Have you tried using another DocumentBuilder? For instance, if you add Xerces to your classpath, its DocumentBuilder might be used instead. On

XMLBeans 5.0.2 release

2021-10-13 Thread PJ Fanning
I don't think this blocks a release of POI 5.1.0. There are still a few fixes in XMLBeans trunk awaiting release. I can prepare a XMLBeans 5.0.2-RC1 if people think this is a good idea. https://issues.apache.org/jira/browse/XMLBEANS-572?jql=project%20%3D%20XMLBEANS%20AND%20fixVersion%20%3D%20%22

[VOTE] Apache XmlBeans 5.0.2 release (RC1)

2021-10-13 Thread PJ Fanning
Hi *, I've prepared artifacts for the release of Apache XmlBeans 5.0.2 (RC1). The most notable changes in this release are: * When generating Java code, there is a wrong reference to java.util.Object[] * support disallow-doctype-decl setting on XML parser * Fix issue where you can get a StackOve

Re: [VOTE] Apache XmlBeans 5.0.2 release (RC1)

2021-10-14 Thread PJ Fanning
relevant for the release as far as I see. Thanks... Dominik. On Wed, Oct 13, 2021 at 10:50 PM PJ Fanning wrote: > Hi *, > > I've prepared artifacts for the release of Apache XmlBeans 5.0.2 (RC1). > > The most notable changes in this release are: > > * When gene

Re: [VOTE] Apache XmlBeans 5.0.2 release (RC1)

2021-10-14 Thread PJ Fanning
release details. On Thursday 14 October 2021, 10:53:57 IST, PJ Fanning wrote: Thanks for checking Dominik. The maven dir is deliberate - by laying it out that way, it can now be used as a maven repository url in maven and gradle builds. In gradle, for instance: repositories {  

Re: [VOTE] Apache XmlBeans 5.0.2 release (RC1)

2021-10-14 Thread PJ Fanning
I'm -1 on the RC1. I think I've fixed the artifacts issue on the CI build (by changing POI jenkins/create_jobs.groovy). If there are no objections, I'll start tonight on taking the CI build artifacts and using them for an RC2. On Thursday 14 October 2021, 11:12:56 IST, PJ

[VOTE] Apache XmlBeans 5.0.2 release (RC2)

2021-10-14 Thread PJ Fanning
Hi *, I've prepared artifacts for the release of Apache XmlBeans 5.0.2 (RC2). The artifacts come from  https://ci-builds.apache.org/job/POI/job/POI-XMLBeans-DSL-1.8/ The most notable changes in this release are: * When generating Java code, there is a wrong reference to java.util.Object[] * sup

POI configurability

2021-10-14 Thread PJ Fanning
Hi, I've added a page to the web site. I haven't linked any pages to it yet. I'd like to get it reviewed first. https://poi.apache.org/components/configuration.html We now have quite a few ways to configure behaviour in POI. I think it would be good to document them. I would appreciate any com

Re: POI 5.1.0 RC2?

2021-10-14 Thread PJ Fanning
With POI trunk, I've added a use case that relies on XMLBeans 5.0.2 release. Can we wait until XMLBeans 5.0.2 is released? Alternatively, I can remove the new POI code that use XmlOptions setDisallowDocTypeDeclaration. On Thursday 14 October 2021, 22:52:10 IST, Andreas Beeker wrote:

POI-DSL-1.17 build issues

2021-10-15 Thread PJ Fanning
I've initiated a bug report for the build issues in POI-DSL-1.17. They happen in many but not all builds. https://ci-builds.apache.org/job/POI/job/POI-DSL-1.17/38/console > Task :poi-ooxml:test OpenJDK 64-Bit Server VM warning: Ignoring option --illegal-access=warn; support was removed in 17.

Re: POI 5.1.0 RC2?

2021-10-18 Thread PJ Fanning
it is not included automatically... I extracted the attached list of 107 missing XSBs. Dominik. On Fri, Oct 15, 2021 at 1:17 AM Andreas Beeker wrote: > "Kept you waiting, huh?" (tm) -No problem for me ... XmlBeans RC2 looks good > so far, therefore it can be only a matter of d

Re: POI 5.1.0 RC2?

2021-10-18 Thread PJ Fanning
Also building locally takes ages because nearly every Gradle target has to run all tests including integration-tests now, very hard to do anything useful, at least for me. Dominik. On Mon, Oct 18, 2021 at 11:40 AM PJ Fanning wrote: > Thanks Dominik for running the tests. I'm not sure wh

Re: POI 5.1.0 RC2?

2021-10-18 Thread PJ Fanning
Hi Dominik, Would you be able to provide one of the files that causes the missing xsb issues? I could try debugging to see if I can see why it fails. On Monday 18 October 2021, 12:12:02 IST, PJ Fanning wrote: Maybe POI 5.1.0 poi-ooxml can default to poi-ooxml-full as the dependency

Re: POI 5.1.0 RC2?

2021-10-18 Thread PJ Fanning
apache.org/~centic/poi_regression/reports/bib-chernigovka.netdo.ru_download_docs_17459.doc (it's actually a docx, so is processed via XSSFFileHandler). Thanks... Dominik. On Mon, Oct 18, 2021 at 5:06 PM PJ Fanning wrote: > Hi Dominik, > Would you be able to provide one of the files th

Re: POI 5.1.0 RC2?

2021-10-18 Thread PJ Fanning
-chernigovka.netdo.ru_download_docs_17459.doc (it's actually a docx, so is processed via XSSFFileHandler). Thanks... Dominik. On Mon, Oct 18, 2021 at 5:06 PM PJ Fanning wrote: > Hi Dominik, > Would you be able to provide one of the files that causes the missing xsb > issues? I could try debugging to see if I can se

Re: Inquiries about apache poi 4.x maintenance

2021-10-19 Thread PJ Fanning
Hi, We would not usually upgrade POI 4. POI 5 is the maintained version. We will consider patching POI 4, but only in exceptional cases. We would really prefer if you used POI 5. There are known issues in libs that POI depends on and you should be able, in many cases, to just upgrade the lib th

TDIST.RT function

2021-10-19 Thread PJ Fanning
Hi, I implemented TDIST.RT function today. I ran into 1 issue. Online docs seems to indicate that negative X is ok (docs do not explicitly say it is a problem) while it isn't for TDIST and TDIST.2T (docs explicitly say it is a problem) https://support.microsoft.com/en-us/office/t-dist-rt-funct

[RESULT] [VOTE] Apache XmlBeans 5.0.2 release (RC2)

2021-10-20 Thread PJ Fanning
The vote has carried with 3 +1s from PMC members. I will start the process of releasing to maven and will follow up with the distribution and docs. Aim is to announce on Friday. On Friday 15 October 2021, 07:37:59 IST, Dominik Stadler wrote: Hi, Thanks for the changes, this looks

ExcelCetabFunctionExtractor/functionMetadataCetab.txt and FILTER function

2021-10-22 Thread PJ Fanning
Hi, Does anyone know anything about ExcelCetabFunctionExtractor and  functionMetadataCetab.txt? The file that ExcelCetabFunctionExtractor needs seems to be missing. --  org/apache/poi/ss/formula/function/functionMetadataCetab-PDF.txt There is an issue related to FILTER function and how POI think

Re: POI 5.1.0 RC2?

2021-10-24 Thread PJ Fanning
I added a change to poi-ooxml-lite gradle file to force the inclusion of the 107 extra XSBs. poi-ooxml-lite 5.0.0 - XSB count=1498 poi-ooxml-lite latest snapshot - XSB count=1220 no 5.0.0 XSBs are missing from snapshot. Is there anything else blocking an RC2? If not, I can see about creating

Re: POI 5.1.0 RC2?

2021-10-24 Thread PJ Fanning
regards, Alain FAGOT BÉAREZ ⁣Obter o BlueMail para Android ​ Em 18 de out de 2021 23:14, em 23:14, PJ Fanning escreveu: >A large fraction of the errors >in  >http://people.apache.org/~centic/poi_regression/reports/index500RC2to510RC1.html >relate to cloning sheets that contain c

[VOTE] Apache POI 5.1.0 release (RC2)

2021-10-25 Thread PJ Fanning
Hi everyone, I've prepared artifacts for the release of Apache POI 5.1.0 (RC2). The most notable changes in this release are: * upgrade dependencies: XmlBeans 5.0.2, XMLSec 2.2.3, Batik 1.14, BouncyCastle 1.69, Commons-Compress 1.21, ... * switching build to Gradle - Ant build is not supported

Re: [VOTE] Apache POI 5.1.0 release (RC2)

2021-10-27 Thread PJ Fanning
POI, which worked fine. One small thing: Probably does not block the release but the "poi-scratchpad" is missing from the Maven Staging repository. Thanks a lot for pushing the release! Dominik. On Mon, Oct 25, 2021 at 1:55 PM PJ Fanning wrote: > Hi everyone, > > I'v

[RESULT] [VOTE] Apache POI 5.1.0 release (RC2)

2021-11-01 Thread PJ Fanning
Vote passes with 4 +1s. I will see about completing the release over the coming days. Sent from Yahoo Mail on Android On Wed, 27 Oct 2021 at 16:52, Axel Howind wrote: Sorry, I have been out of the loop for some time. I just discovered that I can use the staging artefacts directly by addin

Looking for help with XLookup function

2021-11-16 Thread PJ Fanning
Hi, I've been looking at implementing XLookup function. I have a very partial implementation at https://github.com/apache/poi/pull/243. One issue is examples like Example 2 in  https://support.microsoft.com/en-us/office/xlookup-function-b7fd680e-6d10-43e6-84f9-88eae8bf5929. In the unit test for

Re: Move poi:main:org.apache.poi.hssf.dev to poi:test

2021-11-24 Thread PJ Fanning
One option would be to put useful tools in poi-examples. One advantage is that we avoid having classes with main methods in the core jars. Or we could add a poi-tools jar if we risk making poi-examples more complicated by adding tools there. On Thursday 25 November 2021, 07:32:41 GMT+1, Do

flaky tests on CI/CD

2021-11-25 Thread PJ Fanning
Hi, If you check the recent history of  https://ci-builds.apache.org/job/POI/job/POI-DSL-1.17/ and other builds, you'll see that the tests fail in many builds. I suspect this has something to with running the tests in parallel. Is it possible that as part of the recent changes to allow test exe

Re: flaky tests on CI/CD

2021-11-25 Thread PJ Fanning
Thanks Nick. I sent this email -  https://mail-archives.apache.org/mod_mbox/www-builds/202111.mbox/%3CCAMRKCNE%3Dvfq5y4n%3DQv0-tmRvTxT2A-qzuKTaRa6fiGPfNmQBCw%40mail.gmail.com%3E On Thursday 25 November 2021, 12:26:13 GMT+1, Nick Burch wrote: On Thu, 25 Nov 2021, PJ Fanning wrote

Re: Looking for help with XLookup function

2021-12-06 Thread PJ Fanning
r 2021, 11:47:40 GMT+1, PJ Fanning wrote: Hi, I've been looking at implementing XLookup function. I have a very partial implementation at https://github.com/apache/poi/pull/243. One issue is examples like Example 2 in  https://support.microsoft.com/en-us/office/xlookup-function-b7f

Log4J security issue

2021-12-10 Thread PJ Fanning
Hi, POI 5.1.0 uses Log4J 2 for logging. There has been an important new release of Log4J - version 2.15.0 - to mitigate a security issue. The POI team recommends that users upgrade their Log4J dependency to use the 2.15.0 release. https://logging.apache.org/log4j/2.x/security.html https://www.lu

RE: Formula WORKDAY.INTL

2021-12-10 Thread PJ Fanning
Hi Marcel, Can you provide details of where you got the list of unimplemented functions in POI? POI is a volunteer project and there isn't much work being doing adding support for extra functions. If users want to contribute implementations of functions, the POI team are happy to look at the pat

XMLBeans 5.0.3 release

2021-12-12 Thread PJ Fanning
Hi, If there are no objections, I propose to create a RC1 for XMLBeans 5.0.3 today. The main change is to upgrade log4j but there are some other dependency upgrades and https://issues.apache.org/jira/browse/XMLBEANS-579 . With POI, I think it might be useful to put together a new release later

[VOTE] Apache XmlBeans 5.0.3 release (RC1)

2021-12-12 Thread PJ Fanning
Hi everyone, I've prepared artifacts for the release of Apache XmlBeans 5.0.3 (RC1). The most notable changes in this release are: * SampleXmlUtil misses root element with only one child * Upgrade dependencies (javaparser 3.23.1, log4j 2.15.0) A full list of changes is available in the change

Re: [VOTE] Apache XmlBeans 5.0.3 release (RC1)

2021-12-13 Thread PJ Fanning
> Andi > > On 12.12.21 20:56, PJ Fanning wrote: > > Hi everyone, > > > > I've prepared artifacts for the release of Apache XmlBeans 5.0.3 (RC1). > > > > The most notable changes in this release are: > > > > * SampleXmlUtil misses root elemen

Re: Log4J security issue

2021-12-17 Thread PJ Fanning
they upgrade to all their log4j dependencies to the latest version (currently v2.16.0) - including log4j-api. On Friday 10 December 2021, 20:32:25 GMT+1, PJ Fanning wrote: Hi, POI 5.1.0 uses Log4J 2 for logging. There has been an important new release of Log4J - version 2.15.0 - to

[VOTE] Apache XmlBeans 5.0.3 release (RC2)

2021-12-23 Thread PJ Fanning
Hi everyone, I've prepared artifacts for the release of Apache XmlBeans 5.0.3 (RC2). The most notable changes in this release are: * SampleXmlUtil misses root element with only one child * Duplicated "xmlns" attribute in XmlObject.toString() result * Upgrade dependencies (javaparser 3.23.1, log4

[RESULT] [VOTE] Apache XmlBeans 5.0.3 release (RC2)

2021-12-29 Thread PJ Fanning
The vote has carried with 3 +1s from PMC members. I will start the process of releasing to maven and will follow up with the distribution and docs. Aim is to announce on Friday (or maybe Thursday). On Thursday 23 December 2021, 20:11:04 GMT, PJ Fanning wrote: Hi everyone, I&#x

Re: XmlBeans test TypesTest.testDate fails on non UTC TZ

2021-12-29 Thread PJ Fanning
Could you just raise a separate issue for the testDate (in JIRA)? For the sake of the patch you are working, it is best not to complicate it by trying to fix an unrelated issue. If you want to submit a separate for the testDate issue, that is fine. On Thursday 30 December 2021, 02:43:42 GM

[VOTE] Apache POI 5.2.0 release (RC1)

2022-01-05 Thread PJ Fanning
Hi everyone, I've prepared artifacts for the release of Apache POI 5.2.0 (RC1). The most notable changes in this release are: * upgrade dependencies: XmlBeans 5.0.3, XMLSec 2.3.0, BouncyCastle 1.70, Log4j-API 2.17.1, PDFBox Graphics2d 0.34, PDFBox 2.0.25 ... * Issue in XSSFReader where string

Re: Re:[VOTE] Apache POI 5.2.0 release (RC1)

2022-01-06 Thread PJ Fanning
level or not printing the exception stack and whether this problem should be solved in 5.2.0? Best regards, Sayi At 2022-01-05 21:12:41, "PJ Fanning" wrote: >Hi everyone, > > >I've prepared artifacts for the release of Apache POI 5.2.0 (RC1). > > >The

Re: [VOTE] Apache POI 5.2.0 release (RC1)

2022-01-06 Thread PJ Fanning
re, but if we want to keep handling those without regressions, we should roll a RC2 with latest trunk. Otherwise regression tests look good with only very few failures which are explained by more support for features in HSLF. Dominik. On Wed, Jan 5, 2022 at 2:12 PM PJ Fanning wrote: >

Re: Re:Re: Re:[VOTE] Apache POI 5.2.0 release (RC1)

2022-01-06 Thread PJ Fanning
=65786. I also saw the warning message mentioned by #65326 through the log, but there were a lot of warning exception stacks in the log when unzipping the docx zip. 在 2022-01-06 16:05:59,"PJ Fanning" 写道: >Hi Sayi, >It looks like some of your email is missing. Would it be pos

Re: XMLBeans patch for XMLBEANS-582

2022-01-06 Thread PJ Fanning
It is more appropriate to keep discussion on  https://issues.apache.org/jira/browse/XMLBEANS-582 instead of sending all the emails to this mailing list. On Thursday 6 January 2022, 15:11:32 GMT+1, Robert Marcano wrote: On 12/27/21 1:14 PM, Robert Marcano wrote: > Greetings. I am prep

[VOTE] Apache POI 5.2.0 release (RC2)

2022-01-07 Thread PJ Fanning
Hi everyone, I've prepared artifacts for the release of Apache POI 5.2.0 (RC2). The most notable changes in this release are: * upgrade dependencies: XmlBeans 5.0.3, XMLSec 2.3.0, BouncyCastle 1.70, Log4j-API 2.17.1, PDFBox Graphics2d 0.34, PDFBox 2.0.25 ... * Issue in XSSFReader where string

Re: [VOTE] Apache POI 5.2.0 release (RC2)

2022-01-14 Thread PJ Fanning
The vote carries with 6 +1s from PMC members. I will proceed with the release and announcement.  Thanks everyone for verifying the release. On Sunday 9 January 2022, 22:36:48 GMT+1, Andreas Beeker wrote: +1 from me. Thank you for providing the release, PJ! Eventually we need to dec

[ANNOUNCE] Apache POI 5.2.0 released

2022-01-15 Thread PJ Fanning
The Apache POI project is pleased to announce the release of POI 5.2.0. Featured are a handful of new areas of functionality, and numerous bug fixes. See the downloads page for binary and source distributions: https://poi.apache.org/download.html Release Notes Changes The most notab

curvesapi module

2022-01-18 Thread PJ Fanning
Hi, I must admit to not being an expert in module-info setup. I have noticed that curvesapi jar which is only used in some XDGF classes (poi-ooxml) does not have module-info or Automatic-Module-Name but the poi-ooxml module-info.java seems ok despite not having a 'requires' for this jar/module.

Re: curvesapi module

2022-01-19 Thread PJ Fanning
matic-Module-Name. As for making it optional - given the limited support XDGF has at the moment, that seems like a reasonable thing to do. Cheers, Marius > On Jan 18, 2022, at 08:01, PJ Fanning wrote: > > Hi, > I must admit to not being an expert in module-info setup. I have noticed

Re: Regarding xmlbeans 5.0.3 Vs xmlbeans-maven-plugin 2.3.3

2022-01-19 Thread PJ Fanning
This appears to be a duplicate of  https://issues.apache.org/jira/browse/XMLBEANS-593 and I have replied to that. There is no need to spam us - we receive notifications of XMLBeans JIRA updates. On Wednesday 19 January 2022, 20:11:06 GMT+1, Surendra Pulukuri wrote: Hi Team, We are us

Re: Duplicate classes in classpath from poi-ooxml-lite and ooxml-schemas

2022-01-22 Thread PJ Fanning
poi-ooxml-schemas and ooxml-schemas are not meant to be used together -- you use one or the other poi-ooxml-lite is a new jar for newer versions of POI -- not to be used with pre-historic versions of POI like 3.14 fr.opensagres -- this is nothing whatsover to do with Apache POI - talk to OpenS

Re: Duplicate classes in classpath from poi-ooxml-lite and ooxml-schemas

2022-01-22 Thread PJ Fanning
Stackoverflow is full of questions from users who think they can randomly change the jar versions used in opensagres pdf converter - you can't -- you need to use the versions of jars opensagres was built with On Saturday 22 January 2022, 14:07:25 GMT+1, Nick Burch wrote: On Fri, 21

Java 9+ build issues

2022-01-22 Thread PJ Fanning
Hi, I've tried to fix the build issues in Java 9+ that happened after  https://github.com/apache/poi/commit/bba249d52207799dc984efd884353aa4783c1c40 This change seems worthwhile so I tried to fix the underlying compile issues but ran into trouble with the test tasks setting module stuff. By comme

Re: Java 9+ build issues

2022-01-22 Thread PJ Fanning
think your current solution is not final. Would be nice if we can decide to ditch Java 8 at some point so we can simplify the build and then have less "works on Java 8, but breaks on Java 9+" issues. Thanks... Dominik. On Sat, Jan 22, 2022 at 3:37 PM PJ Fanning wrote: > Hi, >

Re: Java 9+ build issues

2022-01-22 Thread PJ Fanning
We don't distribute the test jars - at least not via Maven Central. If we ever did choose to distribute the test jars, we would have to consider not including the main source classes. On Saturday 22 January 2022, 22:19:19 GMT+1, PJ Fanning wrote: Hi Andreas, I'm ok with

Re: Feedback help/faq.html

2022-01-27 Thread PJ Fanning
Thanks Robert - I updated that page. On Thursday 27 January 2022, 18:35:21 GMT+1, Halter Robert wrote: Hello, on our Page https://poi.apache.org/help/faq.html the Line res = classloader.getResource("org/apache/poi/POIXMLDocument.class"); should be res = classloader.getResource(

dollar function is very locale specific

2022-02-03 Thread PJ Fanning
I accidentally ran into https://bz.apache.org/bugzilla/show_bug.cgi?id=62857. The existing implementation was way off. I implemented the US locale support but to support all locales will be a lot of work. The output is very locale specific.  https://docs.microsoft.com/en-us/globalization/locale/

Re: Cannot resolve type when upgrading to Apache POI 5.2.0 in poi-on-android

2022-02-08 Thread PJ Fanning
Maybe this only works if namespace-prefix handling is enabled on the XMLReader - the thing that doesn't work on Android (https://issues.apache.org/jira/browse/XMLBEANS-597). Could you try this test in a non-android env where XMLBeans doesn't enable  namespace-prefix feature? This might cause it

Re: Cannot resolve type when upgrading to Apache POI 5.2.0 in poi-on-android

2022-02-08 Thread PJ Fanning
he feature "namespaces" to "false"? It will likely lead to other trouble, or? Thanks... Dominik. On Tue, Feb 8, 2022 at 10:44 PM PJ Fanning wrote: > Maybe this only works if namespace-prefix handling is enabled on the > XMLReader - the thing that doesn't work on A

Re: Cannot resolve type when upgrading to Apache POI 5.2.0 in poi-on-android

2022-02-09 Thread PJ Fanning
r set namespace-prefix feature to true and to change how the SAX code created the namespace context (by doing it inside the startPrefixMapping instead). On Tuesday 8 February 2022, 23:13:35 GMT+1, PJ Fanning wrote: Aim would be to reproduce the issue in a non-android env and that would ma

Re: Cannot resolve type when upgrading to Apache POI 5.2.0 in poi-on-android

2022-02-09 Thread PJ Fanning
https://issues.apache.org/jira/browse/XMLBEANS-598 as a weakness of the old and new code. I might have a look at that later this week if the XMLBEANS-597 solution works for the existing scenarios. Regards, PJ On Wednesday 9 February 2022, 11:43:26 GMT+1, PJ Fanning wrote: It looks like the cu

Re: Missing class in latest snapshots

2022-02-23 Thread PJ Fanning
Hi Dominik, I checked POI 5.2.0, 5.1.0 and 4.1.2 and poi-ooxml-lite (poi-ooxml-schemas before 5.x release) and none contain  com/microsoft/schemas/office/visio/x2012/main/TriggerType. We can add extra classes to the lite if we need to. Regards, PJ  On Wednesday 23 February 2022, 22:17:04 G

[VOTE] Apache POI 5.2.1 release (RC1)

2022-02-25 Thread PJ Fanning
Hi everyone, I've prepared artifacts for the release of Apache POI 5.2.1 (RC1). * upgrade dependencies: curvesapi 1.07 ... * IOUtils.toByteArray did not fully take into account value set by IOUtils.setByteArrayMaxOverride [#65887] * Fix issue where malformed TNEF file can cause memory issues [#6

[RESULT] [VOTE] Apache POI 5.2.1 release (RC1)

2022-03-03 Thread PJ Fanning
cts did work fine. > > Great work PJ! > > +1 from me. > > Dominik > > On Fri, Feb 25, 2022 at 10:12 AM PJ Fanning > wrote: > >> Hi everyone, >> >> I've prepared artifacts for the release of Apache POI 5.2.1 (RC1). >> >> * upgrade dependencies:

[ANNOUNCE] Apache POI 5.2.1 released

2022-03-04 Thread PJ Fanning
The Apache POI project is pleased to announce the release of POI 5.2.1. Featured are a handful of new areas of functionality, and numerous bug fixes. See the downloads page for binary and source distributions: https://poi.apache.org/download.html Release Notes Changes The most notab

CVE-2022-26336: poi-scratchpad: A carefully crafted TNEF file can cause an out of memory exception

2022-03-04 Thread PJ Fanning
Severity: moderate Description: A shortcoming in the HMEF package of poi-scratchpad (Apache POI) allows an attacker to cause an Out of Memory exception. This package is used to read TNEF files (Microsoft Outlook and Microsoft Exchange Server). If an application uses poi-scratchpad to parse TNE

[VOTE] Apache POI 5.2.2 release (RC1)

2022-03-12 Thread PJ Fanning
Hi everyone, https://bz.apache.org/bugzilla/show_bug.cgi?id=65950 seems serious enough to warrant a new release. I've prepared artifacts for the release of Apache POI 5.2.2 (RC1). I'd appreciate if anyone could review the IOUtils changes (in particular). The most notable changes in this relea

Re: [VOTE] Apache POI 5.2.2 release (RC1)

2022-03-12 Thread PJ Fanning
On Saturday 12 March 2022, 13:30:01 GMT+1, PJ Fanning wrote: Hi everyone, https://bz.apache.org/bugzilla/show_bug.cgi?id=65950 seems serious enough to warrant a new release. I've prepared artifacts for the release of Apache POI 5.2.2 (RC1). I'd appreciate if anyone could rev

[VOTE] Apache POI 5.2.2 release (RC2)

2022-03-13 Thread PJ Fanning
Hi everyone, https://bz.apache.org/bugzilla/show_bug.cgi?id=65950 seems serious enough to warrant a new release. I've prepared artifacts for the release of Apache POI 5.2.2 (RC2). I'd appreciate if anyone could review the IOUtils changes (in particular). The most notable changes in this releas

  1   2   3   4   5   6   7   8   >