[VOTE] Release Apache Commons FileUpload 1.4 based on RC2

classic Classic list List threaded Threaded
5 messages Options
Reply | Threaded
Open this post in threaded view
|

[VOTE] Release Apache Commons FileUpload 1.4 based on RC2

Rob Tompkins-2
We have fixed quite a few bugs and added some significant enhancements since Apache Commons FileUpload 1.3.3 was released, so I would like to release Apache Commons FileUpload 1.4.

Apache Commons FileUpload 1.4 RC2 is available for review here:
    https://dist.apache.org/repos/dist/dev/commons/fileupload/1.4-RC2 (svn revision 31675)

The Git tag commons-fileupload-1.4-RC2 commit for this RC is 047f31576411beee69cf75584ae76531cc9ac753 which you can browse here:
    https://github.com/apache/commons-fileupload/releases/tag/commons-fileupload-1.4-RC2

Maven artifacts are here:
    https://repository.apache.org/content/repositories/orgapachecommons-1404/commons-fileupload/commons-fileupload/1.4/

These are the Maven artifacts and their hashes in Nexus:

#Nexus SHA-1s
commons-fileupload-1.4.jar=f95188e3d372e20e7328706c37ef366e5d7859b0
commons-fileupload-1.4-test-sources.jar=fbccf3978e3a3c3d08df96a8d1b7174b298e35d8
commons-fileupload-1.4.pom=65112009d674333c1acfafb4e198ff250d710764
commons-fileupload-1.4-tests.jar=8c3335b84d252a422546aaf82e716dc73cfc2e48
commons-fileupload-1.4-sources.jar=d50ee98902746c6a351662fa8b728189d1a30e90
commons-fileupload-1.4-javadoc.jar=bd6061c92eaa54a63d35acc4f36182893a679cef

#Release SHA-256s
#Mon Dec 24 02:07:07 EST 2018
commons-fileupload-1.4-src-tar.gz=4eb7d03ecc48d62d72fde877df321df0f9288b3eb4119f8471417a303a9c0871
commons-fileupload-1.4-bin-tar.gz=7df64e29e8424a44b6741ddaa0d35766b94d8a56df1f7354a6ee5c491fd96eab
commons-fileupload-1.4-src-zip=43ea130373f3b827c9322caf62d858e73dc430c55a5ab26a95f0554097c37b2d
commons-fileupload-1.4-bin-zip=ff1e8c581b462913f90b95791f58a97d5ffb48dd8ab1ed94229714573d0ceed7

I have tested this with 'mvn clean test package site' using:
Apache Maven 3.6.0 (97c98ec64a1fdfee7767ce5ffb20918da4f719f3; 2018-10-24T14:41:47-04:00)
Maven home: /usr/local/Cellar/maven/3.6.0/libexec
Java version: 1.8.0_191, vendor: Oracle Corporation, runtime: /Library/Java/JavaVirtualMachines/jdk1.8.0_191.jdk/Contents/Home/jre
Default locale: en_US, platform encoding: UTF-8
OS name: "mac os x", version: "10.14.1", arch: "x86_64", family: "mac"

Details of changes since 1.3.3 are in the release notes:
    https://dist.apache.org/repos/dist/dev/commons/fileupload/1.4-RC2/RELEASE-NOTES.txt
    https://dist.apache.org/repos/dist/dev/commons/fileupload/1.4-RC2/site/changes-report.html

Site:
    https://dist.apache.org/repos/dist/dev/commons/fileupload/1.4-RC2/site
    (note some *relative* links are broken and the 1.4 directories are not yet created - these will be OK once the site is deployed.)

CLIRR Report (compared to 1.3.3): We expect there to be 3 failures here.
    https://dist.apache.org/repos/dist/dev/commons/fileupload/1.4-RC2/site/clirr-report.html
   
RAT Report:
    https://dist.apache.org/repos/dist/dev/commons/fileupload/1.4-RC2/site/rat-report.html

KEYS:
  https://www.apache.org/dist/commons/KEYS

Please review the release candidate and vote.
This vote will close no sooner that 72 hours from now.

  [ ] +1 Release these artifacts
  [ ] +0 OK, but...
  [ ] -0 OK, but really should fix...
  [ ] -1 I oppose this release because...

Thank you,

Rob Tompkins,
Release Manager (using key B6E73D84EA4FCC47166087253FAAD2CD5ECBB314)
---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Re: [VOTE] Release Apache Commons FileUpload 1.4 based on RC2

Bruno P. Kinoshita-2
[ X ] +1 Release these artifacts


Thanks !

Bruno


________________________________
From: Rob Tompkins <[hidden email]>
To: Commons Developers List <[hidden email]>
Sent: Monday, 24 December 2018 8:23 PM
Subject: [VOTE] Release Apache Commons FileUpload 1.4 based on RC2



We have fixed quite a few bugs and added some significant enhancements since Apache Commons FileUpload 1.3.3 was released, so I would like to release Apache Commons FileUpload 1.4.


Apache Commons FileUpload 1.4 RC2 is available for review here:

    https://dist.apache.org/repos/dist/dev/commons/fileupload/1.4-RC2 (svn revision 31675)


The Git tag commons-fileupload-1.4-RC2 commit for this RC is 047f31576411beee69cf75584ae76531cc9ac753 which you can browse here:

    https://github.com/apache/commons-fileupload/releases/tag/commons-fileupload-1.4-RC2


Maven artifacts are here:

    https://repository.apache.org/content/repositories/orgapachecommons-1404/commons-fileupload/commons-fileupload/1.4/


These are the Maven artifacts and their hashes in Nexus:


#Nexus SHA-1s

commons-fileupload-1.4.jar=f95188e3d372e20e7328706c37ef366e5d7859b0

commons-fileupload-1.4-test-sources.jar=fbccf3978e3a3c3d08df96a8d1b7174b298e35d8

commons-fileupload-1.4.pom=65112009d674333c1acfafb4e198ff250d710764

commons-fileupload-1.4-tests.jar=8c3335b84d252a422546aaf82e716dc73cfc2e48

commons-fileupload-1.4-sources.jar=d50ee98902746c6a351662fa8b728189d1a30e90

commons-fileupload-1.4-javadoc.jar=bd6061c92eaa54a63d35acc4f36182893a679cef


#Release SHA-256s

#Mon Dec 24 02:07:07 EST 2018

commons-fileupload-1.4-src-tar.gz=4eb7d03ecc48d62d72fde877df321df0f9288b3eb4119f8471417a303a9c0871

commons-fileupload-1.4-bin-tar.gz=7df64e29e8424a44b6741ddaa0d35766b94d8a56df1f7354a6ee5c491fd96eab

commons-fileupload-1.4-src-zip=43ea130373f3b827c9322caf62d858e73dc430c55a5ab26a95f0554097c37b2d

commons-fileupload-1.4-bin-zip=ff1e8c581b462913f90b95791f58a97d5ffb48dd8ab1ed94229714573d0ceed7


I have tested this with 'mvn clean test package site' using:

Apache Maven 3.6.0 (97c98ec64a1fdfee7767ce5ffb20918da4f719f3; 2018-10-24T14:41:47-04:00)

Maven home: /usr/local/Cellar/maven/3.6.0/libexec

Java version: 1.8.0_191, vendor: Oracle Corporation, runtime: /Library/Java/JavaVirtualMachines/jdk1.8.0_191.jdk/Contents/Home/jre

Default locale: en_US, platform encoding: UTF-8

OS name: "mac os x", version: "10.14.1", arch: "x86_64", family: "mac"


Details of changes since 1.3.3 are in the release notes:

    https://dist.apache.org/repos/dist/dev/commons/fileupload/1.4-RC2/RELEASE-NOTES.txt

    https://dist.apache.org/repos/dist/dev/commons/fileupload/1.4-RC2/site/changes-report.html


Site:

    https://dist.apache.org/repos/dist/dev/commons/fileupload/1.4-RC2/site

    (note some *relative* links are broken and the 1.4 directories are not yet created - these will be OK once the site is deployed.)


CLIRR Report (compared to 1.3.3): We expect there to be 3 failures here.

    https://dist.apache.org/repos/dist/dev/commons/fileupload/1.4-RC2/site/clirr-report.html

   

RAT Report:

    https://dist.apache.org/repos/dist/dev/commons/fileupload/1.4-RC2/site/rat-report.html


KEYS:

  https://www.apache.org/dist/commons/KEYS


Please review the release candidate and vote.

This vote will close no sooner that 72 hours from now.


  [ ] +1 Release these artifacts

  [ ] +0 OK, but...

  [ ] -0 OK, but really should fix...

  [ ] -1 I oppose this release because...


Thank you,


Rob Tompkins,

Release Manager (using key B6E73D84EA4FCC47166087253FAAD2CD5ECBB314)

---------------------------------------------------------------------

To unsubscribe, e-mail: [hidden email]

For additional commands, e-mail: [hidden email]

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Re: [VOTE] Release Apache Commons FileUpload 1.4 based on RC2

Bernd Eckenfels
In reply to this post by Rob Tompkins-2
Hello,

+1

(checked jar cheksums, , compiled java11/mvn3.3.1 on win10, read Reports)

With nits, there is a „No client code changes are required to migrate from version 1.3.0 to 1.3.1.“ sentence which could be removed in the release notes and could be replaced by „1.4 removed serialisation for security, might be a change you Need to accomodate for“ or something like this?

Should we add a „Fixed in 1.4 section“ in the security report only to document that the serialisation and System property are gone? (we had quite some discussion…)


Bernd
Good Holidays everyone
--
http://bernd.eckenfels.net

Von: Rob Tompkins
Gesendet: Montag, 24. Dezember 2018 08:23
An: Commons Developers List
Betreff: [VOTE] Release Apache Commons FileUpload 1.4 based on RC2

We have fixed quite a few bugs and added some significant enhancements since Apache Commons FileUpload 1.3.3 was released, so I would like to release Apache Commons FileUpload 1.4.

Apache Commons FileUpload 1.4 RC2 is available for review here:
    https://dist.apache.org/repos/dist/dev/commons/fileupload/1.4-RC2 (svn revision 31675)

The Git tag commons-fileupload-1.4-RC2 commit for this RC is 047f31576411beee69cf75584ae76531cc9ac753 which you can browse here:
    https://github.com/apache/commons-fileupload/releases/tag/commons-fileupload-1.4-RC2

Maven artifacts are here:
    https://repository.apache.org/content/repositories/orgapachecommons-1404/commons-fileupload/commons-fileupload/1.4/

These are the Maven artifacts and their hashes in Nexus:

#Nexus SHA-1s
commons-fileupload-1.4.jar=f95188e3d372e20e7328706c37ef366e5d7859b0
commons-fileupload-1.4-test-sources.jar=fbccf3978e3a3c3d08df96a8d1b7174b298e35d8
commons-fileupload-1.4.pom=65112009d674333c1acfafb4e198ff250d710764
commons-fileupload-1.4-tests.jar=8c3335b84d252a422546aaf82e716dc73cfc2e48
commons-fileupload-1.4-sources.jar=d50ee98902746c6a351662fa8b728189d1a30e90
commons-fileupload-1.4-javadoc.jar=bd6061c92eaa54a63d35acc4f36182893a679cef

#Release SHA-256s
#Mon Dec 24 02:07:07 EST 2018
commons-fileupload-1.4-src-tar.gz=4eb7d03ecc48d62d72fde877df321df0f9288b3eb4119f8471417a303a9c0871
commons-fileupload-1.4-bin-tar.gz=7df64e29e8424a44b6741ddaa0d35766b94d8a56df1f7354a6ee5c491fd96eab
commons-fileupload-1.4-src-zip=43ea130373f3b827c9322caf62d858e73dc430c55a5ab26a95f0554097c37b2d
commons-fileupload-1.4-bin-zip=ff1e8c581b462913f90b95791f58a97d5ffb48dd8ab1ed94229714573d0ceed7

I have tested this with 'mvn clean test package site' using:
Apache Maven 3.6.0 (97c98ec64a1fdfee7767ce5ffb20918da4f719f3; 2018-10-24T14:41:47-04:00)
Maven home: /usr/local/Cellar/maven/3.6.0/libexec
Java version: 1.8.0_191, vendor: Oracle Corporation, runtime: /Library/Java/JavaVirtualMachines/jdk1.8.0_191.jdk/Contents/Home/jre
Default locale: en_US, platform encoding: UTF-8
OS name: "mac os x", version: "10.14.1", arch: "x86_64", family: "mac"

Details of changes since 1.3.3 are in the release notes:
    https://dist.apache.org/repos/dist/dev/commons/fileupload/1.4-RC2/RELEASE-NOTES.txt
    https://dist.apache.org/repos/dist/dev/commons/fileupload/1.4-RC2/site/changes-report.html

Site:
    https://dist.apache.org/repos/dist/dev/commons/fileupload/1.4-RC2/site
    (note some *relative* links are broken and the 1.4 directories are not yet created - these will be OK once the site is deployed.)

CLIRR Report (compared to 1.3.3): We expect there to be 3 failures here.
    https://dist.apache.org/repos/dist/dev/commons/fileupload/1.4-RC2/site/clirr-report.html
   
RAT Report:
    https://dist.apache.org/repos/dist/dev/commons/fileupload/1.4-RC2/site/rat-report.html

KEYS:
  https://www.apache.org/dist/commons/KEYS

Please review the release candidate and vote.
This vote will close no sooner that 72 hours from now.

  [ ] +1 Release these artifacts
  [ ] +0 OK, but...
  [ ] -0 OK, but really should fix...
  [ ] -1 I oppose this release because...

Thank you,

Rob Tompkins,
Release Manager (using key B6E73D84EA4FCC47166087253FAAD2CD5ECBB314)
---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]


Reply | Threaded
Open this post in threaded view
|

Re: [VOTE] Release Apache Commons FileUpload 1.4 based on RC2

Rob Tompkins
Here’s my +1.

-Rob

> On Dec 24, 2018, at 6:09 AM, Bernd Eckenfels <[hidden email]> wrote:
>
> Hello,
>
> +1
>
> (checked jar cheksums, , compiled java11/mvn3.3.1 on win10, read Reports)
>
> With nits, there is a „No client code changes are required to migrate from version 1.3.0 to 1.3.1.“ sentence which could be removed in the release notes and could be replaced by „1.4 removed serialisation for security, might be a change you Need to accomodate for“ or something like this?
>
> Should we add a „Fixed in 1.4 section“ in the security report only to document that the serialisation and System property are gone? (we had quite some discussion…)
>
>
> Bernd
> Good Holidays everyone
> --
> http://bernd.eckenfels.net
>
> Von: Rob Tompkins
> Gesendet: Montag, 24. Dezember 2018 08:23
> An: Commons Developers List
> Betreff: [VOTE] Release Apache Commons FileUpload 1.4 based on RC2
>
> We have fixed quite a few bugs and added some significant enhancements since Apache Commons FileUpload 1.3.3 was released, so I would like to release Apache Commons FileUpload 1.4.
>
> Apache Commons FileUpload 1.4 RC2 is available for review here:
>    https://dist.apache.org/repos/dist/dev/commons/fileupload/1.4-RC2 (svn revision 31675)
>
> The Git tag commons-fileupload-1.4-RC2 commit for this RC is 047f31576411beee69cf75584ae76531cc9ac753 which you can browse here:
>    https://github.com/apache/commons-fileupload/releases/tag/commons-fileupload-1.4-RC2
>
> Maven artifacts are here:
>    https://repository.apache.org/content/repositories/orgapachecommons-1404/commons-fileupload/commons-fileupload/1.4/
>
> These are the Maven artifacts and their hashes in Nexus:
>
> #Nexus SHA-1s
> commons-fileupload-1.4.jar=f95188e3d372e20e7328706c37ef366e5d7859b0
> commons-fileupload-1.4-test-sources.jar=fbccf3978e3a3c3d08df96a8d1b7174b298e35d8
> commons-fileupload-1.4.pom=65112009d674333c1acfafb4e198ff250d710764
> commons-fileupload-1.4-tests.jar=8c3335b84d252a422546aaf82e716dc73cfc2e48
> commons-fileupload-1.4-sources.jar=d50ee98902746c6a351662fa8b728189d1a30e90
> commons-fileupload-1.4-javadoc.jar=bd6061c92eaa54a63d35acc4f36182893a679cef
>
> #Release SHA-256s
> #Mon Dec 24 02:07:07 EST 2018
> commons-fileupload-1.4-src-tar.gz=4eb7d03ecc48d62d72fde877df321df0f9288b3eb4119f8471417a303a9c0871
> commons-fileupload-1.4-bin-tar.gz=7df64e29e8424a44b6741ddaa0d35766b94d8a56df1f7354a6ee5c491fd96eab
> commons-fileupload-1.4-src-zip=43ea130373f3b827c9322caf62d858e73dc430c55a5ab26a95f0554097c37b2d
> commons-fileupload-1.4-bin-zip=ff1e8c581b462913f90b95791f58a97d5ffb48dd8ab1ed94229714573d0ceed7
>
> I have tested this with 'mvn clean test package site' using:
> Apache Maven 3.6.0 (97c98ec64a1fdfee7767ce5ffb20918da4f719f3; 2018-10-24T14:41:47-04:00)
> Maven home: /usr/local/Cellar/maven/3.6.0/libexec
> Java version: 1.8.0_191, vendor: Oracle Corporation, runtime: /Library/Java/JavaVirtualMachines/jdk1.8.0_191.jdk/Contents/Home/jre
> Default locale: en_US, platform encoding: UTF-8
> OS name: "mac os x", version: "10.14.1", arch: "x86_64", family: "mac"
>
> Details of changes since 1.3.3 are in the release notes:
>    https://dist.apache.org/repos/dist/dev/commons/fileupload/1.4-RC2/RELEASE-NOTES.txt
>    https://dist.apache.org/repos/dist/dev/commons/fileupload/1.4-RC2/site/changes-report.html
>
> Site:
>    https://dist.apache.org/repos/dist/dev/commons/fileupload/1.4-RC2/site
>    (note some *relative* links are broken and the 1.4 directories are not yet created - these will be OK once the site is deployed.)
>
> CLIRR Report (compared to 1.3.3): We expect there to be 3 failures here.
>    https://dist.apache.org/repos/dist/dev/commons/fileupload/1.4-RC2/site/clirr-report.html
>
> RAT Report:
>    https://dist.apache.org/repos/dist/dev/commons/fileupload/1.4-RC2/site/rat-report.html
>
> KEYS:
>  https://www.apache.org/dist/commons/KEYS
>
> Please review the release candidate and vote.
> This vote will close no sooner that 72 hours from now.
>
>  [ ] +1 Release these artifacts
>  [ ] +0 OK, but...
>  [ ] -0 OK, but really should fix...
>  [ ] -1 I oppose this release because...
>
> Thank you,
>
> Rob Tompkins,
> Release Manager (using key B6E73D84EA4FCC47166087253FAAD2CD5ECBB314)
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [hidden email]
> For additional commands, e-mail: [hidden email]
>
>


---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

[RESULT][VOTE] Release Apache Commons FileUpload 1.4 based on RC2

Rob Tompkins-2
In reply to this post by Rob Tompkins-2
Hello all,

Many thanks for the [VOTE] over the holidays and for the discussions about the release. The validations came from:

Bruno Kinoshita: +1,
Bernd Eckenfels: +1, and
Rob Tompkins: +1.

I will do the release promotion and begin working on the documentation surrounding the release.

Cheers,
-Rob

> On Dec 24, 2018, at 2:23 AM, Rob Tompkins <[hidden email]> wrote:
>
> We have fixed quite a few bugs and added some significant enhancements since Apache Commons FileUpload 1.3.3 was released, so I would like to release Apache Commons FileUpload 1.4.
>
> Apache Commons FileUpload 1.4 RC2 is available for review here:
>    https://dist.apache.org/repos/dist/dev/commons/fileupload/1.4-RC2 (svn revision 31675)
>
> The Git tag commons-fileupload-1.4-RC2 commit for this RC is 047f31576411beee69cf75584ae76531cc9ac753 which you can browse here:
>    https://github.com/apache/commons-fileupload/releases/tag/commons-fileupload-1.4-RC2
>
> Maven artifacts are here:
>    https://repository.apache.org/content/repositories/orgapachecommons-1404/commons-fileupload/commons-fileupload/1.4/
>
> These are the Maven artifacts and their hashes in Nexus:
>
> #Nexus SHA-1s
> commons-fileupload-1.4.jar=f95188e3d372e20e7328706c37ef366e5d7859b0
> commons-fileupload-1.4-test-sources.jar=fbccf3978e3a3c3d08df96a8d1b7174b298e35d8
> commons-fileupload-1.4.pom=65112009d674333c1acfafb4e198ff250d710764
> commons-fileupload-1.4-tests.jar=8c3335b84d252a422546aaf82e716dc73cfc2e48
> commons-fileupload-1.4-sources.jar=d50ee98902746c6a351662fa8b728189d1a30e90
> commons-fileupload-1.4-javadoc.jar=bd6061c92eaa54a63d35acc4f36182893a679cef
>
> #Release SHA-256s
> #Mon Dec 24 02:07:07 EST 2018
> commons-fileupload-1.4-src-tar.gz=4eb7d03ecc48d62d72fde877df321df0f9288b3eb4119f8471417a303a9c0871
> commons-fileupload-1.4-bin-tar.gz=7df64e29e8424a44b6741ddaa0d35766b94d8a56df1f7354a6ee5c491fd96eab
> commons-fileupload-1.4-src-zip=43ea130373f3b827c9322caf62d858e73dc430c55a5ab26a95f0554097c37b2d
> commons-fileupload-1.4-bin-zip=ff1e8c581b462913f90b95791f58a97d5ffb48dd8ab1ed94229714573d0ceed7
>
> I have tested this with 'mvn clean test package site' using:
> Apache Maven 3.6.0 (97c98ec64a1fdfee7767ce5ffb20918da4f719f3; 2018-10-24T14:41:47-04:00)
> Maven home: /usr/local/Cellar/maven/3.6.0/libexec
> Java version: 1.8.0_191, vendor: Oracle Corporation, runtime: /Library/Java/JavaVirtualMachines/jdk1.8.0_191.jdk/Contents/Home/jre
> Default locale: en_US, platform encoding: UTF-8
> OS name: "mac os x", version: "10.14.1", arch: "x86_64", family: "mac"
>
> Details of changes since 1.3.3 are in the release notes:
>    https://dist.apache.org/repos/dist/dev/commons/fileupload/1.4-RC2/RELEASE-NOTES.txt
>    https://dist.apache.org/repos/dist/dev/commons/fileupload/1.4-RC2/site/changes-report.html
>
> Site:
>    https://dist.apache.org/repos/dist/dev/commons/fileupload/1.4-RC2/site
>    (note some *relative* links are broken and the 1.4 directories are not yet created - these will be OK once the site is deployed.)
>
> CLIRR Report (compared to 1.3.3): We expect there to be 3 failures here.
>    https://dist.apache.org/repos/dist/dev/commons/fileupload/1.4-RC2/site/clirr-report.html
>
> RAT Report:
>    https://dist.apache.org/repos/dist/dev/commons/fileupload/1.4-RC2/site/rat-report.html
>
> KEYS:
>  https://www.apache.org/dist/commons/KEYS
>
> Please review the release candidate and vote.
> This vote will close no sooner that 72 hours from now.
>
>  [ ] +1 Release these artifacts
>  [ ] +0 OK, but...
>  [ ] -0 OK, but really should fix...
>  [ ] -1 I oppose this release because...
>
> Thank you,
>
> Rob Tompkins,
> Release Manager (using key B6E73D84EA4FCC47166087253FAAD2CD5ECBB314)


---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]