Thanks for the update Colm! Please go ahead to release Santuario then WSS4J, and I believe the next CXF release needs those changes anyway.
Best Regards Freeman On Tue, Feb 13, 2024 at 10:51 AM Colm O hEigeartaigh <cohei...@apache.org> wrote: > Sorry it turns out I'll need to get Santuario 3.0.4 out first. Do I > have time to do this and WSS4J before the next CXF release? > > Colm. > > On Tue, Feb 13, 2024 at 3:28 PM Freeman Fang <freeman.f...@gmail.com> > wrote: > > > > Thanks Colm! > > > > On Tue, Feb 13, 2024 at 10:18 AM Colm O hEigeartaigh < > cohei...@apache.org> wrote: > >> > >> Yes, I'll call a vote today on WSS4J 3.0.3. > >> > >> Colm. > >> > >> On Tue, Feb 13, 2024 at 2:28 PM Freeman Fang <freeman.f...@gmail.com> > wrote: > >> > > >> > +1 to release Apache CXF 4.0.4 > >> > > >> > @Colm O hEigeartaigh Any chance we could have a WSS4J 3.0.3 release > soon? > >> > > >> > Thanks! > >> > Freeman > >> > > >> > On Tue, Feb 13, 2024 at 7:15 AM Jiri Ondrusek <jondr...@redhat.com> > wrote: > >> >> > >> >> Hi, > >> >> > >> >> just for your information, the PR ( > https://github.com/apache/cxf/pull/1660) > >> >> requires version of wss4f to be 3.0.3 (to contain > >> >> https://issues.apache.org/jira/browse/WSS-709) > >> >> > >> >> Best regards, > >> >> Jiri > >> >> > >> >> On Tue, Feb 13, 2024 at 10:53 AM Peter Palaga <ppal...@redhat.com> > wrote: > >> >> > >> >> > Thanks, great to hear that, Andriy. > >> >> > > >> >> > It would be great if we could get > >> >> > https://github.com/apache/cxf/pull/1660 merged in some form > before the > >> >> > release. > >> >> > The main motivation is to be able to run CXF on FIPS-enabled > systems. If > >> >> > the customized algo suite, that the PR proposes, is questionable, > I'd be > >> >> > also fine with introducing a couple of new suites with fixed > >> >> > non-standard names, like already done in the past for fixing CVEs. > It > >> >> > would be nice to hear other community members' thoughts. > >> >> > > >> >> > Thanks again, > >> >> > > >> >> > -- Peter > >> >> > > >> >> > On 13/02/2024 02:35, Andriy Redko wrote: > >> >> > > Hi Peter, > >> >> > > > >> >> > > Thanks a lot for reminding, I belive we are long overdue on > that, @Dan, > >> >> > @Colm > >> >> > > may need your help please preparing the next release train (or > any > >> >> > objection folks)? > >> >> > > Thank you! > >> >> > > > >> >> > > Best Regards, > >> >> > > Andriy Redko > >> >> > > > >> >> > >> Hi, > >> >> > >> we are preparing Quarkus CXF to release it for Quarkus 3.8 > which is > >> >> > going to be a LTS (Long Term Support) release. > >> >> > >> I wonder whether we could count on getting CXF 4.0.4 by > February 21st > >> >> > to be able to use it in that release? > >> >> > >> Thanks, > >> >> > >> -- Peter > >> >> > > > >> >> > > >> >> > > >> >> > >> >> -- > >> >> Jiri Ondrusek <jondr...@redhat.com> > >> >> Senior Software Engineer > >> >> Red Hat Fuse >
