Re: [CLI] Deprecated options and helpformatting

[Gary Gregory]

The RC is out.

Gary

On Fri, May 17, 2024 at 12:27 PM Claude Warren  wrote:
>
> Gary,
>
> I think the CLI release candidate can be cut now.  I didn't see any more
> issues when I was fixing the code.  So I am
> +1 on cutting a release candidate.
>
> On Sun, May 12, 2024 at 8:49 PM Gary Gregory  wrote:
>
> > How does it look now?
> >
> > Would you check git master is OK, then I can cut a release candidate
> > later in the week.
> >
> > Gary
> >
> > On Sat, May 11, 2024 at 6:28 AM Claude Warren  wrote:
> > >
> > > Also, it appears that the deprecatedHandler is only tested on the string
> > > option processing.  if the application retains a list of Options and
> > passes
> > > those in to be checked the deprecation check is not execute.
> > >
> > > On Sat, May 11, 2024 at 12:18 PM Claude Warren 
> > wrote:
> > >
> > > > Greetings,
> > > >
> > > > I see that there is a deprecated option in cli 1.7.0, and that it has
> > some
> > > > nice data.  But I don't see how to display the info in the help.
> > > >
> > > > It looks like the only option is to print "[Deprecated]" without any
> > > > information from the deprecated info.  I think the HelpPrinter needs a
> > > > function (similar to the command line deprecatedHandler) to convert the
> > > > object to a string that can be prefixed to the option help output
> > where the
> > > > "[Deprecated]" is now.
> > > >
> > > > Does this make sense?
> > > >
> > > > Is there something I am overlooking that already does this?
> > > >
> > > > Claude
> > > >
> > > >
> > > >
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> > For additional commands, e-mail: dev-h...@commons.apache.org
> >
> >
>
> --
> LinkedIn: http://www.linkedin.com/in/claudewarren

-
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org

[VOTE] Release Apache Commons CLI 1.8.0 based on RC1

[Gary Gregory]

We have fixed a few bugs and added enhancements since Apache Commons
CLI 1.7.0 was released, so I would like to release Apache Commons CLI
1.8.0.

Apache Commons CLI 1.8.0 RC1 is available for review here:
https://dist.apache.org/repos/dist/dev/commons/cli/1.8.0-RC1 (svn
revision 69270)

The Git tag commons-cli-1.8.0-RC1 commit for this RC is
c4d8376b351df7d6485b83f005483fe2a243 which you can browse here:

https://gitbox.apache.org/repos/asf?p=commons-cli.git;a=commit;h=c4d8376b351df7d6485b83f005483fe2a243
You may checkout this tag using:
git clone https://gitbox.apache.org/repos/asf/commons-cli.git
--branch commons-cli-1.8.0-RC1 commons-cli-1.8.0-RC1

Maven artifacts are here:

https://repository.apache.org/content/repositories/orgapachecommons-1730/commons-cli/commons-cli/1.8.0/

These are the artifacts and their hashes:

#Release SHA-512s
#Sat May 18 01:02:06 UTC 2024
commons-cli-1.8.0-bin.tar.gz=cabf565ae359e5c1928230d27c6ea41b284a4230b1ed47382728d759547810d506b5bfceaa516f1750ad3a6c5967bc65143fe1213a4a5b4896e85761c81feaa0
commons-cli-1.8.0-bin.zip=8374fce9e9ef6dc8038693a77e0f4593968babe41c618ab1773f48601c6edf8893b0dd753cac1d82f6dec78a3382ebf8042a212234f100dddec0c59e638d4f38
commons-cli-1.8.0-bom.json=2d9b8cb5333bf31a48fdb1037dec84c48434c619a4fe421529df7386f2ede67b76c61d2c490bbb5b6af301f92262a95fb3dff30b91468bb4b6ce555f2f1e1026
commons-cli-1.8.0-bom.xml=00f5c34db21083b3f2677a931d9b2e10de60c40fa3f58fc2a01ea34e4b5227b800d58231df9194f2a39d2c40e062b859bce5399f93d2188ca230be81bfb93106
commons-cli-1.8.0-javadoc.jar=869d508dd04c785bb64b1cb0103ea807dcc595434b47263c843dc7410deab2f18423507751e828fce754627fb8e4d5f0190c4241754c72271e1fcdaeecd4c348
commons-cli-1.8.0-sources.jar=8dafa2b16fb87e1422ce3b55575a145b24749ee8f2f4e38a5404940fdcca5ddcf471bd58ad3bb2f41f5057d543ced41bf6c4d1a4d6b8af708c71148abf75be59
commons-cli-1.8.0-src.tar.gz=93121734d15c380f2aeabcfd576497a8b52e5c64070de311cc1ae141dd6980365246b0763d941794e1ddd2f5f682339a5552b601afd9b5585d8d0d0f2e31
commons-cli-1.8.0-src.zip=8279dfd91fa12b3cd6b5527f68e22c2cc262bcbace02395253d784d88a6cf9fd0e5c83ee5c28daa4dd6f66b362d2b794163e02254be127b15cb5189c15e76e2b
commons-cli-1.8.0-test-sources.jar=5fe999d231cc816599c7a8a5ed807940dc6ae020ce847865f56ceef88ed3d8f920e672d145e7754b78472b4b2e61ccaf35ca493c86d63530fd6cfdbf8412b990
commons-cli-1.8.0-tests.jar=faf2191186a6c477d8bd4843310805f1ea4cb6d7d254a8a9588968101438d6ad408dbb98d055ca4e0b5ca30b6896a91724aa20305b28d5e4223820e095c0e3c1
commons-cli_commons-cli-1.8.0.spdx.json=b3b7c227e8eedbe22efa25155fa89497890730942bbfc60855bf76d617ab88a7212c7253a4e6118766157bc4932ec5fd3717821670ed8131fe455e53815277b9

I have tested this with 'mvn' and 'mvn -V -Prelease -Ptest-deploy -P
jacoco -P japicmp clean package site deploy' using:

openjdk version "17.0.11" 2024-04-16
OpenJDK Runtime Environment Homebrew (build 17.0.11+0)
OpenJDK 64-Bit Server VM Homebrew (build 17.0.11+0, mixed mode, sharing)

Apache Maven 3.9.6 (bc0240f3c744dd6b6ec2920b3cd08dcc295161ae)
Maven home: /usr/local/Cellar/maven/3.9.6/libexec
Java version: 17.0.11, vendor: Homebrew, runtime:
/usr/local/Cellar/openjdk@17/17.0.11/libexec/openjdk.jdk/Contents/Home
Default locale: en_US, platform encoding: UTF-8
OS name: "mac os x", version: "14.4.1", arch: "x86_64", family: "mac"

Darwin  23.4.0 Darwin Kernel Version 23.4.0: Fri Mar 15 00:11:05
PDT 2024; root:xnu-10063.101.17~1/RELEASE_X86_64 x86_64

Details of changes since 1.7.0 are in the release notes:

https://dist.apache.org/repos/dist/dev/commons/cli/1.8.0-RC1/RELEASE-NOTES.txt

https://dist.apache.org/repos/dist/dev/commons/cli/1.8.0-RC1/site/changes-report.html

Site:
https://dist.apache.org/repos/dist/dev/commons/cli/1.8.0-RC1/site/index.html
(note some *relative* links are broken and the 1.8.0 directories
are not yet created - these will be OK once the site is deployed.)

JApiCmp Report (compared to 1.7.0):

https://dist.apache.org/repos/dist/dev/commons/cli/1.8.0-RC1/site/japicmp.html

RAT Report:

https://dist.apache.org/repos/dist/dev/commons/cli/1.8.0-RC1/site/rat-report.html

KEYS:
  https://downloads.apache.org/commons/KEYS

Please review the release candidate and vote.
This vote will close no sooner than 72 hours from now.

  [ ] +1 Release these artifacts
  [ ] +0 OK, but...
  [ ] -0 OK, but really should fix...
  [ ] -1 I oppose this release because...

Thank you,

Gary Gregory,
Release Manager (using key 86fdc7e2a11262cb)

For following is intended as a helper and refresher for reviewers.

Validating a release candidate
==

These guidelines are NOT complete.

Requirements: Git, Java, Maven.

You can validate a release from a release candidate (RC) tag as follows.

1a) Clone and checkout the RC tag

git clone https://gitbox.apache.org/repos/asf/commons-cli.git --branch
commons-cli-1.8.0-RC1 commons-cli-1.8.0-RC1
cd commons-cli-1.8.0-RC1

1b) Download and unpack the source archive from:

[VOTE] Release Apache Commons Daemon 1.4.0 based on RC1

[Mark Thomas]

We have fixed a few bugs, added enhancements and updated the minimum 
Java and Windows version since Apache Commons Daemon 1.3.4 was released, 
so I would like to release Apache Commons Daemon 1.4.0.


Apache Commons Daemon 1.4.0 RC1 is available for review here:
https://dist.apache.org/repos/dist/dev/commons/daemon/1.4.0-RC1 
(svn revision 69267)


The Git tag commons-daemon-1.4.0-RC1 commit for this RC is 
6b911598b815a4a7b8ab2b8a8a2157593effc6bc which you can browse here:


https://gitbox.apache.org/repos/asf?p=commons-daemon.git;a=commit;h=6b911598b815a4a7b8ab2b8a8a2157593effc6bc
You may checkout this tag using:
git clone https://gitbox.apache.org/repos/asf/commons-daemon.git 
--branch commons-daemon-1.4.0-RC1 commons-daemon-1.4.0-RC1


Maven artifacts are here:

https://repository.apache.org/content/repositories/orgapachecommons-1729/commons-daemon/commons-daemon/1.4.0/

These are the artifacts and their hashes:

#Release SHA-512s
#Fri May 17 16:28:36 BST 2024
commons-daemon-1.4.0-bin-windows.zip=5974d638994cbf821c17d0fc6b69bace08b0314ea5614c1a57175a02cda7c57a6b8ee49f8892206061f9d3385da5841db31d9ce9b3ce74cf4afc10ad8e68
commons-daemon-1.4.0-bin.tar.gz=15fccd35a711f91e5b4466d56f50585c7ae3a787a39c16e006617c86b9e9feee9fbf902582b08c2e896ca6a655500d805fdbb9c97f04f70321631168b8d42c81
commons-daemon-1.4.0-bin.zip=3652ed9ed9cf6fcb0d4b5067570c322b0b3c9ae0a81dee1d7b0992bb7ff5654a7c4dc89c0c2d966c9962778288c6ad60bd8ac10f62898c9e10261bec6e61d3ea
commons-daemon-1.4.0-bom.json=0de219d72a63d8154f42ef5bd6c348936e14d65efec3e54a55ebfb9bc757e4ceac7aabd8c8b85d94657ed76f44069ac56b2bb231aba5419733f00a3dc85f6601
commons-daemon-1.4.0-bom.xml=bc0dba27a50ca6c5d30015f97bd258325452e6fabefd1cf38b94d0ce5699233a18b456fd701761a5f8cedf847cbd152879e0dec9add548611d5593b910c90244
commons-daemon-1.4.0-javadoc.jar=8fd299a3d228c4ab4ea8455b81319d80b3e27cac1c31bed1e03cc7a3391d59f18e037adcb72e68202511a45ef5bc49274d6e9cf38c860b55bb9b874a92044d2e
commons-daemon-1.4.0-native-src.tar.gz=8a54200d547ef7ee647e8d4910fd3cb55bf7d8fc75de8f0e01bc701ef0b386ddc3843e6c9189e34d2afd62060fb6299ea83c421cf60c7d105d04cb45904500d3
commons-daemon-1.4.0-native-src.zip=cb6b12bbd775eba7d012744cf908f42fc6d39e421c1f41546f230b431c1d239cc3e2d9c09520165b5db7a95701b651a6738a5d1915d39a4520b1ff07ce4f65a5
commons-daemon-1.4.0-sources.jar=701b3646ea29de5ea69d72c8741a2dc56a44a57168c0e7d1afab87f89d9cab75c413f1fe3d09f5765e4dbe2b2af0951125ee0f6a0a4d5b4fafcf49bfd0b03cbf
commons-daemon-1.4.0-src.tar.gz=285f33ce36e2591f49b6067da16612ec1b49b23a8637d077618aefaae4452993dc2a31660665551ea761857390d940100e162e205fe7c0fad9c72374f2d15bb8
commons-daemon-1.4.0-src.zip=190d6b8b65d71594ff02bade3fbcd6b09d5b2e68413a2a23ef2cbf945d2e19655c1d480484ec198f7e140eaa3744c970770cea17498c12f9bfe284f5bd28a51d
commons-daemon-1.4.0-test-sources.jar=e889d8b5bda1e0a89d33741e9308739b732e938ef13b552acf7dc0ba52845766e6a49f3fbb6c821655d295e18b9accbfeac1c26b8afacc088084511cea301bcd
commons-daemon-1.4.0-tests.jar=b392bdaa59e3d75e7aa023f65514385edfc44bc1bc088826b643186bfeaf47215375a814af3637e585bde201dd6ee5ef3669f2b4a3cf2e275da4fc6ccd91dfda
commons-daemon_commons-daemon-1.4.0.spdx.json=47c669c16aca4588d4940a4dcec162a619587f8fc8d6a74a5abbe8562296f0eb08f271db531e678a939355a9b7f669cb9ade864d953c77402b60e8c183f1faed



Details of changes since 1.3.4 are in the change log:

https://dist.apache.org/repos/dist/dev/commons/daemon/1.4.0-RC1/RELEASE-NOTES.txt

https://github.com/apache/commons-daemon/blob/master/src/changes/changes.xml

KEYS:
  https://downloads.apache.org/commons/KEYS

Please review the release candidate and vote.
This vote will close no sooner than 72 hours from now.

  [ ] +1 Release these artifacts
  [ ] +0 OK, but...
  [ ] -0 OK, but really should fix...
  [ ] -1 I oppose this release because...

Thank you,

Mark Thomas,
Release Manager (using key 10C01C5A2F6059E7)

For following is intended as a helper and refresher for reviewers.

Validating a release candidate
==

These guidelines are NOT complete.

Requirements: Git, Java, Maven.

You can validate a release from a release candidate (RC) tag as follows.

1a) Clone and checkout the RC tag

git clone https://gitbox.apache.org/repos/asf/commons-daemon.git 
--branch commons-daemon-1.4.0-RC1 commons-daemon-1.4.0-RC1

cd commons-daemon-1.4.0-RC1

1b) Download and unpack the source archive from:

https://dist.apache.org/repos/dist/dev/commons/daemon/1.4.0-RC1/source

2) Check Apache licenses

This step is not required if the site includes a RAT report page which 
you then must check.


mvn apache-rat:check

3) Check binary compatibility

Older components still use Apache Clirr:

This step is not required if the site includes a Clirr report page which 
you then must check.


mvn clirr:check

Newer components use JApiCmp with the japicmp Maven Profile:

This step is not required if the site includes a JApiCmp report page 
which you then must check.


mvn install -DskipTests -P japicmp japicmp:cmp

4) Build the package

mvn -V 

Re: [CLI] Deprecated options and helpformatting

[Claude Warren]

Gary,

I think the CLI release candidate can be cut now.  I didn't see any more
issues when I was fixing the code.  So I am
+1 on cutting a release candidate.

On Sun, May 12, 2024 at 8:49 PM Gary Gregory  wrote:

> How does it look now?
>
> Would you check git master is OK, then I can cut a release candidate
> later in the week.
>
> Gary
>
> On Sat, May 11, 2024 at 6:28 AM Claude Warren  wrote:
> >
> > Also, it appears that the deprecatedHandler is only tested on the string
> > option processing.  if the application retains a list of Options and
> passes
> > those in to be checked the deprecation check is not execute.
> >
> > On Sat, May 11, 2024 at 12:18 PM Claude Warren 
> wrote:
> >
> > > Greetings,
> > >
> > > I see that there is a deprecated option in cli 1.7.0, and that it has
> some
> > > nice data.  But I don't see how to display the info in the help.
> > >
> > > It looks like the only option is to print "[Deprecated]" without any
> > > information from the deprecated info.  I think the HelpPrinter needs a
> > > function (similar to the command line deprecatedHandler) to convert the
> > > object to a string that can be prefixed to the option help output
> where the
> > > "[Deprecated]" is now.
> > >
> > > Does this make sense?
> > >
> > > Is there something I am overlooking that already does this?
> > >
> > > Claude
> > >
> > >
> > >
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> For additional commands, e-mail: dev-h...@commons.apache.org
>
>

-- 
LinkedIn: http://www.linkedin.com/in/claudewarren

Re: [Daemon] Anything to appease "Wrong type of arguments to formatting function"

[Gary Gregory]

I dismissed those 3 as false-positives.

TY,
Gary

On Fri, May 17, 2024 at 10:36 AM Mark Thomas  wrote:
>
> Set them as false positives or just ignore them.
>
> Mark
>
>
> On 17/05/2024 15:09, Gary Gregory wrote:
> > Mark and all:
> >
> > Is there anything smile to do to appease the warnings "Wrong type of
> > arguments to formatting function" in see
> > https://github.com/apache/commons-daemon/security/code-scanning ?
> >
> > TY
> > Gary
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> > For additional commands, e-mail: dev-h...@commons.apache.org
> >
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> For additional commands, e-mail: dev-h...@commons.apache.org
>

-
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org

Re: [Daemon] Anything to appease "Wrong type of arguments to formatting function"

[Mark Thomas]

Set them as false positives or just ignore them.

Mark


On 17/05/2024 15:09, Gary Gregory wrote:

Mark and all:

Is there anything smile to do to appease the warnings "Wrong type of
arguments to formatting function" in see
https://github.com/apache/commons-daemon/security/code-scanning ?

TY
Gary

-
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org



-
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org

[Daemon] Anything to appease "Wrong type of arguments to formatting function"

[Gary Gregory]

Mark and all:

Is there anything smile to do to appease the warnings "Wrong type of
arguments to formatting function" in see
https://github.com/apache/commons-daemon/security/code-scanning ?

TY
Gary

-
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org

Re: Is commons-digester still an active project?

[Gary Gregory]

Hello,

We can create a release candidate anytime, we just need a reason and
release manager to step up. You can checkout git master to confirm
compatibility. In general bumping dependencies only is not enough of a
driver to create a release since it is simple for any build to update
those. It also not has been a priority compared to other components.

HTH,
Gary

On Fri, May 17, 2024, 5:42 AM Mclachlan, Alan
 wrote:

> Hi
>
> Is commons-digester still an active project?
> I ask because while it's not in the Attic, the last release (3.2) was in
> 2011.
>
> There are two CVEs in a dependency (CVE-2019-10086 and CVE-2014-0114).
>
> Is there going to be a commons-digester with an uplifted version of
> commons-beanutils?
> Or is commons-digester destined for the Apache Attic?
>
> regards
>
> Alan McLachlan
> ACI Worldwide
> www.aciworldwide.com
>
> 
> [https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg]<
> http://www.aciworldwide.com>
> This email message and any attachments may contain confidential,
> proprietary or non-public information. The information is intended solely
> for the designated recipient(s). If an addressing or transmission error has
> misdirected this email, please notify the sender immediately and destroy
> this email. Any review, dissemination, use or reliance upon this
> information by unintended recipients is prohibited. Any opinions expressed
> in this email are those of the author personally.
>

Is commons-digester still an active project?

[Mclachlan, Alan]

Hi

Is commons-digester still an active project?
I ask because while it's not in the Attic, the last release (3.2) was in 2011.

There are two CVEs in a dependency (CVE-2019-10086 and CVE-2014-0114).

Is there going to be a commons-digester with an uplifted version of 
commons-beanutils?
Or is commons-digester destined for the Apache Attic?

regards

Alan McLachlan
ACI Worldwide
www.aciworldwide.com


[https://go.aciworldwide.com/rs/030-ROK-804/images/aci-footer.jpg]
This email message and any attachments may contain confidential, proprietary or 
non-public information. The information is intended solely for the designated 
recipient(s). If an addressing or transmission error has misdirected this 
email, please notify the sender immediately and destroy this email. Any review, 
dissemination, use or reliance upon this information by unintended recipients 
is prohibited. Any opinions expressed in this email are those of the author 
personally.