Re: Looking for a champion: resurrect log4j 1.x

[Vladimir Sitnikov]

JB>Anyone can propose new releases on any branches (including old ones).
JB>If you need my support/help on this, please let me know.

I and the other contributors tried to suggest PRs, however, log4j pmc
actively denies them.
They suggest contributors should focus on polishing log4j 1->2
compatibility layer.
Making the compatibility 100% correct is hard, so I believe forcing
everybody to upgrade is not the right thing to do.

JB>Anyone can propose new releases on any branches (including old ones).

log4j pmc denies migrating from SVN to Git, so it is hard to even propose a
PR :( (see [4] in the first message)

JB>If you need my support/help on this

Did you mean "help with resurrecting" or "help with convincing log4j pmc
accepting PRs"? :)

Vladimir

Re:Re: [Help] How to check the website check

[陈明雨]

Thanks Cris and Yonglun, I will check it!




--

此致！Best Regards
陈明雨 Mingyu Chen

Email:
chenmin...@apache.org





在 2021-12-20 14:59:23，"Zhang Yonglun"  写道：
>Hi Mingyu,
>
>I guess the check scripts use the command like `curl` to get the content
>from the homepage.
>curl https://doris.incubator.apache.org/ will not get any content from
>Doris homepage, and all checks will fail.
>
>--
>
>Zhang Yonglun
>Apache ShenYu (Incubating)
>Apache ShardingSphere
>
>
>陈明雨  于2021年12月18日周六 10:43写道：
>
>> Dear IPMC:
>>
>>
>> This is from Doris community. And this is our website[1]
>> I noticed that our website didn't pass the website check here[2]. But I
>> don't know how to fix it.
>>
>>
>> For example, the check says the Disclaimer is missing(or wrong format).
>> But we do have a Disclaimer at the bottom of the website, and the text is
>> matched.
>>
>>
>> And other checks like "Foundation", "Events" are all exist on the website.
>>
>>
>> Could anyone tell me how to fix it? Thanks a lot!
>>
>>
>> [1] http://doris.incubator.apache.org/master/en/
>> [2] https://whimsy.apache.org/pods/project/doris
>>
>>
>>
>> --
>>
>> 此致！Best Regards
>> 陈明雨 Mingyu Chen
>>
>> Email:
>> chenmin...@apache.org

Re: Looking for a champion: resurrect log4j 1.x

[JB Onofré]

Hi

I don’t think you need the incubator there. You can propose to log4j pmc to 
move forward on log4j 1.x. 
Anyone can propose new releases on any branches (including old ones). 
If you need my support/help on this, please let me know. 

Just my €0.01 ;)

Regards 
JB

> Le 20 déc. 2021 à 08:27, Vladimir Sitnikov  a 
> écrit :
> 
> Hi,
> 
> I want to resurrect log4j 1.x to fix well-known security issues.
> I'm looking for the champion and committers.
> 
> log4j 1.x is a wildly used logging library, so releasing a secured version
> would silence CVE warnings
> all over the world, and it would enable users to focus on more relevant
> tasks than "upgrading from log4j1 to log4j2".
> 
> I do not expect active log4j1 development, however, I would strongly focus
> on fixing the security issues.
> 
> Unfortunately, there are lots of applications that can't easily upgrade to
> log4j2, and they are exposed to security issues.
> I did try my best cooperating with the current logging PMC, and it looks
> like they
> are not interested in fixing 1.x (see [1], [2], [3], [4])
> 
> I'm a member of PMC on Apache JMeter and Apache Calcite projects, so
> I am familiar with the way Apache projects are governed.
> 
> [1]: https://lists.apache.org/thread/mlpb9v15r8qzpc58xnjn99r6tf9yy0p5
> [2]: https://lists.apache.org/thread/hq2m11f1w9yp031r5f65b9h4ym2zy1kc
> [3]: https://lists.apache.org/thread/tw172svxt1q6wds7lt9szyjw2sxjf34n
> [4]: https://lists.apache.org/thread/y89v84okzs76g2yl760vx5yc0w1y4yd8
> 
> Vladimir


-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Looking for a champion: resurrect log4j 1.x

[Vladimir Sitnikov]

Hi,

I want to resurrect log4j 1.x to fix well-known security issues.
I'm looking for the champion and committers.

log4j 1.x is a wildly used logging library, so releasing a secured version
would silence CVE warnings
all over the world, and it would enable users to focus on more relevant
tasks than "upgrading from log4j1 to log4j2".

I do not expect active log4j1 development, however, I would strongly focus
on fixing the security issues.

Unfortunately, there are lots of applications that can't easily upgrade to
log4j2, and they are exposed to security issues.
I did try my best cooperating with the current logging PMC, and it looks
like they
are not interested in fixing 1.x (see [1], [2], [3], [4])

I'm a member of PMC on Apache JMeter and Apache Calcite projects, so
I am familiar with the way Apache projects are governed.

[1]: https://lists.apache.org/thread/mlpb9v15r8qzpc58xnjn99r6tf9yy0p5
[2]: https://lists.apache.org/thread/hq2m11f1w9yp031r5f65b9h4ym2zy1kc
[3]: https://lists.apache.org/thread/tw172svxt1q6wds7lt9szyjw2sxjf34n
[4]: https://lists.apache.org/thread/y89v84okzs76g2yl760vx5yc0w1y4yd8

Vladimir

Re: [Help] How to check the website check

[Zhang Yonglun]

Hi Mingyu,

I guess the check scripts use the command like `curl` to get the content
from the homepage.
curl https://doris.incubator.apache.org/ will not get any content from
Doris homepage, and all checks will fail.

--

Zhang Yonglun
Apache ShenYu (Incubating)
Apache ShardingSphere


陈明雨  于2021年12月18日周六 10:43写道：

> Dear IPMC:
>
>
> This is from Doris community. And this is our website[1]
> I noticed that our website didn't pass the website check here[2]. But I
> don't know how to fix it.
>
>
> For example, the check says the Disclaimer is missing(or wrong format).
> But we do have a Disclaimer at the bottom of the website, and the text is
> matched.
>
>
> And other checks like "Foundation", "Events" are all exist on the website.
>
>
> Could anyone tell me how to fix it? Thanks a lot!
>
>
> [1] http://doris.incubator.apache.org/master/en/
> [2] https://whimsy.apache.org/pods/project/doris
>
>
>
> --
>
> 此致！Best Regards
> 陈明雨 Mingyu Chen
>
> Email:
> chenmin...@apache.org

Re: [DISCUSS] Graduate Apache AGE Incubating as a Top Level Project

[Felix Cheung]

The community should definitely fix/address these.

As for Committer bar, the community should review the contributors to look
for sustained contributors that should be voted in. PPMC should discuss
this.

I couldn’t find anything about @agedb.io - can Andrew explain the
connection? At least, this might be a branding / trademark issue that the
PPMC should sort out.



On Sun, Dec 19, 2021 at 12:39 AM Justin Mclean 
wrote:

> Hi,
>
> I’m seeing some issues here:
> - Indications that the committer/PPMC bar may be too high and not all
> forms of contribution recognised.
> - A new PPMC member not being added in the correct way
> - Other than that recent addition no other PPMC members added
> - May be some concern about employment diversity of the PPMC members
> - Issues with headers and licensing a few months back
> - People not signed up to the right mailing lists
> - I see in the maturity guide under releases it mentions docker files but
> these don’t seem to be documented on the website? Where are these located?
> This related JIRA is a little concerning [1].
> - There are some minor trademark issues on the bitnine site e.g [2]
> - Releases of Age-viewer not following ASF policy
> - Links to download 0.5.0 and 0.6.0 on the download page are not correct
> [3]
> - I notice one person replied to this thread had a agedb.io email address
> - what is it relationship with the project?
>
> It would be great if I could get some mentor feedback here t see if these
> are just just minor issues or if some more work needs o be done before the
> project should consider graduation.
>
> Kind Regards.
> Justin
>
> 1. https://issues.apache.org/jira/browse/INFRA-22024
> 2. https://bitnine.net/blog-postgresql/thestack-apache-age/
>
>
> -
> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
> For additional commands, e-mail: general-h...@incubator.apache.org
>
>

[VOTE] Release Apache YuniKorn (Incubating) 0.12.1 (RC1)

[Chaoran Yu]

Hello IPMC,

The Apache YuniKorn community has voted and approved the release of Apache 
YuniKorn (incubating) 0.12.1 (RC1). We now kindly request IPMC members review 
and vote for this release.

YuniKorn is a standalone, universal resource scheduler that can support both 
long-running and batch workloads. The current release offers enhancements and 
improvements in a number of areas: node sorting performance, gang scheduling, 
logging and observability, and scheduler interface. It also contains an 
upgraded Kubernetes dependency (v1.20) and now supports running on Kubernetes 
versions 1.19, 1.20 and 1.21.

YuniKorn community vote thread: 
https://lists.apache.org/thread/1yr4y7tftth5bfxlxfy4l8gmo3ypk4d2 
 

Vote result thread: 
https://lists.apache.org/thread/z1f8wzx3t1n07qr8s4nfw224n74zryrs 
 

Issues included in this release: 
https://issues.apache.org/jira/projects/YUNIKORN/versions/12350843 
 

The release candidate: 
https://dist.apache.org/repos/dist/dev/incubator/yunikorn/0.12.1/ 
 

This release has been signed with a PGP available here: 
https://dist.apache.org/repos/dist/dev/incubator/yunikorn/KEYS 
 

Git tag for the release:
- https://github.com/apache/incubator-yunikorn-core/tree/v0.12.1 
 
- https://github.com/apache/incubator-yunikorn-k8shim/tree/v0.12.1 
 
- https://github.com/apache/incubator-yunikorn-scheduler-interface/tree/v0.12.1 
 
- https://github.com/apache/incubator-yunikorn-web/tree/v0.12.1 
 

The vote will be open for at least 72 hours or until the necessary number of 
votes is reached.

Please vote accordingly:
[ ] +1 Approve the release of Apache YuniKorn (Incubating) 0.12.1
[ ] +0
[ ] -1 Do not approve (please specify the reason)

Thanks,
Chaoran Yu
Apache YuniKorn (Incubating)

Re: [VOTE] Graduate Apache AGE (Incubating) as a Top Level Project

[Eya Badal]

Dear everyone, 

We are closing this vote, for now, to address and fix the feedbacks that we 
received in the [DISCUSS] thread for Apache AGE TLP graduation. We will reopen 
the vote once we address all the feedback. 

Thank you very much, 
Eya 

On 2021/12/16 21:19:08 Eya Badal wrote:
> Dear Incubator Community,
> 
> 
> 
> Having passed the Community Graduation Vote [1] by the AGE community with a
> 
> vote result to graduate the incubation [2], we have
> 
> discussed Apache AGE's graduation in the general@incubator [DISCUSS] thread
> 
> [3], where no issues were raised.
> 
> 
> 
> 
> 
> Here is the official request to vote to graduate the Apache AGE project as a
> Top Level Project.
> 
> 
> 
> Please provide your vote as one of the following options:
> 
> 
> 
> [ ] +1 - Recommend graduation of Apache AGE as a Top Level
> 
> 
> 
> [ ] 0 - I don't feel strongly about it, but don't object
> 
> 
> 
> [ ] -1 - Do not recommend the graduation of Apache AGE because …
> 
> 
> 
> 
> 
> The VOTE will remain open for at least 72 hours.
> 
> 
> 
> 
> 
> In addition to building and releasing software the Apache way, the AGE
> project community has grown in the following areas:
> 
> 
> 
>- Close to 900 commits
>- 68 unique contributors
>- 4 new committers and 1 new PPMC from 3 different companies/institutions
>- Gathered > 500 GitHub stars
>- 4 Apache releases (0.3.0, 0.4.0, 0.5.0, 0.6.0) [4]
>- 6 mentors, 6 PPMC members (mentors excluded) and 4 committers (mentors
>and PPMC members excluded)
>- Contributions span more than 20 countries across the globe including
>Australia, Belarus, Belgium, China, France, Germany, Ireland, Israel,
>Italy, Luxembourg, The Netherlands, Nigeria, The Philippines, Russia, South
>Korea, Thailand, UK, Ukraine, USA and Vietnam
>- Developed and maintained Apache AGE website [5]
>- Created and automated documentation to supports multiple versions of
>AGE. [6]
>- Developer conversations at d...@age.apache.org
>- Assessed ourselves against the Apache Project maturity matrix [7] and
>didn't find any issues
> 
> 
> [1] https://lists.apache.org/thread/q2cgbnhvpzk2k0m8yfh89lzc75qym9k9
> 
> [2] https://lists.apache.org/thread/lr3x9bm8jyv6o5kvyh7cf3tyxrpp2kwm
> 
> [3] https://lists.apache.org/thread/jvrtvcw1zb8gf286css7tvol94r3qd68
> 
> [4] Release notes at Apache AGE website  under the
> Releases menu.
> 
> [5] https://age.apache.org/
> 
> [6] Documentation at Apache AGE website  under the
> Documentation menu.
> 
> [7] Apache Project maturity matrix at Apache AGE website
>  under the COMMUNITY menu.
> 
> 
> 
> 
> 
> 
> 
> Establish the Apache AGE Project
> 
> 
> 
> WHEREAS, the Board of Directors deems it to be in the best interests of
> 
> the Foundation and consistent with the Foundation's purpose to establish
> 
> a Project Management Committee charged with the creation and maintenance
> 
> of open-source software, for distribution at no charge to the public,
> 
> related to combining the most widely-adopted graph query open technology
> 
> with one of the most advanced relational database system software.
> 
> 
> 
> NOW, THEREFORE, BE IT RESOLVED, that a Project Management Committee
> 
> (PMC), to be known as the "Apache AGE Project", be and hereby is
> 
> established pursuant to Bylaws of the Foundation; and be it further
> 
> 
> 
> RESOLVED, that the Apache AGE Project be and hereby is responsible for
> 
> the creation and maintenance of software related to combining the most
> 
> widely-adopted graph query open technology with one of the most advanced
> 
> relational database system software.; and be it further
> 
> 
> 
> RESOLVED, that the office of "Vice President, Apache AGE" be and hereby
> 
> is created, the person holding such office to serve at the direction of
> 
> the Board of Directors as the chair of the Apache AGE Project, and to
> 
> have primary responsibility for management of the projects within the
> 
> scope of responsibility of the Apache AGE Project; and be it further
> 
> 
> 
> RESOLVED, that the persons listed immediately below be and hereby are
> 
> appointed to serve as the initial members of the Apache AGE Project:
> 
> 
> 
> * Dehowe Feng 
> 
> * Eya Badal 
> 
> * Felix Cheung 
> 
> * Jasper Blues 
> 
> * John Gemignani 
> 
> * Josh Innis 
> 
> * Juan Pan 
> 
> * Kevin Ratnasekera 
> 
> * Mason Sharp 
> 
> * Raphael Bircher 
> 
> * Suneel Marthi 
> 
> * Von Gosling 
> 
> 
> 
> NOW, THEREFORE, BE IT FURTHER RESOLVED, that Eya Badal be appointed to
> 
> the office of Vice President, Apache AGE, to serve in accordance with
> 
> and subject to the direction of the Board of Directors and the Bylaws of
> 
> the Foundation until death, resignation, retirement, removal or
> 
> disqualification, or until a successor is 

Re: [DISCUSS] Graduate Apache AGE Incubating as a Top Level Project

[Justin Mclean]

Hi,

I’m seeing some issues here:
- Indications that the committer/PPMC bar may be too high and not all forms of 
contribution recognised.
- A new PPMC member not being added in the correct way
- Other than that recent addition no other PPMC members added
- May be some concern about employment diversity of the PPMC members
- Issues with headers and licensing a few months back
- People not signed up to the right mailing lists
- I see in the maturity guide under releases it mentions docker files but these 
don’t seem to be documented on the website? Where are these located? This 
related JIRA is a little concerning [1].
- There are some minor trademark issues on the bitnine site e.g [2]
- Releases of Age-viewer not following ASF policy
- Links to download 0.5.0 and 0.6.0 on the download page are not correct [3]
- I notice one person replied to this thread had a agedb.io email address - 
what is it relationship with the project?

It would be great if I could get some mentor feedback here t see if these are 
just just minor issues or if some more work needs o be done before the project 
should consider graduation.

Kind Regards.
Justin

1. https://issues.apache.org/jira/browse/INFRA-22024
2. https://bitnine.net/blog-postgresql/thestack-apache-age/


-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org