+1. Just one thing I noticed Shawn, is that /lib/ehcache-2.10.9.2.jar contains a large amount of embedded CVEs (Jackson, Jetty), is it planned to update to ehcache 3.x? There are also CVEs reported against ./WEB-INF/lib/guava-30.1-jre.jar + ./WEB-INF/lib/mina-core-2.2.2.jar. Other directory projects have set up dependabot alerts so it displays in GitHub whether dependencies have CVEs or not.
Colm. On Mon, Sep 4, 2023 at 11:10 PM Emmanuel Lécharny <elecha...@gmail.com> wrote: > > My +1. > > The problem I had was due to the presence of the slapd.properties file. > Once removed, all the tests were ok. > > Built from tag and from zip file, signature verified, tests passed green. > > Thanks Shawn ! > > On 01/09/2023 22:53, Shawn McKinney wrote: > > Hello, > > > > This is an announcement to vote for the next release of Apache Directory > > Fortress, 3.0.0. > > > > Here are the list of bugs and enhancements: > > > > - [fortress jira issues > > 3.0](https://issues.apache.org/jira/projects/FC/versions/12346614) > > > > A tag created for git: ‘3.0.0', and the sources may be pulled using git > > commands: > > git clone --branch 3.0.0 > > https://git-wip-us.apache.org/repos/asf/directory-fortress-core.git > > git clone --branch 3.0.0 > > https://git-wip-us.apache.org/repos/asf/directory-fortress-realm.git > > git clone --branch 3.0.0 > > https://git-wip-us.apache.org/repos/asf/directory-fortress-enmasse.git > > git clone --branch 3.0.0 > > https://git-wip-us.apache.org/repos/asf/directory-fortress-commander.git > > > > with their associated checksums: > > - core: 933c7f53cade461bcb664e5302a1eeab99a782ff > > - realm: 2c842814d30fd23d96aa2e9b51949b8289ca4d9f > > - rest: 2fcdcca6e441d17e9d7b3de671eab20066765828 > > - web: 68ba0809676992d216fc0c2aead792b58a597358 > > > > Or, source and binary distros may be downloaded from SVN: > > - https://dist.apache.org/repos/dist/dev/directory/fortress/3.0.0/ > > > > The staging repo on Nexus: > > - [core, > > realm](https://repository.apache.org/content/repositories/orgapachedirectory-1218/) > > - [rest, > > web](https://repository.apache.org/content/repositories/orgapachedirectory-1219/) > > > > Test against LDAP using one of these: > > - > > https://github.com/apache/directory-fortress-core/blob/master/README-QUICKSTART-DOCKER-APACHEDS.md > > - > > https://github.com/apache/directory-fortress-core/blob/master/README-QUICKSTART-DOCKER-SLAPD.md > > > > New Java prereqs for building/test: > > > > - Java 11 Core and Realm > > - Java 17 Rest and Web > > > > - Choose one of the above. Complete (only) the sections leading up to and > > including the SECTION entitled: 'Apache Fortress Core Integration Test’ > > > > Happy to help anyone who wants to (learn how to) test these packages up to > > and including “lending” them a test env (virtual machine). > > > > We can use (something like) Slack for higher bandwidth communication. > > > > We need more testers!! > > > > Please vote: > > [ ] +1 | Release Fortress 3.0.0 > > [ ] +/-0 | Abstain > > [ ] -1 | Do *NOT* Release Fortress 3.0.0 > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org > > For additional commands, e-mail: dev-h...@directory.apache.org > > > > -- > *Emmanuel Lécharny - CTO* 205 Promenade des Anglais – 06200 NICE > T. +33 (0)4 89 97 36 50 > P. +33 (0)6 08 33 32 61 > emmanuel.lecha...@busit.com https://www.busit.com/ > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org > For additional commands, e-mail: dev-h...@directory.apache.org > --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@directory.apache.org For additional commands, e-mail: dev-h...@directory.apache.org
