+1 On Thu, Aug 8, 2019 at 9:16 PM Joshua Poore <[email protected]> wrote:
> +1 > > I tested the h*** out of this. Don’t forget to VOTE y’all! > > > On Aug 6, 2019, at 10:16 PM, Joshua Poore <[email protected]> wrote: > > > > > > Hi Folks, > > > > Please VOTE on the Apache Flagon 2.0.2 Release Candidate # 1 > > > > Context: v2.0.1 release had a major, uncaught flaw in the package.json > file. Once the VOTE passed to release 2.0.1, this was published to the npm > registry resulting in an unusable npm package. This was immediately > unpublished. However, npm prohibits republishing over the same package > version number. As such, we are treating v2.0.1 as a failed release. v2.0.2 > resolves the package.json issue, and adds the final npm dev dependency > update to resolve all install audit warnings rel to Prototype Pollution, > and package deprecation notices. See changelog for full details. > Additionally, see the newly added UserALE.js testing framework (on > confluence, link below) for instructions for how to build, perform unit and > integration tests, and test the npm distribution as though it was installed > directly from the npm registry. > > > > VOTE details follow: > > > > About Flagon: http://flagon.incubator.apache.org/ < > http://flagon.incubator.apache.org/> > > > > This Patch release includes : > > > > • Updates to package.json and package-lock.json to resolve > downstream Prototype Pollution vulnerabilities in dev dependencies > > • Updates to package.json and package-lock.json to modernize > deprecated npm modules > > • Minor updates to README documentation for UserALE.js' Example > Test Utilities. > > > > We solved 11 issues: > https://issues.apache.org/jira/projects/FLAGON/versions/12345954 < > https://issues.apache.org/jira/projects/FLAGON/versions/12345954> > > > > Git source tag (43de2fc1e1c5d5e1a83119a91947f7bbe6d313f3): > https://github.com/apache/incubator-flagon-useralejs/releases/tag/2.0.2-RC1-08_06_2019 > < > https://github.com/apache/incubator-flagon-useralejs/releases/tag/2.0.2-RC1-08_06_2019 > > > > > > Staging repo: https://dist.apache.org/repos/dist/dev/incubator/flagon/ < > https://dist.apache.org/repos/dist/dev/incubator/flagon/> > > > > Source Release Artifacts: > https://dist.apache.org/repos/dist/dev/incubator/flagon/apache-flagon-useralejs-incubating-2.0.2-RC1/ > < > https://dist.apache.org/repos/dist/dev/incubator/flagon/apache-flagon-useralejs-incubating-2.0.2-RC1/ > > > > > > PGP release keys (signed using F937rFAE3FCADF6E): > https://dist.apache.org/repos/dist/release/incubator/flagon/KEYS < > https://dist.apache.org/repos/dist/release/incubator/flagon/KEYS> > > > > Reference the {product} testing framework to assist in your unit and > integration tests: > https://cwiki.apache.org/confluence/display/FLAGON/UserALE.js+Testing+Framework > < > https://cwiki.apache.org/confluence/display/FLAGON/UserALE.js+Testing+Framework> > > > > > Link to Successful Jenkins Build(s): > https://builds.apache.org/job/useralejs-ci/91/ < > https://builds.apache.org/job/useralejs-ci/91/>, > https://builds.apache.org/job/useralejs-ci/92/ < > https://builds.apache.org/job/useralejs-ci/92/> > > > > Vote will be open for 72 hours. Please VOTE as follows: > > > > [ ] +1, let's get it released!!! > > [ ] +/-0, fine, but consider to fix few issues before... > > [ ] -1, nope, because... (and please explain why) > > Thank you to everyone that is able to VOTE as well as everyone that > contributed to Apache Flagon 2.0.0 > >
