+1

On Thu, Aug 8, 2019 at 9:16 PM Joshua Poore <[email protected]> wrote:
>
> +1
>
> I tested the h*** out of this. Don’t forget to VOTE y’all!
>
> > On Aug 6, 2019, at 10:16 PM, Joshua Poore <[email protected]> wrote:
> >
> >
> > Hi Folks,
> >
> > Please VOTE on the Apache Flagon 2.0.2 Release Candidate # 1
> >
> > Context: v2.0.1 release had a major, uncaught flaw in the package.json 
> > file. Once the VOTE passed to release 2.0.1, this was published to the npm 
> > registry resulting in an unusable npm package. This was immediately 
> > unpublished. However, npm prohibits republishing over the same package 
> > version number. As such, we are treating v2.0.1 as a failed release. v2.0.2 
> > resolves the package.json issue, and adds the final npm dev dependency 
> > update to resolve all install audit warnings rel to Prototype Pollution, 
> > and package deprecation notices. See changelog for full details. 
> > Additionally, see the newly added UserALE.js testing framework (on 
> > confluence, link below) for instructions for how to build, perform unit and 
> > integration tests, and test the npm distribution as though it was installed 
> > directly from the npm registry.
> >
> > VOTE details follow:
> >
> > About Flagon: http://flagon.incubator.apache.org/ 
> > <http://flagon.incubator.apache.org/>
> >
> > This Patch release includes :
> >
> >       • Updates to package.json and package-lock.json to resolve downstream 
> > Prototype Pollution vulnerabilities in dev dependencies
> >       • Updates to package.json and package-lock.json to modernize 
> > deprecated npm modules
> >       • Minor updates to README documentation for UserALE.js' Example Test 
> > Utilities.
> >
> > We solved 11 issues: 
> > https://issues.apache.org/jira/projects/FLAGON/versions/12345954 
> > <https://issues.apache.org/jira/projects/FLAGON/versions/12345954>
> >
> > Git source tag (43de2fc1e1c5d5e1a83119a91947f7bbe6d313f3): 
> > https://github.com/apache/incubator-flagon-useralejs/releases/tag/2.0.2-RC1-08_06_2019
> >  
> > <https://github.com/apache/incubator-flagon-useralejs/releases/tag/2.0.2-RC1-08_06_2019>
> >
> > Staging repo: https://dist.apache.org/repos/dist/dev/incubator/flagon/ 
> > <https://dist.apache.org/repos/dist/dev/incubator/flagon/>
> >
> > Source Release Artifacts: 
> > https://dist.apache.org/repos/dist/dev/incubator/flagon/apache-flagon-useralejs-incubating-2.0.2-RC1/
> >  
> > <https://dist.apache.org/repos/dist/dev/incubator/flagon/apache-flagon-useralejs-incubating-2.0.2-RC1/>
> >
> > PGP release keys (signed using F937rFAE3FCADF6E): 
> > https://dist.apache.org/repos/dist/release/incubator/flagon/KEYS 
> > <https://dist.apache.org/repos/dist/release/incubator/flagon/KEYS>
> >
> > Reference the {product} testing framework to assist in your unit and 
> > integration tests: 
> > https://cwiki.apache.org/confluence/display/FLAGON/UserALE.js+Testing+Framework
> >  
> > <https://cwiki.apache.org/confluence/display/FLAGON/UserALE.js+Testing+Framework>
> >
> > Link to Successful Jenkins Build(s): 
> > https://builds.apache.org/job/useralejs-ci/91/ 
> > <https://builds.apache.org/job/useralejs-ci/91/>, 
> > https://builds.apache.org/job/useralejs-ci/92/ 
> > <https://builds.apache.org/job/useralejs-ci/92/>
> >
> > Vote will be open for 72 hours. Please VOTE as follows:
> >
> > [ ] +1, let's get it released!!!
> > [ ] +/-0, fine, but consider to fix few issues before...
> > [ ] -1, nope, because... (and please explain why)
> > Thank you to everyone that is able to VOTE as well as everyone that 
> > contributed to Apache Flagon 2.0.0
>

Reply via email to