Hi everyone, Please cancel the current release vote. There are three additional items I would like to include in this release:
1. Install-time security code: https://github.com/apache/roller/pull/189 2. HTML link normalization: https://github.com/apache/roller/pull/190 3. LDAP-related comment issue: https://github.com/apache/roller/pull/191 Pull request reviews for these items are welcome. <human> Here in the midst of so many AI generated emails and PRs, I just want to say a warm human thank you to y'all, Greg, Matt and Michael for helping out with development, guidance and testing over the years and especially now with Jakara API migration work and other matters iykyk. </human> Best regards, Dave Johnson On Thu, Sep 10, 2026 at 9:46 PM Dave <[email protected]> wrote: > Hello Roller community, > > This is a vote to release Apache Roller 6.1.6, release candidate 3. RC3 > supersedes RC2 -- the RC2 vote is cancelled in a separate message. > > On top of RC2: > > - Fix the jQuery UI 404 on authoring pages by dropping the webjar +1 from > the URL (#185). This is the regression Matt Raible reported against RC2. > - Fix blank Font Awesome icons in preset themes by adding font-src 'self' > to the CSP, and document the H2 2.5.250 VALUE reserved-word workaround in > the install guide (#183). > - Track schema upgrades with a flag instead of a hardcoded version check in > DatabaseInstaller (#184). > > Roller 6.1.6 is a maintenance release: it retires three obsolete features, > hardens media and enclosure handling, updates dependencies, and fixes the > source distribution so that it builds. > > Release notes: > https://github.com/apache/roller/blob/roller-6.1.6-rc3/CHANGES.md > > Git tag roller-6.1.6-rc3 (commit 6e85f24f4): > https://github.com/apache/roller/tree/roller-6.1.6-rc3 > > Artifacts staged at: > https://dist.apache.org/repos/dist/dev/roller/roller-6.1/v6.1.6 > > Signed with key 8FEC6F9CBA59703C, which is in: > https://downloads.apache.org/roller/KEYS > > To verify: > curl -O https://downloads.apache.org/roller/KEYS > gpg --import KEYS > gpg --verify apache-roller-6.1.6-rc3-source.tar.gz.asc > shasum -c apache-roller-6.1.6-rc3-source.tar.gz.sha512 > > The vote is open for at least 72 hours and passes with three binding +1 > votes from Roller PMC members. > > [ ] +1 release this as Apache Roller 6.1.6 > [ ] 0 no opinion > [ ] -1 do not release, because ... > > Dave >
