IMHO it isn't a show stopper because users can just replace the lib in
/lib - I feel like it is more important to get the CVE patches out very
soonish but finally up to the release manager :)

Am Montag, dem 18.12.2023 um 11:21 +0100 schrieb Frank Jung:
> -1 ?
> I'm not sure if this is considered to be a showstopper, concerning
> only Java 21:
> 
> Eclipselink needs a dependency update to work with Code compiled with
> JDK 21. 
> Created a ticket for that:
> https://issues.apache.org/jira/browse/TOMEE-4291
> 
> > -----Ursprüngliche Nachricht-----
> > Von: Richard Zowalla <r...@apache.org>
> > Gesendet: Montag, 18. Dezember 2023 09:37
> > An: dev@tomee.apache.org
> > Betreff: Re: [VOTE] Release Apache TomEE 9.1.2 (take 2)
> > 
> > Any more votes?
> > 
> > Am Dienstag, dem 12.12.2023 um 16:57 +0000 schrieb Jonathan
> > Gallimore:
> > > Hi All,
> > > 
> > > I'd like to start a vote for the release of Apache TomEE 9.1.2.
> > > TomEE
> > > 9.1.2
> > > is a maintenance release with dependencies upgrades and bug
> > > fixes. It
> > > also fixes the latest Tomcat vulnerabilities as well as other
> > > CVEs.
> > > 
> > > ###############
> > > 
> > > Maven Repo:
> > > https://repository.apache.org/content/repositories/orgapachetomee-1225
> > > /
> > > 
> > > ###############
> > > 
> > > Binaries & Sources:
> > > https://dist.apache.org/repos/dist/dev/tomee/staging-1225/tomee-9.1.2/
> > > 
> > > ###############
> > > 
> > > Tags:
> > > https://github.com/apache/tomee/releases/tag/tomee-9.1.2
> > > 
> > > ###############
> > > 
> > > = Apache TomEE 9.1.2 Release Notes
> > > :index-group: Release Notes
> > > :jbake-type: page
> > > :jbake-status: published
> > > 
> > > == Dependency upgrade
> > > 
> > > [.compact]
> > >  -
> > > link:https://issues.apache.org/jira/browse/TOMEE-4266[TOMEE-4266]
> > > ActiveMQ 5.16.7 / 5.18.3
> > >  -
> > > link:https://issues.apache.org/jira/browse/TOMEE-4278[TOMEE-4278]
> > > Commons CLI 1.6.0
> > >  -
> > > link:https://issues.apache.org/jira/browse/TOMEE-4277[TOMEE-4277]
> > > Commons Codec 1.16.0
> > >  -
> > > link:https://issues.apache.org/jira/browse/TOMEE-4274[TOMEE-4274]
> > > Commons DBCP 2.11.0
> > >  -
> > > link:https://issues.apache.org/jira/browse/TOMEE-4275[TOMEE-4275]
> > > Commons Lang3 3.13.0
> > >  -
> > > link:https://issues.apache.org/jira/browse/TOMEE-4276[TOMEE-4276]
> > > Jackson 2.15.3
> > >  -
> > > link:
> > > https://issues.apache.org/jira/browse/TOMEE-4279[TOMEE-4279] Log
> > > 4J2
> > > 2.21.1
> > >  -
> > > link:
> > > https://issues.apache.org/jira/browse/TOMEE-4280[TOMEE-4280] WSS
> > > 4J
> > > 3.0.2
> > > 
> > > == New Feature
> > > 
> > > [.compact]
> > >  -
> > > link:https://issues.apache.org/jira/browse/TOMEE-4281[TOMEE-4281]
> > > Improve logging when failing to load a class
> > >  -
> > > link:
> > > https://issues.apache.org/jira/browse/TOMEE-4268[TOMEE-4268] Cre
> > > ate MicroProfile OpenAPI Reader exemple
> > > 
> > > == Bug
> > > 
> > > [.compact]
> > >  -
> > > link:https://issues.apache.org/jira/browse/TOMEE-4267[TOMEE-4267]
> > > MicroProfile Metrics JMX Registrar must be initialized once
> > > 
> > > == Improvement
> > > 
> > > [.compact]
> > >  -
> > > link:
> > > https://issues.apache.org/jira/browse/TOMEE-4285[TOMEE-4285] Por
> > > t fix for CVE-2023-46589 for TomEE 9.x
> > >  -
> > > link:https://issues.apache.org/jira/browse/TOMEE-4286[TOMEE-4286]
> > > Namespace error when processing web-fragment.xml
> > >  -
> > > link:
> > > https://issues.apache.org/jira/browse/TOMEE-4287[TOMEE-4287] Bet
> > > ter information when XBean Finder fails to read a class/jar file
> > >  -
> > > link:https://issues.apache.org/jira/browse/TOMEE-4289[TOMEE-4289]
> > >  java.util.NoSuchElementException in SystemLogHandler
> > >  -
> > > link:
> > > https://issues.apache.org/jira/browse/TOMEE-4269[TOMEE-4269] Ena
> > > ble SLF4J 2.x webapps to include bindings in their WEB-INF/lib
> > > 
> > > == Task
> > > 
> > > [.compact]
> > >  -
> > > link:https://issues.apache.org/jira/browse/TOMEE-4284[TOMEE-4284]
> > > Implement tomee.mp.jwt.allow.no-exp property over
> > > mp.jwt.tomee.allow.no-exp
> > > 
> > > ###############
> > > 
> > > Please VOTE
> > > 
> > > [+1] go ship it
> > > [+0] meh, don't care
> > > [-1] stop, there is a ${showstopper}
> > > 
> > > The VOTE is open for 72h or as long as needed.
> > > 
> > > Thanks
> > > 
> > > Jon
> 
> 

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to