Hello, +1
On Tue, Apr 2, 2024, 10:16 Thomas Andraschko <andraschko.tho...@gmail.com> wrote: > +1 > > Am Di., 2. Apr. 2024 um 15:08 Uhr schrieb Markus Jung <ju...@apache.org>: > > > +1 (non binding) > > > > > > Did some testing with our real apps (Java 17, GNU/Linux x86-64), > including: > > - CDI > > - JSF > > - JPA (using hibernate 6.4) > > - Jakarta Security (custom HttpAuthenticationMechanism) > > - JSON-P/JSON-B > > - Microprofile: OpenAPI, Config, Health > > - tomee-embedded-maven-plugin and tomee-microprofile standalone > > > > > > Everything looks good, awesome work! > > > > > > > > On 02.04.24 14:45, Frank Jung wrote: > > > +1 > > > > > > Thank you! > > > Frankie > > >> -----Ursprüngliche Nachricht----- > > >> Von: Richard Zowalla <r...@apache.org> > > >> Gesendet: Dienstag, 2. April 2024 09:47 > > >> An: dev@tomee.apache.org > > >> Betreff: [VOTE] Apache TomEE 10.0.0-M1 > > >> > > >> Hello everyone, > > >> > > >> This is a vote for the release of Apache TomEE 10.0.0-M1. > > >> > > >> It is a first milestone release of TomEE 10 targeting JakartaEE 10. > > >> Thanks to everyone who contributed code to make this happen. > > >> I would like to emphasise and give a shout out to all our volunteers > > who have > > >> done the hard work for EE10, which is also done in all our upstream > > >> dependencies like Tomcat, OWB, CXF, MyFaces, etc. > > >> > > >> This milestone release is not fully compliant with JakartaEE 10 as we > > are > > >> missing some EE10 compatible versions of our dependencies (most > notably > > >> CXF 4.1.x which isn't available yet). > > >> We do not pass the TCK, nor do we have a fully working TCK setup at > the > > >> moment. However, our own full build is green [1] and so I am happy to > > call > > >> for a vote to release a first milestone of TomEE 10. > > >> > > >> Here are the hard facts: > > >> > > >> ############### > > >> > > >> Maven Repo: > > >> > https://repository.apache.org/content/repositories/orgapachetomee-1226/ > > >> > > >> <repositories> > > >> <repository> > > >> <id>tomee-10.0.0-M1-rc1</id> > > >> <name>Testing TomEE 10.0.0-M1</name> > > >> <url> > > >> > https://repository.apache.org/content/repositories/orgapachetomee-1226/ > > >> </url> > > >> </repository> > > >> </repositories> > > >> > > >> ############### > > >> > > >> Binaries & Source: > > >> > > >> > https://dist.apache.org/repos/dist/dev/tomee/staging-1226/tomee-10.0.0- > > >> M1/ > > >> > > >> ############### > > >> > > >> Tag: > > >> > > >> https://github.com/apache/tomee/releases/tag/tomee-project-10.0.0-M1 > > >> > > >> > > >> ############### > > >> > > >> Release notes: > > >> > > >> > > > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12312320 > > >> &version=12352714 > > >> > > >> ############### > > >> > > >> Here is an adoc generated version of the changelog as well: > > >> > > >> == Dependency upgrade > > >> > > >> [.compact] > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4266[TOMEE-4266] > > >> ActiveMQ 5.16.7 / 5.18.3 > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4217[TOMEE-4217] > > >> Arquillian 1.7.0.Final > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4307[TOMEE-4307] > > >> BatchEE 1.0.4 > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4235[TOMEE-4235] > > >> Bouncy Castle 1.75 > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4243[TOMEE-4243] > > >> Bouncy Castle 1.76 > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4278[TOMEE-4278] > > >> Commons CLI 1.6.0 > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4277[TOMEE-4277] > > >> Commons Codec 1.16.0 > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4274[TOMEE-4274] > > >> Commons DBCP 2.11.0 > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4275[TOMEE-4275] > > >> Commons Lang3 3.13.0 > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4310[TOMEE-4310] > > >> Commons Net 3.9.0 > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4308[TOMEE-4308] > > >> Fileupload 2 (Jakarta > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4218[TOMEE-4218] > > >> HSQLDB 2.7.2 > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4221[TOMEE-4221] > > >> JUnit 5.9.3 > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4212[TOMEE-4212] > > >> Jackson 2.15.0 > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4216[TOMEE-4216] > > >> Jackson 2.15.1 > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4227[TOMEE-4227] > > >> Jackson 2.15.2 > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4276[TOMEE-4276] > > >> Jackson 2.15.3 > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4208[TOMEE-4208] > > >> Johnzon 1.2.20 > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4228[TOMEE-4228] > > >> Johnzon 1.2.21 > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4205[TOMEE-4205] > > >> Jose4j 0.9.3 > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4279[TOMEE-4279] > > >> Log4J2 2.21.1 > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4296[TOMEE-4296] > > >> MicroProfile JWT 2.1 > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4283[TOMEE-4283] > > >> OWB 4.0.1 > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4282[TOMEE-4282] > > >> Tomcat 10.1.16 > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4309[TOMEE-4309] > > >> Tomcat 10.1.20 > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4280[TOMEE-4280] > > >> WSS4J 3.0.2 > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4313[TOMEE-4313] > > >> XBean 4.24 > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4232[TOMEE-4232] > > >> bcprov-jdk15to18-1.74.jar > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4220[TOMEE-4220] > > >> log4j 2.20.0 (integration) > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4311[TOMEE-4311] > > >> log4j2 2.23.1 > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4312[TOMEE-4312] > > >> slf4j 2.0.12 > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4213[TOMEE-4213] > > >> snakeyaml version 2.0 mitigate CVE-2022-1471 > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4219[TOMEE-4219] > > >> xbeans 4.23 > > >> > > >> == New Feature > > >> > > >> [.compact] > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4268[TOMEE-4268] > > >> Create MicroProfile OpenAPI Reader exemple > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4281[TOMEE-4281] > > >> Improve logging when failing to load a class > > >> > > >> == Bug > > >> > > >> [.compact] > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4222[TOMEE-4222] > > >> @LoginToContinue JSR-375 (JavaEE Security API) causes > > >> IllegalArgumentException > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4267[TOMEE-4267] > > >> MicroProfile Metrics JMX Registrar must be initialized once > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4225[TOMEE-4225] > > >> Remove commons-net from TomEE distribution > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4226[TOMEE-4226] > > >> DataSource definition fails when @DataSourceDefinition doesn't define > > url > > >> property > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4192[TOMEE-4192] > > >> ApplicationComposers do not clear GC references on release > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4199[TOMEE-4199] > > >> jakartaee-api with tomcat classifier has too much in it > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4294[TOMEE-4294] > > >> TomEE doesn't start in tomee-embedded-maven-plugin when mp-common is > > >> present > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4295[TOMEE-4295] > > >> tomee-embedded-maven-plugin does not register microprofile endpoints > > >> > > >> == Improvement > > >> > > >> [.compact] > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4269[TOMEE-4269] > > >> Enable SLF4J 2.x webapps to include bindings in their WEB-INF/lib > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4286[TOMEE-4286] > > >> Namespace error when processing web-fragment.xml > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4200[TOMEE-4200] > > >> Use ActiveMQ client jakarta instead of shading it in TomEE > > >> > > >> == Task > > >> > > >> [.compact] > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4261[TOMEE-4261] > > >> Upgrade to Jakarta EE 10 APIs + OWB-4 > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4314[TOMEE-4314] > > >> Fix docker-compose.yml to build TomEE > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4284[TOMEE-4284] > > >> Implement tomee.mp.jwt.allow.no-exp property over > > >> mp.jwt.tomee.allow.no-exp > > >> > > >> == Wish > > >> > > >> [.compact] > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4190[TOMEE-4190] > > >> RunWithApplicationComposer should support inheritance > > >> > > >> == Fixed Common Vulnerabilities and Exposures (CVEs) > > >> > > >> [.compact] > > >> - link:https://issues.apache.org/jira/browse/TOMEE-4227[TOMEE-4227] > > >> Jackson 2.15.2 > > >> > > >> ############### > > >> > > >> Please note: > > >> > > >> Grype will report a vulnerability for > > >> > > >> apache-mime4j-core 0.8.7 0.8.10 java-archive GHSA-jw7r-rxff- > > >> gv24 Medium > > >> > > >> which is shaded inside of "geronimo-mail_2.1_spec-1.0.0-M1.jar". > > >> > > >> In it's current version, the dependency is _NOT_ used inside of > geronimo > > >> mail impl, so unless you are using the shaded classes yourself, we are > > not > > >> affected here. > > >> There is also another mail thread related to mail. > > >> > > >> For signature verification, you can check on the example script here: > > >> https://gist.github.com/rzo1/9fb1ca0d58e1fc982d596f2a94b10b32 > > >> > > >> ############### > > >> > > >> Please VOTE > > >> > > >> [+1] go ship it > > >> [+0] meh, don't care > > >> [-1] stop, there is a ${showstopper} > > >> > > >> The VOTE is open for 72h or as long as needed. > > >> > > >> Gruß > > >> Richard > > >> > > >> [1] > https://ci-builds.apache.org/job/Tomee/job/master-build-full/1337/ > > >