[GitHub] [tomee] rzo1 merged pull request #970: Regenerated BOMs after dependency upgrades

2022-11-15 Thread GitBox


rzo1 merged PR #970:
URL: https://github.com/apache/tomee/pull/970


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@tomee.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [tomee] github-actions[bot] opened a new pull request, #970: Regenerated BOMs after dependency upgrades

2022-11-15 Thread GitBox


github-actions[bot] opened a new pull request, #970:
URL: https://github.com/apache/tomee/pull/970

   Found some uncommited changes (from BOM regeneration) after running build on 
TomEE main


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@tomee.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [tomee] sultan opened a new pull request, #969: [TOMEE-4053] Dependency properties cleanup, step 3 on branch 9.x

2022-11-15 Thread GitBox


sultan opened a new pull request, #969:
URL: https://github.com/apache/tomee/pull/969

   this one is about tck tests and microprofile api & impl.
   
   thanks @jeanouii for the wss4j merge


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@tomee.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [tomee] sultan commented on pull request #964: [TOMEE-4109] TomEE 9.x Update velocity to 2.3 and avoid CVE warnings

2022-11-15 Thread GitBox


sultan commented on PR #964:
URL: https://github.com/apache/tomee/pull/964#issuecomment-1315237755

   Good to go


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@tomee.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [tomee] sultan commented on pull request #965: [TOMEE-4109] TomEE 8.x Update velocity to 2.3 and avoid CVE warnings

2022-11-15 Thread GitBox


sultan commented on PR #965:
URL: https://github.com/apache/tomee/pull/965#issuecomment-1315237683

   Good to go


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@tomee.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [tomee] rzo1 commented on pull request #965: [TOMEE-4109] TomEE 8.x Update velocity to 2.3 and avoid CVE warnings

2022-11-15 Thread GitBox


rzo1 commented on PR #965:
URL: https://github.com/apache/tomee/pull/965#issuecomment-1315019924

   There is no `LogChute` replacement. I am using 2.x for a long time with 
TomEE now w/o issues, so I guess it is ok to loose it.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@tomee.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [tomee] rzo1 merged pull request #966: [TOMEE-4053] Dependency properties cleanup, step 5 on branch 8.x

2022-11-15 Thread GitBox


rzo1 merged PR #966:
URL: https://github.com/apache/tomee/pull/966


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@tomee.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [tomee] rzo1 merged pull request #967: Regenerated BOMs after dependency upgrades

2022-11-15 Thread GitBox


rzo1 merged PR #967:
URL: https://github.com/apache/tomee/pull/967


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@tomee.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[GitHub] [tomee] jeanouii merged pull request #968: Update Santuario to mitigate CVE-2022-40152 on Woodstox. See TOMEE-4110

2022-11-15 Thread GitBox


jeanouii merged PR #968:
URL: https://github.com/apache/tomee/pull/968


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@tomee.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Cleaning up CXF patches

2022-11-15 Thread Jean-Louis Monteiro
Hi,

Richard did some cleanup on CXF on the 8.x branch and I have backported
most of his cleanup to 9.x (main). Good news, the build looks good (aside
from some timing issues with JWT tests). Increasing the timeout btw so that
on slow environments such as Apache Jenkins nodes, it gives TomEE a bit
more time to start. Not ideal but until we can get better machines it may
help.

Anyways, CXF wise, build is ok and the last TCK run looks also ok. It
should allow us to update and follow CXF versions more easily.


--
Jean-Louis Monteiro
http://twitter.com/jlouismonteiro
http://www.tomitribe.com