Future of the Cocoon project

2023-11-30 Thread Cédric Damioli

Dear Cocoon users and developers,

Sorry for crossposting here, I wanted to be sure that all involved 
people were aware of the ongoing discussions.


We recently pushed a new release of Cocoon, 11 years after the previous 
one. This release gathers all changes made in between as well as two 
security fixes discovered last year.
The journey to roll this release out was definitively not an easy one, 
and it's now time to think about what should be next for the project.


We currently officially maintain 3 branches, not compatible with each 
others and having evolved differently over the years : 2.1.x, 2.2/2.3 
and 3.0, and we do not have enough active developers to be able to 
continue to properly and correctly maintain them.


For a project as old as Cocoon (21 years!), there may be many users 
around here still using one branch or another, which could be interested 
to step up, contribute and try to revive the project, or at least some 
parts of it.


I will soon start 3 threads on the developers list to decide what to do 
about each of the 3 branches (retiring or not), so I encourage 
volunteers to bring their voices.


Best regards,
Cédric, on behalf of the Apache Cocoon PMC



[jira] [Closed] (COCOON-2359) [2.2] Fix incompatibility of cocoon-captcha with JDK 1.7/1.8

2023-11-30 Thread Jira


 [ 
https://issues.apache.org/jira/browse/COCOON-2359?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Cédric Damioli closed COCOON-2359.
--
Resolution: Fixed

so be it :)

> [2.2] Fix incompatibility of cocoon-captcha with JDK 1.7/1.8
> 
>
> Key: COCOON-2359
> URL: https://issues.apache.org/jira/browse/COCOON-2359
> Project: Cocoon
>  Issue Type: Bug
>  Components: Blocks: Captcha
>Affects Versions: 2.2
>Reporter: Gabriel Gruber
>Priority: Major
> Fix For: 2.3.0
>
>
> Goal is to remove the direct usage of 
> - JPEGImageEncoder
> - JPEGEncodeParam
> inside CaptchaReader.java
> And replace them with the newer 1.6 API of ImageIO
> https://blog.idrsolutions.com/2012/05/replacing-the-deprecated-java-jpeg-classes-for-java-7/



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (COCOON-2359) [2.2] Fix incompatibility of cocoon-captcha with JDK 1.7/1.8

2023-11-30 Thread Jira


 [ 
https://issues.apache.org/jira/browse/COCOON-2359?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Cédric Damioli updated COCOON-2359:
---
Fix Version/s: 2.3.0
   (was: 2.3.1)

> [2.2] Fix incompatibility of cocoon-captcha with JDK 1.7/1.8
> 
>
> Key: COCOON-2359
> URL: https://issues.apache.org/jira/browse/COCOON-2359
> Project: Cocoon
>  Issue Type: Bug
>  Components: Blocks: Captcha
>Affects Versions: 2.2
>Reporter: Gabriel Gruber
>Priority: Major
> Fix For: 2.3.0
>
>
> Goal is to remove the direct usage of 
> - JPEGImageEncoder
> - JPEGEncodeParam
> inside CaptchaReader.java
> And replace them with the newer 1.6 API of ImageIO
> https://blog.idrsolutions.com/2012/05/replacing-the-deprecated-java-jpeg-classes-for-java-7/



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (COCOON-2359) [2.2] Fix incompatibility of cocoon-captcha with JDK 1.7/1.8

2023-11-30 Thread Christofer Dutz (Jira)


[ 
https://issues.apache.org/jira/browse/COCOON-2359?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17791653#comment-17791653
 ] 

Christofer Dutz commented on COCOON-2359:
-

Yeah ... I actually replaced all usages of JPEG types with ImageIO types ;-)

> [2.2] Fix incompatibility of cocoon-captcha with JDK 1.7/1.8
> 
>
> Key: COCOON-2359
> URL: https://issues.apache.org/jira/browse/COCOON-2359
> Project: Cocoon
>  Issue Type: Bug
>  Components: Blocks: Captcha
>Affects Versions: 2.2
>Reporter: Gabriel Gruber
>Priority: Major
> Fix For: 2.3.1
>
>
> Goal is to remove the direct usage of 
> - JPEGImageEncoder
> - JPEGEncodeParam
> inside CaptchaReader.java
> And replace them with the newer 1.6 API of ImageIO
> https://blog.idrsolutions.com/2012/05/replacing-the-deprecated-java-jpeg-classes-for-java-7/



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (COCOON-2227) Creation of child settings object is broken

2023-11-30 Thread Jira


 [ 
https://issues.apache.org/jira/browse/COCOON-2227?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Cédric Damioli updated COCOON-2227:
---
Fix Version/s: 2.3.1
   (was: 2.3.0)

> Creation of child settings object is broken
> ---
>
> Key: COCOON-2227
> URL: https://issues.apache.org/jira/browse/COCOON-2227
> Project: Cocoon
>  Issue Type: Bug
>  Components: * Cocoon Core
>Affects Versions: 2.3.0
>Reporter: Grzegorz Kossakowski
>Priority: Major
> Fix For: 2.3.1
>
>
> It seems that there is a problem with creation of child settings object. To 
> reproduce this problem just go to:
> core/cocoon-webapp
> and then run Cocoon using following command:
> mvn jetty:run -Dorg.apache.cocoon.formencoding=UTF-8
> Then access:
> http://localhost:/
> and you will get following exception:
> org.springframework.beans.factory.BeanCreationException: Error creating bean 
> with name 'org.apache.cocoon.configuration.Settings': Invocation of init 
> method failed; nested exception is java.lang.IllegalStateException: This 
> value can only be changed for the root settings object.
> [...]
> Caused by: java.lang.IllegalStateException: This value can only be changed 
> for the root settings object.
>   at 
> org.apache.cocoon.configuration.MutableSettings.checkSubSetting(MutableSettings.java:423)
>   at 
> org.apache.cocoon.configuration.MutableSettings.setFormEncoding(MutableSettings.java:364)
>   at 
> org.apache.cocoon.configuration.MutableSettings.configure(MutableSettings.java:151)
>   at 
> org.apache.cocoon.spring.configurator.impl.AbstractSettingsBeanFactoryPostProcessor.createSettings(AbstractSettingsBeanFactoryPostProcessor.java:258)
>   at 
> org.apache.cocoon.spring.configurator.impl.AbstractSettingsBeanFactoryPostProcessor.init(AbstractSettingsBeanFactoryPostProcessor.java:130)



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (COCOON-2212) jx:attribute does not check name is correct before proceeding

2023-11-30 Thread Jira


 [ 
https://issues.apache.org/jira/browse/COCOON-2212?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Cédric Damioli updated COCOON-2212:
---
Fix Version/s: 2.3.1
   (was: 2.3.0)

> jx:attribute does not check name is correct before proceeding
> -
>
> Key: COCOON-2212
> URL: https://issues.apache.org/jira/browse/COCOON-2212
> Project: Cocoon
>  Issue Type: Improvement
>  Components: Blocks: Templating
>Affects Versions: 2.1.12, 2.2, 2.3.0
>Reporter: Kamal Bhatt
>Priority: Major
> Fix For: 2.3.1
>
> Attachments: JXtemplateAttributePatch
>
>
> Currently, jx:attribute does not validate that the name is correct before 
> generating attribute. This patch fixes this.
> Also, refactored the JXTemplateGeneratorTestCase



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (COCOON-2276) New Maven Repository Upload Request

2023-11-30 Thread Jira


 [ 
https://issues.apache.org/jira/browse/COCOON-2276?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Cédric Damioli updated COCOON-2276:
---
Fix Version/s: 2.3.1
   (was: 2.3.0)

> New Maven Repository Upload Request
> ---
>
> Key: COCOON-2276
> URL: https://issues.apache.org/jira/browse/COCOON-2276
> Project: Cocoon
>  Issue Type: Wish
>  Components: * Cocoon Core
>Affects Versions: 2.3.0
>Reporter: Don Corley
>Priority: Trivial
> Fix For: 2.3.1
>
>
> It would be nice to have a new release to the central maven repository of 
> version 2.x.
> Some of the code in the repository is rather old and contains some bugs 
> (which have been fixed) in the current development tree.
> Cocoon is a great product which saves me a ton of time... Thanks!



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (COCOON-2108) xmodule:flow-attr Does not accept document objects

2023-11-30 Thread Jira


 [ 
https://issues.apache.org/jira/browse/COCOON-2108?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Cédric Damioli updated COCOON-2108:
---
Fix Version/s: 2.3.1
   (was: 2.3.0)

> xmodule:flow-attr Does not accept document objects
> --
>
> Key: COCOON-2108
> URL: https://issues.apache.org/jira/browse/COCOON-2108
> Project: Cocoon
>  Issue Type: Bug
>  Components: * Cocoon Core
>Affects Versions: 2.1.11, 2.2
>Reporter: Hugh Sparks
>Priority: Minor
> Fix For: 2.3.1
>
> Attachments: Cocoon-2.2-truck-JXPathHelper.java.patch, 
> Cocoon-BRANCH-2.1.X-JXPathHelper.java.patch, xmodulePuzzle.txt
>
>
> Sending document objects from flowscript back to the pipeline using
> xmodule:flow-attr produces unexpected results. Also, the examples from
> the documentation do not work as described:
> http://cocoon.apache.org/2.1/861.daisy.html
> The most common error reported is:
> 'The object type: class java.lang.String could not be serialized to XML"
> This issue was discussed recently on the cocoon-users mailing list.
> The thread was introduced by Kazo Csaba with the subject "Sending DOM from 
> flowscript to pipeline."
>  (July 17, 2007)
> He has attempted to trace this behavior in the source code and believes that a
> possibly-inappropriate conversion to string occurs in some cases.
> Jason Johnston suggested moving the issue to JIRA.
> I've created a demonstration of this apparent bug and some related problems
> in this very brief example:
> http://www.csparks.com/xmodulePuzzle.txt
> I hope someone can fix or explain the correct usage of xmodule:flow-attr.
> Thanks to all,
> -Hugh Sparks, h...@csparks.com



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (COCOON-2197) Making the cocoon-auth-block acegi-security-sample work

2023-11-30 Thread Jira


 [ 
https://issues.apache.org/jira/browse/COCOON-2197?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Cédric Damioli updated COCOON-2197:
---
Fix Version/s: 2.3.1
   (was: 2.3.0)

> Making the cocoon-auth-block acegi-security-sample work
> ---
>
> Key: COCOON-2197
> URL: https://issues.apache.org/jira/browse/COCOON-2197
> Project: Cocoon
>  Issue Type: Wish
>  Components: - Samples
>Affects Versions: 2.2
>Reporter: Patrick Heiden
>Assignee: Grzegorz Kossakowski
>Priority: Minor
> Fix For: 2.3.1
>
> Attachments: cocoon-acegi-sample-svn-diff.patch
>
>
> The current acegi-security-sample doesn't work with acegi version used!
> So an update to spring-security (2.0.0-SNAPSHOT) fixed that problem.
> Following steps need to be performed:
> 1) get the latest trunk from spring-security (acegi) (see [1] for details)
> 2) compile and install that trunk (mvn install, maybe skip the more than 1000 
> tests ;)
> 3) change the pom.xml of cocoon-acegisecurity-sample block:
>replace the acegi dependency with:
>
>   org.springframework.security
>   spring-security-core
>   2.0.0-SNAPSHOT
>   
> 
>   avalon-framework
>   avalon-framework
> 
>   
>
> 4) replacements in META-INF/cocoon/xpatch/acegi-filter-patch.xweb:
>every org.acegi. ... should be replaced by org.springframework.security
> 5) the same needs to be done for all bean's class attribute inside 
> META-INF/cocoon/spring/cocoon-acegisecurity.xml
> 6) mvn install; mvn jetty:run
> I would guess, that by making acegi a spring portfolio project, the rework on 
> that project
> contains better adoption of spring bean-lifecycles.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (COCOON-2359) [2.2] Fix incompatibility of cocoon-captcha with JDK 1.7/1.8

2023-11-30 Thread Jira


 [ 
https://issues.apache.org/jira/browse/COCOON-2359?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Cédric Damioli updated COCOON-2359:
---
Fix Version/s: 2.3.1
   (was: 2.3.0)

> [2.2] Fix incompatibility of cocoon-captcha with JDK 1.7/1.8
> 
>
> Key: COCOON-2359
> URL: https://issues.apache.org/jira/browse/COCOON-2359
> Project: Cocoon
>  Issue Type: Bug
>  Components: Blocks: Captcha
>Affects Versions: 2.2
>Reporter: Gabriel Gruber
>Priority: Major
> Fix For: 2.3.1
>
>
> Goal is to remove the direct usage of 
> - JPEGImageEncoder
> - JPEGEncodeParam
> inside CaptchaReader.java
> And replace them with the newer 1.6 API of ImageIO
> https://blog.idrsolutions.com/2012/05/replacing-the-deprecated-java-jpeg-classes-for-java-7/



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (COCOON-2304) ThreadLocal in Rhino context is not always cleared

2023-11-30 Thread Jira


 [ 
https://issues.apache.org/jira/browse/COCOON-2304?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Cédric Damioli updated COCOON-2304:
---
Fix Version/s: 2.3.1
   (was: 2.3.0)

> ThreadLocal in Rhino context is not always cleared
> --
>
> Key: COCOON-2304
> URL: https://issues.apache.org/jira/browse/COCOON-2304
> Project: Cocoon
>  Issue Type: Bug
>  Components: - Flowscript
>Reporter: Graham Triggs
>Priority: Major
> Fix For: 2.3.1
>
> Attachments: flowscript.diff
>
>
> The Mozilla Rhino Context isn't exited in all cases in 
> FOM_JavascriptInterpreter. This can lead to a leak on application 
> undeployment, with the ThreadLocal references inside.
> Patch restructures the code slightly to use try { } finally { } blocks to 
> ensure the Context.exit() is called where appropriate (this makes the patch 
> look bigger than it really is, due to indenting).



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Closed] (COCOON-2372) Release Cocoon 2.3.0

2023-11-30 Thread Jira


 [ 
https://issues.apache.org/jira/browse/COCOON-2372?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Cédric Damioli closed COCOON-2372.
--
Resolution: Fixed

> Release Cocoon 2.3.0
> 
>
> Key: COCOON-2372
> URL: https://issues.apache.org/jira/browse/COCOON-2372
> Project: Cocoon
>  Issue Type: Task
>  Components: * Cocoon Core, Blocks: Captcha, Blocks: Databases, 
> Blocks: ImageOp, Blocks: XSP
>Affects Versions: 2.2
>Reporter: Javier Puerto
>Priority: Major
> Fix For: 2.3.0
>
>
> Maintenance release for Java 8 compatibility improvements.
> * Deprecate ImageOP and Capcha blocks because it depends on obsolete Java 
> image API.
> * Update DataSource implementations (only wrappers) to implement the method 
> [https://docs.oracle.com/javase/7/docs/api/javax/sql/CommonDataSource.html#getParentLogger()]
>  introduced in Java 1.7.
> * Update XSP block with newer Eclipe JDK compiler to support Java 8.
> Furthermore, the following issues will be addressed:
> * Fix test cases for JCR block by excluding a SLF4J dependency that was not 
> working with our current Spring version.
> * Other bugfixes.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (COCOON-2372) Release Cocoon 2.3.0

2023-11-30 Thread Jira


 [ 
https://issues.apache.org/jira/browse/COCOON-2372?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Cédric Damioli updated COCOON-2372:
---
Summary: Release Cocoon 2.3.0  (was: Release Cocoon 2.2.1)

> Release Cocoon 2.3.0
> 
>
> Key: COCOON-2372
> URL: https://issues.apache.org/jira/browse/COCOON-2372
> Project: Cocoon
>  Issue Type: Task
>  Components: * Cocoon Core, Blocks: Captcha, Blocks: Databases, 
> Blocks: ImageOp, Blocks: XSP
>Affects Versions: 2.2
>Reporter: Javier Puerto
>Priority: Major
> Fix For: 2.3.0
>
>
> Maintenance release for Java 8 compatibility improvements.
> * Deprecate ImageOP and Capcha blocks because it depends on obsolete Java 
> image API.
> * Update DataSource implementations (only wrappers) to implement the method 
> [https://docs.oracle.com/javase/7/docs/api/javax/sql/CommonDataSource.html#getParentLogger()]
>  introduced in Java 1.7.
> * Update XSP block with newer Eclipe JDK compiler to support Java 8.
> Furthermore, the following issues will be addressed:
> * Fix test cases for JCR block by excluding a SLF4J dependency that was not 
> working with our current Spring version.
> * Other bugfixes.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)