Re: [VOTE] Release Geronimo Arthur 1.0.6

[Jean-Louis MONTEIRO]

+1 (binding)

Le lun. 17 avr. 2023 à 20:55, fpapon  a écrit :

> Hi,
>
> This is a call to vote in favor of releasing Apache Geronimo Arthur
> version 1.0.6.
>
> We solved 7 issues:
>
>
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=10220&version=12351343
>
> ** Bug
> * [GERONIMO-6833] - Ensure proxy hierarchy is registered for
> native-image
>
> ** Improvement
> * [GERONIMO-6836] - Avoid warnings about allow-incomplete-classpath
> and enableAllSecurityServices
> * [GERONIMO-6843] - Upgrade dependencies to avoid CVE in ossindex:audit
>
> ** Task
> * [GERONIMO-6830] - Upgrade to jackson-databind 2.13.2.2
> * [GERONIMO-6831] - Upgrade to sshd-core 2.8.0
> * [GERONIMO-6840] - Support GraalVM 22.2 reflection model
> * [GERONIMO-6842] - Arthur can't find native libraries of java 17
>
>
> The source to be voted upon:
>
> https://gitbox.apache.org/repos/asf?p=geronimo-arthur.git;a=tag;h=refs/tags/arthur-1.0.6
>
> Staging repo for binaries:
> https://repository.apache.org/content/repositories/orgapachegeronimo-1159/
>
> Staging dist dev for sources:
> https://dist.apache.org/repos/dist/dev/geronimo/arthur/
>
>
> Guide to testing staged releases:
> https://maven.apache.org/guides/development/guide-testing-releases.html
>
> GPG Key:
> https://svn.apache.org/repos/asf/geronimo/KEYS
>
>
> Vote open for 72 hours. Please do examine the source and binaries before
> voting.
>
> [ ] +1
> [ ] +0
> [ ] -1 (please include reasoning)
>
> --
> --
> François
>
>

-- 
Jean-Louis

Re: [VOTE] Release Geronimo Arthur 1.0.6

[Romain Manni-Bucau]

+1

Romain Manni-Bucau
@rmannibucau  |  Blog
 | Old Blog
 | Github  |
LinkedIn  | Book



Le mar. 18 avr. 2023 à 10:47, Jean-Louis MONTEIRO  a
écrit :

> +1 (binding)
>
> Le lun. 17 avr. 2023 à 20:55, fpapon  a écrit :
>
>> Hi,
>>
>> This is a call to vote in favor of releasing Apache Geronimo Arthur
>> version 1.0.6.
>>
>> We solved 7 issues:
>>
>>
>> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=10220&version=12351343
>>
>> ** Bug
>> * [GERONIMO-6833] - Ensure proxy hierarchy is registered for
>> native-image
>>
>> ** Improvement
>> * [GERONIMO-6836] - Avoid warnings about allow-incomplete-classpath
>> and enableAllSecurityServices
>> * [GERONIMO-6843] - Upgrade dependencies to avoid CVE in
>> ossindex:audit
>>
>> ** Task
>> * [GERONIMO-6830] - Upgrade to jackson-databind 2.13.2.2
>> * [GERONIMO-6831] - Upgrade to sshd-core 2.8.0
>> * [GERONIMO-6840] - Support GraalVM 22.2 reflection model
>> * [GERONIMO-6842] - Arthur can't find native libraries of java 17
>>
>>
>> The source to be voted upon:
>>
>> https://gitbox.apache.org/repos/asf?p=geronimo-arthur.git;a=tag;h=refs/tags/arthur-1.0.6
>>
>> Staging repo for binaries:
>> https://repository.apache.org/content/repositories/orgapachegeronimo-1159/
>>
>> Staging dist dev for sources:
>> https://dist.apache.org/repos/dist/dev/geronimo/arthur/
>>
>>
>> Guide to testing staged releases:
>> https://maven.apache.org/guides/development/guide-testing-releases.html
>>
>> GPG Key:
>> https://svn.apache.org/repos/asf/geronimo/KEYS
>>
>>
>> Vote open for 72 hours. Please do examine the source and binaries before
>> voting.
>>
>> [ ] +1
>> [ ] +0
>> [ ] -1 (please include reasoning)
>>
>> --
>> --
>> François
>>
>>
>
> --
> Jean-Louis
>

Re: [VOTE] Release Geronimo Arthur 1.0.6

[Mark Struberg via dev]

+1

LieGrue,
strub


> Am 17.04.2023 um 20:54 schrieb fpapon :
> 
> Hi,
> 
> This is a call to vote in favor of releasing Apache Geronimo Arthur version 
> 1.0.6.
>  
> We solved 7 issues:
>  
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=10220&version=12351343
> 
> ** Bug
> * [GERONIMO-6833] - Ensure proxy hierarchy is registered for native-image
> 
> ** Improvement
> * [GERONIMO-6836] - Avoid warnings about allow-incomplete-classpath and 
> enableAllSecurityServices
> * [GERONIMO-6843] - Upgrade dependencies to avoid CVE in ossindex:audit
> 
> ** Task
> * [GERONIMO-6830] - Upgrade to jackson-databind 2.13.2.2
> * [GERONIMO-6831] - Upgrade to sshd-core 2.8.0
> * [GERONIMO-6840] - Support GraalVM 22.2 reflection model
> * [GERONIMO-6842] - Arthur can't find native libraries of java 17
> 
>  
> The source to be voted upon:
> https://gitbox.apache.org/repos/asf?p=geronimo-arthur.git;a=tag;h=refs/tags/arthur-1.0.6
>  
> Staging repo for binaries:
> https://repository.apache.org/content/repositories/orgapachegeronimo-1159/
> 
> Staging dist dev for sources:
> https://dist.apache.org/repos/dist/dev/geronimo/arthur/
> 
>  
> Guide to testing staged releases:
> https://maven.apache.org/guides/development/guide-testing-releases.html
> 
> GPG Key:
> https://svn.apache.org/repos/asf/geronimo/KEYS
> 
>  
> Vote open for 72 hours. Please do examine the source and binaries before 
> voting.
>  
> [ ] +1
> [ ] +0
> [ ] -1 (please include reasoning)
> 
> -- 
> --
> François

[VOTE] Release Apache Geronimo BatchEE-1.0.3

[Mark Struberg via dev]

Hi!

I'd like to call a VOTE on releasing BatchEE-1.0.3.

This is mostly an update to the latest TomEE version and a fix in the 
ChildFirstURLClassLoader

[BATCHEE-162 ] - improve 
reproducible builds
[BATCHEE-167 ] - upgrade to 
TomEE 8.0.9
[BATCHEE-168 ] - duplicate 
class definition issue within ChildFirstURLClassLoader

The staging repo can be found here:
https://repository.apache.org/content/repositories/orgapachebatchee-1010/

The sources are here:
https://repository.apache.org/content/repositories/orgapachebatchee-1010/org/apache/batchee/batchee/1.0.3/

sha512 is
564ff0ab3602d87202aa7764084d03af60d64f6900d85e99ad8ad2843d0e4804383bd58ae3a516acef550c237325c2c4f808caaebaace7d0645a0071c889c831

Please VOTE:

[+1] yup, ship it!
[+0] I don't care
[-1] Stop, I found a ${showstopper}

The VOTE is open for 72h.


txs and LieGrue,
strub

Re: [VOTE] Release Apache Geronimo BatchEE-1.0.3

[Romain Manni-Bucau]

Hi,

Looks like ChildFirstURLClassLoader got broken and forced loading in this
particular classloader for standalone launcher is now up to the way it is
launched (so from memory some use cases will be broken) so tempted to -1 to
try to really fix #168 instead of breaking other things.

Romain Manni-Bucau
@rmannibucau  |  Blog
 | Old Blog
 | Github  |
LinkedIn  | Book



Le mar. 18 avr. 2023 à 12:27, Mark Struberg via dev 
a écrit :

> Hi!
>
> I'd like to call a VOTE on releasing BatchEE-1.0.3.
>
> This is mostly an update to the latest TomEE version and a fix in the
> ChildFirstURLClassLoader
>
>
>- [BATCHEE-162 ] -
>improve reproducible builds
>- [BATCHEE-167 ] -
>upgrade to TomEE 8.0.9
>- [BATCHEE-168 ] -
>duplicate class definition issue within ChildFirstURLClassLoader
>
>
> The staging repo can be found here:
> https://repository.apache.org/content/repositories/orgapachebatchee-1010/
>
> The sources are here:
>
> https://repository.apache.org/content/repositories/orgapachebatchee-1010/org/apache/batchee/batchee/1.0.3/
>
> sha512 is
>
> 564ff0ab3602d87202aa7764084d03af60d64f6900d85e99ad8ad2843d0e4804383bd58ae3a516acef550c237325c2c4f808caaebaace7d0645a0071c889c831
>
> Please VOTE:
>
> [+1] yup, ship it!
> [+0] I don't care
> [-1] Stop, I found a ${showstopper}
>
> The VOTE is open for 72h.
>
>
> txs and LieGrue,
> strub
>

Re: [VOTE] Release Apache Geronimo BatchEE-1.0.3

[Mark Struberg via dev]

Hi Romain!

Can you please explain what you think is now broken?

This basically is just a lock using the method the JDK intends exactly for this 
situation. See the JavaDoc of getClassLoadingLock.

txs and LieGrue,
strub

> Am 18.04.2023 um 13:13 schrieb Romain Manni-Bucau :
> 
> Hi,
> 
> Looks like ChildFirstURLClassLoader got broken and forced loading in this 
> particular classloader for standalone launcher is now up to the way it is 
> launched (so from memory some use cases will be broken) so tempted to -1 to 
> try to really fix #168 instead of breaking other things.
> 
> Romain Manni-Bucau
> @rmannibucau  |  Blog 
>  | Old Blog 
>  | Github  
> | LinkedIn  | Book 
> 
> 
> Le mar. 18 avr. 2023 à 12:27, Mark Struberg via dev  > a écrit :
>> Hi!
>> 
>> I'd like to call a VOTE on releasing BatchEE-1.0.3.
>> 
>> This is mostly an update to the latest TomEE version and a fix in the 
>> ChildFirstURLClassLoader
>> 
>> [BATCHEE-162 ] - improve 
>> reproducible builds
>> [BATCHEE-167 ] - upgrade 
>> to TomEE 8.0.9
>> [BATCHEE-168 ] - 
>> duplicate class definition issue within ChildFirstURLClassLoader
>> 
>> The staging repo can be found here:
>> https://repository.apache.org/content/repositories/orgapachebatchee-1010/
>> 
>> The sources are here:
>> https://repository.apache.org/content/repositories/orgapachebatchee-1010/org/apache/batchee/batchee/1.0.3/
>> 
>> sha512 is
>> 564ff0ab3602d87202aa7764084d03af60d64f6900d85e99ad8ad2843d0e4804383bd58ae3a516acef550c237325c2c4f808caaebaace7d0645a0071c889c831
>> 
>> Please VOTE:
>> 
>> [+1] yup, ship it!
>> [+0] I don't care
>> [-1] Stop, I found a ${showstopper}
>> 
>> The VOTE is open for 72h.
>> 
>> 
>> txs and LieGrue,
>> strub

Re: [VOTE] Release Apache Geronimo BatchEE-1.0.3

[Romain Manni-Bucau]

Hi Mark,

The lock is more than fine but the first block which was forcing the cdi
and lifecycle classes to be loaded from this particular classloader and not
a parent one was commented so the launching from environment with complex
classloader is now broken.
If your issue is gone re-enabling this block all good (I assume if it was
commented it can be an issue and I would suspect the "else super.loadClass"
to not help more than the first if part).

Romain Manni-Bucau
@rmannibucau  |  Blog
 | Old Blog
 | Github  |
LinkedIn  | Book



Le mar. 18 avr. 2023 à 13:37, Mark Struberg via dev 
a écrit :

> Hi Romain!
>
> Can you please explain what you think is now broken?
>
> This basically is just a lock using the method the JDK intends exactly for
> this situation. See the JavaDoc of getClassLoadingLock.
>
> txs and LieGrue,
> strub
>
> Am 18.04.2023 um 13:13 schrieb Romain Manni-Bucau :
>
> Hi,
>
> Looks like ChildFirstURLClassLoader got broken and forced loading in this
> particular classloader for standalone launcher is now up to the way it is
> launched (so from memory some use cases will be broken) so tempted to -1 to
> try to really fix #168 instead of breaking other things.
>
> Romain Manni-Bucau
> @rmannibucau  |  Blog
>  | Old Blog
>  | Github
>  | LinkedIn
>  | Book
> 
>
>
> Le mar. 18 avr. 2023 à 12:27, Mark Struberg via dev <
> dev@geronimo.apache.org> a écrit :
>
>> Hi!
>>
>> I'd like to call a VOTE on releasing BatchEE-1.0.3.
>>
>> This is mostly an update to the latest TomEE version and a fix in the
>> ChildFirstURLClassLoader
>>
>>
>>- [BATCHEE-162 ] -
>>improve reproducible builds
>>- [BATCHEE-167 ] -
>>upgrade to TomEE 8.0.9
>>- [BATCHEE-168 ] -
>>duplicate class definition issue within ChildFirstURLClassLoader
>>
>>
>> The staging repo can be found here:
>> https://repository.apache.org/content/repositories/orgapachebatchee-1010/
>>
>> The sources are here:
>>
>> https://repository.apache.org/content/repositories/orgapachebatchee-1010/org/apache/batchee/batchee/1.0.3/
>>
>> sha512 is
>>
>> 564ff0ab3602d87202aa7764084d03af60d64f6900d85e99ad8ad2843d0e4804383bd58ae3a516acef550c237325c2c4f808caaebaace7d0645a0071c889c831
>>
>> Please VOTE:
>>
>> [+1] yup, ship it!
>> [+0] I don't care
>> [-1] Stop, I found a ${showstopper}
>>
>> The VOTE is open for 72h.
>>
>>
>> txs and LieGrue,
>> strub
>>
>
>

Re: [VOTE] Release Apache Geronimo BatchEE-1.0.3

[Romain Manni-Bucau]

Ok checked out and github got me with its autoformatting, +1 from me

Romain Manni-Bucau
@rmannibucau  |  Blog
 | Old Blog
 | Github  |
LinkedIn  | Book



Le mar. 18 avr. 2023 à 13:41, Romain Manni-Bucau  a
écrit :

> Hi Mark,
>
> The lock is more than fine but the first block which was forcing the cdi
> and lifecycle classes to be loaded from this particular classloader and not
> a parent one was commented so the launching from environment with complex
> classloader is now broken.
> If your issue is gone re-enabling this block all good (I assume if it was
> commented it can be an issue and I would suspect the "else super.loadClass"
> to not help more than the first if part).
>
> Romain Manni-Bucau
> @rmannibucau  |  Blog
>  | Old Blog
>  | Github
>  | LinkedIn
>  | Book
> 
>
>
> Le mar. 18 avr. 2023 à 13:37, Mark Struberg via dev <
> dev@geronimo.apache.org> a écrit :
>
>> Hi Romain!
>>
>> Can you please explain what you think is now broken?
>>
>> This basically is just a lock using the method the JDK intends exactly
>> for this situation. See the JavaDoc of getClassLoadingLock.
>>
>> txs and LieGrue,
>> strub
>>
>> Am 18.04.2023 um 13:13 schrieb Romain Manni-Bucau > >:
>>
>> Hi,
>>
>> Looks like ChildFirstURLClassLoader got broken and forced loading in this
>> particular classloader for standalone launcher is now up to the way it is
>> launched (so from memory some use cases will be broken) so tempted to -1 to
>> try to really fix #168 instead of breaking other things.
>>
>> Romain Manni-Bucau
>> @rmannibucau  |  Blog
>>  | Old Blog
>>  | Github
>>  | LinkedIn
>>  | Book
>> 
>>
>>
>> Le mar. 18 avr. 2023 à 12:27, Mark Struberg via dev <
>> dev@geronimo.apache.org> a écrit :
>>
>>> Hi!
>>>
>>> I'd like to call a VOTE on releasing BatchEE-1.0.3.
>>>
>>> This is mostly an update to the latest TomEE version and a fix in the
>>> ChildFirstURLClassLoader
>>>
>>>
>>>- [BATCHEE-162 ]
>>>- improve reproducible builds
>>>- [BATCHEE-167 ]
>>>- upgrade to TomEE 8.0.9
>>>- [BATCHEE-168 ]
>>>- duplicate class definition issue within ChildFirstURLClassLoader
>>>
>>>
>>> The staging repo can be found here:
>>> https://repository.apache.org/content/repositories/orgapachebatchee-1010/
>>>
>>> The sources are here:
>>>
>>> https://repository.apache.org/content/repositories/orgapachebatchee-1010/org/apache/batchee/batchee/1.0.3/
>>>
>>> sha512 is
>>>
>>> 564ff0ab3602d87202aa7764084d03af60d64f6900d85e99ad8ad2843d0e4804383bd58ae3a516acef550c237325c2c4f808caaebaace7d0645a0071c889c831
>>>
>>> Please VOTE:
>>>
>>> [+1] yup, ship it!
>>> [+0] I don't care
>>> [-1] Stop, I found a ${showstopper}
>>>
>>> The VOTE is open for 72h.
>>>
>>>
>>> txs and LieGrue,
>>> strub
>>>
>>
>>