Call for Presentations, Community Over Code 2023

2023-05-09 Thread Rich Bowen 
(Note: You are receiving this because you are subscribed to the dev@
list for one or more Apache Software Foundation projects.)

The Call for Presentations (CFP) for Community Over Code (formerly
Apachecon) 2023 is open at
https://communityovercode.org/call-for-presentations/, and will close
Thu, 13 Jul 2023 23:59:59 GMT.

The event will be held in Halifax, Canada, October 7-10, 2023.

We welcome submissions on any topic related to the Apache Software
Foundation, Apache projects, or the communities around those projects.
We are specifically looking for presentations in the following
catetegories:

Fintech
Search
Big Data, Storage
Big Data, Compute
Internet of Things
Groovy
Incubator
Community
Data Engineering
Performance Engineering
Geospatial
API/Microservices
Frameworks
Content Wrangling
Tomcat and httpd
Cloud and Runtime
Streaming
Sustainability

Re: [VOTE] Release Apache Jackrabbit 2.20.10

2023-05-09 Thread Julian Reschke 

On 03.05.2023 07:03, Julian Reschke wrote:
> ...

Hi there,

The vote passes as follows:

+1 Angela Schreiber 
+1 Julian Reschke 
+1 Konrad Windszus 
+1 Woonsan Ko 


Thanks for voting. I'll push the release out.

Best regards, Julian

[RESULT] [VOTE] Release Apache Jackrabbit 2.20.10

2023-05-09 Thread Julian Reschke 

On 03.05.2023 07:03, Julian Reschke wrote:

...


Hi there,

The vote passes as follows:

+1 Angela Schreiber 
+1 Julian Reschke 
+1 Konrad Windszus 
+1 Woonsan Ko 


Thanks for voting. I'll push the release out.

Best regards, Julian

[jira] [Commented] (JCRVLT-683) Import of Authorizable node with acHandling=IGNORE should preserve existing rep:principalPolicy child node

2023-05-09 Thread Mark Adamcin (Jira) 


[ 
https://issues.apache.org/jira/browse/JCRVLT-683?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17721003#comment-17721003
 ] 

Mark Adamcin commented on JCRVLT-683:
-

[~kwin] I'll take the task of adding a feature toggle to the PR.

> Import of Authorizable node with acHandling=IGNORE should preserve existing 
> rep:principalPolicy child node
> --
>
> Key: JCRVLT-683
> URL: https://issues.apache.org/jira/browse/JCRVLT-683
> Project: Jackrabbit FileVault
>  Issue Type: Bug
>  Components: Packaging
>Affects Versions: 3.6.6
>Reporter: Mark Adamcin
>Assignee: Konrad Windszus
>Priority: Major
> Fix For: 3.6.10
>
>
> For situations where an authorizable node may be distributed from another 
> environment where a different rep:principalPolicy for the user is defined 
> than exists for that user in the target environment, it is important that the 
> existing rep:principalPolicy be preserved when acHandling is unset, 
> acHandling=IGNORE, or acHandling=MERGE_PRESERVE.
> Currently, the effective behavior of such a package install, as [it appears 
> to be implemented in 
> DocViewImporter|https://github.com/apache/jackrabbit-filevault/blob/5f9657374bd6c2d3dd1f6e9e2be0b9f5b25ddc26/vault-core/src/main/java/org/apache/jackrabbit/vault/fs/impl/io/DocViewImporter.java#L782-L787],
>  results in the following:
>  * If the package specifies acHandling=IGNORE, the existing 
> rep:principalPolicy is deleted without replacement, regardless of whether the 
> package contains its own rep:principalPolicy, which is equivalent to 
> *acHandling=CLEAR*
>  * If the package specifies acHandling=MERGE_PRESERVE or MERGE, the existing 
> rep:principalPolicy is replaced with whatever rep:principalPolicy is 
> contained in the package, or deletes the policy if a replacement is not 
> present, which is equivalent to *acHandling=OVERWRITE*
> Unexpectedly, the least destructive (and most default) acHandling mode 
> (IGNORE) turns out to be as destructive to packaged system user permissions 
> as choosing any other mode. 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

[GitHub] [jackrabbit-oak] sonarcloud[bot] commented on pull request #931: OAK-10235: Release Oak 1.52.0 - Candidate Release Notes

2023-05-09 Thread via GitHub 


sonarcloud[bot] commented on PR #931:
URL: https://github.com/apache/jackrabbit-oak/pull/931#issuecomment-1540514298

   Kudos, SonarCloud Quality Gate passed!    [![Quality Gate 
passed](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/QualityGateBadge/passed-16px.png
 'Quality Gate 
passed')](https://sonarcloud.io/dashboard?id=org.apache.jackrabbit%3Ajackrabbit-oak&pullRequest=931)
   
   
[![Bug](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/bug-16px.png
 
'Bug')](https://sonarcloud.io/project/issues?id=org.apache.jackrabbit%3Ajackrabbit-oak&pullRequest=931&resolved=false&types=BUG)
 
[![A](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/RatingBadge/A-16px.png
 
'A')](https://sonarcloud.io/project/issues?id=org.apache.jackrabbit%3Ajackrabbit-oak&pullRequest=931&resolved=false&types=BUG)
 [0 
Bugs](https://sonarcloud.io/project/issues?id=org.apache.jackrabbit%3Ajackrabbit-oak&pullRequest=931&resolved=false&types=BUG)
  
   
[![Vulnerability](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/vulnerability-16px.png
 
'Vulnerability')](https://sonarcloud.io/project/issues?id=org.apache.jackrabbit%3Ajackrabbit-oak&pullRequest=931&resolved=false&types=VULNERABILITY)
 
[![A](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/RatingBadge/A-16px.png
 
'A')](https://sonarcloud.io/project/issues?id=org.apache.jackrabbit%3Ajackrabbit-oak&pullRequest=931&resolved=false&types=VULNERABILITY)
 [0 
Vulnerabilities](https://sonarcloud.io/project/issues?id=org.apache.jackrabbit%3Ajackrabbit-oak&pullRequest=931&resolved=false&types=VULNERABILITY)
  
   [![Security 
Hotspot](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/security_hotspot-16px.png
 'Security 
Hotspot')](https://sonarcloud.io/project/security_hotspots?id=org.apache.jackrabbit%3Ajackrabbit-oak&pullRequest=931&resolved=false&types=SECURITY_HOTSPOT)
 
[![A](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/RatingBadge/A-16px.png
 
'A')](https://sonarcloud.io/project/security_hotspots?id=org.apache.jackrabbit%3Ajackrabbit-oak&pullRequest=931&resolved=false&types=SECURITY_HOTSPOT)
 [0 Security 
Hotspots](https://sonarcloud.io/project/security_hotspots?id=org.apache.jackrabbit%3Ajackrabbit-oak&pullRequest=931&resolved=false&types=SECURITY_HOTSPOT)
  
   [![Code 
Smell](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/code_smell-16px.png
 'Code 
Smell')](https://sonarcloud.io/project/issues?id=org.apache.jackrabbit%3Ajackrabbit-oak&pullRequest=931&resolved=false&types=CODE_SMELL)
 
[![A](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/RatingBadge/A-16px.png
 
'A')](https://sonarcloud.io/project/issues?id=org.apache.jackrabbit%3Ajackrabbit-oak&pullRequest=931&resolved=false&types=CODE_SMELL)
 [0 Code 
Smells](https://sonarcloud.io/project/issues?id=org.apache.jackrabbit%3Ajackrabbit-oak&pullRequest=931&resolved=false&types=CODE_SMELL)
   
   [![No Coverage 
information](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/CoverageChart/NoCoverageInfo-16px.png
 'No Coverage 
information')](https://sonarcloud.io/component_measures?id=org.apache.jackrabbit%3Ajackrabbit-oak&pullRequest=931&metric=coverage&view=list)
 No Coverage information  
   [![No Duplication 
information](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/Duplications/NoDuplicationInfo-16px.png
 'No Duplication 
information')](https://sonarcloud.io/component_measures?id=org.apache.jackrabbit%3Ajackrabbit-oak&pullRequest=931&metric=duplicated_lines_density&view=list)
 No Duplication information
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@jackrabbit.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [jackrabbit-oak] reschke merged pull request #931: OAK-10235: Release Oak 1.52.0 - Candidate Release Notes

2023-05-09 Thread via GitHub 


reschke merged PR #931:
URL: https://github.com/apache/jackrabbit-oak/pull/931


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@jackrabbit.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

[GitHub] [jackrabbit-oak] reschke opened a new pull request, #931: OAK-10235: Release Oak 1.52.0 - Candidate Release Notes

2023-05-09 Thread via GitHub 


reschke opened a new pull request, #931:
URL: https://github.com/apache/jackrabbit-oak/pull/931

   (no comment)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@jackrabbit.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Re: Should unstable releases go to Maven Central?

2023-05-09 Thread Konrad Windszus 
Having this in repository.apache.org  without 
staging and pushing to Maven Central probably requires an additional repository 
(next to https://repository.apache.org/content/repositories/snapshots/).

Konrad


> On 9. May 2023, at 10:09, Julian Reschke  wrote:
> 
> On 09.05.2023 09:57, Arnout Engelen wrote:
>> Hi,
>> Jackrabbit uses the fine mechanism of releasing unstable versions on
>> 'x.y' version lines where 'y' is odd, and stable releases where 'y' is
>> even.
>> This scheme is not super well-known in the Maven ecosystem, and I
>> think there's a risk of people being on unstable versions without
>> realizing it.
>> Of course that's ultimately on them, but I wonder if it wouldn't be
>> better to have only the stable releases on Maven Central, and have the
>> unstable versions only on https://repository.apache.org - that way
>> people might somewhat more consciously 'opt in' to also seeing the
>> unstable releases?
>> Kind regards,
>> Arnout
> 
> That's an interesting idea (the other would be to reconsider the naming 
> scheme).
> 
> That said: replication to maven central currently is automatic - do you 
> happen to know how to avoid it?
> 
> Best regards, Julian

Re: Should unstable releases go to Maven Central?

2023-05-09 Thread Julian Reschke 

On 09.05.2023 09:57, Arnout Engelen wrote:

Hi,

Jackrabbit uses the fine mechanism of releasing unstable versions on
'x.y' version lines where 'y' is odd, and stable releases where 'y' is
even.

This scheme is not super well-known in the Maven ecosystem, and I
think there's a risk of people being on unstable versions without
realizing it.

Of course that's ultimately on them, but I wonder if it wouldn't be
better to have only the stable releases on Maven Central, and have the
unstable versions only on https://repository.apache.org - that way
people might somewhat more consciously 'opt in' to also seeing the
unstable releases?


Kind regards,

Arnout


That's an interesting idea (the other would be to reconsider the naming 
scheme).


That said: replication to maven central currently is automatic - do you 
happen to know how to avoid it?


Best regards, Julian

Should unstable releases go to Maven Central?

2023-05-09 Thread Arnout Engelen 
Hi,

Jackrabbit uses the fine mechanism of releasing unstable versions on
'x.y' version lines where 'y' is odd, and stable releases where 'y' is
even.

This scheme is not super well-known in the Maven ecosystem, and I
think there's a risk of people being on unstable versions without
realizing it.

Of course that's ultimately on them, but I wonder if it wouldn't be
better to have only the stable releases on Maven Central, and have the
unstable versions only on https://repository.apache.org - that way
people might somewhat more consciously 'opt in' to also seeing the
unstable releases?


Kind regards,

Arnout