[RESULT] [VOTE] Apache Maven Javadoc Plugin 2.9.1
Hi, The vote has passed with the following result: +1 (binding): Kristian, Ralph, Robert, Hervé, Olivier +1 (non binding): Tony -1 (non binding): Fred Cooke Will finish release complete. -- Olivier Lamy Ecetera: http://ecetera.com.au http://twitter.com/olamy | http://linkedin.com/in/olamy - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
Re: [VOTE] Apache Maven Javadoc Plugin 2.9.1 (take 2)
+1 2013/6/25 Olivier Lamy : > Hi, > I'd like to release Apache Maven Javadoc Plugin 2.9.1. > > This version contains the code to fix the javadoc security issue after > the javadoc generation. > > Since previous try I fix the @since for applying the javadoc security fix. > > We fixed 6 issues: > https://jira.codehaus.org/secure/ReleaseNote.jspa?version=18843&styleName=Text&projectId=11138&Create=Create > > Staging repository: > https://repository.apache.org/content/repositories/maven-066/ > > Staging site: > http://maven.apache.org/plugins-archives/maven-javadoc-plugin-2.9.1/ > > Vote open for 72H > > [+1] > [0] > [-1] > > Thanks, > -- > Olivier Lamy > Ecetera: http://ecetera.com.au > http://twitter.com/olamy | http://linkedin.com/in/olamy -- Olivier Lamy Ecetera: http://ecetera.com.au http://twitter.com/olamy | http://linkedin.com/in/olamy - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
Re: [VOTE] Apache Maven Javadoc Plugin 2.9.1 (take 2)
+1 Regards, Hervé Le mardi 25 juin 2013 11:48:55 Olivier Lamy a écrit : > Hi, > I'd like to release Apache Maven Javadoc Plugin 2.9.1. > > This version contains the code to fix the javadoc security issue after > the javadoc generation. > > Since previous try I fix the @since for applying the javadoc security fix. > > We fixed 6 issues: > https://jira.codehaus.org/secure/ReleaseNote.jspa?version=18843&styleName=Te > xt&projectId=11138&Create=Create > > Staging repository: > https://repository.apache.org/content/repositories/maven-066/ > > Staging site: > http://maven.apache.org/plugins-archives/maven-javadoc-plugin-2.9.1/ > > Vote open for 72H > > [+1] > [0] > [-1] > > Thanks, > -- > Olivier Lamy > Ecetera: http://ecetera.com.au > http://twitter.com/olamy | http://linkedin.com/in/olamy > > - > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org > For additional commands, e-mail: dev-h...@maven.apache.org - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
Re: [VOTE] Apache Maven Javadoc Plugin 2.9.1 (take 2)
On 25 June 2013 12:20, Fred Cooke wrote: > Absolutely, sebb! This is what I've been saying all along. If I had more > time I'd vote -1 to every attempted release that used or intended to use > respun tags/artifacts without revisions and checksums. So here's one for > this one until rectified properly -1! I quoted the tag and revision number earlier in this thread that I believe are the correct ones. It should really be done by the RM in the original e-mail, but at least the mail archives have the information now. > On Tue, Jun 25, 2013 at 12:28 PM, sebb wrote: > >> On 25 June 2013 07:46, Ralph Goers wrote: >> > KEYS file - http://svn.apache.org/repos/asf/maven/project/KEYS >> >> Thanks, the key id used for signing is in the file. >> Also the id is available from key servers. >> >> > svn tag - >> http://svn.apache.org/repos/asf/maven/plugins/tags/maven-javadoc-plugin-2.9.1 >> >> Thanks, but that is insufficient as the tag has been recreated several >> times. >> I think the last one was r1496317 >> >> If there is ever a question about how a certain file got into a >> release, it's vital to have traceability. >> >> The source archive agrees with the SVN tag, apart from some expected >> differences - e.g. DEPENDENCIES is only in the source archive >> >> > +1 on the release however it is odd that the Release Notes page is empty. >> >> Please fix that on the actual site deploy. >> >> > Ralph >> > >> > On Jun 24, 2013, at 7:15 PM, sebb wrote: >> > >> >> On 25 June 2013 02:48, Olivier Lamy wrote: >> >>> Hi, >> >>> I'd like to release Apache Maven Javadoc Plugin 2.9.1. >> >>> >> >>> This version contains the code to fix the javadoc security issue after >> >>> the javadoc generation. >> >>> >> >>> Since previous try I fix the @since for applying the javadoc security >> fix. >> >>> >> >>> We fixed 6 issues: >> >>> >> https://jira.codehaus.org/secure/ReleaseNote.jspa?version=18843&styleName=Text&projectId=11138&Create=Create >> >>> >> >>> Staging repository: >> >>> https://repository.apache.org/content/repositories/maven-066/ >> >> >> >> The NOTICE file still has a spurious blank line at the start; it >> >> should be removed before the next release candidate. >> >> >> >>> Staging site: >> http://maven.apache.org/plugins-archives/maven-javadoc-plugin-2.9.1/ >> >> >> >> The release notes page is empty, as before. >> >> Given that this release has a vital change in it, that is very >> unfortunate. >> >> >> >> SVN tag and revision? >> >> Without them, how can reviewers determine the provenance of the source >> >> files in the source release? >> >> >> >> KEYS file? >> >> How can we check the sigs? >> >> >> >>> Vote open for 72H >> >>> >> >>> [+1] >> >>> [0] >> >>> [-1] >> >>> >> >>> Thanks, >> >>> -- >> >>> Olivier Lamy >> >>> Ecetera: http://ecetera.com.au >> >>> http://twitter.com/olamy | http://linkedin.com/in/olamy >> >>> >> >>> - >> >>> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org >> >>> For additional commands, e-mail: dev-h...@maven.apache.org >> >>> >> >> >> >> - >> >> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org >> >> For additional commands, e-mail: dev-h...@maven.apache.org >> >> >> > >> >> - >> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org >> For additional commands, e-mail: dev-h...@maven.apache.org >> >> - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
Re: [VOTE] Apache Maven Javadoc Plugin 2.9.1 (take 2)
On Tue, 25 Jun 2013 22:52:31 +0200 "Robert Scholte" wrote: +1 tony. > +1 > > Op Tue, 25 Jun 2013 08:46:21 +0200 schreef Ralph Goers > : > > > KEYS file - http://svn.apache.org/repos/asf/maven/project/KEYS > > > > svn tag - > > http://svn.apache.org/repos/asf/maven/plugins/tags/maven-javadoc-plugin-2.9.1 > > > > +1 on the release however it is odd that the Release Notes page is empty. > > > > Ralph > > > > On Jun 24, 2013, at 7:15 PM, sebb wrote: > > > >> On 25 June 2013 02:48, Olivier Lamy wrote: > >>> Hi, > >>> I'd like to release Apache Maven Javadoc Plugin 2.9.1. > >>> > >>> This version contains the code to fix the javadoc security issue after > >>> the javadoc generation. > >>> > >>> Since previous try I fix the @since for applying the javadoc security > >>> fix. > >>> > >>> We fixed 6 issues: > >>> https://jira.codehaus.org/secure/ReleaseNote.jspa?version=18843&styleName=Text&projectId=11138&Create=Create > >>> > >>> Staging repository: > >>> https://repository.apache.org/content/repositories/maven-066/ > >> > >> The NOTICE file still has a spurious blank line at the start; it > >> should be removed before the next release candidate. > >> > >>> Staging site: > >>> http://maven.apache.org/plugins-archives/maven-javadoc-plugin-2.9.1/ > >> > >> The release notes page is empty, as before. > >> Given that this release has a vital change in it, that is very > >> unfortunate. > >> > >> SVN tag and revision? > >> Without them, how can reviewers determine the provenance of the source > >> files in the source release? > >> > >> KEYS file? > >> How can we check the sigs? > >> > >>> Vote open for 72H > >>> > >>> [+1] > >>> [0] > >>> [-1] > >>> > >>> Thanks, > >>> -- > >>> Olivier Lamy > >>> Ecetera: http://ecetera.com.au > >>> http://twitter.com/olamy | http://linkedin.com/in/olamy > >>> > >>> - > >>> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org > >>> For additional commands, e-mail: dev-h...@maven.apache.org > >>> > >> > >> - > >> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org > >> For additional commands, e-mail: dev-h...@maven.apache.org > >> > > - > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org > For additional commands, e-mail: dev-h...@maven.apache.org > -- Tony Chemit tél: +33 (0) 2 40 50 29 28 email: che...@codelutin.com http://www.codelutin.com - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
Re: [VOTE] Apache Maven Javadoc Plugin 2.9.1 (take 2)
+1 Op Tue, 25 Jun 2013 08:46:21 +0200 schreef Ralph Goers : KEYS file - http://svn.apache.org/repos/asf/maven/project/KEYS svn tag - http://svn.apache.org/repos/asf/maven/plugins/tags/maven-javadoc-plugin-2.9.1 +1 on the release however it is odd that the Release Notes page is empty. Ralph On Jun 24, 2013, at 7:15 PM, sebb wrote: On 25 June 2013 02:48, Olivier Lamy wrote: Hi, I'd like to release Apache Maven Javadoc Plugin 2.9.1. This version contains the code to fix the javadoc security issue after the javadoc generation. Since previous try I fix the @since for applying the javadoc security fix. We fixed 6 issues: https://jira.codehaus.org/secure/ReleaseNote.jspa?version=18843&styleName=Text&projectId=11138&Create=Create Staging repository: https://repository.apache.org/content/repositories/maven-066/ The NOTICE file still has a spurious blank line at the start; it should be removed before the next release candidate. Staging site: http://maven.apache.org/plugins-archives/maven-javadoc-plugin-2.9.1/ The release notes page is empty, as before. Given that this release has a vital change in it, that is very unfortunate. SVN tag and revision? Without them, how can reviewers determine the provenance of the source files in the source release? KEYS file? How can we check the sigs? Vote open for 72H [+1] [0] [-1] Thanks, -- Olivier Lamy Ecetera: http://ecetera.com.au http://twitter.com/olamy | http://linkedin.com/in/olamy - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
Re: [VOTE] Apache Maven Javadoc Plugin 2.9.1 (take 2)
Absolutely, sebb! This is what I've been saying all along. If I had more time I'd vote -1 to every attempted release that used or intended to use respun tags/artifacts without revisions and checksums. So here's one for this one until rectified properly -1! On Tue, Jun 25, 2013 at 12:28 PM, sebb wrote: > On 25 June 2013 07:46, Ralph Goers wrote: > > KEYS file - http://svn.apache.org/repos/asf/maven/project/KEYS > > Thanks, the key id used for signing is in the file. > Also the id is available from key servers. > > > svn tag - > http://svn.apache.org/repos/asf/maven/plugins/tags/maven-javadoc-plugin-2.9.1 > > Thanks, but that is insufficient as the tag has been recreated several > times. > I think the last one was r1496317 > > If there is ever a question about how a certain file got into a > release, it's vital to have traceability. > > The source archive agrees with the SVN tag, apart from some expected > differences - e.g. DEPENDENCIES is only in the source archive > > > +1 on the release however it is odd that the Release Notes page is empty. > > Please fix that on the actual site deploy. > > > Ralph > > > > On Jun 24, 2013, at 7:15 PM, sebb wrote: > > > >> On 25 June 2013 02:48, Olivier Lamy wrote: > >>> Hi, > >>> I'd like to release Apache Maven Javadoc Plugin 2.9.1. > >>> > >>> This version contains the code to fix the javadoc security issue after > >>> the javadoc generation. > >>> > >>> Since previous try I fix the @since for applying the javadoc security > fix. > >>> > >>> We fixed 6 issues: > >>> > https://jira.codehaus.org/secure/ReleaseNote.jspa?version=18843&styleName=Text&projectId=11138&Create=Create > >>> > >>> Staging repository: > >>> https://repository.apache.org/content/repositories/maven-066/ > >> > >> The NOTICE file still has a spurious blank line at the start; it > >> should be removed before the next release candidate. > >> > >>> Staging site: > http://maven.apache.org/plugins-archives/maven-javadoc-plugin-2.9.1/ > >> > >> The release notes page is empty, as before. > >> Given that this release has a vital change in it, that is very > unfortunate. > >> > >> SVN tag and revision? > >> Without them, how can reviewers determine the provenance of the source > >> files in the source release? > >> > >> KEYS file? > >> How can we check the sigs? > >> > >>> Vote open for 72H > >>> > >>> [+1] > >>> [0] > >>> [-1] > >>> > >>> Thanks, > >>> -- > >>> Olivier Lamy > >>> Ecetera: http://ecetera.com.au > >>> http://twitter.com/olamy | http://linkedin.com/in/olamy > >>> > >>> - > >>> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org > >>> For additional commands, e-mail: dev-h...@maven.apache.org > >>> > >> > >> - > >> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org > >> For additional commands, e-mail: dev-h...@maven.apache.org > >> > > > > - > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org > For additional commands, e-mail: dev-h...@maven.apache.org > >
Re: [VOTE] Apache Maven Javadoc Plugin 2.9.1 (take 2)
2013/6/25 sebb : > On 25 June 2013 07:46, Ralph Goers wrote: >> KEYS file - http://svn.apache.org/repos/asf/maven/project/KEYS > > Thanks, the key id used for signing is in the file. > Also the id is available from key servers. > >> svn tag - >> http://svn.apache.org/repos/asf/maven/plugins/tags/maven-javadoc-plugin-2.9.1 > > Thanks, but that is insufficient as the tag has been recreated several times. > I think the last one was r1496317 > > If there is ever a question about how a certain file got into a > release, it's vital to have traceability. AFAIK svn log can give you informations ? > > The source archive agrees with the SVN tag, apart from some expected > differences - e.g. DEPENDENCIES is only in the source archive We use this release process for very long time now. Not sure this thread is the good place to discuss that. If you want to discuss that start an other thread but perso I'm happy with the current process as it's very simple and doesn't require to many manual actions required. That's documented here: http://maven.apache.org/developers/release/releasing.html. > >> +1 on the release however it is odd that the Release Notes page is empty. > > Please fix that on the actual site deploy. I think it's fixed now see: http://maven.apache.org/plugins-archives/maven-javadoc-plugin-2.9.1/jira-report.html > >> Ralph >> >> On Jun 24, 2013, at 7:15 PM, sebb wrote: >> >>> On 25 June 2013 02:48, Olivier Lamy wrote: Hi, I'd like to release Apache Maven Javadoc Plugin 2.9.1. This version contains the code to fix the javadoc security issue after the javadoc generation. Since previous try I fix the @since for applying the javadoc security fix. We fixed 6 issues: https://jira.codehaus.org/secure/ReleaseNote.jspa?version=18843&styleName=Text&projectId=11138&Create=Create Staging repository: https://repository.apache.org/content/repositories/maven-066/ >>> >>> The NOTICE file still has a spurious blank line at the start; it >>> should be removed before the next release candidate. >>> Staging site: http://maven.apache.org/plugins-archives/maven-javadoc-plugin-2.9.1/ >>> >>> The release notes page is empty, as before. >>> Given that this release has a vital change in it, that is very unfortunate. >>> >>> SVN tag and revision? >>> Without them, how can reviewers determine the provenance of the source >>> files in the source release? >>> >>> KEYS file? >>> How can we check the sigs? >>> Vote open for 72H [+1] [0] [-1] Thanks, -- Olivier Lamy Ecetera: http://ecetera.com.au http://twitter.com/olamy | http://linkedin.com/in/olamy - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org >>> >>> - >>> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org >>> For additional commands, e-mail: dev-h...@maven.apache.org >>> >> > > - > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org > For additional commands, e-mail: dev-h...@maven.apache.org > -- Olivier Lamy Ecetera: http://ecetera.com.au http://twitter.com/olamy | http://linkedin.com/in/olamy - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
Re: [VOTE] Apache Maven Javadoc Plugin 2.9.1 (take 2)
On 25 June 2013 07:46, Ralph Goers wrote: > KEYS file - http://svn.apache.org/repos/asf/maven/project/KEYS Thanks, the key id used for signing is in the file. Also the id is available from key servers. > svn tag - > http://svn.apache.org/repos/asf/maven/plugins/tags/maven-javadoc-plugin-2.9.1 Thanks, but that is insufficient as the tag has been recreated several times. I think the last one was r1496317 If there is ever a question about how a certain file got into a release, it's vital to have traceability. The source archive agrees with the SVN tag, apart from some expected differences - e.g. DEPENDENCIES is only in the source archive > +1 on the release however it is odd that the Release Notes page is empty. Please fix that on the actual site deploy. > Ralph > > On Jun 24, 2013, at 7:15 PM, sebb wrote: > >> On 25 June 2013 02:48, Olivier Lamy wrote: >>> Hi, >>> I'd like to release Apache Maven Javadoc Plugin 2.9.1. >>> >>> This version contains the code to fix the javadoc security issue after >>> the javadoc generation. >>> >>> Since previous try I fix the @since for applying the javadoc security fix. >>> >>> We fixed 6 issues: >>> https://jira.codehaus.org/secure/ReleaseNote.jspa?version=18843&styleName=Text&projectId=11138&Create=Create >>> >>> Staging repository: >>> https://repository.apache.org/content/repositories/maven-066/ >> >> The NOTICE file still has a spurious blank line at the start; it >> should be removed before the next release candidate. >> >>> Staging site: >>> http://maven.apache.org/plugins-archives/maven-javadoc-plugin-2.9.1/ >> >> The release notes page is empty, as before. >> Given that this release has a vital change in it, that is very unfortunate. >> >> SVN tag and revision? >> Without them, how can reviewers determine the provenance of the source >> files in the source release? >> >> KEYS file? >> How can we check the sigs? >> >>> Vote open for 72H >>> >>> [+1] >>> [0] >>> [-1] >>> >>> Thanks, >>> -- >>> Olivier Lamy >>> Ecetera: http://ecetera.com.au >>> http://twitter.com/olamy | http://linkedin.com/in/olamy >>> >>> - >>> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org >>> For additional commands, e-mail: dev-h...@maven.apache.org >>> >> >> - >> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org >> For additional commands, e-mail: dev-h...@maven.apache.org >> > - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
Re: [VOTE] Apache Maven Javadoc Plugin 2.9.1 (take 2)
fixed: http://maven.apache.org/plugins-archives/maven-javadoc-plugin-2.9.1/jira-report.html 2013/6/25 Olivier Lamy : > I will try to fix that. (as I remember changes plugin need to be > upgraded with new jira version) > So I can try redeploy the site with the fix. > > > > 2013/6/25 Ralph Goers : >> KEYS file - http://svn.apache.org/repos/asf/maven/project/KEYS >> >> svn tag - >> http://svn.apache.org/repos/asf/maven/plugins/tags/maven-javadoc-plugin-2.9.1 >> >> +1 on the release however it is odd that the Release Notes page is empty. >> >> Ralph >> >> On Jun 24, 2013, at 7:15 PM, sebb wrote: >> >>> On 25 June 2013 02:48, Olivier Lamy wrote: Hi, I'd like to release Apache Maven Javadoc Plugin 2.9.1. This version contains the code to fix the javadoc security issue after the javadoc generation. Since previous try I fix the @since for applying the javadoc security fix. We fixed 6 issues: https://jira.codehaus.org/secure/ReleaseNote.jspa?version=18843&styleName=Text&projectId=11138&Create=Create Staging repository: https://repository.apache.org/content/repositories/maven-066/ >>> >>> The NOTICE file still has a spurious blank line at the start; it >>> should be removed before the next release candidate. >>> Staging site: http://maven.apache.org/plugins-archives/maven-javadoc-plugin-2.9.1/ >>> >>> The release notes page is empty, as before. >>> Given that this release has a vital change in it, that is very unfortunate. >>> >>> SVN tag and revision? >>> Without them, how can reviewers determine the provenance of the source >>> files in the source release? >>> >>> KEYS file? >>> How can we check the sigs? >>> Vote open for 72H [+1] [0] [-1] Thanks, -- Olivier Lamy Ecetera: http://ecetera.com.au http://twitter.com/olamy | http://linkedin.com/in/olamy - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org >>> >>> - >>> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org >>> For additional commands, e-mail: dev-h...@maven.apache.org >>> >> > > > > -- > Olivier Lamy > Ecetera: http://ecetera.com.au > http://twitter.com/olamy | http://linkedin.com/in/olamy -- Olivier Lamy Ecetera: http://ecetera.com.au http://twitter.com/olamy | http://linkedin.com/in/olamy - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
Re: [VOTE] Apache Maven Javadoc Plugin 2.9.1 (take 2)
I will try to fix that. (as I remember changes plugin need to be upgraded with new jira version) So I can try redeploy the site with the fix. 2013/6/25 Ralph Goers : > KEYS file - http://svn.apache.org/repos/asf/maven/project/KEYS > > svn tag - > http://svn.apache.org/repos/asf/maven/plugins/tags/maven-javadoc-plugin-2.9.1 > > +1 on the release however it is odd that the Release Notes page is empty. > > Ralph > > On Jun 24, 2013, at 7:15 PM, sebb wrote: > >> On 25 June 2013 02:48, Olivier Lamy wrote: >>> Hi, >>> I'd like to release Apache Maven Javadoc Plugin 2.9.1. >>> >>> This version contains the code to fix the javadoc security issue after >>> the javadoc generation. >>> >>> Since previous try I fix the @since for applying the javadoc security fix. >>> >>> We fixed 6 issues: >>> https://jira.codehaus.org/secure/ReleaseNote.jspa?version=18843&styleName=Text&projectId=11138&Create=Create >>> >>> Staging repository: >>> https://repository.apache.org/content/repositories/maven-066/ >> >> The NOTICE file still has a spurious blank line at the start; it >> should be removed before the next release candidate. >> >>> Staging site: >>> http://maven.apache.org/plugins-archives/maven-javadoc-plugin-2.9.1/ >> >> The release notes page is empty, as before. >> Given that this release has a vital change in it, that is very unfortunate. >> >> SVN tag and revision? >> Without them, how can reviewers determine the provenance of the source >> files in the source release? >> >> KEYS file? >> How can we check the sigs? >> >>> Vote open for 72H >>> >>> [+1] >>> [0] >>> [-1] >>> >>> Thanks, >>> -- >>> Olivier Lamy >>> Ecetera: http://ecetera.com.au >>> http://twitter.com/olamy | http://linkedin.com/in/olamy >>> >>> - >>> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org >>> For additional commands, e-mail: dev-h...@maven.apache.org >>> >> >> - >> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org >> For additional commands, e-mail: dev-h...@maven.apache.org >> > -- Olivier Lamy Ecetera: http://ecetera.com.au http://twitter.com/olamy | http://linkedin.com/in/olamy - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
Re: [VOTE] Apache Maven Javadoc Plugin 2.9.1 (take 2)
KEYS file - http://svn.apache.org/repos/asf/maven/project/KEYS svn tag - http://svn.apache.org/repos/asf/maven/plugins/tags/maven-javadoc-plugin-2.9.1 +1 on the release however it is odd that the Release Notes page is empty. Ralph On Jun 24, 2013, at 7:15 PM, sebb wrote: > On 25 June 2013 02:48, Olivier Lamy wrote: >> Hi, >> I'd like to release Apache Maven Javadoc Plugin 2.9.1. >> >> This version contains the code to fix the javadoc security issue after >> the javadoc generation. >> >> Since previous try I fix the @since for applying the javadoc security fix. >> >> We fixed 6 issues: >> https://jira.codehaus.org/secure/ReleaseNote.jspa?version=18843&styleName=Text&projectId=11138&Create=Create >> >> Staging repository: >> https://repository.apache.org/content/repositories/maven-066/ > > The NOTICE file still has a spurious blank line at the start; it > should be removed before the next release candidate. > >> Staging site: >> http://maven.apache.org/plugins-archives/maven-javadoc-plugin-2.9.1/ > > The release notes page is empty, as before. > Given that this release has a vital change in it, that is very unfortunate. > > SVN tag and revision? > Without them, how can reviewers determine the provenance of the source > files in the source release? > > KEYS file? > How can we check the sigs? > >> Vote open for 72H >> >> [+1] >> [0] >> [-1] >> >> Thanks, >> -- >> Olivier Lamy >> Ecetera: http://ecetera.com.au >> http://twitter.com/olamy | http://linkedin.com/in/olamy >> >> - >> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org >> For additional commands, e-mail: dev-h...@maven.apache.org >> > > - > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org > For additional commands, e-mail: dev-h...@maven.apache.org >
Re: [VOTE] Apache Maven Javadoc Plugin 2.9.1 (take 2)
+1 Sources at https://repository.apache.org/content/repositories/maven-066/org/apache/maven/plugins/maven-javadoc-plugin/2.9.1/maven-javadoc-plugin-2.9.1-sources.jar, based on r1496317 Kristian - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
Re: [VOTE] Apache Maven Javadoc Plugin 2.9.1 (take 2)
On 25 June 2013 02:48, Olivier Lamy wrote: > Hi, > I'd like to release Apache Maven Javadoc Plugin 2.9.1. > > This version contains the code to fix the javadoc security issue after > the javadoc generation. > > Since previous try I fix the @since for applying the javadoc security fix. > > We fixed 6 issues: > https://jira.codehaus.org/secure/ReleaseNote.jspa?version=18843&styleName=Text&projectId=11138&Create=Create > > Staging repository: > https://repository.apache.org/content/repositories/maven-066/ The NOTICE file still has a spurious blank line at the start; it should be removed before the next release candidate. > Staging site: > http://maven.apache.org/plugins-archives/maven-javadoc-plugin-2.9.1/ The release notes page is empty, as before. Given that this release has a vital change in it, that is very unfortunate. SVN tag and revision? Without them, how can reviewers determine the provenance of the source files in the source release? KEYS file? How can we check the sigs? > Vote open for 72H > > [+1] > [0] > [-1] > > Thanks, > -- > Olivier Lamy > Ecetera: http://ecetera.com.au > http://twitter.com/olamy | http://linkedin.com/in/olamy > > - > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org > For additional commands, e-mail: dev-h...@maven.apache.org > - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
[VOTE] Apache Maven Javadoc Plugin 2.9.1 (take 2)
Hi, I'd like to release Apache Maven Javadoc Plugin 2.9.1. This version contains the code to fix the javadoc security issue after the javadoc generation. Since previous try I fix the @since for applying the javadoc security fix. We fixed 6 issues: https://jira.codehaus.org/secure/ReleaseNote.jspa?version=18843&styleName=Text&projectId=11138&Create=Create Staging repository: https://repository.apache.org/content/repositories/maven-066/ Staging site: http://maven.apache.org/plugins-archives/maven-javadoc-plugin-2.9.1/ Vote open for 72H [+1] [0] [-1] Thanks, -- Olivier Lamy Ecetera: http://ecetera.com.au http://twitter.com/olamy | http://linkedin.com/in/olamy - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
RE: [VOTE] Apache Maven Javadoc Plugin 2.9.1
+1 to release from somebody outside (but provided the frame injection patch)! Just a funny detail: The maven-javadoc-plugin-2.9.1-javadoc.jar on the staging repository of course have the frame injection bug! Somehow a chicken-egg problem. :-) Theoretically the pom.xml of the plugin should use its own version to create its own javadocs! But of course later versions of the plugin can then rely on 2.9.1. I don't think this should hold the release, because the frame injection bug is only critical if you publish the javadocs on a web server which is not the case for this plugin (right?). On a local eclipse displaying javadocs embedded, it does not matter at all if they are vulnerable. Uwe - Uwe Schindler H.-H.-Meier-Allee 63, D-28213 Bremen http://www.thetaphi.de eMail: u...@thetaphi.de > -Original Message- > From: Olivier Lamy [mailto:ol...@apache.org] > Sent: Monday, June 24, 2013 2:05 PM > To: Maven Developers List > Subject: [VOTE] Apache Maven Javadoc Plugin 2.9.1 > > Hi, > I'd like to release Apache Maven Javadoc Plugin 2.9.1. > > This version contains the code to fix the javadoc security issue after the > javadoc generation. > > We fixed 6 issues: > https://jira.codehaus.org/secure/ReleaseNote.jspa?version=18843&styleNa > me=Text&projectId=11138&Create=Create > > Staging repository: > https://repository.apache.org/content/repositories/maven-062 > > Staging site: http://maven.apache.org/plugins-archives/maven-javadoc- > plugin-2.9.1/ > > Vote open for 72H > > [+1] > [0] > [-1] > > Thanks, > -- > Olivier Lamy > Ecetera: http://ecetera.com.au > http://twitter.com/olamy | http://linkedin.com/in/olamy > > - > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional > commands, e-mail: dev-h...@maven.apache.org > - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
Re: [VOTE] Apache Maven Javadoc Plugin 2.9.1
On 24 June 2013 23:58, Olivier Lamy wrote: > 2013/6/25 sebb : >> On 24 June 2013 13:04, Olivier Lamy wrote: >>> Hi, >>> I'd like to release Apache Maven Javadoc Plugin 2.9.1. >>> >>> This version contains the code to fix the javadoc security issue after >>> the javadoc generation. >>> >>> We fixed 6 issues: >>> https://jira.codehaus.org/secure/ReleaseNote.jspa?version=18843&styleName=Text&projectId=11138&Create=Create >>> >>> Staging repository: >>> https://repository.apache.org/content/repositories/maven-062 >>> >>> Staging site: >>> http://maven.apache.org/plugins-archives/maven-javadoc-plugin-2.9.1/ >> >> SVN tag? > > It's a bit implicit if you know our sources tree Yes, but it helps to have the URL and especially the revision quoted in the e-mail. Tags are supposed to be immutable but frequently are not, so the revision is necessary. >> >> KEYS file? > > I believe it's available as most of ASF project at > svn.a.o/repos/asf/$tlp/project/KEYS Please quote whatever KEYS file is listed on the source download page and/or ASF dist directory. It's important that reviewers can check that end-users have access to the keys they need to check downloads. >> >>> Vote open for 72H >>> >>> [+1] >>> [0] >>> [-1] >> >> The parameter applyJavadocSecurityFix in the class >> AbstractJavadocMojo is documented as being @since 2.10. > Argh good catch I will fix that >> >> The Release Notes page on the site is empty. > ? >> >> There's no NOTICE and LICENSE in SVN at the level of the plugin. > Those files are in the voted artifacts. >> >> The NOTICE file looks wrong to me. >> It has a spurious blank line at the start. >> The next line says: >> Maven Javadoc Plugin >> This should be >>Apache Maven Javadoc Plugin > Easy to fix >> >> The index.html file in the javadoc jar appears to have the frame bug; >> certainly it does not contain a "function validURL(url)" line. > Chicken and egg issue as I need the fix but I'm build the fix. Or just use Java 1.7.0_25 for the build and Java 1.6 for the compile/test. > So this will be probably the last javadoc jar we publish :-). At least > the most (public website has been generated with the fix). > > BTW I cancel the release. > >> >> Sorry, but I would have to vote -1 if mine were binding. >> >>> Thanks, >>> -- >>> Olivier Lamy >>> Ecetera: http://ecetera.com.au >>> http://twitter.com/olamy | http://linkedin.com/in/olamy >>> >>> - >>> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org >>> For additional commands, e-mail: dev-h...@maven.apache.org >>> >> >> - >> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org >> For additional commands, e-mail: dev-h...@maven.apache.org >> > > > > -- > Olivier Lamy > Ecetera: http://ecetera.com.au > http://twitter.com/olamy | http://linkedin.com/in/olamy > > - > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org > For additional commands, e-mail: dev-h...@maven.apache.org > - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
Re: [VOTE] Apache Maven Javadoc Plugin 2.9.1
2013/6/25 sebb : > On 24 June 2013 13:04, Olivier Lamy wrote: >> Hi, >> I'd like to release Apache Maven Javadoc Plugin 2.9.1. >> >> This version contains the code to fix the javadoc security issue after >> the javadoc generation. >> >> We fixed 6 issues: >> https://jira.codehaus.org/secure/ReleaseNote.jspa?version=18843&styleName=Text&projectId=11138&Create=Create >> >> Staging repository: >> https://repository.apache.org/content/repositories/maven-062 >> >> Staging site: >> http://maven.apache.org/plugins-archives/maven-javadoc-plugin-2.9.1/ > > SVN tag? It's a bit implicit if you know our sources tree > > KEYS file? I believe it's available as most of ASF project at svn.a.o/repos/asf/$tlp/project/KEYS > >> Vote open for 72H >> >> [+1] >> [0] >> [-1] > > The parameter applyJavadocSecurityFix in the class > AbstractJavadocMojo is documented as being @since 2.10. Argh good catch I will fix that > > The Release Notes page on the site is empty. ? > > There's no NOTICE and LICENSE in SVN at the level of the plugin. Those files are in the voted artifacts. > > The NOTICE file looks wrong to me. > It has a spurious blank line at the start. > The next line says: > Maven Javadoc Plugin > This should be >Apache Maven Javadoc Plugin Easy to fix > > The index.html file in the javadoc jar appears to have the frame bug; > certainly it does not contain a "function validURL(url)" line. Chicken and egg issue as I need the fix but I'm build the fix. So this will be probably the last javadoc jar we publish :-). At least the most (public website has been generated with the fix). BTW I cancel the release. > > Sorry, but I would have to vote -1 if mine were binding. > >> Thanks, >> -- >> Olivier Lamy >> Ecetera: http://ecetera.com.au >> http://twitter.com/olamy | http://linkedin.com/in/olamy >> >> - >> To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org >> For additional commands, e-mail: dev-h...@maven.apache.org >> > > - > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org > For additional commands, e-mail: dev-h...@maven.apache.org > -- Olivier Lamy Ecetera: http://ecetera.com.au http://twitter.com/olamy | http://linkedin.com/in/olamy - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
Re: [VOTE] Apache Maven Javadoc Plugin 2.9.1
On 24 June 2013 13:04, Olivier Lamy wrote: > Hi, > I'd like to release Apache Maven Javadoc Plugin 2.9.1. > > This version contains the code to fix the javadoc security issue after > the javadoc generation. > > We fixed 6 issues: > https://jira.codehaus.org/secure/ReleaseNote.jspa?version=18843&styleName=Text&projectId=11138&Create=Create > > Staging repository: > https://repository.apache.org/content/repositories/maven-062 > > Staging site: > http://maven.apache.org/plugins-archives/maven-javadoc-plugin-2.9.1/ SVN tag? KEYS file? > Vote open for 72H > > [+1] > [0] > [-1] The parameter applyJavadocSecurityFix in the class AbstractJavadocMojo is documented as being @since 2.10. The Release Notes page on the site is empty. There's no NOTICE and LICENSE in SVN at the level of the plugin. The NOTICE file looks wrong to me. It has a spurious blank line at the start. The next line says: Maven Javadoc Plugin This should be Apache Maven Javadoc Plugin The index.html file in the javadoc jar appears to have the frame bug; certainly it does not contain a "function validURL(url)" line. Sorry, but I would have to vote -1 if mine were binding. > Thanks, > -- > Olivier Lamy > Ecetera: http://ecetera.com.au > http://twitter.com/olamy | http://linkedin.com/in/olamy > > - > To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org > For additional commands, e-mail: dev-h...@maven.apache.org > - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
RE: [VOTE] Apache Maven Javadoc Plugin 2.9.1
+1 (non binding) Both testapidoc and apidoc contains the fixed javascript. Regards -Message d'origine- De : Olivier Lamy [mailto:ol...@apache.org] Envoyé : lundi 24 juin 2013 14:05 À : Maven Developers List Objet : [VOTE] Apache Maven Javadoc Plugin 2.9.1 Hi, I'd like to release Apache Maven Javadoc Plugin 2.9.1. This version contains the code to fix the javadoc security issue after the javadoc generation. We fixed 6 issues: https://jira.codehaus.org/secure/ReleaseNote.jspa?version=18843&styleName=Te xt&projectId=11138&Create=Create Staging repository: https://repository.apache.org/content/repositories/maven-062 Staging site: http://maven.apache.org/plugins-archives/maven-javadoc-plugin-2.9.1/ Vote open for 72H [+1] [0] [-1] Thanks, -- Olivier Lamy Ecetera: http://ecetera.com.au http://twitter.com/olamy | http://linkedin.com/in/olamy - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
[VOTE] Apache Maven Javadoc Plugin 2.9.1
Hi, I'd like to release Apache Maven Javadoc Plugin 2.9.1. This version contains the code to fix the javadoc security issue after the javadoc generation. We fixed 6 issues: https://jira.codehaus.org/secure/ReleaseNote.jspa?version=18843&styleName=Text&projectId=11138&Create=Create Staging repository: https://repository.apache.org/content/repositories/maven-062 Staging site: http://maven.apache.org/plugins-archives/maven-javadoc-plugin-2.9.1/ Vote open for 72H [+1] [0] [-1] Thanks, -- Olivier Lamy Ecetera: http://ecetera.com.au http://twitter.com/olamy | http://linkedin.com/in/olamy - To unsubscribe, e-mail: dev-unsubscr...@maven.apache.org For additional commands, e-mail: dev-h...@maven.apache.org
