date:20191028

Btw,  does Apache Netbeans ever support in place self-update like PhpStorm?


On Tue, Oct 29, 2019, 12:34 AM Laszlo Kishalmi 
wrote:

>
> On 10/28/19 1:26 PM, Code Zombie wrote:
> > +1
> >
> > The installer worked fine and I installed it in my home directory.
> However,
> > it seems that the installer is not able to or expected to update the
> > previous version(?). So, after installing, there are two versions on my
> > Linux: 11.1 and 11.2.
> >
> > - Mehdi
> That is the expected behavior.
> >
> > On Fri, Oct 25, 2019 at 11:47 AM  wrote:
> >
> >> Hi,
> >>
> >> Artifacts are available here:
> >>
> >> https://dist.apache.org/repos/dist/dev/netbeans/netbeans/11.2-vc1
> >>
> >> Built using Jenkins job:
> >>
> >>
> https://builds.apache.org/view/M-R/view/NetBeans/job/netbeans-installers/
> >>
> >> Primary voting artifact:
> >>
> >>
> >>
> https://dist.apache.org/repos/dist/dev/netbeans/netbeans/11.2-vc1/Apache-NetBeans-11.2-bin-linux-x64.sh
> >>
> >> SHA512:
> >>
> >>
> a02206dc569ef00c2e08ecb799604a0cae21d9204894e9432a51ff89981266d097a6f5d0b7c3c90be663cfced5ead7f37f7fe286a2a0e1569c972178a89c3f9e
> >>
> >> Apache-NetBeans-11.2-bin-linux-x64.sh
> >>
> >> KEYS file:
> >>
> >> https://dist.apache.org/repos/dist/release/netbeans/KEYS
> >>
> >> Installer build steps:
> >>
> >>
> https://cwiki.apache.org/confluence/display/NETBEANS/Installer+Build+Steps
> >>
> >> Please check that the artifact functions correctly and has been
> >> correctly signed by a PMC member.
> >>
> >> This vote is going to be open at least 72 hours, vote with +1, 0, and -1
> >> as usual. Please mark your vote with (binding) if you're an Apache
> >> NetBeans PMC member.
> >>
> >> Apache NetBeans 11.2 Linux Installer will be released if and when this
> >> vote passes.
> >>
> >>
> >> Thanks,
> >>
> >> Reema
> >>
> >>
> >>
> >>
> >>
> >>
> >> -
> >> To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
> >> For additional commands, e-mail: dev-h...@netbeans.apache.org
> >>
> >> For further information about the NetBeans mailing lists, visit:
> >> https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
> >>
> >>
> >>
> >>
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
> For additional commands, e-mail: dev-h...@netbeans.apache.org
>
> For further information about the NetBeans mailing lists, visit:
> https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
>
>
>
>

Re: [VOTE] Release Apache NetBeans 11.2 Linux Installer

2019-10-28 Thread Laszlo Kishalmi




On 10/28/19 1:26 PM, Code Zombie wrote:

+1

The installer worked fine and I installed it in my home directory. However,
it seems that the installer is not able to or expected to update the
previous version(?). So, after installing, there are two versions on my
Linux: 11.1 and 11.2.

- Mehdi

That is the expected behavior.


On Fri, Oct 25, 2019 at 11:47 AM  wrote:


Hi,

Artifacts are available here:

https://dist.apache.org/repos/dist/dev/netbeans/netbeans/11.2-vc1

Built using Jenkins job:

https://builds.apache.org/view/M-R/view/NetBeans/job/netbeans-installers/

Primary voting artifact:


https://dist.apache.org/repos/dist/dev/netbeans/netbeans/11.2-vc1/Apache-NetBeans-11.2-bin-linux-x64.sh

SHA512:

a02206dc569ef00c2e08ecb799604a0cae21d9204894e9432a51ff89981266d097a6f5d0b7c3c90be663cfced5ead7f37f7fe286a2a0e1569c972178a89c3f9e

Apache-NetBeans-11.2-bin-linux-x64.sh

KEYS file:

https://dist.apache.org/repos/dist/release/netbeans/KEYS

Installer build steps:

https://cwiki.apache.org/confluence/display/NETBEANS/Installer+Build+Steps

Please check that the artifact functions correctly and has been
correctly signed by a PMC member.

This vote is going to be open at least 72 hours, vote with +1, 0, and -1
as usual. Please mark your vote with (binding) if you're an Apache
NetBeans PMC member.

Apache NetBeans 11.2 Linux Installer will be released if and when this
vote passes.


Thanks,

Reema






-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists






-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists

Re: [DISCUSS] Handling release updates

2019-10-28 Thread Matthias Bläsing

Hi,

Am Montag, den 28.10.2019, 19:24 + schrieb Neil C Smith:
> On Mon, 28 Oct 2019 at 19:00, Matthias Bläsing
>  wrote:
> > if I'm not mistaken, currently the NBMs we produce are not signed when
> > we release. This is what I suggest:
> 
> No, they're not.

I just remembered, where I saw this in the build:

nb/updatecenters/build.xml

there a new signing key is created, the nbms for javafx and nbjavac are
build and signed with that key. Then the public key/certificate is
embedded in the build as ide.ks.

ide.ks is provided by
org.netbeans.modules.updatecenters.resources.NetBeansKeyStoreProvider
to the update center to be used to check the signatures embedded in the
NBMs (see the META-INF directory of the javafx/nbjavac nbms to see the
signature).

That way the NBMs are fully trusted by the IDE and don't even trigger
the Validation dialog (so far my reading of the update center gui).

My idea would add a trusted certificate to ide.ks, that corresponds
with a signing key, that only PMC members have access to.

> > - all updates will be signed with that key, as it is trusted, it can be
> >   used to safely install updates
> 
> How, or actually, where?  That would still be a manual, local, job?
> It would be great if we could sign during the Jenkins build.  Or does
> that just open another can of worms?

Yes my idea would be to require the release manager to get the signing
key from the SVN, decrypt it with his/her GPG key, use it to sign the
update-center nbms and the remove the signing key again.

> The other option that comes to mind - Jan mentioned validating the GPG
> signatures - but would it be possible to just get the IDE to use our
> KEYS file as a source for validation?

Then you need to artifacts: The NBM and its corresponding detached
signature. I agree, that it is possible to verify the signature that
way, but how to get them combined? And we would still need to push an
update to the current install base.

Greetings

Matthias

-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists

Re: [VOTE] Release Apache NetBeans 11.2 macOS Installer

+1

Installed and started without problem.
A small note on installation. You should drag the pkg file outside the
mounted dmg first and then right click and select open  to allow running on
macOS.



On Fri, Oct 25, 2019 at 11:56 AM  wrote:

> Hi
>
> Artifacts are available here:
>
> https://dist.apache.org/repos/dist/dev/netbeans/netbeans/11.2-vc1
>
> Built locally from release112 branch using JDK 1.8 on macOS 10.13.6:
>
> Primary voting artifact:
>
>
> https://dist.apache.org/repos/dist/dev/netbeans/netbeans/11.2-vc1/Apache-NetBeans-11.2-bin-macosx.dmg
>
> SHA512:
>
> 7cde2e5ff1fe2125ff0446b1cd663172eb64db4d852b6cbc265ce33b0eb2ce30b4f4bb632ce8860ce1a16c2127858f45391518b6e8fcfe32ea534d32f24769f8
>
> Apache-NetBeans-11.2-bin-macosx.dmg
>
> KEYS file:
>
> https://dist.apache.org/repos/dist/release/netbeans/KEYS
>
> Installer build steps:
>
> https://cwiki.apache.org/confluence/display/NETBEANS/Installer+Build+Steps
>
> Please check that the artifact functions correctly and has been
> correctly signed by a PMC member.
>
> This vote is going to be open at least 72 hours, vote with +1, 0, and -1
> as usual.
>
> Please mark your vote with (binding) if you're an Apache NetBeans PMC
> member.
>
> Apache NetBeans 11.2 macOS Installer will be released if and when this
> vote passes.
>
>
> Thanks,
>
> Reema
>
>
>
>
>
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
> For additional commands, e-mail: dev-h...@netbeans.apache.org
>
> For further information about the NetBeans mailing lists, visit:
> https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
>
>
>
>

Re: [VOTE] Release Apache NetBeans 11.2 Windows Installer

+1

It does not update the previous version, though. Is this the default
behavior in future versions as well?


On Sat, Oct 26, 2019 at 10:08 AM Heath Casey  wrote:

> +1
>

Re: [VOTE] Release Apache NetBeans 11.2 macOS Installer

That may depend on the specific os version. It did not work for me without
doing so.

On Mon, Oct 28, 2019 at 3:46 PM Code Zombie  wrote:

> I am not sure if holding the option key is necessary as macOS will warn you
> anyway after selecting Open from the context menu.
> - Mehdi
>
> On Mon, Oct 28, 2019 at 3:20 PM Scott Palmer  wrote:
>
> > So when you right-click the .pkg and hold Option when selecting “Open”
> > from the context menu, it still doesn’t let you install even though it
> > warns?
> >
> >
> > Geertjan,  what do you mean by “Anything executed from command line will
> > execute like normal” ?
> >
> > For the record opening the .pkg from the command line:
> >
> > open "/Volumes/Apache NetBeans 11.2/Apache NetBeans 11.2.pkg”
> >
> > still won’t allow you to continue.  The only way I am aware of is to know
> > to use the context menu “Open” and hold option while selecting it.
> >
> > Many macOS users will not be aware of this option.  So at the very least
> > these instructions should be on the download page.
> >
> >
> > Scott
> >
> >
> > > On Oct 28, 2019, at 2:53 PM, Carl Mosca  wrote:
> > >
> > > To be clear, I was/am not able to use the installer at all.  I have not
> > > been able to get around the notarization issue.
> > >
> > > On Mon, Oct 28, 2019 at 2:51 PM Scott Palmer 
> wrote:
> > >
> > >> It actually requires special knowledge and steps to install on macOS
> > 10.15
> > >> without the notarization.
> > >>
> > >> By default there is no option to continue with the install.  You must
> > know
> > >> to open it while holding the Option key only then will there be an
> > option
> > >> to ignore the warning and continue.
> > >>
> > >> The notarizing process is supposed to be quick. I don’t have an Apple
> > >> developer ID, so I don’t know for sure.
> > >>
> > >> Scott
> > >>
> > >>> On Oct 28, 2019, at 2:12 PM, Geertjan Wielenga 
> > >> wrote:
> > >>>
> > >>> On Mon, Oct 28, 2019 at 6:56 PM Carl Mosca 
> > >> wrote:
> > >>>
> >  Meaning the installer does not work if you have the latest/current
> > >> release
> >  of the OS running.
> > 
> > >>>
> > >>> 'But you can ignore it. "Run anyway" so to speak. It's not that it
> > blocks
> > >>> you, it just warns you and makes it more steps to run potentially
> > harmful
> > >>> software. Anything executed from command line will execute like
> normal,
> > >> and
> > >>> I believe also if you alt-click and select open.'
> > >>>
> > >>>
> > >>
> >
> https://www.macrumors.com/2019/09/03/apple-macos-catalina-notarization-mac-apps/
> > >>>
> > >>> Gj
> >
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
> > For additional commands, e-mail: dev-h...@netbeans.apache.org
> >
> > For further information about the NetBeans mailing lists, visit:
> > https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
> >
> >
> >
> >
>
-- 
Regards,
Carl

Re: [VOTE] Release Apache NetBeans 11.2 Linux Installer

+1

The installer worked fine and I installed it in my home directory. However,
it seems that the installer is not able to or expected to update the
previous version(?). So, after installing, there are two versions on my
Linux: 11.1 and 11.2.

- Mehdi

On Fri, Oct 25, 2019 at 11:47 AM  wrote:

> Hi,
>
> Artifacts are available here:
>
> https://dist.apache.org/repos/dist/dev/netbeans/netbeans/11.2-vc1
>
> Built using Jenkins job:
>
> https://builds.apache.org/view/M-R/view/NetBeans/job/netbeans-installers/
>
> Primary voting artifact:
>
>
> https://dist.apache.org/repos/dist/dev/netbeans/netbeans/11.2-vc1/Apache-NetBeans-11.2-bin-linux-x64.sh
>
> SHA512:
>
> a02206dc569ef00c2e08ecb799604a0cae21d9204894e9432a51ff89981266d097a6f5d0b7c3c90be663cfced5ead7f37f7fe286a2a0e1569c972178a89c3f9e
>
> Apache-NetBeans-11.2-bin-linux-x64.sh
>
> KEYS file:
>
> https://dist.apache.org/repos/dist/release/netbeans/KEYS
>
> Installer build steps:
>
> https://cwiki.apache.org/confluence/display/NETBEANS/Installer+Build+Steps
>
> Please check that the artifact functions correctly and has been
> correctly signed by a PMC member.
>
> This vote is going to be open at least 72 hours, vote with +1, 0, and -1
> as usual. Please mark your vote with (binding) if you're an Apache
> NetBeans PMC member.
>
> Apache NetBeans 11.2 Linux Installer will be released if and when this
> vote passes.
>
>
> Thanks,
>
> Reema
>
>
>
>
>
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
> For additional commands, e-mail: dev-h...@netbeans.apache.org
>
> For further information about the NetBeans mailing lists, visit:
> https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
>
>
>
>

Re: [VOTE] Release Apache NetBeans 11.2 macOS Installer

I am not sure if holding the option key is necessary as macOS will warn you
anyway after selecting Open from the context menu.
- Mehdi

On Mon, Oct 28, 2019 at 3:20 PM Scott Palmer  wrote:

> So when you right-click the .pkg and hold Option when selecting “Open”
> from the context menu, it still doesn’t let you install even though it
> warns?
>
>
> Geertjan,  what do you mean by “Anything executed from command line will
> execute like normal” ?
>
> For the record opening the .pkg from the command line:
>
> open "/Volumes/Apache NetBeans 11.2/Apache NetBeans 11.2.pkg”
>
> still won’t allow you to continue.  The only way I am aware of is to know
> to use the context menu “Open” and hold option while selecting it.
>
> Many macOS users will not be aware of this option.  So at the very least
> these instructions should be on the download page.
>
>
> Scott
>
>
> > On Oct 28, 2019, at 2:53 PM, Carl Mosca  wrote:
> >
> > To be clear, I was/am not able to use the installer at all.  I have not
> > been able to get around the notarization issue.
> >
> > On Mon, Oct 28, 2019 at 2:51 PM Scott Palmer  wrote:
> >
> >> It actually requires special knowledge and steps to install on macOS
> 10.15
> >> without the notarization.
> >>
> >> By default there is no option to continue with the install.  You must
> know
> >> to open it while holding the Option key only then will there be an
> option
> >> to ignore the warning and continue.
> >>
> >> The notarizing process is supposed to be quick. I don’t have an Apple
> >> developer ID, so I don’t know for sure.
> >>
> >> Scott
> >>
> >>> On Oct 28, 2019, at 2:12 PM, Geertjan Wielenga 
> >> wrote:
> >>>
> >>> On Mon, Oct 28, 2019 at 6:56 PM Carl Mosca 
> >> wrote:
> >>>
>  Meaning the installer does not work if you have the latest/current
> >> release
>  of the OS running.
> 
> >>>
> >>> 'But you can ignore it. "Run anyway" so to speak. It's not that it
> blocks
> >>> you, it just warns you and makes it more steps to run potentially
> harmful
> >>> software. Anything executed from command line will execute like normal,
> >> and
> >>> I believe also if you alt-click and select open.'
> >>>
> >>>
> >>
> https://www.macrumors.com/2019/09/03/apple-macos-catalina-notarization-mac-apps/
> >>>
> >>> Gj
>
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
> For additional commands, e-mail: dev-h...@netbeans.apache.org
>
> For further information about the NetBeans mailing lists, visit:
> https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
>
>
>
>

Re: [VOTE] Release Apache NetBeans 11.2 macOS Installer

Scott,

I understood that the option was no longer available but I just tried it
using the procedure you outlined and it was successful.

Yes, I would think that *most* MacOS users are not aware that this option
is currently available as I have read conflicting reports.

Carl

On Mon, Oct 28, 2019 at 3:20 PM Scott Palmer  wrote:

> So when you right-click the .pkg and hold Option when selecting “Open”
> from the context menu, it still doesn’t let you install even though it
> warns?
>
>
> Geertjan,  what do you mean by “Anything executed from command line will
> execute like normal” ?
>
> For the record opening the .pkg from the command line:
>
> open "/Volumes/Apache NetBeans 11.2/Apache NetBeans 11.2.pkg”
>
> still won’t allow you to continue.  The only way I am aware of is to know
> to use the context menu “Open” and hold option while selecting it.
>
> Many macOS users will not be aware of this option.  So at the very least
> these instructions should be on the download page.
>
>
> Scott
>
>
> > On Oct 28, 2019, at 2:53 PM, Carl Mosca  wrote:
> >
> > To be clear, I was/am not able to use the installer at all.  I have not
> > been able to get around the notarization issue.
> >
> > On Mon, Oct 28, 2019 at 2:51 PM Scott Palmer  wrote:
> >
> >> It actually requires special knowledge and steps to install on macOS
> 10.15
> >> without the notarization.
> >>
> >> By default there is no option to continue with the install.  You must
> know
> >> to open it while holding the Option key only then will there be an
> option
> >> to ignore the warning and continue.
> >>
> >> The notarizing process is supposed to be quick. I don’t have an Apple
> >> developer ID, so I don’t know for sure.
> >>
> >> Scott
> >>
> >>> On Oct 28, 2019, at 2:12 PM, Geertjan Wielenga 
> >> wrote:
> >>>
> >>> On Mon, Oct 28, 2019 at 6:56 PM Carl Mosca 
> >> wrote:
> >>>
>  Meaning the installer does not work if you have the latest/current
> >> release
>  of the OS running.
> 
> >>>
> >>> 'But you can ignore it. "Run anyway" so to speak. It's not that it
> blocks
> >>> you, it just warns you and makes it more steps to run potentially
> harmful
> >>> software. Anything executed from command line will execute like normal,
> >> and
> >>> I believe also if you alt-click and select open.'
> >>>
> >>>
> >>
> https://www.macrumors.com/2019/09/03/apple-macos-catalina-notarization-mac-apps/
> >>>
> >>> Gj
>
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
> For additional commands, e-mail: dev-h...@netbeans.apache.org
>
> For further information about the NetBeans mailing lists, visit:
> https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
>
>
>
>

-- 
Carl J. Mosca

Re: [DISCUSS] Handling release updates

On Mon, 28 Oct 2019 at 19:00, Matthias Bläsing
 wrote:
> if I'm not mistaken, currently the NBMs we produce are not signed when
> we release. This is what I suggest:

No, they're not.

> - all updates will be signed with that key, as it is trusted, it can be
>   used to safely install updates

How, or actually, where?  That would still be a manual, local, job?
It would be great if we could sign during the Jenkins build.  Or does
that just open another can of worms?

The other option that comes to mind - Jan mentioned validating the GPG
signatures - but would it be possible to just get the IDE to use our
KEYS file as a source for validation?

Best wishes,

Neil

-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists

Re: [VOTE] Release Apache NetBeans 11.2 macOS Installer

2019-10-28 Thread Scott Palmer

So when you right-click the .pkg and hold Option when selecting “Open” from the 
context menu, it still doesn’t let you install even though it warns?


Geertjan,  what do you mean by “Anything executed from command line will 
execute like normal” ?

For the record opening the .pkg from the command line:

open "/Volumes/Apache NetBeans 11.2/Apache NetBeans 11.2.pkg”

still won’t allow you to continue.  The only way I am aware of is to know to 
use the context menu “Open” and hold option while selecting it.

Many macOS users will not be aware of this option.  So at the very least these 
instructions should be on the download page.


Scott


> On Oct 28, 2019, at 2:53 PM, Carl Mosca  wrote:
> 
> To be clear, I was/am not able to use the installer at all.  I have not
> been able to get around the notarization issue.
> 
> On Mon, Oct 28, 2019 at 2:51 PM Scott Palmer  wrote:
> 
>> It actually requires special knowledge and steps to install on macOS 10.15
>> without the notarization.
>> 
>> By default there is no option to continue with the install.  You must know
>> to open it while holding the Option key only then will there be an option
>> to ignore the warning and continue.
>> 
>> The notarizing process is supposed to be quick. I don’t have an Apple
>> developer ID, so I don’t know for sure.
>> 
>> Scott
>> 
>>> On Oct 28, 2019, at 2:12 PM, Geertjan Wielenga 
>> wrote:
>>> 
>>> On Mon, Oct 28, 2019 at 6:56 PM Carl Mosca 
>> wrote:
>>> 
 Meaning the installer does not work if you have the latest/current
>> release
 of the OS running.
 
>>> 
>>> 'But you can ignore it. "Run anyway" so to speak. It's not that it blocks
>>> you, it just warns you and makes it more steps to run potentially harmful
>>> software. Anything executed from command line will execute like normal,
>> and
>>> I believe also if you alt-click and select open.'
>>> 
>>> 
>> https://www.macrumors.com/2019/09/03/apple-macos-catalina-notarization-mac-apps/
>>> 
>>> Gj


-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists

Re: [VOTE] Release Apache NetBeans 11.2 macOS Installer

Actually download is slow and non-resumable which makes the voting process
harder.

-Mehdi

On Mon, Oct 28, 2019, 10:10 PM Neil C Smith  wrote:

> On Mon, 28 Oct 2019 at 18:38, Code Zombie  wrote:
> > The download speed for the artifacts is quite slow, never going beyond
> > 60kB/s. Is that expected or varies depending on region?
>
> Voting artefacts aren't on the mirrors so might be slow.
>
> Neil
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
> For additional commands, e-mail: dev-h...@netbeans.apache.org
>
> For further information about the NetBeans mailing lists, visit:
> https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
>
>
>
>

Re: [DISCUSS] Handling release updates

2019-10-28 Thread Matthias Bläsing

Hi,

Am Sonntag, den 27.10.2019, 12:18 +0100 schrieb Jan Lahoda:
> [How to handle updates]
> But I have no idea if we asked to an access there. (And if ASF would pay
> for each signed file, then singing several hundreds NBMs would not fly
> anyway, I think.) But we could at least use that for this update release
> (which will likely only consist of a handful of NBMs), and try to do
> something better for the future.

if I'm not mistaken, currently the NBMs we produce are not signed when
we release. This is what I suggest:

- lets create a signing key for the netbeans releases, place the
  private key on the PMC SVN directory, as is done with the SSH key to
  access the ousol binaries site
- add the public key for the signing key as a trusted code signing
  certificate to the netbeans distribution
- all updates will be signed with that key, as it is trusted, it can be
  used to safely install updates
- we should make sure, that we can handle multiple trusted keys,
  that way we can push a new key, using an existing key

This still requires once a manual installation of the first netbeans
version, that carries the key. What do you think?

Greetings

Matthias




-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists

Re: [VOTE] Release Apache NetBeans 11.2 macOS Installer

To be clear, I was/am not able to use the installer at all.  I have not
been able to get around the notarization issue.

On Mon, Oct 28, 2019 at 2:51 PM Scott Palmer  wrote:

> It actually requires special knowledge and steps to install on macOS 10.15
> without the notarization.
>
> By default there is no option to continue with the install.  You must know
> to open it while holding the Option key only then will there be an option
> to ignore the warning and continue.
>
> The notarizing process is supposed to be quick. I don’t have an Apple
> developer ID, so I don’t know for sure.
>
> Scott
>
> > On Oct 28, 2019, at 2:12 PM, Geertjan Wielenga 
> wrote:
> >
> > On Mon, Oct 28, 2019 at 6:56 PM Carl Mosca 
> wrote:
> >
> >> Meaning the installer does not work if you have the latest/current
> release
> >> of the OS running.
> >>
> >
> > 'But you can ignore it. "Run anyway" so to speak. It's not that it blocks
> > you, it just warns you and makes it more steps to run potentially harmful
> > software. Anything executed from command line will execute like normal,
> and
> > I believe also if you alt-click and select open.'
> >
> >
> https://www.macrumors.com/2019/09/03/apple-macos-catalina-notarization-mac-apps/
> >
> > Gj
> >
> >
> >
> >
> >>
> >>> On Mon, Oct 28, 2019 at 1:39 PM  wrote:
> >>>
> >>> Hi,
> >>>
> >>> This came up during last release, I had raised an infra ticket for
> >>> notarization - INFRA-18790
> >>> , but it failed
> with
> >>> a long list of errors.
> >>>
> >>> This needs investigation, I haven't been able to get to it yet.
> >>>
> >>> So, I agree with Geertjan's suggestion to add note that installer works
> >>> for 10.13.x and 10.14.x macOS releases and is pending notarization that
> >>> is required for 10.15.x release.
> >>>
> >>> Thanks,
> >>>
> >>> Reema
> >>>
> >>> On 28/10/19 5:43 PM, Geertjan Wielenga wrote:
>  We could add on the Download page that the installer for Mac OSX has
> >> been
>  signed but not notarized (
> 
> >>>
> >>
> https://urldefense.proofpoint.com/v2/url?u=https-3A__developer.apple.com_documentation_security_notarizing-5Fyour-5Fapp-5Fbefore-5Fdistribution=DwIBaQ=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE=I_-Y15BecdUmuYLJbvbi0hFUs7JgHZnV_jPFSP8DQF0=AU5axCXNKWDQypYO5D1OcvSHUynS_-Wl1_0S-laIHDc=e05RMNxX87RB32yCeA9JWFLooi2yfatEqICXh-ffoTw=
>  ).
> 
>  Unless Reema has a plan or someone has a plan relating to
> notarization.
>  Since we have it signed and it seems a lengthy Apple-driven process to
>  notarize it, I'd argue that so long as we state that clearly, this
> >> should
>  not be a blocker for releasing the installer.
> 
>  Gj
> 
>  On Mon, Oct 28, 2019 at 11:36 AM Carl Mosca 
> >>> wrote:
> 
> > -1
> >  "Can't be opened because Apple cannot check for malicious software"
> >
> > On Mon, Oct 28, 2019 at 6:26 AM Neil C Smith 
> > wrote:
> >
> >> On Mon, 28 Oct 2019 at 09:54, Eric Barboni 
> wrote:
> >>> Sha512 and key from Reema is ok it means this can be released on
> >> dist.
> >>> Not functional is another point. But Reema can cancel if tester on
> > MacOS
> >> found issue.
> >>
> >> Distribution on dist requires more than that, and we also discussed
> >> requiring more ourselves.  The wording that was discussed, that I
> >> thought you said you agreed with, said that all voters must verify
> >> all
> >> checksums and keys (including the additional keys in the
> >> installers!),
> >> check they function, and verify that they only install artefacts
> >> built
> >> from the released sources.  I don't see any point in voting on
> >> binaries if we're not requiring checks on all those things that the
> >> PMC must check.
> >>
> >> Anyway, let's not hijack the vote thread further on this.
> >>
> >> I'd like to hear Reema's opinion on pulling and re-voting on macOS
> >> installers because of the notarization issue though.
> >>
> >> Thanks and best wishes,
> >>
> >> Neil
> >>
> >>
> -
> >> To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
> >> For additional commands, e-mail: dev-h...@netbeans.apache.org
> >>
> >> For further information about the NetBeans mailing lists, visit:
> >>
> >>>
> >>
> https://urldefense.proofpoint.com/v2/url?u=https-3A__cwiki.apache.org_confluence_display_NETBEANS_Mailing-2Blists=DwIBaQ=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE=I_-Y15BecdUmuYLJbvbi0hFUs7JgHZnV_jPFSP8DQF0=AU5axCXNKWDQypYO5D1OcvSHUynS_-Wl1_0S-laIHDc=XYqudrqPACu1wB_McTbfOCSjE5P-TWycb2BM7SRC_8Y=
> >>
> >>
> >>
> >>
> > --
> > Carl J. Mosca
> >
> >>>
> >>
> >>
> >> --
> >> Carl J. Mosca
> >>
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org

Re: [VOTE] Release Apache NetBeans 11.2 macOS Installer

On Mon, 28 Oct 2019 at 18:38, Code Zombie  wrote:
> The download speed for the artifacts is quite slow, never going beyond
> 60kB/s. Is that expected or varies depending on region?

Voting artefacts aren't on the mirrors so might be slow.

Neil

-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists

Re: [VOTE] Release Apache NetBeans 11.2 macOS Installer

The download speed for the artifacts is quite slow, never going beyond
60kB/s. Is that expected or varies depending on region?

- Mehdi

On Fri, Oct 25, 2019 at 11:56 AM  wrote:

> Hi
>
> Artifacts are available here:
>
> https://dist.apache.org/repos/dist/dev/netbeans/netbeans/11.2-vc1
>
> Built locally from release112 branch using JDK 1.8 on macOS 10.13.6:
>
> Primary voting artifact:
>
>
> https://dist.apache.org/repos/dist/dev/netbeans/netbeans/11.2-vc1/Apache-NetBeans-11.2-bin-macosx.dmg
>
> SHA512:
>
> 7cde2e5ff1fe2125ff0446b1cd663172eb64db4d852b6cbc265ce33b0eb2ce30b4f4bb632ce8860ce1a16c2127858f45391518b6e8fcfe32ea534d32f24769f8
>
> Apache-NetBeans-11.2-bin-macosx.dmg
>
> KEYS file:
>
> https://dist.apache.org/repos/dist/release/netbeans/KEYS
>
> Installer build steps:
>
> https://cwiki.apache.org/confluence/display/NETBEANS/Installer+Build+Steps
>
> Please check that the artifact functions correctly and has been
> correctly signed by a PMC member.
>
> This vote is going to be open at least 72 hours, vote with +1, 0, and -1
> as usual.
>
> Please mark your vote with (binding) if you're an Apache NetBeans PMC
> member.
>
> Apache NetBeans 11.2 macOS Installer will be released if and when this
> vote passes.
>
>
> Thanks,
>
> Reema
>
>
>
>
>
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
> For additional commands, e-mail: dev-h...@netbeans.apache.org
>
> For further information about the NetBeans mailing lists, visit:
> https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
>
>
>
>

Re: [VOTE] Release Apache NetBeans 11.2 macOS Installer

2019-10-28 Thread John Mc

+1

Regards

John

On Mon, 28 Oct 2019 at 18:12, Geertjan Wielenga  wrote:

> On Mon, Oct 28, 2019 at 6:56 PM Carl Mosca  wrote:
>
> > Meaning the installer does not work if you have the latest/current
> release
> > of the OS running.
> >
>
> 'But you can ignore it. "Run anyway" so to speak. It's not that it blocks
> you, it just warns you and makes it more steps to run potentially harmful
> software. Anything executed from command line will execute like normal, and
> I believe also if you alt-click and select open.'
>
>
> https://www.macrumors.com/2019/09/03/apple-macos-catalina-notarization-mac-apps/
>
> Gj
>
>
>
>
> >
> > On Mon, Oct 28, 2019 at 1:39 PM  wrote:
> >
> > > Hi,
> > >
> > > This came up during last release, I had raised an infra ticket for
> > > notarization - INFRA-18790
> > > , but it failed
> with
> > > a long list of errors.
> > >
> > > This needs investigation, I haven't been able to get to it yet.
> > >
> > > So, I agree with Geertjan's suggestion to add note that installer works
> > > for 10.13.x and 10.14.x macOS releases and is pending notarization that
> > > is required for 10.15.x release.
> > >
> > > Thanks,
> > >
> > > Reema
> > >
> > > On 28/10/19 5:43 PM, Geertjan Wielenga wrote:
> > > > We could add on the Download page that the installer for Mac OSX has
> > been
> > > > signed but not notarized (
> > > >
> > >
> >
> https://urldefense.proofpoint.com/v2/url?u=https-3A__developer.apple.com_documentation_security_notarizing-5Fyour-5Fapp-5Fbefore-5Fdistribution=DwIBaQ=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE=I_-Y15BecdUmuYLJbvbi0hFUs7JgHZnV_jPFSP8DQF0=AU5axCXNKWDQypYO5D1OcvSHUynS_-Wl1_0S-laIHDc=e05RMNxX87RB32yCeA9JWFLooi2yfatEqICXh-ffoTw=
> > > > ).
> > > >
> > > > Unless Reema has a plan or someone has a plan relating to
> notarization.
> > > > Since we have it signed and it seems a lengthy Apple-driven process
> to
> > > > notarize it, I'd argue that so long as we state that clearly, this
> > should
> > > > not be a blocker for releasing the installer.
> > > >
> > > > Gj
> > > >
> > > > On Mon, Oct 28, 2019 at 11:36 AM Carl Mosca 
> > > wrote:
> > > >
> > > >> -1
> > > >>   "Can't be opened because Apple cannot check for malicious
> software"
> > > >>
> > > >> On Mon, Oct 28, 2019 at 6:26 AM Neil C Smith  >
> > > >> wrote:
> > > >>
> > > >>> On Mon, 28 Oct 2019 at 09:54, Eric Barboni 
> wrote:
> > >  Sha512 and key from Reema is ok it means this can be released on
> > dist.
> > >  Not functional is another point. But Reema can cancel if tester on
> > > >> MacOS
> > > >>> found issue.
> > > >>>
> > > >>> Distribution on dist requires more than that, and we also discussed
> > > >>> requiring more ourselves.  The wording that was discussed, that I
> > > >>> thought you said you agreed with, said that all voters must verify
> > all
> > > >>> checksums and keys (including the additional keys in the
> > installers!),
> > > >>> check they function, and verify that they only install artefacts
> > built
> > > >>> from the released sources.  I don't see any point in voting on
> > > >>> binaries if we're not requiring checks on all those things that the
> > > >>> PMC must check.
> > > >>>
> > > >>> Anyway, let's not hijack the vote thread further on this.
> > > >>>
> > > >>> I'd like to hear Reema's opinion on pulling and re-voting on macOS
> > > >>> installers because of the notarization issue though.
> > > >>>
> > > >>> Thanks and best wishes,
> > > >>>
> > > >>> Neil
> > > >>>
> > > >>>
> -
> > > >>> To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
> > > >>> For additional commands, e-mail: dev-h...@netbeans.apache.org
> > > >>>
> > > >>> For further information about the NetBeans mailing lists, visit:
> > > >>>
> > >
> >
> https://urldefense.proofpoint.com/v2/url?u=https-3A__cwiki.apache.org_confluence_display_NETBEANS_Mailing-2Blists=DwIBaQ=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE=I_-Y15BecdUmuYLJbvbi0hFUs7JgHZnV_jPFSP8DQF0=AU5axCXNKWDQypYO5D1OcvSHUynS_-Wl1_0S-laIHDc=XYqudrqPACu1wB_McTbfOCSjE5P-TWycb2BM7SRC_8Y=
> > > >>>
> > > >>>
> > > >>>
> > > >>>
> > > >> --
> > > >> Carl J. Mosca
> > > >>
> > >
> >
> >
> > --
> > Carl J. Mosca
> >
>

Re: [DISCUSS] Handling release updates

On Mon, 28 Oct 2019 at 18:16, Geertjan Wielenga  wrote:
> How are we doing in this discussion, at least, what can we do to release
> the fix to the nb-javac which, without it, will otherwise cause refactoring
> to fail if nb-javac is installed?

We need it merged to master.  We ideally need a temporary UC where
people can check it works OK with NB 11.2.  We need a cherry-picked PR
for release112.  We need to vote on a new source zip (along with any
other fixes we want to include in a patch release).  We need to upload
changed nbms and edit the catalog.

All that is mostly, OK.  At some point in that we really need to
figure out how to sign the updated NBMs though.

Also interested in Eric's view on using Maven for updates, because
this might be a better place to link the new NBMs from?

Best wishes,

Neil

-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists

Re: [DISCUSS] Handling release updates

Hi all,

How are we doing in this discussion, at least, what can we do to release
the fix to the nb-javac which, without it, will otherwise cause refactoring
to fail if nb-javac is installed?

Gj

On Sun, Oct 27, 2019 at 12:19 PM Jan Lahoda  wrote:

> On Fri, Oct 25, 2019 at 1:04 PM Neil C Smith 
> wrote:
>
> > On Thu, 24 Oct 2019 at 21:17, Jan Lahoda  wrote:
> > >> Still unsure about how we handle catalog and signing issues though.
> > >> Am I right in thinking with current situation people will see a
> > >> warning on update?  Definitely see this already when re-enabling
> > >> nb-javac.
> > >
> > > That is one of the things I'd like to try. The update will be a two
> > phase process - first update the nb/updatecenters module, and then
> > nb-javac. I *think* there should be no warning for the second update
> > (because the NBM is signed using the key that is embedded in the
> > updatecenters module), but I am less sure about how exactly the first
> > update will work.
> >
> > I'm fairly sure the first update at least will show a warning.
> > Installing other nbms from the distribution UC does now.
> >
>
> Yes, i am afraid so, unless we find a way to sensibly sign the NBMs.
>
> There is this (which is probably what Reema shared):
> https://blogs.apache.org/infra/entry/code_signing_service_now_available
>
> But I have no idea if we asked to an access there. (And if ASF would pay
> for each signed file, then singing several hundreds NBMs would not fly
> anyway, I think.) But we could at least use that for this update release
> (which will likely only consist of a handful of NBMs), and try to do
> something better for the future.
>
> But the second update should be without warning, if the NBMs is done
> properly.
>
>
> > Check the link Reema shared that I posted earlier.  We might be able
> > to use that, in the short term manually signing the relevant updates
> > via the web interface?  Except that shows a browser security error for
> > me.  And also specifies .jar extension.
> >
> > What other options are there?  Is there any *secure* way that we can
> > add trust in the IDE for modules built on ASF infrastructure?  If I
> > understand it correctly, the current way the third-party UC does this
> > will only work for a single build?
> >
>
> I wonder if we could validate the GPG signatures (.asc) we need to use
> anyway - the IDE could then have a list of "trusted" KEYs.
>
> Jan
>
>
> > Best wishes,
> >
> > Neil
> >
>

Re: [VOTE] Release Apache NetBeans 11.2 macOS Installer

On Mon, Oct 28, 2019 at 6:56 PM Carl Mosca  wrote:

> Meaning the installer does not work if you have the latest/current release
> of the OS running.
>

'But you can ignore it. "Run anyway" so to speak. It's not that it blocks
you, it just warns you and makes it more steps to run potentially harmful
software. Anything executed from command line will execute like normal, and
I believe also if you alt-click and select open.'

https://www.macrumors.com/2019/09/03/apple-macos-catalina-notarization-mac-apps/

Gj




>
> On Mon, Oct 28, 2019 at 1:39 PM  wrote:
>
> > Hi,
> >
> > This came up during last release, I had raised an infra ticket for
> > notarization - INFRA-18790
> > , but it failed with
> > a long list of errors.
> >
> > This needs investigation, I haven't been able to get to it yet.
> >
> > So, I agree with Geertjan's suggestion to add note that installer works
> > for 10.13.x and 10.14.x macOS releases and is pending notarization that
> > is required for 10.15.x release.
> >
> > Thanks,
> >
> > Reema
> >
> > On 28/10/19 5:43 PM, Geertjan Wielenga wrote:
> > > We could add on the Download page that the installer for Mac OSX has
> been
> > > signed but not notarized (
> > >
> >
> https://urldefense.proofpoint.com/v2/url?u=https-3A__developer.apple.com_documentation_security_notarizing-5Fyour-5Fapp-5Fbefore-5Fdistribution=DwIBaQ=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE=I_-Y15BecdUmuYLJbvbi0hFUs7JgHZnV_jPFSP8DQF0=AU5axCXNKWDQypYO5D1OcvSHUynS_-Wl1_0S-laIHDc=e05RMNxX87RB32yCeA9JWFLooi2yfatEqICXh-ffoTw=
> > > ).
> > >
> > > Unless Reema has a plan or someone has a plan relating to notarization.
> > > Since we have it signed and it seems a lengthy Apple-driven process to
> > > notarize it, I'd argue that so long as we state that clearly, this
> should
> > > not be a blocker for releasing the installer.
> > >
> > > Gj
> > >
> > > On Mon, Oct 28, 2019 at 11:36 AM Carl Mosca 
> > wrote:
> > >
> > >> -1
> > >>   "Can't be opened because Apple cannot check for malicious software"
> > >>
> > >> On Mon, Oct 28, 2019 at 6:26 AM Neil C Smith 
> > >> wrote:
> > >>
> > >>> On Mon, 28 Oct 2019 at 09:54, Eric Barboni  wrote:
> >  Sha512 and key from Reema is ok it means this can be released on
> dist.
> >  Not functional is another point. But Reema can cancel if tester on
> > >> MacOS
> > >>> found issue.
> > >>>
> > >>> Distribution on dist requires more than that, and we also discussed
> > >>> requiring more ourselves.  The wording that was discussed, that I
> > >>> thought you said you agreed with, said that all voters must verify
> all
> > >>> checksums and keys (including the additional keys in the
> installers!),
> > >>> check they function, and verify that they only install artefacts
> built
> > >>> from the released sources.  I don't see any point in voting on
> > >>> binaries if we're not requiring checks on all those things that the
> > >>> PMC must check.
> > >>>
> > >>> Anyway, let's not hijack the vote thread further on this.
> > >>>
> > >>> I'd like to hear Reema's opinion on pulling and re-voting on macOS
> > >>> installers because of the notarization issue though.
> > >>>
> > >>> Thanks and best wishes,
> > >>>
> > >>> Neil
> > >>>
> > >>> -
> > >>> To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
> > >>> For additional commands, e-mail: dev-h...@netbeans.apache.org
> > >>>
> > >>> For further information about the NetBeans mailing lists, visit:
> > >>>
> >
> https://urldefense.proofpoint.com/v2/url?u=https-3A__cwiki.apache.org_confluence_display_NETBEANS_Mailing-2Blists=DwIBaQ=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE=I_-Y15BecdUmuYLJbvbi0hFUs7JgHZnV_jPFSP8DQF0=AU5axCXNKWDQypYO5D1OcvSHUynS_-Wl1_0S-laIHDc=XYqudrqPACu1wB_McTbfOCSjE5P-TWycb2BM7SRC_8Y=
> > >>>
> > >>>
> > >>>
> > >>>
> > >> --
> > >> Carl J. Mosca
> > >>
> >
>
>
> --
> Carl J. Mosca
>

Re: [VOTE] Release Apache NetBeans 11.2 macOS Installer

On Mon, Oct 28, 2019 at 6:39 PM  wrote:

> Hi,
>
> This came up during last release, I had raised an infra ticket for
> notarization - INFRA-18790
> , but it failed with
> a long list of errors.
>
> This needs investigation, I haven't been able to get to it yet.
>


They seem to have relaxed things, so maybe trying again would bring better
results:

https://www.macrumors.com/2019/09/03/apple-macos-catalina-notarization-mac-apps/

Gj


>
> So, I agree with Geertjan's suggestion to add note that installer works
> for 10.13.x and 10.14.x macOS releases and is pending notarization that
> is required for 10.15.x release.
>
> Thanks,
>
> Reema
>
> On 28/10/19 5:43 PM, Geertjan Wielenga wrote:
> > We could add on the Download page that the installer for Mac OSX has been
> > signed but not notarized (
> >
> https://urldefense.proofpoint.com/v2/url?u=https-3A__developer.apple.com_documentation_security_notarizing-5Fyour-5Fapp-5Fbefore-5Fdistribution=DwIBaQ=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE=I_-Y15BecdUmuYLJbvbi0hFUs7JgHZnV_jPFSP8DQF0=AU5axCXNKWDQypYO5D1OcvSHUynS_-Wl1_0S-laIHDc=e05RMNxX87RB32yCeA9JWFLooi2yfatEqICXh-ffoTw=
> > ).
> >
> > Unless Reema has a plan or someone has a plan relating to notarization.
> > Since we have it signed and it seems a lengthy Apple-driven process to
> > notarize it, I'd argue that so long as we state that clearly, this should
> > not be a blocker for releasing the installer.
> >
> > Gj
> >
> > On Mon, Oct 28, 2019 at 11:36 AM Carl Mosca 
> wrote:
> >
> >> -1
> >>   "Can't be opened because Apple cannot check for malicious software"
> >>
> >> On Mon, Oct 28, 2019 at 6:26 AM Neil C Smith 
> >> wrote:
> >>
> >>> On Mon, 28 Oct 2019 at 09:54, Eric Barboni  wrote:
>  Sha512 and key from Reema is ok it means this can be released on dist.
>  Not functional is another point. But Reema can cancel if tester on
> >> MacOS
> >>> found issue.
> >>>
> >>> Distribution on dist requires more than that, and we also discussed
> >>> requiring more ourselves.  The wording that was discussed, that I
> >>> thought you said you agreed with, said that all voters must verify all
> >>> checksums and keys (including the additional keys in the installers!),
> >>> check they function, and verify that they only install artefacts built
> >>> from the released sources.  I don't see any point in voting on
> >>> binaries if we're not requiring checks on all those things that the
> >>> PMC must check.
> >>>
> >>> Anyway, let's not hijack the vote thread further on this.
> >>>
> >>> I'd like to hear Reema's opinion on pulling and re-voting on macOS
> >>> installers because of the notarization issue though.
> >>>
> >>> Thanks and best wishes,
> >>>
> >>> Neil
> >>>
> >>> -
> >>> To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
> >>> For additional commands, e-mail: dev-h...@netbeans.apache.org
> >>>
> >>> For further information about the NetBeans mailing lists, visit:
> >>>
> https://urldefense.proofpoint.com/v2/url?u=https-3A__cwiki.apache.org_confluence_display_NETBEANS_Mailing-2Blists=DwIBaQ=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE=I_-Y15BecdUmuYLJbvbi0hFUs7JgHZnV_jPFSP8DQF0=AU5axCXNKWDQypYO5D1OcvSHUynS_-Wl1_0S-laIHDc=XYqudrqPACu1wB_McTbfOCSjE5P-TWycb2BM7SRC_8Y=
> >>>
> >>>
> >>>
> >>>
> >> --
> >> Carl J. Mosca
> >>
>

Re: [VOTE] Release Apache NetBeans 11.2 macOS Installer

Meaning the installer does not work if you have the latest/current release
of the OS running.

On Mon, Oct 28, 2019 at 1:39 PM  wrote:

> Hi,
>
> This came up during last release, I had raised an infra ticket for
> notarization - INFRA-18790
> , but it failed with
> a long list of errors.
>
> This needs investigation, I haven't been able to get to it yet.
>
> So, I agree with Geertjan's suggestion to add note that installer works
> for 10.13.x and 10.14.x macOS releases and is pending notarization that
> is required for 10.15.x release.
>
> Thanks,
>
> Reema
>
> On 28/10/19 5:43 PM, Geertjan Wielenga wrote:
> > We could add on the Download page that the installer for Mac OSX has been
> > signed but not notarized (
> >
> https://urldefense.proofpoint.com/v2/url?u=https-3A__developer.apple.com_documentation_security_notarizing-5Fyour-5Fapp-5Fbefore-5Fdistribution=DwIBaQ=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE=I_-Y15BecdUmuYLJbvbi0hFUs7JgHZnV_jPFSP8DQF0=AU5axCXNKWDQypYO5D1OcvSHUynS_-Wl1_0S-laIHDc=e05RMNxX87RB32yCeA9JWFLooi2yfatEqICXh-ffoTw=
> > ).
> >
> > Unless Reema has a plan or someone has a plan relating to notarization.
> > Since we have it signed and it seems a lengthy Apple-driven process to
> > notarize it, I'd argue that so long as we state that clearly, this should
> > not be a blocker for releasing the installer.
> >
> > Gj
> >
> > On Mon, Oct 28, 2019 at 11:36 AM Carl Mosca 
> wrote:
> >
> >> -1
> >>   "Can't be opened because Apple cannot check for malicious software"
> >>
> >> On Mon, Oct 28, 2019 at 6:26 AM Neil C Smith 
> >> wrote:
> >>
> >>> On Mon, 28 Oct 2019 at 09:54, Eric Barboni  wrote:
>  Sha512 and key from Reema is ok it means this can be released on dist.
>  Not functional is another point. But Reema can cancel if tester on
> >> MacOS
> >>> found issue.
> >>>
> >>> Distribution on dist requires more than that, and we also discussed
> >>> requiring more ourselves.  The wording that was discussed, that I
> >>> thought you said you agreed with, said that all voters must verify all
> >>> checksums and keys (including the additional keys in the installers!),
> >>> check they function, and verify that they only install artefacts built
> >>> from the released sources.  I don't see any point in voting on
> >>> binaries if we're not requiring checks on all those things that the
> >>> PMC must check.
> >>>
> >>> Anyway, let's not hijack the vote thread further on this.
> >>>
> >>> I'd like to hear Reema's opinion on pulling and re-voting on macOS
> >>> installers because of the notarization issue though.
> >>>
> >>> Thanks and best wishes,
> >>>
> >>> Neil
> >>>
> >>> -
> >>> To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
> >>> For additional commands, e-mail: dev-h...@netbeans.apache.org
> >>>
> >>> For further information about the NetBeans mailing lists, visit:
> >>>
> https://urldefense.proofpoint.com/v2/url?u=https-3A__cwiki.apache.org_confluence_display_NETBEANS_Mailing-2Blists=DwIBaQ=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE=I_-Y15BecdUmuYLJbvbi0hFUs7JgHZnV_jPFSP8DQF0=AU5axCXNKWDQypYO5D1OcvSHUynS_-Wl1_0S-laIHDc=XYqudrqPACu1wB_McTbfOCSjE5P-TWycb2BM7SRC_8Y=
> >>>
> >>>
> >>>
> >>>
> >> --
> >> Carl J. Mosca
> >>
>


-- 
Carl J. Mosca

Re: [VOTE] Release Apache NetBeans 11.2 macOS Installer

On Mon, 28 Oct 2019 at 17:39,  wrote:
> So, I agree with Geertjan's suggestion to add note that installer works
> for 10.13.x and 10.14.x macOS releases and is pending notarization that
> is required for 10.15.x release.

Sounds good!  It look like from that issue link that a number of
native binaries might need recompiling.  It would be interesting to
know if the newer JNA in 11.2 removes that one from the list.  Still,
macOS users should be getting used to seeing these notarization error
messages by now judging from the number of complaints I've seen! :-\
As well as the note, we should give the instructions for bypassing the
check on 10.15.

Thanks and best wishes,

Neil

-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists

Re: [VOTE] Release Apache NetBeans 11.2 macOS Installer

2019-10-28 Thread reema . taneja

Hi,

This came up during last release, I had raised an infra ticket for
notarization - INFRA-18790
, but it failed with
a long list of errors.

This needs investigation, I haven't been able to get to it yet.

So, I agree with Geertjan's suggestion to add note that installer works
for 10.13.x and 10.14.x macOS releases and is pending notarization that
is required for 10.15.x release.

Thanks,

Reema

On 28/10/19 5:43 PM, Geertjan Wielenga wrote:

We could add on the Download page that the installer for Mac OSX has been
signed but not notarized (
https://urldefense.proofpoint.com/v2/url?u=https-3A__developer.apple.com_documentation_security_notarizing-5Fyour-5Fapp-5Fbefore-5Fdistribution=DwIBaQ=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE=I_-Y15BecdUmuYLJbvbi0hFUs7JgHZnV_jPFSP8DQF0=AU5axCXNKWDQypYO5D1OcvSHUynS_-Wl1_0S-laIHDc=e05RMNxX87RB32yCeA9JWFLooi2yfatEqICXh-ffoTw=
).

Unless Reema has a plan or someone has a plan relating to notarization.
Since we have it signed and it seems a lengthy Apple-driven process to
notarize it, I'd argue that so long as we state that clearly, this should
not be a blocker for releasing the installer.

On Mon, Oct 28, 2019 at 11:36 AM Carl Mosca wrote:

-1
"Can't be opened because Apple cannot check for malicious software"

On Mon, Oct 28, 2019 at 6:26 AM Neil C Smith
wrote:

On Mon, 28 Oct 2019 at 09:54, Eric Barboni wrote:

Sha512 and key from Reema is ok it means this can be released on dist.
Not functional is another point. But Reema can cancel if tester on

MacOS

found issue.

Distribution on dist requires more than that, and we also discussed
requiring more ourselves. The wording that was discussed, that I
thought you said you agreed with, said that all voters must verify all
checksums and keys (including the additional keys in the installers!),
check they function, and verify that they only install artefacts built
from the released sources. I don't see any point in voting on
binaries if we're not requiring checks on all those things that the
PMC must check.

Anyway, let's not hijack the vote thread further on this.

I'd like to hear Reema's opinion on pulling and re-voting on macOS
installers because of the notarization issue though.

Thanks and best wishes,

Neil

-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://urldefense.proofpoint.com/v2/url?u=https-3A__cwiki.apache.org_confluence_display_NETBEANS_Mailing-2Blists=DwIBaQ=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE=I_-Y15BecdUmuYLJbvbi0hFUs7JgHZnV_jPFSP8DQF0=AU5axCXNKWDQypYO5D1OcvSHUynS_-Wl1_0S-laIHDc=XYqudrqPACu1wB_McTbfOCSjE5P-TWycb2BM7SRC_8Y=

--
Carl J. Mosca

RE: [VOTE] Apache NetBeans maven artefacts for version 11.2

Hi, 
 I trust the repository staging for the signature and sha1 (this cannot be 
sha512 due to some limitation). Closing a repo for vote is not possible if a 
signature is missing, and if sha1 is not good (it cost me time to understand 
for release90). 

I then pick a few nbms I know like org-openide-awt.nbm check that they match 
the equivalent on the "binaries" dist of the main NetBeans. Should be bit 
perfect now as taken from same sources and process, They only differs by maven 
specific name -RELEASE112. The jar associated should be the same as the jar 
inside the nbm.
Check that jar/source-jar is having LICENCE and NOTICE.

I also use an Apache Archiva to make staging repo cloned locally and use 
RELEASE112 artefacts 

I'm not sure it's enough but that's how I personally did the check.
Maybe someone may have a good scripting knowledge to fully check but.

Regards
Eric

-Message d'origine-
De : Josh Juneau  
Envoyé : lundi 28 octobre 2019 15:16
À : dev 
Objet : Re: [VOTE] Apache NetBeans maven artefacts for version 11.2

Sorry I did not participate in this vote, as I was not sure how to verify these 
files.

Best Regards

Josh Juneau
juneau...@gmail.com
http://jj-blogger.blogspot.com
https://www.apress.com/us/search?query=Juneau

On Mon, Oct 28, 2019 at 4:54 AM Neil C Smith  wrote:

> On Mon, 28 Oct 2019 at 09:43, Eric Barboni  wrote:
> > Hi a last +1 binding is requiered.
>
> OK, +1 binding.
>
> Wasn't quite sure of best way to verify these?!  Have viewed staging 
> report, also downloaded and diffed a couple of modules against 
> release, and checked keys locally.
>
> Best wishes,
>
> Neil
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
> For additional commands, e-mail: dev-h...@netbeans.apache.org
>
> For further information about the NetBeans mailing lists, visit:
> https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
>
>
>
>

-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists

Re: [VOTE] Apache NetBeans maven artefacts for version 11.2

2019-10-28 Thread Josh Juneau

Sorry I did not participate in this vote, as I was not sure how to verify
these files.

Best Regards

Josh Juneau
juneau...@gmail.com
http://jj-blogger.blogspot.com
https://www.apress.com/us/search?query=Juneau




On Mon, Oct 28, 2019 at 4:54 AM Neil C Smith  wrote:

> On Mon, 28 Oct 2019 at 09:43, Eric Barboni  wrote:
> > Hi a last +1 binding is requiered.
>
> OK, +1 binding.
>
> Wasn't quite sure of best way to verify these?!  Have viewed staging
> report, also downloaded and diffed a couple of modules against
> release, and checked keys locally.
>
> Best wishes,
>
> Neil
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
> For additional commands, e-mail: dev-h...@netbeans.apache.org
>
> For further information about the NetBeans mailing lists, visit:
> https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
>
>
>
>

RE: [VOTE] Release Apache NetBeans 11.2 macOS Installer

I would change my vote to +0.5 so it's more clear for tally.

Because I cannot check on macos but I still want to participate to at last the 
basic review and that's the maximum I can do.

Regards
Eric

-Message d'origine-
De : Geertjan Wielenga  
Envoyé : lundi 28 octobre 2019 13:14
À : dev 
Objet : Re: [VOTE] Release Apache NetBeans 11.2 macOS Installer

We could add on the Download page that the installer for Mac OSX has been 
signed but not notarized ( 
https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution
).

Unless Reema has a plan or someone has a plan relating to notarization.
Since we have it signed and it seems a lengthy Apple-driven process to notarize 
it, I'd argue that so long as we state that clearly, this should not be a 
blocker for releasing the installer.

Gj

On Mon, Oct 28, 2019 at 11:36 AM Carl Mosca  wrote:

> -1
>  "Can't be opened because Apple cannot check for malicious software"
>
> On Mon, Oct 28, 2019 at 6:26 AM Neil C Smith 
> wrote:
>
> > On Mon, 28 Oct 2019 at 09:54, Eric Barboni  wrote:
> > > Sha512 and key from Reema is ok it means this can be released on dist.
> > > Not functional is another point. But Reema can cancel if tester on
> MacOS
> > found issue.
> >
> > Distribution on dist requires more than that, and we also discussed 
> > requiring more ourselves.  The wording that was discussed, that I 
> > thought you said you agreed with, said that all voters must verify 
> > all checksums and keys (including the additional keys in the 
> > installers!), check they function, and verify that they only install 
> > artefacts built from the released sources.  I don't see any point in 
> > voting on binaries if we're not requiring checks on all those things 
> > that the PMC must check.
> >
> > Anyway, let's not hijack the vote thread further on this.
> >
> > I'd like to hear Reema's opinion on pulling and re-voting on macOS 
> > installers because of the notarization issue though.
> >
> > Thanks and best wishes,
> >
> > Neil
> >
> > 
> > - To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
> > For additional commands, e-mail: dev-h...@netbeans.apache.org
> >
> > For further information about the NetBeans mailing lists, visit:
> > https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
> >
> >
> >
> >
>
> --
> Carl J. Mosca
>


-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists

Re: [VOTE] Release Apache NetBeans 11.2 macOS Installer

We could add on the Download page that the installer for Mac OSX has been
signed but not notarized (
https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution
).

Unless Reema has a plan or someone has a plan relating to notarization.
Since we have it signed and it seems a lengthy Apple-driven process to
notarize it, I'd argue that so long as we state that clearly, this should
not be a blocker for releasing the installer.

Gj

On Mon, Oct 28, 2019 at 11:36 AM Carl Mosca  wrote:

> -1
>  "Can't be opened because Apple cannot check for malicious software"
>
> On Mon, Oct 28, 2019 at 6:26 AM Neil C Smith 
> wrote:
>
> > On Mon, 28 Oct 2019 at 09:54, Eric Barboni  wrote:
> > > Sha512 and key from Reema is ok it means this can be released on dist.
> > > Not functional is another point. But Reema can cancel if tester on
> MacOS
> > found issue.
> >
> > Distribution on dist requires more than that, and we also discussed
> > requiring more ourselves.  The wording that was discussed, that I
> > thought you said you agreed with, said that all voters must verify all
> > checksums and keys (including the additional keys in the installers!),
> > check they function, and verify that they only install artefacts built
> > from the released sources.  I don't see any point in voting on
> > binaries if we're not requiring checks on all those things that the
> > PMC must check.
> >
> > Anyway, let's not hijack the vote thread further on this.
> >
> > I'd like to hear Reema's opinion on pulling and re-voting on macOS
> > installers because of the notarization issue though.
> >
> > Thanks and best wishes,
> >
> > Neil
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
> > For additional commands, e-mail: dev-h...@netbeans.apache.org
> >
> > For further information about the NetBeans mailing lists, visit:
> > https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
> >
> >
> >
> >
>
> --
> Carl J. Mosca
>

Re: [VOTE] Release Apache NetBeans 11.2 Linux Installer

2019-10-28 Thread Junichi Yamamoto

+1 (binding)

Thanks,
Junichi

On Sat, Oct 26, 2019 at 12:47 AM  wrote:
>
> Hi,
>
> Artifacts are available here:
>
> https://dist.apache.org/repos/dist/dev/netbeans/netbeans/11.2-vc1
>
> Built using Jenkins job:
>
> https://builds.apache.org/view/M-R/view/NetBeans/job/netbeans-installers/
>
> Primary voting artifact:
>
> https://dist.apache.org/repos/dist/dev/netbeans/netbeans/11.2-vc1/Apache-NetBeans-11.2-bin-linux-x64.sh
>
> SHA512:
>
> a02206dc569ef00c2e08ecb799604a0cae21d9204894e9432a51ff89981266d097a6f5d0b7c3c90be663cfced5ead7f37f7fe286a2a0e1569c972178a89c3f9e
> Apache-NetBeans-11.2-bin-linux-x64.sh
>
> KEYS file:
>
> https://dist.apache.org/repos/dist/release/netbeans/KEYS
>
> Installer build steps:
>
> https://cwiki.apache.org/confluence/display/NETBEANS/Installer+Build+Steps
>
> Please check that the artifact functions correctly and has been
> correctly signed by a PMC member.
>
> This vote is going to be open at least 72 hours, vote with +1, 0, and -1
> as usual. Please mark your vote with (binding) if you're an Apache
> NetBeans PMC member.
>
> Apache NetBeans 11.2 Linux Installer will be released if and when this
> vote passes.
>
>
> Thanks,
>
> Reema
>
>
>
>
>
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
> For additional commands, e-mail: dev-h...@netbeans.apache.org
>
> For further information about the NetBeans mailing lists, visit:
> https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
>
>
>

-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists

Re: [VOTE] Release Apache NetBeans 11.2 macOS Installer

-1
 "Can't be opened because Apple cannot check for malicious software"

On Mon, Oct 28, 2019 at 6:26 AM Neil C Smith  wrote:

> On Mon, 28 Oct 2019 at 09:54, Eric Barboni  wrote:
> > Sha512 and key from Reema is ok it means this can be released on dist.
> > Not functional is another point. But Reema can cancel if tester on MacOS
> found issue.
>
> Distribution on dist requires more than that, and we also discussed
> requiring more ourselves.  The wording that was discussed, that I
> thought you said you agreed with, said that all voters must verify all
> checksums and keys (including the additional keys in the installers!),
> check they function, and verify that they only install artefacts built
> from the released sources.  I don't see any point in voting on
> binaries if we're not requiring checks on all those things that the
> PMC must check.
>
> Anyway, let's not hijack the vote thread further on this.
>
> I'd like to hear Reema's opinion on pulling and re-voting on macOS
> installers because of the notarization issue though.
>
> Thanks and best wishes,
>
> Neil
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
> For additional commands, e-mail: dev-h...@netbeans.apache.org
>
> For further information about the NetBeans mailing lists, visit:
> https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
>
>
>
>

-- 
Carl J. Mosca

Re: [VOTE] Release Apache NetBeans 11.2 macOS Installer

On Mon, 28 Oct 2019 at 09:54, Eric Barboni  wrote:
> Sha512 and key from Reema is ok it means this can be released on dist.
> Not functional is another point. But Reema can cancel if tester on MacOS 
> found issue.

Distribution on dist requires more than that, and we also discussed
requiring more ourselves.  The wording that was discussed, that I
thought you said you agreed with, said that all voters must verify all
checksums and keys (including the additional keys in the installers!),
check they function, and verify that they only install artefacts built
from the released sources.  I don't see any point in voting on
binaries if we're not requiring checks on all those things that the
PMC must check.

Anyway, let's not hijack the vote thread further on this.

I'd like to hear Reema's opinion on pulling and re-voting on macOS
installers because of the notarization issue though.

Thanks and best wishes,

Neil

-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists

Re: [VOTE] Release Apache NetBeans 11.2 Linux Installer

2019-10-28 Thread Timon Veenstra

+1 binding

Linux Mint 18.3, dark theme
No blocking issues.
minor issues:
- Progressbar visual was broken
- Probably because of the dark theme, text blocks in the installer had a
white background with light grey text, which makes it hard to read
- jdk option defaults to /usr, while sensible options are present (not a
new issue though)

On Mon, Oct 28, 2019 at 10:08 AM Eric Barboni  wrote:

> +1 binding
> Sha512/pgp correct..
>
> Regards
> Eric
>
> -Message d'origine-
> De : Antonio 
> Envoyé : dimanche 27 octobre 2019 14:08
> À : dev@netbeans.apache.org
> Objet : Re: [VOTE] Release Apache NetBeans 11.2 Linux Installer
>
> +1 (Binding)
>
> PGP/SHA512 Correct.
>
> Installed and ran the IDE. Opened a Java project and installed nb-javac.
>
> Superb!
>
> Thanks,
> Antonio
>
>
> El 25/10/19 a las 17:47, reema.tan...@oracle.com escribió:
> > Hi,
> >
> > Artifacts are available here:
> >
> > https://dist.apache.org/repos/dist/dev/netbeans/netbeans/11.2-vc1
> >
> > Built using Jenkins job:
> >
> > https://builds.apache.org/view/M-R/view/NetBeans/job/netbeans-installe
> > rs/
> >
> > Primary voting artifact:
> >
> > https://dist.apache.org/repos/dist/dev/netbeans/netbeans/11.2-vc1/Apac
> > he-NetBeans-11.2-bin-linux-x64.sh
> >
> >
> > SHA512:
> >
> > a02206dc569ef00c2e08ecb799604a0cae21d9204894e9432a51ff89981266d097a6f5
> > d0b7c3c90be663cfced5ead7f37f7fe286a2a0e1569c972178a89c3f9e
> > Apache-NetBeans-11.2-bin-linux-x64.sh
> >
> > KEYS file:
> >
> > https://dist.apache.org/repos/dist/release/netbeans/KEYS
> >
> > Installer build steps:
> >
> > https://cwiki.apache.org/confluence/display/NETBEANS/Installer+Build+S
> > teps
> >
> > Please check that the artifact functions correctly and has been
> > correctly signed by a PMC member.
> >
> > This vote is going to be open at least 72 hours, vote with +1, 0, and
> > -1 as usual. Please mark your vote with (binding) if you're an Apache
> > NetBeans PMC member.
> >
> > Apache NetBeans 11.2 Linux Installer will be released if and when this
> > vote passes.
> >
> >
> > Thanks,
> >
> > Reema
> >
> >
> >
> >
> >
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
> > For additional commands, e-mail: dev-h...@netbeans.apache.org
> >
> > For further information about the NetBeans mailing lists, visit:
> > https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
> >
> >
> >
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
> For additional commands, e-mail: dev-h...@netbeans.apache.org
>
> For further information about the NetBeans mailing lists, visit:
> https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
>
>
>
>
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
> For additional commands, e-mail: dev-h...@netbeans.apache.org
>
> For further information about the NetBeans mailing lists, visit:
> https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
>
>
>
>

Re: [VOTE] Apache NetBeans maven artefacts for version 11.2

2019-10-28 Thread Timon Veenstra

+1

On Mon, Oct 28, 2019 at 10:54 AM Neil C Smith  wrote:

> On Mon, 28 Oct 2019 at 09:43, Eric Barboni  wrote:
> > Hi a last +1 binding is requiered.
>
> OK, +1 binding.
>
> Wasn't quite sure of best way to verify these?!  Have viewed staging
> report, also downloaded and diffed a couple of modules against
> release, and checked keys locally.
>
> Best wishes,
>
> Neil
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
> For additional commands, e-mail: dev-h...@netbeans.apache.org
>
> For further information about the NetBeans mailing lists, visit:
> https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
>
>
>
>

Re: [VOTE] Apache NetBeans maven artefacts for version 11.2

On Mon, 28 Oct 2019 at 09:43, Eric Barboni  wrote:
> Hi a last +1 binding is requiered.

OK, +1 binding.

Wasn't quite sure of best way to verify these?!  Have viewed staging
report, also downloaded and diffed a couple of modules against
release, and checked keys locally.

Best wishes,

Neil

-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists

RE: [VOTE] Release Apache NetBeans 11.2 macOS Installer

Sha512 and key from Reema is ok it means this can be released on dist.
Not functional is another point. But Reema can cancel if tester on MacOS found 
issue.


-Message d'origine-
De : Neil C Smith  
Envoyé : lundi 28 octobre 2019 10:37
À : dev 
Objet : Re: [VOTE] Release Apache NetBeans 11.2 macOS Installer

On Mon, 28 Oct 2019 at 09:21, Eric Barboni  wrote:
> Not having as macos so cannot go further.

Which by definition means you cannot fulfill all the tasks required to vote! 
;-)  That was the reason for splitting the votes up.  There's no way to check 
all the signing aspects of the installers, never mind verify, without the right 
OS.

Best wishes,

Neil

-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists





-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists

RE: [VOTE] Apache NetBeans maven artefacts for version 11.2

Hi a last +1 binding is requiered.

Regards

-Message d'origine-
De : Kai Uwe Pel  
Envoyé : vendredi 25 octobre 2019 12:16
À : dev@netbeans.apache.org
Objet : Re: [VOTE] Apache NetBeans maven artefacts for version 11.2

+1 (non binding)

Kai


On 10/25/2019 12:14 PM, Geertjan Wielenga wrote:
> +1 (binding)
>
> Gj
>
> On Fri, Oct 25, 2019 at 11:28 AM Eric Barboni  wrote:
>
>> We need 2 binding vote
>>
>> Regards
>> Eric
>> -Message d'origine-
>> De : Kenneth Fogel  Envoyé : mercredi 23 
>> octobre 2019 17:48 À : dev@netbeans.apache.org Objet : RE: [VOTE] 
>> Apache NetBeans maven artefacts for version 11.2
>>
>> Responded to wrong thread, my comments were not for maven artifacts. Sorry.
>> They are for the vote candidate.
>>
>> Ken
>>
>> -Original Message-
>> From: Kenneth Fogel 
>> Sent: October 23, 2019 11:37 AM
>> To: dev@netbeans.apache.org
>> Subject: RE: [VOTE] Apache NetBeans maven artefacts for version 11.2
>>
>> +1
>>
>> As a Windows user I can say that I see a noticeable improvement in 
>> performance over 11.1. I do have Windows Defender turned off for my 
>> .m2 folder, my NB folder, and my project folder. One change I made 
>> compared to NB 11.1 was to place the userdir and cachedir into a 
>> folder adjacent to NB and also tuned off Defender for them. Nice to 
>> see more up to date pom files.
>>
>> Ken
>>
>> -Original Message-
>> From: Eric Barboni 
>> Sent: October 21, 2019 8:32 AM
>> To: dev@netbeans.apache.org
>> Subject: [VOTE] Apache NetBeans maven artefacts for version 11.2
>>
>> Dear member of the Apache NetBeans community.
>>
>> The Maven artefacts for Apache NetBeans 11.2 are ready ( with correct 
>> build numbers + javadoc  where Javadoc is generated) to be published 
>> based on the respective state of source that is used for main vote [1].
>>
>> Build from this commit:
>>
>> https://github.com/apache/incubator-netbeans/commit/d04fb24027334c4b6
>> fd8397b
>> 5d0cdd33187a8f54
>> > 6fd8397b5d0cdd33187a8f54>
>>
>> Artefacts taken from the same build as main voting thread [1] build 
>> number the same.
>>
>>
>> https://builds.apache.org/view/M-R/view/NetBeans/job/netbeans-TLP/job
>> /netbea
>> ns/job/release112/29/
>> > b/netbeans/job/release112/29/>
>>
>> staged at
>> https://repository.apache.org/content/repositories/orgapachenetbeans-
>> 1045
>>
>> Artefacts are signed using my key (Eric Barboni) and verified by the 
>> repository.apache.org closing phase.
>>
>> Artefacts are composed of jars,nbm,sources,javadocs,pom.
>>
>> This vote is going to be open at least 72  hours, vote with +1, 0, 
>> and -1 as usual
>> --- Important rules
>> If main vote[1] is cancelled this vote will be cancelled too.
>>
>>
>> Best Regards
>> Eric
>> [1]
>>
>> https://lists.apache.org/thread.html/a562f51f614364f931a35f8dfd310cfd
>> 15ebf44 b150e40277e94ff40@%3Cdev.netbeans.apache.org%3E
>>
>>
>> -
>> To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
>> For additional commands, e-mail: dev-h...@netbeans.apache.org
>>
>> For further information about the NetBeans mailing lists, visit:
>> https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
>>
>>
>>
>>
>> -
>> To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
>> For additional commands, e-mail: dev-h...@netbeans.apache.org
>>
>> For further information about the NetBeans mailing lists, visit:
>> https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
>>
>>
>>
>>
>> -
>> To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
>> For additional commands, e-mail: dev-h...@netbeans.apache.org
>>
>> For further information about the NetBeans mailing lists, visit:
>> https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
>>
>>
>>
>>
>>
>> -
>> To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
>> For additional commands, e-mail: dev-h...@netbeans.apache.org
>>
>> For further information about the NetBeans mailing lists, visit:
>> https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
>>
>>
>>
>>


-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists





-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the

Re: [VOTE] Release Apache NetBeans 11.2 macOS Installer

On Mon, 28 Oct 2019 at 09:21, Eric Barboni  wrote:
> Not having as macos so cannot go further.

Which by definition means you cannot fulfill all the tasks required to
vote! ;-)  That was the reason for splitting the votes up.  There's no
way to check all the signing aspects of the installers, never mind
verify, without the right OS.

Best wishes,

Neil

-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists

RE: [VOTE] Release Apache NetBeans 11.2 macOS Installer

+1 binding
Pgp / sha512 ok

Not having as macos so cannot go further.

Regards
Eric



-Message d'origine-
De : Neil C Smith  
Envoyé : samedi 26 octobre 2019 20:24
À : dev 
Objet : Re: [VOTE] Release Apache NetBeans 11.2 macOS Installer

On Sat, 26 Oct 2019 at 19:09, Scott Palmer  wrote:
> Either way, I think we should get it dealt with as it will scare people away 
> in any case.

Apple seem hellbent on doing that for themselves! ;-)

Still, I agree with you that I think it's something we have to deal with.  
Reema, what are your thoughts?

Best wishes,

Neil

-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists





-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists

RE: [VOTE] Release Apache NetBeans 11.2 Windows Installer

+1 binding
Sha512 + pgp ok
Installed successfully on windows 10 + adoptjdk 13 with already created cache 
and userdir of the binary.

Best Regards
Eric

-Message d'origine-
De : Dmitry Avtonomov  
Envoyé : lundi 28 octobre 2019 02:15
À : dev@netbeans.apache.org
Objet : Re: [VOTE] Release Apache NetBeans 11.2 Windows Installer

Installation went well with Win10 + AdoptOpenJDK11 + Less PHP module which I 
excluded. First time start - quick. Did not import anything from previous 
versions. Installed QuickOpener - fine.

The first time I tried to create "Java With Maven -> NetBeans Application"
was first asked to download/activate a few things, here's a screenshot:
https://github.com/chhh/nb-11.2-pre-release/blob/master/nb-11-2_installer-01.png

Few problems here:
1) Text in the dialog is truncated as the dialog lacks scrollbars / text on the 
JLabels is not wrapped into ?
2) Text "Additional modules are recommended to run Java SE.." is duplicated 
twice.
3) User is presented with choice of two buttons "Download and Activate" and 
"Activate" - unclear what the difference is and which should I choose.

After blindly choosing "Download and Activate" it worked.



On Sun, Oct 27, 2019 at 4:46 AM John Kostaras  wrote:

> Installed in Win8.1 using JDK12. Installation went smoothly. Migrated 
> plugins etc. from 11.1 installation without issues.
>
> nb-javac and JavaFX were installed successfully.
>
> Opened/executed some projects. No issues.
>
> RCP projects, however, throw strange errors:
>
> layer.xml: Element type "filesystem" must be declared.
>
> Investigating...
>
> Kind regards,
>
> John.
>
> > >> -Original Message-
> > >> From: reema.tan...@oracle.com 
> > >> Sent: October 25, 2019 11:48 AM
> > >> To: dev 
> > >> Subject: [VOTE] Release Apache NetBeans 11.2 Windows Installer
> > >>
> > >> Hi,
> > >>
> > >> Artifacts are available here:
> > >>
> > >> https://dist.apache.org/repos/dist/dev/netbeans/netbeans/11.2-vc1
> > >>
> > >> Built using Jenkins job:
> > >>
> > >>
> >
> https://builds.apache.org/view/M-R/view/NetBeans/job/netbeans-installe
> rs/
> > >>
> > >> Primary voting artifact:
> > >>
> > >>
> > >>
> >
> https://dist.apache.org/repos/dist/dev/netbeans/netbeans/11.2-vc1/Apac
> he-NetBeans-11.2-bin-windows-x64.exe
> > >>
> > >> SHA512:
> > >>
> > >>
> > >>
> >
> a9a33d19afc439971fc3a3a0d2e5d3404fd1b372c1995067e3fa97bc0f17c7a9471462
> d592b6b0f46b5b3bd5461a6768625334f7576f4b3ed54f2aebc575cc6b
> > >> Apache-NetBeans-11.2-bin-windows-x64.exe
> > >>
> > >> KEYS file:
> > >>
> > >> https://dist.apache.org/repos/dist/release/netbeans/KEYS
> > >>
> > >> Installer build steps:
> > >>
> > >>
> >
> https://cwiki.apache.org/confluence/display/NETBEANS/Installer+Build+S
> teps
> > >>
> > >> Please check that the artifact functions correctly and has been
> > correctly
> > >> signed by a PMC member.
> > >>
> > >> This vote is going to be open at least 72 hours, vote with +1, 0, 
> > >> and
> -1
> > >> as usual. Please mark your vote with (binding) if you're an 
> > >> Apache
> > NetBeans
> > >> PMC member.
> > >>
> > >> Apache NetBeans 11.2 Windows Installer will be released if and 
> > >> when
> this
> > >> vote passes.
> > >>
> > >> Thanks,
> > >>
> > >> Reema
> > >>
> > >>
> > >>
> > >>
> > >>
> > >>
> > >> -
> > >>  To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
> > >> For additional commands, e-mail: dev-h...@netbeans.apache.org
> > >>
> > >> For further information about the NetBeans mailing lists, visit:
> > >> https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+list
> > >> s
> > >>
> > >>
> > >>
> > >>
> > >
> > > --
> > > Zoran Sevarac, PhD, Associate Professor Department of Software 
> > > Engineering University of Belgrade, Faculty of Organisational 
> > > Sciences  Deep Netts   
> > > Co-founder & CEO  | Oracle Groundbreaker Ambassador | Java 
> > > Champion 
> > > 
> > > Open source: Neuroph founder, 
> > > Apache
> > Net
> > > Beans  contributor
> > > Homepage: http://www.zoransevarac.com
> > >
> >
> >
> > --
> > Zoran Sevarac, PhD, Associate Professor Department of Software 
> > Engineering University of Belgrade, Faculty of Organisational 
> > Sciences  Deep Netts   
> > Co-founder & CEO  | Oracle Groundbreaker Ambassador | Java Champion 
> > 
> > Open source: Neuroph founder, 
> > Apache
> Net
> > Beans  contributor
> > Homepage: http://www.zoransevarac.com
> >
>


-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For

Re: Features page for 11.2

On Sun, 27 Oct 2019 at 17:41, Laszlo Kishalmi  wrote:
> Also even if I can fire up the tomcat, I do not know which would be the
> URI for the site to check.
>
> Shall I file an issue on these?

Possibly.  Have you followed the instructions at
https://cwiki.apache.org/confluence/display/NETBEANS/JBake-based+solution
?

In particular, the

./gradlew clean
./gradlew preprocessContent --rerun-tasks
./gradlew bake

combination?  That should still work AFAIK.  Although there's probably
stuff that could work better there.  I did start looking at the
rerun-tasks requirement at one point but got waylaid by other things.

Best wishes,

Neil

-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists

RE: [VOTE] Release Apache NetBeans 11.2 Linux Installer