Re: NetBeans Serbian Translation

[Jan Hubený]

Hi,

I am only  a user of https://github.com/apache/netbeans-l10n 
 and in the mentioned pull 
request (partly in changes in README.md and partly in comments of pull 
request - https://github.com/apache/netbeans-l10n/pull/5 
) is roughly described 
how to integrate the localization into your "NetBeans platform based" 
applcation.


As I understand it, the process consists of these steps:
1) Download the netbeans-l10n project via git.
2) Create localization folder for your language as is described in 
README.md in the pull request 
https://github.com/apache/netbeans-l10n/pull/5 

3) WARNING - I'm not sure whether this is true, somebody who has better 
knowledge should validate and perhaps better explain this step.
    Create somehow (this is not clear for me whether it is important 
and how to do it) the content for your language in folder 
netbeans-l10n/netbeans-l10n-zip/src (if it does not exist). Translate 
all Bundle_[language_code].properties files in the folder for your 
language (for example with https://omegat.org/ ). I 
don't know how to check that your translation is complete, or where are 
the reference (template en_US) Bundle.properties files.


4) Build in netbeans IDE the subproject l10nantext (contained in 
netbeans-l10n project)
5) Build the netbeans module for your language (the project is in the 
folder created in step 2)
6) Add the module created in step 5) to your NetBeans platform based 
application project in netbeans IDE
7) Build your NetBeans platform based application in Netbeans IDE. After 
this step your application should contain the new localization module 
for your language.


Further (only in my opinion), the authors of the 
https://github.com/apache/netbeans-l10n 
 project could better describe 
how to fully integrate this netbeans-l10n into your "Netbeans Platform 
Based" application, i.e. the recommended way how to integrate it in your 
git repository and to your ant or maven based build scripts.


Regards,

H.

Dne 16. 05. 21 v 20:41 Zoran Sevarac napsal(a):

Thanks Jarda, this looks good.
There is even more info what to do at
https://github.com/apache/netbeans-l10n/pull/5/commits/824c2b072fd39dafd0990ea5b80e422d29dc25c0
Is this enough to create working translation?



Virus-free.
www.avast.com

<#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>

On Sun, May 16, 2021 at 10:07 AM Jaroslav Tulach 
wrote:


Hello Zoran.
Resuscitating the NetBeans L10Ns would be great!

Dne úterý 11. května 2021 21:28:36 CEST, Zoran Sevarac napsal(a):

Hi,

I have two students at University of Belgrade Nikola Sicovic
sicovic.nik...@gmail.com and
Nikola Radenovic radenovicnikol...@gmail.com (already on the mailing

list)

who will be translating NetBeans to Serbian.

Is this the recommended way to do it?
https://github.com/apache/netbeans-l10n

Any other recommendati/ons?

I was recently contacted by Mr. Hubený and he created
https://github.com/apache/netbeans-l10n/pull/5

What should happen next isn't however clear to me.
-jt




-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists









D I S C L A I M E R

Personal data protection according to Regulation (EU) 2016/679 of the European 
Parliament and of the Council of 27 April 2016 on the protection of natural 
persons with regard to the processing of personal data and on the free movement 
of such data (General Data Protection Regulation)
By e-mail communication with this e-mail address (especially by sending e-mails and replies) you hereby agree with processing of yours personal data especially in the scope of data contained in email and it`s attachments. Data subject has the following rights: (i) to withdraw consent with personal data processing , (ii) to ask SOMA company for information which personal data are being processed, (iii) to ask for explanation regarding processed personal data, (iv) to ask for access to personal data and right of rectification of inaccurate personal data, (v) to demand erasure of personal data, (iv)  in case of doubts regarding compliance with GDPR regulation right to raise objections in front of SOMA company, court or the Office for personal data protection. 
The SOMA company processes especially personal data of SOMA company`s business partners. The SOMA company hereby politely asks it`s business partners to not

LauncherProperties was: nb-javac@16.0.0.0 is covered by "Classpath exception"

[Jaroslav Tulach]

Dne neděle 16. května 2021 12:58:43 CEST, Neil C Smith napsal(a):
> On Sun, 16 May 2021 at 10:12, Jaroslav Tulach  
wrote:
> > The manual inspection confirms that Maven central licensing information at
> > https://search.maven.org/artifact/com.dukescript.nbjavac/nb-javac/16.0.0.0
> > /jar is correct and both nb-javac@16.0.0.0 binary JAR files are covered by
> > GPLv2-CPE license.
> > 
> > Thanks in advance for checking my conclusion.
> 
> Agreed!  There is one file without a header at all, but I don't think
> it's a particular concern?
> 
> ./src/jdk.compiler/share/classes/com/sun/tools/javac/resources/LauncherPrope
> rties.java

Interesting file. It is not available at the Git repository:

https://github.com/oracle/nb-javac/tree/release124/src/jdk.compiler/share/
classes/com/sun/tools/javac/resources

The file was said to be be generated during the build (from files with 
"Classpath exception"). However when I do the build from release124 branch 
myself, there is nothing:

```bash
$ unzip -v ./make/langtools/netbeans/nb-javac/dist/nb-javac-16.0.0.0-impl.jar 
| grep Launcher
```

Yet the file is present in the files uploaded to Maven central:

```bash
$ wget https://repo1.maven.org/maven2/com/dukescript/nbjavac/nb-javac/
16.0.0.0/nb-javac-16.0.0.0.jar
$ unzip nb-javac-16.0.0.0.jar 
$ rm nb-javac-16.0.0.0.jar 
$ grep -r Launcher .
Binární soubor ./com/sun/tools/javac/resources/LauncherProperties$Errors.class 
odpovídá
Binární soubor ./com/sun/tools/javac/resources/LauncherProperties.class 
odpovídá
```

What is surprising is that the file is present in the JAR, but it is not 
referenced by any other file!

Toni, didn't you have some debris on the disk when uploading the JAR files?
-jt

PS: My favorite way to clean a git repository is:
```bash
nb-javac$ rm -rf *; git checkout -f
```
the `.git` directory contains all the necessary data to recover the repository 
and `*` doesn't match hidden files like `.git`.





-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists

Re: NetBeans Serbian Translation

[Zoran Sevarac]

Thanks Jarda, this looks good.
There is even more info what to do at
https://github.com/apache/netbeans-l10n/pull/5/commits/824c2b072fd39dafd0990ea5b80e422d29dc25c0
Is this enough to create working translation?



Virus-free.
www.avast.com

<#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>

On Sun, May 16, 2021 at 10:07 AM Jaroslav Tulach 
wrote:

> Hello Zoran.
> Resuscitating the NetBeans L10Ns would be great!
>
> Dne úterý 11. května 2021 21:28:36 CEST, Zoran Sevarac napsal(a):
> > Hi,
> >
> > I have two students at University of Belgrade Nikola Sicovic
> > sicovic.nik...@gmail.com and
> > Nikola Radenovic radenovicnikol...@gmail.com (already on the mailing
> list)
> > who will be translating NetBeans to Serbian.
> >
> > Is this the recommended way to do it?
> > https://github.com/apache/netbeans-l10n
> >
> > Any other recommendati/ons?
>
> I was recently contacted by Mr. Hubený and he created
> https://github.com/apache/netbeans-l10n/pull/5
>
> What should happen next isn't however clear to me.
> -jt
>
>
>
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
> For additional commands, e-mail: dev-h...@netbeans.apache.org
>
> For further information about the NetBeans mailing lists, visit:
> https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
>
>
>
>

-- 
Zoran Sevarac, PhD, Associate Professor
University of Belgrade, Faculty of Organisational Sciences, Department for
Software Engineering
Java Champion 
| Oracle Groundbreaker Ambassador | Deep Netts 
Co-founder & CEO

Re: nb-javac@16.0.0.0 is covered by "Classpath exception"

[Matthias Bläsing]

Hi,

I aggree with the assessment. There are two .java files without CPE
header (in fact without any license header):

make/langtools/netbeans/nb-javac/test/com/sun/tools/javac/parser/DocCommentParserTest.java

Test only, so I would not expect it in the final jar

src/jdk.compiler/share/classes/com/sun/tools/javac/resources/LauncherProperties.java

As Neil already pointed out, this needs fixing (though I don't think this is 
critical).


It is regrettable, that Oracle still does not manage to declare a clear
and unambiguous license. It was claimed, that Oracle would need to
invent a new license to make this clear. This is untrue. The orginal
GNU Classpath license:

https://www.gnu.org/software/classpath/license.html

is identical to the Oracle version, BUT it does not have the
"uncertainty" element. Oracle decided to add the "Certain source files
distributed ..." paragraph, which make the license from my POV
problematic as it puts the uncertainty onto the user and not the
copyrightholder.


In the future I wonder whether each nb-javac release will need to be
vetted like this, because a big tech company does not manage to get its
license story straigt. This also raises the question whether the build
is reproducible and whether it is ok, that there is no direct
connection between the binary artifact ant the source artifact.

Greetings

Matthias


Am Sonntag, dem 16.05.2021 um 11:12 +0200 schrieb Jaroslav Tulach:
> Hello guys,
> let's continue the tradition of manual inspection of nb-javac sources[1][2].
> 
> NetBeans project downloads both nb-javac JAR files from Maven central - the 
> standard Java way of distributing, using and archiving Java libraries/
> artifacts. Essential part of that system is `pom.xml` file with a mandatory 
> `` element. In case of nb-javac@16.0.0.0 it says:
> https://search.maven.org/artifact/com.dukescript.nbjavac/nb-javac/16.0.0.0/jar
> "Licenses: GPLv2-CPE". As that license comes directly from the Oracle's nb-
> javac project:
> https://github.com/oracle/nb-javac/blob/release124/make/langtools/netbeans/nb-javac/pom-nb-javac.xml#L18
> and the intention of that element is to state the license of the uploaded 
> Maven central artifacts, it is natural for a Java developer to conclude that 
> "nb-javac (as uploaded to Maven central) is fully licensed under GPLv2-CPE".
> 
> In addition to the above evidence, let's do a manual verification:
> 
> ```bash
> $ wget https://repo1.maven.org/maven2/com/dukescript/nbjavac/nb-javac/
> 16.0.0.0/nb-javac-16.0.0.0-sources.jar
> $ unzip nb-javac-16.0.0.0-sources.jar
> $ rm nb-javac-16.0.0.0-sources.jar
> ```
> now one can build the two nb-javac JARs successfully with:
> ```bash
> $ JAVA_HOME=/jdk-8/ ant -f ./make/langtools/netbeans/nb-javac/build.xml
> ```
> but let's rather inspect the sources:
> ```bash
> $ grep -r "GNU General Public License" . -l | wc -l
> 747
> $ grep -r "GNU General Public License" . -l | while read X; do  grep 
> Classpath.*exception "$X" ||  echo Missing $X; done | grep Missing
> Missing ./LICENSE.txt
> Missing ./src/jdk.jdeps/share/man/jdeprscan.1
> Missing ./src/jdk.jdeps/share/man/jdeps.1
> Missing ./src/jdk.jdeps/share/man/javap.1
> Missing ./src/jdk.compiler/share/man/serialver.1
> Missing ./src/jdk.compiler/share/man/javac.1
> ```
> e.g. there is 747 files that contain "GPL" header and all of them but license 
> and manual pages (not used in the nb-javac JARs) contain the "Classpath 
> exception" header.
> 
> The manual inspection confirms that Maven central licensing information at
> https://search.maven.org/artifact/com.dukescript.nbjavac/nb-javac/16.0.0.0/jar
> is correct and both nb-javac@16.0.0.0 binary JAR files are covered by 
> GPLv2-CPE 
> license.
> 
> Thanks in advance for checking my conclusion.
> -jt
> 
> 
> [1] https://lists.apache.org/thread.html/
> r821d9e9fdc8d9fd5663e7c326d25e4626e1a27eb13e45f4d639ea199%40%3Cdev.netbeans.apache.org%3E
> 
> [2] https://lists.apache.org/thread.html/
> rb5d091662f88dafb2fd878a0acc5e5bdb80ddfb17b47bfbff248b4d7%40%3Cdev.netbeans.apache.org%3E
> 
> 
> 
> 
> 
> -
> To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
> For additional commands, e-mail: dev-h...@netbeans.apache.org
> 
> For further information about the NetBeans mailing lists, visit:
> https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
> 
> 
> 



-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists

Re: Plans for Depreciation of Security Manager

[Jaroslav Tulach]

> Sounds like Netbeans uses it more for monitoring than actual security
> matters ...

The JEP-411 sounds scary. However nobody has yet seen the implementation of 
JEP-411. Until that is available it is hard to estimate the amount of damage 
JEP-411 is going to cause to NetBeans. The worst scenario is that no existing 
Apache NetBeans 12.x version is about to start on JDK with JEP-411. 

> What is the plan for this?

Make a noise. Vote against release of any JDK that would prevent last few 
existing NetBeans releases to start/run. If that fails, stick with older JDK.
-jt


> 
> Not sure if this is related but does this overlap with a ticket raised
> previously on some other Security related deprecations (5)?
> 
> Eric Bresie
> ebre...@gmail.com (mailto:ebre...@gmail.com)
> 
> Reference:
> 
> (1) https://www.infoq.com/news/2021/04/java-security-vote/
> (2) https://openjdk.java.net/jeps/411
> (3) https://openjdk.java.net/jeps/ (https://openjdk.java.net/jeps/411)398/
> (4) https://blogs.apache.org/netbeans/entry/jep-411-deprecate-the-security
> (https://blogs.apache.org/netbeans/entry/jep-411-deprecate-the-security)
> (5) https://issues.apache.org/jira/browse/NETBEANS-5376
> (https://issues.apache.org/jira/browse/NETBEANS-5376?filter=-2)





-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists

Re: [VOTE] Release Apache NetBeans 12.4 (vote candidate 1)

[Jaroslav Tulach]

+1 (binding)

> We are primarily voting on:
> https://dist.apache.org/repos/dist/dev/netbeans/netbeans/12.4/vc1/netbeans-1
> 2.4-source.zip

SHA is OK, GPG signed OK.

Builds with JDK-11 and then it runs with JDK-8 on Ubuntu 20.04
-jt

PS: We shall be almost ready to build just on JDK-11+ and run on any JDK8+ in 
some forthcoming release cycle...

> Before voting +1 you are required to download the signed source code
> package, compile it as provided, and test the resulting executable on your
> own platform, along with also verifying that the package meets the
> requirements of the ASF policy on releases - see:





-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists

Re: NetBeans Serbian Translation

[Mar R]

I'm too interested in this, on how to do it

Il giorno dom 16 mag 2021 alle ore 10:07 Jaroslav Tulach <
jaroslav.tul...@gmail.com> ha scritto:

> Hello Zoran.
> Resuscitating the NetBeans L10Ns would be great!
>
> Dne úterý 11. května 2021 21:28:36 CEST, Zoran Sevarac napsal(a):
> > Hi,
> >
> > I have two students at University of Belgrade Nikola Sicovic
> > sicovic.nik...@gmail.com and
> > Nikola Radenovic radenovicnikol...@gmail.com (already on the mailing
> list)
> > who will be translating NetBeans to Serbian.
> >
> > Is this the recommended way to do it?
> > https://github.com/apache/netbeans-l10n
> >
> > Any other recommendati/ons?
>
> I was recently contacted by Mr. Hubený and he created
> https://github.com/apache/netbeans-l10n/pull/5
>
> What should happen next isn't however clear to me.
> -jt
>
>
>
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
> For additional commands, e-mail: dev-h...@netbeans.apache.org
>
> For further information about the NetBeans mailing lists, visit:
> https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
>
>
>
>

Re: [VOTE] Release Apache NetBeans 12.4 (vote candidate 1)

[Helmut Leininger]

ok now, no error message.

Regards
Helmut

Am 16.05.2021 um 13:11 schrieb Neil C Smith:

On Sat, 15 May 2021 at 21:52, Neil C Smith  wrote:

On Sat, 15 May 2021, 18:26 Helmut Leininger,  wrote:

Hi,

a little problem:

When I launch Plugins - Check for Updates the following error message appears:


It's not a problem. The vote build moves some stuff around and the redirect 
hasn't been (temporarily) updated to match. The real update centre cannot exist 
until the release vote completes anyway.

I made the temporary fix on the VM redirects, so shouldn't show an
error message now I hope?

Best wishes,

Neil

-
To unsubscribe, e-mail:dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail:dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists



-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists

Re: [VOTE] Release Apache NetBeans 12.4 (vote candidate 1)

[Neil C Smith]

On Sat, 15 May 2021 at 21:52, Neil C Smith  wrote:
> On Sat, 15 May 2021, 18:26 Helmut Leininger,  wrote:
>>
>> Hi,
>>
>> a little problem:
>>
>> When I launch Plugins - Check for Updates the following error message 
>> appears:
>
>
> It's not a problem. The vote build moves some stuff around and the redirect 
> hasn't been (temporarily) updated to match. The real update centre cannot 
> exist until the release vote completes anyway.

I made the temporary fix on the VM redirects, so shouldn't show an
error message now I hope?

Best wishes,

Neil

-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists

Re: nb-javac@16.0.0.0 is covered by "Classpath exception"

[Neil C Smith]

On Sun, 16 May 2021 at 10:12, Jaroslav Tulach  wrote:
> The manual inspection confirms that Maven central licensing information at
> https://search.maven.org/artifact/com.dukescript.nbjavac/nb-javac/16.0.0.0/jar
> is correct and both nb-javac@16.0.0.0 binary JAR files are covered by 
> GPLv2-CPE
> license.
>
> Thanks in advance for checking my conclusion.

Agreed!  There is one file without a header at all, but I don't think
it's a particular concern?

./src/jdk.compiler/share/classes/com/sun/tools/javac/resources/LauncherProperties.java

I still think this process needs documenting and resolving in
LEGAL-563 before we can say nb-javac is not still Cat X though.
Ideally the process outlined (or similar) would be documented and
GPL-CPE moved to Cat B, but we're not quite there yet!

Best wishes,

Neil

-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists

nb-javac@16.0.0.0 is covered by "Classpath exception"

[Jaroslav Tulach]

Hello guys,
let's continue the tradition of manual inspection of nb-javac sources[1][2].

NetBeans project downloads both nb-javac JAR files from Maven central - the 
standard Java way of distributing, using and archiving Java libraries/
artifacts. Essential part of that system is `pom.xml` file with a mandatory 
`` element. In case of nb-javac@16.0.0.0 it says:
https://search.maven.org/artifact/com.dukescript.nbjavac/nb-javac/16.0.0.0/jar
"Licenses: GPLv2-CPE". As that license comes directly from the Oracle's nb-
javac project:
https://github.com/oracle/nb-javac/blob/release124/make/langtools/netbeans/nb-javac/pom-nb-javac.xml#L18
and the intention of that element is to state the license of the uploaded 
Maven central artifacts, it is natural for a Java developer to conclude that 
"nb-javac (as uploaded to Maven central) is fully licensed under GPLv2-CPE".

In addition to the above evidence, let's do a manual verification:

```bash
$ wget https://repo1.maven.org/maven2/com/dukescript/nbjavac/nb-javac/
16.0.0.0/nb-javac-16.0.0.0-sources.jar
$ unzip nb-javac-16.0.0.0-sources.jar
$ rm nb-javac-16.0.0.0-sources.jar
```
now one can build the two nb-javac JARs successfully with:
```bash
$ JAVA_HOME=/jdk-8/ ant -f ./make/langtools/netbeans/nb-javac/build.xml
```
but let's rather inspect the sources:
```bash
$ grep -r "GNU General Public License" . -l | wc -l
747
$ grep -r "GNU General Public License" . -l | while read X; do  grep 
Classpath.*exception "$X" ||  echo Missing $X; done | grep Missing
Missing ./LICENSE.txt
Missing ./src/jdk.jdeps/share/man/jdeprscan.1
Missing ./src/jdk.jdeps/share/man/jdeps.1
Missing ./src/jdk.jdeps/share/man/javap.1
Missing ./src/jdk.compiler/share/man/serialver.1
Missing ./src/jdk.compiler/share/man/javac.1
```
e.g. there is 747 files that contain "GPL" header and all of them but license 
and manual pages (not used in the nb-javac JARs) contain the "Classpath 
exception" header.

The manual inspection confirms that Maven central licensing information at
https://search.maven.org/artifact/com.dukescript.nbjavac/nb-javac/16.0.0.0/jar
is correct and both nb-javac@16.0.0.0 binary JAR files are covered by GPLv2-CPE 
license.

Thanks in advance for checking my conclusion.
-jt


[1] https://lists.apache.org/thread.html/
r821d9e9fdc8d9fd5663e7c326d25e4626e1a27eb13e45f4d639ea199%40%3Cdev.netbeans.apache.org%3E

[2] https://lists.apache.org/thread.html/
rb5d091662f88dafb2fd878a0acc5e5bdb80ddfb17b47bfbff248b4d7%40%3Cdev.netbeans.apache.org%3E





-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists

Re: Dependency Verification in Netbeans

[Matthias Bläsing]

Hi,

Am Samstag, dem 15.05.2021 um 16:55 -0500 schrieb Eric Bresie:
> [Dependency verification]
> 
> Does Netbeans plan to do something like this?
> 

NetBeans already does something like this:

Download is executed:

https://github.com/apache/netbeans/blob/1dc4113f2a46656dd852cfedcafd12d52d7e73fa/nbbuild/antsrc/org/netbeans/nbbuild/extlibs/DownloadBinaries.java#L220-L240

The downloaded File is then verified against the provided hash:

https://github.com/apache/netbeans/blob/1dc4113f2a46656dd852cfedcafd12d52d7e73fa/nbbuild/antsrc/org/netbeans/nbbuild/extlibs/DownloadBinaries.java#L244-L250

One can argue, that SHA-1 is not a good hash to use anymore, but the
machinary is there and there was at least one attempt to add higher
algorithms.

Greetings

Matthias




-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists

Re: NetBeans Serbian Translation

[Jaroslav Tulach]

Hello Zoran.
Resuscitating the NetBeans L10Ns would be great!

Dne úterý 11. května 2021 21:28:36 CEST, Zoran Sevarac napsal(a):
> Hi,
> 
> I have two students at University of Belgrade Nikola Sicovic
> sicovic.nik...@gmail.com and
> Nikola Radenovic radenovicnikol...@gmail.com (already on the mailing  list)
> who will be translating NetBeans to Serbian.
> 
> Is this the recommended way to do it?
> https://github.com/apache/netbeans-l10n
> 
> Any other recommendati/ons?

I was recently contacted by Mr. Hubený and he created
https://github.com/apache/netbeans-l10n/pull/5

What should happen next isn't however clear to me.
-jt




-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists

Re: Dependency Verification in Netbeans

[Davide Grandi]

On the owasp (Open Web Application Security Project) site there's a

-> Maven plugin <-
   https://owasp.org/www-project-dependency-check/
   https://github.com/jeremylong/DependencyCheck
https://jeremylong.github.io/DependencyCheck/dependency-check-maven/

that performs checks at build time against a CVE db.

And, in fact, some dependency could go directly from
some hacked repository to the heart of some "big customer"
IT structure.
And the phone calls of security managers must be handled ...
... BEFORE they call.

It happens also for costly and branded products : I've
seen key components built with "beta" releases not available
anymore in any repository on the world ...

happy digging, thank-you for the references, and share the results

    Davide Grandi

On 15/05/2021 23:55, Eric Bresie wrote:

While reading an article (1) (2) on openjfx mailing list, I notice they are
starting to implement dependency verification oat build time.  They also
provide a few additional links (3) and I found another on the value of it
(4).


Does Netbeans plan to do something like this?


(1) https://mail.openjdk.java.net/pipermail/openjfx-dev/2021-May/030138.html

(2) https://mail.openjdk.java.net/pipermail/openjfx-dev/2021-May/030142.html

(3)
https://wwws.nightwatchcybersecurity.com/2021/04/25/supply-chain-attacks-via-github-com-releases/

(4) “Dependency verification: checksum vs PGP” by Vladimir Sitnikov
https://link.medium.com/sor9gXcZhgb


Eric


--
ing. Davide Grandi
email: davide.gra...@email.it
linkedin : http://linkedin.com/in/davidegrandi


-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists

Re: [DISCUSS] CND, cnd.antlr & cnd.apt on top of Antlrv4?

[John Kostaras]

sorry I didn't. I did know and seems ok. Will continue testing... Great
work.

Thanks.

John.

On Fri, 14 May 2021 at 18:02, antonio  wrote:

> Hi John,
>
> Did you git pull first? This changes quickly! :-).
>
> Thanks,
> Antonio
>
> El 14/5/21 a las 15:50, John Kostaras escribió:
> >   Hallo Antonio,
> >
> > so, basically the error is that it cannot handle escape characters, e.g.
> \".
> >
> >
> > Here are some tests:
> >
> > Syntax error on 7613:20 token recognition error at: '"   >
> > Syntax error on 3743:20 token recognition error at: '"upd_cmd desc: \"'
> >
> > Syntax error on 523:3 token recognition error at: '"Error opening file.
> > PATH: \"'
> >
> >  sprintf (trace_msg,
> >
> >  "Error opening file. PATH: \"%s\" FILE: \"%s\"",
> >
> >  getenv ((char *) PATH), afilename);
> >
> >
> >
> > Syntax error on 628:37 token recognition error at: '"Cannot get total
> > number of bytes from message \"'
> >
> >  snprintf(errMsg, MY_ERR_LEN, "Cannot get total number of bytes from
> > message \"%s\"", sizBuf);
> >
> >
> >
> > Syntax error on 856:8 token recognition error at: '" >
> > Syntax error on 80:22 token recognition error at: '"Object 1:
> > Name: \"'
> >
> >  str[0] = (char *) "Object 1:   Name: \"OS\"\n";
> >
> > Syntax error on 29:9 token recognition error at: '"HTML  name=\"'
> >
> > Syntax error on 388:6 token recognition error at: '"%s DATA
> > user_id  = \"'
> >
> > Syntax error on 180:12 token recognition error at: '"first line = \"'
> >
> > Syntax error on 155:8 token recognition error at: '"#include \"'
> >
> > fputs("#include \"common_types.h\"\n", errorMsg);
> >
> > Syntax error on 245:3 token recognition error at: '"Host list: \"'
> >
> > Syntax error on 499:11 token recognition error at: '"\CreateUser (\"'
> >
> > Syntax error on 67:9 token recognition error at: '"uptime |awk '{print
> \"'
> >
> > Syntax error on 51:14 token recognition error at: '"s=\"'
> >
> > Syntax error on 41:55 token recognition error at: '"00\"'
> >
> > Syntax error on 3040:4 token recognition error at: '"  \"'
> >
> > Kind regards,
> >
> > John.
> >
> > On Wed, 12 May 2021 at 00:11, antonio  wrote:
> >
> >> Thanks John,
> >>
> >> I'll be adding assorted compiler-specific cases at [1].
> >>
> >> Kind regards,
> >> Antonio
> >>
> >>
> >> [1]
> >>
> >>
> https://github.com/vieiro/cnd.nextapt/blob/master/cnd.apt.antlr4/src/test/resources/org/netbeans/modules/cnd/nextapt/antlr4/c/regressions.c
> >>
> >> On 11/05/2021 17:41, John Kostaras wrote:
> >>> #define  CMPLX(__real,__imag) \
> >>>   _Pragma("clang diagnostic push") \
> >>> *_Pragma("clang diagnostic ignored \"-Wcomplex-component-init\"")
> \*
> >>>   (double _Complex){(__real),(__imag)} \
> >>>   _Pragma("clang diagnostic pop")
> >>>
> >>> line 59 being the highlighted one.
> >>>
> >>> After pulling, building, re-running: java -Dlexer.print=false -jar
> >>> target/cnd.apt.antlr4-1.0-SNAPSHOT-jar-with-dependencies.jar
> /usr/include
> >>>
> >>> I get
> >>>
> >>> -- /usr/include/complex.h --
> >>> Syntax error on 59:12 token recognition error at: '"clang diagnostic
> >>> ignored \"'
> >>> Please report this error on the dev mailing list, including the line
> >> where
> >>> the error happeened.%n
> >>>
> >>>
> >>>
> >>> On Mon, 10 May 2021 at 23:58, antonio  wrote:
> >>>
>  Hi John,
> 
>  Thanks for the report! It seems we weren't lexing '#error' yet (that's
>  probably what is on line 59 in "/usr/include/complex.h", right?
>  Otherwise send me the line 59).
> 
>  The newest version should detect #error properly (and also checks for
>  ends of directives, and *.hpp/*.cpp).
> 
>  Talking about antlr4, it seems the AST is analyzed using the visitor
>  pattern (that approach is also used in libclang) but NetBeans <= 8.2
>  expects the whole AST in memory, so it seems we have a long
> refactoring
>  road ahead (all this after successfully migrating the CXXParser.g to
>  antlr4, which reads >3300 lines long).
> 
>  In parallel I'm giving libclang [1] a run. It seems quite powerful (it
>  provides completion, precompiled headers, reparsing, diagnostics, AST)
>  but it may require an extra +30Mb download on Windows (linux users may
>  apt-get install libclang, though). More on this in a few days.
> 
>  Thanks again,
>  Antonio
> 
>  [1]
>  https://clang.llvm.org/doxygen/group__CINDEX.html
> 
>  El 10/5/21 a las 21:39, John Kostaras escribió:
> > +1 cnd.nextapt
> >
> > java -Dlexer.print=false -jar
> > target/cnd.apt.antlr4-1.0-SNAPSHOT-jar-with-dependencies.jar
> >> /usr/include
> > 
> > -- /usr/include/complex.h --
> > Syntax error on 59:12 token recognition error at: '"clang diagnostic
> > ignored \"'
> >
> > Will also take a look. Thanks Antonio. Great initiative.
> >
> > P.S. I guess .hpp/.cpp files are next?
> 
>  --