Re: [NOTICE] Apache NetBeans 21 release candidate 3 available for testing

2024-02-12 Thread Mark Eggers

This has been reported to Avast!

Mark
/mde/

On 2/12/2024 1:49 PM, Mark Eggers wrote:

Yes,

I just got this as well when I tried to download the artifact. Since I 
have Avast! on Windows, I will download this on Linux.


I'll report this to Avast! shortly.

Mark
/mde/

On 2/12/2024 12:45 PM, John Kostaras wrote:

Hello,

does anybody else get a threat warning from Avast (I had to remove the
attached screenshot as the mailing list rejects big email messages)?

*We've put netbeans.exe in Quarantine because it was infected with 
malware:

Win32:MalOb-IJ [Cryp].*

I get this for the 32-bit executable netbeans.exe as well for app.exe. 
I 'm

running on a mac so these don't affect me, but I wonder if it is a false
positive. So, as suggested in a forum searching for the threat name, I
checked the file in https://www.virustotal.com/:

3 security vendors and no sandboxes flagged this file as malicious
5ec35d8d758a94acbef38e38e19594de4228f039576ab4d22caacbaa12a382c9
netbeans

Popular threat label


cryp/malob


Avast
Win32:MalOb-IJ [Cryp]
AVG
Win32:MalOb-IJ [Cryp]
SecureAge
Malicious

Apart from that, I tested:

*Product Version:* Apache NetBeans IDE 21-rc3

*Java:* 17; Java HotSpot(TM) 64-Bit Server VM 17+35-LTS-2724

*Runtime:* Java(TM) SE Runtime Environment 17+35-LTS-2724

*System:* Mac OS X version 14.2.1 running on x86_64; UTF-8; en_GR (nb)

as well as with:

*Java:* 21.0.1; OpenJDK 64-Bit Server VM 21.0.1+12-LTS

*Runtime:* OpenJDK Runtime Environment 21.0.1+12-LTS

and found no apparent issues.

K/r,

John.


On Fri, Feb 9, 2024 at 11:18 AM Neil C Smith  
wrote:



The third release candidate build for Apache NetBeans 21 is available
(links below). This will be our final release candidate unless
high/critical priority issues or pull requests are flagged. Please
kick the tyres well over the coming week or so! This includes testing
building from source and other release checks.


Changes since NetBeans 21-rc2 can be seen at
https://github.com/apache/netbeans/releases/tag/21-rc3

Please help with testing, and file issues in GitHub as necessary -

https://github.com/apache/netbeans/issues

If you're a committer adding an issue, or helping triage an issue
(please do!), add the milestone and/or priority labels as appropriate.
Use priority:high for should be fixed before release,
priority:critical for must be fixed before we can release.

**The following rules are applied to pull requests from now until
release:**

Please read the full info on how we manage pull requests to delivery
at least once! -

https://cwiki.apache.org/confluence/display/NETBEANS/Pull+requests+for+delivery

PR's intended to be included in the 21 release :
  - Limited to fixes (link an issue if there is one, or provide
justification in description)
  - Label with priority:high or priority:critical as appropriate.
  - Base on the delivery branch.
  - Mark with NB21 milestone.
  - Will be merged by the release team.

PR's with features for a future release :
  - Base on the master branch.
  - Will be reviewed and merged in the usual way.
  - If possible stay away from big refactoring.
  - If possible do not overlap with fixes for 21 (delivery will be
merged to master weekly).


The NetBeans 21-rc3 artifacts are here:

https://ci-builds.apache.org/job/Netbeans/job/netbeans-TLP/job/release210/7/artifact/dist/

Alternative links to latest release candidate:
https://nightlies.apache.org/netbeans/candidate/netbeans/
https://nightlies.apache.org/netbeans/candidate/installers/
https://nightlies.apache.org/netbeans/candidate/vsix/

Link to the binary zip:

https://ci-builds.apache.org/job/Netbeans/job/netbeans-TLP/job/release210/7/artifact/dist/netbeans/netbeans-21-rc3-bin.zip
SHA512:
cf15795b94fdedd6ed832dd0d034fe822dc004264e2ed765b496db702847d66469b72992a7708d01dc6b6067a50c88001207f9bfbb6a61febc185172b081e3ac

The sources are here:

https://ci-builds.apache.org/job/Netbeans/job/netbeans-TLP/job/release210/7/artifact/dist/netbeans/netbeans-21-rc3-source.zip
SHA512:
68617e385cd81f94ecb94e4e0f93595f9cb174195a25a66bc00e7aaa4e08c7ed8a3c4eadb4b0a25a09e19ba4545667c9f58c6bf855ebdc064e226fd2915b526c


The PRs already integrated into NetBeans 21 are :
https://github.com/apache/netbeans/pulls?q=is%3Amerged+milestone%3ANB21

Issues currently tagged for NetBeans 21 are :

https://github.com/apache/netbeans/issues?q=is%3Aopen+is%3Aissue+milestone%3ANB21

Release schedule :
https://cwiki.apache.org/confluence/display/NETBEANS/Release+Schedule


Thank you for your contributions!

Best wishes,

Neil

PS. Please don't respond to this email directly - start a new thread.
Let's keep the [NOTICE] tag for what it says. Thanks! :-)

-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apa

Re: [NOTICE] Apache NetBeans 21 release candidate 3 available for testing

2024-02-12 Thread Mark Eggers

Yes,

I just got this as well when I tried to download the artifact. Since I 
have Avast! on Windows, I will download this on Linux.


I'll report this to Avast! shortly.

Mark
/mde/

On 2/12/2024 12:45 PM, John Kostaras wrote:

Hello,

does anybody else get a threat warning from Avast (I had to remove the
attached screenshot as the mailing list rejects big email messages)?

*We've put netbeans.exe in Quarantine because it was infected with malware:
Win32:MalOb-IJ [Cryp].*

I get this for the 32-bit executable netbeans.exe as well for app.exe. I 'm
running on a mac so these don't affect me, but I wonder if it is a false
positive. So, as suggested in a forum searching for the threat name, I
checked the file in https://www.virustotal.com/:

3 security vendors and no sandboxes flagged this file as malicious
5ec35d8d758a94acbef38e38e19594de4228f039576ab4d22caacbaa12a382c9
netbeans

Popular threat label


cryp/malob


Avast
Win32:MalOb-IJ [Cryp]
AVG
Win32:MalOb-IJ [Cryp]
SecureAge
Malicious

Apart from that, I tested:

*Product Version:* Apache NetBeans IDE 21-rc3

*Java:* 17; Java HotSpot(TM) 64-Bit Server VM 17+35-LTS-2724

*Runtime:* Java(TM) SE Runtime Environment 17+35-LTS-2724

*System:* Mac OS X version 14.2.1 running on x86_64; UTF-8; en_GR (nb)

as well as with:

*Java:* 21.0.1; OpenJDK 64-Bit Server VM 21.0.1+12-LTS

*Runtime:* OpenJDK Runtime Environment 21.0.1+12-LTS

and found no apparent issues.

K/r,

John.


On Fri, Feb 9, 2024 at 11:18 AM Neil C Smith  wrote:


The third release candidate build for Apache NetBeans 21 is available
(links below). This will be our final release candidate unless
high/critical priority issues or pull requests are flagged. Please
kick the tyres well over the coming week or so! This includes testing
building from source and other release checks.


Changes since NetBeans 21-rc2 can be seen at
https://github.com/apache/netbeans/releases/tag/21-rc3

Please help with testing, and file issues in GitHub as necessary -

https://github.com/apache/netbeans/issues

If you're a committer adding an issue, or helping triage an issue
(please do!), add the milestone and/or priority labels as appropriate.
Use priority:high for should be fixed before release,
priority:critical for must be fixed before we can release.

**The following rules are applied to pull requests from now until
release:**

Please read the full info on how we manage pull requests to delivery
at least once! -

https://cwiki.apache.org/confluence/display/NETBEANS/Pull+requests+for+delivery

PR's intended to be included in the 21 release :
  - Limited to fixes (link an issue if there is one, or provide
justification in description)
  - Label with priority:high or priority:critical as appropriate.
  - Base on the delivery branch.
  - Mark with NB21 milestone.
  - Will be merged by the release team.

PR's with features for a future release :
  - Base on the master branch.
  - Will be reviewed and merged in the usual way.
  - If possible stay away from big refactoring.
  - If possible do not overlap with fixes for 21 (delivery will be
merged to master weekly).


The NetBeans 21-rc3 artifacts are here:

https://ci-builds.apache.org/job/Netbeans/job/netbeans-TLP/job/release210/7/artifact/dist/

Alternative links to latest release candidate:
https://nightlies.apache.org/netbeans/candidate/netbeans/
https://nightlies.apache.org/netbeans/candidate/installers/
https://nightlies.apache.org/netbeans/candidate/vsix/

Link to the binary zip:

https://ci-builds.apache.org/job/Netbeans/job/netbeans-TLP/job/release210/7/artifact/dist/netbeans/netbeans-21-rc3-bin.zip
SHA512:
cf15795b94fdedd6ed832dd0d034fe822dc004264e2ed765b496db702847d66469b72992a7708d01dc6b6067a50c88001207f9bfbb6a61febc185172b081e3ac

The sources are here:

https://ci-builds.apache.org/job/Netbeans/job/netbeans-TLP/job/release210/7/artifact/dist/netbeans/netbeans-21-rc3-source.zip
SHA512:
68617e385cd81f94ecb94e4e0f93595f9cb174195a25a66bc00e7aaa4e08c7ed8a3c4eadb4b0a25a09e19ba4545667c9f58c6bf855ebdc064e226fd2915b526c


The PRs already integrated into NetBeans 21 are :
https://github.com/apache/netbeans/pulls?q=is%3Amerged+milestone%3ANB21

Issues currently tagged for NetBeans 21 are :

https://github.com/apache/netbeans/issues?q=is%3Aopen+is%3Aissue+milestone%3ANB21

Release schedule :
https://cwiki.apache.org/confluence/display/NETBEANS/Release+Schedule


Thank you for your contributions!

Best wishes,

Neil

PS. Please don't respond to this email directly - start a new thread.
Let's keep the [NOTICE] tag for what it says. Thanks! :-)

-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information

Re: [NOTICE] Apache NetBeans 21 release candidate 3 available for testing

2024-02-12 Thread John Kostaras
Hello,

does anybody else get a threat warning from Avast (I had to remove the
attached screenshot as the mailing list rejects big email messages)?

*We've put netbeans.exe in Quarantine because it was infected with malware:
Win32:MalOb-IJ [Cryp].*

I get this for the 32-bit executable netbeans.exe as well for app.exe. I 'm
running on a mac so these don't affect me, but I wonder if it is a false
positive. So, as suggested in a forum searching for the threat name, I
checked the file in https://www.virustotal.com/:

3 security vendors and no sandboxes flagged this file as malicious
5ec35d8d758a94acbef38e38e19594de4228f039576ab4d22caacbaa12a382c9
netbeans

Popular threat label


cryp/malob


Avast
Win32:MalOb-IJ [Cryp]
AVG
Win32:MalOb-IJ [Cryp]
SecureAge
Malicious

Apart from that, I tested:

*Product Version:* Apache NetBeans IDE 21-rc3

*Java:* 17; Java HotSpot(TM) 64-Bit Server VM 17+35-LTS-2724

*Runtime:* Java(TM) SE Runtime Environment 17+35-LTS-2724

*System:* Mac OS X version 14.2.1 running on x86_64; UTF-8; en_GR (nb)

as well as with:

*Java:* 21.0.1; OpenJDK 64-Bit Server VM 21.0.1+12-LTS

*Runtime:* OpenJDK Runtime Environment 21.0.1+12-LTS

and found no apparent issues.

K/r,

John.


On Fri, Feb 9, 2024 at 11:18 AM Neil C Smith  wrote:

> The third release candidate build for Apache NetBeans 21 is available
> (links below). This will be our final release candidate unless
> high/critical priority issues or pull requests are flagged. Please
> kick the tyres well over the coming week or so! This includes testing
> building from source and other release checks.
>
>
> Changes since NetBeans 21-rc2 can be seen at
> https://github.com/apache/netbeans/releases/tag/21-rc3
>
> Please help with testing, and file issues in GitHub as necessary -
>
> https://github.com/apache/netbeans/issues
>
> If you're a committer adding an issue, or helping triage an issue
> (please do!), add the milestone and/or priority labels as appropriate.
> Use priority:high for should be fixed before release,
> priority:critical for must be fixed before we can release.
>
> **The following rules are applied to pull requests from now until
> release:**
>
> Please read the full info on how we manage pull requests to delivery
> at least once! -
>
> https://cwiki.apache.org/confluence/display/NETBEANS/Pull+requests+for+delivery
>
> PR's intended to be included in the 21 release :
>  - Limited to fixes (link an issue if there is one, or provide
> justification in description)
>  - Label with priority:high or priority:critical as appropriate.
>  - Base on the delivery branch.
>  - Mark with NB21 milestone.
>  - Will be merged by the release team.
>
> PR's with features for a future release :
>  - Base on the master branch.
>  - Will be reviewed and merged in the usual way.
>  - If possible stay away from big refactoring.
>  - If possible do not overlap with fixes for 21 (delivery will be
> merged to master weekly).
>
>
> The NetBeans 21-rc3 artifacts are here:
>
> https://ci-builds.apache.org/job/Netbeans/job/netbeans-TLP/job/release210/7/artifact/dist/
>
> Alternative links to latest release candidate:
> https://nightlies.apache.org/netbeans/candidate/netbeans/
> https://nightlies.apache.org/netbeans/candidate/installers/
> https://nightlies.apache.org/netbeans/candidate/vsix/
>
> Link to the binary zip:
>
> https://ci-builds.apache.org/job/Netbeans/job/netbeans-TLP/job/release210/7/artifact/dist/netbeans/netbeans-21-rc3-bin.zip
> SHA512:
> cf15795b94fdedd6ed832dd0d034fe822dc004264e2ed765b496db702847d66469b72992a7708d01dc6b6067a50c88001207f9bfbb6a61febc185172b081e3ac
>
> The sources are here:
>
> https://ci-builds.apache.org/job/Netbeans/job/netbeans-TLP/job/release210/7/artifact/dist/netbeans/netbeans-21-rc3-source.zip
> SHA512:
> 68617e385cd81f94ecb94e4e0f93595f9cb174195a25a66bc00e7aaa4e08c7ed8a3c4eadb4b0a25a09e19ba4545667c9f58c6bf855ebdc064e226fd2915b526c
>
>
> The PRs already integrated into NetBeans 21 are :
> https://github.com/apache/netbeans/pulls?q=is%3Amerged+milestone%3ANB21
>
> Issues currently tagged for NetBeans 21 are :
>
> https://github.com/apache/netbeans/issues?q=is%3Aopen+is%3Aissue+milestone%3ANB21
>
> Release schedule :
> https://cwiki.apache.org/confluence/display/NETBEANS/Release+Schedule
>
>
> Thank you for your contributions!
>
> Best wishes,
>
> Neil
>
> PS. Please don't respond to this email directly - start a new thread.
> Let's keep the [NOTICE] tag for what it says. Thanks! :-)
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
> For additional commands, e-mail: dev-h...@netbeans.apache.org
>
> For further information about the NetBeans mailing lists, visit:
> https://cwiki.apache.org/confluence/display/NE

[VOTE] Release Apache NetBeans NBPackage 1.0-beta4

2024-02-12 Thread Neil C Smith
I'd like to call a vote to release Apache NetBeans NBPackage 1.0-beta4.

NBPackage is a command line tool and library for packaging a NetBeans
IDE or platform application zip bundle into a native installer or
package. It supports optional bundling of a Java runtime. It is
inspired by the JDK's jpackage tool, but tailored to the needs of the
IDE and RCP, with a different range of packagers, and some support for
cross-platform package building. Currently supported packagers include
Windows EXE (InnoSetup), macOS PKG, and Linux DEB, RPM and AppImage.

1.0-beta4 includes an update to include FlatLaf JARs in the macOS code
signing process to coincide with the addition of native binaries for that
platform in NetBeans 21. Various dependencies and plugins have also
been updated.

Primary voting artefact :
https://dist.apache.org/repos/dist/dev/netbeans/netbeans-nbpackage/1.0-beta4/nbpackage-1.0-beta4-source-release.zip
SHA : 
bf681225b8d304cc871f424f030fb4d61e78115b9bac8ca50adae17399f97cdf43ad635907b9df984e1d283a310b0ed86744d4bc01158c564e94b43b65a04239
SHA file : 
https://dist.apache.org/repos/dist/dev/netbeans/netbeans-nbpackage/1.0-beta4/nbpackage-1.0-beta4-source-release.zip.sha512
PGP file : 
https://dist.apache.org/repos/dist/dev/netbeans/netbeans-nbpackage/1.0-beta4/nbpackage-1.0-beta4-source-release.zip.asc
Source repo : https://github.com/apache/netbeans-nbpackage
Source commit :
https://github.com/apache/netbeans-nbpackage/commit/f48c5b237ce4b20671bc7394003087ccff15d9c0

Alongside the source artefact is a convenience binary zip for command line usage

https://dist.apache.org/repos/dist/dev/netbeans/netbeans-nbpackage/1.0-beta4/

In addition, the library JAR and CLI bundles (zip and tar.gz) are staged at

https://repository.apache.org/content/repositories/orgapachenetbeans-1138/org/apache/netbeans/nbpackage/1.0-beta4/


This vote is going to be open at least 72 hours. Vote with +1, 0, and
-1 as usual. Please mark your vote with (binding) if you're an Apache
NetBeans PMC member.

Many thanks everyone,

Best wishes,

Neil

-
To unsubscribe, e-mail: dev-unsubscr...@netbeans.apache.org
For additional commands, e-mail: dev-h...@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists