[jira] [Commented] (ANY23-546) Implement sonarcloud.io in Any23 continuous integration

2022-01-03 Thread ASF GitHub Bot (Jira)
[ https://issues.apache.org/jira/browse/ANY23-546?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17468183#comment-17468183 ] ASF GitHub Bot commented on ANY23-546: -- lewismc commented on pull request #241: URL:

[GitHub] [any23] lewismc commented on pull request #241: ANY23-546 Implement sonarcloud.io in Any23 continuous integration

2022-01-03 Thread GitBox
lewismc commented on pull request #241: URL: https://github.com/apache/any23/pull/241#issuecomment-1004329352 OK the first analysis of master branch is available at https://sonarcloud.io/project/overview?id=apache_any23 There is still something blocking analysis being performed on

[VOTE] Release Apache Any23 2.6 RC#2

2022-01-03 Thread lewis john mcgibbney
Hi user@ and dev@, Please VOTE on the 2nd release candidate for Apache Any23 2.6. Most notably this RC addresses several security vulnerabilities by upgrading every single Any23 dependency. We solved 62 issues: https://issues.apache.org/jira/projects/ANY23/versions/12350556 Git source tag

[RESULT] WAS Re: [VOTE] Release Apache Any23 2.6

2022-01-03 Thread lewis john mcgibbney
Hi user@, dev@, I'm going to bring this VOTE thread to a close with the following results. [3] +1, release as Any23 2.6 Andy Seaborne* Lewis John McGibbney* David Cockbill *Any23 PMC binding [0] +/-0, fine, but consider to fix few issues before... [0] -1, nope, because... (and please explain

[jira] [Created] (ANY23-553) Document MathUtils#md5 to warn that the weak hash algorithm is not to be used in a sensitive context

2022-01-03 Thread Lewis John McGibbney (Jira)
Lewis John McGibbney created ANY23-553: -- Summary: Document MathUtils#md5 to warn that the weak hash algorithm is not to be used in a sensitive context Key: ANY23-553 URL:

[GitHub] [any23] lewismc opened a new pull request #242: ANY23-553 Document MathUtils#md5 to warn that the weak hash algorithm is not to be used in a sensitive context

2022-01-03 Thread GitBox
lewismc opened a new pull request #242: URL: https://github.com/apache/any23/pull/242 This issue addresses https://issues.apache.org/jira/browse/ANY23-553 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL

[jira] [Commented] (ANY23-553) Document MathUtils#md5 to warn that the weak hash algorithm is not to be used in a sensitive context

2022-01-03 Thread ASF GitHub Bot (Jira)
[ https://issues.apache.org/jira/browse/ANY23-553?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17468307#comment-17468307 ] ASF GitHub Bot commented on ANY23-553: -- lewismc opened a new pull request #242: URL:

[jira] [Updated] (ANY23-553) Document MathUtils#md5 to warn that the weak hash algorithm is not to be used in a sensitive context

2022-01-03 Thread Lewis John McGibbney (Jira)
[ https://issues.apache.org/jira/browse/ANY23-553?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Lewis John McGibbney updated ANY23-553: --- Description: Sonarcloud.io analysis has [identified a potential security