Re: bval2 release?

Okay, these took me a bit and then I went ahead and took a stab at preventing EL injection attacks. The means by which this is accomplished: the MessageInterpolator Context used by the Apache BVal constraint validation implementation will provide access to validation configuration properties. A

Re: bval2 release?

Thanks all for checking that out. I'm working on some issues I found with message interpolation and hope to finish today. Matt On Thu, Oct 11, 2018, 7:18 AM Romain Manni-Bucau wrote: > yep > > Romain Manni-Bucau > @rmannibucau | Blog >

Re: bval2 release?

yep Romain Manni-Bucau @rmannibucau | Blog | Old Blog | Github | LinkedIn | Book

Re: bval2 release?

it gets created automatically if we are on the latest apache-parent. Note that it only gets created locally due to mvn repo limitations right now. So I usually keep the sha1 for all the mails etc, and later create a sha512 in the dist svn. LieGrue, strub > Am 11.10.2018 um 01:41 schrieb David

Re: bval2 release?

Roberto, do you have any spare cycles to try and upgrade the build to output SHA512 hashes in the release profile? -- David Blevins http://twitter.com/dblevins http://www.tomitribe.com > On Oct 10, 2018, at 9:00 AM, Matt Benson wrote: > > Something the build needs is to generate a sha256

Re: bval2 release?

Sha512 but you can sha512sum manually after staging creation. Works fine and enables to release. Le mer. 10 oct. 2018 19:00, Matt Benson a écrit : > Something the build needs is to generate a sha256 hash instead of sha1 and > md5. > > Matt > > On Tue, Oct 9, 2018, 7:16 AM Mark Struberg >

Re: bval2 release?

Something the build needs is to generate a sha256 hash instead of sha1 and md5. Matt On Tue, Oct 9, 2018, 7:16 AM Mark Struberg wrote: > +1 let's go for it. > > LieGrue, > strub > > > > Am 09.10.2018 um 06:21 schrieb Romain Manni-Bucau >: > > > > Hi David, Matt said he will look this week

Re: bval2 release?

+1 let's go for it. LieGrue, strub > Am 09.10.2018 um 06:21 schrieb Romain Manni-Bucau : > > Hi David, Matt said he will look this week when I asked last one. Otherwise > i can try to roll it out but only next week. > > Le lun. 8 oct. 2018 23:45, David Blevins a écrit : > >> Hey All! >> >>

Re: bval2 release?

Hi David, Matt said he will look this week when I asked last one. Otherwise i can try to roll it out but only next week. Le lun. 8 oct. 2018 23:45, David Blevins a écrit : > Hey All! > > The Geronimo validation release is out. Is it possible to get a bval > release of some kind? Final or

Re: bval2 release?

Hey All! The Geronimo validation release is out. Is it possible to get a bval release of some kind? Final or milestone, the label doesn't matter. For transparency, we're trying to make a CodeOne (Oct 22nd) deadline for the TomEE 8 release. If we got a bval release this week, we might still

Re: bval2 release?

bval 2.0 won't be integrated? why? Oo Am Mi., 26. Sep. 2018 um 14:50 Uhr schrieb Romain Manni-Bucau < rmannibu...@gmail.com>: > same here, it will likely not be integrated in tomee 8 anyway. > > Romain Manni-Bucau > @rmannibucau | Blog >

Re: bval2 release?

was more about the new api with the clean javadoc, bval is already integrated Romain Manni-Bucau @rmannibucau | Blog | Old Blog | Github | LinkedIn

Re: bval2 release?

same here, it will likely not be integrated in tomee 8 anyway. Romain Manni-Bucau @rmannibucau | Blog | Old Blog | Github | LinkedIn

Re: bval2 release?

I think Mark and Romain were pushing to get a patch of Javadoc for the Geronimo-published version of the bean validation v2 API (first). I haven't had time to do this myself and see it as non-essential. Matt On Tue, Sep 25, 2018, 8:13 PM Roberto Cortez wrote: > Hi, > Do you need any help to

Re: bval2 release?

Hi, Do you need any help to push the release forward? Cheers,Roberto On Wednesday, September 12, 2018, 7:59:20 AM GMT+1, Mark Struberg wrote: right, same approach as I did. LieGrue, strub > Am 10.09.2018 um 18:32 schrieb Romain Manni-Bucau : > > For the ones I did, I just wrote it

Re: bval2 release?

For the ones I did, I just wrote it with "my words". This is not part of the signature so technically you can write a summary of your holidays (don't please ;)). If you have time let's enhance it, if not we can do a .0.1 for it, no issue and happy to lead this next release if needed. Romain

Re: bval2 release?

The Geronimo versions of the v1.x specs never had any Javadoc to speak of. This seems to be a problematic area anyway: how to document an API without infringing the copyright of the reference API. Matt On Mon, Sep 10, 2018, 2:05 AM Mark Struberg wrote: > wohuuu, trying to make up a bit time

Re: bval2 release?

wohuuu, trying to make up a bit time today or tomorrow to push the geronimo-validation_2.0_spec release. If you want to add some JavaDocs before that then plz ping me and I wait a bit. Need to run the compat checks anyway before we can ship it. LieGrue, strub > Am 28.08.2018 um 15:57 schrieb

Re: bval2 release?

Good catch, Mark! Thanks! Matt On Tue, Aug 28, 2018 at 6:53 AM Mark Struberg wrote: > We also need to release geronimo-validation-2.0. Will trigger this over at > Geronimo. > > LieGrue, > strub > > > > Am 27.08.2018 um 20:32 schrieb Roberto Cortez > : > > > > Great. Let me know if I can help.

Re: bval2 release?

We also need to release geronimo-validation-2.0. Will trigger this over at Geronimo. LieGrue, strub > Am 27.08.2018 um 20:32 schrieb Roberto Cortez : > > Great. Let me know if I can help. > >> On 27 Aug 2018, at 16:10, Matt Benson wrote: >> >> Sounds like the basic plan, yes. >> >> Matt

Re: bval2 release?

We also need to release geronimo-validation-2.0. Will trigger this over at Geronimo. LieGrue, strub > Am 27.08.2018 um 20:32 schrieb Roberto Cortez : > > Great. Let me know if I can help. > >> On 27 Aug 2018, at 16:10, Matt Benson wrote: >> >> Sounds like the basic plan, yes. >> >> Matt

Re: bval2 release?

Great. Let me know if I can help. > On 27 Aug 2018, at 16:10, Matt Benson wrote: > > Sounds like the basic plan, yes. > > Matt > > On Mon, Aug 27, 2018 at 4:55 AM Roberto Cortez > wrote: > >> Great! Thanks. >> So, do you think we can push for a Weaver release, so we can then push the >>

Re: bval2 release?

Sounds like the basic plan, yes. Matt On Mon, Aug 27, 2018 at 4:55 AM Roberto Cortez wrote: > Great! Thanks. > So, do you think we can push for a Weaver release, so we can then push the > BVal release? We are trying to push for a TomEE 8 release, so we need both > :) > Cheers,Roberto > On

Re: bval2 release?

Great! Thanks. So, do you think we can push for a Weaver release, so we can then push the BVal release? We are trying to push for a TomEE 8 release, so we need both :) Cheers,Roberto On Friday, August 24, 2018, 10:20:17 PM GMT+1, Matt Benson wrote: Thanks, merged! On Fri, Aug 24,

Re: bval2 release?

Thanks, merged! On Fri, Aug 24, 2018, 12:45 PM Roberto Cortez wrote: > I had a look and I think the issue is related with this: > https://www.mail-archive.com/dev@commons.apache.org/msg63326.html < > https://www.mail-archive.com/dev@commons.apache.org/msg63326.html> > > I think this should do

Re: bval2 release?

I had a look and I think the issue is related with this: https://www.mail-archive.com/dev@commons.apache.org/msg63326.html I think this should do the trick: https://github.com/apache/commons-weaver/pull/1

Re: bval2 release?

Well it does since commons will delay from weeks whereas it blocks tomee release which would fork bval itself which is worse. This is why it can be an option. But happy to help a bit if needed indeed. Le mer. 22 août 2018 22:52, Mark Struberg a écrit : > no, makes no sense. Rather help to get

Re: bval2 release?

no, makes no sense. Rather help to get it done. LieGrue strub > Am 22.08.2018 um 17:25 schrieb Romain Manni-Bucau : > > If really blocking we can fork for this release time. > > Romain Manni-Bucau > @rmannibucau | Blog > |

Re: bval2 release?

If really blocking we can fork for this release time. Romain Manni-Bucau @rmannibucau | Blog | Old Blog | Github | LinkedIn

Re: bval2 release?

+1 2018-08-22 9:52 GMT+02:00 Romain Manni-Bucau : > +1 > > Romain Manni-Bucau > @rmannibucau | Blog > | Old Blog > | Github rmannibucau> | > LinkedIn

bval2 release?

hi folks! Do we want to go for a BVal-2.0.0 release? Seems we pass the TCK, so we should really kick it off I'd say. Wdyt? LieGrue, strub