[GitHub] commons-compress issue #20: COMPRESS-382

2017-04-24 Thread coveralls
Github user coveralls commented on the issue: https://github.com/apache/commons-compress/pull/20 [![Coverage Status](https://coveralls.io/builds/11224344/badge)](https://coveralls.io/builds/11224344) Coverage increased (+0.03%) to 84.263% when pulling

[GitHub] commons-compress issue #20: COMPRESS-382

2017-04-24 Thread coveralls
Github user coveralls commented on the issue: https://github.com/apache/commons-compress/pull/20 [![Coverage Status](https://coveralls.io/builds/11223865/badge)](https://coveralls.io/builds/11223865) Coverage increased (+0.02%) to 84.26% when pulling

Re: [all] Java 9 module names

2017-04-24 Thread Ralph Goers
In the case of Commons Logging, Log4j 2 works that way - Commons Logging uses log4j-jcl as its implementation. But SLF4J replaces Commons Logging with slf4j-over-jcl, so you must make sure the commons-logging jar is not present. What Stephen is saying is that in that case commons-logging and

Re: svn commit: r1792011 - in /commons/proper/configuration/trunk/src: changes/changes.xml main/java/org/apache/commons/configuration2/tree/ImmutableNode.java test/java/org/apache/commons/configuratio

2017-04-24 Thread Gary Gregory
Fixed in SVN. Thank you for the good catch. Gary On Thu, Apr 20, 2017 at 5:59 AM, Gary Gregory wrote: > > > On Apr 20, 2017 2:40 AM, "Oliver Heger" > wrote: > > > > Am 20.04.2017 um 05:17 schrieb ggreg...@apache.org: > >> Author: ggregory

Re: [all] Java 9 module names

2017-04-24 Thread Bernd Eckenfels
Hm, I don't think a bridge implementation needs to fake a (API) module. Your client code requires the API module and no specific implementation. The implementations (including the bridge) export their specific packages to the API module (optionally with service provider for discovery). This is

Re: CVE request for : Apache Commons JEXL Expression Execute Command Vulnerabilitity throught groovy.

2017-04-24 Thread Mark Thomas
(all addressees apart from dev@commons.a.o moved to bcc) All, My apologies. I intended to send this to the Commons PMC's private list and put the wrong addressee for the Commons project. Fortunately the issue is already largely public at https://issues.apache.org/jira/browse/JEXL-223 but even

Re: CVE request for : Apache Commons JEXL Expression Execute Command Vulnerabilitity throught groovy.

2017-04-24 Thread Mark Thomas
The Apache Commons project will not be treating this as a security vulnerability. Executing untrusted / unsanitized / unvalidated code in a scripting environment is always dangerous. Progress may be followed via: https://issues.apache.org/jira/browse/JEXL-223 Mark On 21/04/17 08:52,

[GitHub] commons-compress issue #20: COMPRESS-382

2017-04-24 Thread coveralls
Github user coveralls commented on the issue: https://github.com/apache/commons-compress/pull/20 [![Coverage Status](https://coveralls.io/builds/11213136/badge)](https://coveralls.io/builds/11213136) Coverage increased (+0.04%) to 84.274% when pulling

Re: [all] Java 9 module names

2017-04-24 Thread Stephen Colebourne
On 24 April 2017 at 11:08, Jörg Schaible wrote: > Stephen Colebourne wrote: > >> Sounds like you could use --add-modules to add the module separately >> from the command line, or add the module to the application's >> module-info rather than the libraries. >> >> In

[GitHub] commons-compress issue #20: COMPRESS-382

2017-04-24 Thread tballison
Github user tballison commented on the issue: https://github.com/apache/commons-compress/pull/20 +1 to both suggestions. Will do. Thank you. --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not have

Re: [all] Java 9 module names

2017-04-24 Thread Jörg Schaible
Stephen Colebourne wrote: > Sounds like you could use --add-modules to add the module separately > from the command line, or add the module to the application's > module-info rather than the libraries. > > In general, I suspect a library module-info.java should depend only on > the other modules

Re: [all] Java 9 module names

2017-04-24 Thread Stephen Colebourne
Sounds like you could use --add-modules to add the module separately from the command line, or add the module to the application's module-info rather than the libraries. In general, I suspect a library module-info.java should depend only on the other modules it really needs (eg. the API of

Re: [all] Java 9 module names

2017-04-24 Thread Bernd Eckenfels
Hm why is that? What step in your compile would need the runtime module? Gruss Bernd -- http://bernd.eckenfels.net From: Ralph Goers Sent: Sunday, April 23, 2017 7:14:02 PM To: Commons Developers List Subject: Re: [all] Java 9 module

Re: Convert RNG help wanted into generic request

2017-04-24 Thread Eyal Allweil
I changed the new item to "commons" and deleted the old one. Cheers,Eyal On Sunday, April 23, 2017 4:18 AM, Gilles wrote: Hello. On Sat, 22 Apr 2017 18:30:46 + (UTC), Eyal Allweil wrote: > Hi Gilles, > It looks like there is no "edit" feature in Help