Re: [rng] LGTM switch to CodeQL GH action

2022-12-07 Thread Gilles Sadowski
Hi. Le mer. 7 déc. 2022 à 14:11, Alex Herbert a écrit : > > The [rng] project was signed up to LGTM.com analysis (I presume at > their website). I don't recall that anything had been done on our part for the analyses of Commons repositories to appear on their web site. > This is now being decom

Re: [All] Main site is outdated

2022-12-07 Thread sebb
On Wed, 7 Dec 2022 at 13:20, Alex Herbert wrote: > > So I can see the file to edit is index.html at this location: > > svn checkout --depth files > https://svn.apache.org/repos/infra/websites/production/commons/content/ > > But should this be edited manually, or is it generated/updated via > some

[VOTE][LAZY] Release Apache Commons Parent 55 based on RC1

2022-12-07 Thread Gary Gregory
We made some enhancements since Apache Commons Parent 54 was released, so I would like to release Apache Commons Parent 55. This is the parent POM for Apache Commons, it doesn't contain Java code, and therefore no JApiCmp API compatibility check or report on the site. Apache Commons Parent 55 RC1

Re: Re: Release Commons Fileupload 1.4.1?

2022-12-07 Thread Gary Gregory
The next release will be 2.0 which will hopefully happen Q1 2023. Gary On Wed, Dec 7, 2022, 11:28 Dennis Kieselhorst wrote: > Well this is the change I'm particularly interested in to have clean > transitive dependencies but looking at the commit logs other useful > things happened as well. The

RE: Re: Release Commons Fileupload 1.4.1?

2022-12-07 Thread Dennis Kieselhorst
Well this is the change I'm particularly interested in to have clean transitive dependencies but looking at the commit logs other useful things happened as well. The last release happened in 2019. I understand though that fileupload is implemented differently nowadays and maintaining this proje

Re: Release Commons Fileupload 1.4.1?

2022-12-07 Thread Gary Gregory
This is unlikely to happen for only a dependency update, and also since it is simple to override in Maven, Ivy, and so on. Recall that we are volunteers here where each person spends their valuable time as they best see fit ;-) Gary On Wed, Dec 7, 2022, 10:49 Dennis Kieselhorst wrote: > Hi folk

Release Commons Fileupload 1.4.1?

2022-12-07 Thread Dennis Kieselhorst
Hi folks, would it be possible to release Commons Fileupload 1.4.1? 1.4 still contains commons-io 2.2 and requires to explicitly exclude it (CVE-2021-29425). Thanks, Dennis - To unsubscribe, e-mail: dev-unsubscr...@commons.

Re: [All] Main site is outdated

2022-12-07 Thread Alex Herbert
So I can see the file to edit is index.html at this location: svn checkout --depth files https://svn.apache.org/repos/infra/websites/production/commons/content/ But should this be edited manually, or is it generated/updated via some automation? I ask as the newly released statistics component en

[rng] LGTM switch to CodeQL GH action

2022-12-07 Thread Alex Herbert
The [rng] project was signed up to LGTM.com analysis (I presume at their website). This is now being decommissioned. The underlying analysis engine is CodeQL and this is migrating to direct support as a Github action. Do we want to continue with this for [rng]? There is a PR open by their bot to e

[ANNOUNCE] Apache Commons Statistics Version 1.0 Released

2022-12-07 Thread Alex Herbert
The Apache Commons Team is pleased to announce the availability of version 1.0 of "Apache Commons Statistics". Apache Commons Statistics provides tools for statistics. This is the first release of Apache Commons Statistics. Contains the following modules: commons-statistics-distribution. Requ

Re: [VOTE] Release Apache Commons Statistics 1.0 based on RC1

2022-12-07 Thread Alex Herbert
On Tue, 6 Dec 2022 at 12:21, Gilles Sadowski wrote: > > > > So the issue with staging the RC site to home.apache.org does not > > apply when staged to the commons.apache.org. > > > > You could perhaps (FTR) file a JIRA issue to INFRA. Since I had deleted the site from my home area I uploaded it a

Re: [Lang] "CalendarUtilsTest" fails, or not...

2022-12-07 Thread Gilles Sadowski
Le mer. 7 déc. 2022 à 10:04, sebb a écrit : > > This could be caused by tests occurring in random order. If there is a > test that changes the global locale, and fails to reset it, behaviour > will depend on when the failing test is run in relation to others. If > you still have the logs, try comp

Re: Math: Yearly patch for commons-math3

2022-12-07 Thread Gilles Sadowski
Le mer. 7 déc. 2022 à 08:23, Jochen Wiedmann a écrit : > > Hi, David, > > if you want to be sure, that commons-math3 is being maintained, To be clear, "Commons Math" (CM) v3.x has not been maintained for years now (since it was *agreed* to develop a new major version) in accordance with the polic

Re: [Lang] "CalendarUtilsTest" fails, or not...

2022-12-07 Thread sebb
This could be caused by tests occurring in random order. If there is a test that changes the global locale, and fails to reset it, behaviour will depend on when the failing test is run in relation to others. If you still have the logs, try comparing the order of tests. On Wed, 7 Dec 2022 at 01:34,