Re: [All][RNG] FindBugs discontinued

2018-02-16 Thread Jacques Le Roux
OK, so I'll wait an official announce from http://findbugs.sourceforge.net/ Thanks Jacques Le 16/02/2018 à 17:25, Gilles a écrit : On Fri, 16 Feb 2018 15:02:32 +0100, Jacques Le Roux wrote: Hi Jochen, Actually Gilles suggested to use spotbugs Yes. The SpotBugs web site mentions

Re: [All][RNG] FindBugs discontinued

2018-02-16 Thread Jacques Le Roux
, Jacques Le Roux <jacques.le.r...@les7arts.com> wrote: Le 14/02/2018 à 19:02, Gilles a écrit : FindBugs chokes on Java 9 "module-info" files[1] and the project has been shut down Hi Gilles, Do you have a reference where it's said that FindBugs has been shut down?

Re: [All][RNG] FindBugs discontinued

2018-02-16 Thread Jacques Le Roux
Le 14/02/2018 à 19:02, Gilles a écrit : FindBugs chokes on Java 9 "module-info" files[1] and the project has been shut down Hi Gilles, Do you have a reference where it's said that FindBugs has been shut down? Thanks Jacques

Re: Security mailing list

2017-12-17 Thread Jacques Le Roux
+1 Jacques Le 17/12/2017 à 12:22, Romain Manni-Bucau a écrit : +1 Le 17 déc. 2017 12:14, "Mark Thomas" a écrit : On 15/12/2017 11:13, Jochen Wiedmann wrote: Hi, over the last months we have definitely seen our share of security related issues. However, I also noticed

Re: Eirik Bjørsnøs' notsoserial deserialization protection agent, for Commons?

2015-11-18 Thread Jacques Le Roux
Le 19/11/2015 01:24, Bertrand Delacretaz a écrit : On Wed, Nov 18, 2015 at 7:16 PM, Torsten Curdt wrote: ...it feels a bit like putting a thumb into a hole to stop the water. People need to re-think their use of reflection and serialization - not cover up bad engineering

Re: svn commit: r1668511 - in /commons/proper/lang/trunk/src: main/java/org/apache/commons/lang3/time/ test/java/org/apache/commons/lang3/time/

2015-03-23 Thread Jacques Le Roux
Hi All, In case it would help, to automate this we (OFBiz team) use Jira release notes For instance you have https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310481version=1232 Simply put the Jira ref in your commits comments. This also provides a direct access to Fisheye

Re: [dbutils] Close JIRA tickets that lack activity

2015-02-25 Thread Jacques Le Roux
+1 Jacques Le 25/02/2015 08:51, Mark Thomas a écrit : On 25/02/2015 03:31, Carl Hall wrote: I'd like to start closing JIRA tickets that haven't seen any response or activity in a long time. Why? Any objections to cleaning out old JIRA tickets without activity? Yes. A bug is still a bug

Re: Anyone interested in regular expressions, again?

2015-01-31 Thread Jacques Le Roux
We are still relying on a kind of Apache ORO in OFBiz, exactly jakarta-oro-2.0.8.jar http://jakarta.apache.org/site/news/news-2010-q3.html#20100901.2 While working on https://issues.apache.org/jira/browse/OFBIZ-5395 (out of scope here) I noted the same reference than Bruno for the benchmark.