Re: [beanutils] Java plaform for 2.0

2024-09-25 Thread Melloware Inc
+1 for Java8 if it speeds this up! On Wed, Sep 25, 2024 at 3:46 PM Josh Fenlason wrote: > While some might have some preferences on more recent Java versions, I > haven't seen any objections to Java 8. Staying on Java 8 shouldn't really > cause issues for anyone. Can we settle on Java 8 so thi

Re: [beanutils] For 2.0, WeakFastHashMap vs ConcurrentHashMap

2024-09-14 Thread Melloware Inc
, Sep 14, 2024 at 9:01 AM Xeno Amess wrote: > why not write an email to lea ..maybe he be so kind that would be glad to > offer one mit-like license copy of that class > > From: Melloware Inc > Sent: Saturday, September 14, 2024 8:32:38 PM > T

Re: [beanutils] For 2.0, WeakFastHashMap vs ConcurrentHashMap

2024-09-14 Thread Melloware Inc
I submitted this PR years ago using ConcurrentWeakKeyHashMap from Doug Lea and the Netty team but Gary had concerns from legal about being able to use it. PR is here: https://github.com/apache/commons-beanutils/pull/56 On Sat, Sep 14, 2024 at 7:22 AM Xeno Amess wrote: > I thought old d-lea bro

Re: [beanutils] Java plaform for 2.0

2024-09-12 Thread Melloware Inc
My vote would be for 11 but I am ok with 8 if people feel strongly. On Thu, Sep 12, 2024 at 1:21 PM Gary D. Gregory wrote: > Hi All, > > Any thoughts on the minimum Java platform requirement for 2.0? > > Options are (IMO): 8, 11, 17, or 21. > > Some perhaps helpful information: > > - > https://w

Re: [beanutils] For 2.0, WeakFastHashMap vs ConcurrentHashMap

2024-09-12 Thread Melloware Inc
I think this is a good idea. On Thu, Sep 12, 2024 at 1:00 PM Gary D. Gregory wrote: > Hi All, > > For the upcoming 2.0.0-M1, I plan on replacing the custom WeakFastHashMap > with the stock ConcurrentHashMap. > > If you think this is a bad idea, please tell us why. > > Gary > > --

Re: [beanutils] Should Commons BeanUtil types implement Serializable

2024-09-03 Thread Melloware Inc
+1 from me. On Tue, Sep 3, 2024 at 12:51 PM Gary D. Gregory wrote: > Hi All, > > Considering the long history of problematic Serializable implementations > throughout the Java ecosystem, not just in Commons, I propose that no > BeanUtils types implement Serializable in the upcoming new major ver

Re: [beanutils] Thoughts on PR https://github.com/apache/commons-beanutils/pull/276

2024-09-03 Thread Melloware Inc
. Gregory wrote: > On 2024/08/31 12:44:19 Melloware Inc wrote: > > I feel like this PR is a good idea. Just from a safety perspective and > not > > accidentally logging a password. > > The PR does nothing to avoid logging passwords. It only plays games when a > bean implem

Re: [beanutils] BeanUtilsBean2 vs BeanUtilsBean, ConvertUtilsBean2 vs ConvertUtilsBean

2024-09-03 Thread Melloware Inc
ry > > On Sun, Sep 1, 2024 at 8:00 AM Melloware Inc > wrote: > > > > +1 for Gary's second option as well. > > > > On Sun, Sep 1, 2024 at 3:47 AM Niall Pemberton < > niall.pember...@gmail.com> > > wrote: > > > > > On Sat, 31 Aug 2024

Re: [beanutils] BeanUtilsBean2 vs BeanUtilsBean, ConvertUtilsBean2 vs ConvertUtilsBean

2024-09-01 Thread Melloware Inc
+1 for Gary's second option as well. On Sun, Sep 1, 2024 at 3:47 AM Niall Pemberton wrote: > On Sat, 31 Aug 2024 at 20:45, Dávid Szigecsán wrote: > > > Hi, > > > > While I'm still getting familiar with things here, I'd like to share my > > thoughts on this issue. In my view, version 2.0 typical

Re: [beanutils] Thoughts on PR https://github.com/apache/commons-beanutils/pull/276

2024-08-31 Thread Melloware Inc
I feel like this PR is a good idea. Just from a safety perspective and not accidentally logging a password. On Mon, Aug 26, 2024 at 5:41 PM Gary D. Gregory wrote: > Hi All, > > Does anyone have thoughts on PR > https://github.com/apache/commons-beanutils/pull/276 ? > > TY, > Gary > > --

Re: [beanutils] any plan for a new release of beanutils?

2024-08-17 Thread Melloware Inc
2024 at 9:48 AM Gary Gregory wrote: > Why not help resolve one of the last issues, if not the last for 2.0 then: > pulling up the "2" type(s?) into their super types (I think there is only > one). The last time I tried, some tests failed. > > Gary > > On Sat, Aug

Re: [beanutils] any plan for a new release of beanutils?

2024-08-17 Thread Melloware Inc
Jia, Sadly it's the same reason I forked it and released it to Maven Central. My client needed to get rid of commons collections3 and BeanUtils 1.9.4 is tied to it. We wanted to only have Commons Collections4 in all our code. https://github.com/melloware/commons-beanutils2 com.melloware c

Re: [VOTE] Release Apache Commons Compress 1.26.1 based on RC1

2024-03-06 Thread Melloware Inc
+1 (non-binding) I only checked it out and tested it locally with our application. On Tue, Mar 5, 2024 at 5:43 PM Gary Gregory wrote: > We have fixed a few bugs and added some enhancements since Apache > Commons Compress 1.26.0 was released, so I would like to release > Apache Commons Compress

Re: [all] SBOM Generation

2022-07-17 Thread Melloware Inc
Matt, I am a member of a few other open source Java libs and I am interested in what you come up with to follow your lead and add SBOM to them as well. The more pervasive we can make it the better for the whole Java ecosystem overall! Melloware @melloware on GitHub > On Jul 17, 2022, at 12:16

Re: [beanutils]

2022-04-20 Thread Melloware Inc
gt;> On Apr 20, 2022, at 16:19, Melloware Inc wrote: >> >> It was supposed to be temporary until Apache released 2.0. It’s been over >> 5 years since last beanutils release so it’s a good thing I did in my >> opinion. >> >> Melloware >> @mello

Re: [beanutils]

2022-04-20 Thread Melloware Inc
It was supposed to be temporary until Apache released 2.0. It’s been over 5 years since last beanutils release so it’s a good thing I did in my opinion. Melloware @melloware on GitHub > On Apr 20, 2022, at 3:31 PM, Gary Gregory wrote: > > You are crearting jar hell by reusing the Apache pa

Re: [fileupload] jakarta versus javax?

2022-03-30 Thread Melloware Inc
With PrimeFaces we use a special plug-in for Shade that builds a second jar that renames javax to Jakarta everywhere and in maven central it adds the Jakarta classifier to the jar so we can have both javax and Jakarta versions built from the same code base. See: https://github.com/primefaces/

Re: GitHub license display confused by LICENSE-header.txt

2021-03-08 Thread Melloware Inc
In commons beanutils we recommend using /src/conf for these type of files. Sent from my iPhone > On Mar 8, 2021, at 8:13 PM, sebb wrote: > > On Tue, 9 Mar 2021 at 01:08, Bernd Eckenfels wrote: >> >> Checkstyle-header.txt sounds good and maybe also moving it to a subdir like >> src/build/ o

Re: [NET] org.apache.commons.net.SocketClient and Closeable

2020-09-08 Thread Melloware Inc
I agree that would be expected behavior and allow it to work in try with resources. Sent from my iPhone > On Sep 8, 2020, at 7:33 PM, Gary Gregory wrote: > > Hi All, > > It seems to me that org.apache.commons.net.SocketClient should > implement Closeable where close() can be implemented as

Re: [All][Geometry] Commit log (Was: [GitHub] ...)

2020-07-05 Thread Melloware Inc
Here is an excellent blog post summarizing what makes good commit messages: https://chris.beams.io/posts/git-commit/ On Sun, Jul 5, 2020 at 7:38 AM Matt Juntunen wrote: > Yes, I should have modified that commit message to indicate that the > change was warranted. > -Matt > ___

Re: [test] Bug in StringSubstitutor?

2020-07-01 Thread Melloware Inc
Gary, I agree with you it’s a bug. I would not expect that behavior from that method. Mello > On Jun 30, 2020, at 8:25 PM, Gary Gregory wrote: > > Hi All: > > I think we might have a bug in StringSubstitutor exemplified in a comment I > just added in: > > org.apache.commons.text.StringS

Re: [io] can we delete release 20030203.000550 in maven central?

2020-06-14 Thread Melloware Inc
Gary, Maven Central Search does not. Se ethos URL: https://search.maven.org/search?q=g:commons-io Commons-IO 20030203.000550 is shown as the latest version incorrectly. Mello On Sun, Jun 14, 2020 at 10:29 AM Gary Gregory wrote: > I'm not sure what you are using, but Maven Central sorts by rel

[beanutils2] CVE-2014-0114 Pull Request

2019-05-23 Thread Melloware Inc
Hey All!, First time contributor here. My company has a corporate goal to only use open source libraries with NO open Security CVE's marked as critical. BeanUtils has CVE-2014-0114 marked as critical so I opened a ticket: https://issues.apache.org/jira/browse/BEANUTILS-520 I submitted my first