[GitHub] [myfaces-tobago] lofwyr14 merged pull request #342: demo: check last released versions

2021-02-10 Thread GitBox
lofwyr14 merged pull request #342: URL: https://github.com/apache/myfaces-tobago/pull/342 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to

[GitHub] [myfaces-tobago] lofwyr14 opened a new pull request #342: demo: check last released versions

2021-02-10 Thread GitBox
lofwyr14 opened a new pull request #342: URL: https://github.com/apache/myfaces-tobago/pull/342 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL

Re: [VOTE] release of MyFaces Core 2.3-next-M5

2021-02-10 Thread Thomas Andraschko
+1 Bill Lucy schrieb am Do., 11. Feb. 2021, 00:46: > Thanks for running this Paul, looks good to me > > +1 > > On Wed, Feb 10, 2021 at 3:45 PM Paul Nicolucci > wrote: > >> Hi, >> >> I was running the needed tasks to get the 2.3-next-M5 release of Apache >> MyFaces core out. >> >> Please note

[GitHub] [myfaces-tobago] lofwyr14 closed pull request #341: demo: check last released versions

2021-02-10 Thread GitBox
lofwyr14 closed pull request #341: URL: https://github.com/apache/myfaces-tobago/pull/341 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to

[GitHub] [myfaces-tobago] lofwyr14 opened a new pull request #341: demo: check last released versions

2021-02-10 Thread GitBox
lofwyr14 opened a new pull request #341: URL: https://github.com/apache/myfaces-tobago/pull/341 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL

RE: [VOTE] release of MyFaces Core 2.3-next-M5

2021-02-10 Thread Czarnecki, Piotr
+1 Von: Paul Nicolucci Gesendet: Mittwoch, 10. Februar 2021 21:44 An: MyFaces Development Betreff: [VOTE] release of MyFaces Core 2.3-next-M5 Hi, I was running the needed tasks to get the 2.3-next-M5 release of Apache MyFaces core out. Please note that this vote concerns all of the

[jira] [Created] (TRINIDAD-2567) Trinidad secret generation is not thread-safe

2021-02-10 Thread Kyle Stiemann (Jira)
Kyle Stiemann created TRINIDAD-2567: --- Summary: Trinidad secret generation is not thread-safe Key: TRINIDAD-2567 URL: https://issues.apache.org/jira/browse/TRINIDAD-2567 Project: MyFaces Trinidad

Re: [VOTE] release of MyFaces Core 2.3-next-M5

2021-02-10 Thread Bill Lucy
Thanks for running this Paul, looks good to me +1 On Wed, Feb 10, 2021 at 3:45 PM Paul Nicolucci wrote: > Hi, > > I was running the needed tasks to get the 2.3-next-M5 release of Apache > MyFaces core out. > > Please note that this vote concerns all of the following parts: > 1. Maven

RE: Dependabot config for MyFaces Core?

2021-02-10 Thread Volodymyr Siedlecki
+1I peeked around the Tobago GitHub page, and the dependabot feature looked pretty nice.I think some automation would be good to have -- would be easier for us to know which dependencies could/should be updated.Volodymyr     - Original message -From: Bernd Bohmann To: MyFaces Development

[GitHub] [myfaces] bohmber merged pull request #176: docs(ci): upper case file name

2021-02-10 Thread GitBox
bohmber merged pull request #176: URL: https://github.com/apache/myfaces/pull/176 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to

[GitHub] [myfaces] bohmber opened a new pull request #176: docs(ci): upper case file name

2021-02-10 Thread GitBox
bohmber opened a new pull request #176: URL: https://github.com/apache/myfaces/pull/176 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to

Re: Dependabot config for MyFaces Core?

2021-02-10 Thread Bernd Bohmann
Maven plugins and Master pom updates as well? Of course we have dependencies. I don't want to go into this dependencies or not dependencies discussion. What I see is that many of the versions are outdated. I would take any automated help! Regards Bernd On Wed, Feb 10, 2021 at 4:46 PM Thomas

Re: Dependabot config for MyFaces Core?

2021-02-10 Thread Thomas Andraschko
+0 we dont have dependencies, only for testing and building and IMO the bot is only nice to get updates for real dependencies, which could contain fixes and security fixes Am Mi., 10. Feb. 2021 um 16:42 Uhr schrieb Bernd Bohmann : > Hello Team, > > any interest in adding dependabot

Dependabot config for MyFaces Core?

2021-02-10 Thread Bernd Bohmann
Hello Team, any interest in adding dependabot configuration to MyFaces Core? I have added it to the Tobago and MyFaces Master Pom Projects. https://docs.github.com/en/github/administering-a-repository/keeping-your-dependencies-updated-automatically Regards Bernd

[GitHub] [myfaces-master-pom] bohmber merged pull request #18: Bump maven-pmd-plugin from 2.5 to 3.14.0

2021-02-10 Thread GitBox
bohmber merged pull request #18: URL: https://github.com/apache/myfaces-master-pom/pull/18 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above

[GitHub] [myfaces-master-pom] dependabot[bot] opened a new pull request #18: Bump maven-pmd-plugin from 2.5 to 3.14.0

2021-02-10 Thread GitBox
dependabot[bot] opened a new pull request #18: URL: https://github.com/apache/myfaces-master-pom/pull/18 Bumps [maven-pmd-plugin](https://github.com/apache/maven-pmd-plugin) from 2.5 to 3.14.0. Commits

[GitHub] [myfaces-master-pom] bohmber merged pull request #17: Bump findbugs-maven-plugin from 2.3.1 to 3.0.5

2021-02-10 Thread GitBox
bohmber merged pull request #17: URL: https://github.com/apache/myfaces-master-pom/pull/17 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above

[GitHub] [myfaces-master-pom] bohmber merged pull request #16: Bump jdepend-maven-plugin from 2.0-beta-2 to 2.0

2021-02-10 Thread GitBox
bohmber merged pull request #16: URL: https://github.com/apache/myfaces-master-pom/pull/16 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above

[GitHub] [myfaces-master-pom] dependabot[bot] opened a new pull request #15: Bump maven-javadoc-plugin from 2.8 to 3.2.0

2021-02-10 Thread GitBox
dependabot[bot] opened a new pull request #15: URL: https://github.com/apache/myfaces-master-pom/pull/15 Bumps [maven-javadoc-plugin](https://github.com/apache/maven-javadoc-plugin) from 2.8 to 3.2.0. Commits

[GitHub] [myfaces-master-pom] bohmber merged pull request #15: Bump maven-javadoc-plugin from 2.8 to 3.2.0

2021-02-10 Thread GitBox
bohmber merged pull request #15: URL: https://github.com/apache/myfaces-master-pom/pull/15 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above

[GitHub] [myfaces-master-pom] bohmber merged pull request #14: Bump maven-compiler-plugin from 2.3.2 to 3.8.1

2021-02-10 Thread GitBox
bohmber merged pull request #14: URL: https://github.com/apache/myfaces-master-pom/pull/14 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above

[GitHub] [myfaces-master-pom] dependabot[bot] opened a new pull request #16: Bump jdepend-maven-plugin from 2.0-beta-2 to 2.0

2021-02-10 Thread GitBox
dependabot[bot] opened a new pull request #16: URL: https://github.com/apache/myfaces-master-pom/pull/16 Bumps jdepend-maven-plugin from 2.0-beta-2 to 2.0. [![Dependabot compatibility

[GitHub] [myfaces-master-pom] dependabot[bot] opened a new pull request #17: Bump findbugs-maven-plugin from 2.3.1 to 3.0.5

2021-02-10 Thread GitBox
dependabot[bot] opened a new pull request #17: URL: https://github.com/apache/myfaces-master-pom/pull/17 Bumps [findbugs-maven-plugin](https://github.com/gleclaire/findbugs-maven-plugin) from 2.3.1 to 3.0.5. Commits See full diff in

[GitHub] [myfaces-master-pom] dependabot[bot] opened a new pull request #14: Bump maven-compiler-plugin from 2.3.2 to 3.8.1

2021-02-10 Thread GitBox
dependabot[bot] opened a new pull request #14: URL: https://github.com/apache/myfaces-master-pom/pull/14 Bumps [maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) from 2.3.2 to 3.8.1. Commits

[GitHub] [myfaces-master-pom] bohmber merged pull request #13: Bump maven-resources-plugin from 2.5 to 3.2.0

2021-02-10 Thread GitBox
bohmber merged pull request #13: URL: https://github.com/apache/myfaces-master-pom/pull/13 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above

[GitHub] [myfaces-master-pom] bohmber merged pull request #12: Bump maven-checkstyle-plugin from 2.17 to 3.0.0

2021-02-10 Thread GitBox
bohmber merged pull request #12: URL: https://github.com/apache/myfaces-master-pom/pull/12 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above

[GitHub] [myfaces-master-pom] bohmber merged pull request #11: Bump maven-source-plugin from 2.1.2 to 3.2.1

2021-02-10 Thread GitBox
bohmber merged pull request #11: URL: https://github.com/apache/myfaces-master-pom/pull/11 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above

[GitHub] [myfaces-master-pom] dependabot[bot] opened a new pull request #13: Bump maven-resources-plugin from 2.5 to 3.2.0

2021-02-10 Thread GitBox
dependabot[bot] opened a new pull request #13: URL: https://github.com/apache/myfaces-master-pom/pull/13 Bumps [maven-resources-plugin](https://github.com/apache/maven-resources-plugin) from 2.5 to 3.2.0. Commits

[GitHub] [myfaces-master-pom] bohmber merged pull request #10: Bump maven-project-info-reports-plugin from 2.4 to 3.1.1

2021-02-10 Thread GitBox
bohmber merged pull request #10: URL: https://github.com/apache/myfaces-master-pom/pull/10 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above

[GitHub] [myfaces-master-pom] bohmber merged pull request #9: Bump maven-assembly-plugin from 2.5.4 to 3.3.0

2021-02-10 Thread GitBox
bohmber merged pull request #9: URL: https://github.com/apache/myfaces-master-pom/pull/9 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to

[GitHub] [myfaces-master-pom] dependabot[bot] opened a new pull request #10: Bump maven-project-info-reports-plugin from 2.4 to 3.1.1

2021-02-10 Thread GitBox
dependabot[bot] opened a new pull request #10: URL: https://github.com/apache/myfaces-master-pom/pull/10 Bumps [maven-project-info-reports-plugin](https://github.com/apache/maven-project-info-reports-plugin) from 2.4 to 3.1.1. Commits

[GitHub] [myfaces-master-pom] dependabot[bot] opened a new pull request #9: Bump maven-assembly-plugin from 2.5.4 to 3.3.0

2021-02-10 Thread GitBox
dependabot[bot] opened a new pull request #9: URL: https://github.com/apache/myfaces-master-pom/pull/9 Bumps [maven-assembly-plugin](https://github.com/apache/maven-assembly-plugin) from 2.5.4 to 3.3.0. Commits

[GitHub] [myfaces-master-pom] dependabot[bot] opened a new pull request #11: Bump maven-source-plugin from 2.1.2 to 3.2.1

2021-02-10 Thread GitBox
dependabot[bot] opened a new pull request #11: URL: https://github.com/apache/myfaces-master-pom/pull/11 Bumps [maven-source-plugin](https://github.com/apache/maven-source-plugin) from 2.1.2 to 3.2.1. Commits

[GitHub] [myfaces-master-pom] dependabot[bot] opened a new pull request #12: Bump maven-checkstyle-plugin from 2.17 to 3.0.0

2021-02-10 Thread GitBox
dependabot[bot] opened a new pull request #12: URL: https://github.com/apache/myfaces-master-pom/pull/12 Bumps [maven-checkstyle-plugin](https://github.com/apache/maven-checkstyle-plugin) from 2.17 to 3.0.0. Commits

[GitHub] [myfaces-master-pom] bohmber merged pull request #8: Bump checkstyle-rules from 8 to 13

2021-02-10 Thread GitBox
bohmber merged pull request #8: URL: https://github.com/apache/myfaces-master-pom/pull/8 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to

[GitHub] [myfaces-master-pom] bohmber merged pull request #5: Bump maven-jar-plugin from 2.3.2 to 3.2.0

2021-02-10 Thread GitBox
bohmber merged pull request #5: URL: https://github.com/apache/myfaces-master-pom/pull/5 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to

[GitHub] [myfaces-master-pom] bohmber merged pull request #7: Bump maven-surefire-report-plugin from 2.9 to 2.22.2

2021-02-10 Thread GitBox
bohmber merged pull request #7: URL: https://github.com/apache/myfaces-master-pom/pull/7 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to

[GitHub] [myfaces-master-pom] bohmber merged pull request #6: Bump maven-surefire-plugin from 2.9 to 2.22.2

2021-02-10 Thread GitBox
bohmber merged pull request #6: URL: https://github.com/apache/myfaces-master-pom/pull/6 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to

[GitHub] [myfaces-master-pom] bohmber merged pull request #4: Bump apache from 21 to 23

2021-02-10 Thread GitBox
bohmber merged pull request #4: URL: https://github.com/apache/myfaces-master-pom/pull/4 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to

[GitHub] [myfaces-master-pom] dependabot[bot] opened a new pull request #7: Bump maven-surefire-report-plugin from 2.9 to 2.22.2

2021-02-10 Thread GitBox
dependabot[bot] opened a new pull request #7: URL: https://github.com/apache/myfaces-master-pom/pull/7 Bumps [maven-surefire-report-plugin](https://github.com/apache/maven-surefire) from 2.9 to 2.22.2. Commits

[GitHub] [myfaces-master-pom] dependabot[bot] opened a new pull request #8: Bump checkstyle-rules from 8 to 13

2021-02-10 Thread GitBox
dependabot[bot] opened a new pull request #8: URL: https://github.com/apache/myfaces-master-pom/pull/8 Bumps checkstyle-rules from 8 to 13. [![Dependabot compatibility

[GitHub] [myfaces-master-pom] dependabot[bot] opened a new pull request #5: Bump maven-jar-plugin from 2.3.2 to 3.2.0

2021-02-10 Thread GitBox
dependabot[bot] opened a new pull request #5: URL: https://github.com/apache/myfaces-master-pom/pull/5 Bumps [maven-jar-plugin](https://github.com/apache/maven-jar-plugin) from 2.3.2 to 3.2.0. Commits

[GitHub] [myfaces-master-pom] dependabot[bot] opened a new pull request #6: Bump maven-surefire-plugin from 2.9 to 2.22.2

2021-02-10 Thread GitBox
dependabot[bot] opened a new pull request #6: URL: https://github.com/apache/myfaces-master-pom/pull/6 Bumps [maven-surefire-plugin](https://github.com/apache/maven-surefire) from 2.9 to 2.22.2. Commits

[GitHub] [myfaces-master-pom] dependabot[bot] opened a new pull request #3: Bump commons-logging from 1.1.1 to 1.2

2021-02-10 Thread GitBox
dependabot[bot] opened a new pull request #3: URL: https://github.com/apache/myfaces-master-pom/pull/3 Bumps commons-logging from 1.1.1 to 1.2. [![Dependabot compatibility

[GitHub] [myfaces-master-pom] dependabot[bot] opened a new pull request #4: Bump apache from 21 to 23

2021-02-10 Thread GitBox
dependabot[bot] opened a new pull request #4: URL: https://github.com/apache/myfaces-master-pom/pull/4 Bumps [apache](https://github.com/apache/maven-apache-parent) from 21 to 23. Commits See full diff in https://github.com/apache/maven-apache-parent/commits;>compare view

[GitHub] [myfaces-master-pom] bohmber merged pull request #2: chore(ci): myfaces ci github action and dependabot config

2021-02-10 Thread GitBox
bohmber merged pull request #2: URL: https://github.com/apache/myfaces-master-pom/pull/2 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to

[GitHub] [myfaces-master-pom] bohmber opened a new pull request #2: chore(ci): myfaces ci github action and dependabot config

2021-02-10 Thread GitBox
bohmber opened a new pull request #2: URL: https://github.com/apache/myfaces-master-pom/pull/2 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL

[GitHub] [myfaces-tobago] dependabot[bot] opened a new pull request #340: chore(deps): bump ant-apache-regexp from 1.10.8 to 1.10.9

2021-02-10 Thread GitBox
dependabot[bot] opened a new pull request #340: URL: https://github.com/apache/myfaces-tobago/pull/340 Bumps ant-apache-regexp from 1.10.8 to 1.10.9. [![Dependabot compatibility

[GitHub] [myfaces-tobago] bohmber merged pull request #325: chore(deps): bump maven-source-plugin from 3.0.1 to 3.2.1

2021-02-10 Thread GitBox
bohmber merged pull request #325: URL: https://github.com/apache/myfaces-tobago/pull/325 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to

[GitHub] [myfaces-tobago] dependabot[bot] opened a new pull request #339: chore(deps): bump maven-remote-resources-plugin from 1.5 to 1.7.0

2021-02-10 Thread GitBox
dependabot[bot] opened a new pull request #339: URL: https://github.com/apache/myfaces-tobago/pull/339 Bumps [maven-remote-resources-plugin](https://github.com/apache/maven-remote-resources-plugin) from 1.5 to 1.7.0. Commits

[GitHub] [myfaces-tobago] dependabot[bot] closed pull request #337: chore(deps): bump jetty-maven-plugin from 9.4.36.v20210114 to 10.0.0

2021-02-10 Thread GitBox
dependabot[bot] closed pull request #337: URL: https://github.com/apache/myfaces-tobago/pull/337 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL

[GitHub] [myfaces-tobago] bohmber merged pull request #338: chore(deps): stay on jetty 9 for tobago-4.x

2021-02-10 Thread GitBox
bohmber merged pull request #338: URL: https://github.com/apache/myfaces-tobago/pull/338 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to

[GitHub] [myfaces-tobago] lofwyr14 commented on pull request #337: chore(deps): bump jetty-maven-plugin from 9.4.36.v20210114 to 10.0.0

2021-02-10 Thread GitBox
lofwyr14 commented on pull request #337: URL: https://github.com/apache/myfaces-tobago/pull/337#issuecomment-776534787 I would like to stay on the 9.x series, to be sure it doesn't need newer APIs. This is an automated

[GitHub] [myfaces-tobago] dependabot[bot] commented on pull request #337: chore(deps): bump jetty-maven-plugin from 9.4.36.v20210114 to 10.0.0

2021-02-10 Thread GitBox
dependabot[bot] commented on pull request #337: URL: https://github.com/apache/myfaces-tobago/pull/337#issuecomment-776534705 Looks like org.eclipse.jetty:jetty-maven-plugin is no longer being updated by Dependabot, so this is no longer needed.

[GitHub] [myfaces-tobago] bohmber opened a new pull request #338: chore(deps): stay on jetty 9 for tobago-4.x

2021-02-10 Thread GitBox
bohmber opened a new pull request #338: URL: https://github.com/apache/myfaces-tobago/pull/338 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL

[GitHub] [myfaces-tobago] bohmber merged pull request #334: chore(deps): bump maven-compiler-plugin from 3.8.0 to 3.8.1

2021-02-10 Thread GitBox
bohmber merged pull request #334: URL: https://github.com/apache/myfaces-tobago/pull/334 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to

[GitHub] [myfaces-tobago] dependabot[bot] opened a new pull request #337: chore(deps): bump jetty-maven-plugin from 9.4.36.v20210114 to 10.0.0

2021-02-10 Thread GitBox
dependabot[bot] opened a new pull request #337: URL: https://github.com/apache/myfaces-tobago/pull/337 Bumps [jetty-maven-plugin](https://github.com/eclipse/jetty.project) from 9.4.36.v20210114 to 10.0.0. Release notes Sourced from

[GitHub] [myfaces-tobago] bohmber merged pull request #336: chore(deps): small cargo fixes

2021-02-10 Thread GitBox
bohmber merged pull request #336: URL: https://github.com/apache/myfaces-tobago/pull/336 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to

[GitHub] [myfaces-tobago] bohmber opened a new pull request #336: chore(deps): small cargo fixes

2021-02-10 Thread GitBox
bohmber opened a new pull request #336: URL: https://github.com/apache/myfaces-tobago/pull/336 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL

[GitHub] [myfaces-tobago] lofwyr14 merged pull request #335: update MyFaces to 2.2.14

2021-02-10 Thread GitBox
lofwyr14 merged pull request #335: URL: https://github.com/apache/myfaces-tobago/pull/335 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to

[GitHub] [myfaces-tobago] lofwyr14 opened a new pull request #335: update MyFaces to 2.2.14

2021-02-10 Thread GitBox
lofwyr14 opened a new pull request #335: URL: https://github.com/apache/myfaces-tobago/pull/335 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL

[GitHub] [myfaces-tobago] bohmber merged pull request #331: chore(deps): bump cargo-maven2-plugin from 1.4.13 to 1.8.5

2021-02-10 Thread GitBox
bohmber merged pull request #331: URL: https://github.com/apache/myfaces-tobago/pull/331 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to

[GitHub] [myfaces-tobago] dependabot[bot] opened a new pull request #334: chore(deps): bump maven-compiler-plugin from 3.8.0 to 3.8.1

2021-02-10 Thread GitBox
dependabot[bot] opened a new pull request #334: URL: https://github.com/apache/myfaces-tobago/pull/334 Bumps [maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) from 3.8.0 to 3.8.1. Commits

[GitHub] [myfaces-tobago] dependabot[bot] opened a new pull request #333: chore(deps): bump wildfly-maven-plugin from 1.0.2.Final to 2.0.2.Final

2021-02-10 Thread GitBox
dependabot[bot] opened a new pull request #333: URL: https://github.com/apache/myfaces-tobago/pull/333 Bumps [wildfly-maven-plugin](https://github.com/wildfly/wildfly-maven-plugin) from 1.0.2.Final to 2.0.2.Final. Release notes Sourced from