[GIT] - Move sources repositories to gitbox

Hi all, We must move our source repositories to the Apache Gitbox. The following repositories are concerned:  - shiro-site.git  - shiro.git You will have to update your git remote locally after the migration. JB is volunteer to deal with infra for the operation. Thoughts? Regards, -- Franço

[VOTE] Release Apache Shiro 1.4.1

Hi all, I submit Apache Shiro 1.4.1 to your vote. This is a maintenance release on the 1.4.x series, bringing some improvements and bug fixes (with a special work on OSGi). Release Notes: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310950&version=12344826 Staging Repositor

[RESULT] [VOTE] Release Apache Shiro 1.4.1

Hi, This vote passed with the following result: +1 (binding): Les Hazlewood, Brian Demers, François Papon +1 (non binding): Tamás Cservenák, Jean-Baptiste Onofré, Stephen Agyepong I'm promoting the artifacts on Central and dist.apache.org, update website and Jira, I will then announce the relea

[ANN] Apache Shiro 1.4.1 released

The Apache Shiro team is pleased to announce the release of Apache Shiro version 1.4.1. This is a feature release for 1.x. This release includes 27 issues resolved since the 1.4.0 release and is available for Download now. It brings improvements and bug fixes especially: *  Fix some OGSi and Apa

[VOTE] - Release Apache Shiro 1.4.2

|Hi,| | | |This is a call to vote in favor of releasing Apache Shiro version ||1.4.2||.|   |The ||1||issue solved ||for|1.4.2|||:|   |"Updates the default Cipher mode to GCM in AesCipherService" |||   |The source to be voted upon:| | | |https://gitbox.apache.org/repos/asf/shiro.git/?p=shiro.git;a=c

[VOTE] - Release Apache Shiro 1.4.2

|Hi,| | | |This is a call to vote in favor of releasing Apache Shiro version ||1.4.2||.|   |The ||1||issue solved ||for|1.4.2|||:|   |"Updates the default Cipher mode to GCM in AesCipherService" |||   |The source to be voted upon:| | | |https://gitbox.apache.org/repos/asf/shiro.git/?p=shiro.git;a=c

[VOTE] - Release Apache Shiro 1.4.2

Hi, This a call to vote in favor of releasing Apache Shiro version 1.4.2. The 1 issue solved for 1.4.2: "Updates the default Cipher mode to GCM in AesCipherService" The source to be voted upon: https://gitbox.apache.org/repos/asf/shiro.git/?p=shiro.git;a=commit;h=8cba15e3b05f56c9d37370fc7636cc

[RESULT] [VOTE] Release Apache Shiro 1.4.1

Hi, This vote passed with the following result: +1 (binding): Les Hazlewood, Jean-Baptiste Onofré, Brian Demers, François Papon +1 (non binding): Tamás Cservenák I'm promoting the artifacts on Central and dist.apache.org, update website and Jira. I will then announce the release. Thanks all

[RESULT] [VOTE] Release Apache Shiro 1.4.2

Hi, This vote passed with the following result: +1 (binding): Les Hazlewood, Jean-Baptiste Onofré, Brian Demers, François Papon +1 (non binding): Tamás Cservenák I'm promoting the artifacts on Central and dist.apache.org, update website and Jira. I will then announce the release. Thanks all

[VOTE] Release Apache Shiro 1.5.0

Hi all, I submit Apache Shiro 1.5.0 to your vote. This is a new main release on the 1.5.x series, bringing some improvements and bug fixes. The big part of this release is the min requirement to Java 1.8. Release Notes: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310950&

[RESULT] [VOTE] Release Apache Shiro 1.5.0

Hi, This vote passed with the following result: +1 (binding): Jean-Baptiste Onofré, Les Hazlewood, Colm O hEigeartaigh, Brian Demers, François Papon +1 (non binding): Tamás Cservenák, Benjamin Marwell I'm promoting the artifacts on Central and dist.apache.org, update the website and Jira, I w

[ANNOUNCE] - Apache Shiro 1.5.0 released

The Apache Shiro team is pleased to announce the release of Apache Shiroversion 1.5.0. This is a feature release for 1.x.This release includes 52 issues resolved since the 1.4.2 release and isavailable for Download now.You can take a look on the Release Notes for details:https://issues.apache.org/j

[VOTE] Release Apache Shiro 1.5.1 (take #2)

Hi all, I submit Apache Shiro 1.5.1 to your vote. We resolved 5 issues. Release Notes: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310950&version=12346483 Staging Repository: https://repository.apache.org/content/repositories/orgapacheshiro-1026 Git Tag: shiro-root-1.5.1

[RESULT] [VOTE] Release Apache Shiro 1.5.1

Hi, This vote passed with the following result: +1 (binding): Jean-Baptiste Onofré, Colm O hEigeartaigh, Les Hazlewood, François Papon +1 (non binding): Benjamin Marwell, Steinar Bang, Tamás Cservenák I'm promoting the artifacts on Central and dist.apache.org, update the website and Jira, I w

[ANNOUNCE] - Apache Shiro 1.5.1 released

The Apache Shiro team is pleased to announce the release of Apache Shiro version 1.5.1. This is a feature release for 1.x.This release includes 5 issues resolved since the 1.5.0 release and isavailable for Download now.You can take a look on the Release Notes for details:https://issues.apache.org/j

[VOTE] Release Apache Shiro 1.5.3

Hi all, I submit Apache Shiro 1.5.3 to your vote. This is a new main release on the 1.5.x series, bringing some improvements and bug fixes. Release Notes: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310950&version=12346916 Staging Repository: https://repository.apache.o

Re: [VOTE] Release Apache Shiro 1.5.3

+1 (binding) regards, François fpa...@apache.org Le 26/04/2020 à 21:44, fpa...@apache.org a écrit : > Hi all, > > I submit Apache Shiro 1.5.3 to your vote. > > This is a new main release on the 1.5.x series, bringing some > improvements and bug fixes. > > > Release Notes: > https://issues.apache

[RESULT][VOTE] Release Apache Shiro 1.5.3

Hi, This vote passed with the following result: +1 (binding): Jean-Baptiste Onofré, Colm O hEigeartaigh, Brian Demers, François Papon +1 (non binding): Benjamin Marwell I'm promoting the artifacts on Central and dist.apache.org, update the website and Jira, I will then announce the release.

[ANNOUNCE] - Apache Shiro 1.5.3 released

The Apache Shiro team is pleased to announce the release of Apache Shiro version 1.5.3. This is a feature release for 1.x.This release includes 9 issues resolved since the 1.5.2 release and isavailable for Download now.You can take a look on the Release Notes for details:https://issues.apache.org/j

Re: [DISCUSS] - Move to 2.0.0

Hi all, The 1.5.3 is released now, so I created a branch 1.5.x for the maintenance and move the master to the 2.0.0-SNAPSHOT. We will now review the 2.0.0 backlog on Jira and merge some ideas from this thread. Feel free to create issues related to this next major version and make proposals / PR:

Re: Stepping Down, New Life for Apache Shiro

Hi Les! Thank you very much for all the great work and for leading the project! Your advices on the design are and will be always welcome and very useful! regards, François fpa...@apache.org Le 09/06/2020 à 20:54, Les Hazlewood a écrit : > Hi Apache Shiro devs! > > It has been a while since I'

Re: New PMC Chair Suggestion

Hi, I'm fully agree, Brian is the perfect person to be the new PMC Chair of Apache Shiro. Big +1 for me! regards, François fpa...@apache.org Le 09/06/2020 à 21:07, Les Hazlewood a écrit : > Hi Shiro devs, > > Per my last email, and per https://www.apache.org/dev/pmc.html#newchair, > I'd like t

Re: [VOTE] New Apache Shiro PMC Chair

+1 (binding) regards, François fpa...@apache.org Le 10/06/2020 à 21:20, Les Hazlewood a écrit : > Hi Apache Shiro team, > > Per prior conversation, I have decided to step down as Apache Shiro PMC > Chair. As such, and based on the strong consensus in the previous email > thread, I'm calling for

Re: 2020 September Board Report Draft

+1 Thanks Brian! regards, François fpa...@apache.org Le 08/09/2020 à 16:31, Brian Demers a écrit : > The 2020 September ASF board report is due soon. I've created an initial > draft here: > > https://svn.apache.org/repos/asf/shiro/board/2020-09.txt > > Comments, suggestions, and feedback are w

Re: [GitHub] [shiro-site] infoguru19 opened a new pull request #66: Update README.md

yes right :) François fpa...@apache.org Le 02/10/2020 à 10:53, Mookkiah, Mahendran a écrit : > Another spam. Right? > > Thanks, > Mahendran. > > > On 10/2/20, 3:34 AM, "GitBox" wrote: > > NOTE: This message is from an EXTERNAL SENDER - be CAUTIOUS, particularly > with links and attachments

[VOTE] Release Apache Shiro 1.7.0 - take #2

This is a call to vote in favor of releasing Apache Shiro version 1.7.0 The 7 issues solved for 1.7.0: https://issues.apache.org/jira/issues/?jql=project%20%3D%20SHIRO%20AND%20fixVersion%20%3D%201.7.0 The source to be voted upon: shiro-root-1.7.0-release-vote2 - https://github.com/apache/shiro/t

Re: [VOTE] Release Apache Shiro 1.7.0 - take #2

Hi Jérôme, Thanks for your vote! I can't see your name in the PMCs list but in committers list so your vote would be non-binding. Is it right or may be there is a mistake in the Apache directory: https://people.apache.org/phonebook.html?pmc=shiro

Re: [VOTE] Release Apache Shiro 1.7.0 - take #2

Hi Shiro PMCs, We need one more binding vote ;) regards, François fpa...@apache.org Le 24/10/2020 à 09:52, fpa...@apache.org a écrit : > This is a call to vote in favor of releasing Apache Shiro version 1.7.0 > > The 7 issues solved for 1.7.0: > > https://issues.apache.org/jira/issues/?jql=proj

[RESULT][VOTE] Release Apache Shiro 1.7.0

Hi, This vote passed with the following result: +1 (binding): Brian Demers, François Papon, Jean-Baptiste Onofré +1 (non binding): Benjamin Marwell, Mahendran Mookkiah, Jérôme Leleu I'm promoting the artifacts on Central and dist.apache.org, update the website and Jira, I will then announce the

[ANNOUNCE][CVE-2020-17510] Apache Shiro 1.7.0 released

The Shiro team is pleased to announce the release of Apache Shiro version 1.7.0. This security release contains 7 fixes since the 1.6.0 release and is available for Download now [1]. CVE-2020-17510: Apache Shiro before 1.7.0, when using Apache Shiro with Spring, a specially crafted HTTP

Re: 2021 March Board Report Draft

LGTM! Thanks Brian regards, François fpa...@apache.org Le 09/03/2021 à 22:25, Brian Demers a écrit : > The 2021 March ASF board report is due tomorrow. I've created an initial > draft here: > > https://svn.apache.org/repos/asf/shiro/board/2021-03.txt > > Comments, suggestions, and feedback are

[DISCUSS] - Rename master branch

Hi, I would like to propose to rename all of our git branches as main on all of our branches: - https://github.com/apache/shiro - https://github.com/apache/shiro-site Any objections? regards, -- François fpa...@apache.org

Re: [DISCUSS] - Rename master branch

Hi Arthur, Sending -1 without any explaination won't help :) regards, François fpa...@apache.org Le 16/04/2021 à 20:49, Arthur Okeke a écrit : > -1 > > On 4/16/21, Brian Demers wrote: >> +1 >> >> On Fri, Apr 16, 2021 at 9:01 AM wrote: >> >>> Hi, >>> >>> I would like to propose to rename all o

Re: [DISCUSS] - Rename master branch

Thanks to all! I created the Jira to infra to move forward on this. https://issues.apache.org/jira/browse/INFRA-21748 regards, François fpa...@apache.org Le 16/04/2021 à 15:01, fpa...@apache.org a écrit : > Hi, > > I would like to propose to

[PROPOSAL] - Shiro 2 maven modules

Hi, I would like to start a thread about the Shiro modules for the next 2.x version. I think it would be nice to merge some module in the core module like : - shiro-lang - shiro-config - shiro-event - shiro-cache - shiro-crypto We can also make some code cleanup on some util/tool classes in

Re: Subject: [VOTE] Release Apache Shiro 1.9.1

+1 (binding) Thanks Brian for the release! regards, On 23/06/2022 21:31, Brian Demers wrote: This is a call to vote in favor of releasing Apache Shiro version 1.9.1. We solved 6 Issues: https://issues.apache.org/jira/issues/?jql=project%20%3D%20SHIRO%20AND%20fixVersion%20%3D%201.9.1%20AND%20

Re: [VOTE] Release Apache Shiro 1.10.0

+1 (binding) Thanks Brian! regards, Francois On 07/10/2022 17:46, Brian Demers wrote: This is a call to vote in favor of releasing Apache Shiro version 1.10.0. We solved 6 Issues: https://issues.apache.org/jira/issues/?jql=project%20%3D%20SHIRO%20AND%20fixVersion%20%3D%201.10.0 Maven Stagi

Re: Interested in testing the Jakarta artifacts

Hi Thomas, PR is done and waiting for review before merge into main (https://github.com/apache/shiro/pull/522). I'm waiting for the new next 1.11.x branch after the 1.10.1 release coming next week to cherry-pick and publish the snapshot for 1.11.0. Regards, Francois On 28/10/2022 14:08, T

Re: [VOTE] Release Apache Shiro 1.10.1

+1 (binding) Thanks Benjamin! regards, Francois On 14/11/2022 21:20, Benjamin Marwell wrote: This is a call to vote in favor of releasing Apache Shiro version 1.10.1. We solved 5 Issues: https://issues.apache.org/jira/projects/SHIRO/versions/12352460 Maven Staging repo: https://repository.

Re: 2022 December Board Report Draft

LTGM Thanks Brian! regards, On 16/12/2022 16:38, Brian Demers wrote: The 2022 December ASF board report is due today. I've created an initial draft here: https://svn.apache.org/repos/asf/shiro/board/2022-12.txt Comments, suggestions, and feedback are welcome. Otherwise, it will be submitte

[VOTE] Set minimal JDK11 for Shiro 2.x

Hi, After several discussion on the mailing, I would like to start a vote to set the minimal version of the JDK to the version 11 starting to Shiro 2.x. Vote open for 72 hours: [ ] +1 (set JDK11 min version for Shiro 2.x) [ ] +0 [ ] -1 (please include reasoning) regards, -- -- François

[RESULT][VOTE] Set minimal JDK11 for Shiro 2.x

Hi, This vote passed with 8 (+1) and 2 (0). We can move forward by setting minimal JDK11 on main branch (2.x). The current 1.x branch stay on JDK8 minimal. Thanks to all for your vote! Regards, -- -- François

Re: [VOTE] Release Apache Shiro 2.0.0-alpha-1 (try #2)

+1 (binding) Thanks Lenny! regards, Francois On 28/02/2023 08:13, le...@flowlogix.com wrote: This is a call to vote in favor of releasing Apache Shiro version 2.0.0-alpha-1 (try #2) Maven Staging repo: https://repository.apache.org/content/repositories/orgapacheshiro-1047 https://reposit

Issue tracker

Hi all, As discuss, we moved the Shiro issue tracker from ASF Jira to Github issue and the Jira Shiro project has been update to read only: https://github.com/apache/shiro/issues I am updating the website to update the link. regards, François

[VOTE] Release Apache Shiro 1.12.0

This is a call to vote in favor of releasing Apache Shiro version 1.12.0. We solved 1 Issue: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310950&version=12353403 Maven Staging repo: https://repository.apache.org/content/repositories/orgapacheshiro-1051 Dist Staging Reposit

Re: [VOTE] Release Apache Shiro 1.12.0

+1 (binding) On 11/07/2023 15:57, fpapon wrote: This is a call to vote in favor of releasing Apache Shiro version 1.12.0. We solved 1 Issue: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310950&version=12353403 Maven Staging repo: https://repository.apache.org/con

[RESULT][VOTE] Release Apache Shiro 1.12.0

Hi, This vote passed with the following result: +1 (binding): Brian Demers, Jean-Baptiste Onofré, Benjamin Marwell, François Papon I'll finalize the release process and send the announcements soon. Thanks all for your vote! -- -- François

[ANNOUNCE] Apache Shiro 1.12.0 released

The Shiro team is pleased to announce the release of Apache Shiro version 1.12.0. This security release contains 2 issues since the 1.11.0 release and is available for Download now [1]. Improvement:     [SHIRO-816] - Update shiro-hazelcast to support Hazelcast 5.x Task:     [SHIRO-849] - Add

[ANNOUNCE][CVE-2023-34478] Apache Shiro 1.12.0 released

CVE-2023-34478 Apache Shiro, before 1.12.0 or 2.0.0-alpha-3, may be susceptible to a path traversal attack that results in an authentication bypass when used together with APIs or other web frameworks that route requests based on non-normalized requests. Mitigation: Update to Apache Shiro 1.

Re: [VOTE] Release Apache Shiro 2.0.0-alpha-3

+1 (binding) Thanks Lenny! regards, François On 21/07/2023 22:20, le...@flowlogix.com wrote: This is a call to vote in favor of releasing Apache Shiro version 2.0.0-alpha-3 Maven Staging repo: https://repository.apache.org/content/repositories/orgapacheshiro-1052 https://repository.apache.or

Jenkins vs GitHub Actions

Hi all, As we moved from Jira to Github issue and as we already have Github actions workflow, I would like to start a thread to discuss about the ASF Jenkins. From my side, I think that we can deprecated the Jenkins and only use Github actions to validate the PR and the main/branch builds.

[VOTE] Apache Shiro 1.13.0 release

Hi everyone, I submit Apache Shiro 1.13.0 release to your vote. Release Notes: https://github.com/apache/shiro/releases/tag/untagged-f9fada1d9554474d63b5 Staging Maven repository: https://repository.apache.org/content/repositories/orgapacheshiro-1054 Staging dist repository: https://dist.apach

[CANCEL][VOTE] Apache Shiro 1.13.0 release

Hi, As raise by Lenny, I cancel this vote because of a missing cherry-pick patches. I will relaunch the release process with the patches. Sorry about that. regards, -- -- François

[VOTE] Apache Shiro 1.13.0 release (#2)

Hi everyone, I submit Apache Shiro 1.13.0 release to your vote. Release Notes: https://github.com/apache/shiro/releases/tag/shiro-root-1.13.0 Staging Maven repository: https://repository.apache.org/content/repositories/orgapacheshiro-1056 Staging dist repository: https://dist.apache.org/repos/

[RESULT][VOTE] Apache Shiro 1.13.0 release

Hi, This vote passed with the following result: +1 (binding): Lenny Primak, Jean-Baptiste Onofre, Benjamin Marwell, Brian Demers, François Papon I'm promoting the artifacts on Central and dist.apache.org, I will then announce the release. Thanks all for your vote! -- -- François

[ANNOUNCE] Apache Shiro 1.13.0 with fix CVE-2023-46750

The Apache Shiro team is pleased to announce the release of Apache Shiro version 1.13.0. Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management. With Shiro’s easy-to-understand API, you can quickly an

Re: 2023 December Board Report Draft

+1 Thanks Brian! regards, On 12/12/2023 18:17, Brian Demers wrote: The 2023 December ASF board report is due tomorrow. I've created an initial draft here: https://svn.apache.org/repos/asf/shiro/board/2023-12.txt Comments, suggestions, and feedback are welcome. Otherwise, it will be submitt

[ANNOUNCE]

The Apache Shiro team is pleased to announce the release of Apache Shiro version 2.0.0. Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management. With Shiro’s easy-to-understand API, you can quickly and

[ANNOUNCE] Apache Shiro 2.0.0 release

The Apache Shiro team is pleased to announce the release of Apache Shiro version 2.0.0. Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management. With Shiro’s easy-to-understand API, you can quickly and