[jira] [Resolved] (SLING-7049) MissingExporterException thrown when the desired ModelExporter is not the first in the list

2017-08-14 Thread Justin Edelson (JIRA)
[ https://issues.apache.org/jira/browse/SLING-7049?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Justin Edelson resolved SLING-7049. --- Resolution: Fixed fixed in r1805037 > MissingExporterException thrown when the desired Model

[jira] [Created] (SLING-7049) MissingExporterException thrown when the desired ModelExporter is not the first in the list

2017-08-14 Thread Justin Edelson (JIRA)
Justin Edelson created SLING-7049: - Summary: MissingExporterException thrown when the desired ModelExporter is not the first in the list Key: SLING-7049 URL: https://issues.apache.org/jira/browse/SLING-7049

Re: [VOTE] Release Apache Sling Launchpad Base 5.6.6-2.6.22

2017-08-14 Thread Daniel Klco
+1 On Mon, Aug 14, 2017 at 12:32 PM, Karl Pauls wrote: > +1 > > regards, > > Karl > > On Monday, August 14, 2017, Radu Cotescu wrote: > > > +1 > > > > On Mon, 14 Aug 2017 at 14:14 Robert Munteanu > > wrote: > > > > > Please vote to approve this release: > > > > > > [ ] +1 Approve the release

Re: [VOTE] Release Apache Sling Rewriter 1.2.2

2017-08-14 Thread Daniel Klco
+1 On Mon, Aug 14, 2017 at 12:34 PM, Karl Pauls wrote: > +1 > > regards, > > Karl > > On Monday, August 14, 2017, Robert Munteanu wrote: > > > On Mon, 2017-08-14 at 11:57 +0200, Carsten Ziegeler wrote: > > > Please vote to approve these releases: > > > > +1 > > > > Robert > > > > -- > Karl Paul

Re: [VOTE] Release Apache Sling Rewriter 1.2.2

2017-08-14 Thread Karl Pauls
+1 regards, Karl On Monday, August 14, 2017, Robert Munteanu wrote: > On Mon, 2017-08-14 at 11:57 +0200, Carsten Ziegeler wrote: > > Please vote to approve these releases: > > +1 > > Robert -- Karl Pauls karlpa...@gmail.com

Re: [VOTE] Release Apache Sling Launchpad Base 5.6.6-2.6.22

2017-08-14 Thread Karl Pauls
+1 regards, Karl On Monday, August 14, 2017, Radu Cotescu wrote: > +1 > > On Mon, 14 Aug 2017 at 14:14 Robert Munteanu > wrote: > > > Please vote to approve this release: > > > > [ ] +1 Approve the release > > [ ] 0 Don't care > > [ ] -1 Don't release, because ... > > > > This majority

Re: Release Sling 10?

2017-08-14 Thread Karl Pauls
I was thinking about doing another framework release soon-ish (eta next week). Maybe we could include that one as well (it might bring some performance benefit and fixes some lifecycle bugs). Otherwise, what Carsten said. regards, Karl On Monday, August 14, 2017, Carsten Ziegeler wrote: > Rob

[jira] [Created] (SLING-7048) Add an integration test for scripted tag files

2017-08-14 Thread Robert Munteanu (JIRA)
Robert Munteanu created SLING-7048: -- Summary: Add an integration test for scripted tag files Key: SLING-7048 URL: https://issues.apache.org/jira/browse/SLING-7048 Project: Sling Issue Type:

Re: Release Sling 10?

2017-08-14 Thread Carsten Ziegeler
Robert Munteanu wrote > Hi, > > I'd like to do a "small" launchpad release for Java 9 support. Sling > starts up and seems to be working fine with Java 9. I'd like to also > set up Jenkins to run the ITs with Java 9, and then we can start a > release vote. > > Does anyone have any comments on thi

[jira] [Commented] (SLING-7047) Update Dropwizard Metrics bundles to 3.2 to eliminate sun.misc dependency.

2017-08-14 Thread Carsten Ziegeler (JIRA)
[ https://issues.apache.org/jira/browse/SLING-7047?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16125690#comment-16125690 ] Carsten Ziegeler commented on SLING-7047: - We're not embedding it, therefore updat

[jira] [Updated] (SLING-7047) Update Dropwizard Metrics bundles to 3.2 to eliminate sun.misc dependency.

2017-08-14 Thread Carsten Ziegeler (JIRA)
[ https://issues.apache.org/jira/browse/SLING-7047?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Carsten Ziegeler updated SLING-7047: Fix Version/s: Launchpad Builder 10 commons metrics 1.2.4 > Update Dropwi

[jira] [Created] (SLING-7047) Update Dropwizard Metrics bundles to 3.2 to eliminate sun.misc dependency.

2017-08-14 Thread Ian Boston (JIRA)
Ian Boston created SLING-7047: - Summary: Update Dropwizard Metrics bundles to 3.2 to eliminate sun.misc dependency. Key: SLING-7047 URL: https://issues.apache.org/jira/browse/SLING-7047 Project: Sling

Re: [VOTE] Release Apache Sling Launchpad Base 5.6.6-2.6.22

2017-08-14 Thread Radu Cotescu
+1 On Mon, 14 Aug 2017 at 14:14 Robert Munteanu wrote: > Please vote to approve this release: > > [ ] +1 Approve the release > [ ] 0 Don't care > [ ] -1 Don't release, because ... > > This majority vote is open for at least 72 hours. > > Robert >

[jira] [Updated] (SLING-6963) Service user declaration based on principal names

2017-08-14 Thread Robert Munteanu (JIRA)
[ https://issues.apache.org/jira/browse/SLING-6963?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robert Munteanu updated SLING-6963: --- Labels: Sling-10-ReleaseNotes (was: ) > Service user declaration based on principal names > -

Re: [VOTE] Release Apache Sling Launchpad Base 5.6.6-2.6.22

2017-08-14 Thread Robert Munteanu
On Mon, 2017-08-14 at 12:42 +, Radu Cotescu wrote: > Hi Robert, > > The URL points to a different release than mentioned in the subject. Ooops. The URL should be https://issues.apache.org/jira/projects/SLING/versions/12341305 Thanks for the notice. Robert

Re: [VOTE] Release Apache Sling Launchpad Base 5.6.6-2.6.22

2017-08-14 Thread Radu Cotescu
Hi Robert, The URL points to a different release than mentioned in the subject. Regards, Radu On Mon, 14 Aug 2017 at 14:14 Robert Munteanu wrote: > https://issues.apache.org/jira/projects/SLING/versions/12341089 >

Re: [VOTE] Release Apache Sling Launchpad Base 5.6.6-2.6.22

2017-08-14 Thread Carsten Ziegeler
+1 -- Carsten Ziegeler Adobe Research Switzerland cziege...@apache.org

Re: [VOTE] Release Apache Sling Launchpad Base 5.6.6-2.6.22

2017-08-14 Thread Robert Munteanu
On Mon, 2017-08-14 at 15:14 +0300, Robert Munteanu wrote: > Please vote to approve this release: +1 Robert signature.asc Description: This is a digitally signed message part

[VOTE] Release Apache Sling Launchpad Base 5.6.6-2.6.22

2017-08-14 Thread Robert Munteanu
Hi, We solved 1 issue in this release: https://issues.apache.org/jira/projects/SLING/versions/12341089 Staging repository: https://repository.apache.org/content/repositories/orgapachesling-1766 You can use this UNIX script to download the release and verify the signatures: http://svn.apache.org

Re: [VOTE] Release Apache Sling Event 4.2.6

2017-08-14 Thread Stefan Egli
+0 Note that this also releases SLING-6739 for which the original idea was to increase the version to 4.3.0 to stress that internally it embeds and re-exports event.api now. But technically I don't see a reason why it can't be released as 4.2.6 .. just saying. We can adjust fixversion of SLING-673

Release Sling 10?

2017-08-14 Thread Robert Munteanu
Hi, I'd like to do a "small" launchpad release for Java 9 support. Sling starts up and seems to be working fine with Java 9. I'd like to also set up Jenkins to run the ITs with Java 9, and then we can start a release vote. Does anyone have any comments on this or maybe any inclusions we should wa

[jira] [Created] (SLING-7046) Run the Sling ITs with Java 9

2017-08-14 Thread Robert Munteanu (JIRA)
Robert Munteanu created SLING-7046: -- Summary: Run the Sling ITs with Java 9 Key: SLING-7046 URL: https://issues.apache.org/jira/browse/SLING-7046 Project: Sling Issue Type: Bug Com

[jira] [Commented] (SLING-7043) Exporting com.codahale.metrics.MetricRegistry is breaking the abstraction

2017-08-14 Thread Carsten Ziegeler (JIRA)
[ https://issues.apache.org/jira/browse/SLING-7043?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16125544#comment-16125544 ] Carsten Ziegeler commented on SLING-7043: - I think we have two options: a) we add

CVE-2017-9802: Apache Sling XSS vulnerability

2017-08-14 Thread Robert Munteanu
CVE-2017-9802: Apache Sling XSS vulnerability Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Sling Servlets Post 2.3.20 Description: The Javascript method Sling.evalString() uses the javascript `eval` function to parse input strings, which allows for XSS at

Re: [VOTE] Release Apache Sling Rewriter 1.2.2

2017-08-14 Thread Robert Munteanu
On Mon, 2017-08-14 at 11:57 +0200, Carsten Ziegeler wrote: > Please vote to approve these releases: +1 Robert signature.asc Description: This is a digitally signed message part

Re: [VOTE] Release Apache Sling Rewriter 1.2.2

2017-08-14 Thread Stefan Egli
+1 Cheers, Stefan On 14/08/17 11:57, "Carsten Ziegeler" wrote: >I would like to call a vote on the following release, > >Apache Sling Rewriter 1.2.2 > >We solved 2 issues in this release: >https://issues.apache.org/jira/projects/SLING/versions/12338419 > >Staging repository: >https://repository

Re: [VOTE] Release Apache Sling Rewriter 1.2.2

2017-08-14 Thread Carsten Ziegeler
+1 -- Carsten Ziegeler Adobe Research Switzerland cziege...@apache.org

[VOTE] Release Apache Sling Rewriter 1.2.2

2017-08-14 Thread Carsten Ziegeler
I would like to call a vote on the following release, Apache Sling Rewriter 1.2.2 We solved 2 issues in this release: https://issues.apache.org/jira/projects/SLING/versions/12338419 Staging repository: https://repository.apache.org/content/repositories/orgapachesling-1765/ You can use this UNIX

[jira] [Resolved] (SLING-6517) A condition that is always true.

2017-08-14 Thread Carsten Ziegeler (JIRA)
[ https://issues.apache.org/jira/browse/SLING-6517?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Carsten Ziegeler resolved SLING-6517. - Resolution: Fixed Assignee: Carsten Ziegeler Thanks for reporting - it's fixed in re

[jira] [Commented] (SLING-5965) Metrics and a Health-Check for Scheduler to detect long-running Quartz-Jobs

2017-08-14 Thread Carsten Ziegeler (JIRA)
[ https://issues.apache.org/jira/browse/SLING-5965?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16125455#comment-16125455 ] Carsten Ziegeler commented on SLING-5965: - Totally agree and I think these are the

[jira] [Commented] (SLING-5965) Metrics and a Health-Check for Scheduler to detect long-running Quartz-Jobs

2017-08-14 Thread Stefan Egli (JIRA)
[ https://issues.apache.org/jira/browse/SLING-5965?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16125442#comment-16125442 ] Stefan Egli commented on SLING-5965: The Metrics and HC implementations have been writ

[jira] [Commented] (SLING-7044) Scripted tag files are not found

2017-08-14 Thread Robert Munteanu (JIRA)
[ https://issues.apache.org/jira/browse/SLING-7044?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16125426#comment-16125426 ] Robert Munteanu commented on SLING-7044: Great, thank you [~cziegeler] . I'll rewo

[jira] [Commented] (SLING-7044) Scripted tag files are not found

2017-08-14 Thread Carsten Ziegeler (JIRA)
[ https://issues.apache.org/jira/browse/SLING-7044?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16125424#comment-16125424 ] Carsten Ziegeler commented on SLING-7044: - [~rombert] Interestingly your code exam

[jira] [Commented] (SLING-7043) Exporting com.codahale.metrics.MetricRegistry is breaking the abstraction

2017-08-14 Thread Bertrand Delacretaz (JIRA)
[ https://issues.apache.org/jira/browse/SLING-7043?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16125420#comment-16125420 ] Bertrand Delacretaz commented on SLING-7043: I think this discussion should mo

[jira] [Comment Edited] (SLING-7044) Scripted tag files are not found

2017-08-14 Thread Carsten Ziegeler (JIRA)
[ https://issues.apache.org/jira/browse/SLING-7044?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16125365#comment-16125365 ] Carsten Ziegeler edited comment on SLING-7044 at 8/14/17 8:29 AM: --

[RESULT] [VOTE] Release Apache Sling Default POST Servlets 2.3.22

2017-08-14 Thread Robert Munteanu
Hi, The vote has passed with the following results: +1 (binding): Carsten Ziegler, Karl Pauls, Daniel Klco, Radu Cotescu, Robert Munteanu I will copy this release to the Sling dist directory and promote the artifacts to the central Maven repository.

[jira] [Commented] (SLING-7044) Scripted tag files are not found

2017-08-14 Thread Carsten Ziegeler (JIRA)
[ https://issues.apache.org/jira/browse/SLING-7044?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16125365#comment-16125365 ] Carsten Ziegeler commented on SLING-7044: - [~rombert] That's interesting. In my te

[jira] [Commented] (SLING-7044) Scripted tag files are not found

2017-08-14 Thread Robert Munteanu (JIRA)
[ https://issues.apache.org/jira/browse/SLING-7044?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16125361#comment-16125361 ] Robert Munteanu commented on SLING-7044: [~cziegeler] {noformat} java.io.FileNot

[jira] [Commented] (SLING-7044) Scripted tag files are not found

2017-08-14 Thread Carsten Ziegeler (JIRA)
[ https://issues.apache.org/jira/browse/SLING-7044?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16125357#comment-16125357 ] Carsten Ziegeler commented on SLING-7044: - [~rombert] Looks basically good to me,

[jira] [Commented] (SLING-5965) Metrics and a Health-Check for Scheduler to detect long-running Quartz-Jobs

2017-08-14 Thread Carsten Ziegeler (JIRA)
[ https://issues.apache.org/jira/browse/SLING-5965?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16125354#comment-16125354 ] Carsten Ziegeler commented on SLING-5965: - [~bdelacretaz] Please read my previous

[jira] [Updated] (SLING-7044) Scripted tag files are not found

2017-08-14 Thread Robert Munteanu (JIRA)
[ https://issues.apache.org/jira/browse/SLING-7044?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robert Munteanu updated SLING-7044: --- Attachment: org.apache.sling.its.scripting.jsp.tar.gz [~cziegeler] - I tried creating a simple

[jira] [Commented] (SLING-5965) Metrics and a Health-Check for Scheduler to detect long-running Quartz-Jobs

2017-08-14 Thread Bertrand Delacretaz (JIRA)
[ https://issues.apache.org/jira/browse/SLING-5965?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16125350#comment-16125350 ] Bertrand Delacretaz commented on SLING-5965: bq. This patch removes the depend

[jira] [Updated] (SLING-5965) Metrics and a Health-Check for Scheduler to detect long-running Quartz-Jobs

2017-08-14 Thread Carsten Ziegeler (JIRA)
[ https://issues.apache.org/jira/browse/SLING-5965?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Carsten Ziegeler updated SLING-5965: Attachment: patch.txt This patch removes the dependency to Sling's common metrics and direct

[jira] [Commented] (SLING-7043) Exporting com.codahale.metrics.MetricRegistry is breaking the abstraction

2017-08-14 Thread Chetan Mehrotra (JIRA)
[ https://issues.apache.org/jira/browse/SLING-7043?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16125315#comment-16125315 ] Chetan Mehrotra commented on SLING-7043: Technically there is NOOP Metrics support

[jira] [Commented] (SLING-7043) Exporting com.codahale.metrics.MetricRegistry is breaking the abstraction

2017-08-14 Thread Carsten Ziegeler (JIRA)
[ https://issues.apache.org/jira/browse/SLING-7043?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16125312#comment-16125312 ] Carsten Ziegeler commented on SLING-7043: - The Resource API provides an abstractio