Re: Returned post for annou...@apache.org

2021-02-10 Thread Stefan Sperling
On Wed, Feb 10, 2021 at 11:03:39PM -0500, Nathan Hartman wrote: > On Wed, Feb 10, 2021 at 7:51 PM Private List Moderation < > mod-priv...@gsuite.cloud.apache.org> wrote: > > When I checked the download page, there were no links for versions 1.10.7 > > or 1.14.1. > > i.e. the 2 announce mails were

Re: Returned post for annou...@apache.org

2021-02-10 Thread Branko Čibej
On 11.02.2021 01:51, Private List Moderation wrote: On Wed, 10 Feb 2021 at 22:26, Erik Huelsmann > wrote: How can a link be more important than an announcement for a fix of an *unauthenticated* remote DoS ? When I checked the download page, there were no links

Re: Returned post for annou...@apache.org

2021-02-10 Thread Nathan Hartman
On Wed, Feb 10, 2021 at 7:51 PM Private List Moderation < mod-priv...@gsuite.cloud.apache.org> wrote: > On Wed, 10 Feb 2021 at 22:26, Erik Huelsmann wrote: > >> How can a link be more important than an announcement for a fix of an >> *unauthenticated* remote DoS ? >> >> > When I checked the

Re: Returned post for annou...@apache.org

2021-02-10 Thread Private List Moderation
On Wed, 10 Feb 2021 at 22:26, Erik Huelsmann wrote: > How can a link be more important than an announcement for a fix of an > *unauthenticated* remote DoS ? > > When I checked the download page, there were no links for versions 1.10.7 or 1.14.1. i.e. the 2 announce mails were telling people to

Re: Returned post for annou...@apache.org

2021-02-10 Thread Erik Huelsmann
How can a link be more important than an announcement for a fix of an *unauthenticated* remote DoS ? Same for the KEYS file??? Don't you think that's way out of proportion? Erik. On Wed, Feb 10, 2021 at 4:50 PM Private List Moderation wrote: > > I don't see how the missing links can be

Re: svn commit: r1886389 - in /subversion/site/publish: ./ index.html

2021-02-10 Thread Daniel Sahlberg
Den ons 10 feb. 2021 21:42Stefan Sperling skrev: > Indeed. I had missed some of the necessary web site updates, going over the > release process docs too quickly. I have done the missing updates just now. > Hopefully everything is now in order. > Looks fine to me. Maybe with this the

Re: svn commit: r1886389 - in /subversion/site/publish: ./ index.html

2021-02-10 Thread Stefan Sperling
On Wed, Feb 10, 2021 at 08:30:52PM +0100, Daniel Sahlberg wrote: > *grabbing a commit in the pile* > > Is it intentional that the download page still links to 1.14.0 (and 1.10.6)? > > (I'm not familiar with the relase workflow and I realise this may be a soak > for all mirrors to pick up the

Re: svn commit: r1886389 - in /subversion/site/publish: ./ index.html

2021-02-10 Thread Daniel Sahlberg
*grabbing a commit in the pile* Is it intentional that the download page still links to 1.14.0 (and 1.10.6)? (I'm not familiar with the relase workflow and I realise this may be a soak for all mirrors to pick up the relase, just wanted to make sure it has not been forgotten). Kind regards

Re: Returned post for annou...@apache.org

2021-02-10 Thread Private List Moderation
I don't see how the missing links can be regarded as trivial. This obviously needs to be fixed before the announce can be accepted. At the same time, I asked for the KEYS file link to be standardised. There is already a KEYS file at the standard location - why not link to that instead? On Wed,

Re: Returned post for annou...@apache.org

2021-02-10 Thread Stefan Sperling
Sebb, blocking our release announcements over trivialities like this really is not a nice thing to do. Last time it happened in May 2020. It was already discussed back then and raised with the announce@ moderation team. The Subversion PMC came to the conclusion that our handling of the KEYS files

[announce-ow...@apache.org: Returned post for annou...@apache.org]

2021-02-10 Thread Stefan Sperling
Same thing as last time. Shrug. I suppose next time I will just drop announce@ from Cc... - Forwarded message from announce-ow...@apache.org - Date: 10 Feb 2021 15:20:01 - From: announce-ow...@apache.org To: s...@apache.org Subject: Returned post for annou...@apache.org Message-ID:

Re: svn commit: r45955 - /dev/subversion/ /release/subversion/

2021-02-10 Thread Johan Corveleyn
On Wed, Feb 10, 2021 at 2:23 PM Stefan Sperling wrote: > > On Wed, Feb 10, 2021 at 02:16:31PM +0100, Johan Corveleyn wrote: > > On Wed, Feb 10, 2021 at 12:27 PM wrote: > > > > > > Author: stsp > > > Date: Wed Feb 10 11:27:48 2021 > > > New Revision: 45955 > > > > > > Log: > > > Publish

[SECURITY][ANNOUNCE] Apache Subversion 1.10.7 released

2021-02-10 Thread Stefan Sperling
I'm happy to announce the release of Apache Subversion 1.10.7. Please choose the mirror closest to you by visiting: https://subversion.apache.org/download.cgi#supported-releases This is a stable bugfix and security release of the Apache Subversion open source version control system. THIS

[SECURITY][ANNOUNCE] Apache Subversion 1.14.1 released

2021-02-10 Thread Stefan Sperling
I'm happy to announce the release of Apache Subversion 1.14.1. Please choose the mirror closest to you by visiting: https://subversion.apache.org/download.cgi#recommended-release This is a stable bugfix and security release of the Apache Subversion open source version control system. THIS

Re: Subversion 1.10.7 up for testing/signing

2021-02-10 Thread Stefan Sperling
On Thu, Feb 04, 2021 at 01:57:16PM +0100, Stefan Sperling wrote: > The 1.10.7 release artifacts are now available for testing/signing. > Please get the tarballs from > https://dist.apache.org/repos/dist/dev/subversion > and add your signatures there. Summary: +1 to release Tested: [bdb | fsfs]

Re: Subversion 1.14.1 up for testing/signing

2021-02-10 Thread Stefan Sperling
On Thu, Feb 04, 2021 at 01:56:21PM +0100, Stefan Sperling wrote: > The 1.14.1 release artifacts are now available for testing/signing. > Please get the tarballs from > https://dist.apache.org/repos/dist/dev/subversion > and add your signatures there. > > Thanks! Summary: +1 to release Tested:

Re: Subversion 1.10.7 up for testing/signing

2021-02-10 Thread Branko Čibej
Summary: +1 to release (Unix) Verified: - Tarball contents and signatures - check ((fsfs, bdb) × (local, svnserve, dav)) - check-swig-py - check-swig-pl Not verified: - check-all-javahl (for lack of a compatible JDK) - check-swig-rb (for lack of will to fight macOS) Known