Re: [GH] (commons-jexl/JEXL-440): Workflow run "Java CI" failed!

2025-06-07 Thread Gary Gregory
Hi Henri, It looks like a problem remains. Gary On Sat, Jun 7, 2025, 04:14 GitBox wrote: > > The GitHub Actions job "Java CI" on commons-jexl.git/JEXL-440 has failed. > Run started by GitHub user henrib (triggered by henrib). > > Head commit for run: > 5a32d06d94f8

[ANNOUNCE] Apache Commons JEXL Version 3.5.0

2025-04-16 Thread Gary Gregory
The Apache Commons team is pleased to announce Apache Commons JEXL Version 3.5.0. JEXL is a library intended to facilitate the implementation of dynamic and scripting features in applications and frameworks written in Java. JEXL implements an Expression Language based on some extensions to the

[RESULT][VOTE] Release Apache Commons JEXL 3.5.0 based on RC2

2025-04-16 Thread Gary Gregory
This VOTE passes with the following binding +1 votes: - Henri Biestro (henrib) - Piotr P. Karwasz (ppkarwasz) - Gary Gregory (ggregory) TY all, Gary On Sat, Apr 12, 2025 at 1:59 PM Gary Gregory wrote: > > We have fixed a few bugs and added enhancements since Apache Commons > JEXL

Re: [VOTE] Release Apache Commons JEXL 3.5.0 based on RC2

2025-04-16 Thread Gary Gregory
My +1 Gary On Sat, Apr 12, 2025 at 1:59 PM Gary Gregory wrote: > > We have fixed a few bugs and added enhancements since Apache Commons > JEXL 3.4.0 was released, so I would like to release Apache Commons > JEXL 3.5.0. > > Apache Commons JEXL 3.5.0 RC2 is available for review

Re: [VOTE] Release Apache Commons JEXL 3.5.0 based on RC2

2025-04-13 Thread Piotr P. Karwasz
Hi Gary, On 12.04.2025 19:59, Gary Gregory wrote: Please review the release candidate and vote. This vote will close > no sooner than 72 hours from now. [ ] +1 Release these artifacts [ ] > +0 OK, but... [ ] -0 OK, but really should fix... [ ] -1 I oppose > this release because... +1, release t

Re: [VOTE] Release Apache Commons JEXL 3.5.0 based on RC2

2025-04-12 Thread Henri Biestro
[+1] Build & test ok; site - javadoc, reports, changes, release notes - look good. Buit with: mvn clean install site -s "$HOME/.m2/commons-settings.xml" On: Apache Maven 3.8.6 (84538c9988a25aec085021c365c560670ad80f63) Maven home: /Users/hbiestro/Java/apache-maven-3.8.6 Java version: 1.8.0_432,

[VOTE] Release Apache Commons JEXL 3.5.0 based on RC2

2025-04-12 Thread Gary Gregory
We have fixed a few bugs and added enhancements since Apache Commons JEXL 3.4.0 was released, so I would like to release Apache Commons JEXL 3.5.0. Apache Commons JEXL 3.5.0 RC2 is available for review here: https://dist.apache.org/repos/dist/dev/commons/jexl/3.5.0-RC2 (svn revision 76223

Re: [CANCEL][VOTE] Release Apache Commons JEXL 3.5.0 based on RC1

2025-04-12 Thread Henri Biestro
Ack cancel RC1. Henrib - To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org For additional commands, e-mail: dev-h...@commons.apache.org

[CANCEL][VOTE] Release Apache Commons JEXL 3.5.0 based on RC1

2025-04-12 Thread Gary Gregory
RC1 is cancelled to account for issues found by Henri B. Gary On Fri, Apr 11, 2025 at 6:44 PM Gary Gregory wrote: > > We have fixed a few bugs and added enhancements since Apache Commons > JEXL 3.4.0 was released, so I would like to release Apache Commons > JEXL 3.5.0. > > A

[VOTE] Release Apache Commons JEXL 3.5.0 based on RC1

2025-04-11 Thread Gary Gregory
We have fixed a few bugs and added enhancements since Apache Commons JEXL 3.4.0 was released, so I would like to release Apache Commons JEXL 3.5.0. Apache Commons JEXL 3.5.0 RC1 is available for review here: https://dist.apache.org/repos/dist/dev/commons/jexl/3.5.0-RC1 (svn revision 76215

Re: [GH] (commons-jexl): Workflow run "Java CI" failed!

2024-08-21 Thread Gary Gregory
7d29ff5b22dbc98deb52367472e5 / Henri Biestro < > hbies...@cloudera.com> > JEXL: JexlSandbox clean up; > - added test related to a StackOverflow question (testSortArray); > > Report URL: > https://github.com/apache/commons-jexl/actions/runs/10488198464 > > With regards, > GitHub Actions via GitBox > >

Re: [ANNOUNCE] Apache Commons JEXL 3.4.0

2024-06-05 Thread Gary Gregory
TY sebb! Gary On Wed, Jun 5, 2024 at 8:36 PM sebb wrote: > > On Thu, 6 Jun 2024 at 01:23, Gary Gregory wrote: > > > > The Apache Commons team is pleased to announce Apache Commons JEXL 3.4.0. > > > > Apache Commons JEXL is a library that facilitates the implementa

Re: [ANNOUNCE] Apache Commons JEXL 3.4.0

2024-06-05 Thread sebb
On Thu, 6 Jun 2024 at 01:23, Gary Gregory wrote: > > The Apache Commons team is pleased to announce Apache Commons JEXL 3.4.0. > > Apache Commons JEXL is a library that facilitates the implementation > of scripting features in applications and frameworks written in Java. > &g

[ANNOUNCE] Apache Commons JEXL 3.4.0

2024-06-05 Thread Gary Gregory
The Apache Commons team is pleased to announce Apache Commons JEXL 3.4.0. Apache Commons JEXL is a library that facilitates the implementation of scripting features in applications and frameworks written in Java. Java 8 is required. Historical list of changes: https://commons.apache.org/proper

[RESULT][VOTE] Release Apache Commons JEXL 3.4.0 based on RC1

2024-06-05 Thread Gary Gregory
; > > +1 > > > > > On Jun 2, 2024, at 10:10 AM, Gary Gregory wrote: > > > > > > We have fixed a few bugs and added enhancements since Apache Commons > > > JEXL 3.3 was released, so I would like to release Apache Commons JEXL > > >

Re: [VOTE] Release Apache Commons JEXL 3.4.0 based on RC1

2024-06-05 Thread Gary Gregory
My +1 Gary On Sun, Jun 2, 2024 at 11:20 AM Rob Tompkins wrote: > > +1 > > > On Jun 2, 2024, at 10:10 AM, Gary Gregory wrote: > > > > We have fixed a few bugs and added enhancements since Apache Commons > > JEXL 3.3 was released, so I would like to rele

Re: [VOTE] Release Apache Commons JEXL 3.4.0 based on RC1

2024-06-02 Thread Rob Tompkins
+1 > On Jun 2, 2024, at 10:10 AM, Gary Gregory wrote: > > We have fixed a few bugs and added enhancements since Apache Commons > JEXL 3.3 was released, so I would like to release Apache Commons JEXL > 3.4.0. > > Apache Commons JEXL 3.4.0 RC1 is available for re

Re: [VOTE] Release Apache Commons JEXL 3.4.0 based on RC1

2024-06-02 Thread Henri Biestro
: "mac os x", version: "14.5", arch: "aarch64", family: "mac" hbiestro@D3CC9YTYXF-Henri-Biestro commons-jexl-3.4.0-RC1 % - To unsubscribe, e-mail: dev-unsubscr...@commons.apache.or

[VOTE] Release Apache Commons JEXL 3.4.0 based on RC1

2024-06-02 Thread Gary Gregory
We have fixed a few bugs and added enhancements since Apache Commons JEXL 3.3 was released, so I would like to release Apache Commons JEXL 3.4.0. Apache Commons JEXL 3.4.0 RC1 is available for review here: https://dist.apache.org/repos/dist/dev/commons/jexl/3.4.0-RC1 (svn revision 69500) The

Re: Fwd: [GH] (commons-jexl): Workflow run "Java CI" failed!

2024-01-24 Thread Henri Biestro
27;re worried. Cheers Henrib On 2024/01/23 10:40:20 Gary Gregory wrote: > Please see below and fix ;-) > > Gary > > -- Forwarded message - > From: GitBox > Date: Tue, Jan 23, 2024, 5:37 AM > Subject: [GH] (commons-jexl): Workflow run "Java CI" failed! &

Fwd: [GH] (commons-jexl): Workflow run "Java CI" failed!

2024-01-23 Thread Gary Gregory
Please see below and fix ;-) Gary -- Forwarded message - From: GitBox Date: Tue, Jan 23, 2024, 5:37 AM Subject: [GH] (commons-jexl): Workflow run "Java CI" failed! To: The GitHub Actions job "Java CI" on commons-jexl.git has failed. Run started b

Re: [GH] (commons-jexl): Workflow run "Java CI" failed!

2023-11-18 Thread Gary Gregory
14be386795a66578119f13a / Henri Biestro > > JEXL-414: fixing wrong import order; > > Report URL: https://github.com/apache/commons-jexl/actions/runs/6911881308 > > With regards, > GitHub Actions via GitBox > ---

Re: [JEXL] When will jexl 3.3.1 avaliable in maven repo?

2023-10-26 Thread Gary Gregory
yu Wu wrote: > > Some bug fixes and features (tailing comma etc.) would be very helpful for > our usage. > I have saw that the jexl 3.3.1 release note in source code, when can I get > the JEXL 3.3.1 version in maven repostory?

[JEXL] When will jexl 3.3.1 avaliable in maven repo?

2023-10-26 Thread Xiangyu Wu
Some bug fixes and features (tailing comma etc.) would be very helpful for our usage. I have saw that the jexl 3.3.1 release note in source code, when can I get the JEXL 3.3.1 version in maven repostory? Best, Xiangyu

Re: [JEXL] JexlFeatures exposes internal flag representation

2023-10-23 Thread Henri Biestro
Good to know, thanks for pointing this out. Reduced flags public exposure in JEXL per last commit. Henrib - To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org For additional commands, e-mail: dev-h...@commons.apache.org

Re: [JEXL] issue with publication of Jexl 3.3

2023-10-22 Thread sebb
the html files, but it would be useful to know if there is a bug in the documentation or the release plugin (or both). > Sebb > [1] https://lists.apache.org/thread/oowy3bq41zncsdbns4yxslknr8r2dmbn > [2] https://dist.apache.org/rep

Re: [JEXL] JexlFeatures exposes internal flag representation

2023-10-22 Thread sebb
There's another reason why using public constants is problematic: The Java compiler inlines constants into the class that uses them. So, if we change a constant and only recompile that class and not the referencing class, we can get inconsistent constant values. This means that changes to public

[JEXL] JexlFeatures exposes internal flag representation

2023-10-21 Thread sebb
A recent change to JexlFeatures made some flag combinations public. Seems to me that this unnecessarily exposes the internal representation, which makes it much harder to change it later. Making constants public can constrain future changes, whereas providing access via methods is easier to mainta

Re: [JEXL] intended thread safety of JexlFeatures and JexlPermissions

2023-10-20 Thread Henri Biestro
Your are correct, the engine (and the parser) do use its own JexlFeatures copies (expressionFeatures/scriptFeatures members) that are never modified after creation. An equivalent rule applies for JexlOptions btw, copied for isolation for each evaluation. Those classes, by themselves, even if t

Re: [JEXL] intended thread safety of JexlFeatures and JexlPermissions

2023-10-20 Thread sebb
On Fri, 20 Oct 2023 at 19:09, Henri Biestro wrote: > > > JexlPermissions concrete classes are but since this is an interface, anyone > could create a non-thread safe instance and use it. The same way a > JexlFeatures could be corrupted by being constructed with a non-thread safe > namespace pre

Re: [JEXL] intended thread safety of JexlFeatures and JexlPermissions

2023-10-20 Thread Henri Biestro
JexlPermissions concrete classes are but since this is an interface, anyone could create a non-thread safe instance and use it. The same way a JexlFeatures could be corrupted by being constructed with a non-thread safe namespace predicate (making side-effects etc). And for JexlFeatures, using

Re: [JEXL] intended thread safety of JexlFeatures and JexlPermissions

2023-10-20 Thread Gary Gregory
In general, I assume nothing is thread-safe unless documented as such. Gary On Fri, Oct 20, 2023, 12:27 PM sebb wrote: > Are instances of the classes JexlFeatures and JexlPermissions intended > to be thread-safe? > > I have seen mention that they can be shared between threads. > > However Jexl

[JEXL] intended thread safety of JexlFeatures and JexlPermissions

2023-10-20 Thread sebb
Are instances of the classes JexlFeatures and JexlPermissions intended to be thread-safe? I have seen mention that they can be shared between threads. However JexlFeatures is does not appear to be thread-safe (has mutable fields which are not safely published). Not looked at JexlPermissions in de

[JEXL] issue with publication of Jexl 3.3

2023-10-17 Thread sebb
not work, as I thought most of it was now automated? AFAICT the rest of the commit was OK. Sebb [1] https://lists.apache.org/thread/oowy3bq41zncsdbns4yxslknr8r2dmbn [2] https://dist.apache.org/repos/dist/dev/commons/jexl/3.3-RC2/binaries

RE: [JEXL] Detecting infinite loops in JEXL Scripts

2023-08-07 Thread Aditya Kumar1
Thanks, Henri, for a quick reply. Really appreciate it. - Aditya Kumar1 Technology Architect Precisely.com -Original Message- From: Henri Biestro Sent: Monday, August 7, 2023 5:09 PM To: dev@commons.apache.org Subject: Re: [JEXL] Detecting infinite loops in JEXL Scripts This message

Re: [JEXL] Detecting infinite loops in JEXL Scripts

2023-08-07 Thread Henri Biestro
for too long. (see ScriptCallableTest#testFuture). Cheers On 2023/08/07 10:59:58 Aditya Kumar1 wrote: > Hi, > > I am planning to use JEXL library in my SaaS based product to run > JavaScripts/JexlScripts(I understand, Jexl is not exactly java script). > > Since, security

Re: Exposing my own/wrapper functions using JEXL

2023-08-07 Thread Henri Biestro
ea. (As in: how do I integrate my own classes/packages? -or- how do I ensure scripts are readonly and don't modify data?). On 2023/08/07 10:08:59 Gary Gregory wrote: > Do we need better documentation on the site? > > Gary > > On Mon, Aug 7, 2023, 5:45 AM Henri Biestro wrote

[JEXL] Detecting infinite loops in JEXL Scripts

2023-08-07 Thread Aditya Kumar1
Hi, I am planning to use JEXL library in my SaaS based product to run JavaScripts/JexlScripts(I understand, Jexl is not exactly java script). Since, security is one of the most important requirements for any SaaS based product, I am going to use Jexl Sandbox and Jexl Features to secure my

RE: Exposing my own/wrapper functions using JEXL

2023-08-07 Thread Aditya Kumar1
PM To: dev@commons.apache.org Subject: Re: Exposing my own/wrapper functions using JEXL This message originated Externally. Use proper judgement and caution with attachments, links, or responses. Hi; JEXL 3.3. has increased default security by restricting permissions to a very narrow set of al

Re: Exposing my own/wrapper functions using JEXL

2023-08-07 Thread Gary Gregory
Do we need better documentation on the site? Gary On Mon, Aug 7, 2023, 5:45 AM Henri Biestro wrote: > Hi; > JEXL 3.3. has increased default security by restricting permissions to a > very narrow set of allowed classes. In your case, you need to allow JEXL to > introspect you

Re: Exposing my own/wrapper functions using JEXL

2023-08-07 Thread Henri Biestro
Hi; JEXL 3.3. has increased default security by restricting permissions to a very narrow set of allowed classes. In your case, you need to allow JEXL to introspect your package by configuring your permissions. Have a look at JexlPermissions javadoc for more explanations. On JEXL 3.3, with Java

Exposing my own/wrapper functions using JEXL

2023-08-05 Thread Aditya Kumar1
Hi, I was trying to expose my own functions using JEXL library. I am trying the below example. public static class MyMath { public double cos(final double x) { return Math.cos(x); } } public static void testCustomFunction2() { try

Re: [JEXL] Full Java module descriptor support

2023-04-28 Thread Andres Almiray
Hi Henri, Very well :D I've created and issue at https://issues.apache.org/jira/browse/JEXL-396 and a PR is ready for review. Cheers, Andres On 2023/04/28 12:51:29 Henri Biestro wrote: > Hello Andres; > Interesting idea. A PR using Moditect conditioned on jdk profile (so we can

Re: [JEXL] Full Java module descriptor support

2023-04-28 Thread Henri Biestro
Hello Andres; Interesting idea. A PR using Moditect conditioned on jdk profile (so we can continue targeting java 8 without module info?) could be a first step to gauge feasibility. Cheers, Henrib - To unsubscribe, e-mail: dev-u

Re: [JEXL] Full Java module descriptor support

2023-04-25 Thread Andres Almiray
ards, > Gilles Well, that's my end goal to be precise ;-) Right now I'm in need for full Java modules for the following Commons components: codec, compress, io, jexl, lang3, net, text. But certainly other developers may want to have similar capabilities on other Commons components

Re: [JEXL] Full Java module descriptor support

2023-04-25 Thread Gilles Sadowski
Hi. Le mar. 25 avr. 2023 à 17:37, Andres Almiray a écrit : > > Hello! > > I'd like to gauge interest in adding a full Java module descriptor (a.k.a > JPMS though the use of the acronym is discouraged) to commons-jexl. It's an interesting functionality, but I think th

[JEXL] Full Java module descriptor support

2023-04-25 Thread Andres Almiray
Hello! I'd like to gauge interest in adding a full Java module descriptor (a.k.a JPMS though the use of the acronym is discouraged) to commons-jexl. The codebase is currently Java 8 compatible. Adding a full Java descriptor requires using Java 9+ in the build but does not force the

Re: [JEXL] Compatibility bug?

2023-04-12 Thread Henri Biestro
Done. :-) - To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org For additional commands, e-mail: dev-h...@commons.apache.org

Re: [JEXL] Compatibility bug?

2023-04-11 Thread Gary Gregory
Thanks Henri! Don't forget to update changes.xml please. Gary On Tue, Apr 11, 2023, 12:19 Henri Biestro wrote: > Merged it. > > - > To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org > For additional commands, e-mail:

Re: [JEXL] Compatibility bug?

2023-04-11 Thread Henri Biestro
Merged it. - To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org For additional commands, e-mail: dev-h...@commons.apache.org

Re: [JEXL] Compatibility bug?

2023-04-11 Thread Henri Biestro
Hi; Default permissions have changed with JEXL 3.3 to help with application security. I created the PR that restores the tests ( https://github.com/apache/commons-scxml/pull/123 ). Henri - To unsubscribe, e-mail: dev-unsubscr

Re: [JEXL] Compatibility bug?

2023-04-07 Thread Bruno Kinoshita
commons.scxml2.model.CustomActionTest Error: org.apache.commons.scxml2.model.CustomActionTest.testCustomActionEventPayloadHelloWorldJexl Time elapsed: 0.034 s <<< FAILURE! org.opentest4j.AssertionFailedError: Invalid intermediate state ==> expected: but was: Maybe someone else that knows more about scx

[JEXL] Compatibility bug?

2023-04-07 Thread Gary D. Gregory
Hi All Did we create a bug in the recently released 3.3 which surfaces as https://github.com/apache/commons-scxml/pull/121 ? Gary - To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org For additional commands, e-mail: dev

[ANNOUNCEMENT] Apache Commons JEXL 3.3

2023-03-27 Thread Henri Biestro
The Apache Commons JEXL team is happy to announce the release of version 3.3. JEXL is a library intended to facilitate the implementation of dynamic and scripting features in applications and frameworks written in Java. This is a feature and bug-fix release. Site: https://commons.apache.org

[VOTE][RESULT] Release Apache Commons JEXL 3.3 based on RC2

2023-03-27 Thread Henri Biestro (Apache)
This VOTE passes with the following binding +1 votes: - Bruno Kinoshita - Gary Gregory - Henri Biestro

Re: [VOTE] Release Apache Commons JEXL 3.3 based on RC2

2023-03-25 Thread Gary Gregory
i, Mar 17, 2023 at 2:28 PM Henri Biestro (Apache) wrote: > > We have fixed quite a few bugs and added some significant enhancements > since Apache Commons JEXL 3.2.1 was released, so I would like to release > Apache Commons JEXL 3.3. > > Apache Commons JEXL 3.3 RC2 is available for

Re: [VOTE] Release Apache Commons JEXL 3.3 based on RC2

2023-03-23 Thread Henri Biestro
Thanks Bruno :-) JEXL still needs another vote. - To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org For additional commands, e-mail: dev-h...@commons.apache.org

Re: [VOTE] Release Apache Commons JEXL 3.3 based on RC2

2023-03-17 Thread Bruno Kinoshita
"5.15.0-67-generic", arch: "amd64", family: "unix" Cheers Bruno On Fri, 17 Mar 2023 at 19:28, Henri Biestro (Apache) wrote: > We have fixed quite a few bugs and added some significant enhancements > since Apache Commons JEXL 3.2.1 was released, so I w

[VOTE] Release Apache Commons JEXL 3.3 based on RC2

2023-03-17 Thread Henri Biestro (Apache)
We have fixed quite a few bugs and added some significant enhancements since Apache Commons JEXL 3.2.1 was released, so I would like to release Apache Commons JEXL 3.3. Apache Commons JEXL 3.3 RC2 is available for review here: https://dist.apache.org/repos/dist/dev/commons/jexl/3.3-RC2 (svn

Re: [VOTE] Release Apache Commons JEXL 3.3 based on RC1

2023-03-16 Thread Gary Gregory
Would you very briefly outline the bug FTR? TY! Gary On Thu, Mar 16, 2023, 15:46 Henri Biestro wrote: > > Unfortunately, more testing revealed a regression and a bug. > RC1 fails, RC2 will be proposed momentarily. > > - > To un

[CANCEL][VOTE] Release Apache Commons JEXL 3.3 based on RC1

2023-03-16 Thread Henri Biestro
Late tests reopened JEXL-393 and discovered a regression (JEXL-394). RC2 will be proposed momentarily. Sorry.

Re: [VOTE] Release Apache Commons JEXL 3.3 based on RC1

2023-03-16 Thread Henri Biestro
Unfortunately, more testing revealed a regression and a bug. RC1 fails, RC2 will be proposed momentarily. - To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org For additional commands, e-mail: dev-h...@commons.apache.org

Re: [VOTE] Release Apache Commons JEXL 3.3 based on RC1

2023-03-14 Thread Gary Gregory
o read POM org.codehaus.plexus.util.xml.pull.XmlPullParserException: UTF-8 BOM plus xml decl of ISO-8859-1 is incompatible (position: START_DOCUMENT seen wrote: > > We have fixed quite a few bugs and added some significant enhancements > since Apache Commons JEXL 3.2.1 was released, so I wo

Re: [VOTE] Release Apache Commons JEXL 3.3 based on RC1

2023-03-14 Thread Bruno Kinoshita
;, version: "5.15.0-67-generic", arch: "amd64", family: "unix" Site reports look good too. Thanks! On Mon, 13 Mar 2023 at 18:01, Henri Biestro (Apache) wrote: > We have fixed quite a few bugs and added some significant enhancements > since Apache Commons JEXL

Re: [VOTE] Release Apache Commons JEXL 3.3 based on RC1

2023-03-13 Thread Henri Biestro
Noted, sorry for the broken Clirr report link. Clirr has been replaced by Japicmp in JEXL. Henri On 2023/03/13 17:15:43 Gary Gregory wrote: > Henri, > > The starred items in the template are meant to be edited by the RM. For > example, you provide a link to a non-existent CLIRR repor

Re: [VOTE] Release Apache Commons JEXL 3.3 based on RC1

2023-03-13 Thread Gary Gregory
Apache Commons JEXL 3.2.1 was released, so I would like to release > Apache Commons JEXL 3.3. > > Apache Commons JEXL 3.3 RC1 is available for review here: > https://dist.apache.org/repos/dist/dev/commons/jexl/3.3-RC1 (svn > revision 60566) > > The Git tag commons-jexl-3.

[VOTE] Release Apache Commons JEXL 3.3 based on RC1

2023-03-13 Thread Henri Biestro (Apache)
We have fixed quite a few bugs and added some significant enhancements since Apache Commons JEXL 3.2.1 was released, so I would like to release Apache Commons JEXL 3.3. Apache Commons JEXL 3.3 RC1 is available for review here: https://dist.apache.org/repos/dist/dev/commons/jexl/3.3-RC1 (svn

[ JEXL ] Getting ready to release 3.3

2023-02-14 Thread Henri Biestro (Apache)
Dear all; I intend on starting the release of JEXL 3.3 with a landing (ideally) in early March.. If you've any feedback on features, bugs, etc, that may impact that release, please reach out now. Cheers

Re: JEXL Security

2022-11-01 Thread Henri Biestro
> You have to consider the software in the context it is intended to be > used. Thank you for clarifying and illustrating those notions. We are in agreement about JEXL intended usage and where the responsibility lies wrt security choices. But even in its usage context, with authent

Re: JEXL Security

2022-10-31 Thread Mark Thomas
ually entails. Let's assume we want those users to enter a (JEXL) expression to express their functional need (think of an enterprise spreadsheet of some kind with some built-in constraints). Is this considered an 'unsafe input' by essence ? If so, we need to 'sanitise

Re: JEXL Security

2022-10-31 Thread Henri Biestro
Let's restrict this discussion to the case of 'authenticated and authorised users' of an 'enterprise platform'. When we talk about 'unsafe input' vs 'safe input', I'm still confused about what this actually entails. Let's assume we want tho

Re: JEXL Security

2022-10-26 Thread Mark Thomas
On 26/10/2022 08:58, Henri Biestro wrote: Fair points, thank you. They seem to lead into the point of view that JEXL (or any scripting solution?) should not expose any feature that could be considered security-related avoiding the CVE potential turmoils alltogether. Trusted sanitised input is

Re: JEXL Security

2022-10-26 Thread Henri Biestro
Fair points, thank you. They seem to lead into the point of view that JEXL (or any scripting solution?) should not expose any feature that could be considered security-related avoiding the CVE potential turmoils alltogether. Trusted sanitised input is expected and required so this is a moot

Re: JEXL Security

2022-10-24 Thread Mark Thomas
On 24/10/2022 17:02, Henri Biestro (Apache) wrote: Hello Commons; JEXL-381 is an attempt at making JEXL's default more secure or at least less 'permeable' wrt to the application/platform/JVM/file-system/host that runs it. Based on JexlPermissions - a crude security visibility

JEXL Security

2022-10-24 Thread Henri Biestro (Apache)
Hello Commons; JEXL-381 is an attempt at making JEXL's default more secure or at least less 'permeable' wrt to the application/platform/JVM/file-system/host that runs it. Based on JexlPermissions - a crude security visibility manager -, this restricts the *default* behavior of wha

Re: [commons-jexl] branch master updated: JEXL: Attempt to bump checkstyle from 9.3 to 10.3, add plugin profile for jdk8

2022-06-06 Thread Gary Gregory
exl.git > > > The following commit(s) were added to refs/heads/master by this push: > new f909826e JEXL: Attempt to bump checkstyle from 9.3 to 10.3, add > plugin profile for jdk8 > new 22d92e50 Merge remote-tracking branch 'origin/master&#

[RESULT] Release Apache Commons JEXL 3.2.1

2021-06-25 Thread Henri Biestro
The following people voted on release Apache Commons JEXL 3.2.1: Rob Tompkins +1 Bruno P. Kinoshita +1 Gary Gregory +1 Henri Biestro +1 Thanks! - To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org For additional

Re: [VOTE] Release Apache Commons JEXL 3.2.1 based on RC1

2021-06-24 Thread Gary Gregory
+1 All of these should be addressed post-release: The release notes header says 3.2, not 3.2.1 here: https://dist.apache.org/repos/dist/dev/commons/jexl/3.2.1-RC1/RELEASE-NOTES.txt We've never talked about "micro" releases, this should be labeled a "mainten

Re: [VOTE] Release Apache Commons JEXL 3.2.1 based on RC1

2021-06-24 Thread Henri Biestro
japicmp, will do. Thanks On 2021/06/23 23:05:27, Rob Tompkins wrote: > +1 builds and tests with 8 and 11 > > signatures good > > reports all look reasonable > > (nit -> can we get japicmp implemented here?) > - To unsubs

Re: [VOTE] Release Apache Commons JEXL 3.2.1 based on RC1

2021-06-23 Thread Rob Tompkins
critical bugs besides releasing a 'service > pack' version ? > > My hopeful +1 > Cheers > > On 2021/06/18 10:48:37, Henri Biestro wrote: >> >> We have fixed 2 critical bugs and 1 enhancement since Apache Commons JEXL >> 3.2 was released, so I would lik

Re: [VOTE] Release Apache Commons JEXL 3.2.1 based on RC1

2021-06-23 Thread Rob Tompkins
one has >> anything to object, just because no-one had the time to look at it. Do we >> have any (other) way to react to critical bugs besides releasing a 'service >> pack' version ? >> >> My hopeful +1 >> Cheers >> >> On 2021/06/18 10:4

Re: [VOTE] Release Apache Commons JEXL 3.2.1 based on RC1

2021-06-23 Thread Gary Gregory
'service > pack' version ? > > My hopeful +1 > Cheers > > On 2021/06/18 10:48:37, Henri Biestro wrote: > > > > We have fixed 2 critical bugs and 1 enhancement since Apache Commons > JEXL 3.2 was released, so I would like to release Apache Commons JEXL 3.2.1.

Re: [VOTE] Release Apache Commons JEXL 3.2.1 based on RC1

2021-06-23 Thread Bruno P. Kinoshita
es, and Maven repo. Found no issues. Also manually inspected a couple files from the dist area, everything looking good. Thanks for RM'ing Henri! Bruno On Friday, 18 June 2021, 10:48:40 pm NZST, Henri Biestro wrote: We have fixed 2 critical bugs and 1 enhancement since Apache Com

Re: [VOTE] Release Apache Commons JEXL 3.2.1 based on RC1

2021-06-23 Thread Henri Biestro
time to look at it. Do we have any (other) way to react to critical bugs besides releasing a 'service pack' version ? My hopeful +1 Cheers On 2021/06/18 10:48:37, Henri Biestro wrote: > > We have fixed 2 critical bugs and 1 enhancement since Apache Commons JEXL 3.2 > was r

[VOTE] Release Apache Commons JEXL 3.2.1 based on RC1

2021-06-18 Thread Henri Biestro
We have fixed 2 critical bugs and 1 enhancement since Apache Commons JEXL 3.2 was released, so I would like to release Apache Commons JEXL 3.2.1. Apache Commons JEXL 3.2.1 RC1 is available for review here: https://dist.apache.org/repos/dist/dev/commons/jexl/3.2.1-RC1 (svn revision 48410

Re: Releasing JEXL woes

2021-06-07 Thread Gary Gregory
You only publish the JEXL site, not the whole Commons site. Gary On Mon, Jun 7, 2021, 15:54 Henri Biestro wrote: > > I've been fumbling a bit with the release process, especially the site > part, I'm pretty sure I've missed a (few) steps somewhere since the site >

Releasing JEXL woes

2021-06-07 Thread Henri Biestro
hole commons site or only the JEXL site ? The procedure described in http://commons.apache.org/site-publish.html is very confusing to me now... And the 'being in flux' warning or the yaml publishing mail make me even more confused. A quick look at the site, a little bit of guidanc

[RESULT] Release Apache Commons JEXL 3.2

2021-06-07 Thread Henri Biestro
The following people voted on release JEXL 3.2: Gary +1 Matt +1 Henrib +1 Gary, Matt, thank you! On 2021/06/03 18:34:40, Henri Biestro wrote: > > We have fixed quite a few bugs and added some significant enhancements since > Apache Commons JEXL 3.1 was released, so I would like t

Re: [VOTE] Release Apache Commons JEXL 3.2 based on RC1

2021-06-06 Thread Matt Sicker
: > /Library/Java/JavaVirtualMachines/adoptopenjdk-16.jdk/Contents/Home > Default locale: en_US, platform encoding: UTF-8 > OS name: "mac os x", version: "11.4", arch: "x86_64", family: "mac" > > Gary > > On Thu, Jun 3, 2021

Re: [VOTE] Release Apache Commons JEXL 3.2 based on RC1

2021-06-06 Thread Gary Gregory
os x", version: "11.4", arch: "x86_64", family: "mac" Gary On Thu, Jun 3, 2021 at 2:34 PM Henri Biestro wrote: > > > We have fixed quite a few bugs and added some significant enhancements since > Apache Commons JEXL 3.1 was released, so I would lik

[VOTE] Release Apache Commons JEXL 3.2 based on RC1

2021-06-03 Thread Henri Biestro
We have fixed quite a few bugs and added some significant enhancements since Apache Commons JEXL 3.1 was released, so I would like to release Apache Commons JEXL 3.2. Apache Commons JEXL 3.2 RC1 is available for review here: https://dist.apache.org/repos/dist/dev/commons/jexl/3.2-RC1 (svn

Re: [ JEXL ] Preparing release

2021-01-06 Thread Gary Gregory
enerate the javadoc whilst 'release' plugin uses the build section to do > the same. Fixed the issue by adding the same javadoc plugin configuration > in build section of the pom.xml. > > On 2021/01/05 17:05:32, Henri Biestro wrote: > > Hello Team; Happy new year! > &g

Re: [ JEXL ] Preparing release

2021-01-06 Thread Henri Biestro
05:32, Henri Biestro wrote: > Hello Team; Happy new year! > > I'm trying (again) to release JEXL 3.2 and I'm stuck at the 'Maven release > plugin' step in https://commons.apache.org/releases/prepare.html. > > Despite the fact a 'maven site' from Intell

Re: [ JEXL ] Preparing release

2021-01-06 Thread Henri Biestro
d when writing code, validating code and also compiling code. > 3 i think is also used when running unit tests > > Not sure if that will show other issues of fix this issue, hopefully > it maybe highlight if different jvm's are being used when comparing > inside and outside intel

Re: [ JEXL ] Preparing release

2021-01-05 Thread Henri Biestro
none .. I seek help, not diss. On 2021/01/05 19:00:57, Gary Gregory wrote: > You "should" fix the Javadoc warnings; -) or disable doclint. > > Gary > > > On Tue, Jan 5, 2021, 12:06 Henri Biestro wrote: > > > Hello Te

Re: [ JEXL ] Preparing release

2021-01-05 Thread Gary Gregory
f fix this issue, hopefully > it maybe highlight if different jvm's are being used when comparing > inside and outside intellij. > > John > > > On Tue, 5 Jan 2021 at 17:06, Henri Biestro wrote: > > > > Hello Team; Happy new year! > > > > I'

Re: [ JEXL ] Preparing release

2021-01-05 Thread John Patrick
other issues of fix this issue, hopefully it maybe highlight if different jvm's are being used when comparing inside and outside intellij. John On Tue, 5 Jan 2021 at 17:06, Henri Biestro wrote: > > Hello Team; Happy new year! > > I'm trying (again) to release JEXL 3.2 and I&#

Re: [ JEXL ] Preparing release

2021-01-05 Thread Gary Gregory
You "should" fix the Javadoc warnings; -) or disable doclint. Gary On Tue, Jan 5, 2021, 12:06 Henri Biestro wrote: > Hello Team; Happy new year! > > I'm trying (again) to release JEXL 3.2 and I'm stuck at the 'Maven release > plugin' step in https:

[ JEXL ] Preparing release

2021-01-05 Thread Henri Biestro
Hello Team; Happy new year! I'm trying (again) to release JEXL 3.2 and I'm stuck at the 'Maven release plugin' step in https://commons.apache.org/releases/prepare.html. Despite the fact a 'maven site' from IntelliJ does succeed, a 'mv release:prepare -DtryRun

Re: [JEXL] Switching from Cobertura to Jacoco

2020-11-03 Thread sebb
parent POM now defines much more, so the JEXL POM now only needs to define the excludes. S. On Tue, 3 Nov 2020 at 19:20, Henri Biestro wrote: > > > I still don't get why I need to (re)configure so many plugins in JEXL's pom > - any explanation is still welcome - but I managed t

  1   2   3   4   5   6   7   8   >