[RESULT][VOTE] Release Apache Commons BeanUtils 1.10.1 based on RC1

This release vote passes with the following +1 votes: - Gary Gregory (ggregory, binding) - melloware...@gmail.com (non-binding) - Henri Biestro (binding, henrib) - Piotr P. Karwasz (binding, pkarwasz) TY all, Gary On Thu, Feb 13, 2025 at 6:08 AM Piotr P. Karwasz wrote: > > Hi Gary, > > On 31.01

Re: Commons Collections 3.2.2 End of Life?

On Wed, Feb 12, 2025 at 4:22 PM Volodymyr Siedlecki wrote: > We are looking at collections4 as a possibility, but haven't determined if > we can upgrade yet. > That sounds reasonable. > The main issue is COLLECTIONS-701which is flagged by security scanners: > > ``` > The framework Apache Commo

Re: Going Emeritus ...

Hi Siggi, > Am 12.02.2025 um 20:57 schrieb Siegfried Goeschl > : > > Hi folks, > > after long & careful consideration I decided to become an emeritus member. > The good news is, that it has nothing to with the ASF itself (and all of the > lengthy email threads). Having said that, I have nothi

[ALL] SBOMs are still experimental

Hi All, [Piotr, Arnout, please correct me and clarify or refine what's below.] Apache Commons publishes SBOMs using the Maven plugins for SPDX and CycloneDX. We currently publish hashes and versions for dependencies in these SBOMs which will not be the case in the future as it is not the role of

Re: [ALL] Maven module expert needed please

On Thu, 13 Feb 2025 at 01:58, Xeno Amess wrote: > > > AFAICT the same problem does not apply to VFS, which is a multi-module > project. > because vfs has its all modules snapshot on snapshot repository ( As an experiment, I tried changing the snapshot version to 2.10.99-SNAPSHOT, which does not e

Re: is it meaningful to make a commons-bom or something?

Hi. Le lun. 10 févr. 2025 à 14:42, Xeno Amess a écrit : > > I really worried about if our repos can even runs in a same jvm(I mean > normally, not osgi or shading) > Maybe a commons-bom repo and monthly release be useful? Gary what do you > think? Please provide more details, and perhaps a speci

Re: [VOTE] Release Apache Commons BeanUtils 1.10.1 based on RC1

Hi Gary, On 31.01.2025 16:34, Gary Gregory wrote: Please review the release candidate and vote. This vote will close no sooner than 72 hours from now. [ ] +1 Release these artifacts [ ] +0 OK, but... [ ] -0 OK, but really should fix... [ ] -1 I oppose this release because... I che

Re: Commons Collections 3.2.2 End of Life?

Am 12.02.2025 um 16:22 schrieb Volodymyr Siedlecki: We are looking at collections4 as a possibility, but haven't determined if we can upgrade yet. The main issue is COLLECTIONS-701which is flagged by security scanners: ``` The framework Apache Commons Collections before 4.3 is vulnerable to St

Re: [VOTE] Release Apache Commons VFS Project 2.10.0 based on RC1

Hi Gary, On 3.02.2025 00:26, Gary Gregory wrote: Please review the release candidate and vote. This vote will close no sooner than 72 hours from now. [ ] +1 Release these artifacts [ ] +0 OK, but... [ ] -0 OK, but really should fix... [ ] -1 I oppose this release because... The ha

Re: Going Emeritus ...

I remember those Turbine days! We’ll miss you, and the door is more then open to have you come back as things evolve/change! > On Feb 13, 2025, at 8:06 AM, Thomas Vandahl wrote: > > Hi Siggi, > >> Am 12.02.2025 um 20:57 schrieb Siegfried Goeschl >> : >> >> Hi folks, >> >> after long & car

Re: Going Emeritus ...

Hi Siegfried, Sorry to hear that you are going emeritus. I recall I met you in Atlanta at a food-truck lunch. You showed me how I should behave in what I was doing in some projects. I also recall that you told me how Turbine got started. Lessons, priceless. Thank you very much! Cheers, Woonsan

Re: Going Emeritus ...

Yes Sent from my iPhone > On 13.02.2025, at 14:12, Thomas Vandahl wrote: > > Hi Siggi, > >> Am 12.02.2025 um 20:57 schrieb Siegfried Goeschl >> : >> >> Hi folks, >> >> after long & careful consideration I decided to become an emeritus member. >> The good news is, that it has nothing to w