[VOTE] Apache ActiveMQ 5.15.15 release

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
9 messages Options
Reply | Threaded
Open this post in threaded view
|

[VOTE] Apache ActiveMQ 5.15.15 release

jbonofre
Hi everyone,

I submit Apache ActiveMQ 5.15.15 to your vote. This release includes important fixes and updates, especially:
- Shiro, Spring, xstream, jetty upgrades
- fixes on WebConsole when destination name contains +
- fixes and improvements on the Karaf features to avoid breaking Karaf http commands and refresh
- improved serialization security to avoid impact on xstream ack processing

Please take a look on the Release Notes for details:
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417>

The Maven staging repository is:
https://repository.apache.org/content/repositories/orgapacheactivemq-1226/ <https://repository.apache.org/content/repositories/orgapacheactivemq-1226/>

The dist staging repository is:
https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/ <https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/>

Git tag:
activemq-5.15.15

Please vote to approve this release:

[ ] +1 Approve the release
[ ] -1 Don't approve the release (please provide specific comments)

This vote will be open for at least 72 hours.

Thanks !
Regards
JB
Reply | Threaded
Open this post in threaded view
|

Re: [VOTE] Apache ActiveMQ 5.15.15 release

Robbie Gemmell
The -bin artifacts in the dist dev area differ from those in the maven
staging repo, as previously reported for the prior release. These
files should be the same, and would be if following the documented
process or common alternatives, so I dont quite understand how this is
still occurring. Especially as it seems the source archives do match
this time unlike with the previous report.

It's also surprising to see 5.15.15 under vote rather than 5.16.2,
given previous discussion around doing 5.16.2 first.

Robbie

On Tue, 6 Apr 2021 at 07:30, Jean-Baptiste Onofre <[hidden email]> wrote:

>
> Hi everyone,
>
> I submit Apache ActiveMQ 5.15.15 to your vote. This release includes important fixes and updates, especially:
> - Shiro, Spring, xstream, jetty upgrades
> - fixes on WebConsole when destination name contains +
> - fixes and improvements on the Karaf features to avoid breaking Karaf http commands and refresh
> - improved serialization security to avoid impact on xstream ack processing
>
> Please take a look on the Release Notes for details:
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417>
>
> The Maven staging repository is:
> https://repository.apache.org/content/repositories/orgapacheactivemq-1226/ <https://repository.apache.org/content/repositories/orgapacheactivemq-1226/>
>
> The dist staging repository is:
> https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/ <https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/>
>
> Git tag:
> activemq-5.15.15
>
> Please vote to approve this release:
>
> [ ] +1 Approve the release
> [ ] -1 Don't approve the release (please provide specific comments)
>
> This vote will be open for at least 72 hours.
>
> Thanks !
> Regards
> JB
Reply | Threaded
Open this post in threaded view
|

Re: [VOTE] Apache ActiveMQ 5.15.15 release

Chen, Charlie
Hi,

I found an issue in Apache ActiveMQ 5.15.15. When I click on "send to" / "send" button in web console I got the Error webpage and "org.apache.commons.lang.StringEscapeUtils cannot be resolved to a type" in log. I've created a ticket in JIRA: https://issues.apache.org/jira/browse/AMQ-8219. And I have a PR ready: https://github.com/apache/activemq/pull/646


Thanks,
Charlie


    On 2021-04-07, 7:12 AM, "Robbie Gemmell" <[hidden email]> wrote:

        CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you can confirm the sender and know the content is safe.



        The -bin artifacts in the dist dev area differ from those in the maven
        staging repo, as previously reported for the prior release. These
        files should be the same, and would be if following the documented
        process or common alternatives, so I dont quite understand how this is
        still occurring. Especially as it seems the source archives do match
        this time unlike with the previous report.

        It's also surprising to see 5.15.15 under vote rather than 5.16.2,
        given previous discussion around doing 5.16.2 first.

        Robbie

        On Tue, 6 Apr 2021 at 07:30, Jean-Baptiste Onofre <[hidden email]> wrote:
        >
        > Hi everyone,
        >
        > I submit Apache ActiveMQ 5.15.15 to your vote. This release includes important fixes and updates, especially:
        > - Shiro, Spring, xstream, jetty upgrades
        > - fixes on WebConsole when destination name contains +
        > - fixes and improvements on the Karaf features to avoid breaking Karaf http commands and refresh
        > - improved serialization security to avoid impact on xstream ack processing
        >
        > Please take a look on the Release Notes for details:
        > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417>
        >
        > The Maven staging repository is:
        > https://repository.apache.org/content/repositories/orgapacheactivemq-1226/ <https://repository.apache.org/content/repositories/orgapacheactivemq-1226/>
        >
        > The dist staging repository is:
        > https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/ <https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/>
        >
        > Git tag:
        > activemq-5.15.15
        >
        > Please vote to approve this release:
        >
        > [ ] +1 Approve the release
        > [ ] -1 Don't approve the release (please provide specific comments)
        >
        > This vote will be open for at least 72 hours.
        >
        > Thanks !
        > Regards
        > JB


Reply | Threaded
Open this post in threaded view
|

Re: [VOTE] Apache ActiveMQ 5.15.15 release

jbonofre
In reply to this post by Robbie Gemmell
That’s the same files for sure, and I use the prepare-release script. Let me check the script.
Do you check the checksums ?

5.15.15 and 5.16.2 should be close enough, and 5.16.2 is not yet ready: the redelivery plugin should be fixed (I’m on it) but it can be releases after 5.15.15.

Regards
JB

> Le 7 avr. 2021 à 16:10, Robbie Gemmell <[hidden email]> a écrit :
>
> The -bin artifacts in the dist dev area differ from those in the maven
> staging repo, as previously reported for the prior release. These
> files should be the same, and would be if following the documented
> process or common alternatives, so I dont quite understand how this is
> still occurring. Especially as it seems the source archives do match
> this time unlike with the previous report.
>
> It's also surprising to see 5.15.15 under vote rather than 5.16.2,
> given previous discussion around doing 5.16.2 first.
>
> Robbie
>
> On Tue, 6 Apr 2021 at 07:30, Jean-Baptiste Onofre <[hidden email]> wrote:
>>
>> Hi everyone,
>>
>> I submit Apache ActiveMQ 5.15.15 to your vote. This release includes important fixes and updates, especially:
>> - Shiro, Spring, xstream, jetty upgrades
>> - fixes on WebConsole when destination name contains +
>> - fixes and improvements on the Karaf features to avoid breaking Karaf http commands and refresh
>> - improved serialization security to avoid impact on xstream ack processing
>>
>> Please take a look on the Release Notes for details:
>> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417>
>>
>> The Maven staging repository is:
>> https://repository.apache.org/content/repositories/orgapacheactivemq-1226/ <https://repository.apache.org/content/repositories/orgapacheactivemq-1226/>
>>
>> The dist staging repository is:
>> https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/ <https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/>
>>
>> Git tag:
>> activemq-5.15.15
>>
>> Please vote to approve this release:
>>
>> [ ] +1 Approve the release
>> [ ] -1 Don't approve the release (please provide specific comments)
>>
>> This vote will be open for at least 72 hours.
>>
>> Thanks !
>> Regards
>> JB

Reply | Threaded
Open this post in threaded view
|

Re: [VOTE] Apache ActiveMQ 5.15.15 release

jbonofre
In reply to this post by Chen, Charlie
Thanks for catching this.

I’m cancel this vote to prepare a new one with the fix.

Regards
JB

> Le 8 avr. 2021 à 02:47, Chen, Charlie <[hidden email]> a écrit :
>
> Hi,
>
> I found an issue in Apache ActiveMQ 5.15.15. When I click on "send to" / "send" button in web console I got the Error webpage and "org.apache.commons.lang.StringEscapeUtils cannot be resolved to a type" in log. I've created a ticket in JIRA: https://issues.apache.org/jira/browse/AMQ-8219. And I have a PR ready: https://github.com/apache/activemq/pull/646
>
>
> Thanks,
> Charlie
>
>
>    On 2021-04-07, 7:12 AM, "Robbie Gemmell" <[hidden email]> wrote:
>
>        CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you can confirm the sender and know the content is safe.
>
>
>
>        The -bin artifacts in the dist dev area differ from those in the maven
>        staging repo, as previously reported for the prior release. These
>        files should be the same, and would be if following the documented
>        process or common alternatives, so I dont quite understand how this is
>        still occurring. Especially as it seems the source archives do match
>        this time unlike with the previous report.
>
>        It's also surprising to see 5.15.15 under vote rather than 5.16.2,
>        given previous discussion around doing 5.16.2 first.
>
>        Robbie
>
>        On Tue, 6 Apr 2021 at 07:30, Jean-Baptiste Onofre <[hidden email]> wrote:
>>
>> Hi everyone,
>>
>> I submit Apache ActiveMQ 5.15.15 to your vote. This release includes important fixes and updates, especially:
>> - Shiro, Spring, xstream, jetty upgrades
>> - fixes on WebConsole when destination name contains +
>> - fixes and improvements on the Karaf features to avoid breaking Karaf http commands and refresh
>> - improved serialization security to avoid impact on xstream ack processing
>>
>> Please take a look on the Release Notes for details:
>> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417>
>>
>> The Maven staging repository is:
>> https://repository.apache.org/content/repositories/orgapacheactivemq-1226/ <https://repository.apache.org/content/repositories/orgapacheactivemq-1226/>
>>
>> The dist staging repository is:
>> https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/ <https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/>
>>
>> Git tag:
>> activemq-5.15.15
>>
>> Please vote to approve this release:
>>
>> [ ] +1 Approve the release
>> [ ] -1 Don't approve the release (please provide specific comments)
>>
>> This vote will be open for at least 72 hours.
>>
>> Thanks !
>> Regards
>> JB
>
>

Reply | Threaded
Open this post in threaded view
|

[CANCEL][VOTE] Apache ActiveMQ 5.15.15 release

jbonofre
In reply to this post by jbonofre
Hi,

AMQ-8219 has been found and it’s blocker for the release. I cancel this vote to prepare a new one with AMQ-8219 fixed.

Regards
JB

> Le 6 avr. 2021 à 08:30, Jean-Baptiste Onofre <[hidden email]> a écrit :
>
> Hi everyone,
>
> I submit Apache ActiveMQ 5.15.15 to your vote. This release includes important fixes and updates, especially:
> - Shiro, Spring, xstream, jetty upgrades
> - fixes on WebConsole when destination name contains +
> - fixes and improvements on the Karaf features to avoid breaking Karaf http commands and refresh
> - improved serialization security to avoid impact on xstream ack processing
>
> Please take a look on the Release Notes for details:
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417>
>
> The Maven staging repository is:
> https://repository.apache.org/content/repositories/orgapacheactivemq-1226/ <https://repository.apache.org/content/repositories/orgapacheactivemq-1226/>
>
> The dist staging repository is:
> https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/ <https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/>
>
> Git tag:
> activemq-5.15.15
>
> Please vote to approve this release:
>
> [ ] +1 Approve the release
> [ ] -1 Don't approve the release (please provide specific comments)
>
> This vote will be open for at least 72 hours.
>
> Thanks !
> Regards
> JB

Reply | Threaded
Open this post in threaded view
|

Re: [VOTE] Apache ActiveMQ 5.15.15 release

jbonofre
In reply to this post by Robbie Gemmell
Hi Robbie,

I found the cause: the prepare-release.sh script use sha512sum which doesn’t exist on my Mac. So, I have created a script sha512sum but made a mistake here and it’s taking file my local repo instead of remote.
I removed the script to replace with an alias (alias sha512sum="shasum -a 512").
It should be better, and we can test on the 5.15.15 #2 vote.

Regards
JB

> Le 7 avr. 2021 à 16:10, Robbie Gemmell <[hidden email]> a écrit :
>
> The -bin artifacts in the dist dev area differ from those in the maven
> staging repo, as previously reported for the prior release. These
> files should be the same, and would be if following the documented
> process or common alternatives, so I dont quite understand how this is
> still occurring. Especially as it seems the source archives do match
> this time unlike with the previous report.
>
> It's also surprising to see 5.15.15 under vote rather than 5.16.2,
> given previous discussion around doing 5.16.2 first.
>
> Robbie
>
> On Tue, 6 Apr 2021 at 07:30, Jean-Baptiste Onofre <[hidden email]> wrote:
>>
>> Hi everyone,
>>
>> I submit Apache ActiveMQ 5.15.15 to your vote. This release includes important fixes and updates, especially:
>> - Shiro, Spring, xstream, jetty upgrades
>> - fixes on WebConsole when destination name contains +
>> - fixes and improvements on the Karaf features to avoid breaking Karaf http commands and refresh
>> - improved serialization security to avoid impact on xstream ack processing
>>
>> Please take a look on the Release Notes for details:
>> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417>
>>
>> The Maven staging repository is:
>> https://repository.apache.org/content/repositories/orgapacheactivemq-1226/ <https://repository.apache.org/content/repositories/orgapacheactivemq-1226/>
>>
>> The dist staging repository is:
>> https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/ <https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/>
>>
>> Git tag:
>> activemq-5.15.15
>>
>> Please vote to approve this release:
>>
>> [ ] +1 Approve the release
>> [ ] -1 Don't approve the release (please provide specific comments)
>>
>> This vote will be open for at least 72 hours.
>>
>> Thanks !
>> Regards
>> JB

Reply | Threaded
Open this post in threaded view
|

Re: [VOTE] Apache ActiveMQ 5.15.15 release

Robbie Gemmell
In reply to this post by jbonofre
I did check/compare the sigs to confirm but it was visible that the
archives were different even before doing that, just from their file
sizes.

Doing 5.15.15 first still makes little sense to me but clearly you
really want to, so ho hum.

Robbie

On Thu, 8 Apr 2021 at 05:51, Jean-Baptiste Onofre <[hidden email]> wrote:

>
> That’s the same files for sure, and I use the prepare-release script. Let me check the script.
> Do you check the checksums ?
>
> 5.15.15 and 5.16.2 should be close enough, and 5.16.2 is not yet ready: the redelivery plugin should be fixed (I’m on it) but it can be releases after 5.15.15.
>
> Regards
> JB
>
> > Le 7 avr. 2021 à 16:10, Robbie Gemmell <[hidden email]> a écrit :
> >
> > The -bin artifacts in the dist dev area differ from those in the maven
> > staging repo, as previously reported for the prior release. These
> > files should be the same, and would be if following the documented
> > process or common alternatives, so I dont quite understand how this is
> > still occurring. Especially as it seems the source archives do match
> > this time unlike with the previous report.
> >
> > It's also surprising to see 5.15.15 under vote rather than 5.16.2,
> > given previous discussion around doing 5.16.2 first.
> >
> > Robbie
> >
> > On Tue, 6 Apr 2021 at 07:30, Jean-Baptiste Onofre <[hidden email]> wrote:
> >>
> >> Hi everyone,
> >>
> >> I submit Apache ActiveMQ 5.15.15 to your vote. This release includes important fixes and updates, especially:
> >> - Shiro, Spring, xstream, jetty upgrades
> >> - fixes on WebConsole when destination name contains +
> >> - fixes and improvements on the Karaf features to avoid breaking Karaf http commands and refresh
> >> - improved serialization security to avoid impact on xstream ack processing
> >>
> >> Please take a look on the Release Notes for details:
> >> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417>
> >>
> >> The Maven staging repository is:
> >> https://repository.apache.org/content/repositories/orgapacheactivemq-1226/ <https://repository.apache.org/content/repositories/orgapacheactivemq-1226/>
> >>
> >> The dist staging repository is:
> >> https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/ <https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/>
> >>
> >> Git tag:
> >> activemq-5.15.15
> >>
> >> Please vote to approve this release:
> >>
> >> [ ] +1 Approve the release
> >> [ ] -1 Don't approve the release (please provide specific comments)
> >>
> >> This vote will be open for at least 72 hours.
> >>
> >> Thanks !
> >> Regards
> >> JB
>
Reply | Threaded
Open this post in threaded view
|

Re: [VOTE] Apache ActiveMQ 5.15.15 release

jbonofre
Thanks for the update Robbie.

I did take 5.15.15 #2, the files should be sync between Maven repo and dist now.

As 5.15.15 is ready, I submit it to vote now, and I will move forward on 5.16.2.

Thanks !
Regards
JB

> Le 8 avr. 2021 à 11:30, Robbie Gemmell <[hidden email]> a écrit :
>
> I did check/compare the sigs to confirm but it was visible that the
> archives were different even before doing that, just from their file
> sizes.
>
> Doing 5.15.15 first still makes little sense to me but clearly you
> really want to, so ho hum.
>
> Robbie
>
> On Thu, 8 Apr 2021 at 05:51, Jean-Baptiste Onofre <[hidden email]> wrote:
>>
>> That’s the same files for sure, and I use the prepare-release script. Let me check the script.
>> Do you check the checksums ?
>>
>> 5.15.15 and 5.16.2 should be close enough, and 5.16.2 is not yet ready: the redelivery plugin should be fixed (I’m on it) but it can be releases after 5.15.15.
>>
>> Regards
>> JB
>>
>>> Le 7 avr. 2021 à 16:10, Robbie Gemmell <[hidden email]> a écrit :
>>>
>>> The -bin artifacts in the dist dev area differ from those in the maven
>>> staging repo, as previously reported for the prior release. These
>>> files should be the same, and would be if following the documented
>>> process or common alternatives, so I dont quite understand how this is
>>> still occurring. Especially as it seems the source archives do match
>>> this time unlike with the previous report.
>>>
>>> It's also surprising to see 5.15.15 under vote rather than 5.16.2,
>>> given previous discussion around doing 5.16.2 first.
>>>
>>> Robbie
>>>
>>> On Tue, 6 Apr 2021 at 07:30, Jean-Baptiste Onofre <[hidden email]> wrote:
>>>>
>>>> Hi everyone,
>>>>
>>>> I submit Apache ActiveMQ 5.15.15 to your vote. This release includes important fixes and updates, especially:
>>>> - Shiro, Spring, xstream, jetty upgrades
>>>> - fixes on WebConsole when destination name contains +
>>>> - fixes and improvements on the Karaf features to avoid breaking Karaf http commands and refresh
>>>> - improved serialization security to avoid impact on xstream ack processing
>>>>
>>>> Please take a look on the Release Notes for details:
>>>> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417 <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12349417>
>>>>
>>>> The Maven staging repository is:
>>>> https://repository.apache.org/content/repositories/orgapacheactivemq-1226/ <https://repository.apache.org/content/repositories/orgapacheactivemq-1226/>
>>>>
>>>> The dist staging repository is:
>>>> https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/ <https://dist.apache.org/repos/dist/dev/activemq/activemq/5.15.15/>
>>>>
>>>> Git tag:
>>>> activemq-5.15.15
>>>>
>>>> Please vote to approve this release:
>>>>
>>>> [ ] +1 Approve the release
>>>> [ ] -1 Don't approve the release (please provide specific comments)
>>>>
>>>> This vote will be open for at least 72 hours.
>>>>
>>>> Thanks !
>>>> Regards
>>>> JB
>>