Skip to main content
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [orbit-dev] Late 2021-03 M2 Build / Consuming I-builds
  • From: "Homer, Tony" <tony.homer@xxxxxxxxx>
  • Date: Wed, 27 Jan 2021 19:01:00 +0000
  • Accept-language: en-US
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=intel.com; dmarc=pass action=none header.from=intel.com; dkim=pass header.d=intel.com; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=TQd1ie0ss4G7/mxHNkuG9D5Nx1uN9Q7pc24Rp8u/Vbg=; b=lZnu21IqwxogZKsK97hRTzToz4MxP9OFTr3MjqvUCeoZ2z1LwfXeMmfI86/GhNs3pP2ksjAVHwbhW1C+4lFrizY0JsdX2Iu8sYu4k0w8xXztAezNCdM38xnuXAosL/dXHZ9n7D+3CTKEwAyqCcQx2Sdr3EluS1H/XLoO/KOdPY4esAK9dNSfKQgmH/+S6M9DjCOsaFLhxIY+1lMckfcuzIYgT6ScXcKmqbliVTR1Q82WV9leNWc2BD9PBDsMKdg2d+A6Gn6VtK1+ysmbi4rrPptd0481pmYyiBKb9/xaC1j/S8WkY0Pzo57codP56DzJiH6OsVZs6dtbUrFWGge6fg==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=axtXHPzaiRCKzBN1rKKvJPmicwpSCf34CzpI8tjHgcM7t05Kdpg+7E7zC+LgHv39xHOa62imFamAhpvFdHLRwJhU8j/Km/wtTlKEnmfoD5Dwh/6j5qvXw/th7oVqTgILBEQ9sbPVyByZ6odiq86MOa9EdLHQWiaNRCLtTWd82CZ33DXmQOClDMarEMoccN8fVAyd7rivfx9YoVLvL0YYDKRd9IwFuomhg9QFdzVVH5xriM55dVvX2lqGoP4oa235B3zOEOnHxt2yPX03rqr521YuSAE//yUhpatuw+UrBGqlRsPInX67XjstybILQMgh/8aNV4u+yhp6C8j77SamTg==
  • Delivered-to: orbit-dev@xxxxxxxxxxx
  • Ironport-sdr: Bdkq1oYDdIoJFv+FseWUMQjpHdrTzMluTiqurk2Zfqu9vqlIex0q1zUnVgdShbvjZ46WtUJigd YgHmf71PdFkA==
  • Ironport-sdr: TCVfnUkXcivwF18QOlZHgWSSmb71M0WxuHqtPcFtM1XaPPWwXuxEShde21cKF2uPYIf+KOpTg7 yo8pYU4mRYXw==
  • List-archive: <https://www.eclipse.org/mailman/private/orbit-dev/>
  • List-help: <mailto:orbit-dev-request@eclipse.org?subject=help>
  • List-subscribe: <https://www.eclipse.org/mailman/listinfo/orbit-dev>, <mailto:orbit-dev-request@eclipse.org?subject=subscribe>
  • List-unsubscribe: <https://www.eclipse.org/mailman/options/orbit-dev>, <mailto:orbit-dev-request@eclipse.org?subject=unsubscribe>
  • Thread-index: AQHW9N7AktyBBBIEz0qM5Vgk0/BIlQ==
  • Thread-topic: [orbit-dev] Late 2021-03 M2 Build / Consuming I-builds
  • User-agent: Microsoft-MacOutlook/16.45.21010502
Here are the Bugzilla entries:
Update Guava to 30.1 https://bugs.eclipse.org/bugs/show_bug.cgi?id=570581
Update Apache HttpComponents HttpClient to 4.13.5 https://bugs.eclipse.org/bugs/show_bug.cgi?id=570699
Update com.fasterxml.jackson to 2.12.1 https://bugs.eclipse.org/bugs/show_bug.cgi?id=570700

I created CQs for some of the above (as mentioned in comments in above entries).
For several of the bundles, CQs already exist, approved for other (non-Orbit) projects.
If I understand correctly, with 2019/2020 IP changes, I don't need to create piggy-back CQs - I can just use the existing CQs directly.
Is that correct?

On 1/27/21 , 9:51 AM, "orbit-dev on behalf of Homer, Tony" <orbit-dev-bounces@xxxxxxxxxxx on behalf of tony.homer@xxxxxxxxx> wrote:

    Thanks for this, Roland.

    I intend to update 3 sets of dependencies for which the latest version available in Orbit is vulnerable to CVEs.
    I plan to add Guava 30.1 (retaining 27.1 for now in order to give teams time to update), bump Jackson to 2.12.1 and bump apache http-client to 4.5.13.

    I logged one issue in Bugzilla and will add the others today.
    I hope to get the changes opened tomorrow morning (PST).
    I hope to get some quick reviews so that I can merge these by Friday, then I will follow the steps you provided.

    Tony Homer

    On 1/27/21 , 9:44 AM, "orbit-dev on behalf of Roland Grunberg" <orbit-dev-bounces@xxxxxxxxxxx on behalf of rgrunber@xxxxxxxxxx> wrote:

        Hey all,

        Unfortunately I don't think I'll have time to put together an M2 (S-
        build) so platform has continued using M1. Every change is also
        consumable through the latest I-builds so that is also possible. I'm
        still around to keep our builds in good working order, particularly
        leading up to the final release.

        There also haven't been many changes in Orbit for M2 but if any
        committer is interested, I have instructions at the following link on
        how promote an S-build for M2 :

        https://wiki.eclipse.org/Orbit/Adding_Bundles_To_Orbit_In_5_Minutes#Manual_Build_And_Promotion

        If anyone is interested but needs some extra hints/information, feel
        free to contact me.


        Cheers,
        -- 
        Roland Grunberg

        _______________________________________________
        orbit-dev mailing list
        orbit-dev@xxxxxxxxxxx
        To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/orbit-dev

    _______________________________________________
    orbit-dev mailing list
    orbit-dev@xxxxxxxxxxx
    To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/orbit-dev

Back to the top