Skip to main content
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [orbit-dev] Late 2021-03 M2 Build / Consuming I-builds
  • From: "Homer, Tony" <tony.homer@xxxxxxxxx>
  • Date: Thu, 28 Jan 2021 03:43:49 +0000
  • Accept-language: en-US
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=intel.com; dmarc=pass action=none header.from=intel.com; dkim=pass header.d=intel.com; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=zHaDfB7hANpky3K/IVXtttuXCvUMGGAUa0Nul1bsjl8=; b=XOWRfBjtHepVY7nva4ZUSh0ydCE6l/8RBUi1U86cpw5eGS2srVf+756tzvSznMDbG7NbMNbWtagf7IjyJRE1cjdRLwbmUFaGupS9LpCKCIj7pLvzzDMwdfFCEGGSeNJYskW+Y40P81lRsdmeuoMRQBY5VlXKvcM8580aiPEP3WN9LLpHXo0mPiSTAZLIYLm+iHNuWUzNyNSrpBmKrKXlVD6AWXk+H2VSMjqqEqxCOe3oKqR7/D0I7U8k7qMT7eocn2r0fbayjASFduaL3y5etjyAyDCKb7KtpXe1lC5GasE3tHxRwo/8oa3YbdC+Nnlcclpiu6Y2u7XwVewM7EvW3A==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=lAmH7xAUQTGHCPGRPYs6+zYY1TCyVm5q+1RufILlDxJSYtXZEoufM4s/SFqUEgak9MjtP8n+GG0rO922m5Pq8mGj4j6wZBsJa7wIWFEqmLAo8CFPnMUJo4yuR2hJ2g0cgHQWC/xEq5yvQKIWY3tDKpOKiwdaTaz28hSIkLOTPy7sbVkm85tpwpvQ8gYFpZ8cCcUAHA/Ylxu0WJLTe2BfylW4mE3pHfSCCv1e73+uIjXWZ+42qr5W+rJrpb9LnrvB/v+njFSCLjqDtmeiPElbQ8FI/naxGInGklzuAoUA1oMVMP9Yh7BRxhfzAZ4QQuFje4sedvif40PqmqmGng8uZw==
  • Delivered-to: orbit-dev@xxxxxxxxxxx
  • Ironport-sdr: MJqK/hM4aKWp14mP2MJjcKr0izyw4bk1ktEF5uaYUGxS2yCTgHCFj7HJZFNgSvVkPXK6/MXFz0 WtY3Baxjs/sA==
  • Ironport-sdr: AOV3N0xyaNchLRemFf46xVwzj+VcHQnUHUEtLEsZsV3f5GVtTSKAUJqVUszfJeRJpZJHJKAJt9 YIV0zKBqDkIg==
  • List-archive: <https://www.eclipse.org/mailman/private/orbit-dev/>
  • List-help: <mailto:orbit-dev-request@eclipse.org?subject=help>
  • List-subscribe: <https://www.eclipse.org/mailman/listinfo/orbit-dev>, <mailto:orbit-dev-request@eclipse.org?subject=subscribe>
  • List-unsubscribe: <https://www.eclipse.org/mailman/options/orbit-dev>, <mailto:orbit-dev-request@eclipse.org?subject=unsubscribe>
  • Thread-index: AQHW9SfJjypq9SyLp0SfgbjuZcEnYQ==
  • Thread-topic: [orbit-dev] Late 2021-03 M2 Build / Consuming I-builds
  • User-agent: Microsoft-MacOutlook/16.45.21010502

Here are the change requests.  If anyone has time, will you give them a review?  They are all straightforward version bumps, so hopefully will not take a lot of time.

 

Update Guava to 30.1

https://git.eclipse.org/r/c/orbit/orbit-recipes/+/175412

Guava 27.1 is intentionally retained in order to provide transition window.

 

Update Apache HttpComponents HttpClient to 4.13.5

https://git.eclipse.org/r/c/orbit/orbit-recipes/+/175418

 

Update com.fasterxml.jackson to 2.12.1

https://git.eclipse.org/r/c/orbit/orbit-recipes/+/175420

This one is failing because it depends on 175412.  After that one is merged, this one will pass.

 

Thanks!

Tony Homer

 

From: orbit-dev <orbit-dev-bounces@xxxxxxxxxxx> on behalf of Jonah Graham <jonah@xxxxxxxxxxxxxxxx>
Reply-To: Orbit Developer discussion <orbit-dev@xxxxxxxxxxx>
Date: Wednesday, January 27, 2021 at 11:48 AM
To: Orbit Developer discussion <orbit-dev@xxxxxxxxxxx>
Subject: Re: [orbit-dev] Late 2021-03 M2 Build / Consuming I-builds

 

 

On Wed., Jan. 27, 2021, 14:01 Homer, Tony, <tony.homer@xxxxxxxxx> wrote:

Here are the Bugzilla entries:
Update Guava to 30.1 https://bugs.eclipse.org/bugs/show_bug.cgi?id=570581
Update Apache HttpComponents HttpClient to 4.13.5 https://bugs.eclipse.org/bugs/show_bug.cgi?id=570699
Update com.fasterxml.jackson to 2.12.1 https://bugs.eclipse.org/bugs/show_bug.cgi?id=570700

I created CQs for some of the above (as mentioned in comments in above entries).
For several of the bundles, CQs already exist, approved for other (non-Orbit) projects.
If I understand correctly, with 2019/2020 IP changes, I don't need to create piggy-back CQs - I can just use the existing CQs directly.
Is that correct?

 

Yes, that is correct. 

 


On 1/27/21 , 9:51 AM, "orbit-dev on behalf of Homer, Tony" <orbit-dev-bounces@xxxxxxxxxxx on behalf of tony.homer@xxxxxxxxx> wrote:

    Thanks for this, Roland.

    I intend to update 3 sets of dependencies for which the latest version available in Orbit is vulnerable to CVEs.
    I plan to add Guava 30.1 (retaining 27.1 for now in order to give teams time to update), bump Jackson to 2.12.1 and bump apache http-client to 4.5.13.

    I logged one issue in Bugzilla and will add the others today.
    I hope to get the changes opened tomorrow morning (PST).
    I hope to get some quick reviews so that I can merge these by Friday, then I will follow the steps you provided.

    Tony Homer

    On 1/27/21 , 9:44 AM, "orbit-dev on behalf of Roland Grunberg" <orbit-dev-bounces@xxxxxxxxxxx on behalf of rgrunber@xxxxxxxxxx> wrote:

        Hey all,

        Unfortunately I don't think I'll have time to put together an M2 (S-
        build) so platform has continued using M1. Every change is also
        consumable through the latest I-builds so that is also possible. I'm
        still around to keep our builds in good working order, particularly
        leading up to the final release.

        There also haven't been many changes in Orbit for M2 but if any
        committer is interested, I have instructions at the following link on
        how promote an S-build for M2 :

        https://wiki.eclipse.org/Orbit/Adding_Bundles_To_Orbit_In_5_Minutes#Manual_Build_And_Promotion

        If anyone is interested but needs some extra hints/information, feel
        free to contact me.


        Cheers,
        --
        Roland Grunberg

        _______________________________________________
        orbit-dev mailing list
        orbit-dev@xxxxxxxxxxx
        To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/orbit-dev

    _______________________________________________
    orbit-dev mailing list
    orbit-dev@xxxxxxxxxxx
    To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/orbit-dev

_______________________________________________
orbit-dev mailing list
orbit-dev@xxxxxxxxxxx
To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/orbit-dev

Back to the top