Skip to main content
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [microprofile-wg] [BALLOT][PLAN REVIEW] MicroProfile OpenAPI 4.1
-1 (iJUG)

Why:
Fixing CVE issues by dependency/dependencies is missing - i.e. the TCK has open CVEs on Jackson dependency:

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42004
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42003
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46877

General comment: There are still dependency issues like transitive dependencies on Jakarta EE component spec versions before version 10 left untouched, which will lead to unexpected behaviour for users when they intend to switch from the umbrella spec to specific MP component spec(s) like breaking changes in CDI version (3.x instead of 4.x).
Unfortunately, this is intended behaviour by the majority of the MicroProfile WG members currently, but iJUG disagrees here - we think this should be cleaned up in an upcoming release.

Best,
Jan


Am 20.02.25 um 10:04 schrieb Emily Jiang via microprofile-wg:
To approve and ratify the Plan Review of MicroProfile OpenAPI 4.1 Specification, the Steering Committee Representatives vote is requested. Please respond with +1 (positive), 0 (abstain), or -1 (reject).  Any feedback that you can provide to support your vote will be appreciated.

The MicroProfile Specification Process requires the Specification Committee and the Community to provide feedback during the approval process using the relevant documents:
This ballot runs for seven days, so it ends on Feburary 27th 2025 The ballot requires a Super-majority positive vote of the Steering Committee members.  There is no veto. Community input and Community votes are welcomed. However, only the votes delivered by Steering Committee Representatives will be counted.

--
Thank you
Emily Jiang on behalf of MicroProfile Steering Committee




--
Thanks
Emily


_______________________________________________
microprofile-wg mailing list
microprofile-wg@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://www.eclipse.org/mailman/listinfo/microprofile-wg


Back to the top