[
Date Prev][
Date Next][
Thread Prev][
Thread Next][
Date Index][
Thread Index]
[
List Home]
Re: [orbit-dev] Late 2021-03 M2 Build / Consuming I-builds
|
- From: "Homer, Tony" <tony.homer@xxxxxxxxx>
- Date: Wed, 27 Jan 2021 19:01:00 +0000
- Accept-language: en-US
- Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=intel.com; dmarc=pass action=none header.from=intel.com; dkim=pass header.d=intel.com; arc=none
- Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=TQd1ie0ss4G7/mxHNkuG9D5Nx1uN9Q7pc24Rp8u/Vbg=; b=lZnu21IqwxogZKsK97hRTzToz4MxP9OFTr3MjqvUCeoZ2z1LwfXeMmfI86/GhNs3pP2ksjAVHwbhW1C+4lFrizY0JsdX2Iu8sYu4k0w8xXztAezNCdM38xnuXAosL/dXHZ9n7D+3CTKEwAyqCcQx2Sdr3EluS1H/XLoO/KOdPY4esAK9dNSfKQgmH/+S6M9DjCOsaFLhxIY+1lMckfcuzIYgT6ScXcKmqbliVTR1Q82WV9leNWc2BD9PBDsMKdg2d+A6Gn6VtK1+ysmbi4rrPptd0481pmYyiBKb9/xaC1j/S8WkY0Pzo57codP56DzJiH6OsVZs6dtbUrFWGge6fg==
- Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=axtXHPzaiRCKzBN1rKKvJPmicwpSCf34CzpI8tjHgcM7t05Kdpg+7E7zC+LgHv39xHOa62imFamAhpvFdHLRwJhU8j/Km/wtTlKEnmfoD5Dwh/6j5qvXw/th7oVqTgILBEQ9sbPVyByZ6odiq86MOa9EdLHQWiaNRCLtTWd82CZ33DXmQOClDMarEMoccN8fVAyd7rivfx9YoVLvL0YYDKRd9IwFuomhg9QFdzVVH5xriM55dVvX2lqGoP4oa235B3zOEOnHxt2yPX03rqr521YuSAE//yUhpatuw+UrBGqlRsPInX67XjstybILQMgh/8aNV4u+yhp6C8j77SamTg==
- Delivered-to: orbit-dev@xxxxxxxxxxx
- Ironport-sdr: Bdkq1oYDdIoJFv+FseWUMQjpHdrTzMluTiqurk2Zfqu9vqlIex0q1zUnVgdShbvjZ46WtUJigd YgHmf71PdFkA==
- Ironport-sdr: TCVfnUkXcivwF18QOlZHgWSSmb71M0WxuHqtPcFtM1XaPPWwXuxEShde21cKF2uPYIf+KOpTg7 yo8pYU4mRYXw==
- List-archive: <https://www.eclipse.org/mailman/private/orbit-dev/>
- List-help: <mailto:orbit-dev-request@eclipse.org?subject=help>
- List-subscribe: <https://www.eclipse.org/mailman/listinfo/orbit-dev>, <mailto:orbit-dev-request@eclipse.org?subject=subscribe>
- List-unsubscribe: <https://www.eclipse.org/mailman/options/orbit-dev>, <mailto:orbit-dev-request@eclipse.org?subject=unsubscribe>
- Thread-index: AQHW9N7AktyBBBIEz0qM5Vgk0/BIlQ==
- Thread-topic: [orbit-dev] Late 2021-03 M2 Build / Consuming I-builds
- User-agent: Microsoft-MacOutlook/16.45.21010502
Here are the Bugzilla entries:
Update Guava to 30.1 https://bugs.eclipse.org/bugs/show_bug.cgi?id=570581
Update Apache HttpComponents HttpClient to 4.13.5 https://bugs.eclipse.org/bugs/show_bug.cgi?id=570699
Update com.fasterxml.jackson to 2.12.1 https://bugs.eclipse.org/bugs/show_bug.cgi?id=570700
I created CQs for some of the above (as mentioned in comments in above entries).
For several of the bundles, CQs already exist, approved for other (non-Orbit) projects.
If I understand correctly, with 2019/2020 IP changes, I don't need to create piggy-back CQs - I can just use the existing CQs directly.
Is that correct?
On 1/27/21 , 9:51 AM, "orbit-dev on behalf of Homer, Tony" <orbit-dev-bounces@xxxxxxxxxxx on behalf of tony.homer@xxxxxxxxx> wrote:
Thanks for this, Roland.
I intend to update 3 sets of dependencies for which the latest version available in Orbit is vulnerable to CVEs.
I plan to add Guava 30.1 (retaining 27.1 for now in order to give teams time to update), bump Jackson to 2.12.1 and bump apache http-client to 4.5.13.
I logged one issue in Bugzilla and will add the others today.
I hope to get the changes opened tomorrow morning (PST).
I hope to get some quick reviews so that I can merge these by Friday, then I will follow the steps you provided.
Tony Homer
On 1/27/21 , 9:44 AM, "orbit-dev on behalf of Roland Grunberg" <orbit-dev-bounces@xxxxxxxxxxx on behalf of rgrunber@xxxxxxxxxx> wrote:
Hey all,
Unfortunately I don't think I'll have time to put together an M2 (S-
build) so platform has continued using M1. Every change is also
consumable through the latest I-builds so that is also possible. I'm
still around to keep our builds in good working order, particularly
leading up to the final release.
There also haven't been many changes in Orbit for M2 but if any
committer is interested, I have instructions at the following link on
how promote an S-build for M2 :
https://wiki.eclipse.org/Orbit/Adding_Bundles_To_Orbit_In_5_Minutes#Manual_Build_And_Promotion
If anyone is interested but needs some extra hints/information, feel
free to contact me.
Cheers,
--
Roland Grunberg
_______________________________________________
orbit-dev mailing list
orbit-dev@xxxxxxxxxxx
To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/orbit-dev
_______________________________________________
orbit-dev mailing list
orbit-dev@xxxxxxxxxxx
To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/orbit-dev