Re: [cdi-dev] Weld 5 CR release is now available
by Matej Novotny
EE 10 is targetting JDK 11 and 17, so I am afraid I don't see how crashing
users that aren't even on 18 sends the right signal?
Or are you telling me GlassFish will forbid usage of SM even as it releases
EE 10 compatible version?
Once JDK 18+ gets supported, I suppose we'll have to use an MR JAR (or
maybe there is a better solution, haven't thought about it much) but until
then, we are bound to support it somehow :-/
Regards
Matej
On Wed, Feb 23, 2022 at 5:14 PM arjan tijms <arjan.tijms(a)gmail.com> wrote:
> Hi,
>
> On Wed, Feb 23, 2022 at 4:19 PM Matej Novotny <manovotn(a)redhat.com> wrote:
>
>> I do know that SM should be removed in the future, but we're no there
>> yet. But maybe I am missing something.
>>
>
> That future is getting closer and closer, since JDK 18 is about to be
> released which throws exceptions when the securitymanager is set. To that
> end, adding security actions where we maybe should be removing them
> instead, seems to send the wrong signal.
>
> Kind regards,
> Arjan
>
> _______________________________________________
> cdi-dev mailing list
> cdi-dev(a)eclipse.org
> To unsubscribe from this list, visit
> https://www.eclipse.org/mailman/listinfo/cdi-dev
>
2 years, 2 months
Re: [cdi-dev] Weld 5 CR release is now available
by Matej Novotny
Security actions were used throughout the Lite extension translator module
anyway, this was just an oversight which was added to align it.
What do you suggest we do instead of security actions? There can still be
security manager watching at this point and this was, from my
understanding, the main reason to have them in the first place.
I do know that SM should be removed in the future, but we're no there yet.
But maybe I am missing something.
Matej
On Wed, Feb 23, 2022 at 4:03 PM arjan tijms <arjan.tijms(a)gmail.com> wrote:
> Hi,
>
> Looks good. I do wonder about https://issues.redhat.com/browse/WELD-2705
> though.
>
> Instead of adding more security actions, should we be not focussing on
> removing them? This seems to be a bit in the opposite direction. Isn't it a
> little like after Applets were deprecated to still move javascript
> functionality into applets?
>
> On Wed, Feb 23, 2022 at 1:31 PM Matej Novotny <manovotn(a)redhat.com> wrote:
>
>> Hello,
>>
>> just to let you know, Weld 5 CR1 is now available in Maven Central.
>> There is Weld API 5.0.CR1 and Weld Core 5.0.0.CR1.
>>
>> The differences from Beta are miniscule but this release updates the CDI
>> and TCK versions to latest released and is meant to be a testable basis for
>> ongoing specification release.
>>
>> Release announcement - weld.cdi-spec.org/news/2022/02/23/weld-500CR1/
>>
>> Best regards
>> Matej
>> _______________________________________________
>> cdi-dev mailing list
>> cdi-dev(a)eclipse.org
>> To unsubscribe from this list, visit
>> https://www.eclipse.org/mailman/listinfo/cdi-dev
>>
> _______________________________________________
> cdi-dev mailing list
> cdi-dev(a)eclipse.org
> To unsubscribe from this list, visit
> https://www.eclipse.org/mailman/listinfo/cdi-dev
>
2 years, 2 months
Weld 5 CR release is now available
by Matej Novotny
Hello,
just to let you know, Weld 5 CR1 is now available in Maven Central.
There is Weld API 5.0.CR1 and Weld Core 5.0.0.CR1.
The differences from Beta are miniscule but this release updates the CDI
and TCK versions to latest released and is meant to be a testable basis for
ongoing specification release.
Release announcement - weld.cdi-spec.org/news/2022/02/23/weld-500CR1/
Best regards
Matej
2 years, 2 months
Weld 4.0.3.Final/3.1.9.Final available and entering maintenance mode
by Matej Novotny
Hello,
as you might have noticed, new versions of Weld 3 and 4 are now available.
As usual, there is a release announcement with more details -
http://weld.cdi-spec.org/news/2022/02/16/weld-403Final-319Final/
However, I'd like to bring more attention to the fact that Weld 3 and 4 are
now entering maintenance mode. There are no further planned community
releases for these two versions and we will instead channel our efforts
into Weld 5 and beyond.
Obviously, if there are some critical issues we might issue an SP release,
but other than that we no longer plan to backport fixes into these branches.
You can contact us with any questions or concerns via this mailing list or
our Gitter.
Best regards
Matej
2 years, 2 months