View Source

Notes on the MyFaces Core 1.2.9 Release

Release manager: Leonardo Uribe

Timeline

Proposed release date: 2010-06-11

Issues

Testing

Here's how you can help us test the distribution.

Download a nightly build of the distribution assemblies:

http://people.apache.org/builds/myfaces/nightly/

Configure a <repository> for Maven 2:

        <repository>
           <id>apache.snapshots</id>
           <name>Apache Snapshot Repository</name>
           <url>http://people.apache.org/repo/m2-snapshot-repository</url>
        </repository>

And declare a dependency on the 1.2.9 snapshots:

        <dependency>
            <groupId>org.apache.myfaces.core</groupId>
            <artifactId>myfaces-api</artifactId>
            <version>1.2.9-SNAPSHOT</version>
        </dependency>
        <dependency>
            <groupId>org.apache.myfaces.core</groupId>
            <artifactId>myfaces-impl</artifactId>
            <version>1.2.9-SNAPSHOT</version>
        </dependency>

Note: Maven 2.0.4 will not download a new version if one is already present in your local repository. You will need to delete $M2_REPO/org/apache/myfaces/core to force Maven to download the new version. (Usually, $M2_REPO is <your home directory>/.m2/repository .)

Test your application, then, let us know the results (good or bad!) on dev at myfaces.apache.org. (You must be subscribed to post. See: http://myfaces.apache.org/mail-lists.html.)

Tasks

Proposed Release Announcement

}}}

== Diary ==
<<Anchor(diary)>>

1. Preparing shared 3.0.8

    * Trying to prepare SUCCESS!.
{{{
mvn release:prepare -DtagBase=https://svn.apache.org/repos/asf/myfaces/shared/branches -Dusername=lu4242 -Dscm.password=??? -Dtag=3_0_8 -DdryRun=true

Release it! FAIL.

mvn release:prepare -DtagBase=https://svn.apache.org/repos/asf/myfaces/shared/branches -Dusername=lu4242 -Dscm.password=??? -Dtag=3_0_8 -Dresume=false

mvn install, mvn release:rollback and try again SUCCESS!

mvn release:prepare -DtagBase=https://svn.apache.org/repos/asf/myfaces/shared/branches -Dusername=lu4242 -Dscm.password=??? -Dtag=3_0_8 -Dresume=false

2. Preparing core 1.2.9

copied trunk to temporary work branch core/branches/1_2_9prepare
Set all dependencies to org.apache.myfaces.shared artifacts to version "3.0.8" instead 3.0.8-SNAPSHOT
-DdryRun=true SUCCESS!

mvn release:prepare -DtagBase=https://svn.apache.org/repos/asf/myfaces/core/branches -Dusername=lu4242 -Dscm.password=??? -Dtag=1_2_9 -DdryRun=true

Do it! -Dresume=false SUCCESS!

mvn release:prepare -DtagBase=https://svn.apache.org/repos/asf/myfaces/core/branches -Dusername=lu4242 -Dscm.password=??? -Dtag=1_2_9 -Dresume=false

Checkout 1_2_9 branch mvn install -DperformRelease=true

3. Deploy on local repo

*shared 3.0.8 and core 1.2.9

mvn clean deploy -DperformRelease=true -DaltDeploymentRepository=myfaces-local-staging::default::scp://localhost/home/lu4242/stage/repo129 -Psign-artifacts -Dpassphrase=???

   *copy manually using scp to the account on people.apache.org. Due to a bug on linux \[WWW\] http://jira.codehaus.org/browse/MDEPLOY-62 deploy not work on linux. SUCCESS

   cd home/lu4242/stage/repo129
   scp -p -r org lu4242@people.apache.org:/home/lu4242/public_html/myfaces129

4. JIRA Release Management

Create 1.2.9 and 1.2.9-SNAPSHOT versions
Find resolved issues and close them
Unresolved issues moved to 1.2.9-SNAPSHOT
Issues fixed on both 1.2.9 and 1.1.7 should be saved on a text file to add it later on release of 1.1.7

5. Next step is the TCK
TCK passed confirmed by Leonardo Uribe

6. Generate assembly

Try to do it automatically javadoc and other stuff SUCCESS. It generate myfaces-core-1.2.9-bin.tar.gz and zip,


cd 1_2_9
mvn install -Pgenerate-assembly
cd assembly
mvn package

Create myfaces-core-1.2.9-src.tar.gz and zip manually and create .asc .md5 .sha1 for bin and src


openssl md5 myfaces-core-1.2.9-src.tar.gz > myfaces-core-1.2.9-src.tar.gz.md5
openssl md5 myfaces-core-1.2.9-src.zip > myfaces-core-1.2.9-src.zip.md5
openssl sha1 myfaces-core-1.2.9-src.tar.gz > myfaces-core-1.2.9-src.tar.gz.sha1
openssl sha1 myfaces-core-1.2.9-src.zip > myfaces-core-1.2.9-src.zip.sha1
gpg --armor --output myfaces-core-1.2.9-src.tar.gz.asc --detach-sig myfaces-core-1.2.9-src.tar.gz
gpg --armor --output myfaces-core-1.2.9-src.zip.asc --detach-sig myfaces-core-1.2.9-src.zip

openssl md5 myfaces-core-1.2.9-bin.tar.gz > myfaces-core-1.2.9-bin.tar.gz.md5
openssl md5 myfaces-core-1.2.9-bin.zip > myfaces-core-1.2.9-bin.zip.md5
openssl sha1 myfaces-core-1.2.9-bin.tar.gz > myfaces-core-1.2.9-bin.tar.gz.sha1
openssl sha1 myfaces-core-1.2.9-bin.zip > myfaces-core-1.2.9-bin.zip.sha1
gpg --armor --output myfaces-core-1.2.9-bin.tar.gz.asc --detach-sig myfaces-core-1.2.9-bin.tar.gz
gpg --armor --output myfaces-core-1.2.9-bin.zip.asc --detach-sig myfaces-core-1.2.9-bin.zip

Copy to private account on people.apache.org

scp -p -r myfaces-core-1.2.9-bin* lu4242@people.apache.org:/home/lu4242/public_html/myfaces129binsrc/binaries
scp -p -r myfaces-core-1.2.9-src* lu4242@people.apache.org:/home/lu4242/public_html/myfaces129binsrc/sources

7. VOTE

Hi,

I was running the needed tasks to get the 1.2.9 release of Apache
MyFaces core out.

The artifacts passed all TCK test.

Please note that this vote concerns all of the following parts:
 1. Maven artifact group "org.apache.myfaces.shared" v3.0.8  [1]
 2. Maven artifact group "org.apache.myfaces.core" v1.2.9  [1]

The artifacts are deployed to my private Apache account ([1] and [3] for binary and source packages).

The release notes could be found at [4].

Also the clirr test does not show binary incompatibilities with myfaces-api.

Please take a look at the "1.2.9" artifacts and vote!

Please note: This vote is "majority approval" with a minimum of three
+1 votes (see [3]).

------------------------------------------------
[ ] +1 for community members who have reviewed the bits
[ ] +0
[ ] -1 for fatal flaws that should cause these bits not to be released,
 and why..............
------------------------------------------------

Thanks,
Leonardo Uribe

[1] http://people.apache.org/~lu4242/myfaces129
[2] http://www.apache.org/foundation/voting.html#ReleaseVotes
[3] http://people.apache.org/~lu4242/myfaces129binsrc
[4] http://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=10600&styleName=Html&version=12315113

8. Clirr report to check binary incompatibilities success

9. Vote closed, starting distribution

copy on /www/www.apache.org/dist/myfaces/source and /www/www.apache.org/dist/myfaces/binaries

cd /home/lu4242/public_html/myfaces129binsrc/sources
cp * /www/www.apache.org/dist/myfaces/source
cd /home/lu4242/public_html/myfaces129binsrc/binaries
cp * /www/www.apache.org/dist/myfaces/binaries

copy shared on /www/people.apache.org/repo/m2-ibiblio-rsync-repository/org/apache/myfaces/shared SUCCESS

Alternative for manual copy:

mvn clean deploy -DaltDeploymentRepository=myfaces-staging::default::scpexe://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository -Psign-artifacts -DperformRelease=true -Dpassphrase=???

copy core on /www/people.apache.org/repo/m2-ibiblio-rsync-repository/org/apache/myfaces/core SUCCESS

Alternative for manual copy:

mvn clean deploy -DaltDeploymentRepository=myfaces-staging::default::scpexe://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository -Psign-artifacts -DperformRelease=true -Dpassphrase=???

SVN Tags for projects
http://svn.apache.org/repos/asf/myfaces/shared/tags/3_0_8/
http://svn.apache.org/repos/asf/myfaces/core/tags/1_2_9/
Site deploy for shared and core (mvn site:site and mvn site:deploy)

10. Announce

Sent announcement mail
- To: announce@apache.org, announce@myfaces.apache.org
- Cc: dev@myfaces.apache.org, users@myfaces.apache.org
Sent announcement to jcp-open@apache.org (Necessary for TCK certified releases)


Subject: [ANNOUNCE] MyFaces Core v1.2.9 Release

The Apache MyFaces team is pleased to announce the release of MyFaces Core 1.2.9.

MyFaces Core is a JavaServer(tm) Faces 1.2 implementation as specified by JSR-252.  MyFaces Core has passed Sun's JSR-252 TCK and is 100% compliant with the JSR-252 specification. 

Please note this release also contains a fix for:

MYFACES-2749 Encrypted View State does not include Message Authentication Code (MAC)

This fix prevents padding oracle attack on view state when client side state saving is used.

MyFaces Core 1.2.9 is available in both binary and source distributions.

    * http://myfaces.apache.org/download.html

MyFaces Core is also available in the central Maven repository under Group ID "org.apache.myfaces.core".

Release Notes - MyFaces Core - Version 1.2.9

Bug

    * [MYFACES-1834] - suffix added to component id when including files
    * [MYFACES-1838] - javax.crypto.BadPaddingException: Given final block not properly padded
    * [MYFACES-2433] - Variable name error in oamClearHiddenInput and oamSetHiddenInput: use formname instead of formName
    * [MYFACES-2463] - CLONE -<f:param> violates the JSF spec
    * [MYFACES-2491] - _ErrorPageWriter does not print component properties
    * [MYFACES-2525] - Split javax.faces package in OSGi
    * [MYFACES-2611] - UIComponentBase.getFacetsAndChildren() must not access the component's facets and children directly
    * [MYFACES-2684] - UIComponentBase.saveAttachedState save transient elements as null values on List case
    * [MYFACES-2685] - Cannot call invokeOnComponent on UIColumn without rowIndex
    * [MYFACES-2686] - javax.faces.FacesException: java.lang.NumberFormatException while initializing if MANIFEST.MF version exceeds int value
    * [MYFACES-2726] - CommandLink renderer do not escape \ characters in generated javascript
    * [MYFACES-2749] - Encrypted View State does not include Message Authentication Code (MAC)

Improvement

    * [MYFACES-2679] - Use a constant to identify FacesCompositeELResolver.Scope value
    * [MYFACES-2680] - Cache renderKit used
    * [MYFACES-2691] - Enhance MessageUtils adding methods when custom library bundle should be scanned
    * [MYFACES-2737] - Cache FacesContext on UIComponentBase instances

regards

Leonardo Uribe