Notes on the MyFaces Core 1.1.8 Release
Release manager: Leonardo Uribe
Timeline
- Proposed release date: 2010-06-11
Issues
Testing
Here's how you can help us test the distribution.
Download a nightly build of the distribution assemblies:
Configure a <repository> for Maven 2:
<repository>
<id>apache.snapshots</id>
<name>Apache Snapshot Repository</name>
<url>http://people.apache.org/repo/m2-snapshot-repository</url>
</repository>
And declare a dependency on the 1.1.8 snapshots:
<dependency>
<groupId>org.apache.myfaces.core</groupId>
<artifactId>myfaces-api</artifactId>
<version>1.1.8-SNAPSHOT</version>
</dependency>
<dependency>
<groupId>org.apache.myfaces.core</groupId>
<artifactId>myfaces-impl</artifactId>
<version>1.1.8-SNAPSHOT</version>
</dependency>
Note: Maven 2.0.4 will not download a new version if one is already present in your local repository. You will need to delete $M2_REPO/org/apache/myfaces/core to force Maven to download the new version. (Usually, $M2_REPO is <your home directory>/.m2/repository .)
Test your application, then, let us know the results (good or bad!) on dev at myfaces.apache.org. (You must be subscribed to post. See: http://myfaces.apache.org/mail-lists.html.)
Tasks
Proposed Release Announcement
}}}
== Diary ==
<<Anchor(diary)>>
1. Preparing shared 2.0.11
* Trying to prepare SUCCESS!.
{{{
mvn release:prepare -DtagBase=https://svn.apache.org/repos/asf/myfaces/shared/branches -Dusername=lu4242 -Dscm.password=??? -Dtag=2_0_11 -DdryRun=true
- Release it! FAIL.
mvn release:prepare -DtagBase=https://svn.apache.org/repos/asf/myfaces/shared/branches -Dusername=lu4242 -Dscm.password=??? -Dtag=2_0_11 -Dresume=false
- mvn install, mvn release:rollback and try again SUCCESS!
mvn release:prepare -DtagBase=https://svn.apache.org/repos/asf/myfaces/shared/branches -Dusername=lu4242 -Dscm.password=??? -Dtag=2_0_11 -Dresume=false
2. Preparing core 1.1.8
- copied trunk to temporary work branch core/branches/1_1_8prepare
- Set all dependencies to org.apache.myfaces.shared artifacts to version "2.0.11" instead 2.0.11-SNAPSHOT
- -DdryRun=true SUCCESS!
mvn release:prepare -DtagBase=https://svn.apache.org/repos/asf/myfaces/core/branches -Dusername=lu4242 -Dscm.password=??? -Dtag=1_1_8 -DdryRun=true
- Do it! -Dresume=false SUCCESS!
mvn release:prepare -DtagBase=https://svn.apache.org/repos/asf/myfaces/core/branches -Dusername=lu4242 -Dscm.password=??? -Dtag=1_1_8 -Dresume=false
- Move generated branch from tags to branches. Checkout 1_1_8 branch mvn install
3. Deploy on local repo
- shared 2.0.11
mvn clean deploy -DperformRelease=true -DaltDeploymentRepository=myfaces-local-staging::default::scp://localhost/home/lu4242/stage/repo118 -Psign-artifacts -Dpassphrase=???
- core 1.1.8
mvn clean deploy -DperformRelease=true -DaltDeploymentRepository=myfaces-local-staging::default::scp://localhost/home/lu4242/stage/repo118 -Psign-artifacts -Dpassphrase=???
*copy manually using scp to the account on people.apache.org. Due to a bug on linux [WWW] http://jira.codehaus.org/browse/MDEPLOY-62
deploy not work on linux. SUCCESS
cd home/lu4242/stage/repo scp -p -r org lu4242@people.apache.org:/home/lu4242/public_html/myfaces118
4. JIRA Release Management
- Create 1.1.8 and 1.1.8-SNAPSHOT versions
- Find resolved issues and close them
- Unresolved issues moved to 1.1.8-SNAPSHOT
5. Generate assembly
- Try to do it automatically javadoc and other stuff SUCCESS. It generate myfaces-core-1.1.8-bin.tar.gz and zip,
cd 1_1_8 mvn install -Pgenerate-assembly cd assembly mvn assembly:assembly -Psign-artifacts -Dpassphrase=???
- Create myfaces-core-1.1.8-src.tar.gz and zip manually and create .asc .md5 .sha1 for bin and src
openssl md5 myfaces-core-1.1.8-src.tar.gz > myfaces-core-1.1.8-src.tar.gz.md5 openssl md5 myfaces-core-1.1.8-src.zip > myfaces-core-1.1.8-src.zip.md5 openssl sha1 myfaces-core-1.1.8-src.tar.gz > myfaces-core-1.1.8-src.tar.gz.sha1 openssl sha1 myfaces-core-1.1.8-src.zip > myfaces-core-1.1.8-src.zip.sha1 gpg --armor --output myfaces-core-1.1.8-src.tar.gz.asc --detach-sig myfaces-core-1.1.8-src.tar.gz gpg --armor --output myfaces-core-1.1.8-src.zip.asc --detach-sig myfaces-core-1.1.8-src.zip openssl md5 myfaces-core-1.1.8-bin.tar.gz > myfaces-core-1.1.8-bin.tar.gz.md5 openssl md5 myfaces-core-1.1.8-bin.zip > myfaces-core-1.1.8-bin.zip.md5 openssl sha1 myfaces-core-1.1.8-bin.tar.gz > myfaces-core-1.1.8-bin.tar.gz.sha1 openssl sha1 myfaces-core-1.1.8-bin.zip > myfaces-core-1.1.8-bin.zip.sha1 gpg --armor --output myfaces-core-1.1.8-bin.tar.gz.asc --detach-sig myfaces-core-1.1.8-bin.tar.gz gpg --armor --output myfaces-core-1.1.8-bin.zip.asc --detach-sig myfaces-core-1.1.8-bin.zip
- Copy to private account on people.apache.org
scp -p -r myfaces-core-1.1.8-bin* lu4242@people.apache.org:/home/lu4242/public_html/myfaces118binsrc/binaries scp -p -r myfaces-core-1.1.8-src* lu4242@people.apache.org:/home/lu4242/public_html/myfaces118binsrc/sources
6. TCK Test
- TCK passed confirmed by Leonardo Uribe
7. Clirr check SUCCESS!
mvn clirr:check -DcomparisonVersion=1.1.6
8. VOTE
Hi, I was running the needed tasks to get the 1.1.8 release of Apache MyFaces core out. The artifacts passed all TCK test. Please note that this vote concerns all of the following parts: 1. Maven artifact group "org.apache.myfaces.shared" v2.0.11 [1] 2. Maven artifact group "org.apache.myfaces.core" v1.1.8 [1] The artifacts are deployed to my private Apache account ([1] and [3] for binary and source packages). The release notes could be found at [4]. Also the clirr test does not show binary incompatibilities with myfaces-api. Please take a look at the "1.1.8" artifacts and vote! Please note: This vote is "majority approval" with a minimum of three +1 votes (see [3]). ------------------------------------------------ [ ] +1 for community members who have reviewed the bits [ ] +0 [ ] -1 for fatal flaws that should cause these bits not to be released, and why.............. ------------------------------------------------ Thanks, Leonardo Uribe [1] http://people.apache.org/~lu4242/myfaces118 [2] http://www.apache.org/foundation/voting.html#ReleaseVotes [3] http://people.apache.org/~lu4242/myfaces118binsrc [4] http://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=10600&styleName=Html&version=12315115
9. Vote closed, starting distribution
- copy on /www/www.apache.org/dist/myfaces/source and /www/www.apache.org/dist/myfaces/binaries
cd /home/lu4242/public_html/myfaces118binsrc/sources cp * /www/www.apache.org/dist/myfaces/source cd /home/lu4242/public_html/myfaces118binsrc/binaries cp * /www/www.apache.org/dist/myfaces/binaries
- copy shared on /www/people.apache.org/repo/m2-ibiblio-rsync-repository/org/apache/myfaces/shared SUCCESS
Alternative for manual copy: mvn clean deploy -DaltDeploymentRepository=myfaces-staging::default::scpexe://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository -Psign-artifacts -DperformRelease=true -Dpassphrase=???
- copy core on /www/people.apache.org/repo/m2-ibiblio-rsync-repository/org/apache/myfaces/core SUCCESS
Alternative for manual copy: mvn clean deploy -DaltDeploymentRepository=myfaces-staging::default::scpexe://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository -Psign-artifacts -Dpassphrase=??? -DperformRelease=true
- SVN Tags for projects
http://svn.apache.org/repos/asf/myfaces/shared/tags/2_0_11/
http://svn.apache.org/repos/asf/myfaces/core/tags/1_1_8/ - Site deploy for shared and core (mvn site:site and mvn site:deploy)
10. Announce
- Sent announcement mail
- To: announce@apache.org, announce@myfaces.apache.org
- Cc: dev@myfaces.apache.org, users@myfaces.apache.org
- Sent announcement to jcp-open@apache.org (Necessary for TCK certified releases)
Subject: [ANNOUNCE] MyFaces Core v1.1.8 Release
The Apache MyFaces team is pleased to announce the release of MyFaces Core 1.1.8.
MyFaces Core is a JavaServer(tm) Faces 1.1 implementation as specified by JSR-127. MyFaces Core has passed Sun's JSR-127 TCK and is 100% compliant with the JSR-127 specification.
Please note this release also contains a fix for:
MYFACES-2749 Encrypted View State does not include Message Authentication Code (MAC)
This fix prevents padding oracle attack on view state when client side state saving is used.
MyFaces Core 1.1.8 is available in both binary and source distributions.
* http://myfaces.apache.org/download.html
MyFaces Core is also available in the central Maven repository under Group ID "org.apache.myfaces.core".
Release Notes - MyFaces Core - Version 1.1.8
Bug
* [MYFACES-2006] - getTableIndex: Integer to String (ClassCastException)
* [MYFACES-2382] - Duplicate id exception when weblogic portal and jsf native portlet (faces-adapter.jar) is used
* [MYFACES-2525] - Split javax.faces package in OSGi
* [MYFACES-2566] - HTMLEncoder requiring StringBuilder class from JDK 5
* [MYFACES-2684] - UIComponentBase.saveAttachedState save transient elements as null values on List case
* [MYFACES-2726] - CommandLink renderer do not escape \ characters in generated javascript
* [MYFACES-2749] - Encrypted View State does not include Message Authentication Code (MAC)
Improvement
* [MYFACES-2680] - Cache renderKit used
* [MYFACES-2691] - Enhance MessageUtils adding methods when custom library bundle should be scanned
* [MYFACES-2737] - Cache FacesContext on UIComponentBase instances
Enjoy!
regards
Leonardo Uribe