View Source

Notes on the MyFaces Core 1.1.8 Release

Release manager: Leonardo Uribe

Timeline

Proposed release date: 2010-06-11

Issues

Testing

Here's how you can help us test the distribution.

Download a nightly build of the distribution assemblies:

http://people.apache.org/builds/myfaces/nightly/

Configure a <repository> for Maven 2:

        <repository>
           <id>apache.snapshots</id>
           <name>Apache Snapshot Repository</name>
           <url>http://people.apache.org/repo/m2-snapshot-repository</url>
        </repository>

And declare a dependency on the 1.1.8 snapshots:

        <dependency>
            <groupId>org.apache.myfaces.core</groupId>
            <artifactId>myfaces-api</artifactId>
            <version>1.1.8-SNAPSHOT</version>
        </dependency>
        <dependency>
            <groupId>org.apache.myfaces.core</groupId>
            <artifactId>myfaces-impl</artifactId>
            <version>1.1.8-SNAPSHOT</version>
        </dependency>

Note: Maven 2.0.4 will not download a new version if one is already present in your local repository. You will need to delete $M2_REPO/org/apache/myfaces/core to force Maven to download the new version. (Usually, $M2_REPO is <your home directory>/.m2/repository .)

Test your application, then, let us know the results (good or bad!) on dev at myfaces.apache.org. (You must be subscribed to post. See: http://myfaces.apache.org/mail-lists.html.)

Tasks

Proposed Release Announcement

}}}

== Diary ==
<<Anchor(diary)>>

1. Preparing shared 2.0.11

    * Trying to prepare SUCCESS!.
{{{
mvn release:prepare -DtagBase=https://svn.apache.org/repos/asf/myfaces/shared/branches -Dusername=lu4242 -Dscm.password=??? -Dtag=2_0_11 -DdryRun=true

Release it! FAIL.

mvn release:prepare -DtagBase=https://svn.apache.org/repos/asf/myfaces/shared/branches -Dusername=lu4242 -Dscm.password=??? -Dtag=2_0_11 -Dresume=false

mvn install, mvn release:rollback and try again SUCCESS!

mvn release:prepare -DtagBase=https://svn.apache.org/repos/asf/myfaces/shared/branches -Dusername=lu4242 -Dscm.password=??? -Dtag=2_0_11 -Dresume=false

2. Preparing core 1.1.8

copied trunk to temporary work branch core/branches/1_1_8prepare
Set all dependencies to org.apache.myfaces.shared artifacts to version "2.0.11" instead 2.0.11-SNAPSHOT
-DdryRun=true SUCCESS!

mvn release:prepare -DtagBase=https://svn.apache.org/repos/asf/myfaces/core/branches -Dusername=lu4242 -Dscm.password=??? -Dtag=1_1_8 -DdryRun=true

Do it! -Dresume=false SUCCESS!

mvn release:prepare -DtagBase=https://svn.apache.org/repos/asf/myfaces/core/branches -Dusername=lu4242 -Dscm.password=??? -Dtag=1_1_8 -Dresume=false

Move generated branch from tags to branches. Checkout 1_1_8 branch mvn install

3. Deploy on local repo

shared 2.0.11

mvn clean deploy -DperformRelease=true -DaltDeploymentRepository=myfaces-local-staging::default::scp://localhost/home/lu4242/stage/repo118 -Psign-artifacts -Dpassphrase=???

core 1.1.8

mvn clean deploy -DperformRelease=true -DaltDeploymentRepository=myfaces-local-staging::default::scp://localhost/home/lu4242/stage/repo118 -Psign-artifacts -Dpassphrase=???

   *copy manually using scp to the account on people.apache.org. Due to a bug on linux \[WWW\] http://jira.codehaus.org/browse/MDEPLOY-62 deploy not work on linux. SUCCESS

   cd home/lu4242/stage/repo
   scp -p -r org lu4242@people.apache.org:/home/lu4242/public_html/myfaces118

4. JIRA Release Management

Create 1.1.8 and 1.1.8-SNAPSHOT versions
Find resolved issues and close them
Unresolved issues moved to 1.1.8-SNAPSHOT

5. Generate assembly

Try to do it automatically javadoc and other stuff SUCCESS. It generate myfaces-core-1.1.8-bin.tar.gz and zip,


cd 1_1_8
mvn install -Pgenerate-assembly
cd assembly
mvn assembly:assembly -Psign-artifacts -Dpassphrase=???

Create myfaces-core-1.1.8-src.tar.gz and zip manually and create .asc .md5 .sha1 for bin and src


openssl md5 myfaces-core-1.1.8-src.tar.gz > myfaces-core-1.1.8-src.tar.gz.md5
openssl md5 myfaces-core-1.1.8-src.zip > myfaces-core-1.1.8-src.zip.md5
openssl sha1 myfaces-core-1.1.8-src.tar.gz > myfaces-core-1.1.8-src.tar.gz.sha1
openssl sha1 myfaces-core-1.1.8-src.zip > myfaces-core-1.1.8-src.zip.sha1
gpg --armor --output myfaces-core-1.1.8-src.tar.gz.asc --detach-sig myfaces-core-1.1.8-src.tar.gz
gpg --armor --output myfaces-core-1.1.8-src.zip.asc --detach-sig myfaces-core-1.1.8-src.zip

openssl md5 myfaces-core-1.1.8-bin.tar.gz > myfaces-core-1.1.8-bin.tar.gz.md5
openssl md5 myfaces-core-1.1.8-bin.zip > myfaces-core-1.1.8-bin.zip.md5
openssl sha1 myfaces-core-1.1.8-bin.tar.gz > myfaces-core-1.1.8-bin.tar.gz.sha1
openssl sha1 myfaces-core-1.1.8-bin.zip > myfaces-core-1.1.8-bin.zip.sha1
gpg --armor --output myfaces-core-1.1.8-bin.tar.gz.asc --detach-sig myfaces-core-1.1.8-bin.tar.gz
gpg --armor --output myfaces-core-1.1.8-bin.zip.asc --detach-sig myfaces-core-1.1.8-bin.zip

Copy to private account on people.apache.org

scp -p -r myfaces-core-1.1.8-bin* lu4242@people.apache.org:/home/lu4242/public_html/myfaces118binsrc/binaries
scp -p -r myfaces-core-1.1.8-src* lu4242@people.apache.org:/home/lu4242/public_html/myfaces118binsrc/sources

6. TCK Test

TCK passed confirmed by Leonardo Uribe

7. Clirr check SUCCESS!

mvn clirr:check -DcomparisonVersion=1.1.6

8. VOTE

Hi,

I was running the needed tasks to get the 1.1.8 release of Apache
MyFaces core out.

The artifacts passed all TCK test.

Please note that this vote concerns all of the following parts:
 1. Maven artifact group "org.apache.myfaces.shared" v2.0.11  [1]
 2. Maven artifact group "org.apache.myfaces.core" v1.1.8  [1]

The artifacts are deployed to my private Apache account ([1] and [3] for binary and source packages).

The release notes could be found at [4].

Also the clirr test does not show binary incompatibilities with myfaces-api.

Please take a look at the "1.1.8" artifacts and vote!

Please note: This vote is "majority approval" with a minimum of three
+1 votes (see [3]).

------------------------------------------------
[ ] +1 for community members who have reviewed the bits
[ ] +0
[ ] -1 for fatal flaws that should cause these bits not to be released,
 and why..............
------------------------------------------------

Thanks,
Leonardo Uribe

[1] http://people.apache.org/~lu4242/myfaces118
[2] http://www.apache.org/foundation/voting.html#ReleaseVotes
[3] http://people.apache.org/~lu4242/myfaces118binsrc
[4] http://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=10600&styleName=Html&version=12315115

9. Vote closed, starting distribution

copy on /www/www.apache.org/dist/myfaces/source and /www/www.apache.org/dist/myfaces/binaries

cd /home/lu4242/public_html/myfaces118binsrc/sources
cp * /www/www.apache.org/dist/myfaces/source
cd /home/lu4242/public_html/myfaces118binsrc/binaries
cp * /www/www.apache.org/dist/myfaces/binaries

copy shared on /www/people.apache.org/repo/m2-ibiblio-rsync-repository/org/apache/myfaces/shared SUCCESS

Alternative for manual copy:

mvn clean deploy -DaltDeploymentRepository=myfaces-staging::default::scpexe://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository -Psign-artifacts -DperformRelease=true -Dpassphrase=???

copy core on /www/people.apache.org/repo/m2-ibiblio-rsync-repository/org/apache/myfaces/core SUCCESS

Alternative for manual copy:

mvn clean deploy -DaltDeploymentRepository=myfaces-staging::default::scpexe://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository -Psign-artifacts -Dpassphrase=??? -DperformRelease=true

SVN Tags for projects
http://svn.apache.org/repos/asf/myfaces/shared/tags/2_0_11/
http://svn.apache.org/repos/asf/myfaces/core/tags/1_1_8/
Site deploy for shared and core (mvn site:site and mvn site:deploy)

10. Announce

Sent announcement mail
- To: announce@apache.org, announce@myfaces.apache.org
- Cc: dev@myfaces.apache.org, users@myfaces.apache.org
Sent announcement to jcp-open@apache.org (Necessary for TCK certified releases)


Subject: [ANNOUNCE] MyFaces Core v1.1.8 Release

The Apache MyFaces team is pleased to announce the release of MyFaces Core 1.1.8.

MyFaces Core is a JavaServer(tm) Faces 1.1 implementation as specified by JSR-127.  MyFaces Core has passed Sun's JSR-127 TCK and is 100% compliant with the JSR-127 specification. 

Please note this release also contains a fix for:

MYFACES-2749 Encrypted View State does not include Message Authentication Code (MAC)

This fix prevents padding oracle attack on view state when client side state saving is used.

MyFaces Core 1.1.8 is available in both binary and source distributions.

    * http://myfaces.apache.org/download.html

MyFaces Core is also available in the central Maven repository under Group ID "org.apache.myfaces.core".

Release Notes - MyFaces Core - Version 1.1.8

Bug

    * [MYFACES-2006] - getTableIndex: Integer to String (ClassCastException)
    * [MYFACES-2382] - Duplicate id exception when weblogic portal and jsf native portlet (faces-adapter.jar) is used
    * [MYFACES-2525] - Split javax.faces package in OSGi
    * [MYFACES-2566] - HTMLEncoder requiring StringBuilder class from JDK 5
    * [MYFACES-2684] - UIComponentBase.saveAttachedState save transient elements as null values on List case
    * [MYFACES-2726] - CommandLink renderer do not escape \ characters in generated javascript
    * [MYFACES-2749] - Encrypted View State does not include Message Authentication Code (MAC)

Improvement

    * [MYFACES-2680] - Cache renderKit used
    * [MYFACES-2691] - Enhance MessageUtils adding methods when custom library bundle should be scanned
    * [MYFACES-2737] - Cache FacesContext on UIComponentBase instances

Enjoy!

regards

Leonardo Uribe