Re: [VOTE] Release Apache Maven version 3.8.1

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

Re: [VOTE] Release Apache Maven version 3.8.1

mthmulders
I had the same observation. I *think* it is caused by the fact that you
manually downloaded the ZIP archive - browsers on macOS set the
'quarantine' flag on downloaded files. It also happens if I download
3.6.3 manually (i.e., using Firefox).

I think the Homebrew package manager for macOS doesn't have this issue.
At least, I cannot recall ever having seen that message for Maven
versions that I installed through Homebrew.

Thanks,

Maarten

On March 31, 2021 at 09:38, Arnaud Héritier wrote:

> I have a problem on macos that I didn't have with 3.6.3, when I launch
> maven it I have this error:
>
> “libjansi.jnilib” cannot be opened because the developer cannot be verified.
> macOS cannot verify that this app is free from malware.
> Brave downloaded this file today at 09:25.
>
> It's a popup window:
> https://www.dropbox.com/s/tj0yp3hzuerm1ll/Screenshot%202021-03-31%20at%2009.29.06.png?dl=0 
> <https://www.dropbox.com/s/tj0yp3hzuerm1ll/Screenshot%202021-03-31%20at%2009.29.06.png?dl=0>
>
> I manually installed Maven from the zip (in general I use ASDF).
>
> I can use the "Allow Anyway" in "Security & Privacy" settings but then I
> have another message:
> https://www.dropbox.com/s/icgddpm7zfzvjx8/Screenshot%202021-03-31%20at%2009.37.14.png?dl=0 
> <https://www.dropbox.com/s/icgddpm7zfzvjx8/Screenshot%202021-03-31%20at%2009.37.14.png?dl=0>
>
> macOS cannot verify the developer of “libjansi.jnilib”. Are you sure you
> want to open it?
> By opening this app, you will be overriding system security which can
> expose your computer and personal information to malware that may harm
> your Mac or compromise your privacy.
> Brave downloaded this file today at 09:25.
>
>
> After this last pop the problem disappears.
>
> Not a problem for me but I don't remember to have done this in the past
> for jansi. Did we change anything ?
>
>
> On Wed, Mar 31, 2021 at 8:46 AM Maarten Mulders <[hidden email]
> <mailto:[hidden email]>> wrote:
>
>     Retried the test that I did on 3.8.0, this time I observe the desired /
>     correct behaviour.
>
>
>     +1
>
>
>     Maarten
>
>
>     On March 31, 2021, at 01:46, Mark Derricutt wrote:
>      > +1 non-binding
>      >
>      >     - bistro zips are in the /dev/ tree
>      >     - my multi-repo osgi maven tiles weirdo build works fine.
>      >
>      >
>      >
>      >
>      > From: Robert Scholte <[hidden email]
>     <mailto:[hidden email]>> <[hidden email]
>     <mailto:[hidden email]>>
>      > Reply: Maven Developers List <[hidden email]
>     <mailto:[hidden email]>> <[hidden email]
>     <mailto:[hidden email]>>
>      > Date: 31 March 2021 at 9:58:56 AM
>      > To: [hidden email] <mailto:[hidden email]>
>     <[hidden email] <mailto:[hidden email]>>
>     <[hidden email] <mailto:[hidden email]>>
>      > Subject:  [VOTE] Release Apache Maven version 3.8.1
>      >
>      > Hi,
>      >
>      > For the details about this release, please read
>      > https://maven.apache.org/docs/3.8.1/release-notes.html
>     <https://maven.apache.org/docs/3.8.1/release-notes.html>
>      > Also please provide feedback on the release notes. (as you know,
>     these are
>      > published separately from the release, so it doesn't have to
>     block the
>      > release itself)
>      >
>      > We solved 6 issues:
>      >
>     https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316922&version=12350032&styleName=Text
>     <https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316922&version=12350032&styleName=Text>
>      >
>      > Staging repo:
>      > https://repository.apache.org/content/repositories/maven-1634/
>     <https://repository.apache.org/content/repositories/maven-1634/>
>      >
>     https://dist.apache.org/repos/dist/dev/maven/maven-3/3.8.1/binaries/apache-maven-3.8.1-bin.zip
>     <https://dist.apache.org/repos/dist/dev/maven/maven-3/3.8.1/binaries/apache-maven-3.8.1-bin.zip>
>      >
>     https://dist.apache.org/repos/dist/dev/maven/maven-3/3.8.1/source/apache-maven-3.8.1-src.zip
>     <https://dist.apache.org/repos/dist/dev/maven/maven-3/3.8.1/source/apache-maven-3.8.1-src.zip>
>      >
>      > Source release checksum(s):
>      > apache-maven-3.8.1-bin.zip sha512:
>      >
>     c585847bfbcf8647aeabfd3e8bf0ac3f67a037bd345545e274766f144c2b978b3457cbc3e31545e62c21ad69e732695de01ec96ea2580e5da67bd85df095c0f4
>      >
>      > apache-maven-3.8.1-src.zip
>      > sha512:
>     893988635349985074c88ce5ef27ac5ccb62fcdf58846209eee8a7ea5515238288b91c202347ca42e201ab336c14d83f3f5fd8194070e57b9366bcce2414614d
>      >
>      >
>      > Knows issues:
>      > When building with the sources with JDK-16 and above, the unittest
>      > MavenCliTest#testStyleColors will fail. This will be fix with
>     MNG-7127[1],
>      > but is left out to keep focus on the real purpose of this release.
>      >
>      > Staging site:
>      > https://maven.apache.org/ref/3-LATEST/
>     <https://maven.apache.org/ref/3-LATEST/>
>      >
>      > Guide to testing staged releases:
>      >
>     https://maven.apache.org/guides/development/guide-testing-releases.html
>     <https://maven.apache.org/guides/development/guide-testing-releases.html>
>      >
>      > Vote open for at least 72 hours.
>      >
>      > [ ] +1
>      > [ ] +0
>      > [ ] -1
>      >
>      >
>      > ---
>      > [1] https://issues.apache.org/jira/browse/MNG-7127
>     <https://issues.apache.org/jira/browse/MNG-7127>
>      >
>
>     ---------------------------------------------------------------------
>     To unsubscribe, e-mail: [hidden email]
>     <mailto:[hidden email]>
>     For additional commands, e-mail: [hidden email]
>     <mailto:[hidden email]>
>
>
>
> --
> Arnaud Héritier
> Twitter/Skype : aheritier

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Re: [VOTE] Release Apache Maven version 3.8.1

Elliotte Rusty Harold
On Wed, Mar 31, 2021 at 8:11 AM <[hidden email]> wrote:
>
> I had the same observation. I *think* it is caused by the fact that you
> manually downloaded the ZIP archive - browsers on macOS set the
> 'quarantine' flag on downloaded files. It also happens if I download
> 3.6.3 manually (i.e., using Firefox).
>

I'm not an expert about this, but I'm not sure that's the root cause
of this issue. I think what needs to happen here is that JANSI needs
to be properly signed to identify the developer.


--
Elliotte Rusty Harold
[hidden email]

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Re: [VOTE] Release Apache Maven version 3.8.1

Hervé BOUTEMY
In reply to this post by mthmulders
+1

Regards,

Hervé

Le mardi 30 mars 2021, 22:58:56 CEST Robert Scholte a écrit :

> Hi,
>
> For the details about this release, please
> read https://maven.apache.org/docs/3.8.1/release-notes.html Also please
> provide feedback on the release notes. (as you know, these are published
> separately from the release, so it doesn't have to block the release
> itself)
>
> We solved 6 issues:
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316922&ve
> rsion=12350032&styleName=Text
>
> Staging repo:
> https://repository.apache.org/content/repositories/maven-1634/
> https://dist.apache.org/repos/dist/dev/maven/maven-3/3.8.1/binaries/apache-m
> aven-3.8.1-bin.zip
> https://dist.apache.org/repos/dist/dev/maven/maven-3/3.8.1/source/apache-ma
> ven-3.8.1-src.zip
>
> Source release checksum(s):
> apache-maven-3.8.1-bin.zip sha512: c585847bfbcf8647aeabfd3e8bf0ac3f67a037bd3
> 45545e274766f144c2b978b3457cbc3e31545e62c21ad69e732695de01ec96ea2580e5da67bd
> 85df095c0f4 apache-maven-3.8.1-src.zip
> sha512: 893988635349985074c88ce5ef27ac5ccb62fcdf58846209eee8a7ea5515238288b
> 91c202347ca42e201ab336c14d83f3f5fd8194070e57b9366bcce2414614d
>
> Knows issues:
> When building with the sources with JDK-16 and above, the unittest
> MavenCliTest#testStyleColors will fail. This will be fix with MNG-7127[1],
> but is left out to keep focus on the real purpose of this release.
>
> Staging site:
> https://maven.apache.org/ref/3-LATEST/
>
> Guide to testing staged releases:
> https://maven.apache.org/guides/development/guide-testing-releases.html
>
> Vote open for at least 72 hours.
>
> [ ] +1
> [ ] +0
> [ ] -1
>
>
> ---
> [1] https://issues.apache.org/jira/browse/MNG-7127





---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]