Re: [VOTE] Release Apache Roller 6.1.4 (RC1)

Greg Huber <[email protected]> Sun, 29 Sep 2024 09:08:31 +0100
Newsgroups gmane.comp.java.roller.devel
Message-ID <[email protected]>
I tried your mods but can you check this use-case:

Create a new category.

Delete the new Category

URL of  page is : 
http://127.0.0.1/roller/roller-ui/authoring/categoryRemove!remove.rol

Edit and existing one and save it, I get a  warning popup:

To display this page, Firefox  must send information that will repeat 
any action (such as a search or order confirmation) that was performed 
earlier.

Cancel | Resend

Cheers

On 28/09/2024 22:08, Dave wrote:
> Hi Greg,
>
> Thanks for pointing that out. I did some testing and found that the remove
> category modal is broken for categories that are in use, unless you are
> very quick with your mouse.
>
> This fixed it for me and I'm going to get it into the release:
> https://github.com/apache/roller/commit/222dae0542e03d5b782506b33ae188e2206561fc
>
> Dave
>
>
> On Sat, Sep 28, 2024 at 6:42 AM Greg Huber <[email protected]> wrote:
>
>> The database upgrade completed normally.
>>
>> App seems to work OK.
>>
>> Observations:
>>
>> The edit category page/logic could do with some more testing as it seems
>> to go wrong after deleting a category.  ie try editing/saving an entry
>> after deleting one.
>>
>> https://struts.apache.org/struts25-eol-announcement
>>
>>
>> [x] +1 Release this package as Apache Roller 6.1.4
>>
>>
>> Cheers Greg
>>
>>
>> On 27/09/2024 23:00, Dave wrote:
>>> Dear Apache Roller Community,
>>>
>>> I am pleased to call for a vote on the release of Apache Roller 6.1.4
>>> (RC1). This release includes several important updates and improvements,
>>> including enhanced security measures, dependency updates, and various
>> code
>>> enhancements (change notes below). The release candidate files can be
>> found
>>> at the following location:
>>>
>>> https://dist.apache.org/repos/dist/dev/roller/roller-6.1/v6.1.4/
>>>
>>> Please review the release candidate and cast your vote:
>>>
>>> [ ] +1 Release this package as Apache Roller 6.1.4
>>> [ ] 0 No opinion
>>> [ ] -1 Do not release this package because...
>>>
>>> The vote will be open for at least 72 hours. Please take the time to
>> review
>>> the release candidate and provide your feedback.
>>>
>>> Thank you for your time and contributions to the Apache Roller project.
>>>
>>> Best regards,
>>> Dave
>>>
>>>
>>>
>>> Key Changes in Apache Roller 6.1.4
>>>
>>> Dependency Updates:
>>> * Upgraded several key libraries to their latest versions, ensuring
>>> improved security and stability.
>>>
>>> Code Enhancements:
>>> * Enhanced salt handling and validation mechanisms.
>>> * Improved security settings and default configurations.
>>>      * Introduced weblogAdminsUntrusted=true property.
>>>      * Adjusted default settings to disable file uploads and custom
>> themes by
>>> default.
>>> * Updated tests and documentation to ensure compatibility with new
>>> configurations.
>>>
>>> ## Detailed change List for Apache Roller 6.1.4
>>>
>>> ### Dependency Updates
>>>
>>> #### app/pom.xml
>>> - asm.version: 9.6 -> 9.7
>>> - commons-validator.version: 1.8.0 -> 1.9.0
>>> - commons-codec.version: 1.16.0 -> 1.17.1
>>> - commons-text.version: 1.11.0 -> 1.12.0
>>> - commons-lang3.version: 3.14.0 -> 3.16.0
>>> - eclipse-link.version: 4.0.2 -> 4.0.4
>>> - log4j2.version: 2.22.1 -> 2.23.1
>>> - lucene.version: 9.9.1 -> 9.11.1
>>> - maven-surefire.version: 3.2.5 -> 3.5.0
>>> - slf4j.version: 2.0.11 -> 2.0.16
>>> - spring.version: 5.3.31 -> 5.3.39
>>> - spring.security.version: 5.8.8 -> 5.8.14
>>> - jquery-ui: 1.13.2 -> 1.13.3
>>> - jquery-validation: 1.19.5 -> 1.20.0
>>> - mockito-core: 5.9.0 -> 5.12.0
>>> - instancio-junit: 4.0.0 -> 5.0.1
>>>
>>> - selenium-java: 4.17.0 -> 4.23.1
>>> - selenium-firefox-driver: 4.17.0 -> 4.23.1
>>> - maven-failsafe-plugin: 3.2.5 -> 3.5.0
>>>
>>> #### pom.xml
>>> - jetty.plugin.version: 10.0.19 -> 10.0.23
>>> - maven-compiler-plugin: 3.12.1 -> 3.13.0
>>> - versions-maven-plugin: 2.16.2 -> 2.17.1
>>> - junit-jupiter-engine: 5.10.1 -> 5.11.0
>>>
>>> ### Code Changes
>>> - **LoadSaltFilter.java**: Added RollerSession to retrieve userId and
>> pass
>>> to SaltCache.
>>> - **ValidateSaltFilter.java**: Added RollerSession and modified salt
>>> validation to check against userId.
>>> - **SaltCache.java**: Changed get method return type to String and
>> modified
>>> put method to accept String.
>>> - **roller.properties**: Added weblogAdminsUntrusted=true.
>>> - **runtimeConfigDefs.xml**: Changed default values of uploads.enabled
>> and
>>> themes.customtheme.allowed to false.
>>> - **MediaFileTest.java**: Enabled media uploads for the test.
>>> - **SQLScriptRunnerTest.java**: Replaced assertTrue with assertEquals for
>>> command count check.
>>> - **roller-install-guide.adoc**: Updated security recommendations and
>> safer
>>> defaults section.
>>> - **roller-template-guide.adoc**: Updated note about theme customization
>>> being disabled by default.roller-template-guide.adoc: Updated note about
>>> theme customization being disabled by default.
>>>