Stewardship SIG Report (November 2019)
There’s a lot of changes that we pushed in November, and there’s little time to talk about them, so here’s a list of all the updates we submitted to fedora in November.
Note that with all these updates, we managed to reduce the number of outdated packages to about 25% of maintained package set, and we hope to improve further upon this.
- various version updates:
package | version | release | changes |
---|---|---|---|
glassfish-jax-rs-api | 2.1.6 | 1.fc32 | 2.1.5 → 2.1.6 |
apache-commons-beanutils | 1.9.4 | 1.fc31, 1.fc30 | 1.9.3 → 1.9.4 |
- a small packaging fix for maven:
package | version | release | changes |
---|---|---|---|
maven | 3.6.1, 3.5.4 | 1.fc32, 1.fc31, 1.fc30 | fixed postun scriptlet |
- inter-dependent version updates for plexus packages:
package | version | release | changes |
---|---|---|---|
plexus-utils | 3.3.0 | 1.fc32 | 3.2.1 → 3.3.0 |
plexus-build-api | 0.0.7 | 24.fc32 | port to plexus-utils 3.3.0 |
plexus-io | 3.2.0 | 1.fc32 | 3.1.1 → 3.2.0 |
plexus-containers | 2.1.0 | 1.fc32 | 2.0.0 → 2.1.0 |
- miscellaneous version updates:
package | version | release | changes |
---|---|---|---|
log4j | 2.12.1 | 1.fc32 | 2.11.1 → 2.12.1 |
jsoup | 1.12.1 | 1.fc32 | 1.11.3 → 1.12.1 |
jvnet-parent | 5 | 1.fc32 | 4 → 5 |
glassfish-jsp-api | 2.3.3 | 1.fc32 | 2.3.2~b01 → 2.3.3 |
sisu-mojos | 0.3.4 | 1.fc32 | 0.3.3 → 0.3.4 |
- updating XMvn to the latest release, and adapting other packages:
package | version | release | changes |
---|---|---|---|
xmvn | 3.1.0 | 1.fc32 | 3.0.0 → 3.1.0 |
apache-commons-jexl | 2.1.1 | 24.fc32 | fix build with xmvn 3.1.0 |
apache-commons-collections | 3.2.2 | 14.fc32 | fix build with xmvn 3.1.0 |
apache-commons-lang | 2.6 | 26.fc32 | fix build with xmvn 3.1.0 |
xstream | 1.4.11 | 4.fc32 | fix build with xmvn 3.1.0 |
plexus-build-api | 0.0.7 | 25.fc32 | fix build with xmvn 3.1.0 |
apache-commons-collections | 3.2.2 | 15.fc32 | fix build with xmvn 3.1.0 |
- various small fixes and improvements:
package | version | release | changes |
---|---|---|---|
jackson-jaxrs-providers | 2.10.0 | 2.fc32 | minimize build dependencies |
xsom | 20140514 | 2.fc32 | fix regeneration of sources |
munge-maven-plugin | 1.0 | 15.fc32 | drop unnecessary dependency on parent POM |
- another few version updates, including updates for the jackson stack that fixed some security issues:
package | version | release | changes |
---|---|---|---|
google-gson | 2.8.6 | 1.fc32 | 2.8.2 → 2.8.6 |
jackson-bom | 2.10.1 | 1.fc32 | 2.10.0 → 2.10.1 |
jackson-annotations | 2.10.1 | 1.fc32 | 2.10.0 → 2.10.1 |
jackson-core | 2.10.1 | 1.fc32 | 2.10.0 → 2.10.1 |
jackson-databind | 2.10.1 | 1.fc32 | 2.10.0 → 2.10.1 |
jackson-modules-base | 2.10.1 | 1.fc32 | 2.10.0 → 2.10.1 |
jackson-jaxrs-providers | 2.10.1 | 1.fc32 | 2.10.0 → 2.10.1 |
xbean | 4.15 | 1.fc32 | 4.14 → 4.15 |
- inter-dependent updates for various plexus packages and maven plugins:
package | version | release | changes |
---|---|---|---|
plexus-archiver | 4.2.1 | 1.fc32 | 4.1.0 → 4.2.1 |
maven-archiver | 3.5.0 | 1.fc32 | 3.4.0 → 3.5.0 |
maven-jar-plugin | 3.2.0 | 1.fc32 | 3.1.2 → 3.2.0 |
maven-source-plugin | 3.2.0 | 1.fc32 | 3.1.0 → 3.2.0 |
maven-artifact-transfer | 0.11.0 | 1.fc32 | 0.9.0 → 0.11.0 |
maven-javadoc-plugin | 3.1.1 | 1.fc32 | 3.0.1 → 3.1.1 |
maven-invoker-plugin | 3.2.1 | 1.fc32 | 3.2.0 → 3.2.1 |
maven-dependency-plugin | 3.1.1 | 4.fc32 | port to maven-artifact-transfer 0.11.0 |
maven-shade-plugin | 3.2.1 | 2.fc32 | port to maven-artifact-transfer 0.11.0 |
maven-enforcer | 3.0.0~M2 | 1.fc32 | port to maven-artifact-transfer 0.11.0 |
maven-resolver | 1.4.1 | 1.fc32 | 1.3.3 → 1.4.1 |
maven-assembly-plugin | 3.2.0 | 1.fc32 | 3.1.1 → 3.2.0 |
maven-javadoc-plugin | 3.1.1 | 2.fc32 | non-bootstrap build with JavaDocs |
- removing some unnecessary dependencies from our packages:
package | version | release | changes |
---|---|---|---|
jmock | 2.8.2 | 9.fc32 | drop unnecessary dependency on parent POM |
paranamer | 2.8 | 11.fc32 | drop unnecessary dependency on parent POM |
google-gson | 2.8.6 | 2.fc32 | drop unnecessary dependency on parent POM |
apache-ivy | 2.4.0 | 19.fc32 | remove unnecessary dependencies on parent POMs |
netty | 4.1.13 | 13.fc32 | remove unnecessary dependency on parent POM |
relaxngDatatype | 2011.1 | 11.fc32 | remove unnecessary dependency on parent POM |
lzma-java | 1.3 | 8.fc32 | remove unnecessary dependency on parent POM |
os-maven-plugin | 1.2.3 | 13.fc32 | remove unnecessary dependency on parent POM |
qdox | 2.0~M9 | 7.fc32 | remove unnecessary dependency on parent POM |
sisu-mojos | 0.3.4 | 2.fc32 | remove unnecessary dependency on parent POM |
replacer | 1.6 | 12.fc32 | remove unnecessary dependency on parent POM |
maven | 3.6.1 | 3.fc32 | require correct version of guava |
plexus-build-api | 0.0.7 | 26.fc32 | remove unnecessary dependency on parent POM |
- and another two version updates:
package | version | release | changes |
---|---|---|---|
glassfish-fastinfoset | 1.2.15 | 1.fc32 | 1.2.13 → 1.2.15 |
beust-jcommander | 1.78 | 1.fc32 | 1.71 → 1.78 |