Date
1 - 2 of 2
Rolling out odlparent-8.1.0
Robert Varga
Hello everyone,
as I mentioned in November, I would like to roll out odlparent-8.1.0 to
replace the original MRI odlparent-8.0.x stream.
The reason for this is karaf-4.3.0 and its support for two things:
OSGi Release 7
--------------
This is a major upgrade to Release 6 shipped in the 4.2.x series. The
details are summed up nicely here:
https://blog.osgi.org/2018/09/osgi-r7-highlights-blog-series.html
The most important items are:
- JAX-RS support (finally)
- HTTP whiteboard update (to support JAX-RS)
- Declarative Service updates (constructor injection)
- Bundle Annotations (allowing to ditch a lot of maven-bundle-plugin
overrides)
Jackson-2.11
------------
This is a relatively minor upgrade, summed up here:
https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.11
The absolutely most important is support for safe Polymorphic
deserialization, which should put a stop to all those CVEs around
serialization gadgets we have seen in the last two or three years.
With that, the MRI projects are spinning releases integrating this, I
expect all of it to be ready this evening CET.
The preliminary patches to adopt these are living over here:
https://git.opendaylight.org/gerrit/q/topic:odlparent-8.1 .
Preliminary testing did not find anything broken, and if that gets
confirmed through a multipatch-build, I will ask for supercommitter
rights and merge it up either tomorrow (Tuesday) or on Wednesday.
If anybody has objections, please holler now :)
Thanks,
Robert
as I mentioned in November, I would like to roll out odlparent-8.1.0 to
replace the original MRI odlparent-8.0.x stream.
The reason for this is karaf-4.3.0 and its support for two things:
OSGi Release 7
--------------
This is a major upgrade to Release 6 shipped in the 4.2.x series. The
details are summed up nicely here:
https://blog.osgi.org/2018/09/osgi-r7-highlights-blog-series.html
The most important items are:
- JAX-RS support (finally)
- HTTP whiteboard update (to support JAX-RS)
- Declarative Service updates (constructor injection)
- Bundle Annotations (allowing to ditch a lot of maven-bundle-plugin
overrides)
Jackson-2.11
------------
This is a relatively minor upgrade, summed up here:
https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.11
The absolutely most important is support for safe Polymorphic
deserialization, which should put a stop to all those CVEs around
serialization gadgets we have seen in the last two or three years.
With that, the MRI projects are spinning releases integrating this, I
expect all of it to be ready this evening CET.
The preliminary patches to adopt these are living over here:
https://git.opendaylight.org/gerrit/q/topic:odlparent-8.1 .
Preliminary testing did not find anything broken, and if that gets
confirmed through a multipatch-build, I will ask for supercommitter
rights and merge it up either tomorrow (Tuesday) or on Wednesday.
If anybody has objections, please holler now :)
Thanks,
Robert
Robert Varga
On 25/01/2021 16:16, Robert Varga wrote:
tried the complete series locally and it works like a charm. I'd say
just merge it :)
Guillaume, can we put this up for a quick vote on the TSC call today?
Thanks,
Robert
Hello everyone,[snip]
as I mentioned in November, I would like to roll out odlparent-8.1.0 to
replace the original MRI odlparent-8.0.x stream.
The patches are out there.
The preliminary patches to adopt these are living over here:
https://git.opendaylight.org/gerrit/q/topic:odlparent-8.1 .
Preliminary testing did not find anything broken, and if that getsmutlitpatch-build seems to fail in lispflowmapping, not sure why. I have
confirmed through a multipatch-build, I will ask for supercommitter
rights and merge it up either tomorrow (Tuesday) or on Wednesday.
If anybody has objections, please holler now :)
tried the complete series locally and it works like a charm. I'd say
just merge it :)
Guillaume, can we put this up for a quick vote on the TSC call today?
Thanks,
Robert