This was extracted (@ 2024-11-20 22:10) from a list of minutes
which have been approved by the Board.
Please Note
The Board typically approves the minutes of the previous meeting at the
beginning of every Board meeting; therefore, the list below does not
normally contain details from the minutes of the most recent Board meeting.
WARNING: these pages may omit some original contents of the minutes.
Meeting times vary, the exact schedule is available to ASF Members and Officers, search for "calendar" in the Foundation's private index page (svn:foundation/private-index.html).
## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There is also a sub-project that leverages CXF: Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. ## Project Status: Current project status: Ongoing, moderate activity Issues for the board: none ## Membership Data: Apache CXF was founded 2008-04-15 (16 years ago) There are currently 44 committers and 26 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Andy McCright on 2019-02-24. - No new committers. Last addition Jamie Mark Goodyear on 2024-07-19. ## Project Activity: Most of the activity for this period was targeting the upcoming patch releases, including the fix for one long-standing CVE's issue. The work on performance testing across different JDKs (Jamie Goodyear) resulted in multiple fixes being committed. Recent releases: cxf-xjc-utils 4.0.2 was released on 2024-09-26. cxf-xjc-utils 3.3.4 was released on 2024-09-26. Past releases: 3.5.9 was released on 2024-07-17. 3.6.4 was released on 2024-07-17. 4.0.5 was released on 2024-07-17. ## Community Health: For the most part, the project is making steady, but not stellar, progress. Many of the protocols and specs that CXF implements are mature specs and don't really change much. Thus, steady progress and regular releases are a good thing. We are responding to bug reports, reviewing and merging pull requests, and hopefully getting patch releases out soon. We have now integrated the Jenkins jobs to run Jakarta Restful Services TCK tests for Jakarta EE 9.1 and Jakarta EE 10, there are tests to fix and this work is ongoing.
WHEREAS, the Board of Directors heretofore appointed Daniel Kulp (dkulp) to the office of Vice President, Apache CXF, and WHEREAS, the Board of Directors is in receipt of the resignation of Daniel Kulp from the office of Vice President, Apache CXF, and WHEREAS, the Project Management Committee of the Apache CXF project has chosen by vote to recommend Andriy Redko (reta) as the successor to the post; NOW, THEREFORE, BE IT RESOLVED, that Daniel Kulp is relieved and discharged from the duties and responsibilities of the office of Vice President, Apache CXF, and BE IT FURTHER RESOLVED, that Andriy Redko be and hereby is appointed to the office of Vice President, Apache CXF, to serve in accordance with and subject to the direction of the Board of Directors and the Bylaws of the Foundation until death, resignation, retirement, removal or disqualification, or until a successor is appointed. Special Order 7B, Change the Apache CXF Project Chair, was approved by Unanimous Vote of the directors present.
## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There is also a sub-project that leverages CXF: Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. ## Project Status: Current project status: Ongoing, moderate activity Issues for the board: none ## Membership Data: Apache CXF was founded 2008-04-15 (16 years ago) There are currently 44 committers and 26 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Andy McCright on 2019-02-24. - Jamie Mark Goodyear was added as committer on 2024-07-19 ## Project Activity: Most of the activity this period was targeting the patch releases that were done in July. Those patch releases address a bunch of bugs, in particular, three CVE's were addressed and then made public after the release was finalized. We added a committer (Jamie Goodyear) this period due to his work on testing CXF with different JDK's on different hardware. He's also driving some work on performance testing and finding performance bottlenecks. Recent releases: 3.5.9 was released on 2024-07-17. 3.6.4 was released on 2024-07-17. 4.0.5 was released on 2024-07-17. Past releases: Apache CXF Fediz 1.6.2 was released on 2024-03-25. ## Community Health: For the most part, the project is making steady, but not stellar, progress. Many of the protocols and specs that CXF implements are mature specs and don't really change much. Thus, steady progress and regular releases are a good thing. We are responding to bug reports, reviewing and merging pull requests, and hopefully getting patch releases out soon. The current PMC Chair (dkulp) who has held the position since the creation of the project 16 years ago has decided to step down. He has recently retired and no longer uses CXF or Java or Web Services or anything on a day to day basis and believes the project would be better served by someone more active in the community. The project has elected Andriy Redko to take on the role and a Change Of Chair resolution has been added to the agenda. Dan Kulp wishes the project the best as it moves forward.
No report was submitted.
## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There is also a sub-project that leverages CXF: Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. ## Project Status: Current project status: Ongoing, moderate activity Issues for the board: none ## Membership Data: Apache CXF was founded 2008-04-15 (16 years ago) There are currently 43 committers and 26 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Andy McCright on 2019-02-24. - No new committers. Last addition was Alexey Markevich on 2017-12-29. ## Project Activity: Without any releases done in the last period, quite a bit of effort was spent preparing patch releases. On a big positive note, these were the first releases not performed by dkulp in a very long time. Spreading the knowledge and getting others involved in the release process worked fairly well. The releases did fix a CVE that was then publicly disclosed. Other activity: 1) There is some effort to get CXF building/testing fully with IBM JDK's. We've run into some differences in the JIT's that are causing some failures that we are trying to track down. Some are definite behavior changes between IBM and OpenJDK that we can adjust for. Still investigating others. 2) Fedix also had a release to bump up to the latest main CXF releases as well as bump a bunch of other dependencies. Also fixed a few timeouts and other bugs. Recent releases: Apache CXF Fediz 1.6.2 was released on 2024-03-25. 3.5.8 was released on 2024-03-12. 3.6.3 was released on 2024-03-12. 4.0.4 was released on 2024-03-12. ## Community Health: For the most part, the project is making steady, but not stellar, progress. Many of the protocols and specs that CXF implements are mature specs and don't really change much. Thus, steady progress and regular releases are a good thing. We are responding to bug reports, reviewing and merging pull requests, and hopefully getting patch releases out soon. We are receiving a steady stream of Pull Requests, which is good. However, most are "one offs" from individuals submitting a single PR. We're trying to get some people to continue contributing other updates/fixes to become committers, but due to the maturity of the project, the "one offs" is definitely the norm.
## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There is also a sub-project that leverages CXF: Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. ## Project Status: Current project status: Ongoing, moderate activity Issues for the board: none ## Membership Data: Apache CXF was founded 2008-04-15 (16 years ago) There are currently 43 committers and 26 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Andy McCright on 2019-02-24. - No new committers. Last addition was Alexey Markevich on 2017-12-29. ## Project Activity: In the last quarter, there have been a lot of fixes/patches applied to the main branch and back ported to the fixes branches. We are definitely overdue for releases. A discussion about that was started a couple days ago, but we discovered we also need releases of Santuario and WSS4J first for some of the fixes. That process should be starting soon. Hopefully we'll get updated CXF releases by the end of the month. I (dkulp) normally drive the releases, but with my recent retirement, it's a low priority. I'm hoping to find someone else to drive these releases to help transition that knowledge to others. No releases were done this period. Recent releases: 3.5.7 was released on 2023-09-18. 3.6.2 was released on 2023-09-18. 4.0.3 was released on 2023-09-18. Last Fediz Release: Apache CXF Fediz 1.6.1: 2022-12-23 ## Community Health: For the most part, the project is making steady, but not stellar, progress. Many of the protocols and specs that CXF implements are mature specs and don't really change much. Thus, steady progress and regular releases are a good thing. We are responding to bug reports, reviewing and merging pull requests, and hopefully getting patch releases out soon.
No report was submitted.
## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There is also a sub-project that leverages CXF: Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. ## Project Status: Current project status: Ongoing, moderate activity Issues for the board: none ## Membership Data: Apache CXF was founded 2008-04-15 (15 years ago) There are currently 43 committers and 26 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Andy McCright on 2019-02-24. - No new committers. Last addition was Alexey Markevich on 2017-12-29. ## Project Activity: Most of the activity this period was centered around providing some patch releases to address issues needed for dependent projects (like Camel). In particular, one of the new features in 4.0.1/3.6.0 introduced a thread/memory leak in applications that didn't properly close resources and relied on garbage collection. There were some discussions around whether that could be considered a security issue/CVE or not. In any case, fixes were done and new releases were made. Recent releases: 3.5.7 was released on 2023-09-18. 3.6.2 was released on 2023-09-18. 4.0.3 was released on 2023-09-18. Last Fediz Release: Apache CXF Fediz 1.6.1: 2022-12-23 ## Community Health: For the most part, the project is making steady, but not stellar, progress. Many of the protocols and specs that CXF implements are mature specs and don't really change much. Thus, steady progress and regular releases are a good thing. We are responding to bug reports and security issues and getting patch releases out.
## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There is also a sub-project that leverages CXF: Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. ## Project Status: Current project status: Ongoing, moderate activity Issues for the board: none ## Membership Data: Apache CXF was founded 2008-04-15 (15 years ago) There are currently 43 committers and 26 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Andy McCright on 2019-02-24. - No new committers. Last addition was Alexey Markevich on 2017-12-29. ## Project Activity: Most of the activity this period was centered around providing some patch releases to address issues needed for dependent projects (like Camel). There is some ongoing work to remove dependencies on out dated test dependencies (EasyMock), but a bulk of the commits/changes are related to Dependabot version updates. Recent releases: 3.6.1 was released on 2023-06-12. 4.0.2 was released on 2023-06-12. Last Fediz Release: Apache CXF Fediz 1.6.1: 2022-12-23 ## Community Health: For the most part, the project is making steady, but not stellar, progress. Many of the protocols and specs that CXF implements are mature specs and don't really change much. Thus, steady progress and regular releases are a good thing. We are responding to bug reports and security issues and getting patch releases out.
No report was submitted.
## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There is also a sub-project that leverages CXF: Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. ## Issues: There are no issues requiring board attention. ## Membership Data: Apache CXF was founded 2008-04-15 (15 years ago) There are currently 43 committers and 26 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Andy McCright on 2019-02-24. - No new committers. Last addition was Alexey Markevich on 2017-12-29. ## Project Activity: With CXF 4.0 released last period, the bulk of the work this period was responding to issues and fixing bugs in the ".0" release. In addition, a lot of effort went into supporting HTTP/2 for all of the HTTP components in CXF. We then pushed hard to get the 4.0.1 release out. Simultaneously, we decided to pursue a 3.6.0 release which back ports some of the updates from 4.0.x (which is jakarta.* and Java17 based) to the 3.x branch which is Java11/javax.* based. 3.5.6 (Java8 base) was also released with some fixes. Recent releases: 3.5.6 was released on 2023-05-08. 3.6.0 was released on 2023-05-08. 4.0.1 was released on 2023-05-08. Last Fediz Release: Apache CXF Fediz 1.6.1: 2022-12-23 ## Community Health: For the most part, the project is making steady, but not stellar, progress. Many of the protocols and specs that CXF implements are mature specs and don't really change much. Thus, steady progress and regular releases are a good thing. We are responding to bug reports and security issues and getting patch releases out.
No report was submitted.
## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There are also two sub-projects that leverage CXF: Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. DOSGi - is the reference implementation of the Distribution Provider component of the OSGi Remote Services Specification ## Issues: There are no issues requiring board attention. ## Membership Data: Apache CXF was founded 2008-04-15 (15 years ago) There are currently 43 committers and 26 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Andy McCright on 2019-02-24. - No new committers. Last addition was Alexey Markevich on 2017-12-29. ## Project Activity: The bulk of the activity this period is centered around a CXF 4.0. The major change for that release was moving from javax.* to jakarta.* specs which is incompatible for end users. This also involved updating from Java8 to Java11 as the minimum, although Java17 is now required for some use cases. The other event of note was that the community decided to retire/attic the DOSGI subproject. There hasn't been any release there for over 6 years and no users came out to advocate for keeping it. Recent releases: 3.4.9 was released on 2022-10-12. 3.5.4 was released on 2022-10-12. 3.4.10 was released on 2022-12-13. 3.5.5 was released on 2022-12-13. 4.0.0 was released on 2022-12-22. Apache CXF Fediz 1.6.1 was released on 2022-12-23. Older releases: Apache CXF DOSGI 2.0.0 was released on 2016-09-15 ## Community Health: For the most part, the project is making steady, but not stellar, progress. Many of the protocols and specs that CXF implements are mature specs and don't really change much. Thus, steady progress and regular releases are a good thing. We are responding to bug reports and security issues and getting patch releases out.
No report was submitted.
## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There are also two sub-projects that leverage CXF: Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. DOSGi - is the reference implementation of the Distribution Provider component of the OSGi Remote Services Specification ## Issues: There are no issues requiring board attention. ## Membership Data: Apache CXF was founded 2008-04-15 (14 years ago) There are currently 43 committers and 26 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Andy McCright on 2019-02-24. - No new committers. Last addition was Alexey Markevich on 2017-12-29. ## Project Activity: The bulk of the activity this period is centered around a future CXF 4.0. The major change for that release is moving from javax.* to jakarta.* specs which is incompatible. Not all specs and dependencies are updates for jakarta.* use yet so a lot of the tests/modules are temporarily disabled until things get fully updated. Along with the 4.0 work, many bug fixes and updates are being done on the older branches with patch releases being made regularly. Recent releases: 3.4.9 was released on 2022-10-12. 3.5.4 was released on 2022-10-12. 3.4.8 was released on 2022-06-28. 3.5.3 was released on 2022-06-28. Older releases: Apache CXF Fediz 1.6.0 was released on 2022-02-14. Apache CXF DOSGI 2.0.0 was released on 2016-09-15 ## Community Health: For the most part, the project is making steady, but not stellar, progress. Many of the protocols and specs that CXF implements are mature specs and don't really change much. Thus, steady progress and regular releases are a good thing. We are responding to bug reports and security issues and getting patch releases out.
## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There are also two sub-projects that leverage CXF: Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. DOSGi - is the reference implementation of the Distribution Provider component of the OSGi Remote Services Specification ## Issues: There are no issues requiring board attention. ## Membership Data: Apache CXF was founded 2008-04-15 (14 years ago) There are currently 43 committers and 26 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Andy McCright on 2019-02-24. - No new committers. Last addition was Alexey Markevich on 2017-12-29. ## Project Activity: The bulk of the activity this period centered around two objectives: 1) Bug fixes - we released several versions of CXF to address various bugs and security issues. 2) javax.* -> jakarta.* package changes - the initial work on this was finally merged to main so everyone can really start contributing and testing. Other note: The "master" branch on all the CXF repositories has been changed to "main". Releases This period: 3.4.8 was released on 2022-06-28. 3.5.3 was released on 2022-06-28. 3.4.7 was released on 2022-04-12. 3.5.2 was released on 2022-04-12. Older releases: Apache CXF Fediz 1.6.0 was released on 2022-02-14. Apache CXF DOSGI 2.0.0 was released on 2016-09-15 ## Community Health: For the most part, the project is making steady, but not stellar, progress. Many of the protocols and specs that CXF implements are mature specs and don't really change much. Thus, steady progress and regular releases are a good thing. We are responding to bug reports and security issues and getting patch releases out.
## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There are also two sub-projects that leverage CXF: Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. DOSGi - is the reference implementation of the Distribution Provider component of the OSGi Remote Services Specification ## Issues: There are no issues requiring board attention. ## Membership Data: Apache CXF was founded 2008-04-15 (14 years ago) There are currently 43 committers and 26 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Andy McCright on 2019-02-24. - No new committers. Last addition was Alexey Markevich on 2017-12-29. ## Project Activity: With 3.5.0 being released last period, the bulk of the work this period was around fixing bugs people were encountering as they migrated and preparing the git repo main branch for 4.0. There are discussions around changes needed for 4.0 with the primary "breaking" change being the move from javax.* -> jakarta.*. 4.0 will also require Java11+ so a lot of code cleanup is happening to leverage Java11 things or remove use of deprecated calls. With the public disclosure of several Spring Boot CVE's, there was a push from users to get patch releases out quickly that pull in the updated Spring Boot jars. 3.5.2/3.4.7 was released mostly to pick up security updates, but they do fix a bunch of user issues as well. Recent releases: 3.4.7 was released on 2022-04-12. 3.5.2 was released on 2022-04-12. 3.3.13 was released on 2022-03-02. 3.4.6 was released on 2022-03-02. 3.5.1 was released on 2022-03-02. Apache CXF Fediz 1.6.0 was released on 2022-02-14. Older releases: Apache CXF DOSGI 2.0.0 was released on 2016-09-15 ## Community Health: For the most part, the project is making steady, but not stellar, progress. Many of the protocols and specs that CXF implements are mature specs and don't really change much. Thus, steady progress and regular releases are a good thing. We are responding to bug reports and security issues and getting patch releases out.
## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There are also two sub-projects that leverage CXF: Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. DOSGi - is the reference implementation of the Distribution Provider component of the OSGi Remote Services Specification ## Issues: There are no issues requiring board attention. ## Membership Data: Apache CXF was founded 2008-04-15 (14 years ago) There are currently 43 committers and 26 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Andy McCright on 2019-02-24. - No new committers. Last addition was Alexey Markevich on 2017-12-29. ## Project Activity: The primary focus this period was on supporting Java17. We updated to the latest releases from Apache WebServices and other dependencies and then released CXF 3.5.0 to fully support Java 8 through Java 17. We've also started some experimental efforts to support the "jakarta.*" annotations instead/in addition to the "javax.*" versions. Those efforts are still ongoing. The other major impact on the project was the retirement of the CMS. While CXF doesn't really use the CMS, it did use the CMS buildbot builder and some of the CMS scripts. Thus, we did need to work with INFRA to come up with solutions and migrate the build. This is now done. Thanks to Gavin for his help in getting things setup and ready to go. Releases: 3.5.0 was released on 2021-12-22. Older releases: Apache CXF Fediz 1.5.1 was released on 2020-11-30 Apache CXF DOSGI 2.0.0 was released on 2016-09-15 ## Community Health: For the most part, the project is making steady, but not stellar, progress. Many of the protocols and specs that CXF implements are mature specs and don't really change much. Thus, steady progress and regular releases are a good thing. We are responding to bug reports and security issues and getting patch releases out.
## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There are also two sub-projects that leverage CXF: Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. DOSGi - is the reference implementation of the Distribution Provider component of the OSGi Remote Services Specification ## Issues: There are no issues requiring board attention. ## Membership Data: Apache CXF was founded 2008-04-15 (13 years ago) There are currently 43 committers and 26 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Andy McCright on 2019-02-24. - No new committers. Last addition was Alexey Markevich on 2017-12-29. We have a few patches from various people, but nothing strong enough for consideration as a committer. We've tried to encourage some additional involvement from various people, but not much response at this point. ## Project Activity: The primary focus this period was on supporting Java17. We drove some releases from Web Services project toward that end and have incorporated the changes onto our main development stream. We've also started some experimental efforts to support the "jakarta.*" annotations instead/in addition to the "javax.*" versions. Those efforts are still ongoing. Releases: 3.3.12 was released on 2021-10-04. 3.4.5 was released on 2021-10-04. 3.3.11 was released on 2021-06-08. Older releases: Apache CXF Fediz 1.5.1 was released on 2020-11-30 Apache CXF DOSGI 2.0.0 was released on 2016-09-15 ## Community Health: For the most part, the project is making steady, but not stellar, progress. Many of the protocols and specs that CXF implements are mature specs and don't really change much. Thus, steady progress and regular releases are a good thing. We are responding to bug reports and security issues and getting patch releases out. PMC Chair Note: Due to time constraints at DayJob, I've felt a bit guilty that I couldn't devote as much time to CXF as I have in the past. I did post idea of changing the Chair to someone more involved on the private list, but there were no volunteers and the response was that the PMC is happy with the job I've done as chair and is OK with me continuing.
## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There are also two sub-projects that leverage CXF: Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. DOSGi - is the reference implementation of the Distribution Provider component of the OSGi Remote Services Specification ## Issues: There are no issues requiring board attention. ## Membership Data: Apache CXF was founded 2008-04-15 (13 years ago) There are currently 43 committers and 26 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Andy McCright on 2019-02-24. - No new committers. Last addition was Alexey Markevich on 2017-12-29. We have a few patches from various people, but nothing strong enough for consideration as a committer. We've tried to encourage some additional involvement from various people, but not much response at this point. ## Project Activity: The primary focus this period was bug fixes for a patch release for 3.4. There were several important regressions and bugs in 3.4 that were fixed as part of 3.4.4. Another chunk of work has been testing and fixing problems that will be caused by Java17 with hopes that we will be able to release a version of CXF that will be fully Java17 compatible when Java17 is released. Recent releases: 3.3.11 was released on 2021-06-08. 3.4.4 was released on 2021-06-08. ## Community Health: For the most part, the project is making steady, but not stellar, progress. Many of the protocols and specs that CXF implements are mature specs and don't really change much. Thus, steady progress and regular releases are a good thing. We are responding to bug reports and security issues and getting patch releases out.
## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There are also two sub-projects that leverage CXF: Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. DOSGi - is the reference implementation of the Distribution Provider component of the OSGi Remote Services Specification ## Issues: There are no issues requiring board attention. ## Membership Data: Apache CXF was founded 2008-04-15 (13 years ago) There are currently 43 committers and 26 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Andy McCright on 2019-02-24. - No new committers. Last addition was Alexey Markevich on 2017-12-29. We have a few patches from various people, but nothing strong enough for consideration as a committer. We've tried to encourage some additional involvement from various people, but not much response at this point. ## Project Activity: The primary focus this period was bug fixes for a patch release for 3.4. There were several important regressions and bugs in 3.4 that were fixed as part of 3.4.3. Traffic on users lists was up a bit this quarter as people continued migrating to 3.4. Recent releases: 3.3.10 was released on 2021-03-22. 3.4.3 was released on 2021-03-22. ## Community Health: For the most part, the project is making steady, but not stellar, progress. Many of the protocols and specs that CXF implements are mature specs and don't really change much. Thus, steady progress and regular releases are a good thing. We are responding to bug reports and security issues and getting patch releases out.
## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There are also two sub-projects that leverage CXF: Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. DOSGi - is the reference implementation of the Distribution Provider component of the OSGi Remote Services Specification ## Issues: There are no issues requiring board attention. ## Membership Data: Apache CXF was founded 2008-04-15 (13 years ago) There are currently 43 committers and 26 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Andy McCright on 2019-02-24. - No new committers. Last addition was Alexey Markevich on 2017-12-29. We have a few patches from various people, but nothing strong enough for consideration as a committer. We've tried to encourage some additional involvement from various people, but many people more or less disappeared over the holidays. ## Project Activity: The primary focus this period was bug fixes for a patch release for 3.4 that was released last period. There were several important regressions and bugs in 3.4 that were fixed as part of 3.4.2. Traffic on both the dev and users lists was up a bit this quarter as people started migrating to 3.4. Recent releases: 3.3.9 was released on 2020-12-28. 3.4.2 was released on 2020-12-28. Apache CXF Fediz 1.5.1 was released on 2020-11-30. ## Community Health: For the most part, the project is making steady, but not stellar, progress. Many of the protocols and specs that CXF implements are mature specs and don't really change much (other than the above mentioned package change from javax->jakarta). Thus, steady progress and regular releases are a good thing. We are responding to bug reports and security issues and getting patch releases out.
## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There are also two sub-projects that leverage CXF: Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. DOSGi - is the reference implementation of the Distribution Provider component of the OSGi Remote Services Specification ## Issues: There are no issues requiring board attention. ## Membership Data: Apache CXF was founded 2008-04-15 (12 years ago) There are currently 43 committers and 27 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Andy McCright on 2019-02-24. - No new committers. Last addition was Alexey Markevich on 2017-12-29. We have a few patches from various people, but nothing strong enough for consideration as a committer. We're trying to encourage some additional involvement for those people. ## Project Activity: The primary development activity this quarter was getting CXF 3.4.0 released. 3.4.0 has several new features that users have been asking for. However, one of the biggest efforts was updating all the 3rd party libraries that CXF uses to take advantages of fixes and security updates. Many of the updates are incompatible with older versions so some code changes, config changes, documentation updates, migration guide updates, etc... were necessary. 3.4.0 was released on 2020-08-24 3.2.14 was released on 2020-06-30 3.3.7 was released on 2020-06-30 Fediz 1.5.0 was released on 2020-06-23 ## Community Health: For the most part, the project is making steady, but not stellar, progress. Many of the protocols and specs that CXF implements are mature specs and don't really change much (other than the above mentioned package change from javax->jakarta). Thus, steady progress and regular releases are a good thing. We are responding to bug reports and security issues and getting patch releases out.
## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There are also two sub-projects that leverage CXF: Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. DOSGi - is the reference implementation of the Distribution Provider component of the OSGi Remote Services Specification ## Issues: There are no issues requiring board attention. ## Membership Data: Apache CXF was founded 2008-04-15 (12 years ago) There are currently 43 committers and 27 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Andy McCright on 2019-02-24. - No new committers. Last addition was Alexey Markevich on 2017-12-29. Glen Mazza asked to go emeritus from the PMC (not committer) and that will be done shortly. (likely before the board meeting) We have a few patches from various people, but nothing strong enough for consideration as a committer. We're trying to encourage some additional involvement for those people. ## Project Activity: The work this quarter was most "patch" related as we concentrated on getting bug fixes out to users. We also did a new version of Fediz which incorporates the latest CXF core release to pick up the CVE fixes that have been done in the last few months. As such, we released: 3.2.14 was released on 2020-06-30. 3.3.7 was released on 2020-06-30. Fediz 1.5.0 was released on 2020-06-23. Mater branch is now targeting 3.4 and does have a few additional new features. We have started a migration guide to document the changes. We hope to get 3.4 out this coming period as we work with Santuario and WebServices to get the releases we need from them. The new release of WSS4J is now available so we can keep moving forward on this. ## Community Health: For the most part, the project is making steady, but not stellar, progress. Many of the protocols and specs that CXF implements are mature specs and don't really change much (other than the above mentioned package change from javax->jakarta). Thus, steady progress and regular releases are a good thing. We are responding to bug reports and security issues and getting patch releases out.
## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There are also two sub-projects that leverage CXF: Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. DOSGi - is the reference implementation of the Distribution Provider component of the OSGi Remote Services Specification ## Issues: There are no issues requiring board attention. ## Membership Data: Apache CXF was founded 2008-04-15 (12 years ago) There are currently 43 committers and 27 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Andy McCright on 2019-02-24. - No new committers. Last addition was Alexey Markevich on 2017-12-29. ## Project Activity: The work this quarter was most "patch" related as we concentrated on getting bug fixes out to users. As such, we released: 3.2.13 was released on 2020-03-30. 3.3.6 was released on 2020-03-30. 3.2.12 was released on 2020-01-15. 3.3.5 was released on 2020-01-15. 3.2.12 and 3.3.5 contain fixes for two CVE's: CVE-2019-17573: Apache CXF Reflected XSS in the services listing page CVE-2019-12423: Apache CXF OpenId Connect JWK Keys service returns private/secret credentials if configured with a jwk keystore 3.2.13 and 3.3.5 contain a fix for one CVE: CVE-2020-1954: Apache CXF JMX Integration is vulnerable to a MITM attack Mater branch is now targeting 3.4 and does have a few additional new features. We have started a migration guide to document the changes. We hope to get 3.4 out this coming period as we work with Santuario and WebServices to get the releases we need from them. ## Community Health: For the most part, the project is making steady, but not stellar, progress. Many of the protocols and specs that CXF implements are mature specs and don't really change much (other than the above mentioned package change from javax->jakarta). Thus, steady progress and regular releases are a good thing. We are responding to bug reports and security issues and getting patch releases out.
## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There are also two sub-projects that leverage CXF: Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. DOSGi - is the reference implementation of the Distribution Provider component of the OSGi Remote Services Specification ## Issues: There are no issues requiring board attention at this time ## Membership Data: Apache CXF was founded 2008-04-15 (12 years ago) There are currently 43 committers and 27 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Andy McCright on 2019-02-24. - No new committers. Last addition was Alexey Markevich on 2017-12-29. ## Project Activity: Activity this quarter was mostly around bug fixes. We did a few release, but just "patch" releases that were targeting bugs found by users. However, after the 3.3.3 patch release in August, we did retarget master branch for more forward looking changes such as Java 13+ updates, microprofile updates, etc... Part of the ongoing work is updating the code to use the new "Jakarta" specs instead of the javax.* API's. There were some queries about participating in the Jakarta spec process which started some additional discussions around trying to support both API's, who can participate, etc... Apache CXF Fediz 1.4.6 was released on 2019-11-27. We are working on a 3.3.4 patch release very shortly. It was due in December, but the holidays delayed a few things. ## Community Health: For the most part, the project is making steady, but not stellar, progress. Many of the protocols and specs that CXF implements are mature specs and don't really change much (other than the above mentioned package change from javax->jakarta). Thus, steady progress and regular releases are a good thing. We are responding to bug reports and security issues and getting patch releases out.
## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There are also two sub-projects that leverage CXF: Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. DOSGi - is the reference implementation of the Distribution Provider component of the OSGi Remote Services Specification ## Issues: There are no issues requiring board attention at this time ## Membership Data: Apache CXF was founded 2008-04-15 (11 years ago) There are currently 43 committers and 27 PMC members in this project. The Committer-to-PMC ratio is roughly 3:2. Community changes, past quarter: - No new PMC members. Last addition was Andy McCright on 2019-02-24. - No new committers. Last addition was Alexey Markevich on 2017-12-29. ## Project Activity: Activity this quarter was mostly around bug fixes. We did a few release, but just "patch" releases that were targeting bugs found by users. However, after the 3.3.3 patch release in August, we did retarget master branch for more forward looking changes such as Java 13+ updates, microprofile updates, etc... Recent releases: 3.2.10 was released on 2019-08-13. 3.3.3 was released on 2019-08-13. 3.2.10 was released on 2019-08-13. ## Community Health: For the most part, the project is making steady, but not stellar, progress. Many of the protocols and specs that CXF implements are mature specs and don't really change much. Thus, steady progress and regular releases are a good thing. We are responding to bug reports and security issues and getting patch releases out.
## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There are also two sub-projects that leverage CXF: Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. DOSGi - is the reference implementation of the Distribution Provider component of the OSGi Remote Services Specification ## Issues: There are no issues requiring board attention at this time ## Activity: The activity this quarter centered around bug fixes for the 3.3.0 release that released earlier in the year. There are some discussions happening now around changes that will be necessary to support Java 13+ which will definitely result in some added developement efforts. ## Health report: For the most part, the project is making steady, but not stellar, progress. Many of the protocols and specs that CXF implements are mature specs and don't really change much. Thus, steady progress and regular releases are a good thing. ## PMC changes: - Currently 27 PMC members. - Last added PMC members: - Andy McCright was added to the PMC on Sun Feb 24 2019 - Alexey Markevich was added to the PMC on Sun Feb 24 2019 ## Committer base changes: - Currently 43 committers. - No new committers added in the last 3 months - Last committer addition was Alexey Markevich at Fri Dec 29 2017 ## Releases: - 3.2.9 was released on Sun May 12 2019 - 3.3.2 was released on Sun May 12 2019
## Description:
Apache CXF is an open source services framework. CXF helps you build and
develop services using frontend programming APIs, like JAX-WS and JAX-RS.
These services can speak a variety of protocols such as SOAP, XML/HTTP,
RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS
or JBI.
There are also two sub-projects that leverage CXF:
Fediz - Fediz helps you to secure your web applications via the standard
WS-Federation Passive Requestor Profile.
DOSGi - is the reference implementation of the Distribution Provider component
of the OSGi Remote Services Specification
## Issues:
There are no issues requiring board attention at this time
## Activity:
The main activity in the project was getting the release of 3.3.0 out in
January. This was a big release with updates for Java 11 and a bunch of other
things. We did get a few serious bug reports shortly after the release so we
did a 3.3.1 patch release in early March to fix the critical problems users
were having.
## Health report:
For the most part, the project is making steady, but not stellar, progress.
Many of the protocols and specs that CXF implements are mature specs and don't
really change much. Thus, steady progress and regular releases are a good
thing.
## PMC changes:
- Currently 27 PMC members.
- New PMC members:
- Andy McCright was added to the PMC on Sun Feb 24 2019
- Alexey Markevich was added to the PMC on Sun Feb 24 2019
## Committer base changes:
- Currently 43 committers.
- No new committers added in the last 3 months
- Last committer addition was Alexey Markevich at Fri Dec 29 2017
## Releases:
- 3.1.18 was released on Mon Jan 28 2019
- 3.2.8 was released on Mon Jan 28 2019
- 3.3.0 was released on Mon Jan 28 2019
- 3.3.1 was released on Sun Mar 03 2019
## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There are also two sub-projects that leverage CXF: Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. DOSGi - is the reference implementation of the Distribution Provider component of the OSGi Remote Services Specification ## Issues: There are no issues requiring board attention at this time ## Activity: The main activity this quarter was centered around Java 11 support. We're hoping to get 3.3 out in the next week or two which will have initial support for Java 11. The new Maven coordinates for the Jakarta based J2EE specs have caused some confusion and concern which did start a few discussions. ## PMC changes: - Currently 25 PMC members. - No new PMC members added in the last 3 months - Last PMC addition was Dennis Kieselhorst on Thu Nov 02 2017 ## Committer base changes: - Currently 43 committers. - No new committers added in the last 3 months - Last committer addition was Alexey Markevich at Fri Dec 29 2017 ## Releases: - 3.2.7 was released on Sun Oct 28 2018
## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There are also two sub-projects that leverage CXF: Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. DOSGi - is the reference implementation of the Distribution Provider component of the OSGi Remote Services Specification ## Issues: There are no issues requiring board attention at this time ## Activity: Activity this quarter centered around a few efforts: Relatively quiet quarter, likely due to summer vacations and partially due to the fact that the releases last quarter were slightly delayed. That said, work has progressed on master branch toward 3.3 to support Java 11. We hope to be able to release 3.3 next quarter that will support Java 11. ## PMC changes: - Currently 25 PMC members. - No new PMC members added in the last 3 months - Last PMC addition was Dennis Kieselhorst on Thu Nov 02 2017 ## Committer base changes: - Currently 43 committers. - No new committers added in the last 3 months - Last committer addition was Alexey Markevich at Fri Dec 29 2017 ## Releases: - 3.1.17 was released on Tue Oct 02 2018 - 3.2.6 was released on Sun Aug 12 2018 - Apache CXF Fediz 1.4.5 was released on Sun Oct 07 2018
## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There are also two sub-projects that leverage CXF: Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. DOSGi - is the reference implementation of the Distribution Provider component of the OSGi Remote Services Specification ## Issues: There are no issues requiring board attention at this time ## Activity: Activity this quarter centered around a few efforts: Relatively quiet quarter. I good chunk of time was spent around getting 3.2.5 released. That required new versions of Santuario and WSS4J which took some extra time due to a bunch of discussions/reviews on some changes there (all good). Thus, the release was a bit delayed from expected. We've moved master from targeting 3.2.x patches to targeting 3.3.0. The main thing we're attempting there is getting better support for Java 10/11/whatever in place. However, other big updates/changes are also being discussed. ## PMC changes: - Currently 25 PMC members. - No new PMC members added in the last 3 months - Last PMC addition was Dennis Kieselhorst on Thu Nov 02 2017 ## Committer base changes: - Currently 43 committers. - No new committers added in the last 3 months - Last committer addition was Alexey Markevich at Fri Dec 29 2017 ## Releases: - 3.1.16 was released on Thu Jun 21 2018 - 3.2.5 was released on Thu Jun 21 2018 - Apache CXF Fediz 1.4.4 was released on Thu Jun 28 2018
## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There are also two sub-projects that leverage CXF: Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. DOSGi - is the reference implementation of the Distribution Provider component of the OSGi Remote Services Specification ## Issues: There are no issues requiring board attention at this time ## Activity: Activity this quarter centered around a few efforts: This was a busy quarter, but not really for positive reasons. Java8 update 161 contained a behavioral change in the included JAXB implementation that broke some CXF tests and use cases. We scrambled to get a fix out (in 3.2.2), but subsequent user testing identified additional cases that were not fixed as well as cases that then broke with the new fix. We needed to follow up with additional releases fairly quickly to address those issues. One note: April 16th will mark 10 years since CXF graduated from the incubator ## PMC changes: - No new PMC members added in the last 3 months - Last PMC addition was Dennis Kieselhorst on Thu Nov 02 2017 ## Committer base changes: - No new committers added in the last 3 months - Last committer addition was Alexey Markevich at Fri Dec 29 2017 ## Releases: - 3.2.2 was released on Tue Feb 06 2018 - 3.1.15 was released on Mon Mar 12 2018 - 3.2.3 was released on Sun Mar 18 2018 - 3.2.4 was released on Sat Mar 24 2018
## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There are also two sub-projects that leverage CXF: Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. DOSGi - is the reference implementation of the Distribution Provider component of the OSGi Remote Services Specification ## Issues: There are no issues requiring board attention at this time ## Activity: Activity this quarter centered around a few efforts: There were three primary development activities this quarter: 1) Patch releases - primarily to fix bugs found in 3.2.0 we tried to get the first patch release out so folks don't need to depend on a .0 release. These patches also fixed a now public CVE (CVE-2017-12624) 2) Fediz - Fediz was updated to use the latest CXF releases as well as to fix a now public CVE (CVE-2017-12631) 3) New "microprofile" REST client - a discussion was started to implement the MicroProfile type save rest client specification (https://github.com/eclipse/microprofile-rest-client) within CXF. A new module was created for it and a lot of work has started toward achieving that goal. ## PMC changes: - Currently 25 PMC members. - Dennis Kieselhorst was added to the PMC on Thu Nov 02 2017 ## Committer base changes: - Currently 43 committers. - New commmitters: - Alexey Markevich was added as a committer on Fri Dec 29 2017 - Adrian Gonzalez was added as a committer on Tue Oct 31 2017 - John D. Ament was added as a committer on Tue Oct 24 2017 ## Releases: - 3.1.14 was released on Sun Nov 05 2017 - 3.2.1 was released on Sun Nov 05 2017 - Apache CXF 3.0.16 was released on Mon Nov 27 2017 - Apache CXF Fediz 1.3.3 was released on Tue Nov 28 2017 - Apache CXF Fediz 1.4.3 was released on Tue Nov 28 2017
## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There are also two sub-projects that leverage CXF: Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. DOSGi - is the reference implementation of the Distribution Provider component of the OSGi Remote Services Specification ## Issues: There are no issues requiring board attention at this time ## Activity: Activity this quarter centered around a few efforts: 1) Tomee requested a “security fix” off an old (long since unsupported) branch of CXF that incorporated a bunch of CVE fixes. They were very helpful in identifying the needed commits and testing so we were able to get 2.6.17 out for them. 2) CXF 3.2 - this was LONG overdue (2 years since 3.1) but we finally got it out. Now we are working on “upgrade issues” that people are reporting, but that’s a good thing as it shows people are using it. 3) Subprojects - with 3.2 out, we’ve been working on the Fediz and DOSGi subprojects to get them upgraded to be based on 3.2 instead of 3.1. ## PMC changes: - Currently 24 PMC members. - No new PMC members added in the last 3 months - Last PMC addition was Francesco Chicchiriccò on Sun Sep 18 2016 ## Committer base changes: - Currently 40 committers. - Dennis Kieselhorst was added as a committer on Mon May 15 2017 ## Releases: - 3.0.15 was released on Mon Sep 11 2017 - 3.1.13 was released on Mon Sep 11 2017 - 3.2.0 was released on Mon Sep 11 2017 - Apache CXF 2.6.17 was released on Thu Aug 03 2017 - Apache CXF Fediz 1.4.1 was released on Fri Aug 18 2017 - Apache CXF Fediz 1.4.2 was released on Fri Sep 15 2017
## Description:
Apache CXF is an open source services framework. CXF helps you
build and develop services using frontend programming APIs, like JAX-WS and
JAX-RS. These services can speak a variety of protocols such as SOAP,
XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as
HTTP, JMS or JBI.
There are also two sub-projects that leverage CXF:
Fediz - Fediz helps you to secure your web applications via the standard
WS-Federation Passive Requestor Profile.
DOSGi - is the reference implementation of the Distribution Provider
component of the OSGi Remote Services Specification
## Issues:
There are no issues requiring board attention at this time
## Activity:
- There was quite a bit of effort this quarter to get 3.1.12 out. There
were several fixes in 3.1.12 that users were waiting for. With 3.1.12
now out, efforts are shifting to getting Fediz and DOSGi subprojects
updated to 3.1.12 and getting those releases out. Also, a request was
made from Tomee project to back port some security fixes to 2.6.x
branch (long unsupported) which we have decided to work with them to
get a new release from that branch for them.
## PMC changes:
- Currently 24 PMC members.
- No new PMC members added in the last 3 months
- Last PMC addition was Francesco Chicchiriccò on Sun Sep 18 2016
## Committer base changes:
- Currently 40 committers.
- Dennis Kieselhorst was added as a committer on Mon May 15 2017
## Releases:
- Apache CXF Fediz 1.2.4 was released on Mon Apr 24 2017
- Apache CXF Fediz 1.3.2 was released on Mon Apr 24 2017
- Apache CXF Fediz 1.4.0 was released on Thu Apr 27 2017
- 3.0.14 was released on Thu Jun 29 2017
- 3.1.12 was released on Thu Jun 29 2017
## JIRA activity:
- 118 JIRA tickets created in the last 3 months
- 127 JIRA tickets closed/resolved in the last 3 months
## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There are also two sub-projects that leverage CXF: Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. DOSGi - is the reference implementation of the Distribution Provider component of the OSGi Remote Services Specification ## Issues: There are no issues requiring board attention at this time ## Activity: There was quite a lot of activity on both the CXF main codebase as we start to prepare for 3.2. We resolved over 300 JIRA issues, reducing the "open" count from over 550 to about 300. We have also started preparing releases of both the DOSGi and Fediz sub projects as they pick up the latest CXF releases. ## PMC changes: - Currently 24 PMC members. - No new PMC members added in the last 3 months - Last PMC addition was Francesco Chicchiriccò on Sun Sep 18 2016 ## Committer base changes: - Currently 39 committers. - Andy McCright was added as a committer on Thu Mar 16 2017 ## Releases: - 3.0.13 was released on Sun Apr 09 2017 - 3.1.10 was released on Mon Jan 30 2017 - 3.1.11 was released on Sun Apr 09 2017
## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There are also two sub-projects that leverage CXF: Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. DOSGi - is the reference implementation of the Distribution Provider component of the OSGi Remote Services Specification ## Issues: There are no issues requiring board attention at this time ## Activity: There was quite a lot of activity on both the CXF main codebase and the Fediz subproject. 3 separate security advisories were made public, 2 in CXF and 1 in Fediz. Those were a main driver for releases late in 2016. We’ve also released 3.1.10 with hopes of being able to concentrate on 3.2.0 and get that out this quarter. In addition, almost 100 JIRA’s have been resolved this period as we try and wrap up some of the new ideas and stabilize things for 3.2.0. ## PMC changes: - Currently 24 PMC members. - No new PMC members in the last 3 months. - Last PMC addition: Sun Sep 18 2016 (Francesco Chicchiriccò) ## Committer base changes: - Currently 38 committers. - Last committer addition: Sat Nov 19 2016 (Neal Hu) - There were also discussions on 3 other potential new committers. Hoping to see a little more contributions from each. ## Releases: - 3.0.12 was released on Sun Dec 11 2016 - 3.1.9 was released on Sun Dec 11 2016 - 3.1.10 was released on Mon Jan 30 2017
No report was submitted.
## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There are also two sub-projects that leverage CXF: Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. DOSGi - is the reference implementation of the Distribution Provider component of the OSGi Remote Services Specification ## Issues: There are no issues requiring board attention at this time ## Activity: This was a fairly active quarter on a bunch of fronts. DOSGi 2.0 was finally released completing some of the splitting of the remote services spec into Apache Aries and the implementation in CXF. It also cleaned up the architecture quite a bit to help make it easier to maintain. Fediz had a couple of patch releases to cleanup some requirements presented by users. CXF itself had some patch releases mostly to fix bugs. Work toward 3.2 is progressing and we were able to drive Oracle into producing a "milestone" API jar for the JAX-RS 2.1 update that we need for 3.2. ## PMC changes: - Currently 24 PMC members. - New PMC members: - Francesco Chicchiriccò was added to the PMC on Sun Sep 18 2016 - Jan Bernhardt was added to the PMC on Sun Sep 18 2016 ## Committer base changes: - Currently 37 committers. - No new committers added in the last 3 months - Last committer addition was Francesco Chicchiriccò at Mon Nov 30 2015 ## Releases: - 3.0.10 was released on Mon Jul 25 2016 - 3.1.7 was released on Mon Jul 25 2016 - Apache CXF Fediz 1.2.3 was released on Sun Sep 04 2016 - Apache CXF Fediz 1.3.1 was released on Thu Aug 11 2016 - DOSGI-2.0.0 was released on Thu Sep 15 2016 In addition, 3.0.11 and 3.1.8 are being voted on now.
## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There are also two sub-projects that leverage CXF: - Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. - DOSGi - is the reference implementation of the Distribution Provider component of the OSGi Remote Services Specification ## Issues: There are no issues requiring board attention at this time ##Releases - 3.0.10 was released on August 8, 2016 - 3.1.7 was released on August 8, 2016 ## Activity: This quarter was primarily spent fixing bugs for 3.1.7 and getting that stabilized. 3.1.7 also introduced better spring-boot support which has been asked for by several users. We received several contributions toward that goal and we are hoping the contributions from those individuals will continue in hopes of getting a new committer or two from it. Fediz 1.3.1 is under vote now with some minor fixes as well as upgrading to CXF 3.1.7. 1.2.3 should be released soon as well. DOSGi 2.0 is being worked on with hopes of releasing it by the end of the quarter. The major change here is the split with the "abstract API's" moving to Apache Aries and the CXF DOSGi being an implementation of the API's based on CXF. ## PMC changes: - Currently 22 PMC members. - No new PMC members added in the last 3 months - Last PMC addition was Andriy Redko on Tue Sep 09 2014 ## Committer base changes: - Currently 37 committers. - No new committers added in the last 3 months - Last committer addition was Francesco Chicchiricco at Mon Nov 30 2015 It has been a while since the last committer addition. We're hoping some of the new spring-boot contributions can lead to a new committer. In general, however, CXF is a mature project implementing mature specs.
No report was submitted.
## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. There are also two sub-projects that leverage CXF: Fediz - Fediz helps you to secure your web applications via the standard WS-Federation Passive Requestor Profile. DOSGi - is the reference implementation of the Distribution Provider component of the OSGi Remote Services Specification ## Issues: There are no issues requiring board attention at this time ##Releases - 3.0.8 was released on Sun Feb 07 2016 - 3.0.9 was released on Sun Mar 27 2016 - 3.1.5 was released on Sun Feb 07 2016 - 3.1.6 was released on Sun Mar 27 2016 - Apache CXF Fediz 1.2.2 was released on Mon Feb 15 2016 - Apache CXF Fediz 1.3.0 was released on Tue Mar 29 2016 - Apache CXF DOSGi 1.8.0 was released on Mon Apr 4 2016 ## Activity: This quarter was a busy quarter creating a bunch of releases. In the CXF core code, there were a lot of bug fixes and enhancements, many to support the releases of Fediz and DOSGi. Fediz 1.3.0 adds a new OpenId Connect based IdP, support for bridging between the WS-Federation and OpenId Connect protocols, and support for SAML SSO in the Fediz IdP. DOSGi 1.8.0 is a result of splitting the DOSGi 1.7.0 release into two parts: a) The OSGi specific and implementation independent interfaces and objects. These were split out of DOSGi and moved to a new sub-project in Apache Aries. b) The CXF specific implementation of the above interfaces which is now the CXF DOSGi sub-project. While helping the Security team evaluate the SRCCLR tool, we did find a few minor dependency updates that were also incorporated in the releases. ## PMC changes: - Currently 22 PMC members. - No new PMC members added in the last 3 months - Last PMC addition was Andriy Redko on Tue Sep 09 2014 ## Committer base changes: - Currently 37 committers. - No new committers added in the last 3 months - Last committer addition was Francesco Chicchiricco at Mon Nov 30 2015
## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. ## Issues: There are no issues requiring board attention at this time ## Activity: During the "Holiday Quarter", development activity dropped a little bit, but not as much as in previous years. Much of the development was centered around the Fediz sub-project (provide WS-Federation Passive Requestor Profile and various single sign on capabilities). We're hoping to get a release of Fediz shortly with the additional capabilities. On CXF proper, most of the development was around bug fixes, performance updates, and additional stuff to support Fediz. ## Health report: - The activity in the community is steady. Questions are answered promptly. Issues/patches are handled fairly quickly. ## PMC changes: - Currently 22 PMC members. - No new PMC members added in the last 3 months - Last PMC addition was Andriy Redko on Tue Sep 09 2014 ## Committer base changes: - Currently 37 committers. - Francesco Chicchiriccò was added as a committer on Mon Nov 30 2015 ## Releases: - 3.1.4 was released on Mon Nov 02 2015 - 3.0.7 was released on Mon Nov 02 2015 - 2.7.18 was released on Tue Nov 03 2015 ## Mailing list activity: - users@cxf.apache.org: - 1005 subscribers (down -1 in the last 3 months): - 450 emails sent to list (557 in previous quarter) - dev@cxf.apache.org: - 445 subscribers (up 5 in the last 3 months): - 182 emails sent to list (167 in previous quarter) - notifications@cxf.apache.org: - 29 subscribers (up 1 in the last 3 months): - 798 emails sent to list (572 in previous quarter) - jaxrs-tck@cxf.apache.org: - 5 subscribers (up 1 in the last 3 months) - issues@cxf.apache.org: - 121 subscribers (up 0 in the last 3 months): - 826 emails sent to list (892 in previous quarter) ## JIRA activity: - 121 JIRA tickets created in the last 3 months - 93 JIRA tickets closed/resolved in the last 3 months
## Description: Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. ## Activity: With the release of CXF 3.1.0 last reporting period, much of this period was spent following up on various reports and suggestions as users upgraded. Also, a lot of time has been spent upgrading Fediz to the latest CXF version. This activity resulted in several patch releases of CXF (3.1.2/3.1.3/3.0.6/2.7.17) as well as a couple of Fediz releases (1.2.1 and 1.1.3). The Fediz releases also addressed a security vulnerability that is now public and on our web site: http://cxf.apache.org/security-advisories.html ## Health report: - The activity in the community is stead. Questions are answered promptly. Issues/patches are handled fairly quickly. We’re looking at some of the patches to see if there are potential new committers with a discussion on one already started. ## Issues: - There are no issues requiring board attention at this time ## PMC changes: - Currently 22 PMC members. - No new PMC members added in the last 3 months - Last PMC addition was Andriy Redko at Tue Sep 09 2014 ## LDAP changes: - Currently 36 committers and 22 committee group members. - No new committee group members added in the last 3 months - No new committers added in the last 3 months - Last committer addition was Iris Ding at Tue May 26 2015 ## Releases: - 3.1.3 was released on Thu Oct 01 2015 - 3.1.2 was released on Mon Aug 03 2015 - Apache CXF Fediz 1.2.1 was released on Tue Aug 11 2015 - 3.0.6 was released on Mon Aug 03 2015 - Apache CXF Fediz 1.1.3 was released on Tue Aug 11 2015 - 2.7.17 was released on Fri Jul 31 2015 ## Mailing list activity: - users@cxf.apache.org: - 1008 subscribers (up 1 in the last 3 months): - 598 emails sent to list (658 in previous quarter) - dev@cxf.apache.org: - 441 subscribers (down -5 in the last 3 months): - 162 emails sent to list (244 in previous quarter) - notifications@cxf.apache.org: - 28 subscribers (down -1 in the last 3 months): - 587 emails sent to list (528 in previous quarter) - jaxrs-tck@cxf.apache.org: - 4 subscribers (up 0 in the last 3 months) - issues@cxf.apache.org: - 121 subscribers (down -6 in the last 3 months): - 900 emails sent to list (1082 in previous quarter) ## JIRA activity: - 153 JIRA tickets created in the last 3 months - 124 JIRA tickets closed/resolved in the last 3 months
## Description:
Apache CXF is an open source services framework. CXF helps you build and
develop services using frontend programming APIs, like JAX-WS and
JAX-RS. These services can speak a variety of protocols such as SOAP,
XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports
such as HTTP, JMS or JBI.
## Activity:
- CXF 3.1.0 was released this quarter which brings a bunch of useful
additions as well as updates the codebase to Java7 level (dropping
support for Java6).
- With CXF 3.1.0 released (and the subsequent 3.1.1 bug fix release), a ton
of work was done to update the extension projects (Fediz, DOSGi) to use
the new version and get releases out.
- The CWIKI upgrade did cause some issues with the websites as the
storage format changed a bit for some macros. Some work was done
to start using the REST interface to confluence instead of SOAP to
make this process easier to maintain and update in the future.
- A user submitted a public JIRA with a list of 10 potential security
issues. (likely found via static code analyze tool) This caught us
off guard a bit and we had to scramble to analyze each one quickly
due to the public JIRA. Only one of the 10 was found to actually
be a potential runtime issue with the rest being non-issues (code path
to the code would not allow insecure parsing, one case of code never
even being called/dead code), or issues in the command line tools
which, while needing to be fixed, are less severe of a threat. In
any case, the issues were addressed, but the community was
definitely a bit annoyed and having to "drop everything" and look
at it immediately due to the public nature of the logged JIRA. We
have a link on the site to the security page describing how to
properly report security vulnerabilities, not sure what else we
could have done.
## Issues:
- There are no issues requiring board attention at this time
## LDAP committee/Committership changes:
- Currently 36 committers and 22 LDAP committee members.
- No new LDAP committee members added in the last 3 months
- Last LDAP committee addition was Andriy Redko at Wed Sep 10 2014
- Iris Ding was added as a committer on Tue May 26 2015
## Releases:
- 3.1.1 was released on Tue Jun 09 2015
- 3.1.0 was released on Tue May 05 2015
- 3.0.5 was released on Tue May 05 2015
- DOSGi-1.7.0 was released on Wed Jul 08 2015
- 2.7.16 was released on Tue May 05 2015
- Fediz-1.2.0 was released on Tue Apr 28 2015
## Mailing list activity:
- users@cxf.apache.org:
- 1002 subscribers (up 8 in the last 3 months):
- 678 emails sent to list (666 in previous quarter)
- dev@cxf.apache.org:
- 444 subscribers (up 9 in the last 3 months):
- 239 emails sent to list (208 in previous quarter)
- notifications@cxf.apache.org:
- 29 subscribers (up 1 in the last 3 months):
- 515 emails sent to list (463 in previous quarter)
- issues@cxf.apache.org:
- 126 subscribers (up 0 in the last 3 months):
- 1076 emails sent to list (1154 in previous quarter)
## JIRA activity:
- 170 JIRA tickets created in the last 3 months
- 152 JIRA tickets closed/resolved in the last 3 months
## Description:
Apache CXF is an open source services framework. CXF helps you build and
develop services using frontend programming APIs, like JAX-WS and
JAX-RS. These services can speak a variety of protocols such as SOAP,
XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports
such as HTTP, JMS or JBI.
## Activity:
- Work is progressing to get 3.1.0 released, hopefully later this month
- Work is also progressing to get CXF Fediz (WS-Federation project) 1.2
released
- In support of the above, lots of work around some new features related to
management, metrics, logging, etc...
- Lots of work with the WebServices project to get WSS4J updated to the latest
OpenSAML release to support CXF 3.1.0.
## Issues:
- No major issues at this time. However, there was an "issue" last week that
we are concerned about. The process that is used to keep CXF's website
up to date stopped working. An issue was raised (INFRA-9328) on May 24th,
it wasn't looked at at all (from what I can tell) for 50 hours when it was
assigned to someone. And then nothing. On March 31st, I raised the
priority to Critical as it was blocking SEVERAL projects (CXF, ActiveMQ,
Camel, etc...) from getting sites updated. Joe had it diagnosed 10
minutes later, but the "fix" was not applied for another 26 hours. So 9
days to fix something that was causing problems for multiple projects.
That's concerning.
## PMC/Committership changes:
- Currently 35 committers and 22 PMC members in the project.
- No new PMC members added in the last 3 months
- Last PMC addition was Andriy Redko at Wed Sep 10 2014
- No new committers added in the last 3 months
- Last committer addition was Jan Bernhardt at Wed Sep 10 2014
## Releases:
- 3.0.4 was released on Mon Feb 16 2015
- 2.7.15 was released on Mon Feb 16 2015
## Mailing list activity:
- users@cxf.apache.org:
- 994 subscribers (up 11 in the last 3 months):
- 649 emails sent to list (924 in previous quarter)
- dev@cxf.apache.org:
- 437 subscribers (up 5 in the last 3 months):
- 198 emails sent to list (274 in previous quarter)
- notifications@cxf.apache.org:
- 28 subscribers (up 1 in the last 3 months):
- 452 emails sent to list (551 in previous quarter)
- jaxrs-tck@cxf.apache.org:
- 4 subscribers (up 0 in the last 3 months)
- issues@cxf.apache.org:
- 126 subscribers (up 0 in the last 3 months):
- 1130 emails sent to list (955 in previous quarter)
## JIRA activity:
- 166 JIRA tickets created in the last 3 months
- 127 JIRA tickets closed/resolved in the last 3 months
@David: The infra service was deprecated a while ago
Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. Releases: 2.7.13/2.7.14 3.0.2/3.0.3 Committer/PMC: No changes this period. Last committer added 9/2014 (Jan Bernhardt) Last PMC added 9/2014 (Andriy Redko) Community update: With the release of the 3.0.x versions of CXF, there has been a steady stream of questions and reports from users as they upgrade. The community has done a good job resolving issues and trying to push new versions out. CXF was represented at ApacheCon EU with 6 talks about CXF. Security update: 2 new security advisories were made public at: http://cxf.apache.org/security-advisories.html
Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. Releases: 2.6.15 2.7.12 3.0.1 3.0.2/2.7.13/2.6.15 will likely be release before the board meeting. Committer/PMC: One committer added this period (Jan Bernhardt) One PMC member added this period (Andriy Redko) Community update: With the release of the 3.0.x versions of CXF, there has been a stead stream of questions and reports from users as they upgrade. The community has done a good job resolving issues and trying to push new versions out. 3.0.2 has been slightly delayed as we worked with other communities (Santuario, WSS4J) to resolve some security issues that will be made public after 3.0.2/2.7.13 is released. CXF will be well represented at ApacheCon EU with 5 or 6 talks scheduled to be about CXF. Security update: 2 new CVE numbers have been requested and assigned.
Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. Releases: 2.6.14 2.7.11 3.0.0 XJC-Utils 3.0.0 and 3.0.1 Committer/PMC: One committer added this period (Xilai Dai) No PMC changes this period. Last PMC addition Jan 2014. Community update: We released 3.0.0 this period which as a huge milestone for us. So far, the uptake has been quite positive with a lot of new users logging issues. We’re working on getting a 3.0.1 bug fix out shortly to fix some of the issues that have been found. The 2.7.11/2.6.14 releases fixed a couple of security issues that were made public on our web site: http://cxf.apache.org/security-advisories.html Some discussions were started about requested changes for 3.1, but that’s being slightly delayed until we get 3.0.1/2.7.12/2.6.15 out (very shortly) when we plan to stop supporting 2.6.x. This was to avoid having too many fixes branches to deal with. Much work has been done by various community members to get CXF working with Java 8. The remaining issues require a release of BCEL from Apache Commons which we’ve been inquiring about for over a month and a half now. Hopefully the commons folks can get that out soon.
@Jim: Follow up with CXF and Commons to see how well they are communicating
Apache CXF is an open source services framework. CXF helps you build and develop services using front-end programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. Releases: 2.6.12 2.6.13 2.7.9 2.7.10 3.0.0-milestone2 Committer/PMC: One committer added this period (Andriy Redko) and one is being voted on now One PMC member added this period (Andrei Shakirin) Community update: There has been a lot of work on trunk to get 3.0.0 out the door. We did a second milestone release which resulted in an influx of issues as people started trying out the new things. An external party sent a note to the security@apache list and our private list to describe a potential DOS attack. We worked with them to clarify the issue, create a test case, ad debug/fix the issues. As a result, two new CVE’s were issued. The 2.7.11/2.6.14 releases (voting now, out shortly) will fix the issues and the CVE’s (along with 2 other CVE’s from last reporting period) will be made public at that point. There was a note sent privately to a couple of the PMC members about the wording of the JAX-RS compliance with the JCP spec. This was mostly due to the lack of TCK access for the latest JAX-RS 2.0 TCK. We worked with that person to clarify the statement about lack of TCK access is the main reason for lack of official compliance. The lack of stability in the Jenkins build farm is an ongoing concern. Unfortunately, many of the Jenkins errors are being ignored due to the issues with Jenkins causing a lot of wasted time. Also, turn around from Jenkins takes a lot longer than expected due to the large build queue that seems to always be there. Not sure if additional build slaves are in the plans or not.
AI: Sam: ask project to file JIRA for Jenkins issues
Apache CXF is an open source services framework. CXF helps you build and develop services using front-end programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. Releases: 2.6.11 (Nov 25, 2013) 2.7.8 (Nov 25, 2013) 3.0.0-milestone1 (Nov 28, 2013) Fediz 1.1 (Nov 4, 2013) Committer/PMC: No committer/pmc changes this period Last committer change: One committer added for July 2013 report, discussion started for a potential new committer Last PMC change: 2 new PMC members were added for our January 2013 report. Community update: There has been a lot of work on trunk to get 3.0.0 out the door. We did manage to get the first milestone out and there has been quite a bit of feedback and bug reports against it (which is good). We’re doing even more work to try and get a milestone2 out soon to address those issues as well as cleanup a few more things we’ve found. The DOSGi subproject has also had some work to refactor how it’s built and tested to better leverage the work done on the main CXF branches. This should result in being able to keep DOSGi more up to date and easier to build and maintain.
Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. Releases: 2.6.9 (July 17, 2013) 2.6.10 (Sept 14, 2013) 2.7.6 (July 14, 2013) 2.7.7 (Sept 14, 2013) Committer/PMC: No committer/pmc changes this period Last committer change: One committer added for July 2013 report Last PMC change: 2 new PMC members were added for our January 2013 report. Community update: A lot of current development work is targeting a 3.0 release of CXF. However, there are still many bug fixes being made and ported to the various fixes branches. We're hoping to do a milestone release of 3.0 shortly to get more feedback from users. There is also work to produce a new 1.1 version of the Fediz subproject to update it to the latest CXF releases as well as provide some additional functionality requested by users. That should be completely shortly.
Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. Releases: 2.6.8 (May 14, 2013) 2.7.5 (May 14, 2013) Apache CXF DOSGi 1.5.0 released. (July 2, 2013) Committer/PMC: One new committer this period (Amichai Rothman) Last PMC change: 2 new PMC members were added for our January 2013 report. Security updates: One security vulnerabilities was made public this quarter and added to http://cxf.apache.org/security-advisories.html CVE-2013-2160 - Denial of Service Attacks on Apache CXF Community update: A lot of current development work is targeting a 3.0 release of CXF. However, there are still many bug fixes being made and ported to the various fixes branches. We also received a grant from Talend to add a XKMS service to CXF which enhances our security story around public key infrastructures and management.
Apache CXF is an open source services framework. CXF helps you build and
develop services using frontend programming APIs, like JAX-WS and
JAX-RS. These services can speak a variety of protocols such as SOAP,
XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports
such as HTTP, JMS or JBI.
Releases:
2.5.9 (Feb 1, 2013)
2.5.10 (Apr 2, 2013)
2.6.6 (Feb 1, 2013)
2.6.7 (Apr 2, 2013)
2.7.3 (Feb 1, 2013)
2.7.4 (Apr 2, 2013)
Apache CXF Fediz - 1.0.3 released. (Feb 22, 2013)
Apache CXF DOSGi 1.4 released. (Jan 22, 2013)
Committer/PMC:
No changes this period.
Last changes: 2 new PMC members and 1 committer were added for our
January 2013 report.
Security updates:
Two security vulnerabilities were made public this quarter and added
to http://cxf.apache.org/security-advisories.html
* CVE-2012-5633 - was fixed and released last period, but not made public
until January.
* CVE-2013-0239 - was fixed this quarter and released and made public.
Community update:
We started some discussions around whether to go with a 2.8 version
or jump to 3.0. Some of the reason was due to the uncertainty around
the TCK situation and what restrictions and limitations that is going
to place on us. Some refactoring is going on in both the Fediz and
DOSGi sub projects based on some feedback. Basically, a lot of
questions being asked and answered, several discussions going on, lots
of new features being working on, and of course lots of bugs being
fixed. All good. :-)
Apache CXF is an open source services framework. CXF helps you build and develop services using front-end programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. Releases: 2.5.7 2.5.8 2.6.4 2.6.5 2.7.1 2.7.2 Apache CXF Fediz - 1.0.2 released. Apache CXF DOSGi 1.4 is close to being ready for release. Committer/PMC: Jason Pell and Andrei Shakirin were added as committers. Oliver Wulff added to the PMC. Security updates: Another security vulnerability was discovered in CXF (CVE-2012-5633). A partial fix was included in 2.5.7/2.6.4/2.7.1, but a more complete fix was put in place for 2.5.8/2.6.5/2.7.2. The full disclosure will be released shortly and placed on http://cxf.apache.org/security-advisories.html
Apache CXF is an open source services framework. CXF helps you build and develop services using front-end programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. Releases of CXF: 2.4.9 2.4.10 (*) 2.5.5 2.5.6 2.6.2 2.6.3 2.7.0 (*) We announced to the community that 2.4.10 will be the last scheduled 2.4.x release. Apache CXF Fediz subproject - 1.0.1 released. Committer/PMC - no new committers or PMC members this quarter. Community updates: The community really came together nicely to get all the releases out the door. Lots of traffic on the various mailing lists. Security updates: During the period, we dealt with 2 security vulnerability reports. The first turned out to just be a poorly configured example and not a real security problem with the CXF code itself. The second did get a CVE assigned, CVE-2012-3451, and much work was done to address it. This was fixed and announced as well as added to our advisory page: http://cxf.apache.org/security-advisories.html Infrastructure update: During the period, CXF has completely switched over to using svnpubsub for both the web site (buildbot build pulling data from confluence) and for the release distributions. CXF has been using Nexus for a long time. We believe we are now in compliance with all the requirements Infrastructure has mandated that will go into effect in January.
Apache CXF is an open source services framework. CXF helps you build and develop services using front-end programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. Releases: 2.3.10 2.3.11 (*) 2.4.7 2.4.8 2.5.3 2.5.4 2.6.0 2.6.1 We announced to the community that 2.3.11 will be the last scheduled 2.3.x release. Apache CXF DOSGi 1.3.1 was released to correct some issues found with the OSGi compatibility tests. Apache CXF Fediz - 1.0.0 released. New subproject to implement WS- Federation Passive Requestor Profile and claims based access control along with role based. Committer/PMC - no new committers or PMC members this quarter. Last committer added in Jan 2012 Last PMC added in Apr 2012 Community updates: The community really came together nicely to get all the releases out the door. It was a very busy quarter with many releases, including releases in both of CXF's sub-projects. There has been quite a bit of discussions and issues on the mailing lists about the new Fediz release from people testing it and getting it to interoperate with other products. From a community diversity standpoint, RedHat acquired FuseSource last month. This changes the makeup of the PMC slightly as RedHat (the #3 company by number of PMC members) acquired Fuse (#1 company). RedHat now employs exactly 50% of the PMC (10 out of 20).
(CXF)
Apache CXF is an open source services framework. CXF helps you build and develop services using front-end programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. Releases: 2.3.9 released 2.4.6 released 2.5.2 released cxf-xjc-utils 2.6.0 released - utility plugins for JAXB XJC DOSGi 1.3.0 was released. 1.3.1 currently being released to address some compatibility issues with the DOSGi specification. 2.6.0 is in final preparations. May be released by the time the board meets. (along with 2.3.10, 2.4.7, and 2.5.3 patch release) Committer added: No new committers, but discussions started on 2 individuals. Will likely have votes started soon if discussions go well. PMC: Dennis Sosnoski added to the PMC Infrastructure update: The CXF WebSite was completely moved over to using svnpubsub for publishing. Working with Joe Schaefer, we came up with an external exporter that buildbot can run that allows our content to remain in Confluence, but meets the svnpubsub requirement for publishing. This process has been "live" for over 2 months now and the committers are definitely happy with it. It's working quite well. Community updates: The community has really come together to get 2.6.0 out the door. There has been a significant amount of testing with the 2.6.0 snapshots to make sure everything works well. Every example in the distributions has been hand tested to make sure it works and that the README is accurate. Many "outside of Apache" test cases, examples, and tutorials have been tested. The result is that the 2.6.0 migration guide is very complete and we're also quite confident in the quality of the release. There are also discussions around "Fediz", a potential CXF subproject around federated security that currently is being worked on in the CXF sandbox. Interested people have created a potential roadmap and are working on some additional ideas for it. DOSGi subproject did a release to update to the newer versions of CXF proper and also add a bunch of enhancements that users asked for. However, shortly after the release, we discovered a couple issues with it with the DOSGi TCK (thanks to RedHat for running the tests) which as prompted a patch release to fix those issues. A research paper was published by Aspect Security and Sonatype at: http://s.apache.org/gj (PDF file) that, unfortunately, did not put CXF (and several other Apache projects) into a great light, specifically highlighting 2 security vulnerabilities CXF had last year. On the positive side, we hope that will encourage folks to upgrade to the newer versions of CXF. :-) 15 committers committed changes during the period. A total of 1345 commits were done, with 537 of them on the main trunk. (the rest were back porting fixes to branches as well as some work in the sandbox, DOSGi, and cxf-xjc subprojects). From a diversity standpoint, a very large portion of the commits (over ~80%) were done by six employees of one company (not unexpected), but 9 others did contribute in significant ways.
Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. Releases: 2.3.8 released 2.4.4 released 2.4.5 released 2.5.0 released 2.5.1 released Committer added: Oliver Wulff Community updates: The 2.5.0 release was done in late October (and subsequent 2.5.1 patch release in December) which was a big milestone for CXF as it provided a bunch of new features and enhancements. The response has been very good with several requests on the lists and JIRA's filed and such. Some work has been started to update the DOSGi subproject to the latest 2.5.1 release as well as introduce some new features and enhancements there. A release of that should be done soon. Some work has been started on trunk to cleanup the code a bit (compile warnings removed), enhance the OSGi support, etc... Early discussions on ideas for 2.6.0 have started with the work targeting that. 13 committers committed changes during the period. A total of 987 commits were done, with 519 of them on trunk. (the rest were back porting fixes to branches as well as some work in the sandbox). From a diversity standpoint, 6 committers from one company were responsible for roughly 80% of the commits, 4 committers from a second at 7% and the remaining 13% among the other 3 independents. Those numbers are slightly concerning but not unexpected. It should be noted, however, that the release manager for one of the releases (2.4.4) was an employee from the second and was the first release in a long time not managed by me (dkulp) which is a very welcome change.
Apache CXF is an open source services framework. CXF helps you build and develop services using front-end programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. Releases: 2.3.6 released 2.3.7 released 2.4.2 released 2.4.3 released PMC changes: Alessio Soldano added to PMC Aki Yoshida added to PMC Community updates: Work on CXF 2.5.0 is winding down and we hope to have a release in a couple weeks. What's exciting about this release to the community is that it expands the scope of CXF from just a services framework to actually providing a couple of enterprise level services. 2.5.0 includes a full Security Token Service and a WS-Notification service. It also includes a bunch of other new features and enhancements, but the expansion of the scope of the project is interesting.
Apache CXF is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI. Releases: 2.3.5 released 2.4.1 released PMC changes: Colm O hEigeartaigh added to CXF PMC Community update: As the Summer season has started, things have quieted down quite a bit. However, user and dev list traffic remains pretty steady and generally questions and issues are answered promptly. Work on trunk is proceeding to add some new features such as WS-RM 1.1 support, enhanced security for JAX-RS, etc... Lots of cools stuff being worked on. However, fixes are being merged back to 2.4.x with plans to release 2.4.2 relatively soon. Some big patches were submitted for DOSGi to update it to CXF 2.4.1. We'll likely try to get a DOSGi release out soon as well. All items on the "Project Branding Board Report Checklist" have been done except for the "tm" added to the logo as CXF doesn't have a logo. :-) I (dkulp) sent out a couple of unofficial "please check your CXF and Apache trademark usage" emails to a couple companies and I'm happy to say they all have improved their pages without needing to resort to official channels. There still are changes required for some sites, but things are heading in the right direction.
Releases: 2.3.2 released 2.3.3 released 2.3.4 released 2.4.0 released New committers: Dennis Sosnoski for his work on the WS-RM stuff as well as his contributions to CXF in the form of articles and publications (IBM developer works for example) and general contributions on the user list. Aki Yoshida for his work on WS-RM and JMX/Management and contributions on the users list. New PMC members: Andrzej Michalec was voted into the PMC, but he's still trying to get approval from his company as to whether he can accept or not. Community update: User and dev list traffic remains pretty steady and generally questions and issues are answered promptly. The release of 2.4.0 is exciting for the community as it introduces several new features that the community has bean asking for. It also includes the results of 2 of the Google Summer of Code projects from last summer. Developing 2.4.0 also required much closer collaboration between the Apache CXF and the Apache WebServices projects to get updates and releases of various components in WebServices which we feel was healthy for both communities. In Feb, there was a long discussion about "commercial" links on the web site. ( http://s.apache.org/MID ) which was a bit contentious but did result in a policy of some sort to make sure the commercial links are limited to one area of the web site and is "fair" for all involved.
Releases: 2.2.12 was released 2.3.1 was released 2.3.2 is in final preparations (may be in voting by the time this report is submitted) New committers: Colm O hEigeartaigh was added as a committer Lukasz Moren was added as a committer (GSoC Success!) Tomasz Opanovicz was added as a committer (GSoC Success!) 7 PMC members that haven't been heard from in over 2 years were marked emeritus. Community update: User and dev list traffic remains pretty steady and generally questions and issues are answered promptly. From an "outside the Apache Community" perspective, 3 different companies added information (to make a total of 4) about commercial support, training, and product options to the section of the CXF support page: http://cxf.apache.org/support.html . Not sure if that reflects possitively or negatively. :-) No board level issues at this time.
Releases: DOSGI 1.2 was released 2.2.10 and 2.2.11 patches were released. The long awaited 2.3.0 release finally occurred. Yea! New committers: No changes to the PMC or committer list occurred this quarter. This is a first for CXF. Community update: Several exciting things happened this quarter from a community perspective. 1) The 2.3.0 release is obviously a major event. The developer community came together nicely to get 2.3.0 to pass both the JAX-WS 2.2 and JAX-RS 1.1 TCK's, which is no small effort. 2) GSoC - all three GSoC projects were a success from a coding standpoint. While none of the three were ready for 2.3.0, we hope to get them into 2.4.0. Two of the students have remained active in CXF and continue to work to help clean things up in their projects. 3) User survey - CXF conducted an anonymous user survey to help gauge who our users are and what interests them to help plan ideas for 2.4.0 and beyond. We had over 130 responses and the results definitely were educational to the community. No issues requiring board attention.
This report, among others, raises concerns that PMC's of projects that implement Java JSR's might not be able to continue, based on the resolution of the JCP and Harmony issues.
AI Doug reassure PMC'S that the Apache Software Foundation will support PMC's that acquire licenses to use TCK's under acceptable terms.
Releases: 2.0.13* was released 2.1.10* was released 2.2.8 and 2.2.9* were released * Note: 2.0.13, 2.1.10, and 2.2.9 were primarily released as a patch for a severe security issue reported to security@. There were no plans to release any further 2.0.x and 2.1.x versions, but the community thought that the security issue warranted another release. New committers: We had "temporary" accounts created for two of our three Google Summer of Code students and granted them access to our sandbox. This has been a success and the students have been doing quite a bit of work there. Issues requiring board attention: In our last report, we complained about the JCP TCK access process. I'm happy to report that the new process seems to be going much better. CXF is getting patches and TCK's much quicker. I think other projects are also much happier with the responses. Consider that issue resolved. Community update: With access to the JAX-WS 2.2 TCK, we were able to really start tackling the 2.2 features. We're happy to report that the code on trunk now passes the TCK. We still have quite a bit of cleanup work before 2.3 is ready to be released, but a major feature is now done. All three Google Summer of Code projects are going VERY well and are on track to be completed successfully. We're all excited about the new features these projects will bring to CXF. On the Distributed OSGi front, 1.2 should be released shortly. The last couple of issues targeted for the release were resolved this week so final preps are being made to roll the release.
Daniel clarified that the third student didn't want an account.
Releases: 2.1.9 was released 2.2.6 and 2.2.7 were released New PMC members: David Bosschaert New Committers: David Valeri Marc Schaaf Community update: User and dev list traffic remains pretty steady and generally questions and issues are answered promptly. There have been several students presenting proposals and ideas for the Google Summer of Code program. We're working with them to solidify some quality proposals and look forward to working with some of them to produce some useful enhancements for CXF. One a negative note, several CXF committers were laid off from Progress this quarter (including the PMC chair). There is a little bit of uncertainty about their future contributions as they investigate opportunities. For a positive spin: the diversity of the project has never been better. :-) Issues requiring board attention: Several ([1][2][3]) requests to the JCP list for updated versions of TCKs have been completely ignored. This is definitely a problem for several ASF projects including CXF, Axis, and Wink, but other projects also consistently having this problem. We request that the board expand the JCP committee to more than one person and require that ALL have access to obtain requested materials. (dkulp personal note: I would volunteer for this.) Apache requires diversity in its communities to avoid single points of failure, but JCP doesn't meet that general expectation. [1] http://mail-archives.apache.org/mod_mbox/www-jcp-open/201002.mbox/<201002111715.14615.dkulp@apache.org> [2] http://mail-archives.apache.org/mod_mbox/www-jcp-open/201002.mbox/<201002171207.44373.dkulp@apache.org> [3] http://mail-archives.apache.org/mod_mbox/www-jcp-open/201003.mbox/<201003212104.18734.dkulp@apache.org>
Both Daniel and Mark have volunteered to help with the JCP/TCK process, and have credentials and ideas. This should relieve the bottleneck.
Releases: 2.1.8 was released 2.2.5 was released DOSGi 1.1 was released Final preparations for 2.1.9 and 2.2.6 releases are occurring now and will likely be in the process of being voted on by the board meeting. The CXF developers have decided that 2.1.9 will be the last patch release for 2.1.x (which has been out for 22 months) so we can concentrate more on getting 2.3 finished. Users have been notified to start migrating to 2.2.x. Committers: Cyrille Le Clerc added as a committer Community: The CXF committer community did an amazing job this quarter doing JIRA triage and bug fixing. The "bug" count in JIRA is now under 25 open bugs (with several blocked on bugs in external dependencies) and under 130 total open issues. User and dev list traffic remains pretty steady and generally questions and issues are answered promptly. Vacations and such over the holidays did cause some minor delays and backlogs, but that seems to be cleared up now. Another exciting development has been the publication of the first technical books about CXF. Previously, there were not any books about CXF which was a short coming. In December, TWO books were published about CXF. 1) Apache CXF Web Service Development: http://cxf.soaweb.co.in/ 2) Developing Web Services with Apache CXF and Axis2 (3rd Edition): http://www.agileskills2.org/DWSAA/index.html Neither were written by CXF committers so it really was the user community responding to a need. (And thanks to Brett Porter for being a reviewer on the first one. :-) Also, a section about CXF's JAX-RS implementation was put into Bill Burke's "RESTful Java with JAX-RS" book.
Congrats on the books from the board!!!
The summer was a bit slow, but things have picked up again in September/October. Releases: 2.0.12 was released - last planned Apache release for 2.0.x series 2.1.6 was released 2.1.7 was released 2.2.3 was released 2.2.4 was released DOSGi 1.1 release is being prepared now that 2.2.4 is out the door. 2.3 development has kind of stalled as we worked on 2.2.4 and fixing JIRA issues and other user requested issues, although a couple of 2.3 things have been back ported to 2.2.4 to get those into users hands sooner. Community: The traffic on the users and dev lists remains pretty steady. Questions are normally answered promptly. After the Confluence upgrade, we had a lot of problems with our web site not formatting content correctly. We used this as an opportunity to completely install a more "non-confluence-looking" look and feel for the site which has made the site much more approachable. The navigation links for the documentation was also redone to make it easier to find information that is needed. There has been some effort put in to trying to clean up JIRA by reviewing old JIRA issues. MANY were found to be already fixed and were marked resolved. We've requested more information about others and are waiting for responses. In all, "open" JIRA counts has dropped from about 330 to 260, with more to go. Committers/PMC: Christian Schneider was added to the PMC
Releases: 2.0.11 was released 2.1.5 was released 2.2.1 was released 2.2.2 was released (First Apache licensed, JAX-RS compliant implementation) Distributed OSGi/Remote Services 1.0 released 2.2.3/2.1.6/2.0.12 releases are being prepared for the end of July. DOSGi 1.1 release is also being prepared. Community: With the release of 2.2.2, CXF is now JAX-RS compliant in addition to JAX-WS compliant. This is a major milestone for CXF and the community has responded to it well with many new users. The DOSGi 1.0 release has also attracted many new users as well as a bunch of blog postings and tweets and such. We have 3 GSoC students working on projects. In June, JBoss was able to achieve 100% passing of the JAX-WS/JWS/SAAJ/JAXR parts of the J2EE TCK with CXF as the JAX-WS implementation. Much work went into getting CXF to pass these tests, one result was Alessio Soldano being voted in as a committer. Due to the DOSGi and JAX-RS releases, June was a very busy month on the mailing lists. dev traffic was almost double the previous several months. users traffic was up by 50%. Committers/PMC: Alessio Soldano was added as a committer.
Kudos for the test passing!
Releases: 2.0.10 was released 2.1.4 was released 2.2 was released (Major release supporting several new WS-* standards and JAX-RS 1.0) 2.0.11/2.1.5/2.2.1 are being prepared to be released by the end of the month. The Distributed OSGi 1.0 implementation will be released immediately after 2.2.1. Community: This period saw a couple external announcements that were related to CXF and the CXF community: 1) JOnAS announced that they have achieved J2EE certification. They used CXF for their JAX-WS and JWS implementation. 2) RedHat/JBoss announced that they will be supporting CXF as the core WS stack in JBoss and putting resources into improving CXF. We've seen some of this already as patches are coming in from RedHat folks with a couple of them getting very close to being nominated for committership. We finally managed to get the JAX-RS TCK so some effort is starting to get CXF JAX-RS certified as well. We've started a thread on the private list about how to start a "contest" to design a logo for CXF. We're kind of trying to figure out the rules and such at this point. We're examining the rules Solr used as a base. Spent quite a bit of time reviewing GSoC proposals and chatting with the students via email and on IRC. Hopefully (fingers crossed), that investment will pay off with some of the proposals accepted. Andrzej Michalec was added as a committer.
Justin and Bertrand note that it would be a good idea to put CXF in touch with PRC. Greg takes the action item to follow up with CXF on the logo contest.
Releases: 2.1.3 was released 2.0.9 was released Community: David Bosschaert added as committer Notables: 1) Two CXF committers (myself and Benson Margulies) were voted in as committers to ws due to ongoing work on XmlSchema and WSS4J. This will help with backlogs of issues with ws project and help get releases out from them as needed. 2) The distributed OSGi implementation will be moved out of the sandbox and into a subproject very soon. 3) 2.1.4 should be released shortly (waiting on some more WSS4J fixes). Geronimo needs 2.1.4 so we may not wait for wss4j and do a 2.1.5 once wss4j is ready. 4) Privacy policy added to website.
The privacy policy is much appreciated.
Releases: 2.0.8 was released 2.1.2 was released 2.0.9 and 2.1.3 are in final preparations to be released shortly Community: Sergey Beryozkin added to PMC Christian Schneider added as committer Notables: 1) Progress toward 2.2 is going well. A lot of work has gone into the WS-SecurityPolicy stuff, the JMS transport, etc.... 2) The distributed OSGi implementation is also progressing quite well in the sandbox. 2 PMC members are travelling to the OSGi bundlefest in Montpellier, France next week to work on integrating our dOSGi implementation with an RI of the OSGi Discovery Service and also a dOSGi TCK. 3) 13 committers committed stuff this period, a couple of which hadn't committed anything for a while. Nice to see some folks active again. 4) One issue that keeps coming up on the list is people filing bugs against older versions of CXF that are already fixed, especially versions embedded in third party applications. We need to find a way to encourage upgrading. (take a page from the Spring playbook and delete the old tags?) (that was a joke :-) 5) Another issue is that there are a couple folks that have filed some JIRA issues with very good patches (which is good) and COULD potentially earn a committer spot, but they haven't participated AT ALL on the mailing lists (which is bad) or even on the wiki or anything and thus really aren't part of the "community". Need to find a way to get them involved there as well at which point committer status should be obtainable. 6) Another issue: jira issues (with patches) logged against XmlSchema aren't being looked at. Need to follow up with WS group to see what can be done to alleviate that or help out there. That said, there is an opinion that XmlSchema isn't the "best fit" for us so alternative ideas are being explored.
This was a "short" month since the last meeting met a week late and several vacations (and my paternity leave) have caused a relatively short report: Releases: 2.0.7 and 2.1.1 were released. Community: No new committers, but mentoring is occurring with a couple people getting close and patches being submitted. Discussions have started around planning for new features for 2.2. Along with that we also had good a good discussion (including several users) about whether a certain "feature" (JAX-RS 0.8 upgrade) was worth putting in a 2.1.x patch instead of waiting for 2.2. Very busy and healthy users list. Legal: Nothing of note Anyway, this should be our last monthly report and should be back on the quarterly schedule.
Releases: - 2.1.1 and 2.0.7 are very close. Will probably be in the process of voting or even released by the time the board meets. Community: - No new committers or PMC's. - Email traffic has jumped by about 35% since graduation. - Unfortunately, many JIRA issues are being filed every day, although many have patches and test cases. Legal: - Nothing of note Issues: - Incubator email archives still not moved to TLP in mod_mbox. That's the last remaining issue for TLP handover.
Releases: 2.1 released which is JAX-WS 2.1 compliant and has a BUNCH of new features 2.0.6 released as a bug fix/patch release of the 2.0.x line Community aspects: Voted in Sergey Beryozkin as a new committer. Most resources have been moved from the incubator project to the full TLP status. The main thing remaining is that mail archives aren't showing up in mod_mbox. Still progressing through the web site and other resources (confluence mainly) to find incubator references. Crypto issue: After reviewing: http://www.apache.org/licenses/exports/ it still shows CXF under the Incubator project. We'll find an Apache member to help get that page updated shortly.
WHEREAS, the Board of Directors deems it to be in the best interests of the Foundation and consistent with the Foundation's purpose to establish a Project Management Committee charged with the creation and maintenance of open-source software related to a framework for creating, deploying, and consuming services based on SOA design principles for distribution at no charge to the public. NOW, THEREFORE, BE IT RESOLVED, that a Project Management Committee (PMC), to be known as the "Apache CXF Project", be and hereby is established pursuant to Bylaws of the Foundation; and be it further RESOLVED, that the Apache CXF Project be and hereby is responsible for the creation and maintenance of software related to a framework for creating, deploying, and consuming services based on SOA design principles; and be it further RESOLVED, that the office of "Vice President, Apache CXF" be and hereby is created, the person holding such office to serve at the direction of the Board of Directors as the chair of the Apache CXF Project, and to have primary responsibility for management of the projects within the scope of responsibility of the Apache CXF Project; and be it further RESOLVED, that the persons listed immediately below be and hereby are appointed to serve as the initial members of the Apache CXF PMC: - Ulhas Bhole <ulhasbhole@apache.org> - Sean O'Callaghan <seanoc@apache.org> - Dan Diephouse <ddiephouse@apache.org> - Freeman Yue Fang <ffang@apache.org> - Jarek Gawor <gawor@apache.org> - Jeff Genender <jgenender@apache.org> - Eoghan Glynn <eglynn@apache.org> - Jim Jagielski <jim@apache.org> - Willem Ning Jiang <ningjiang@apache.org> - Eric Johnson <ericjohnson@apache.org> - Peter Jones <peterjones@apache.org> - Daniel Kulp <dkulp@apache.org> - Bozhong Lin <blin@apache.org> - Jervis Liu <jliu@apache.org> - Jim Ma <ema@apache.org> - James Maode Mao <mmao@apache.org> - Benson Margulies <bimargulies@apache.org> - Glen Mazza <gmazza@apache.org> - Guillaume Nodet <gnodet@apache.org> - Ajay Paibir <ajapaibir@apache.org> NOW, THEREFORE, BE IT FURTHER RESOLVED, that Daniel Kulp be appointed to the office of Vice President, Apache CXF, to serve in accordance with and subject to the direction of the Board of Directors and the Bylaws of the Foundation until death, resignation, retirement, removal or disqualification, or until a successor is appointed; and be it further RESOLVED, that the initial Apache CXF PMC be and hereby is tasked with the creation of a set of bylaws intended to encourage open development and increased participation in the Apache CXF Project; and be it further RESOLVED, that the Apache CXF Project be and hereby is tasked with the migration and rationalization of the Apache Incubator CXF podling; and be it further RESOLVED, that all responsibilities pertaining to the Apache Incubator CXF podling encumbered upon the Apache Incubator PMC are hereafter discharged. Special order 7B, Establish the Apache CXF project, was approved by Unanimous Vote of the directors present.
Project Name - Apache CXF Description - SOA enabling framework, web services toolkit Date of Entry - August 2006 Items to resolve before graduation: * Nothing - vote to graduate to a TLP has passed in the CXF community and the Incubator PMC. Only thing left is the approval of the board. Community aspects: * JBoss has started filing JIRA issues as they work to integrate CXF into JBoss as a webservice stack. * Have worked with ServiceMix folks to provide an OSGi bundle for CXF to use for ServiceMix 4's webservice stuff. * Camel has also done some work to integrate CXF better. * Combined the Axis 2 and CXF JAX-WS TCK efforts into a single project with a single SVN repo and single mailing list to reduce duplicated effort and to share knowledge. * Lots of testing and final bug fixing for 2.1 which should be released soon. * Lots of interest in the new JAX-RS stuff in 2.1. Code aspects: * Released 2.0.4-incubator fixing over 50 issues found by users. * Released 2.0.5-incubator fixing over 30 issues found by users. * Finalizing 2.1
Project name - Apache CXF Description - SOA enabling framework, web services toolkit Date of entry - August 2006 Items to resolve before graduation: * Diversity - Active committers are mostly IONA people. We did vote in two new independent committers and Dan Diephouse now works for an IONA competitor, so some progress is being made. Community aspects: * Voted in Benson Margulies due to excellent work in several areas of the code, but specifically in the Aegis and XFire migration things. * Voted in Glen Mazza due to excellent work cleaning up various parts of the code, reviewing everyones commits, updating docs, etc.... * Released 2.0.1-incubator and 2.0.2-incubator. * Started a discussion to talk about Graduation ([http://www.nabble.com/Graduating.....-tf4231363.html#a12038088 link]) but the discussion turned more to how to increase diversity when Jim J. expressed concerns about that. * The cxf-user mail list traffic has tripled since June, and the Chinese language list (http://groups.google.com/group/cxf-zh) is now at over 60 people. Many new users are participating. However, cxf-dev traffic has remained constant except for a HUGE spike (2.4x normal) in September. Code aspects: * Released 2.0.1-incubator and 2.0.2-incubator - These were bug fixes from 2.0, but some minor new features were added. * Started discussing a roadmap for a 2.0.3-incubator release (bug fixes) as well as a 2.1 release. (http://incubator.apache.org/cxf/roadmap.html)
iPMC Reviewers: rdonkin, jukka Project name - CXF Description - SOA enabling framework, web services toolkit Date of entry - August, 2006 Top three items to resolve - 1. Diversity - Active commiters are still 90% IONA people 2. Growth of community - related to diversity. The traffic on both the users and dev lists is growing with new people jumping in, but still is mostly IONA folks. 3. Mentor status - recent discussion on general@i.a.o suggested we really need three active mentors. We currently only have 2 mentors total, only one of which has been active. (the other is getting back up to speed though.) Community aspects: * Voted in Jarek Gawor as a committer due to his excellent work on JAX-WS compliancy fixes. * Have been working closely with Geronimo to integrate CXF into the next version of Geronimo. * Have started working with Camel folks to define requirements and produce API's that allow CXF to work well with Camel Code aspects: * Started to finalize the next milestone release. There are a few remaining features we need to finish. * Ongoing TCK testing may require unexpected code changes. * Very long ongoing discussions about some of the transport API's. Resolutions on these are slow going.
Project name - CXF Description - SOA enabling framework, web services toolkit Date of entry - August, 2006 Top three items to resolve - 1. Diversity - Active commiters are 90% IONA people 2. Growth of community - related to diversity, we have not yet had the opportunity to add additional commiters. The traffic on the dev list is "steady." With milestone 1 out, we are beginning to attract users. Traffic on the user list is now growing. 3. Not enough documentation or work occuring on the wiki. Community aspects: * Lots of discussions about various topics (Reliable Messaging, tooling, etc...) occuring on the dev list. * Released milestone 1 in December. A bit late, but more feature were added and stability and number of bugs have been good. * Working with the Yoko folks about transitioning to CXF (from ObjectWeb Celtix) * Started working with the Geronimo folks to integrate with them. * Created a eclipse plugin/bundle of our code for the Eclipse STP project for them to integrate our code. Code aspects: * Milestone 1 released, working on setting features for the next RC. (hopefully around March) * Started discussing some architectural changes, especially in regard to the tooling. ----
The CeltiXfire project is moving along quickly now. In the last few weeks accounts have been created and the initial source code has been checked in. The code is now under very active development. There has been lots of discussion on the dev list between the different developers on several topics including tooling, configuration, release packaging, and REST support. We are currently working to define a set of criteria for our first milestone. In addition to coding, there has been some effort to get a website up and going, but we're currently debating the best tools for the job. Also, we've also discussed whether or not we want to change the name, but their has been no clear consensus.