Apache Logo
The Apache Way Contribute ASF Sponsors

This was extracted (@ 2017-06-08 23:10) from a list of minutes which have been approved by the Board.
Please Note The Board typically approves the minutes of the previous meeting at the beginning of every Board meeting; therefore, the list below does not normally contain details from the minutes of the most recent Board meeting.

2017 | 2016 | 2015 | 2014 | 2013 | 2012 | 2011 | 2010 | 2009 | 2008 | 2007 | 2006 | 2005 | 2004 | 2003 | 2002 | 2001 | 2000 | 1999 | Pre-organization meetings

CXF

19 Apr 2017 [Daniel Kulp / Brett]

## Description:
Apache CXF is an open source services framework. CXF helps you
build and develop services using frontend programming APIs, like JAX-WS and
JAX-RS. These services can speak a variety of protocols such as SOAP,
XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as
HTTP, JMS or JBI.

There are also two sub-projects that leverage CXF:

Fediz - Fediz helps you to secure your web applications via the standard
 WS-Federation Passive Requestor Profile.

DOSGi - is the reference implementation of the Distribution Provider
 component of the OSGi Remote Services Specification

## Issues:
There are no issues requiring board attention at this time

## Activity:
There was quite a lot of activity on both the CXF main codebase as we start
to prepare for 3.2.  We resolved over 300 JIRA issues, reducing the "open" count
from over 550 to about 300.  We have also started preparing releases of both
the DOSGi and Fediz sub projects as they pick up the latest CXF releases.

## PMC changes:
 - Currently 24 PMC members.
 - No new PMC members added in the last 3 months
 - Last PMC addition was Francesco Chicchiriccò on Sun Sep 18 2016

## Committer base changes:
 - Currently 39 committers.
 - Andy McCright was added as a committer on Thu Mar 16 2017

## Releases:
 - 3.0.13 was released on Sun Apr 09 2017
 - 3.1.10 was released on Mon Jan 30 2017
 - 3.1.11 was released on Sun Apr 09 2017

27 Feb 2017 [Daniel Kulp / Mark]

## Description:
Apache CXF is an open source services framework. CXF helps you
build and develop services using frontend programming APIs, like JAX-WS and
JAX-RS. These services can speak a variety of protocols such as SOAP,
XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as
HTTP, JMS or JBI.

There are also two sub-projects that leverage CXF:

Fediz - Fediz helps you to secure your web applications via the standard
 WS-Federation Passive Requestor Profile.

DOSGi - is the reference implementation of the Distribution Provider
 component of the OSGi Remote Services Specification

## Issues:
There are no issues requiring board attention at this time

## Activity:
There was quite a lot of activity on both the CXF main codebase and the Fediz
subproject.   3 separate security advisories were made public, 2 in CXF and 1
in Fediz.  Those were a main driver for releases late in 2016.  We’ve also
released 3.1.10 with hopes of being able to concentrate on 3.2.0 and get that
out this quarter.  In addition, almost 100 JIRA’s have been resolved this
period as we try and wrap up some of the new ideas and stabilize things for
3.2.0.

## PMC changes:
- Currently 24 PMC members.
- No new PMC members in the last 3 months.
- Last PMC addition: Sun Sep 18 2016 (Francesco Chicchiriccò)

## Committer base changes:
- Currently 38 committers.
- Last committer addition: Sat Nov 19 2016 (Neal Hu)
- There were also discussions on 3 other potential new committers.  Hoping to
  see a little more contributions from each.

## Releases:
- 3.0.12 was released on Sun Dec 11 2016
- 3.1.9 was released on Sun Dec 11 2016
- 3.1.10 was released on Mon Jan 30 2017

18 Jan 2017 [Daniel Kulp / Rich]

No report was submitted.

19 Oct 2016 [Daniel Kulp / Bertrand]

## Description:
Apache CXF is an open source services framework. CXF helps you
build and develop services using frontend programming APIs, like JAX-WS and
JAX-RS. These services can speak a variety of protocols such as SOAP,
XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as
HTTP, JMS or JBI.

There are also two sub-projects that leverage CXF:

Fediz - Fediz helps you to secure your web applications via the standard
 WS-Federation Passive Requestor Profile.

DOSGi - is the reference implementation of the Distribution Provider
 component of the OSGi Remote Services Specification

## Issues:
There are no issues requiring board attention at this time

## Activity:
This was a fairly active quarter on a bunch of fronts.  DOSGi 2.0
was finally released completing some of the splitting of the remote services
spec into Apache Aries and the implementation in CXF.   It also cleaned up the
architecture quite a bit to help make it easier to maintain.    Fediz had a
couple of patch releases to cleanup some requirements presented by users.
CXF itself had some patch releases mostly to fix bugs.   Work toward 3.2 is
progressing and we were able to drive Oracle into producing a "milestone" API
jar for the JAX-RS 2.1 update that we need for 3.2.

## PMC changes:
- Currently 24 PMC members.
- New PMC members:
   - Francesco Chicchiriccò was added to the PMC on Sun Sep 18 2016
   - Jan Bernhardt was added to the PMC on Sun Sep 18 2016

## Committer base changes:
- Currently 37 committers.
- No new committers added in the last 3 months
- Last committer addition was Francesco Chicchiriccò at Mon Nov 30 2015

## Releases:
- 3.0.10 was released on Mon Jul 25 2016
- 3.1.7 was released on Mon Jul 25 2016
- Apache CXF Fediz 1.2.3 was released on Sun Sep 04 2016
- Apache CXF Fediz 1.3.1 was released on Thu Aug 11 2016
- DOSGI-2.0.0 was released on Thu Sep 15 2016
In addition, 3.0.11 and 3.1.8 are being voted on now.

17 Aug 2016 [Daniel Kulp / Shane]

## Description: Apache CXF is an open source services framework. CXF helps you
build and develop services using frontend programming APIs, like JAX-WS and
JAX-RS. These services can speak a variety of protocols such as SOAP,
XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as
HTTP, JMS or JBI.

There are also two sub-projects that leverage CXF:
- Fediz - Fediz helps you to secure your web applications via the standard
WS-Federation Passive Requestor Profile.
- DOSGi - is the reference implementation of the Distribution Provider
component of the OSGi Remote Services Specification

## Issues: There are no issues requiring board attention at this time

##Releases
- 3.0.10 was released on August 8, 2016
- 3.1.7 was released on  August 8, 2016

## Activity:

This quarter was primarily spent fixing bugs for 3.1.7 and getting that
stabilized.  3.1.7 also introduced better spring-boot support which has been
asked for by several users.   We received several contributions toward that
goal and we are hoping the contributions from those individuals will continue
in hopes of getting a new committer or two from it.

Fediz 1.3.1 is under vote now with some minor fixes as well as upgrading to
CXF 3.1.7.   1.2.3 should be released soon as well.

DOSGi 2.0 is being worked on with hopes of releasing it by the end of the
quarter.   The major change here is the split with the "abstract API's" moving
to Apache Aries and the CXF DOSGi being an implementation of the API's based
on CXF.


## PMC changes:

- Currently 22 PMC members.
- No new PMC members added in the last 3 months
- Last PMC addition was Andriy Redko on Tue Sep 09 2014

## Committer base changes:

- Currently 37 committers.
- No new committers added in the last 3 months
- Last committer addition was Francesco Chicchiricco at Mon Nov 30 2015

It has been a while since the last committer addition.  We're hoping some of
the new spring-boot contributions can lead to a new committer.  In general,
however, CXF is a mature project implementing mature specs.

20 Jul 2016 [Daniel Kulp / Jim]

No report was submitted.

20 Apr 2016 [Daniel Kulp / Isabel]

## Description:
Apache CXF is an open source services framework. CXF helps you build and
develop services using frontend programming APIs, like JAX-WS and JAX-RS.
These services can speak a variety of protocols such as SOAP, XML/HTTP,
RESTful HTTP, or CORBA and work over a variety of transports such as HTTP,
JMS or JBI.  There are also two sub-projects that leverage CXF:

Fediz - Fediz helps you to secure your web applications via the standard
  WS-Federation Passive Requestor Profile.
DOSGi - is the reference implementation of the Distribution Provider
  component of the OSGi Remote Services Specification

## Issues:
There are no issues requiring board attention at this time

##Releases
 - 3.0.8 was released on Sun Feb 07 2016
 - 3.0.9 was released on Sun Mar 27 2016
 - 3.1.5 was released on Sun Feb 07 2016
 - 3.1.6 was released on Sun Mar 27 2016
 - Apache CXF Fediz 1.2.2 was released on Mon Feb 15 2016
 - Apache CXF Fediz 1.3.0 was released on Tue Mar 29 2016
 - Apache CXF DOSGi 1.8.0 was released on Mon Apr 4 2016

## Activity:
This quarter was a busy quarter creating a bunch of releases.  In the CXF
core code, there were a lot of bug fixes and enhancements, many to support
the releases of Fediz and DOSGi.

Fediz 1.3.0 adds a new OpenId Connect
based IdP, support for bridging between the WS-Federation and OpenId
Connect protocols, and support for SAML SSO in the Fediz IdP.

DOSGi 1.8.0 is a result of splitting the DOSGi 1.7.0 release into two parts:
a) The OSGi specific and implementation independent interfaces and objects.
These were split out of DOSGi and moved to a new sub-project in Apache Aries.
b) The CXF specific implementation of the above interfaces which is now the
CXF DOSGi sub-project.

While helping the Security team evaluate the SRCCLR tool, we did find a few
minor dependency updates that were also incorporated in the releases.

## PMC changes:

 - Currently 22 PMC members.
 - No new PMC members added in the last 3 months
 - Last PMC addition was Andriy Redko on Tue Sep 09 2014

## Committer base changes:

 - Currently 37 committers.
 - No new committers added in the last 3 months
 - Last committer addition was Francesco Chicchiricco at Mon Nov 30 2015

20 Jan 2016 [Daniel Kulp / Rich]

## Description:
Apache CXF is an open source services framework. CXF helps you build and
develop services using frontend programming APIs, like JAX-WS and JAX-RS.
These services can speak a variety of protocols such as SOAP, XML/HTTP,
RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS
or JBI.

## Issues:
There are no issues requiring board attention at this time

## Activity:
During the "Holiday Quarter", development activity dropped a little bit, but
not as much as in previous years.  Much of the development was centered around
the Fediz sub-project (provide WS-Federation Passive Requestor Profile and
various single sign on capabilities).   We're hoping to get a release of Fediz
shortly with the additional capabilities.   On CXF proper, most of the
development was around bug fixes, performance updates, and additional stuff to
support Fediz.

## Health report:
- The activity in the community is steady.   Questions are answered promptly.
Issues/patches are handled fairly quickly.

## PMC changes:

- Currently 22 PMC members.
- No new PMC members added in the last 3 months
- Last PMC addition was Andriy Redko on Tue Sep 09 2014

## Committer base changes:
- Currently 37 committers.
- Francesco Chicchiriccò was added as a committer on Mon Nov 30 2015

## Releases:
- 3.1.4 was released on Mon Nov 02 2015
- 3.0.7 was released on Mon Nov 02 2015
- 2.7.18 was released on Tue Nov 03 2015


## Mailing list activity:

- users@cxf.apache.org:
- 1005 subscribers (down -1 in the last 3 months):
- 450 emails sent to list (557 in previous quarter)

- dev@cxf.apache.org:
- 445 subscribers (up 5 in the last 3 months):
- 182 emails sent to list (167 in previous quarter)

- notifications@cxf.apache.org:
- 29 subscribers (up 1 in the last 3 months):
- 798 emails sent to list (572 in previous quarter)

- jaxrs-tck@cxf.apache.org:
- 5 subscribers (up 1 in the last 3 months)

- issues@cxf.apache.org:
- 121 subscribers (up 0 in the last 3 months):
- 826 emails sent to list (892 in previous quarter)


## JIRA activity:

- 121 JIRA tickets created in the last 3 months
- 93 JIRA tickets closed/resolved in the last 3 months

21 Oct 2015 [Daniel Kulp / Bertrand]

## Description:
 Apache CXF is an open source services framework. CXF helps you build and
 develop services using frontend programming APIs, like JAX-WS and
 JAX-RS. These services can speak a variety of protocols such as SOAP,
 XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports
 such as HTTP, JMS or JBI.

## Activity:
With the release of CXF 3.1.0 last reporting period, much of this period was
spent following up on various reports and suggestions as users upgraded.   Also,
a lot of time has been spent upgrading Fediz to the latest CXF version.  This
activity resulted in several patch releases of CXF (3.1.2/3.1.3/3.0.6/2.7.17) as
well as a couple of Fediz releases (1.2.1 and 1.1.3).  The Fediz releases also
addressed a security vulnerability that is now public and on our web site:
http://cxf.apache.org/security-advisories.html

## Health report:
- The activity in the community is stead.   Questions are answered promptly.
Issues/patches are handled fairly quickly.     We’re looking at some of the
patches to see if there are potential new committers with a discussion on
one already started.

## Issues:
- There are no issues requiring board attention at this time

## PMC changes:
- Currently 22 PMC members.
- No new PMC members added in the last 3 months
- Last PMC addition was Andriy Redko at Tue Sep 09 2014

## LDAP changes:
- Currently 36 committers and 22 committee group members.
- No new committee group members added in the last 3 months
- No new committers added in the last 3 months
- Last committer addition was Iris Ding at Tue May 26 2015

## Releases:
- 3.1.3 was released on Thu Oct 01 2015
- 3.1.2 was released on Mon Aug 03 2015
- Apache CXF Fediz 1.2.1 was released on Tue Aug 11 2015
- 3.0.6 was released on Mon Aug 03 2015
- Apache CXF Fediz 1.1.3 was released on Tue Aug 11 2015
- 2.7.17 was released on Fri Jul 31 2015

## Mailing list activity:
- users@cxf.apache.org:
   - 1008 subscribers (up 1 in the last 3 months):
   - 598 emails sent to list (658 in previous quarter)

- dev@cxf.apache.org:
   - 441 subscribers (down -5 in the last 3 months):
   - 162 emails sent to list (244 in previous quarter)

- notifications@cxf.apache.org:
   - 28 subscribers (down -1 in the last 3 months):
   - 587 emails sent to list (528 in previous quarter)

- jaxrs-tck@cxf.apache.org:
   - 4 subscribers (up 0 in the last 3 months)

- issues@cxf.apache.org:
   - 121 subscribers (down -6 in the last 3 months):
   - 900 emails sent to list (1082 in previous quarter)

## JIRA activity:
- 153 JIRA tickets created in the last 3 months
- 124 JIRA tickets closed/resolved in the last 3 months

15 Jul 2015 [Daniel Kulp / David]

## Description:
    Apache CXF is an open source services framework. CXF helps you build and
   develop services using frontend programming APIs, like JAX-WS and
   JAX-RS. These services can speak a variety of protocols such as SOAP,
   XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports
   such as HTTP, JMS or JBI.

## Activity:
 - CXF 3.1.0 was released this quarter which brings  a bunch of useful
   additions as well as updates the codebase to Java7 level (dropping
   support for Java6).
 - With CXF 3.1.0 released (and the subsequent 3.1.1 bug fix release), a ton
   of work was done to update the extension projects (Fediz, DOSGi) to use
   the new version and get releases out.
 - The CWIKI upgrade did cause some issues with the websites as the
    storage format changed a bit for some macros.  Some work was done
    to start using the REST interface to confluence instead of SOAP to
    make this process easier to maintain and update in the future.
 -  A user submitted a public JIRA with a list of 10 potential security
    issues. (likely found via static code analyze tool)  This caught us
    off guard a bit and we had to scramble to analyze each one quickly
    due to the public JIRA.   Only one of the 10 was found to actually
    be a potential runtime issue with the rest being non-issues (code path
    to the code would not allow insecure parsing, one case of code never
    even being called/dead code), or issues in the command line tools
    which, while needing to be fixed, are less severe of a threat.   In
    any case, the issues were addressed, but the community was
    definitely a bit annoyed and having to "drop everything" and look
    at it immediately due to the public nature of the logged JIRA.  We
    have a link on the site to the security page describing how to
    properly report security vulnerabilities, not sure what else we
    could have done.

## Issues:
 - There are no issues requiring board attention at this time

## LDAP committee/Committership changes:

 - Currently 36 committers and 22 LDAP committee members.
 - No new LDAP committee members added in the last 3 months
 - Last LDAP committee addition was Andriy Redko at Wed Sep 10 2014
 - Iris Ding was added as a committer on Tue May 26 2015

## Releases:

 - 3.1.1 was released on Tue Jun 09 2015
 - 3.1.0 was released on Tue May 05 2015
 - 3.0.5 was released on Tue May 05 2015
 - DOSGi-1.7.0 was released on Wed Jul 08 2015
 - 2.7.16 was released on Tue May 05 2015
 - Fediz-1.2.0 was released on Tue Apr 28 2015

## Mailing list activity:

 - users@cxf.apache.org:
    - 1002 subscribers (up 8 in the last 3 months):
    - 678 emails sent to list (666 in previous quarter)

 - dev@cxf.apache.org:
    - 444 subscribers (up 9 in the last 3 months):
    - 239 emails sent to list (208 in previous quarter)

 - notifications@cxf.apache.org:
    - 29 subscribers (up 1 in the last 3 months):
    - 515 emails sent to list (463 in previous quarter)

 - issues@cxf.apache.org:
    - 126 subscribers (up 0 in the last 3 months):
    - 1076 emails sent to list (1154 in previous quarter)

## JIRA activity:

 - 170 JIRA tickets created in the last 3 months
 - 152 JIRA tickets closed/resolved in the last 3 months

22 Apr 2015 [Daniel Kulp / Rich]

## Description:
   Apache CXF is an open source services framework. CXF helps you build and
   develop services using frontend programming APIs, like JAX-WS and
   JAX-RS. These services can speak a variety of protocols such as SOAP,
   XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports
   such as HTTP, JMS or JBI.

## Activity:
 - Work is progressing to get 3.1.0 released, hopefully later this month
 - Work is also progressing to get CXF Fediz (WS-Federation project) 1.2
   released
 - In support of the above, lots of work around some new features related to
    management, metrics, logging, etc...
 - Lots of work with the WebServices project to get WSS4J updated to the latest
   OpenSAML release to support CXF 3.1.0.

## Issues:
 - No major issues at this time.   However, there was an "issue" last week that
   we are concerned about.   The process that is used to keep CXF's website
   up to date stopped working.  An issue was raised (INFRA-9328) on May 24th,
   it wasn't looked at at all (from what I can tell) for 50 hours when it was
   assigned to someone.   And then nothing.  On March 31st, I raised the
   priority to Critical as it was blocking SEVERAL projects (CXF, ActiveMQ,
   Camel, etc...) from getting sites updated.   Joe had it diagnosed 10
   minutes later, but the "fix" was not applied for another 26 hours.   So 9
   days to fix something that was causing problems for multiple projects.
   That's concerning.

## PMC/Committership changes:

 - Currently 35 committers and 22 PMC members in the project.
 - No new PMC members added in the last 3 months
 - Last PMC addition was Andriy Redko at Wed Sep 10 2014
 - No new committers added in the last 3 months
 - Last committer addition was Jan Bernhardt at Wed Sep 10 2014

## Releases:

 - 3.0.4 was released on Mon Feb 16 2015
 - 2.7.15 was released on Mon Feb 16 2015

## Mailing list activity:

 - users@cxf.apache.org:
    - 994 subscribers (up 11 in the last 3 months):
    - 649 emails sent to list (924 in previous quarter)

 - dev@cxf.apache.org:
    - 437 subscribers (up 5 in the last 3 months):
    - 198 emails sent to list (274 in previous quarter)

 - notifications@cxf.apache.org:
    - 28 subscribers (up 1 in the last 3 months):
    - 452 emails sent to list (551 in previous quarter)

 - jaxrs-tck@cxf.apache.org:
    - 4 subscribers (up 0 in the last 3 months)

 - issues@cxf.apache.org:
    - 126 subscribers (up 0 in the last 3 months):
    - 1130 emails sent to list (955 in previous quarter)


## JIRA activity:

 - 166 JIRA tickets created in the last 3 months
 - 127 JIRA tickets closed/resolved in the last 3 months

@David: The infra service was deprecated a while ago

21 Jan 2015 [Daniel Kulp / Rich]

Apache CXF is an open source services framework. CXF helps you build and
develop services using frontend programming APIs, like JAX-WS and
JAX-RS. These services can speak a variety of protocols such as SOAP,
XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports
such as HTTP, JMS or JBI.

Releases:
2.7.13/2.7.14
3.0.2/3.0.3

Committer/PMC:
No changes this period.
Last committer added 9/2014 (Jan Bernhardt)
Last PMC added 9/2014 (Andriy Redko)

Community update:
With the release of the 3.0.x versions of CXF, there has been a steady stream
of questions and reports from users as they upgrade.  The community has done a
good job resolving issues and trying to push new versions out.

CXF was represented at ApacheCon EU with 6 talks about CXF.

Security update:
2 new security advisories were made public at:
http://cxf.apache.org/security-advisories.html

15 Oct 2014 [Daniel Kulp / Doug]

Apache CXF is an open source services framework. CXF helps you build and
develop services using frontend programming APIs, like JAX-WS and
JAX-RS. These services can speak a variety of protocols such as SOAP,
XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports
such as HTTP, JMS or JBI.

Releases:
2.6.15
2.7.12
3.0.1
3.0.2/2.7.13/2.6.15 will likely be release before the board meeting.


Committer/PMC:
One committer added this period (Jan Bernhardt)
One PMC member added this period (Andriy Redko)

Community update:
With the release of the 3.0.x versions of CXF, there has been a stead
stream of questions and reports from users as they upgrade.  The
community has done a good job resolving issues and trying to push
new versions out.   3.0.2 has been slightly delayed as we worked with
other communities (Santuario, WSS4J) to resolve some security issues
that will be made public after 3.0.2/2.7.13 is released.

CXF will be well represented at ApacheCon EU with 5 or 6 talks
scheduled to be about CXF.


Security update:
2 new CVE numbers have been requested and assigned.

16 Jul 2014 [Daniel Kulp / Jim]

Apache CXF is an open source services framework. CXF helps you build and
develop services using frontend programming APIs, like JAX-WS and
JAX-RS. These services can speak a variety of protocols such as SOAP,
XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports
such as HTTP, JMS or JBI.

Releases:
2.6.14
2.7.11
3.0.0
XJC-Utils 3.0.0 and 3.0.1

Committer/PMC:
One committer added this period (Xilai Dai)
No PMC changes this period.  Last PMC addition Jan 2014.

Community update:
We released 3.0.0 this period which as a huge milestone for
us.   So far, the uptake has been quite positive with a lot of new users
logging issues.  We’re working on getting a 3.0.1 bug fix out shortly to fix
some of the issues that have been found.

The 2.7.11/2.6.14 releases fixed a couple of security issues that were made
public on our web site: http://cxf.apache.org/security-advisories.html

Some discussions were started about requested changes for 3.1, but that’s
being slightly delayed until we get 3.0.1/2.7.12/2.6.15 out (very shortly)
when we plan to stop supporting 2.6.x.   This was to avoid having too many
fixes branches to deal with.

Much work has been done by various community members to get CXF
working with Java 8.   The remaining issues require a release of BCEL from
Apache Commons which we’ve been inquiring about for over a month and a
half now.  Hopefully the commons folks can get that out soon.

@Jim: Follow up with CXF and Commons to see how well they are communicating

16 Apr 2014 [Daniel Kulp / Shane]

Apache CXF is an open source services framework. CXF helps you build and
develop services using front-end programming APIs, like JAX-WS and
JAX-RS. These services can speak a variety of protocols such as SOAP,
XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports
such as HTTP, JMS or JBI.

Releases:
2.6.12
2.6.13
2.7.9
2.7.10
3.0.0-milestone2


Committer/PMC:
One committer added this period (Andriy Redko) and one is being voted on now
One PMC member added this period (Andrei Shakirin)


Community update:
There has been a lot of work on trunk to get 3.0.0 out the door.  We did a
second milestone release which resulted in an influx of issues as people
started trying out the new things.

An external party sent a note to the security@apache list and our private
list to describe a potential DOS attack.  We worked with them to clarify
the issue, create a test case, ad debug/fix the issues.   As a result, two
new CVE’s were issued.   The 2.7.11/2.6.14 releases (voting now, out
shortly) will fix the issues and the CVE’s (along with 2 other CVE’s from
last reporting period) will be made public at that point.

There was a note sent privately to a couple of the PMC members about the
wording of the JAX-RS compliance with the JCP spec.   This was mostly due
to the lack of TCK access for the latest JAX-RS 2.0 TCK.   We worked with
that person to clarify the statement about lack of TCK access is the main
reason for lack of official compliance.

The lack of stability in the Jenkins build farm is an ongoing concern.
Unfortunately, many of the Jenkins errors are being ignored due to the
issues with Jenkins causing a lot of wasted time.   Also, turn around from
Jenkins takes a lot longer than expected due to the large build queue that
seems to always be there.  Not sure if additional build slaves are in the
plans or not.

AI: Sam: ask project to file JIRA for Jenkins issues

15 Jan 2014 [Daniel Kulp / Shane]

Apache CXF is an open source services framework. CXF helps you build and
develop services using front-end programming APIs, like JAX-WS and
JAX-RS. These services can speak a variety of protocols such as SOAP,
XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports
such as HTTP, JMS or JBI.

Releases:
2.6.11  (Nov 25, 2013)
2.7.8  (Nov 25, 2013)
3.0.0-milestone1 (Nov 28, 2013)
Fediz 1.1 (Nov 4, 2013)

Committer/PMC:
No committer/pmc changes this period
Last committer change:  One committer added for July 2013 report,
discussion started for a potential new committer
Last PMC change:  2 new PMC members were added for our January 2013 report.

Community update:
There has been a lot of work on trunk to get 3.0.0 out the door.   We
did manage to get the first milestone out and there has been quite a
bit of feedback and bug reports against it (which is good).   We’re doing
even more work to try and get a milestone2 out soon to address those
issues as well as cleanup a few more things we’ve found.

The DOSGi subproject has also had some work to refactor how it’s built
and tested to better leverage the work done on the main CXF branches.
This should result in being able to keep DOSGi more up to date and easier
to build and maintain.

16 Oct 2013 [Daniel Kulp / Bertrand]

Apache CXF is an open source services framework. CXF helps you build and
develop services using frontend programming APIs, like JAX-WS and
JAX-RS. These services can speak a variety of protocols such as SOAP,
XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports
such as HTTP, JMS or JBI.

Releases:
2.6.9  (July 17, 2013)
2.6.10  (Sept 14, 2013)
2.7.6  (July 14, 2013)
2.7.7  (Sept 14, 2013)


Committer/PMC:
No committer/pmc changes this period
Last committer change:  One committer added for July 2013 report
Last PMC change:  2 new PMC members were added for our January 2013 report.


Community update:
A lot of current development work is targeting a 3.0 release of CXF.  However,
there are still many bug fixes being made and ported to the various fixes
branches.     We're hoping to do a milestone release of 3.0 shortly to get more
feedback from users.

There is also work to produce a new 1.1 version of the Fediz subproject to
update it to the latest CXF releases as well as provide some additional
functionality requested by users.  That should be completely shortly.

17 Jul 2013 [Daniel Kulp / Bertrand]

Apache CXF is an open source services framework. CXF helps you build and
develop services using frontend programming APIs, like JAX-WS and
JAX-RS. These services can speak a variety of protocols such as SOAP,
XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports
such as HTTP, JMS or JBI.

Releases:
2.6.8  (May 14, 2013)
2.7.5  (May 14, 2013)

Apache CXF DOSGi 1.5.0 released. (July 2, 2013)

Committer/PMC:
One new committer this period (Amichai Rothman)
Last PMC change:  2 new PMC members were added for our January 2013 report.

Security updates:
One security vulnerabilities was made public this quarter and added to
http://cxf.apache.org/security-advisories.html
CVE-2013-2160 - Denial of Service Attacks on Apache CXF

Community update:
A lot of current development work is targeting a 3.0 release of CXF.
However, there are still many bug fixes being made and ported to the
various fixes branches.    We also received a grant from Talend to add
a XKMS service to CXF which enhances our security story around public
key infrastructures and management.

17 Apr 2013 [Daniel Kulp / Sam]

Apache CXF is an open source services framework. CXF helps you build and
develop services using frontend programming APIs, like JAX-WS and
JAX-RS. These services can speak a variety of protocols such as SOAP,
XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports
such as HTTP, JMS or JBI.

Releases:
2.5.9  (Feb 1, 2013)
2.5.10  (Apr 2, 2013)
2.6.6  (Feb 1, 2013)
2.6.7  (Apr 2, 2013)
2.7.3  (Feb 1, 2013)
2.7.4  (Apr 2, 2013)

Apache CXF Fediz - 1.0.3 released.  (Feb 22, 2013)

Apache CXF DOSGi 1.4 released. (Jan 22, 2013)


Committer/PMC:
No changes this period.
Last changes:  2 new PMC members and 1 committer were added for our
 January 2013 report.

Security updates:
Two security vulnerabilities were made public this quarter and added
to http://cxf.apache.org/security-advisories.html
* CVE-2012-5633 - was fixed and released last period, but not made public
               until January.
* CVE-2013-0239 - was fixed this quarter and released and made public.

Community update:
We started some discussions around whether to go with a 2.8 version
or jump to 3.0.   Some of the reason was due to the uncertainty around
the TCK situation and what restrictions and limitations that is going
to place on us.    Some refactoring is going on in both the Fediz and
DOSGi sub projects based on some feedback.   Basically, a lot of
questions being asked and answered, several discussions going on, lots
of new features being working on, and of course lots of bugs being
fixed.   All good.   :-)

16 Jan 2013 [Daniel Kulp / Doug]

Apache CXF is an open source services framework. CXF helps you build and
develop services using front-end programming APIs, like JAX-WS and
JAX-RS. These services can speak a variety of protocols such as SOAP,
XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports
such as HTTP, JMS or JBI.

Releases:
2.5.7
2.5.8
2.6.4
2.6.5
2.7.1
2.7.2

Apache CXF Fediz - 1.0.2 released.

Apache CXF DOSGi 1.4 is close to being ready for release.


Committer/PMC:
Jason Pell and Andrei Shakirin were added as committers.
Oliver Wulff added to the PMC.


Security updates:
Another security vulnerability was discovered in CXF (CVE-2012-5633).  A
partial fix was included in 2.5.7/2.6.4/2.7.1, but a more complete fix
was put in place for 2.5.8/2.6.5/2.7.2.  The full disclosure will be
released shortly and placed on
http://cxf.apache.org/security-advisories.html

17 Oct 2012 [Daniel Kulp / Roy]

Apache CXF is an open source services framework. CXF helps you build and
develop services using front-end programming APIs, like JAX-WS and
JAX-RS. These services can speak a variety of protocols such as SOAP,
XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports
such as HTTP, JMS or JBI.

Releases of CXF:
2.4.9
2.4.10  (*)
2.5.5
2.5.6
2.6.2
2.6.3
2.7.0

(*) We announced to the community that 2.4.10 will be the last scheduled
2.4.x release.

Apache CXF Fediz subproject - 1.0.1 released.

Committer/PMC - no new committers or PMC members this quarter.

Community updates:
The community really came together nicely to get all the releases out
the door.  Lots of traffic on the various mailing lists.

Security updates:
During the period, we dealt with 2 security vulnerability reports.   The
first turned out to just be a poorly configured example and not a real
security problem with the CXF code itself.   The second did get a CVE
assigned, CVE-2012-3451, and much work was done to address it.  This
was fixed and announced as well as added to our advisory page:

http://cxf.apache.org/security-advisories.html


Infrastructure update:
During the period, CXF has completely switched over to using svnpubsub
for both the web site (buildbot build pulling data from confluence) and
for the release distributions.   CXF has been using Nexus for a long
time.  We believe we are now in compliance with all the requirements
Infrastructure has mandated that will go into effect in January.

25 Jul 2012 [Daniel Kulp / Bertrand]

Apache CXF is an open source services framework. CXF helps you build and
develop services using front-end programming APIs, like JAX-WS and
JAX-RS. These services can speak a variety of protocols such as SOAP,
XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports
such as HTTP, JMS or JBI.

Releases:
2.3.10
2.3.11  (*)
2.4.7
2.4.8
2.5.3
2.5.4
2.6.0
2.6.1

We announced to the community that 2.3.11 will be the last scheduled
2.3.x release.

Apache CXF DOSGi 1.3.1 was released to correct some issues found with the
OSGi compatibility tests.

Apache CXF Fediz - 1.0.0 released.  New subproject to implement WS-
Federation Passive Requestor Profile and claims based access control along
with role based.


Committer/PMC - no new committers or PMC members this quarter.
Last committer added in Jan 2012
Last PMC added in Apr 2012


Community updates:
The community really came together nicely to get all the releases out the
door.   It was a very busy quarter with many releases, including releases in
both of CXF's sub-projects.    There has been quite a bit of discussions and
issues on the mailing lists about the new Fediz release from people testing
it and getting it to interoperate with other products.

From a community diversity standpoint, RedHat acquired FuseSource last
month.   This changes the makeup of the PMC slightly as RedHat (the #3
company by number of PMC members) acquired Fuse (#1 company).   RedHat now
employs exactly 50% of the PMC (10 out of 20).

(CXF)

18 Apr 2012 [J. Daniel Kulp / Bertrand]

Apache CXF is an open source services framework. CXF helps you build and
develop services using front-end programming APIs, like JAX-WS and
JAX-RS. These services can speak a variety of protocols such as SOAP,
XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports
such as HTTP, JMS or JBI.


Releases:
2.3.9 released
2.4.6 released
2.5.2 released

cxf-xjc-utils 2.6.0 released - utility plugins for JAXB XJC

DOSGi 1.3.0 was released.  1.3.1 currently being released to address some
compatibility issues with the DOSGi specification.

2.6.0 is in final preparations.   May be released by the time the board
meets.  (along with 2.3.10, 2.4.7, and 2.5.3 patch release)


Committer added:
No new committers, but discussions started on 2 individuals.   Will likely
have votes started soon if discussions go well.

PMC:
Dennis Sosnoski added to the PMC

Infrastructure update:
The CXF WebSite was completely moved over to using svnpubsub for publishing.
Working with Joe Schaefer, we came up with an external exporter that
buildbot can run that allows our content to remain in Confluence, but meets
the svnpubsub requirement for publishing.   This process has been "live" for
over 2 months now and the committers are definitely happy with it.   It's
working quite well.


Community updates:
The community has really come together to get 2.6.0 out the door.   There
has been a significant amount of testing with the 2.6.0 snapshots to make
sure everything works well.  Every example in the distributions has been
hand tested to make sure it works and that the README is accurate.   Many
"outside of Apache" test cases, examples,  and tutorials have been tested.
The result is that the 2.6.0 migration guide is very complete and we're also
quite confident in the quality of the release.

There are also discussions around "Fediz", a potential CXF subproject around
federated security  that currently is being worked on in the CXF sandbox.
Interested people have created a potential roadmap and are working on some
additional ideas for it.

DOSGi subproject did a release to update to the newer versions of CXF proper
and also add a bunch of enhancements that users asked for.   However,
shortly after the release, we discovered a couple issues with it with the
DOSGi TCK (thanks to RedHat for running the tests) which as prompted a patch
release to fix those issues.

A research paper was published by Aspect Security and Sonatype at:
http://s.apache.org/gj
(PDF file)  that, unfortunately, did not put CXF (and several other Apache
projects) into a great light, specifically highlighting 2 security
vulnerabilities CXF had last year.   On the positive side, we hope that will
encourage folks to upgrade to the newer versions of CXF.   :-)

15 committers committed changes during the period.    A total of 1345
commits were done, with 537 of them on the main trunk.  (the rest were back
porting fixes to branches as well as some work in the sandbox, DOSGi, and
cxf-xjc subprojects).   From a diversity standpoint, a very large portion of
the commits (over ~80%) were done by six employees of one company (not
unexpected), but 9 others did contribute in significant ways.

24 Jan 2012 [J. Daniel Kulp / Jim]

Apache CXF is an open source services framework. CXF helps you build and
develop services using frontend programming APIs, like JAX-WS and
JAX-RS. These services can speak a variety of protocols such as SOAP,
XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports
such as HTTP, JMS or JBI.


Releases:
2.3.8 released
2.4.4 released
2.4.5 released
2.5.0 released
2.5.1 released

Committer added:
Oliver Wulff


Community updates:
The 2.5.0 release was done in late October (and subsequent 2.5.1 patch release
in December) which was a big milestone for CXF as it provided a bunch of new
features and enhancements.  The response has been very good with several
requests on the lists and JIRA's filed and such.  Some work has been started
to update the DOSGi subproject to the latest 2.5.1 release as well as
introduce some new features and enhancements there.  A release of that should
be done soon.

Some work has been started on trunk to cleanup the code a bit (compile
warnings removed), enhance the OSGi support, etc...  Early discussions on
ideas for 2.6.0 have started with the work targeting that.

13 committers committed changes during the period. A total of 987 commits
were done, with 519 of them on trunk.  (the rest were back porting fixes to
branches as well as some work in the sandbox).  From a diversity standpoint,
6 committers from one company were responsible for roughly 80% of the commits,
4 committers from a second at 7% and the remaining 13% among the other 3
independents.  Those numbers are slightly concerning but not unexpected.
It should be noted, however, that the release manager for one of the releases
(2.4.4) was an employee from the second and was the first release in a long
time not managed by me (dkulp) which is a very welcome change.

26 Oct 2011 [J. Daniel Kulp / Sam]

Apache CXF is an open source services framework. CXF helps you build and
develop services using front-end programming APIs, like JAX-WS and
JAX-RS. These services can speak a variety of protocols such as SOAP,
XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports
such as HTTP, JMS or JBI.


Releases:
2.3.6 released
2.3.7 released
2.4.2 released
2.4.3 released

PMC changes:
Alessio Soldano added to PMC
Aki Yoshida added to PMC


Community updates:
Work on CXF 2.5.0 is winding down and we hope to have a release in a couple
weeks.   What's exciting about this release to the community is that it
expands the scope of CXF from just a services framework to actually providing
a couple of enterprise level services.   2.5.0 includes a full Security Token
Service and a WS-Notification service.  It also includes a bunch of other new
features and enhancements, but the expansion of the scope of the project is
interesting.

20 Jul 2011 [J. Daniel Kulp / Sam]

Apache CXF is an open source services framework. CXF helps you build and
develop services using frontend programming APIs, like JAX-WS and
JAX-RS. These services can speak a variety of protocols such as SOAP,
XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports
such as HTTP, JMS or JBI.


Releases:
2.3.5 released
2.4.1 released


PMC changes:
Colm O hEigeartaigh added to CXF PMC


Community update:
As the Summer season has started, things have quieted down quite a bit.
However, user and dev list traffic remains pretty steady and generally
questions and issues are answered promptly.  Work on trunk is proceeding
to add some new features such as WS-RM 1.1 support, enhanced security
for JAX-RS, etc... Lots of cools stuff being worked on. However, fixes
are being merged back to 2.4.x with plans to release 2.4.2 relatively
soon.

Some big patches were submitted for DOSGi to update it to CXF 2.4.1.
We'll likely try to get a DOSGi release out soon as well.

All items on the "Project Branding Board Report Checklist" have been done
except for the "tm" added to the logo as CXF doesn't have a logo. :-)

I (dkulp) sent out a couple of unofficial "please check your CXF and
Apache trademark usage" emails to a couple companies and I'm happy to
say they all have improved their pages without needing to resort to
official channels.  There still are changes required for some sites, but
things are heading in the right direction.

20 Apr 2011 [J. Daniel Kulp / Bertrand]

Releases:
2.3.2 released
2.3.3 released
2.3.4 released
2.4.0 released


New committers:
Dennis Sosnoski for his work on the WS-RM stuff as well as his contributions
to CXF in the form of articles and publications (IBM developer works for
example) and general contributions on the user list.

Aki Yoshida for his work on WS-RM and JMX/Management and contributions on the
users list.

New PMC members:
Andrzej Michalec was voted into the PMC, but he's still trying to get approval
from his company as to whether he can accept or not.


Community update:

User and dev list traffic remains pretty steady and generally questions and
issues are answered promptly.

The release of 2.4.0 is exciting for the community as it introduces several
new features that the community has bean asking for.   It also includes the
results of 2 of the Google Summer of Code projects from last summer.
Developing 2.4.0 also required much closer collaboration between the Apache
CXF and the Apache WebServices projects to get updates and releases of various
components in WebServices which we feel was healthy for both communities.

In Feb, there was a long discussion about "commercial" links on the web site.
( http://s.apache.org/MID ) which was a bit contentious but did result in a
policy of some sort to make sure the commercial links are limited to one area
of the web site and is "fair" for all involved.

19 Jan 2011 [J. Daniel Kulp / Shane]

  Releases:
  2.2.12 was released
  2.3.1 was released
  2.3.2 is in final preparations (may be in voting by the time this report is
submitted)

New committers:
  Colm O hEigeartaigh was added as a committer
  Lukasz Moren was added as a committer (GSoC Success!)
 Tomasz Opanovicz was added as a committer (GSoC Success!)
  7 PMC members that haven't been heard from in over 2 years were marked
emeritus.

Community update:

User and dev list traffic remains pretty steady and generally questions and
issues are answered promptly.

From an "outside the Apache Community" perspective,  3 different companies
added information (to make a total of 4) about commercial support, training,
and product options to the section of the CXF support page:
http://cxf.apache.org/support.html .  Not sure if that reflects possitively or
negatively.    :-)

No board level issues at this time.

20 Oct 2010 [J. Daniel Kulp / Jim]

Releases:
DOSGI 1.2 was released
2.2.10 and 2.2.11 patches were released.
The long awaited 2.3.0 release finally occurred.  Yea!


New committers:
No changes to the PMC or committer list occurred this quarter.   This is a
first for CXF.


Community update:
Several exciting things happened this quarter from a community perspective.
1) The 2.3.0 release is obviously a major event.   The developer community
came together nicely to get 2.3.0 to pass both the JAX-WS 2.2 and JAX-RS 1.1
TCK's, which is no small effort.

2) GSoC - all three GSoC projects were a success from a coding standpoint.
While none of the three were ready for 2.3.0, we hope to get them into 2.4.0.
Two of the students have remained active in CXF and continue to work to help
clean things up in their projects.

3) User survey - CXF conducted an anonymous user survey to help gauge who our
users are and what interests them to help plan ideas for 2.4.0 and beyond.
We had over 130 responses and the results definitely were educational to the
community.

No issues requiring board attention.

This report, among others, raises concerns that PMC's of projects that implement Java JSR's might not be able to continue, based on the resolution of the JCP and Harmony issues.

AI Doug reassure PMC'S that the Apache Software Foundation will support PMC's that acquire licenses to use TCK's under acceptable terms.

21 Jul 2010 [J. Daniel Kulp / Bertrand]

Releases:
2.0.13* was released
2.1.10* was released
2.2.8 and 2.2.9* were released

* Note:  2.0.13, 2.1.10, and 2.2.9 were primarily released as a patch for a
severe security issue reported to security@.     There were no plans to
release any further 2.0.x and 2.1.x versions, but the community thought that
the security issue warranted another release.


New committers:
We had "temporary" accounts created for two of our three Google Summer of Code
students and granted them access to our sandbox.   This has been a success
and the students have been doing quite a bit of work there.

Issues requiring board attention:
In our last report, we complained about the JCP TCK access process.   I'm
happy to report that the new process seems to be going much better.   CXF is
getting patches and TCK's much quicker.    I think other projects are also
much happier with the responses.   Consider that issue resolved.

Community update:
With access to the JAX-WS 2.2 TCK, we were able to really start tackling the
2.2 features.   We're happy to report that the code on trunk now passes the
TCK.    We still have quite a bit of cleanup work before 2.3 is ready to be
released, but a major feature is now done.

All three Google Summer of Code projects are going VERY well and are on track
to be completed successfully.   We're all excited about the new features these
projects will bring to CXF.

On the Distributed OSGi front, 1.2 should be released shortly.   The last
couple of issues targeted for the release were resolved this week so final
preps are being made to roll the release.

Daniel clarified that the third student didn't want an account.

21 Apr 2010 [J. Daniel Kulp / Justin]

Releases:
2.1.9 was released
2.2.6 and 2.2.7 were released

New PMC members:
David Bosschaert

New Committers:
David Valeri
Marc Schaaf


Community update:
User and dev list traffic remains pretty steady and generally questions and
issues are answered promptly.

There have been several students presenting proposals and ideas for the Google
Summer of Code program.  We're working with them to solidify some quality
proposals and look forward to working with some of them to produce some useful
enhancements for CXF.

One a negative note, several CXF committers were laid off from Progress this
quarter (including the PMC chair).   There is a little bit of uncertainty
about their future contributions as they investigate opportunities.  For a
positive spin: the diversity of the project has never been better.  :-)


Issues requiring board attention:
Several ([1][2][3]) requests to the JCP list for updated versions of TCKs have
been completely ignored.  This is definitely a problem for several ASF
projects including CXF, Axis, and Wink, but other projects also consistently
having this problem.    We request that the board expand the JCP committee to
more than one person and require that ALL have access to obtain requested
materials.  (dkulp personal note: I would volunteer for this.)   Apache requires
diversity in its communities to avoid single points of failure, but JCP doesn't
meet that general expectation.


[1] http://mail-archives.apache.org/mod_mbox/www-jcp-open/201002.mbox/<201002111715.14615.dkulp@apache.org>
[2] http://mail-archives.apache.org/mod_mbox/www-jcp-open/201002.mbox/<201002171207.44373.dkulp@apache.org>
[3] http://mail-archives.apache.org/mod_mbox/www-jcp-open/201003.mbox/<201003212104.18734.dkulp@apache.org>

Both Daniel and Mark have volunteered to help with the JCP/TCK process, and have credentials and ideas. This should relieve the bottleneck.

20 Jan 2010 [J. Daniel Kulp / Greg]

Releases:
2.1.8 was released
2.2.5 was released
DOSGi 1.1 was released

Final preparations for 2.1.9 and 2.2.6 releases are occurring now and will
likely be in the process of being voted on by the board meeting.

The CXF developers have decided that 2.1.9 will be the last patch release for
2.1.x (which has been out for 22 months) so we can concentrate more on getting
2.3 finished.  Users have been notified to start migrating to 2.2.x.

Committers:
Cyrille Le Clerc added as a committer


Community:
The CXF committer community did an amazing job this quarter doing JIRA triage
and bug fixing.    The "bug" count in JIRA is now under 25 open bugs (with
several blocked on bugs in external dependencies) and under 130 total open
issues.

User and dev list traffic remains pretty steady and generally questions and
issues are answered promptly.    Vacations and such over the holidays did
cause some minor delays and backlogs, but that seems to be cleared up now.

Another exciting development has been the publication of the first technical
books about CXF.    Previously, there were not any books about CXF which was a
short coming.   In December, TWO books were published about CXF.
1) Apache CXF Web Service Development: http://cxf.soaweb.co.in/
2) Developing Web Services with Apache CXF and Axis2 (3rd Edition):
http://www.agileskills2.org/DWSAA/index.html
Neither were written by CXF committers so it really was the user community
responding to a need.    (And thanks to Brett Porter for being a reviewer on
the first one.  :-)     Also, a section about CXF's JAX-RS implementation was
put into Bill Burke's "RESTful Java with JAX-RS" book.

Congrats on the books from the board!!!

21 Oct 2009 [J. Daniel Kulp / Justin]

The summer was a bit slow, but things have picked up again in
September/October.

Releases:
2.0.12 was released - last planned Apache release for 2.0.x series
2.1.6 was released
2.1.7 was released
2.2.3 was released
2.2.4 was released

DOSGi 1.1 release is being prepared now that 2.2.4 is out the door.

2.3 development has kind of stalled as we worked on 2.2.4 and fixing JIRA
issues and other user requested issues, although a couple of 2.3 things have
been back ported to 2.2.4 to get those into users hands sooner.

Community:
The traffic on the users and dev lists remains pretty steady.   Questions are
normally answered promptly.

After the Confluence upgrade, we had a lot of problems with our web site not
formatting content correctly.   We used this as an opportunity to completely
install a more "non-confluence-looking" look and feel for the site which has
made the site much more approachable.   The navigation links for the
documentation was also redone to make it easier to find information that is
needed.

There has been some effort put in to trying to clean up JIRA by reviewing old
JIRA issues.  MANY were found to be already fixed and were marked resolved.
We've requested more information about others and are waiting for responses.
In all, "open" JIRA counts has dropped from about 330 to 260, with more to go.


Committers/PMC:
Christian Schneider was added to the PMC

15 Jul 2009 [J. Daniel Kulp / Roy]

Releases:
2.0.11 was released
2.1.5 was released
2.2.1 was released
2.2.2 was released (First Apache licensed, JAX-RS compliant implementation)

Distributed OSGi/Remote Services 1.0 released

2.2.3/2.1.6/2.0.12 releases are being prepared for the end of July.
DOSGi 1.1 release is also being prepared.


Community:
With the release of 2.2.2, CXF is now JAX-RS compliant in addition to JAX-WS
compliant.   This is a major milestone for CXF and the community has responded
to it well with many new users.

The DOSGi 1.0 release has also attracted many new users as well as a bunch of
blog postings and tweets and such.

We have 3 GSoC students working on projects.

In June, JBoss was able to achieve 100% passing of the JAX-WS/JWS/SAAJ/JAXR
parts of the J2EE TCK with CXF as the JAX-WS implementation.  Much work went
into getting CXF to pass these tests, one result was Alessio Soldano being
voted in as a committer.

Due to the DOSGi and JAX-RS releases, June was a very busy month on the
mailing lists.   dev traffic was almost double the previous several months.
users traffic was up by 50%.

Committers/PMC:
Alessio Soldano was added as a committer.

Kudos for the test passing!

15 Apr 2009 [J. Daniel Kulp / Greg]

Releases:
2.0.10 was released
2.1.4 was released
2.2 was released  (Major release supporting several new WS-* standards and
JAX-RS 1.0)

2.0.11/2.1.5/2.2.1 are being prepared to be released by the end of the month.
The Distributed OSGi 1.0 implementation will be released immediately after
2.2.1.


Community:
This period saw a couple external announcements that were related to CXF and
the CXF community:
1) JOnAS announced that they have achieved J2EE certification.   They used CXF
for their JAX-WS and JWS implementation.

2) RedHat/JBoss announced that they will be supporting CXF as the core WS
stack in JBoss and putting resources into improving CXF.    We've seen some of
this already as patches are coming in from RedHat folks with a couple of them
getting very close to being nominated for committership.

We finally managed to get the JAX-RS TCK so some effort is starting to get CXF
JAX-RS certified as well.

We've started a thread on the private list about how to start a "contest" to
design a logo for CXF.   We're kind of trying to figure out the rules and such
at this point.   We're examining the rules Solr used as a base.

Spent quite a bit of time reviewing GSoC proposals and chatting with the
students via email and on IRC.  Hopefully (fingers crossed), that investment
will pay off with some of the proposals accepted.

Andrzej Michalec was added as a committer.

Justin and Bertrand note that it would be a good idea to put CXF in touch with PRC. Greg takes the action item to follow up with CXF on the logo contest.

21 Jan 2009 [J. Daniel Kulp / Justin]

Releases:
2.1.3 was released
2.0.9 was released

Community:
David Bosschaert added as committer

Notables:
1) Two CXF committers (myself and Benson Margulies) were voted in as
committers to ws due to ongoing work on XmlSchema and WSS4J.   This will
help with backlogs of issues with ws project and help get releases out
from them as needed.

2) The distributed OSGi implementation will be moved out of the sandbox
and into a subproject very soon.

3) 2.1.4 should be released shortly (waiting on some more WSS4J fixes).
Geronimo needs 2.1.4 so we may not wait for wss4j and do a 2.1.5 once
wss4j is ready.

4) Privacy policy added to website.

The privacy policy is much appreciated.

15 Oct 2008 [J. Daniel Kulp / Justin]

Releases:
2.0.8 was released
2.1.2 was released
2.0.9 and 2.1.3 are in final preparations to be released shortly

Community:
Sergey Beryozkin added to PMC
Christian Schneider  added as committer

Notables:
1) Progress toward 2.2 is going well.   A lot of work has gone into the
WS-SecurityPolicy stuff, the JMS transport, etc....

2) The distributed OSGi implementation is also progressing quite well in
the sandbox.  2 PMC members are travelling to the OSGi  bundlefest in
Montpellier, France next week to work on integrating our dOSGi
implementation with an RI of the OSGi Discovery Service and also a
dOSGi TCK.

3) 13 committers committed stuff this period, a couple of which hadn't
committed anything for a while.   Nice to see some folks active again.

4) One issue that keeps coming up on the list is people filing bugs
against older versions of CXF that are already fixed, especially versions
embedded in third party applications.  We need to find a way to encourage
upgrading. (take a page from the Spring playbook and delete the old tags?)
(that was a joke  :-)

5) Another issue is that there are a couple folks that have filed some
JIRA issues with very good patches (which is good) and COULD potentially
earn a committer spot, but they haven't participated AT ALL on the mailing
lists (which is bad) or even on the wiki or anything and thus really aren't
part of the "community".   Need to find a way to get them involved there
as well at which point committer status should be obtainable.

6) Another issue: jira issues (with patches) logged against XmlSchema
aren't being looked at.   Need to follow up with WS group to see what
can be done to alleviate that or help out there.  That said, there is
an opinion that XmlSchema isn't the "best fit" for us so alternative
ideas are being explored.

16 Jul 2008

This was a "short" month since the last meeting met a week late and several
vacations (and my paternity leave) have caused a relatively short report:

Releases:
2.0.7 and 2.1.1 were released.

Community:
No new committers, but mentoring is occurring with a couple people getting
close and patches being submitted. Discussions have started around planning
for new features for 2.2. Along with that we also had good a good
discussion (including several users) about whether a certain "feature"
(JAX-RS 0.8 upgrade) was worth putting in a 2.1.x patch instead of waiting
for 2.2. Very busy and healthy users list.

Legal:
Nothing of note

Anyway, this should be our last monthly report and should be back on the
quarterly schedule.

25 Jun 2008 [J. Daniel Kulp / Henning]

Releases:
- 2.1.1 and 2.0.7 are very close.   Will probably be in the process of
voting or even released by the time the board meets.

Community:
- No new committers or PMC's.
- Email traffic has jumped by about 35% since graduation.
- Unfortunately, many JIRA issues are being filed every day, although
many have patches and test cases.

Legal:
- Nothing of note

Issues:
- Incubator email archives still not moved to TLP in mod_mbox.  That's
the last remaining issue for TLP handover.

21 May 2008 [J. Daniel Kulp / Greg]

Releases:
2.1 released which is JAX-WS 2.1 compliant and has a BUNCH of new features
2.0.6 released as a bug fix/patch release of the 2.0.x line

Community aspects:
Voted in Sergey Beryozkin as a new committer.
Most resources have been moved from the incubator project to the full TLP
status. The main thing remaining is that mail archives aren't showing up
in mod_mbox. Still progressing through the web site and other resources
(confluence mainly) to find incubator references.

Crypto issue:
After reviewing: http://www.apache.org/licenses/exports/ it still shows
CXF under the Incubator project. We'll find an Apache member to help get
that page updated shortly.

16 Apr 2008

Establish the Apache CXF project

 WHEREAS, the Board of Directors deems it to be in the best
 interests of the Foundation and consistent with the
 Foundation's purpose to establish a Project Management
 Committee charged with the creation and maintenance of
 open-source software related to a framework for creating,
 deploying, and consuming services based on SOA design
 principles for distribution at no charge to the public.

 NOW, THEREFORE, BE IT RESOLVED, that a Project Management
 Committee (PMC), to be known as the "Apache CXF Project", be
 and hereby is established pursuant to Bylaws of the Foundation; and
 be it further

 RESOLVED, that the Apache CXF Project be and hereby is
 responsible for the creation and maintenance of software related to
 a framework for creating, deploying, and consuming services based on
 SOA design principles; and be it further

 RESOLVED, that the office of "Vice President, Apache CXF" be
 and hereby is created, the person holding such office to serve
 at the direction of the Board of Directors as the chair of the
 Apache CXF Project, and to have primary responsibility for
 management of the projects within the scope of responsibility of
 the Apache CXF Project; and be it further

 RESOLVED, that the persons listed immediately below be and
 hereby are appointed to serve as the initial members of the
 Apache CXF PMC:

  - Ulhas Bhole <ulhasbhole@apache.org>
  - Sean O'Callaghan <seanoc@apache.org>
  - Dan Diephouse <ddiephouse@apache.org>
  - Freeman Yue Fang <ffang@apache.org>
  - Jarek Gawor <gawor@apache.org>
  - Jeff Genender <jgenender@apache.org>
  - Eoghan Glynn <eglynn@apache.org>
  - Jim Jagielski <jim@apache.org>
  - Willem Ning Jiang <ningjiang@apache.org>
  - Eric Johnson <ericjohnson@apache.org>
  - Peter Jones <peterjones@apache.org>
  - Daniel Kulp <dkulp@apache.org>
  - Bozhong Lin <blin@apache.org>
  - Jervis Liu <jliu@apache.org>
  - Jim Ma <ema@apache.org>
  - James Maode Mao <mmao@apache.org>
  - Benson Margulies <bimargulies@apache.org>
  - Glen Mazza <gmazza@apache.org>
  - Guillaume Nodet <gnodet@apache.org>
  - Ajay Paibir <ajapaibir@apache.org>

 NOW, THEREFORE, BE IT FURTHER RESOLVED, that Daniel Kulp
 be appointed to the office of Vice President, Apache CXF, to serve
 in accordance with and subject to the direction of the Board of
 Directors and the Bylaws of the Foundation until death,
 resignation, retirement, removal or disqualification, or until
 a successor is appointed; and be it further

 RESOLVED, that the initial Apache CXF PMC be and hereby is
 tasked with the creation of a set of bylaws intended to
 encourage open development and increased participation in the
 Apache CXF Project; and be it further

 RESOLVED, that the Apache CXF Project be and hereby
 is tasked with the migration and rationalization of the Apache
 Incubator CXF podling; and be it further

 RESOLVED, that all responsibilities pertaining to the Apache
 Incubator CXF podling encumbered upon the Apache Incubator
 PMC are hereafter discharged.

 Special order 7B, Establish the Apache CXF project,
 was approved by Unanimous Vote of the directors present.

16 Apr 2008

Project Name - Apache CXF

Description - SOA enabling framework, web services toolkit

Date of Entry - August 2006

Items to resolve before graduation:
 * Nothing - vote to graduate to a TLP has passed in the CXF community and
the Incubator PMC.   Only thing left is the approval of the board.

Community aspects:
 * JBoss has started filing JIRA issues as they work to integrate CXF into
JBoss as a webservice stack.
 * Have worked with ServiceMix folks to provide an OSGi bundle for CXF to
use for ServiceMix 4's webservice stuff.
 * Camel has also done some work to integrate CXF better.
 * Combined the Axis 2 and CXF JAX-WS TCK efforts into a single project
with a single SVN repo and single mailing list to reduce duplicated effort
and to share knowledge.
 * Lots of testing and final bug fixing for 2.1 which should be released
soon.
 * Lots of interest in the new JAX-RS stuff in 2.1.


Code aspects:
 * Released 2.0.4-incubator fixing over 50 issues found by users.
 * Released 2.0.5-incubator fixing over 30 issues found by users.
 * Finalizing 2.1

17 Oct 2007

Project name - Apache CXF

Description - SOA enabling framework, web services toolkit

Date of entry - August 2006

Items to resolve before graduation:
 * Diversity - Active committers are mostly IONA people. We did vote in two
new independent committers and Dan Diephouse now works for an IONA
competitor, so some progress is being made.


Community aspects:
 * Voted in Benson Margulies due to excellent work in several areas of the
code, but specifically in the Aegis and XFire migration things.
 * Voted in Glen Mazza due to excellent work cleaning up various parts of
the code, reviewing everyones commits, updating docs, etc....
 * Released 2.0.1-incubator and 2.0.2-incubator.
 * Started a discussion to talk about Graduation
([http://www.nabble.com/Graduating.....-tf4231363.html#a12038088 link]) but
the discussion turned more to how to increase diversity when Jim J.
expressed concerns about that.
 * The cxf-user mail list traffic has tripled since June, and the Chinese
language list (http://groups.google.com/group/cxf-zh) is now at over 60
people.  Many new users are participating.  However, cxf-dev traffic has
remained constant except for a HUGE spike (2.4x normal) in September.

Code aspects:
 * Released 2.0.1-incubator and 2.0.2-incubator - These were bug fixes from
2.0, but some minor new features were added.
 * Started discussing a roadmap for a 2.0.3-incubator release (bug fixes)
as well as a 2.1 release. (http://incubator.apache.org/cxf/roadmap.html)

25 Apr 2007

iPMC Reviewers: rdonkin, jukka

Project name - CXF

Description - SOA enabling framework, web services toolkit

Date of entry - August, 2006

Top three items to resolve -
 1. Diversity - Active commiters are still 90% IONA people
 2. Growth of community - related to diversity.  The traffic on both the
users and dev lists is growing with new people jumping in, but still is
mostly IONA folks.
 3. Mentor status - recent discussion on general@i.a.o suggested we really
need three active mentors.   We currently only have 2 mentors total, only
one of which has been active.  (the other is getting back up to speed
though.)


Community aspects:
 * Voted in Jarek Gawor as a committer due to his excellent work on JAX-WS
compliancy fixes.
 * Have been working closely with Geronimo to integrate CXF into the next
version of Geronimo.
 * Have started working with Camel folks to define requirements and produce
API's that allow CXF to work well with Camel


Code aspects:
 * Started to finalize the next milestone release.   There are a few
remaining features we need to finish.
 * Ongoing TCK testing may require unexpected code changes.
 * Very long ongoing discussions about some of the transport API's.
Resolutions on these are slow going.

17 Jan 2007

Project name - CXF

Description - SOA enabling framework, web services toolkit

Date of entry - August, 2006

Top three items to resolve -
 1. Diversity - Active commiters are 90% IONA people
 2. Growth of community - related to diversity, we have not yet had the
opportunity to add additional commiters.   The traffic on the dev list is
"steady."   With milestone 1 out, we are beginning to attract users.
Traffic on the user list is now growing.
 3. Not enough documentation or work occuring on the wiki.


Community aspects:
  * Lots of discussions about various topics (Reliable Messaging, tooling,
etc...) occuring on the dev list.
  * Released milestone 1 in December.   A bit late, but more feature were
added and stability and number of bugs have been good.
  * Working with the Yoko folks about transitioning to CXF (from ObjectWeb
Celtix)
  * Started working with the Geronimo folks to integrate with them.
  * Created a eclipse plugin/bundle of our code for the Eclipse STP project
for them to integrate our code.

Code aspects:
  * Milestone 1 released, working on setting features for the next RC.
(hopefully around March)
  * Started discussing some architectural changes, especially in regard to
the tooling.


----

25 Oct 2006

The CeltiXfire project is moving along quickly now. In the last few
weeks accounts have been created and the initial source code has been
checked in.  The code is now under very active development. There has
been lots of discussion on the dev list between the different
developers on several topics including tooling, configuration, release
packaging, and REST support. We are currently working to define a set
of criteria for our first milestone.

In addition to coding, there has been some effort to get a website up
and going, but we're currently debating the best tools for the
job. Also, we've also discussed whether or not we want to change the
name, but their has been no clear consensus.