Hans Van Akelyen
Antwerp, Belgium
Data Enthousiast, PMC Chair @ApacheHop, Co-founder @leanWithData
Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Hans Van Akelyen
CVE-2024-24683: Apache Hop Engine: ID isn't escaped when generating HTML
oss-sec mailing list archives From: Hans Van Akelyen <hansva () apache org> Date: Mon, 18 Mar 2024 20:02:00 +0000 Severity: low Affected versions: - Apache Hop Engine before 2.8.0 Description: Improper Input Validation vulnerability in Apache Hop Engine.This issue affects Apache Hop Engine: before 2.8.0. Users are recommended to upgrade to version 2.8.0, which fixes the issue.
[VOTE] Release Apache Hop (incubating) 1.0.0-rc1
The vote has now closed. I would like to thank everyone that has participated.
[VOTE] Release Apache Hop (incubating) 1.0.0-rc1
Hi All, After a thorough testing period for Hop 0.99, we are ready to release version 1.0.0 to the public. All issues raised during the previous release have been resolved. Dubious code has either been rewritten or removed from this release. This release contains no new features, only further cleanup and code hardening has been done. I would like to thank everyone that participated in filing, testing and resolving issues. Build instructions can be found in the README included.
[RESULT] [VOTE] Release Apache Hop (incubating) 1..0.0-rc1
Hello Everyone, The vote to release Apache Hop (incubating) 1.0.0 - RC1 has passed. +1 (binding): - Julian Hyde - François Papon - Kevin Ratnasekera - Xun Liu - 朱辉 +1 (non-binding) - 独孤求败 Thank you for reviewing this release candidate. Cheers, Hans
[VOTE] Release Apache Hop (incubating) 0.99-rc3
Hi All, After doing some more digging we found some other bits and pieces that still need to be sorted out first. We started a discussion on the dev list for further steps, consider this vote closed and we will not be releasing. Cheers, Hans On Mon, 21 Jun 2021 at 08:13, Bart Maertens <bart.maertens@know.bi> wrote: > Hi Justin, > > We only used a small part of the code (sql parsing) in that repository, and > that code has been removed.
[VOTE] Release Apache Hop (incubating) 0.99-rc3
Hi All, This is the Third release candidate for version 0.99 changes made between the first candidate and this one: - remove code that was copied over from external repository - add header to hpl/hwf files - add maven version to README - include hpl/hwf to RAT checks - change naming of source code artifacts Changes between second and third candidate: - fixed the signatures used to sign the artifacts Build instructions can be found in the README included.
[VOTE] Release Apache Hop (incubating) 0.99-rc1
Hi, That specific unit test can be found here [1], but we will strip out everything to move forward. Kind regards, Hans [1] https://github.com/pentaho/pdi-dataservice-plugin/blob/master/pdi-dataservice-client/src/test/java/org/pentaho/di/core/sql/SQLFieldsUnitTest.java On Sat, 12 Jun 2021 at 11:03, Justin Mclean <justin@classsoftware.com> wrote: > Hi, > > Thanks for the information.
[VOTE] Release Apache Hop (incubating) 0.99-rc1
Hi, The vote has ended, thank you all for the feedback. As you pointed out, were it only the header issue in hpl/hwf it would have been an option, the foreign code is a bigger problem. I will go back to the dev list to discuss creating rc2. Cheers, Hans On Mon, 14 Jun 2021 at 02:02, Justin Mclean <justin@classsoftware.com> wrote: > Hi, > > I suggest you discuss this with you mentors and together come up with the > best approach.
[RESULT] [VOTE] Release Apache Hop (incubating) 0.99-rc1
Hello Team, The vote to release Apache Hop (incubating) 0.99 - RC1 has failed. Although we have sufficient votes to create a release, the issues raised were too big to feel comfortable releasing the code. We would like to thank everyone participating in this vote. +1 (binding): - Julian Hyde - François Papon - Kevin Ratnasekera +1 (non-binding): - Xun Liu +0: -1 (binding): - Justin Mclean -1 (non-binding): Thank you for reviewing this release candidate. Cheers, Hans
[VOTE] Release Apache Hop (incubating) 0.99-rc1
Hi Justin, There are more files that have altered headers (though all with apache 2.0 license) and are adapted from the following repository [1], bits and pieces were used and adapted to our needs, this repository is a module that was bundled with the original source we started from it has no separate release and versions though it was not in our initial code import we assumed it was covered.
[VOTE] Release Apache Hop (incubating) 0.99-rc1
Hi Justin, It wasn't part of the software grant so we were just following the bundling apache licensed 2.0 code route as explained here [1]. No addition to the LICENSE was needed as the code already was Apache 2 licensed. As the necessary mentions already are in our notice file, no change was needed there either. Can you elaborate on what isn't done correctly as described in [1]?
[VOTE] Release Apache Hop (incubating) 0.99-rc1
Hi Justin, That file should be switched to the standard ASF header and is part of the original code and covered by the notice file. As for the no header in hpl and hwf files, these are files created using the application and are used for samples and for our integration testing framework. This framework is an extension on our unit tests mainly used to see if all functionality is working and that we have no regressions.
[VOTE] Release Apache Hop (incubating) 0.99-rc1
Hi All, This will be our preview 1.0 release, this release contains both the source code and binary to run the client. This will also be our first release without DISCLAIMER-WIP but the regular disclaimer. This release aims to get as much feedback as possible so we can remove some final bugs before releasing 1.0. Build instructions can be found in the README included.
[VOTE] Release Apache Liminal (incubating) 0.0.2rc1-INCUBATING
Aren't both (L)GPL Category X [1]? Cheers, Hans [1] https://www.apache.org/legal/resolved.html On Tue, 20 Apr 2021 at 10:48, Jean-Baptiste Onofre <jb@nanthrax.net> wrote: > Good catch. AFAIR chardet is LGPL based (not GPL), and LGPL is Cat B (not > X). > > @Liminal team, do you confirm LGPL license for chardet (on Pypi) ? > > Regards > JB > > > Le 20 avr. 2021 à 08:43, Justin Mclean <justin@classsoftware.com> a > écrit : > > > > Hi, > > > > Sorry it’s -1 (binding) form me.
[VOTE] Release Apache Hop (incubating) 0.70-rc1
Hi Justin, Thanks for the thorough check, at compile time we have quite a lot of category X licensed dependencies, most JDBC drivers are not category A/B, all these dependencies are optional and need to be included by the user if he wants to connect to this specific database.
[RESULT] [VOTE] Release Apache Hop (incubating) 0.70-rc1
Thank you to everyone who participated in the vote. The voting is now closed and it has passed. The issues raised during the voting process have been added to Jira and will be resolved by the next release [1][2] Binding votes: 3: +1 votes - François Papon - Kevin Ratnasekera - Zhenxu Ke 0: 0 votes 0: -1 votes. Non-binding 0: +1 votes 0: 0 votes 0: -1 votes.
[VOTE] Release Apache Hop (incubating) 0.70-rc1
Hi Dave, That license has to be removed, no dependencies are LGPL my excuses for the confusion on that part. We used to have some that were included in the DISCLAIMER-WIP but they have been removed between the previous release and now. Cheers, Hans On Thu, 1 Apr 2021 at 20:15, Dave Fisher <wave@apache.org> wrote: > Hi - > > You need to avoid required dependencies that are licensed in Category X > like LGPL. Please review the Legal resolved page.
[VOTE] Release Apache Hop (incubating) 0.70-rc1
Hi, We are also planning on distributing a "fat client" that contains all dependencies needed to run the application, so we listed all dependencies in https://github.com/apache/incubator-hop/blob/master/assemblies/static/src/main/resources/THIRD-PARTY.txt For easy reference we added the license files there to include in the client zip file.
[VOTE] Release Apache Hop (incubating) 0.70-rc1
Hi, Yes, a mistake on my part: the 2 binding votes are Mentor/IPMC votes, we have 3 PPMC votes in non-binding, Bart ,Matt and myself are PPMC. I put them as non-binding as they do not count for an actual Incubator release. Cheers, Hans On Tue, 30 Mar 2021 at 16:55, Kris Calvin <kirs@apache.org> wrote: > Sorry, there seem to be only two binding votes from the community vote. Are > some PPMC votes incorrectly calculated as non-binding?
[VOTE] Release Apache Hop (incubating) 0.60-rc1
Thank you all for voting, I was able to reproduce the issue, we usually use the install phase so we did not notice. We will make sure the compile phase works in the future releases. On Sun, Jan 24, 2021 at 8:55 AM Kevin Ratnasekera <djkevincr1989@gmail.com> wrote: > +1 ( binding ) > > I checked the following. > > - Incubating in name. > > - PGP Signatures. > > - SHA512 Checksums. > > - DISCLAIMER-WIP exists. > > - LICENSE and NOTICE are fine. > > - Maven Build passes on MacOS.
[RESULT] [VOTE] Release Apache Hop (incubating) 0.60-rc1
Thank you to everyone who participated in the vote. The voting is now closed and it has passed. Binding votes: 4: +1 votes - Julian Hyde - Justin Mclean - François Papon - Kevin Ratnasekera 0: 0 votes 0: -1 votes. Non-binding 0: +1 votes 0: 0 votes 0: -1 votes. Thank you, The Apache Hop (Incubating) Team
[VOTE] Release Apache Hop (incubating) 0.60-rc1
Hi Justin, Thanks for the vote! If you have some time to spare could you provide us with your maven/java version and the error you get while building? The software should build and work on all 3 major platforms, I'm also an OSX user and can build without errors. Thanks, Hans On Fri, Jan 22, 2021 at 7:18 AM Justin Mclean <justin@classsoftware.com> wrote: > Hi, > > +1 (binding) > > it contains Category B source code but is using the WIP disclaimer and > what is contains is clearly stated.
[VOTE] Release Apache Hop (incubating) 0.60-rc1
Hi IPMC, This is a call for vote to release Apache Hop (Incubating) 0.60-rc1.
[VOTE] Release Apache Hop (incubating) 0.50-rc2
Hi, Thanks for the valuable feedback, we will pick up these issues and work on a new release. Regards, Hans On Sun, Jan 3, 2021 at 2:59 AM Justin Mclean <justin@classsoftware.com> wrote: > HI, > > Sorry but it’s -1 (binding) as it contains Category B source code and > header issues and is not using the WIP disclaimer. [1] > > I suggest you use the work in progress disclaimer, and in it list the > issues that need to be fixed before graduation.
[RESULT] [VOTE] Release Apache Hop (incubating) 0.50-rc2
Hello IPMC, The vote to release Apache Hop (incubating) 0.50 - RC2 has *failed*. Working items for next candidate: - add DISCLAIMER-WIP - cleanup headers - check if NOTICE needs update - try and minimize RAT excludes - remove Category B code or mention in DISCLAIMER/LICENSE +1 (binding): Julian Hyde -1 (binding) Justin Mclean +0 Thank you for reviewing this release candidate. Regards, Hans
[VOTE] Release Apache Hop (incubating) 0.50-rc2
Hi IPMC, This is a call for vote to release Apache Hop (Incubating) 0.50-rc2. This will be our first Apache incubator release and want to thank everyone involved in the process.
[VOTE] Hop proposal
I saw that the text of the proposal was not attached to the vote. So, for the historical record, I am attaching the text here. The text is copied from version 10 of the proposal in the wiki, dated 2020-09-17. ## Abstract Hop is short for the Hop Orchestration Platform. Written completely in Java it aims to provide a wide range of data orchestration tools, including a visual development environment, servers, metadata analysis, auditing services and so on.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Hans
Contact Hans, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack