Apache Continuum 1.4.3 Release Notes

The Apache Continuum team is pleased to announce Apache Continuum 1.4.3.

To learn more about how the Continuum dev team versions releases, see our release guidelines.

This is a maintenance release addressing the struts CSRF vulnerability CVE-2014-7809 and other minor fixes.

Bug

• [CONTINUUM-1156] - Continuum will not successfully delete build directories containing symbolic links
• [CONTINUUM-2119] - Cleaning up large working directories fails with OutOfMemoryError
• [CONTINUUM-2585] - Adding a maven pom via url with username drops query parameters
• [CONTINUUM-2723] - Attempting edit a project results in an internal error

Task

• [CONTINUUM-2727] - Upgrade to struts 2.3.20

Changes in Apache Continuum 1.4.2

Bug

• [CONTINUUM-1777] - Able to create a build template without build definition
• [CONTINUUM-2222] - pom.xml is deleted if validation fails
• [CONTINUUM-2486] - Error in backup output of builddefinition templates
• [CONTINUUM-2495] - appearance.jsp should use POST instead of GET
• [CONTINUUM-2669] - org.apache.continuum.distributed.transport.slave.SlaveBuildAgentTransportClient
• [CONTINUUM-2699] - Document installing Continuum as a Mac OS X service with launchd
• [CONTINUUM-2702] - Cannot add an argument to remove a profile ( -P!profile)
• [CONTINUUM-2703] - reduce logging from RbacAuthorizer
• [CONTINUUM-2704] - Shell builds are not executing concurrently
• [CONTINUUM-2705] - Can't build projects with null builddef fields
• [CONTINUUM-2709] - Goals/phases aren't required when editing maven build types
• [CONTINUUM-2712] - Release issue :: Unable to release components
• [CONTINUUM-2724] - Can't add a project over XMLRPC without a project group

Task

• [CONTINUUM-2149] - Upgrade to Maven project libraries

Changes in Apache Continuum 1.4.1

This release includes the following new features:

Improved user recognition - information on who executed releases and forced builds, and better handling of sending notifications to developers who made a change

Bug

• [CONTINUUM-1569] - Release of a flat structure multi-module project doesn't work
• [CONTINUUM-1689] - Bad string replacement of entities in build result
• [CONTINUUM-2003] - Edit roles deletes all existing roles when sharing a user database
• [CONTINUUM-2346] - NPE in log on forced build and project never builds
• [CONTINUUM-2384] - Cannot download from distributed build working directory
• [CONTINUUM-2420] - missing default values of scm tag, preparation goals and release perform goals when distributed build is enabled
• [CONTINUUM-2436] - Scheduled Build occurs even when Always Build = false and no changes have occurred
• [CONTINUUM-2443] - adding duplicate build agent with trailing whitespace should not be allowed
• [CONTINUUM-2454] - Failed to build a shell project when 'distributed builds' is enabled
• [CONTINUUM-2500] - Problems with quotation marks in projectgroup names
• [CONTINUUM-2503] - 'Triggered by' should not be blank when it's a scheduled build
• [CONTINUUM-2507] - Error releasing project with POM encoded in UTF-8 with BOM
• [CONTINUUM-2508] - Invalid web.xml in continuum-distrubuted-tests module
• [CONTINUUM-2510] - Experiencing slow performance when there are many roles
• [CONTINUUM-2519] - Database upgrade script fails
• [CONTINUUM-2520] - NullPointerException in org.apache.maven.continuum.notification.mail.MailContinuumNotifier
• [CONTINUUM-2531] - Cannot change DEFAULT local repository via settings.xml in Windows 7
• [CONTINUUM-2532] - Editing Build Definition doesn't reflect changes when saved
• [CONTINUUM-2533] - UpdateWorkingCopyPhaseTest fails in continuum-release, file url is incorrect
• [CONTINUUM-2538] - [Regression] Unable to release using provide parameters
• [CONTINUUM-2543] - LDAP integration and empty passwords
• [CONTINUUM-2547] - French I18n : typos
• [CONTINUUM-2554] - Forced directory purges should show up in the audit log
• [CONTINUUM-2563] - '--non-recursive' argument is not stripped in project's build definition if project was added to an existing project group with 'For multi-module project, load only root as recursive build' selected
• [CONTINUUM-2568] - Exception when calling 'continuumXmlRpcClient.getReleaseResultsForProjectGroup(projectGroupId)'
• [CONTINUUM-2569] - No continuum release result was created when releasing from continuumxmlrpc
• [CONTINUUM-2571] - Error in changelog when preparing build with distributed build enabled
• [CONTINUUM-2581] - Unable to release with distributed builds enabled
• [CONTINUUM-2584] - Unable to save the Description of Build Definition when creating build defintion using xmlrpc
• [CONTINUUM-2587] - Able to set distributed builds in the configuration file of continuum.
• [CONTINUUM-2591] - Git based maven2 builds can't properly release or checkout on branch
• [CONTINUUM-2595] - Unable to retrieve projects in continuum through xmlrpc when distributed builds is enabled.
• [CONTINUUM-2603] - CSRF vulnerability - Continuum doesn't check which form sends credentials
• [CONTINUUM-2604] - extremecomponents table should use autoIncludeParameters="false"
• [CONTINUUM-2607] - Continuum Build Agent fails to update the project from checkout when a "Null values aren't supported" is encountered during a build.
• [CONTINUUM-2608] - username and password are missing when doing a checkout from svn even if useCredentialsCache is set to false.
• [CONTINUUM-2610] - Profiles are not activated during release
• [CONTINUUM-2616] - Project state is still building after cancelling a build with distributed builds enabled
• [CONTINUUM-2619] - Continuum Release scm comment prefix needs to insert whitespace on all commit messages
• [CONTINUUM-2626] - Email Notification not sent when Distributed Build enabled
• [CONTINUUM-2627] - Unable to add a project that are in private Github repositories
• [CONTINUUM-2628] - Continuum uses SCM credentials provided on project add when checking out and updating working copy during project build and during release:prepare when using GIT and SSH in SCM urls
• [CONTINUUM-2631] - Continuum doesn't work with MySQL
• [CONTINUUM-2641] - Exceptions thrown by ContinuumXmlRpcClient when used by multiple threads
• [CONTINUUM-2643] - Intermittent problem encountered when building projects with distributed builds
• [CONTINUUM-2646] - Project group was not removed from queue via XMLRPC cancelBuild
• [CONTINUUM-2648] - Project build is sometimes distributed to the wrong agent
• [CONTINUUM-2650] - Unable to get the correct build agent url via XMLRPC
• [CONTINUUM-2656] - Distributed build may never return
• [CONTINUUM-2657] - Build agent installations should overwrite the installations from the Master when doing a release
• [CONTINUUM-2660] - A message was logged saying I 'Added a build definition' even when I tried to edit one.
• [CONTINUUM-2663] - Release trying to use the wrong agent
• [CONTINUUM-2666] - NPE when removing build agent group via XMLRPC
• [CONTINUUM-2670] - Modifying a project level build definition from the Build Definitions Summary tab results in errors
• [CONTINUUM-2672] - when a user has the "manage scheduling" role, they are listed as a project administrator/developer on the members tab, even if they are not a developer/administrator of that project.
• [CONTINUUM-2673] - Failure to do a release rollback should display the error message in the page
• [CONTINUUM-2675] - ContinuumObjectNotFoundException when deleting build results
• [CONTINUUM-2683] - Project in group already in queued can cause other group projects not to be queued
• [CONTINUUM-2684] - defaultStack requires a stronger blacklist of parameter names in the param interceptor
• [CONTINUUM-2687] - preparing subsequent releases appends timestamp to ID, but never lists them for performing
• [CONTINUUM-2688] - Build definition goals won't accept Maven goals with a group ID
• [CONTINUUM-2689] - release error page incorrectly displayed for unexpected exceptions
• [CONTINUUM-2691] - validation of build file for Ant build definitions is too strict
• [CONTINUUM-2692] - if validation fails on an Ant build definition, you are sent to the Maven page
• [CONTINUUM-2693] - File handle leak with TCP connections in CLOSE_WAIT when using distributed builds
• [CONTINUUM-2694] - no need to persist configuration changes to database
• [CONTINUUM-2696] - Attempting to enable a build agent that is down will remove it from the list

Improvement

• [CONTINUUM-1586] - Oracle DB use in Continuum
• [CONTINUUM-2025] - Improve description of Build Environments and Installations
• [CONTINUUM-2044] - Build agent should only accept requests from its master
• [CONTINUUM-2131] - An unconfigured build agent should not be enabled
• [CONTINUUM-2193] - Add option to check out a multi-module project into a single working directory
• [CONTINUUM-2202] - Do not show subversion password in plain text
• [CONTINUUM-2286] - Run prepare builds/scm update in parallel
• [CONTINUUM-2483] - Build agents should be enabled by default
• [CONTINUUM-2499] - Updated and corrected jboss-web.xml files
• [CONTINUUM-2549] - Overload ContinuumService.addMavenTwoProject() just like that of Continuum interface
• [CONTINUUM-2551] - Ability to build project as a forced build in XMLRPC
• [CONTINUUM-2553] - Log more information when purging directories
• [CONTINUUM-2561] - Ability to check if project is in prepare build queue from Continuum's XMLRPC
• [CONTINUUM-2562] - Add support for adding M2 projects non-recursively (instead of one Continuum project per module) from web services
• [CONTINUUM-2565] - Ability to release a project in XMLRPC
• [CONTINUUM-2572] - add new methods in continuum build agent for easier checking if projectgroup is in prepare build queue or currently preparing build
• [CONTINUUM-2582] - Ability to check if project is in queue or currently preparing build/building with distributed builds enabled
• [CONTINUUM-2586] - "Maven 2.0.x" label is misleading with the advent of Maven 3
• [CONTINUUM-2592] - Ability for build agent to use installations in its config file
• [CONTINUUM-2599] - Ability for Continuum XMLRPC to be able to retrieve Individual Build Agent's Installations
• [CONTINUUM-2602] - Ability to retrieve projects release and development versions through XMLRPC
• [CONTINUUM-2617] - Provide method to cancel a project build using the xmlrpc client
• [CONTINUUM-2625] - Expose ProjectScmRoot methods in the xml-rpc interface
• [CONTINUUM-2633] - Enable DB caching
• [CONTINUUM-2637] - Ability to ping build agent through continuum master xmlrpc
• [CONTINUUM-2638] - Add more logging in Continuum distributed builds
• [CONTINUUM-2639] - Ability to do user management through xmlrpc
• [CONTINUUM-2640] - Add <sharedSecretPassword> in build agent configuration
• [CONTINUUM-2644] - Ability to retrieve url of build agent executing a project via XMLRPC
• [CONTINUUM-2651] - Include the build agent url in the build result that is returned using XMLRPC
• [CONTINUUM-2654] - Ability to create a build environment, with build agent groups and installations via xmlrpc
• [CONTINUUM-2658] - Support purging of working and release directories of build agents on a schedule
• [CONTINUUM-2659] - Improve error message returned when failed to add a project via xmlrpc
• [CONTINUUM-2662] - Display the build agent url in the build result
• [CONTINUUM-2667] - Allow underscore ( _ ) in project group id
• [CONTINUUM-2668] - Ability to retrieve build agents with their installations in a single call
• [CONTINUUM-2674] - Add a role for managing distributed builds
• [CONTINUUM-2679] - Apache project branding requirements: DOAP file [PATCH]
• [CONTINUUM-2685] - Use the default build agent for a project if no build environment is given on release
• [CONTINUUM-2686] - list of previously prepared releases should not depend on build agent state
• [CONTINUUM-2690] - Update to Jetty 8

New Feature

• [CONTINUUM-2188] - Update Policy for BuilDefinition
• [CONTINUUM-2521] - builds report page
• [CONTINUUM-2545] - Add WebDAV interface to continuum build agent for displaying the working copies
• [CONTINUUM-2593] - Webservice for adding/registering, updating, removing, retrieving build agents in continuum
• [CONTINUUM-2597] - Webservice for getting platform of build agent
• [CONTINUUM-2600] - Include in webservice to also return platform of buildagent when retrieving a buildagent or list of buildagents
• [CONTINUUM-2611] - Ability to specify the value of useCredentialCached when adding a maven two project using the ContinuumXmlRpcClient
• [CONTINUUM-2632] - Secure working copies of Continuum build agents

Task

• [CONTINUUM-2613] - Add xmlrpc service method overload for buildProject that accepts projectId, buildDefinitionId, and buildTrigger as the parameters
• [CONTINUUM-2620] - Fix XSS vulnerability in Continuum
• [CONTINUUM-2642] - Features page needs some love

Changes in Apache Continuum 1.4.0 (Beta)

Bug

• [CONTINUUM-1578] - No output after a successful perform release
• [CONTINUUM-2114] - cannot login with perforce scm until new version of scm is included
• [CONTINUUM-2170] - No such object error when forcing a build from the group-level Build Definitions tab
• [CONTINUUM-2267] - Error with backslash in Windows path for inatallation tests
• [CONTINUUM-2270] - Selenium tests fail when run with JDK 1.6
• [CONTINUUM-2285] - Queues page turns to blank if build queues are not empty
• [CONTINUUM-2349] - Project should only build in agents that are in the Build agent group assigned to it
• [CONTINUUM-2371] - Unable to view queues after loss of build agent
• [CONTINUUM-2381] - Project is not building even when there is an enabled build agent configured
• [CONTINUUM-2386] - Build environment selection is ignored when releasing with distributed build enabled
• [CONTINUUM-2391] - Master should not pass full path to local repository to the agent
• [CONTINUUM-2395] - Build Environment accepts duplicate name during edit
• [CONTINUUM-2397] - Unable to edit the added local repository
• [CONTINUUM-2440] - Unable to download html file from working copy
• [CONTINUUM-2450] - Intermittent error when releasing in a distributed build
• [CONTINUUM-2451] - Unable to release a project using the "provide parameters" option with distributed builds
• [CONTINUUM-2466] - authorization failed when building ant / shell projects
• [CONTINUUM-2474] - Fix selenium failing test in windows
• [CONTINUUM-2476] - Projects are not built in the correct build agent when the project is already in the build queue and then triggered to be built again
• [CONTINUUM-2479] - Link to cron-help is wrong
• [CONTINUUM-2487] - Selenium tests fail if run at certain times crossing the 'on the hour' default schedule trigger
• [CONTINUUM-2490] - Getting permission denied when running selenium tests in IE
• [CONTINUUM-2493] - "Users Wiki" link on home page points at old wiki
• [CONTINUUM-2494] - Unable to build a project even though the build agent is there.
• [CONTINUUM-2504] - Queues page shows distributedBuild.table.agentUrl for the Agent URL field instead of the actual value

Improvement

• [CONTINUUM-493] - Allow to add all developpers address in a notifier without duplicate developpers addresses
• [CONTINUUM-565] - Forced builds should say who (which continuum user) forced the build
• [CONTINUUM-2160] - Upgrade to last scm version (1.2) and last release-manager version
• [CONTINUUM-2373] - Distributed Master needs more detailed logging
• [CONTINUUM-2458] - Continuum Release should do a checkout if there is no working copy

New Feature

• [CONTINUUM-2265] - Need information on who executed a release

Task

• [CONTINUUM-2252] - Add documentation for Selenium tests

Test

• [CONTINUUM-2073] - Revive the automated Selenium integration tests
• [CONTINUUM-2268] - Continuum Webapp Tests Capture Screenshot for AbstractSeleniumTest.java
• [CONTINUUM-2271] - Continuum Build Agent Tests and Improvement on Build Queue Test
• [CONTINUUM-2378] - Selenium Test for deleting projects and project groups
• [CONTINUUM-2467] - Selenium test: check for project group SCM update when building projects
• [CONTINUUM-2482] - Replace the use of Thread.sleep to Selenium waitForCondition