Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.

Bug 477148

Summary: Contribute JSch 0.1.53 rather than 0.1.51 to Mars.1
Product: [Technology] EGit Reporter: Andreas Sewe <sewe>
Component: RelengAssignee: Project Inbox <egit.releng-inbox>
Status: RESOLVED FIXED QA Contact:
Severity: enhancement    
Priority: P3 CC: alef75, david_williams, matthias.sohn, stephan.herrmann
Version: 4.0.2   
Target Milestone: 4.0.3   
Hardware: All   
OS: All   
See Also: https://git.eclipse.org/r/#/c/56567/
https://git.eclipse.org/r/#/c/56571/
https://git.eclipse.org/r/#/c/56578/
https://git.eclipse.org/r/#/c/56580/
https://git.eclipse.org/r/#/c/56581/
https://git.eclipse.org/c/jgit/jgit.git/commit/?h=stable-4.0&id=78a2bafdc90b7c613643f78dd1ff0926334e5407
https://git.eclipse.org/c/egit/egit.git/commit/?h=stable-4.0&id=4cc706a2fc22327594d855e7eae674f23e8cface
https://git.eclipse.org/c/egit/egit-github.git/commit/?h=stable-4.0&id=8e04aa050fe297e20d771582c105e5c728c17636
https://git.eclipse.org/c/simrel/org.eclipse.simrel.build.git/commit/?h=Mars_maintenance.1&id=d82ee6a907a97764da492cc950d810d2061efcff
https://git.eclipse.org/c/simrel/org.eclipse.simrel.build.git/commit/?h=Mars_maintenance&id=239f78d3f25f905a02cdbff8eddbd5c8b7c1944d
Whiteboard:

Description Andreas Sewe CLA 2015-09-11 05:02:11 EDT
While testing the Java package for Mars.1 RC3, I noticed that it includes the com.jcraft.jsch bundle out-of-the-box in two versions, 0.1.51 and 0.1.53. Not entirely sure who else contributes 0.1.51, but at least EGit/JGit does ATM [1].

If I understand David's comment [2] in IPZilla correctly, we should be using 0.1.53 for Mars.1, right? Granted, dropping the older version saves only 273 KB, but maybe upgrading to 0.1.53 is still desirable. (It may also reduce the risk of classloading issues like Bug 449233.)

Best wishes,

Andreas

[1] <http://download.eclipse.org/egit/updates-4.0.1/plugins/?d>
[2] <https://dev.eclipse.org/ipzilla/show_bug.cgi?id=10011#c3>
Comment 1 Andreas Sewe CLA 2015-09-11 05:02:57 EDT
(In reply to Andreas Sewe from comment #0)
> If I understand David's comment [2] in IPZilla correctly, we should be using
> 0.1.53 for Mars.1, right?

Cc'ing David to hear his take on this.
Comment 2 David Williams CLA 2015-09-11 06:43:11 EDT
(In reply to Andreas Sewe from comment #1)
> (In reply to Andreas Sewe from comment #0)
> > If I understand David's comment [2] in IPZilla correctly, we should be using
> > 0.1.53 for Mars.1, right?
> 
> Cc'ing David to hear his take on this.

Yes, definitely should use 1.53 for Mars.1 (we in the Platform do). 

It is part of the latest "R-build" from Orbit: 

http://download.eclipse.org/tools/orbit/downloads/drops/R20150821153341/repository
Comment 3 Andreas Sewe CLA 2015-09-15 18:12:29 EDT
FYI, the current EGit contribution (4.0.2) [1] for RC4 apparently still contributes JSch 0.1.51 [2]

@EGit team: Is this intentional?

[1] <https://git.eclipse.org/c/simrel/org.eclipse.simrel.build.git/tree/egit.b3aggrcon?h=Mars_maintenance&id=b309f64b0f90cef6495f8769f3681907b305dcac>
[2] <http://download.eclipse.org/egit/updates-4.0.2/plugins/>
Comment 4 David Williams CLA 2015-09-16 12:52:03 EDT
(In reply to Andreas Sewe from comment #3)
> FYI, the current EGit contribution (4.0.2) [1] for RC4 apparently still
> contributes JSch 0.1.51 [2]
> 
> @EGit team: Is this intentional?
> 
> [1]
> <https://git.eclipse.org/c/simrel/org.eclipse.simrel.build.git/tree/egit.
> b3aggrcon?h=Mars_maintenance&id=b309f64b0f90cef6495f8769f3681907b305dcac>
> [2] <http://download.eclipse.org/egit/updates-4.0.2/plugins/>

And ... you know today's the "last day" for contributions, right? :/
Comment 5 Andreas Sewe CLA 2015-09-16 13:04:40 EDT
(In reply to David Williams from comment #4)
> (In reply to Andreas Sewe from comment #3)
> > FYI, the current EGit contribution (4.0.2) [1] for RC4 apparently still
> > contributes JSch 0.1.51 [2]
> > 
> > @EGit team: Is this intentional?
> > 
> > [1]
> > <https://git.eclipse.org/c/simrel/org.eclipse.simrel.build.git/tree/egit.
> > b3aggrcon?h=Mars_maintenance&id=b309f64b0f90cef6495f8769f3681907b305dcac>
> > [2] <http://download.eclipse.org/egit/updates-4.0.2/plugins/>
> 
> And ... you know today's the "last day" for contributions, right? :/

Yes, I do. That's why I pinged the EGit team on this bug again; I am not a EGit contributor myself, just the guy who noticed the two versions in the repo and filed a bug report about it.
Comment 6 David Williams CLA 2015-09-17 16:54:45 EDT
(In reply to Andreas Sewe from comment #5)

> Yes, I do. That's why I pinged the EGit team on this bug again; I am not a
> EGit contributor myself, just the guy who noticed the two versions in the
> repo and filed a bug report about it.

I looked at one of the RC4 EPP Packages (JEE) and, sure enough, both are there, as part of that package. I suspect due to the way features are specified. 

Hard to say what would happen at runtime ... probably the highest one would be chosen, depending on how everyone specifies their version range constraints, but I know we in the Platform specify a "wide" range as "ok" (namely "[0.1.50,1.0.0)"). I think RSE (with it's SSH Terminal support) had a stronger demand for 0.1.53 and its improved encryption methods ... and not sure how they specify theirs.

Just presenting this as "data", not saying there's a problem (other than the tiny increase in size, for having two of them in the package).
Comment 7 David Williams CLA 2015-09-21 20:12:40 EDT
> Just presenting this as "data", not saying there's a problem (other than the
> tiny increase in size, for having two of them in the package).

Well ... might be a problem with some "update paths"? See bug 420903 comment 56.
Comment 8 Matthias Sohn CLA 2015-09-22 04:39:05 EDT
(In reply to Andreas Sewe from comment #3)
> FYI, the current EGit contribution (4.0.2) [1] for RC4 apparently still
> contributes JSch 0.1.51 [2]
> 
> @EGit team: Is this intentional?
> 
> [1]
> <https://git.eclipse.org/c/simrel/org.eclipse.simrel.build.git/tree/egit.
> b3aggrcon?h=Mars_maintenance&id=b309f64b0f90cef6495f8769f3681907b305dcac>
> [2] <http://download.eclipse.org/egit/updates-4.0.2/plugins/>

this is not intentional, we changed the JGit / EGit Mars target platform to use 0.1.53
https://git.eclipse.org/r/54117
https://git.eclipse.org/r/54119
and set the corresponding maven profile as default but unfortunately I missed that we have set maven profiles explicitly in our Hudson build jobs and missed to also explicitly select the maven profile choosing the mars target platform. Hence my local test build for 4.0.2 contained 0.1.53 but the result of the 4.0.2 release build which we run on Hudson contains 0.1.51.

I fixed the build job configurations but it's too late to fix this for Mars.1 :-(

We are releasing 4.1 this week and I will double check that it really contains jsch 0.1.53 before publishing the release.
Comment 9 David Williams CLA 2015-09-23 09:46:55 EDT
Just out of curiosity, if we do a respin of Mars.1, (see bug 478151) would you have ability and interest in providing a fix for Mars.1, so that only 0.1.53 was pre-req'd? (And, where that would be the only change). 

I'm not saying you should, necessarily, but IMHO, this problem *might* be worse than the one we are respining for, since there is no easy work around (other than "-clean" ... which in theory can have other side effects. 

Plus, I am not positive that having just 0.1.53 in the 'update' would 100% fix the issue reported in bug 420903 comment 56. Just thought it worth thinking about, and hearing your opinion. 

Thanks,
Comment 10 Matthias Sohn CLA 2015-09-23 10:53:19 EDT
I could tag 4.0.3 with jsch 0.1.53 and contribute it to the Mars.1 respin. It's a matter of a few hours.
Comment 11 David Williams CLA 2015-09-23 12:29:56 EDT
(In reply to Matthias Sohn from comment #10)
> I could tag 4.0.3 with jsch 0.1.53 and contribute it to the Mars.1 respin.
> It's a matter of a few hours.

Ok, please do. This is just a change to included version of com.jcraft.jsch in org.eclipse.jgit, right? 

Assuming so, please do prepare it, and I'll include it, unless someone on Planning Council objects. 

Thanks.
Comment 12 Matthias Sohn CLA 2015-09-23 12:33:52 EDT
(In reply to David Williams from comment #11)
> (In reply to Matthias Sohn from comment #10)
> > I could tag 4.0.3 with jsch 0.1.53 and contribute it to the Mars.1 respin.
> > It's a matter of a few hours.
> 
> Ok, please do. This is just a change to included version of com.jcraft.jsch
> in org.eclipse.jgit, right? 

yes, compared to 4.0.2 it will include JSch 0.1.53 instead of 0.1.51, no other changes except flipping version numbers

> Assuming so, please do prepare it, and I'll include it, unless someone on
> Planning Council objects. 

ok, I'll prepare it later today
Comment 13 David Williams CLA 2015-09-23 17:15:11 EDT
When you are ready, please contribute to the Mars_maintenance.1 branch, of the simrel.build repo. (And, just as well do it directly ... no plans to change Gerrit job). 

And, just as well update the Mars_maintenance release too, so "in sync".
Comment 14 Matthias Sohn CLA 2015-09-23 19:07:38 EDT
submitted changes for 4.0.3 and contributed to Mars.1 respin
Comment 15 Alessandro Fardin CLA 2015-09-28 10:04:38 EDT
I don't know if you take into consideration the bug 477466: [regression] Remote system explorer fails to connect SSH due to JSch-0.1.53 in stops working with Eclipse Mars.1.

I've reported the above bug last week, just to let you know about.