Dirk Fauth

@xeraph I downloaded the latest reload4j jars (Maven Central and re-bundled Eclipse Orbit) and the latest logpresso 3.0.1 for Windows. It now works as expected, the vulnerabilities are not detected...

Hi, is there any update on the notarization/signing issue? Since which sqlite-jdbc version are the binaries signed with a hardened runtime enabled? Greez, Dirk

I don't think that this is really a suitable solution. Because then you are changing the signed JAR by replacing the native part with something else. So IMHO it would...

I understand and it should be no blaming. It is a solution that can be seen often. I just wanted to comment that this could also lead to several issues...

> @laeubi well I can try to if I remember what I have done back then. But IIRC you also asked for a testcase about plugin based products. Shouldn't then...

I removed everything and tried to build the project alone locally, but it fails with this error: ``` [WARNING] The POM for org.eclipse.tycho:tycho-build:jar:3.0.0-SNAPSHOT is missing, no dependency information available [WARNING]...

@laeubi I have updated the test case. It shows several errors related to some signing topics, but at the end it fails with the reported error.

@laeubi Well initially the product was working. The target and the product contained everything that was needed and it was possible to start the product via PDE inside Eclipse. You...

IIRC the initial product configuration did not show theses warnings, e.g. org.osgi.dto is available if Equinox is included. And I think I also added the necessary xml libraries. I would...

The initial target definition contained all necessary dependencies. You can see this in the first commit. While the service api and impl bundles are not necessary for the test, it...