January 5, 2022

Time/Place

This meeting is held virtually via Zoom, with an open channel for chatter on Slack. Anyone is welcome to join. Here is the info:

• Time: 1:00pm Eastern Time US (UTC-5)
• Zoom link: https://zoom.us/j/97345581392
• Join us on the Slack Islandora 8 Channel https://islandora.slack.com/archives/CM5PPAV28

Attendees

• Isabella, Kirsta, Kristina, Nat, Don, Adam, Alex, Kyle, Yamil

Agenda

1. Welcome Isabella!
2. Issue Roundup - Link sorted by date
3. PR Roundup- Link sorted by date
4. Islandora Discussions - should be announcement to the community that we're using this?
5. From Don: Someone should put together an announcement summarizing where Islandora landed in regards to Log4j in terms that programmers and non-programmers alike would understand. I’m sure many people were hit with questions as they got back to their offices after the winter break. If an email went out that they can forward to those inquiring about it I think that would be really useful.

Something like:

• What was the issue?
• Where all of the instances of log4j can be found and versions?
• Steps taken to mitigate the Log4j vulnerabilities?
• How it was tested to prove that the current Islandora version isn’t susceptible to the log4j vulnerabilities?
• Are there any special steps needed by users to integrate the changes (if any)?
• Is there any documentation where people can go for additional information?

Minutes

• Welcome Isabella!
• https://github.com/Islandora/documentation/issues/2010 Kristina while reviewing the READMEs of various repo found repeating/common info in the repos. It would be easy to document that info in a single document, then link to it.
• https://github.com/Islandora/controlled_access_terms/pull/76 - How to test this is not clear.Please provide instructions for a new person coming to this issue to reproduce and test this PR.
• Tech Call Backlog topics have been moved to Islandora Discussions. If these topics get discussed in the meeting, the notes can be added to the discussion threads. Part of the motivation is to provide asynchronous way to provide input.
• Log4j Memo - The guidance on this issue is not clear. Sometimes, misleading. Updated notes can be found in this ticket: https://github.com/Islandora/documentation/issues/2007