Jason918 commented on issue #18348:
URL: https://github.com/apache/pulsar/issues/18348#issuecomment-1304431665

   > -> but that's the state of our latest, only 8 days old release.
   > not sooo bad, but not so good either.
   
   The final release candidate of 2.10.2 is 23 days ago. And most of fixes 
comes in the early September.
   
   I think the problem is that the current release process have too many work 
and not automated. It took too long for a version to be released. And I don't 
see any check process of CVEs before we cut the release. I am pretty sure 
"OWASP Dependency Check" passed before the first release candidate is cut.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to