Just following up on this, the PR has been merged for v9, but I still need
the patch backported to v6, v7 and v8.

If there's anything I can do to help get that over the finish line, let me
know. Thanks again!

On Thu, Jun 9, 2022 at 2:06 PM Dominic Barnes <dobar...@twilio.com> wrote:

> Howdy!
>
> I'm a first-time contributor, and I just opened a PR to update a dev/test
> dependency (github.com/stretchr/testify) to address a security
> vulnerability being reported downstream:
>
> https://github.com/apache/arrow/pull/13322 (more context included here)
>
> The PR was originally opened against the release-v7.0.0 branch, but I was
> then pointed towards using master instead, with the intention of
> backporting the commit/change for v6.0.2, v7.0.1 and v8.0.1 releases.
>
> While not merged yet, it sounded like I should get the ball rolling now.
> Let me know how I can help get this across the finish line.
>
> --
> Dominic Barnes
>
> he/him/his
> Staff Software Engineer
> [image: Twilio] <https://www.twilio.com/?utm_source=email_signature>
> EMAIL dobar...@twilio.com
> TWITTER @mako281 <https://twitter.com/mako281>
> GITHUB dominicbarnes <https://github.com/dominicbarnes>
>

Reply via email to