Hi Beam developers, I'm working on upgrading the vendored gRPC 1.36.0 https://issues.apache.org/jira/browse/BEAM-11227 (PR: https://github.com/apache/beam/pull/14028) Let me know if you have any questions or concerns.
Background: Exchanged messages with Ismaël in BEAM-11227, it seems that it the ticket created by some automation is false positive, but it's nice to use an artifact without being marked with CVE. Kenn offered to work as the release manager (as in https://s.apache.org/beam-release-vendored-artifacts) of the vendored artifact. -- Regards, Tomo
