Hi, I don't think there will be issues with a PR bumping the version to 2.10.2; particularly with a known CVE reported against the current version.
Regarding other tickets you could look at, we have several open under the "beginner" label. https://issues.apache.org/jira/browse/DAFFODIL-1300?jql=project%20%3D%20DAFFODIL%20AND%20resolution%20%3D%20Unresolved%20AND%20labels%20%3D%20beginner%20ORDER%20BY%20priority%20DESC%2C%20updated%20DESC Regards, Brandon ________________________________ From: G?zapeti Cseh <gezap...@apache.org> Sent: Saturday, February 29, 2020 4:46 PM To: dev@daffodil.apache.org <dev@daffodil.apache.org> Subject: Hey! Hi! I'd like to start contributing to your project. DAFFODIL-2288 <https://issues.apache.org/jira/browse/DAFFODIL-2288> seemed like a good place to start, but I've seen that it was committed. <https://github.com/apache/incubator-daffodil/commit/f53b9a83f0c89807f25f986966dbeb4b0f9567b7>I've started to bump to 2.10.2 due to some CVEs reported against 2.9.8 (CVE-2019-17267). Any chance I can get that version bump in? :) Any other suggestions for starter jiras? I couldn't find anything with the "newbie" or "good first issue" label. Cheers, gp
