Thanks everyone for responses I've started preparation steps to make it happened by following steps [1]
One of the preliminary steps is publishing GPG key dist.apache.org I don't have write access there and as it is also mentioned at wiki page >Note: Only PMC members have write access to the release repository. If you end up getting 403 errors ask on the mailing list for assistance. Could someone please help me here or tell me which mailing list I should ask for assistance? [1] https://cwiki.apache.org/confluence/display/FLINK/Creating+a+flink-shaded+release#Creatingaflinkshadedrelease-Preparefortherelease On Thu, Nov 23, 2023 at 11:25 AM Matthias Pohl <[email protected]> wrote: > +1 > > Thanks for driving this, Sergey. We could also think of removing the > ZooKeeper versions 3.5 and 3.6, I guess. 3.6 reached EOL in 2022. Flink > 1.17 already switched to 3.7 as the default version. > > On Thu, Nov 23, 2023 at 9:31 AM Jing Ge <[email protected]> > wrote: > > > +1 > > > > Does it make sense to use 32.1.3-jre Guava? > > > > Best regards, > > Jing > > > > On Thu, Nov 23, 2023 at 8:42 AM Yun Tang <[email protected]> wrote: > > > > > +1, thanks Sergey for driving this work. > > > > > > Best > > > Yun Tang > > > ________________________________ > > > From: Leonard Xu <[email protected]> > > > Sent: Thursday, November 23, 2023 9:38 > > > To: dev <[email protected]> > > > Subject: Re: [DISCUSS] Towards flink-shaded release 18.0 > > > > > > +1, thanks Sergey for driving this. > > > > > > > 2023年11月23日 上午5:46，Martijn Visser <[email protected]> 写道： > > > > > > > > +1. More than happy to help :) > > > > > > > > On Wed, Nov 22, 2023 at 9:16 PM Sergey Nuyanzin <[email protected] > > > > > wrote: > > > >> > > > >> Hi everyone, > > > >> > > > >> I would like to start discussion about creating a new 18 release for > > > >> flink-shaded[1]. > > > >> > > > >> Among others it brings fix for ZooKeeper CVE [2], > > > >> a couple of Guava CVEs [3], [4] > > > >> and support of jdk 21 from netty mentioned in one of > > > >> the java 21[5] support subtasks [6] > > > >> > > > >> Also making a release now will allow to have enough time > > > >> for testing before Flink 1.19 release. > > > >> > > > >> I would volunteer to make the release happen > > > >> however probably I guess I will need some PMC help > > > >> > > > >> > > > >> [1] https://github.com/apache/flink-shaded > > > >> [2] https://nvd.nist.gov/vuln/detail/CVE-2023-44981 > > > >> [3] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2976 > > > >> [4] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8908 > > > >> [5] https://issues.apache.org/jira/browse/FLINK-33163 > > > >> [6] https://issues.apache.org/jira/browse/FLINK-33331 > > > >> > > > >> > > > >> > > > >> > > > >> > > > >> > > > >> -- > > > >> Best regards, > > > >> Sergey > > > > > > > > > -- Best regards, Sergey
