I ran OWASP dependency-check and found no known CVEs. Nit: The NOTICE.txt states "Copyright 2018". Should it update to "Copyright 2018-2020"?
On Tue, Apr 28, 2020 at 8:03 AM 张铎(Duo Zhang) <palomino...@gmail.com> wrote: > Just change the releasenote.md and make a RC1? We can not republish 3.2.0 > but since the release note for 3.3.0 contains the release note of 3.2.0, we > can fix it. > > Peter Somogyi <psomo...@apache.org> 于2020年4月28日周二 下午6:04写道： > > > What is your suggestion to fix the release notes for 3.2.0? That release > > was already shipped and unfortunately this issue was not noticed on its > > vote process. > > > > On Tue, Apr 28, 2020 at 9:58 AM 张铎(Duo Zhang) <palomino...@gmail.com> > > wrote: > > > > > The release note of the hbase-thirdparty-3.2.0 section has a mistake > > > > > > * [HBASE-23718](https://issues.apache.org/jira/browse/HBASE-23718) | > > > *Major* | **[hbase-thirdparty] Update libs; pb from 3.9 to 3.11, > > > etc.** > > > > > > gson: 2.8.5 =\> 2.8.6 > > > guava: 28.1-jre =\> 28.2-jre > > > error\_prone: 2.3.3 =\> 2.3.4 > > > netty: 4.1.42.Final =\> 4.1.44.Final > > > protobuf: 3.9.2 =\> 3.11.1 > > > maven-assembly-plugin: 3.1.1 =\> 3.2.0 > > > > > > > > > Actually we reverted gson back to 2.8.5, and now the release note on > jira > > > is > > > > > > guava: 28.1-jre => 28.2-jre > > > error_prone: 2.3.3 => 2.3.4 > > > netty: 4.1.42.Final => 4.1.44.Final > > > protobuf: 3.9.2 => 3.11.1 > > > maven-assembly-plugin: 3.1.1 => 3.2.0 > > > > > > > > > Peter Somogyi <psomo...@apache.org> 于2020年4月25日周六 下午10:58写道： > > > > > > > Please vote on this Apache hbase thirdparty release candidate, > > > > hbase-thirdparty-3.3.0RC0 > > > > > > > > The VOTE will remain open for at least 72 hours. > > > > > > > > [ ] +1 Release this package as Apache hbase thirdparty 3.3.0 > > > > [ ] -1 Do not release this package because ... > > > > > > > > The tag to be voted on is 3.3.0RC0: > > > > > > > > https://github.com/apache/hbase-thirdparty/tree/3.3.0RC0 > > > > > > > > The release files, including signatures, digests, as well as > CHANGES.md > > > > and RELEASENOTES.md included in this RC can be found at: > > > > > > > > https://dist.apache.org/repos/dist/dev/hbase/3.3.0RC0/ > > > > > > > > Maven artifacts are available in a staging repository at: > > > > > > > > > > https://repository.apache.org/content/repositories/orgapachehbase-1388/ > > > > > > > > Artifacts were signed with the psomo...@apache.org key which can be > > > found > > > > in: > > > > > > > > https://dist.apache.org/repos/dist/release/hbase/KEYS > > > > > > > > To learn more about apache hbase thirdparty, please see > > > > http://hbase.apache.org/ > > > > > > > > Thanks, > > > > Your HBase Release Manager > > > > > > > > > >
