Josep, thanks for the note. We will mention the CVEs fixed in this release in the announcement email. I believe we can also update the release notes HTML after the vote is complete.
-David On Wed, Sep 21, 2022 at 2:51 AM 'Josep Prat' via kafka-clients < kafka-clie...@googlegroups.com> wrote: > Hi David, > > Thanks for driving this. One question, should we include in the release > notes the recently fixed CVE vulnerability? I understand this not being > explicitly mentioned on the recently released versions to not cause an > unintentional 0-day, but I think it could be mentioned for this release. > What do you think? > > Best, > > On Wed, Sep 21, 2022 at 1:17 AM David Arthur <davidart...@apache.org> > wrote: > >> Hello Kafka users, developers and client-developers, >> >> This is the second release candidate for Apache Kafka 3.3.0. Many new >> features and bug fixes are included in this major release of Kafka. A >> significant number of the issues in this release are related to KRaft, >> which will be considered "production ready" as part of this release >> (KIP-833) >> >> KRaft improvements: >> * KIP-778: Online KRaft to KRaft Upgrades >> * KIP-833: Mark KRaft as Production Ready >> * KIP-835: Monitor Quorum health (many new KRaft metrics) >> * KIP-836: Expose voter lag via kafka-metadata-quorum.sh >> * KIP-841: Fenced replicas should not be allowed to join the ISR in KRaft >> * KIP-859: Add Metadata Log Processing Error Related Metrics >> >> Other major improvements include: >> * KIP-618: Exactly-Once Support for Source Connectors >> * KIP-831: Add metric for log recovery progress >> * KIP-827: Expose logdirs total and usable space via Kafka API >> * KIP-834: Add ability to Pause / Resume KafkaStreams Topologies >> >> The full release notes are available here: >> https://home.apache.org/~davidarthur/kafka-3.3.0-rc2/RELEASE_NOTES.html >> >> Please download, test and vote by Monday, Sep 26 at 5pm EDT >> >> Also, huge thanks to José for running the release so far. He has done >> the vast majority of the work to prepare this rather large release :) >> >> --------------------- >> >> Kafka's KEYS file containing PGP keys we use to sign the release: >> https://kafka.apache.org/KEYS >> >> * Release artifacts to be voted upon (source and binary): >> https://home.apache.org/~davidarthur/kafka-3.3.0-rc2/ >> >> * Maven artifacts to be voted upon: >> https://repository.apache.org/content/groups/staging/org/apache/kafka/ >> >> * Javadoc: https://home.apache.org/~davidarthur/kafka-3.3.0-rc2/javadoc/ >> >> * Tag to be voted upon (off 3.3 branch) is the 3.3.0 tag: >> https://github.com/apache/kafka/releases/tag/3.3.0-rc2 >> >> * Documentation: https://kafka.apache.org/33/documentation.html >> >> * Protocol: https://kafka.apache.org/33/protocol.html >> >> >> >> >> Successful Jenkins builds to follow in a future update to this email. >> >> >> Thanks! >> David Arthur >> > > > -- > [image: Aiven] <https://www.aiven.io> > > *Josep Prat* > Open Source Engineering Director, *Aiven* > josep.p...@aiven.io | +491715557497 > aiven.io <https://www.aiven.io> | > <https://www.facebook.com/aivencloud> > <https://www.linkedin.com/company/aiven/> <https://twitter.com/aiven_io> > *Aiven Deutschland GmbH* > Immanuelkirchstraße 26, 10405 Berlin > Geschäftsführer: Oskari Saarenmaa & Hannu Valtonen > Amtsgericht Charlottenburg, HRB 209739 B > > -- > You received this message because you are subscribed to the Google Groups > "kafka-clients" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to kafka-clients+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/kafka-clients/CAOJ18G4DE9Q_DYyZTbDLF6J6MRj30WrCNj6njrYRV3SQeThs-w%40mail.gmail.com > <https://groups.google.com/d/msgid/kafka-clients/CAOJ18G4DE9Q_DYyZTbDLF6J6MRj30WrCNj6njrYRV3SQeThs-w%40mail.gmail.com?utm_medium=email&utm_source=footer> > . > -- -David
