I backported ALL SolrBot PRs to branch_9_4, which brings the number of known CVEs down.
I also have a few other dependency upgrades baking in PRs but unfortunately Crave has died so no PRs pass tests: > Run cd > /crave-devspaces/pipeline/runs/${GITHUB_RUN_ID}_${GITHUB_RUN_NUMBER}/solr > Selecting project Solr (id:39) > Error: Process completed with exit code 1. Jan > 7. des. 2023 kl. 02:44 skrev David Smiley <david.w.smi...@gmail.com>: > > Sounds good Eric. It's not clear when exactly a 9.4.1 RC will happen as > there are a couple security matters we're looking at. > ~ David > > > On Wed, Dec 6, 2023 at 12:31 PM Eric Pugh <ep...@opensourceconnections.com> > wrote: > >> Something that I’d like to get released ASAP is a fix to the bin/solr post >> command. >> >> Our Ref Guide has a lot of mentions of using “bin/solr post -c tech >> products”, however I removed the -c parameter in favour of -url parameter. >> I think that was a mistake, and would like to restore the old -c parameter, >> and then make sure the Ref Guide is up to date. >> >> This could be a 9.4.1 or 9.5 change. >> >>> On Dec 6, 2023, at 10:31 AM, Jason Gerlowski <gerlowsk...@gmail.com> >> wrote: >>> >>> Good question - I'm still thinking through what makes the most sense >>> there. Let's continue discussion on SOLR-17100 if you've got thoughts! >>> >>> On Wed, Dec 6, 2023 at 9:58 AM Jan Høydahl <jan....@cominvent.com> >> wrote: >>> >>>> Jason, what do you mean by "publishing" the clients? >>>> I suppose you don't mean pip and npm, but including them in the binary >>>> tarball for users to consume? Or can we perhaps keep them "internal" >> only >>>> for a few releases with no docs and no guarantees, only dog-fooding? >>>> >>>> Jan >>>> >>>>> 6. des. 2023 kl. 15:38 skrev Jason Gerlowski <gerlowsk...@gmail.com>: >>>>> >>>>> I'd love to see a 9.5 go out sometime in January to get our new Python >>>> and >>>>> Javascript clients in front of users. I'm willing to RM the release, >> or >>>>> share duties with you if you're interested David? Publishing the new >>>>> clients will require some changes to the release process, and I'd hate >> to >>>>> saddle someone else with ironing out whatever hiccups are likely to >> crop >>>> up. >>>>> >>>>> What do you guys think about doing 9.5 on a January-ish timeframe? >>>>> >>>>> That said, if someone else wants a 9.4.1 I don't want to get in the way >>>> of >>>>> that either. Jan's right that there'd still be value in a 9.4.1 even >>>> with >>>>> a 9.5. I imagine the driving factor would be whether there's a willing >>>> RM >>>>> for 9.4.1 >>>>> >>>>> >>>>> >>>>> On Wed, Dec 6, 2023 at 5:42 AM Jan Høydahl <jan....@cominvent.com> >>>> wrote: >>>>> >>>>>> The benefit of doing 9.4.1 now is that it won't have that unknown >>>>>> regression that may be lurking in branch_9x now, so it's a much easier >>>>>> upgrade path for 9.4.0 users. >>>>>> However, I feel a 9.5 should follow quickly after. There is always >> room >>>>>> for a 9.6, 9.7 etc if someone wants to promote newer features, we >> don't >>>>>> need to wait for a certain number of new features to release, in my >>>> mind it >>>>>> is enought that we have one very interesting feature, or that >2 >> months >>>> has >>>>>> passed. >>>>>> >>>>>> I can help backport dependency upgrades. >>>>>> >>>>>> Jan >>>>>> >>>>>>> 6. des. 2023 kl. 05:50 skrev David Smiley <david.w.smi...@gmail.com >>> : >>>>>>> >>>>>>> Ideally I would have done a 9.4.1 earlier for that one issue... but I >>>>>>> didn't and kept feeling more and more guilty... so here we are. But >>>>>> really >>>>>>> I shouldn't feel too guilty; open-source is volunteering; doing a >> patch >>>>>>> release shouldn't be a required punishment for an unfortunate bug. >> It >>>>>>> wasn't even a feature I was using in my day-to-day; I was just >> helping >>>>>>> someone fix their problem. >>>>>>> >>>>>>> BTW a new Lucene release is close so we might to wait a bit on Solr >>>> 9.5, >>>>>> so >>>>>>> maybe we do this 9.4.1. That Lucene release also touches the index >>>>>> format >>>>>>> BTW. >>>>>>> >>>>>>> ~ David >>>>>>> >>>>>>> >>>>>>> On Tue, Dec 5, 2023 at 8:50 PM Shawn Heisey >>>> <apa...@elyograg.org.invalid >>>>>>> >>>>>>> wrote: >>>>>>> >>>>>>>> On 12/5/23 16:28, David Smiley wrote: >>>>>>>>> I didn't know doing 9.5 was an option. If it still is, I would >>>> prefer >>>>>> to >>>>>>>>> do 9.5. What do people think? >>>>>>>> >>>>>>>> The 9.5.0 section of CHANGES.txt in main is not as big as that for >>>>>>>> 9.4.0, but it's not small either. >>>>>>>> >>>>>>>> I do not know whether any of those changes are something that the >>>> author >>>>>>>> thinks needs to bake for a little while longer. >>>>>>>> >>>>>>>> I run a branch_9x snapshot on my little tiny Solr install that gets >>>> its >>>>>>>> index from dovecot, and I update it frequently. It hasn't given me >>>> any >>>>>>>> trouble. >>>>>>>> >>>>>>>> I say go for it. Someday I will do a release myself. >>>>>>>> >>>>>>>> Thanks, >>>>>>>> Shawn >>>>>>>> >>>>>>>> >>>>>>>> >> --------------------------------------------------------------------- >>>>>>>> To unsubscribe, e-mail: dev-unsubscr...@solr.apache.org >>>>>>>> For additional commands, e-mail: dev-h...@solr.apache.org >>>>>>>> >>>>>>>> >>>>>> >>>>>> >>>>>> --------------------------------------------------------------------- >>>>>> To unsubscribe, e-mail: dev-unsubscr...@solr.apache.org >>>>>> For additional commands, e-mail: dev-h...@solr.apache.org >>>>>> >>>>>> >>>> >>>> >>>> --------------------------------------------------------------------- >>>> To unsubscribe, e-mail: dev-unsubscr...@solr.apache.org >>>> For additional commands, e-mail: dev-h...@solr.apache.org >>>> >>>> >> >> _______________________ >> Eric Pugh | Founder & CEO | OpenSource Connections, LLC | 434.466.1467 | >> http://www.opensourceconnections.com < >> http://www.opensourceconnections.com/> | My Free/Busy < >> http://tinyurl.com/eric-cal> >> Co-Author: Apache Solr Enterprise Search Server, 3rd Ed < >> https://www.packtpub.com/big-data-and-business-intelligence/apache-solr-enterprise-search-server-third-edition-raw> >> >> This e-mail and all contents, including attachments, is considered to be >> Company Confidential unless explicitly stated otherwise, regardless of >> whether attachments are marked as such. >> >> --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@solr.apache.org For additional commands, e-mail: dev-h...@solr.apache.org