Is log4j 1.2.17 for test scope a concern? Is this still needed? https://github.com/apache/storm/blob/v2.4.0/storm-core/pom.xml#L67-L70
I also am seeing a compile dependency of older log4j in storm-autocreds and storm-hdfs. On Tue, Mar 1, 2022 at 10:55 AM Bipin Prasad <bipinpra...@apache.org> wrote: > https://dist.apache.org/repos/dist/dev/storm/apache-storm-2.4.0-rc1/ > > This is a call to vote on releasing Apache Storm 2.4.0 (rc1) > > Full list of changes in this release: > > > https://dist.apache.org/repos/dist/dev/storm/apache-storm-2.4.0-rc1/RELEASE_NOTES.html > > The tag/commit to be voted upon is v2.4.0: > > > https://gitbox.apache.org/repos/asf?p=storm.git;a=commit;h=e41710a506b401970487b5e8ca96072f7b65c9bc > > The source archive being voted upon can be found here: > > > https://dist.apache.org/repos/dist/dev/storm/apache-storm-2.4.0-rc1/apache-storm-2.4.0-src.tar.gz > > Other release files, signatures and digests can be found here: > > https://dist.apache.org/repos/dist/dev/storm/apache-storm-2.4.0-rc1/ > > The release artifacts are signed with the following key: > > > https://keyserver.ubuntu.com/pks/lookup?op=index&fingerprint=on&search=0x51379DA8A7AE5B02674EF15C134716AF768D9B6E > in this file > https://www.apache.org/dist/storm/KEYS > > The Nexus staging repository for this release is: > > https://repository.apache.org/content/repositories/orgapachestorm-1102/ > > Please vote on releasing this package as Apache Storm 2.4.0. > > When voting, please list the actions taken to verify the release. > > This vote will be open for at least 72 hours. > > [ ] +1 Release this package as Apache Storm 2.1.1 > [ ] 0 No opinion > [ ] -1 Do not release this package because... > > Thanks to everyone who contributed to this release. >
