On Mon, Aug 26, 2019 at 5:28 PM Wei-Chiu Chuang <weic...@apache.org> wrote:
> This is starting to diverge from the original topic :) > > But I would like to say > (1) If we are treating branch-2/2.0 as the final, last 2.x release, we > should be proactive in updating dependencies. I did a quick search and > found a lot of dependencies in branch-2 are very old, and some are even > susceptible to known vulnerabilities. We did a lot in 3.x, some are even > backward-incompatible. But I guess we didn't imagine people are still on > 2.x a few years after 3.x went GA. > > +1, with care. The AWS SDK needs an update on the 3.1 and 3.2 lines too
