Re: vote duration discrepancy

2018-09-28 Thread Joe Bowser
I think security releases have shorter turnaround on votes fueled by the desire to keep users safe from public disclosure and abuse, but even that is rare. On Fri., Sep. 28, 2018, 9:07 a.m. julio cesar sanchez, < jcesarmob...@gmail.com> wrote: > Yeah, I looked with git blame and the 48 hour

Re: vote duration discrepancy

2018-09-28 Thread julio cesar sanchez
Yeah, I looked with git blame and the 48 hour message was 5 year old, so asking just in case Apache changed it and we missed it. Didn’t know it was decided that long ago. El El vie, 28 sept 2018 a las 17:45, Shazron escribió: > FWIW the only reference I see for an emergency (security) patch

Re: vote duration discrepancy

2018-09-28 Thread Shazron
FWIW the only reference I see for an emergency (security) patch vote is here: https://httpd.apache.org/dev/voting.html#emergency for the HTTP Server project. However, that document is deemed obsolete. I believe it has been superseded by the Security patch release process. On Fri, Sep 28, 2018 at

Re: vote duration discrepancy

2018-09-28 Thread Shazron
To be honest I didn't expect the vote to end so fast especially with the notice "Voting will go on for a minimum of 48 hours." in the vote thread itself. If this was expressed as a duration of 24 hours and expressed as an emergency (I know it was implied, but for some rules are rules), I think we

Re: vote duration discrepancy

2018-09-28 Thread Shazron
Jesse sums up what I would have said. We all agreed on the 48 hours (somewhere way back), especially with our project with 60+ repos where we were changing rapidly (not so much now of course), and 72 hours was too late for a release. 48 seems to be a good midpoint for the rule to include people

Re: vote duration discrepancy

2018-09-28 Thread Jesse
These are guidelines. We make our own rules. The important part is that we make sure we are inclusive of people all around the planet. A hotfix is a different situation, we need to get it out fast and since it is not a significant change, a quick window should be fine. > [1] ... Votes

vote duration discrepancy

2018-09-28 Thread julio cesar sanchez
This is being discussed in slack and github , but I think it belongs to the mail list. There is a discrepancy in the duration of the votes. Apache states that: Release votes SHOULD remain open for at least 72 hours. But in coho vote templates