[CANCEL datasketches-java 4.0.0-RC1 VOTE] TestNG release 7.5 had a Zip Slip Vulnerability which was fixed only in the last two weeks with a version 7.5.1, which is compatible with Java 8. Although a 7.7.1 release with a fix has been available since Dec 28, 2022, it was not compatible with Java 8. Now with TestNG 7.5.1 available, I think it is best to cancel this RC1 candidate, and issue an RC2 with this new TestNG 7.5.1 version.
Thank you for your patience! Lee. On Tue, May 9, 2023 at 6:04 PM Lee Rhodes <lee...@gmail.com> wrote: > 1. This is a call for vote to release Apache DataSketches-java candidate > version: 2.0.0-RC1 > > NOTE: This is the core Java component of the DataSketches library that > includes all the sketch algorithms in production-ready packages. These > sketches can be called directly from this component or used in conjunction > with the adaptor components such as Hadoop Pig, Hadoop Hive, or the > aggregator adaptors built into Apache Druid. > > MAJOR NEW FEATURES AND ENHANCEMENTS FOR USERS > - Quantile Sketches > - The major APIs for all the quantile sketches now derive from > interfaces common to all the quantile sketches. This makes it much easier > for the user to move from one quantile sketch to another with only very > minor code changes. > - All the quantile sketches now have a "SortedView", which is > iterable and makes analysis of the quantile distribution even easier. > - HLL Sketches > - Major speed performance improvements for HLL union/merge > operations. > - Major improvements to the HLL Javadocs. > - Theta Sketches > - The Theta sketch has been enhanced with an optional compress > operation that makes the serialized theta sketch smaller. > > 2. Source repository: > - https://github.com/apache/datasketches-java > > Git Tag for this release: > - https://github.com/apache/datasketches-java/tree/4.0.0-RC1 on > branch 4.0.X > > Git Commit Id for this release starts with: 0fd056d > > 3. The Release Candidate / Zip Repository: > - https://dist.apache.org/repos/dist/dev/datasketches/java/4.0.0-RC1/ > > The public signing key can be found in the KEYS file: > - https://dist.apache.org/repos/dist/dev/datasketches/KEYS > > The artifacts have been signed with --keyid-format SHORT : 8CD4A902 > > 4. Repository: Maven Central [Nexus](http://repository.apache.org) (Jar > Artifacts): > - > https://repository.apache.org/content/groups/staging/org/apache/datasketches/datasketches-java/4.0.0/ > > 5. Build & Test Guide: > - https://github.com/apache/datasketches-java/blob/4.0.0-RC1/README.md > > 6. The vote will be performed as follows: > - This letter will be published on dev@ and remain open for at least > 72 hours (excluding weekends and holidays), AND until at least 3 (+1) PMC > votes or a majority of (+1) PMC votes are acquired. Anyone in the community > can vote. > > Please vote accordingly: > > [ ] +1 approve > [ ] +0 no opinion > [ ] -1 disapprove with the reason > > Thanks, > Lee Rhodes > lee...@apache.org > >
