On 2024/07/03 14:44:30 Dave Fisher wrote:
> I did not see exactly where the download happens in the workflow. Is there a
> separate action or workflow?
In the current master branch version, it gets downloaded here:
https://github.com/apache/pulsar/blob/dbbb6b66c99afd12762dec198482dbf766bff3bb/.g
Thank you everyone. Closing the vote with 3 binding +1s and 2
non-binding +1s.
Binding votes:
- Matteo Merli
- Lari Hotari
- Hang Chen
Non-Binding votes:
- Neng Lu
- Chris Bono
Best regards,
Apurva Telang
On Tue, Jul 2, 2024 at 7:19 PM Hang Chen wrote:
> +1 (binding)
>
> Best
> On Jul 3, 2024, at 6:06 AM, Lari Hotari wrote:
>
> Hi,
>
> In Apache Pulsar, we use the OWASP Dependency-Check maven plugin to report
> vulnerabilities in dependencies in apache/pulsar GitHub Actions workflows.
>
> The Dependency Check maven plugin will download the NVD database which ta
bump
On 2024/06/24 01:50:14 Jie crossover wrote:
> Hi, Pulsar Community.
>
> I would like to start the voting thread for PIP-363: Add callback
> parameters to the method:
> org.apache.pulsar.client.impl.SendCallback.sendComplete.
>
> PIP: https://github.com/apache/pulsar/pull/22940
> Discussion
Hi,
In Apache Pulsar, we use the OWASP Dependency-Check maven plugin to report
vulnerabilities in dependencies in apache/pulsar GitHub Actions workflows.
The Dependency Check maven plugin will download the NVD database which takes a
long time. In Apache Pulsar GitHub Actions workflows, we cach
