[DISCUSS] ASF Board Draft Report - April 2020

2020-03-27 Thread Stephen Mallette
Here is the attached draft of our board report for this month. Please let me know if you'd like to see something changed or added. Did I miss any talks or papers (we seem short there this time around)? --- ## Description: Apa

[jira] [Commented] (TINKERPOP-2356) Bump to Jackson 2.10.x

2020-03-27 Thread ASF GitHub Bot (Jira)
[ https://issues.apache.org/jira/browse/TINKERPOP-2356?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17069015#comment-17069015 ] ASF GitHub Bot commented on TINKERPOP-2356: --- spmallette commented on pull r

[GitHub] [tinkerpop] spmallette opened pull request #1271: TINKERPOP-2356 Bump to Jackson 2.10

2020-03-27 Thread GitHub
https://issues.apache.org/jira/browse/TINKERPOP-2356 This moves us off the CVE flooded 2.9.x. Changes were pretty minimal. I suppose we could backport if we really wanted to but this was mostly done to see what the impact would be as we look forward to hopefully going to Jackson 3.0 before TP 3

[jira] [Created] (TINKERPOP-2356) Bump to Jackson 2.10.x

2020-03-27 Thread Stephen Mallette (Jira)
Stephen Mallette created TINKERPOP-2356: --- Summary: Bump to Jackson 2.10.x Key: TINKERPOP-2356 URL: https://issues.apache.org/jira/browse/TINKERPOP-2356 Project: TinkerPop Issue Type: Im

[jira] [Comment Edited] (TINKERPOP-2355) Jackson-databind version in Gremlin shaded dependency needs to be increased - introduces vulnerability issues

2020-03-27 Thread Stephen Mallette (Jira)
[ https://issues.apache.org/jira/browse/TINKERPOP-2355?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17068756#comment-17068756 ] Stephen Mallette edited comment on TINKERPOP-2355 at 3/27/20, 2:18 PM:

[jira] [Updated] (TINKERPOP-2355) Jackson-databind version in Gremlin shaded dependency needs to be increased - introduces vulnerability issues

2020-03-27 Thread Stephen Mallette (Jira)
[ https://issues.apache.org/jira/browse/TINKERPOP-2355?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Stephen Mallette updated TINKERPOP-2355: Labels: (was: dependencies security) Thanks. We're constantly upgrading jacks

[jira] [Created] (TINKERPOP-2355) Jackson-databind version in Gremlin shaded dependency needs to be increased - introduces vulnerability issues

2020-03-27 Thread Simeon Andonov (Jira)
Simeon Andonov created TINKERPOP-2355: - Summary: Jackson-databind version in Gremlin shaded dependency needs to be increased - introduces vulnerability issues Key: TINKERPOP-2355 URL: https://issues.apache.or