Re: [VOTE] Apache ZooKeeper release 3.9.0 candidate 0

2023-07-19 Thread Enrico Olivelli
For what it's worth, all my tests passed today :-) I would have cast a +1. But I agree that we should fix the problem reported by Mate Enrico Il giorno mar 18 lug 2023 alle ore 14:48 Szalay-Bekő Máté ha scritto: > > Thanks Andor! > > > Since we don't have better idea, I opened a pull request to

Re: [VOTE] Apache ZooKeeper release 3.9.0 candidate 0

2023-07-18 Thread Szalay-Bekő Máté
Thanks Andor! > Since we don't have better idea, I opened a pull request to upgrade OWASP to the latest (8.3.1) version. Yes, I tested the PR, upgrading OWASP is solving the issue also on my machine. I approved the PR. Regards, Máté On Tue, Jul 18, 2023 at 1:45 PM Andor Molnar wrote: > Hi Mat

Re: [VOTE] Apache ZooKeeper release 3.9.0 candidate 0

2023-07-18 Thread Andor Molnar
Hi Mate, I take your e-mail as a -1 vote, so this RC VOTE is CANCELLED. I'll prepare another rc. Regards, Andor On Mon, 2023-07-17 at 22:50 +0200, Szalay-Bekő Máté wrote: > Hello Andor! > > Thanks for this great release! > > I found two issues with RC0: > > 1) OWASP CVE check (mvn dependency

Re: [VOTE] Apache ZooKeeper release 3.9.0 candidate 0

2023-07-18 Thread Andor Molnar
Hi Mate, Since we don't have better idea, I opened a pull request to upgrade OWASP to the latest (8.3.1) version. https://github.com/apache/zookeeper/pull/2035 Please approve. Andor On Mon, 2023-07-17 at 22:50 +0200, Szalay-Bekő Máté wrote: > Hello Andor! > > Thanks for this great release!

Re: [VOTE] Apache ZooKeeper release 3.9.0 candidate 0

2023-07-17 Thread Szalay-Bekő Máté
Hello Andor! Thanks for this great release! I found two issues with RC0: 1) OWASP CVE check (mvn dependency-check:check) failed with "netty-tcnative-boringssl-static-2.0.61.Final-osx-x86_64.jar: CVE-2011-1797(9.3)" This seems to be a false positive to me (looks to be some security issue affecti

[VOTE] Apache ZooKeeper release 3.9.0 candidate 0

2023-07-17 Thread Andor Molnar
Hi team, This is a release candidate for 3.9.0. It is a major release and it introduces a lot of new features, most notably: - Admin server API for taking snapshot and stream out the data - Communicate the Zxid that triggered a WatchEvent to fire - TLS - dynamic loading for client trust/key store