Re: Cutting 3.8.0 release

2022-02-04 Thread Patrick Hunt
On Fri, Feb 4, 2022 at 2:29 PM Enrico Olivelli wrote: > Il Ven 4 Feb 2022, 19:27 Patrick Hunt ha scritto: > > > The branches, including 3.8.0, are still failing the owasp check due to > > netty-tcnative > > > > > https://ci-hadoop.apache.org/view/ZooKeeper/job/zookeeper-multi-branch-owasp/job/br

Re: Cutting 3.8.0 release

2022-02-04 Thread Enrico Olivelli
Il Ven 4 Feb 2022, 19:27 Patrick Hunt ha scritto: > The branches, including 3.8.0, are still failing the owasp check due to > netty-tcnative > > https://ci-hadoop.apache.org/view/ZooKeeper/job/zookeeper-multi-branch-owasp/job/branch-3.8.0/3/console > I see this jira was closed: > https://issues.a

Re: Cutting 3.8.0 release

2022-02-04 Thread Patrick Hunt
The branches, including 3.8.0, are still failing the owasp check due to netty-tcnative https://ci-hadoop.apache.org/view/ZooKeeper/job/zookeeper-multi-branch-owasp/job/branch-3.8.0/3/console I see this jira was closed: https://issues.apache.org/jira/browse/ZOOKEEPER-4462 and I can't find any other

Re: Cutting 3.8.0 release

2022-01-31 Thread Enrico Olivelli
updates.. I am still waiting for CI on this Netty TCNative upgrade, that has a CVE report https://github.com/apache/zookeeper/pull/1810 it also needs a reviewer please Enrico Il giorno lun 31 gen 2022 alle ore 11:33 Enrico Olivelli ha scritto: > > Andor, > sorry, I misunderstood your question.

Re: Cutting 3.8.0 release

2022-01-31 Thread Enrico Olivelli
Andor, sorry, I misunderstood your question. Yes, we must name it 3.8.0 due to Lockback Enrico Il giorno lun 31 gen 2022 alle ore 11:24 Enrico Olivelli ha scritto: > > Il giorno lun 31 gen 2022 alle ore 10:49 Andor Molnar > ha scritto: > > > > What’s the reason for cutting a new minor release?

Re: Cutting 3.8.0 release

2022-01-31 Thread Enrico Olivelli
Il giorno lun 31 gen 2022 alle ore 10:49 Andor Molnar ha scritto: > > What’s the reason for cutting a new minor release? > The logback migration? > > 3.7 only has a single patch release so far: 3.7.0 > > Isn’t that too early? for 3.7.1 we have to merge the upgrades of the libraries with CVEs, lik

Re: Cutting 3.8.0 release

2022-01-31 Thread Andor Molnar
What’s the reason for cutting a new minor release? The logback migration? 3.7 only has a single patch release so far: 3.7.0 Isn’t that too early? Andor > On 2022. Jan 28., at 16:28, Enrico Olivelli wrote: > > Sure. > > Il giorno ven 28 gen 2022 alle ore 14:19 Szalay-Bekő Máté > ha scritt

Re: Cutting 3.8.0 release

2022-01-28 Thread Enrico Olivelli
Sure. Il giorno ven 28 gen 2022 alle ore 14:19 Szalay-Bekő Máté ha scritto: > > Great news, thanks for the work, Enrico!! > > I think we should wait for https://github.com/apache/zookeeper/pull/1807 ( > https://issues.apache.org/jira/browse/ZOOKEEPER-4461) so that we can > eliminate all reference

Re: Cutting 3.8.0 release

2022-01-28 Thread Szalay-Bekő Máté
Great news, thanks for the work, Enrico!! I think we should wait for https://github.com/apache/zookeeper/pull/1807 ( https://issues.apache.org/jira/browse/ZOOKEEPER-4461) so that we can eliminate all references for log4j1 from our pom.xml files. What do you think? Regards, Máté On Fri, Jan 28,

Re: Cutting 3.8.0 release

2022-01-27 Thread Chris Nauroth
+1 Thanks for driving this, Enrico! Chris Nauroth On Thu, Jan 27, 2022 at 7:08 AM Enrico Olivelli wrote: > Hello ZooKeepers, > I believe that the master branch is in good shape. > > I would like to start the release procedure for 3.8.0. > > This is the list of issues for 3.8.0 > > https://iss

Cutting 3.8.0 release

2022-01-27 Thread Enrico Olivelli
Hello ZooKeepers, I believe that the master branch is in good shape. I would like to start the release procedure for 3.8.0. This is the list of issues for 3.8.0 https://issues.apache.org/jira/issues/?jql=project%20%3D%20ZOOKEEPER%20AND%20fixVersion%20%3D%203.8.0 We recently addressed all of the