[DISCUSS] Release flink-shaded 9.0

[Chesnay Schepler-3]

Hello,

I'd like to kick off the next release for flink-shaded. Background is
that we recently bumped jackson to 2.10.1 to fix a variety of security
vulnerabilities, and it would be good to include them in the upcoming
1.8.3/1.9.2 releases.

The release would contain few changes beyond the jackson changes;
flink-shaded can now be compiled on Java 11 and an encoding issue for
the NOTICE files was fixed.

So overall this should be very little overhead.

I have already verified that the master would work with this version
(this being a reasonable indicator for it also working in previous version).

I'd also appreciate it if someone would volunteer to handle the release;
I'm quite bogged down at the moment :(

Regards,

Chesnay

[Ufuk Celebi-2]

From what I can see, the Jackson version bump fixes quite a few
vulnerabilities. Therefore, I'd be +1 to release flink-shaded 9.0.

Thanks for all the work to verify this on master already.

– Ufuk


On Fri, Nov 15, 2019 at 2:26 PM Chesnay Schepler <[hidden email]> wrote:

> Hello,
>
> I'd like to kick off the next release for flink-shaded. Background is
> that we recently bumped jackson to 2.10.1 to fix a variety of security
> vulnerabilities, and it would be good to include them in the upcoming
> 1.8.3/1.9.2 releases.
>
> The release would contain few changes beyond the jackson changes;
> flink-shaded can now be compiled on Java 11 and an encoding issue for
> the NOTICE files was fixed.
>
> So overall this should be very little overhead.
>
> I have already verified that the master would work with this version
> (this being a reasonable indicator for it also working in previous
> version).
>
> I'd also appreciate it if someone would volunteer to handle the release;
> I'm quite bogged down at the moment :(
>
> Regards,
>
> Chesnay
>
>

[Hequn Cheng]

Hi,

Big +1 to release 9.0.
It would be good if we can solve these security vulnerabilities.

Thanks a lot for your nice work and kick off the release so quickly.


On Fri, Nov 15, 2019 at 11:50 PM Ufuk Celebi <[hidden email]> wrote:

> From what I can see, the Jackson version bump fixes quite a few
> vulnerabilities. Therefore, I'd be +1 to release flink-shaded 9.0.
>
> Thanks for all the work to verify this on master already.
>
> – Ufuk
>
>
> On Fri, Nov 15, 2019 at 2:26 PM Chesnay Schepler <[hidden email]>
> wrote:
>
> > Hello,
> >
> > I'd like to kick off the next release for flink-shaded. Background is
> > that we recently bumped jackson to 2.10.1 to fix a variety of security
> > vulnerabilities, and it would be good to include them in the upcoming
> > 1.8.3/1.9.2 releases.
> >
> > The release would contain few changes beyond the jackson changes;
> > flink-shaded can now be compiled on Java 11 and an encoding issue for
> > the NOTICE files was fixed.
> >
> > So overall this should be very little overhead.
> >
> > I have already verified that the master would work with this version
> > (this being a reasonable indicator for it also working in previous
> > version).
> >
> > I'd also appreciate it if someone would volunteer to handle the release;
> > I'm quite bogged down at the moment :(
> >
> > Regards,
> >
> > Chesnay
> >
> >
>

[Ufuk Celebi-2]

@Chesnay: I know you said that you are pretty busy these days. If we can't
find anybody else to work on this, when would you be available to create
the first RC?

On Sun, Nov 17, 2019 at 6:48 AM Hequn Cheng <[hidden email]> wrote:

> Hi,
>
> Big +1 to release 9.0.
> It would be good if we can solve these security vulnerabilities.
>
> Thanks a lot for your nice work and kick off the release so quickly.
>
>
> On Fri, Nov 15, 2019 at 11:50 PM Ufuk Celebi <[hidden email]> wrote:
>
> > From what I can see, the Jackson version bump fixes quite a few
> > vulnerabilities. Therefore, I'd be +1 to release flink-shaded 9.0.
> >
> > Thanks for all the work to verify this on master already.
> >
> > – Ufuk
> >
> >
> > On Fri, Nov 15, 2019 at 2:26 PM Chesnay Schepler <[hidden email]>
> > wrote:
> >
> > > Hello,
> > >
> > > I'd like to kick off the next release for flink-shaded. Background is
> > > that we recently bumped jackson to 2.10.1 to fix a variety of security
> > > vulnerabilities, and it would be good to include them in the upcoming
> > > 1.8.3/1.9.2 releases.
> > >
> > > The release would contain few changes beyond the jackson changes;
> > > flink-shaded can now be compiled on Java 11 and an encoding issue for
> > > the NOTICE files was fixed.
> > >
> > > So overall this should be very little overhead.
> > >
> > > I have already verified that the master would work with this version
> > > (this being a reasonable indicator for it also working in previous
> > > version).
> > >
> > > I'd also appreciate it if someone would volunteer to handle the
> release;
> > > I'm quite bogged down at the moment :(
> > >
> > > Regards,
> > >
> > > Chesnay
> > >
> > >
> >
>

[Dian Fu-2]

Hi Chesnay,

Thanks a lot for kicking off this release. +1 to release flink-shaded 9.0.

I'm willing to help on the release. Please feel free to let me know
if there is anything I could help.

Regards,
Dian

On Mon, Nov 18, 2019 at 8:43 PM Ufuk Celebi <[hidden email]> wrote:

> @Chesnay: I know you said that you are pretty busy these days. If we can't
> find anybody else to work on this, when would you be available to create
> the first RC?
>
> On Sun, Nov 17, 2019 at 6:48 AM Hequn Cheng <[hidden email]> wrote:
>
> > Hi,
> >
> > Big +1 to release 9.0.
> > It would be good if we can solve these security vulnerabilities.
> >
> > Thanks a lot for your nice work and kick off the release so quickly.
> >
> >
> > On Fri, Nov 15, 2019 at 11:50 PM Ufuk Celebi <[hidden email]> wrote:
> >
> > > From what I can see, the Jackson version bump fixes quite a few
> > > vulnerabilities. Therefore, I'd be +1 to release flink-shaded 9.0.
> > >
> > > Thanks for all the work to verify this on master already.
> > >
> > > – Ufuk
> > >
> > >
> > > On Fri, Nov 15, 2019 at 2:26 PM Chesnay Schepler <[hidden email]>
> > > wrote:
> > >
> > > > Hello,
> > > >
> > > > I'd like to kick off the next release for flink-shaded. Background is
> > > > that we recently bumped jackson to 2.10.1 to fix a variety of
> security
> > > > vulnerabilities, and it would be good to include them in the upcoming
> > > > 1.8.3/1.9.2 releases.
> > > >
> > > > The release would contain few changes beyond the jackson changes;
> > > > flink-shaded can now be compiled on Java 11 and an encoding issue for
> > > > the NOTICE files was fixed.
> > > >
> > > > So overall this should be very little overhead.
> > > >
> > > > I have already verified that the master would work with this version
> > > > (this being a reasonable indicator for it also working in previous
> > > > version).
> > > >
> > > > I'd also appreciate it if someone would volunteer to handle the
> > release;
> > > > I'm quite bogged down at the moment :(
> > > >
> > > > Regards,
> > > >
> > > > Chesnay
> > > >
> > > >
> > >
> >
>

[vino yang]

+1

Best,
Vino

Dian Fu <[hidden email]> 于2019年11月19日周二 下午4:17写道：

> Hi Chesnay,
>
> Thanks a lot for kicking off this release. +1 to release flink-shaded 9.0.
>
> I'm willing to help on the release. Please feel free to let me know
> if there is anything I could help.
>
> Regards,
> Dian
>
> On Mon, Nov 18, 2019 at 8:43 PM Ufuk Celebi <[hidden email]> wrote:
>
> > @Chesnay: I know you said that you are pretty busy these days. If we
> can't
> > find anybody else to work on this, when would you be available to create
> > the first RC?
> >
> > On Sun, Nov 17, 2019 at 6:48 AM Hequn Cheng <[hidden email]>
> wrote:
> >
> > > Hi,
> > >
> > > Big +1 to release 9.0.
> > > It would be good if we can solve these security vulnerabilities.
> > >
> > > Thanks a lot for your nice work and kick off the release so quickly.
> > >
> > >
> > > On Fri, Nov 15, 2019 at 11:50 PM Ufuk Celebi <[hidden email]> wrote:
> > >
> > > > From what I can see, the Jackson version bump fixes quite a few
> > > > vulnerabilities. Therefore, I'd be +1 to release flink-shaded 9.0.
> > > >
> > > > Thanks for all the work to verify this on master already.
> > > >
> > > > – Ufuk
> > > >
> > > >
> > > > On Fri, Nov 15, 2019 at 2:26 PM Chesnay Schepler <[hidden email]
> >
> > > > wrote:
> > > >
> > > > > Hello,
> > > > >
> > > > > I'd like to kick off the next release for flink-shaded. Background
> is
> > > > > that we recently bumped jackson to 2.10.1 to fix a variety of
> > security
> > > > > vulnerabilities, and it would be good to include them in the
> upcoming
> > > > > 1.8.3/1.9.2 releases.
> > > > >
> > > > > The release would contain few changes beyond the jackson changes;
> > > > > flink-shaded can now be compiled on Java 11 and an encoding issue
> for
> > > > > the NOTICE files was fixed.
> > > > >
> > > > > So overall this should be very little overhead.
> > > > >
> > > > > I have already verified that the master would work with this
> version
> > > > > (this being a reasonable indicator for it also working in previous
> > > > > version).
> > > > >
> > > > > I'd also appreciate it if someone would volunteer to handle the
> > > release;
> > > > > I'm quite bogged down at the moment :(
> > > > >
> > > > > Regards,
> > > > >
> > > > > Chesnay
> > > > >
> > > > >
> > > >
> > >
> >
>

[Chesnay Schepler-3]

Thanks for the offer, but without being a committer I don't think
there's a lot to do :/

@Uce If no one else steps up I'll kick it off later today myself; this
would mean a release on Friday.

On 19/11/2019 09:17, Dian Fu wrote:

> Hi Chesnay,
>
> Thanks a lot for kicking off this release. +1 to release flink-shaded 9.0.
>
> I'm willing to help on the release. Please feel free to let me know
> if there is anything I could help.
>
> Regards,
> Dian
>
> On Mon, Nov 18, 2019 at 8:43 PM Ufuk Celebi <[hidden email]> wrote:
>
>> @Chesnay: I know you said that you are pretty busy these days. If we can't
>> find anybody else to work on this, when would you be available to create
>> the first RC?
>>
>> On Sun, Nov 17, 2019 at 6:48 AM Hequn Cheng <[hidden email]> wrote:
>>
>>> Hi,
>>>
>>> Big +1 to release 9.0.
>>> It would be good if we can solve these security vulnerabilities.
>>>
>>> Thanks a lot for your nice work and kick off the release so quickly.
>>>
>>>
>>> On Fri, Nov 15, 2019 at 11:50 PM Ufuk Celebi <[hidden email]> wrote:
>>>
>>>>  From what I can see, the Jackson version bump fixes quite a few
>>>> vulnerabilities. Therefore, I'd be +1 to release flink-shaded 9.0.
>>>>
>>>> Thanks for all the work to verify this on master already.
>>>>
>>>> – Ufuk
>>>>
>>>>
>>>> On Fri, Nov 15, 2019 at 2:26 PM Chesnay Schepler <[hidden email]>
>>>> wrote:
>>>>
>>>>> Hello,
>>>>>
>>>>> I'd like to kick off the next release for flink-shaded. Background is
>>>>> that we recently bumped jackson to 2.10.1 to fix a variety of
>> security
>>>>> vulnerabilities, and it would be good to include them in the upcoming
>>>>> 1.8.3/1.9.2 releases.
>>>>>
>>>>> The release would contain few changes beyond the jackson changes;
>>>>> flink-shaded can now be compiled on Java 11 and an encoding issue for
>>>>> the NOTICE files was fixed.
>>>>>
>>>>> So overall this should be very little overhead.
>>>>>
>>>>> I have already verified that the master would work with this version
>>>>> (this being a reasonable indicator for it also working in previous
>>>>> version).
>>>>>
>>>>> I'd also appreciate it if someone would volunteer to handle the
>>> release;
>>>>> I'm quite bogged down at the moment :(
>>>>>
>>>>> Regards,
>>>>>
>>>>> Chesnay
>>>>>
>>>>>

[Dian Fu-2]

I see, thanks for the reminder @Chesnay!

Will help on the release check once the RC is out.

Regards,
Dian

On Tue, Nov 19, 2019 at 4:41 PM Chesnay Schepler <[hidden email]> wrote:

> Thanks for the offer, but without being a committer I don't think
> there's a lot to do :/
>
> @Uce If no one else steps up I'll kick it off later today myself; this
> would mean a release on Friday.
>
> On 19/11/2019 09:17, Dian Fu wrote:
> > Hi Chesnay,
> >
> > Thanks a lot for kicking off this release. +1 to release flink-shaded
> 9.0.
> >
> > I'm willing to help on the release. Please feel free to let me know
> > if there is anything I could help.
> >
> > Regards,
> > Dian
> >
> > On Mon, Nov 18, 2019 at 8:43 PM Ufuk Celebi <[hidden email]> wrote:
> >
> >> @Chesnay: I know you said that you are pretty busy these days. If we
> can't
> >> find anybody else to work on this, when would you be available to create
> >> the first RC?
> >>
> >> On Sun, Nov 17, 2019 at 6:48 AM Hequn Cheng <[hidden email]>
> wrote:
> >>
> >>> Hi,
> >>>
> >>> Big +1 to release 9.0.
> >>> It would be good if we can solve these security vulnerabilities.
> >>>
> >>> Thanks a lot for your nice work and kick off the release so quickly.
> >>>
> >>>
> >>> On Fri, Nov 15, 2019 at 11:50 PM Ufuk Celebi <[hidden email]> wrote:
> >>>
> >>>>  From what I can see, the Jackson version bump fixes quite a few
> >>>> vulnerabilities. Therefore, I'd be +1 to release flink-shaded 9.0.
> >>>>
> >>>> Thanks for all the work to verify this on master already.
> >>>>
> >>>> – Ufuk
> >>>>
> >>>>
> >>>> On Fri, Nov 15, 2019 at 2:26 PM Chesnay Schepler <[hidden email]>
> >>>> wrote:
> >>>>
> >>>>> Hello,
> >>>>>
> >>>>> I'd like to kick off the next release for flink-shaded. Background is
> >>>>> that we recently bumped jackson to 2.10.1 to fix a variety of
> >> security
> >>>>> vulnerabilities, and it would be good to include them in the upcoming
> >>>>> 1.8.3/1.9.2 releases.
> >>>>>
> >>>>> The release would contain few changes beyond the jackson changes;
> >>>>> flink-shaded can now be compiled on Java 11 and an encoding issue for
> >>>>> the NOTICE files was fixed.
> >>>>>
> >>>>> So overall this should be very little overhead.
> >>>>>
> >>>>> I have already verified that the master would work with this version
> >>>>> (this being a reasonable indicator for it also working in previous
> >>>>> version).
> >>>>>
> >>>>> I'd also appreciate it if someone would volunteer to handle the
> >>> release;
> >>>>> I'm quite bogged down at the moment :(
> >>>>>
> >>>>> Regards,
> >>>>>
> >>>>> Chesnay
> >>>>>
> >>>>>
>
>