Sorry for the late reply JB. I'll do a review of #2642 <https://github.com/apache/avro/pull/2642>. I already tested this against Iceberg locally and didn't see any issues there. I would love to get in #3871 <https://github.com/apache/avro/pull/2732> as well.
Cheers, Fokko Op di 2 apr 2024 om 16:57 schreef Jean-Baptiste Onofré <jbono...@apache.org >: > Hi folks, > > As discussed on this thread, I would like to move forward on 1.12.0 > release. > Thoughts ? > > I'm doing a pass on the issues. > > PS: I have a weird behavior with the mailing list, I might have to > re-subscribe. > > Regards > JB > > On 2024/03/14 08:53:05 Jean-Baptiste Onofré wrote: > > Hey Martin > > > > Awesome ! > > > > Happy to help with 1.12.0 if needed :) > > > > Thanks ! > > Regards > > JB > > > > On 2024/03/14 08:46:05 Martin Grigorov wrote: > > > Hi, > > > > > > On Wed, Mar 13, 2024 at 7:16 PM Jean-Baptiste Onofré <j...@nanthrax.net> > > > wrote: > > > > > > > Hi folks, > > > > > > > > Recently, we upgraded to commons-compress 1.26.0 (on main). > > > > commons-compress 1.26.0 fixes several CVEs (CVE-2024-25710, > > > > CVE-2024-26308, CVE-2023-42503). > > > > > > > > Would it be possible to release Avro 1.11.4 (that will include > > > > commons-compress update) ? > > > > > > > > > > Actually a few weeks ago there was a proposal to release 1.12.0! > > > https://lists.apache.org/thread/b8p8jkxx8f23yrss14q0y0ptdlttnxp4 > > > > > > > > > > > > > > I can help on the release if there are no objections. > > > > > > > > > > Thanks ! > > > > Regards > > > > JB > > > > > > > > > >
