Hi everyone,

There have been some fixes since the release of 1.12.0 that I would love to
see released, and the security improvement is obviously important.
There are no open PRs that I think are more important than the security
fix, with maybe the exception of documenting the security model for Avro
(AVRO-4145).

The PR to review for AVRO-4145 is: https://github.com/apache/avro/pull/3403

What do others think of this? Is documenting the security model
urgent enough, or can it wait until the next release?

Kind regards,
Oscar


On Tue, 3 Jun 2025 at 09:23, Jean-Baptiste Onofré <j...@nanthrax.net> wrote:

> Hi everyone,
>
> I'm doing a new pass on the open issues for the proposed releases.
>
> If you have things you want to include in the 1.11.5 and 1.12.1
> releases, please let me know.
>
> Thanks !
> Regards
> JB
>
> On Thu, May 22, 2025 at 8:57 AM Jean-Baptiste Onofré <j...@nanthrax.net>
> wrote:
> >
> > Hi everyone
> >
> > After a quick chat with Martin, we have a couple of fixes we would
> > like to include in the coming releases.
> >
> > I gonna do a new pass before the releases.
> >
> > Thanks !
> >
> > Regards
> > JB
> >
> > On Mon, May 19, 2025 at 10:21 AM Jean-Baptiste Onofré <j...@nanthrax.net>
> wrote:
> > >
> > > Hi guys
> > >
> > > Thanks for your feedback. Let me do a pass on the pending updates and
> > > start the releases prep.
> > >
> > > I will certainly ping you for some steps needing special karma ;)
> > >
> > > Regards
> > > JB
> > >
> > > On Fri, May 16, 2025 at 8:04 PM Fokko Driesprong <fo...@apache.org>
> wrote:
> > > >
> > > > Hey JB,
> > > >
> > > > That sounds like a great idea. Thanks for bringing this up. Let me
> know if
> > > > I can help.
> > > >
> > > > Kind regards,
> > > > Fokko
> > > >
> > > > Op do 15 mei 2025 om 08:30 schreef Martin Grigorov <
> mgrigo...@apache.org>:
> > > >
> > > > > On Wed, May 14, 2025 at 2:35 PM Jean-Baptiste Onofré <
> j...@nanthrax.net>
> > > > > wrote:
> > > > >
> > > > > > Hi folks,
> > > > > >
> > > > > > I proposed a security improvement in Avro in this PR:
> > > > > > https://github.com/apache/avro/pull/3376
> > > > > >
> > > > > > I'm proposing to release Avro 1.11.5 and 1.12.1 when #3376 is
> merged.
> > > > > >
> > > > > > If there are no objections, I'm volunteer to do these releases.
> > > > > >
> > > > >
> > > > > +1
> > > > > Thank you, JB!
> > > > >
> > > > >
> > > > >
> > > > > >
> > > > > > Thoughts ?
> > > > > >
> > > > > > Regards
> > > > > > JB
> > > > > >
> > > > >
>


-- 

✉️ Oscar Westra van Holthe - Kind <os...@westravanholthe.nl>

Reply via email to