In addition to the vulnerable dependencies, of which H2 does not upgrade cleanly, there is now another new release blocker:

DRILL-8119 - MongoDB query regression: mem leak and data type error <https://issues.apache.org/jira/browse/DRILL-8119>

Regards
James

On 2022/01/30 01:51, Charles Givre wrote:
Hey James,
Alas... I'm afraid I'd have to give a -1 on this.  There are some dependabot 
alerts at the moment, which we really should resolve (or at least look at) 
before cutting a release.  One of which has is linked to a severe CVE. Also, I 
just submitted a VERY minor bug fix which I'd love to squeak into this release, 
but that's not urgent.
Best,
--C


On Jan 29, 2022, at 7:36 AM, James Turton<[email protected]>  wrote:

Hello Dev community

Not a moment too soon, we've finally dispatched the last issues holding back 1.20!  
Here's a big thank you from the release manager to everyone who helped to push us forward 
to this point.  I'm sure I'm not the only one receiving the "When it's 
coming??" questions. As an interesting bit of trivia, there have been about 9 months 
separating recent releases and it has now been about 8 months since 1.19.  Who knew we 
were so consistent ;-) ?

Please vote for or against a feature freeze on the master branch.  I assume 
only critical bug or vulnerability fixes get freeze immunity?

Thank you
James

Reply via email to