Hi, Jay.
On Oct 16, 2008, at 8:28 PM, Jay D. McHugh wrote:
Hello all,
With the discussion of where the JEE 6 development will be done, I
realized (again) that we never released 2.0.3.
The only thing that kept us from releasing 2.0.3 was an exception that
only occurred under stress testing the server (a
ConcurrentModificationException).
We scuttled the whole 1.2 release for similar reasons. Perhaps we should
work on learning from our own history.
And, recently, when we added a number of security patches that were the
driver for releasing 2.1.3 - the same security patches were put into the
2.0.x codestream as well.
Should we put out one last release of 2.0.x and then officially
encourage anyone on a level lower than 2.1.x to upgrade? I think that
is probably what we should do. At this point, there is a range of work
being applied to 2.0.x, 2.1.x, 2.2.x and soon 3.0.x (or however we
version the upcoming JEE 6).
If you, and/or some other community member(s), are motivated to prepare
a 2.0.3 release, you'd certainly have my support. I'm sure you'd have
the community's support, also.
Given the security fixes that you mention, I think it would be nice to
have an actual release that contains them.
Also, do we have an official 'support period'? Would it be worthwhile
to discuss implementing one if we don't? Letting our users know that we
intend to support a particular major.minor release (bug fixes only)
would make it easier for them to plan which version they want to
implement against and plan/schedule their server upgrades. Maybe we
would specify a window of '12 months after the next higher minor
release'. Version 2.1.0 was released this February, so 2.0.x 'official'
support would end next February. Of course if someone felt like
continuing to make fixes (and they had someone to run TCKs against them)
then 'unofficial' support may run longer.
We've never established an official support period. I'm not too sure
that we need one. If you disagree, then I'm all ears. Or, if our user
community feels that it would be helpful, then I'd certainly give it my
consideration. Personally, I think we've done a pretty good job in
merging fixes back into our older releases. I haven't seen that the lack
of a support policy was inhibiting user adoption.
As long as we have a stable newer release (e.g. 2.1.x) release to point
to, shifting our focus towards our newer releases doesn't seem too bad
to me. If there had been user requests for a 2.0.x release, I think we
would have generated a new 2.0.x release.
Our resources are being spread -really- thin. And as a result, 2.0.x
has been nearly abandoned. We have security fixes that were put in this
September, but no release in the last 12 months. When 2.2.x is finally
released and the JEE 6 work begins in earnest - I have a feeling that
2.1.x will begin to fall by the wayside as well.
I expect that you are correct. Personaly, I doubt that we'll ever
maintain more than two release branches simultaneously (e.g. 2.0/2.1, or
2.1/2.2; etc).
Regardless - I mainly wanted to know if anyone thought that we should go
ahead and do a final release on 2.0.x. I think the security fixes make
it worthwhile. But then, maybe we should officially set an end for 2.0.
Any thoughts?
I second the motion for Jay to be the release manager... ;-)
--kevan