I agree with William that there's no need to block 4.14.3's 1.3 and 1.4-based releases on HBase 1.5. Soon-but-later, when HBase 1.5 lands I think we should do a followup 4.14.3 (or .4, if other critical JIRAs are necessary) release based on 1.5.
Then, based on the branch EOL discussions the HBase list is having right now, and the status of 4.15, we can decide which branches to support going forward. Geoffrey On Wed, Aug 7, 2019 at 3:00 PM William Shen <[email protected]> wrote: > If HBase does not patch 1.3 or 1.4 for the Jackson CVE, the recommendation > for concerned users would be to use 1.5. I think that sounds like we would > want to get a 1.5 branch for 4.14, unless we think 4.15 is almost ready? > > Either way, I am not sure if this would need to block 4.14.3, since it will > take some time for this to play out? > > On Wed, Aug 7, 2019 at 11:10 AM Artem Ervits <[email protected]> > wrote: > > > As described in HBASE-22728, are we planning to get a 1.5 branch for 4.14 > > or are we targeting 4.15 and 5.x for HBase 1.5? > > > > On Tue, Aug 6, 2019, 5:01 PM swaroopa kadam <[email protected]> > > wrote: > > > > > non-binding -1 > > > > > > Uncovered a blocker Jira PHOENIX-5348. > > > I will be back with RC2 soon. > > > > > > Thank you. > > > > > > On Tue, Aug 6, 2019 at 12:58 PM swaroopa kadam < > > [email protected] > > > > > > > wrote: > > > > > > > Hello Everyone, > > > > > > > > This is a call for a vote on Apache Phoenix 4.14.3 RC1. This is a > patch > > > > release of Phoenix 4.14 and is compatible with Apache HBase 1.3 and > > > > 1.4. The release includes both a source-only release and a > convenience > > > > binary > > > > release for each supported HBase version. > > > > > > > > This release includes critical bug fixes and improvements for > secondary > > > > indexes -- making them self-consistent. > > > > > > > > The source tarball, including signatures, digests, etc can be found > at: > > > > > > > > > > > > > > https://dist.apache.org/repos/dist/dev/phoenix/apache-phoenix-4.14.3-HBase-1.3-rc1/src/ > > > > > > > > > > > > > > https://dist.apache.org/repos/dist/dev/phoenix/apache-phoenix-4.14.3-HBase-1.4-rc1/src/ > > > > > > > > The binary artifacts can be found at: > > > > > > > > > > > > > > https://dist.apache.org/repos/dist/dev/phoenix/apache-phoenix-4.14.3-HBase-1.3-rc1/bin/ > > > > > > > > > > > > > > https://dist.apache.org/repos/dist/dev/phoenix/apache-phoenix-4.14.3-HBase-1.4-rc1/bin/ > > > > > > > > For a complete list of changes, see: > > > > > > > > > > > > > > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12315120&version=12345601 > > > > > > > > Artifacts are signed with my "CODE SIGNING KEY": 48B7807D95F127B5 > > > > > > > > KEYS file available here: > > > > https://dist.apache.org/repos/dist/dev/phoenix/KEYS > > > > > > > > The tag to be voted upon: > > > > https://github.com/apache/phoenix/releases/tag/4.14.3-HBase-1.3-rc1 > > > > https://github.com/apache/phoenix/releases/tag/4.14.3-HBase-1.4-rc1 > > > > > > > > The vote will be open for at least 72 hours. Please vote: > > > > > > > > [ ] +1 approve > > > > [ ] +0 no opinion > > > > [ ] -1 disapprove (and the reason why) > > > > > > > > Thanks, > > > > The Apache Phoenix Team > > > > > > > > -- > > > > > > > > > > > > Swaroopa Kadam > > > > [image: https://]about.me/swaroopa_kadam > > > > < > > > > > > https://about.me/swaroopa_kadam?promo=email_sig&utm_source=product&utm_medium=email_sig&utm_campaign=gmail_api > > > > > > > > > > > > > > > > > -- > > > > > > > > > Swaroopa Kadam > > > [image: https://]about.me/swaroopa_kadam > > > < > > > > > > https://about.me/swaroopa_kadam?promo=email_sig&utm_source=product&utm_medium=email_sig&utm_campaign=gmail_api > > > > > > > > > >
