On 7/28/07, Don Brown <[EMAIL PROTECTED]> wrote: > I agree with Antonio that a 2.0.8.1 would have been more appropriate and > less risky. Then, we know the only change from a GA-approved release was > the security fix, which has already undergone considerable scrutiny.
Yes, that might have been a good idea, but to do that, we would also need a WebWork 2.0.3.1 with the single fix. Judging from the change log, WebWork 2.0.4 included other changes, and issuing Struts 2.0.8.1 would have been misleading and even problematic. Rainer was under time-constraints, and I don't think anyone else is ramped up to do a WebWork 2 release right now. And that's the real problem: We have too few release managers. XWork 2.0.4 was released on Thursday, and I wasn't available to work on the release myself until Monday. If someone else had been able to roll a Struts 2.0.9 on Thursday or Friday, then waiting until Monday to announce our own security-fix release might have made more sense. But, under the circumstances, waiting yet another three days (plus a fourth day for mirroring) didn't make sense to me, or, evidentially, to the other PMC members who cast binding votes. I do want to thank Andrea Vettori, Lukasz Racon, Musachy Barroso, Don Brown, Rainer Hermanns, James Holmes, and everyone else who worked so hard to put us in position to issue this critical security release. -Ted. --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
