[
https://issues.apache.org/jira/browse/THRIFT-5972?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18079596#comment-18079596
]
Jens Geyer edited comment on THRIFT-5972 at 5/8/26 11:57 PM:
-------------------------------------------------------------
I have no idea why in 2026 it still takes ages to copy a few binaries from A to
B and whatever else they are doing in that time frame. The whole proces is
notoriously slow and utterly complex. Especially when one performs that task
maybe twice a year, it is a real PITA. [Other|https://packagist.org/]
[package|https://www.npmjs.com/] [managers|https://www.nuget.org/] [can
do|https://lib.haxe.org/] [releases|https://rubygems.org/] in microseconds
(literally) up to a few minutes until it is publicly visible, and you don't
need to set up a bunch of stuff before locally.
What I can say is that I can see it under "release" on [Nexus Repository
Manager|https://repository.apache.org/#nexus-search;quick~libthrift], the rest
is out of my hands.
was (Author: jensg):
I have no idea why in 2026 it still takes ages to copy a few binaries from A to
B and whatever else they are doing in that time frame. The whole proces is
notoriously slow and utterly complex. Especially when one performs that task
maybe twice a year, it is a real PITA. [Other|https://packagist.org/]
[package|https://www.npmjs.com/] [managers|https://www.nuget.org/] [can
do|https://lib.haxe.org/] [releases|https://rubygems.org/] in microseconds
(literally) up to a few minutes until it is publicly visible, and you don't
need to set up a bunch of stuff before locally.
What I can say is that I can see it under "release" on
https://repository.apache.org, the rest is out of my hands.
> publish 0.23.0 to public Maven
> ------------------------------
>
> Key: THRIFT-5972
> URL: https://issues.apache.org/jira/browse/THRIFT-5972
> Project: Thrift
> Issue Type: Improvement
> Components: Java - Library
> Affects Versions: 0.23.0
> Reporter: Shh
> Assignee: Jens Geyer
> Priority: Major
> Fix For: 0.23.0
>
> Time Spent: 40m
> Remaining Estimate: 0h
>
> HI.
>
> 0.23.0 addresses a critical vulnerability.
> and is available as a download here:
>
> [Release Version 0.23.0 · apache/thrift ·
> GitHub|https://github.com/apache/thrift/releases/tag/v0.23.0]
>
> My company's build systems are tied to public maven central.
>
> and 0.23.0 is not avaiable here.
>
> [Maven Repository: org.apache.thrift »
> libthrift|https://mvnrepository.com/artifact/org.apache.thrift/libthrift]
> (currently only 0.22.0 and lower is available).
>
>
> I am kindly requesting that the library be "published" to maven-central.
>
> Note, the time gap on 0.22.0 seems to have been about one month.
>
> I appreciated the consideration.
>
> thank you.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
