[ 
https://issues.apache.org/jira/browse/THRIFT-5972?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18079812#comment-18079812
 ] 

Richard Eckart de Castilho commented on THRIFT-5972:
----------------------------------------------------

What matters is central. The other mvnrepository thing is afaik a third-party 
service further down the sync chain.

The official central search is here: https://central.sonatype.com/

> publish 0.23.0 to public Maven
> ------------------------------
>
>                 Key: THRIFT-5972
>                 URL: https://issues.apache.org/jira/browse/THRIFT-5972
>             Project: Thrift
>          Issue Type: Improvement
>          Components: Java - Library
>    Affects Versions: 0.23.0
>            Reporter: Shh
>            Assignee: Jens Geyer
>            Priority: Major
>             Fix For: 0.23.0
>
>          Time Spent: 1h 10m
>  Remaining Estimate: 0h
>
> HI.
>  
> 0.23.0 addresses a critical vulnerability.
> and is available as a download here:
>  
> [Release Version 0.23.0 · apache/thrift · 
> GitHub|https://github.com/apache/thrift/releases/tag/v0.23.0]
>  
> My company's build systems are tied to public maven central.
>  
> and 0.23.0 is not avaiable here.
>  
> [Maven Repository: org.apache.thrift » 
> libthrift|https://mvnrepository.com/artifact/org.apache.thrift/libthrift]
> (currently only 0.22.0 and lower is available).
>  
>  
> I am kindly requesting that the library be "published" to maven-central.
>  
> Note, the time gap on 0.22.0 seems to have been about one month. 
>  
>  I appreciated the consideration.
>  
> thank you.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to