Here is the attached draft of our board report for this quarter. --------------------------------------------------------------------------
## Description: Apache TinkerPop is a graph computing framework for both graph databases (OLTP) and graph analytic systems (OLAP). ## Activity: TinkerPop released 3.4.11/3.5.0 on May 3, 2021. Version 3.4.11 was another maintenance release along that line and 3.5.0 represented a major release with some breaking changes, runtime/dependency version upgrades and an assortment of new features[1]. Graph Providers have already started upgrading their graph systems to support this new version and we look forward to seeing it gain further adoption as the new primary release line. We are currently in the midst of releasing 3.4.12 and 3.5.1 and have opened development for 3.6.0. It is likely that we will end releases along 3.4.x this year. The PMC received a security vulnerability report[2] and after some discussion determined that a CVE was not necessary for the problem. We did however identify two action items related to this issue: (1) modify our documentation to clarify some areas that may have been misinterpreted for how certain examples should be used in production environments and (2) opened a specific issue in JIRA[3] to track an upcoming change that will offer a better option for users to consider when it comes to securing their remote Gremlin execution. We have welcomed two new PMC members this quarter in Kelvin Lawrence and Joshua Shinavier. ## Issues: There are no issues requiring board attention at this time. ## Releases: - 3.4.11 (May 3, 2021) - 3.5.0 (May 3, 2021) ## PMC/Committer: - Last PMC addition was Kelvin Lawrence/Josh Shinavier - June 2021 - Last committer addition was Øyvind Sæbø - March 2021 ## Links [1] https://tinkerpop.apache.org/docs/3.5.0/upgrade/#_tinkerpop_3_5_0 [2] https://s.apache.org/vb691 [3] https://issues.apache.org/jira/browse/TINKERPOP-2583
