Great news, thanks for the work, Enrico!! I think we should wait for https://github.com/apache/zookeeper/pull/1807 ( https://issues.apache.org/jira/browse/ZOOKEEPER-4461) so that we can eliminate all references for log4j1 from our pom.xml files. What do you think?
Regards, Máté On Fri, Jan 28, 2022 at 5:24 AM Chris Nauroth <cnaur...@gmail.com> wrote: > +1 > > Thanks for driving this, Enrico! > > Chris Nauroth > > > On Thu, Jan 27, 2022 at 7:08 AM Enrico Olivelli <eolive...@gmail.com> > wrote: > > > Hello ZooKeepers, > > I believe that the master branch is in good shape. > > > > I would like to start the release procedure for 3.8.0. > > > > This is the list of issues for 3.8.0 > > > > > https://issues.apache.org/jira/issues/?jql=project%20%3D%20ZOOKEEPER%20AND%20fixVersion%20%3D%203.8.0 > > > > We recently addressed all of the CVEs by updating some key > > dependencies, like Netty, and moving away from Log4j1 (we switched to > > LogBack) > > > > If no one has objections I will start the release procedure on Monday > > > > Regards > > > > Enrico > > >
