adoroszlai commented on PR #3505: URL: https://github.com/apache/ozone/pull/3505#issuecomment-1154410807
> jar-report.txt is updated now. Thanks for catching this. Caught by the check, not me. :) > Does that mean we need a new patch release of ratis-thirdparty just for this? Yes, I think so. (Unless we can figure out how to make these versions independent. But even then, if the CVE is important, we need to update the version we use for Ratis communication.) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
