[ 
https://issues.apache.org/jira/browse/KAFKA-15440?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17762588#comment-17762588
 ] 

Satish Duggana commented on KAFKA-15440:
----------------------------------------

Thanks [~divijvaidya] for filing the JIRA. 

I prefer to skip adding it in the release plan now unless there are known CVEs 
missed by the existing dependency versions. It is better to have this exercise 
around feature freeze date so that we will have enough baking period of the 
updated dependencies. If we discover any CVEs after the feature freeze, we can 
treat them as blockers and include them in the release plan.


> Update minor dependencies in preparation for 3.6.0
> --------------------------------------------------
>
>                 Key: KAFKA-15440
>                 URL: https://issues.apache.org/jira/browse/KAFKA-15440
>             Project: Kafka
>          Issue Type: Improvement
>    Affects Versions: 3.6.0
>            Reporter: Divij Vaidya
>            Priority: Major
>             Fix For: 3.6.0
>
>
> Similar to https://issues.apache.org/jira/browse/KAFKA-15159 
> The task involves:
> 1. Go through list of all dependencies in dependencies.gradle
> 2. Upgrade any minor version updates
> Remember to update the associated license file in LICENSE-binary.
> We will merge this to 3.6 and trunk branch.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to