Hi Julian, For the time being I think OAK-9451, OAK-9473 and OAK-9401 are sufficient. We can include in a later release the other candidates. Speaking of this, what's the situation with OAK-9038? Does it need to be backported on this branch?
When it comes to dependencies for https://nvd.nist.gov/vuln/detail/CVE-2020-25649, I saw there's already a PR for updating netty. Is there something else which think is mandatory to go inside now? I don't want to rush this release, but don't want to stall it either... Ideally I'd cut it tomorrow or Wednesday, 14th of July. Regards, Andrei On Thu, Jul 8, 2021 at 1:59 PM Julian Reschke <[email protected]> wrote: > Am 08.07.2021 um 12:28 schrieb Andrei Dulceanu: > > Hi, > > > > I'm planning to cut Jackrabbit Oak 1.22.8 on Monday (July 12th). > > > > The list of open issues scheduled for 1.22.8 is empty. > > > > > https://issues.apache.org/jira/issues/?jql=project%20%3D%20OAK%20AND%20fixVersion%20%3D%201.22.8%20AND%20resolution%20%3D%20Unresolved > > > > After I do two baclports later this afternoon, I will also update the > > candidate release notes. > > > > Let me know if there are any objections. > > > > Regards, > > Andrei > > There are quite a few issues labeled "candidate_oak_1_22": > < > https://issues.apache.org/jira/browse/OAK-9038?jql=project%20%3D%20OAK%20AND%20labels%3Dcandidate_oak_1_22 > > > > At least for the bugs we should consider doing these backports before. > > Also, it might be good to review dependencies for security issue, such > as <https://nvd.nist.gov/vuln/detail/CVE-2020-25649>. > > Best regards, Julian > >
