Re: Malhar release 3.8.0

2017-10-25 Thread Ananth G
I would like to volunteer to be the release manager for this. Given I have not done this before I might have a few questions along the way in the mailing list. A couple of questions regarding the release process: - In the link https://apex.apache.org/release.html , in the section titled “Build

Re: checking dependencies for known vulnerabilities

2017-10-25 Thread Pramod Immaneni
Thanks that sounds mostly fine except what happens if there is a cve matching that severity in a dependency but it doesnt affect us because let's say we don't exercise that part of functionality *and* there isn't a fix available or there is a fix but the upgrade requires significant effort (for

Re: Malhar release 3.8.0

2017-10-25 Thread Ananth G
+1 for malhar release. Regards, Ananth > On 26 Oct 2017, at 3:20 am, Bhupesh Chawda wrote: > > +1 for malhar release > > ~ Bhupesh > > > ___ > > Bhupesh Chawda > > E: bhup...@datatorrent.com | Twitter:

Re: Malhar release 3.8.0

2017-10-25 Thread Bhupesh Chawda
+1 for malhar release ~ Bhupesh ___ Bhupesh Chawda E: bhup...@datatorrent.com | Twitter: @bhupeshsc www.datatorrent.com | apex.apache.org On Wed, Oct 25, 2017 at 9:37 PM, Chinmay Kolhatkar wrote: > +1. > > -

Re: Malhar release 3.8.0

2017-10-25 Thread Chinmay Kolhatkar
+1. - Chinmay. On 25 Oct 2017 9:20 pm, "Chaitanya Chebolu" wrote: > +1 on new release. > > Thanks, > > On Wed, Oct 25, 2017 at 9:09 PM, Vlad Rozov wrote: > > > +1. > > > > Thank you, > > > > Vlad > > > > > > On 10/25/17 08:21, Amol Kekre wrote: >

Re: checking dependencies for known vulnerabilities

2017-10-25 Thread Vlad Rozov
A CVE (should there be a vulnerability in existing or a newly introduced dependency) will not be exposed during the CI build, but the build will fail if the CVE has severity 8 or above. To get the details, it will be necessary to run dependency check manually. Thank you, Vlad On 10/24/17

Re: Malhar release 3.8.0

2017-10-25 Thread Chaitanya Chebolu
+1 on new release. Thanks, On Wed, Oct 25, 2017 at 9:09 PM, Vlad Rozov wrote: > +1. > > Thank you, > > Vlad > > > On 10/25/17 08:21, Amol Kekre wrote: > >> +1 on a new malhar release. >> >> Thks, >> Amol >> >> >> E:a...@datatorrent.com | M: 510-449-2606 | Twitter:

Re: Malhar release 3.8.0

2017-10-25 Thread Amol Kekre
+1 on a new malhar release. Thks, Amol E:a...@datatorrent.com | M: 510-449-2606 | Twitter: @*amolhkekre* www.datatorrent.com On Tue, Oct 24, 2017 at 9:12 PM, Tushar Gosavi wrote: > +1 on creating a new malhar release. > > - Tushar. > > > On Wed, Oct 25, 2017 at 4:39