Thanks for the support. Could a PMC member help copying the GPG pub key from https://dist.apache.org/repos/dist/dev/beam/KEYS (currently the last one, after the second-last "END PGP PUBLIC KEY BLOCK") to https://dist.apache.org/repos/dist/release/beam/KEYS ?
On Fri, Jan 12, 2024 at 11:28 AM Kenneth Knowles <k...@apache.org> wrote: > Yes, thank you! > > On Thu, Jan 11, 2024 at 8:21 PM Chamikara Jayalath via dev < > dev@beam.apache.org> wrote: > >> Sounds good and thanks for doing this :) >> >> - Cham >> >> On Thu, Jan 11, 2024 at 8:06 AM Yi Hu via dev <dev@beam.apache.org> >> wrote: >> >>> Hi everyone, >>> >>> I would like to volunteer to upgrade the Beam vendored grpc, as >>> requested by the GitHub Issue [1]. The last update was in Apr 2023 [2]. >>> There have been vulnerabilities in its dependencies as well as potential >>> oom issues found since then (see [1]), and also to include grpc-alts [2]. >>> >>> My plan is to follow the release process [3, 4], which involves >>> preparing for the release, building a candidate, voting and finalizing the >>> release. Then the vendored artifact is targeted to be integrated by Beam >>> v2.54.0 onwards (cut date Jan 24, 2024). >>> >>> Please let me know if you have any comments/objections/questions. >>> >>> Thanks, >>> >>> Yi >>> >>> [1] https://github.com/apache/beam/issues/29861 >>> [2] https://github.com/apache/beam/issues/25746 >>> [3] https://github.com/apache/beam/tree/master/vendor >>> [4] >>> https://docs.google.com/document/d/1ztEoyGkqq9ie5riQxRtMuBu3vb6BUO91mSMn1PU0pDA/edit#heading=h.vhcuqlttpnog >>> -- >>> >>> Yi Hu, (he/him/his) >>> >>> Software Engineer >>> >>> >>>
