Hi all,
We found one log4j dependency issue [1], one heap memory OOM issue
[2] and one CVE issue [3]. Due to this release is still in voting
stage, I prefer to include those fixes in 4.16.0. So I close the vote
and send out a new candidate soon.
Thanks,
Hang
[1] https://github.com/apache/bookkeeper/pull/3892
[2] https://github.com/apache/bookkeeper/pull/3888
[3] https://github.com/apache/bookkeeper/pull/3896
Enrico Olivelli <eolive...@gmail.com> 于2023年3月28日周二 00:11写道：
>
> +1 (binding)
>
> - Built from sources and run all the tests (it is the first time I see
> all tests passing the first time I launch them !!)
> - Verified signatures and checksums
> - Run some smoke tests on JDK11/Mac M1
>
>
> Enrico
>
> Il giorno lun 27 mar 2023 alle ore 03:41 Hang Chen
> <chenh...@apache.org> ha scritto:
> >
> > I have created one PR[1] to upgrade the BookKeeper dependency to
> > 4.16.0 for Apache Pulsar, and all the tests have been passed.
> >
> > Thanks,
> > Hang
> >
> >
> > [1] https://github.com/hangc0276/pulsar/pull/14
> >
> > Hang Chen <chenh...@apache.org> 于2023年3月26日周日 13:26写道：
> > >
> > > Hi everyone,
> > > Please review and vote on the release candidate #1 for version 4.16.0,
> > > as follows:
> > > [ ] +1, Approve the release
> > > [ ] -1, Do not approve the release (please provide specific comments)
> > >
> > > The complete staging area is available for your review, which includes:
> > > * Release notes [1]
> > > * The official Apache source and binary distributions to be deployed to
> > > dist.apache.org [2]
> > > * All artifacts to be deployed to the Maven Central Repository [3]
> > > * Source code tag "v4.16.0-rc1" [4] with git sha [5]
> > >
> > > BookKeeper's KEYS file contains the PGP keys we used to sign this release:
> > > https://dist.apache.org/repos/dist/release/bookkeeper/KEYS
> > >
> > > Please download these packages and review this release candidate:
> > >
> > > - Review release notes
> > > - Download the source package (verify shasum, and asc) and follow the
> > > instructions to build and run the bookkeeper service.
> > > - Download the binary package (verify shasum, and asc) and follow the
> > > instructions to run the bookkeeper service.
> > > - Review the maven repo, release tag, licenses, and any other things you
> > > think
> > > it is important to release.
> > >
> > > The vote will be open for at least 72 hours. It is adopted by the
> > > majority approval, with at least 3 PMC affirmative votes.
> > >
> > > Thanks,
> > > Release Manager
> > >
> > > [1] https://github.com/apache/bookkeeper/pull/3882/files
> > > [2]
> > > https://dist.apache.org/repos/dist/dev/bookkeeper/bookkeeper-4.16.0-rc1/
> > > [3]
> > > https://repository.apache.org/content/repositories/orgapachebookkeeper-1082/
> > > [4] https://github.com/apache/bookkeeper/tree/v4.16.0-rc1
> > > [5] 5474a84549de8e02470014b2c7462eb97e71034e
