Thanks for bringing this up, Matthias. Per the "Update Policy for old releases" [1], normally we do not release 1.10.x after 1.12.0 is released. However, the policy also says that we are "open to discussing bugfix releases for even older versions".
In this case, I'm +1 for releasing 1.10.3, for the dozens of non-released fixes and the security flaws. As a reminder, I'd like to bring up FLINK-20906 [2] to be backported if we are releasing 1.10.3, which updates the copyright year in NOTICE files to 2021. Thank you~ Xintong Song [1] https://flink.apache.org/downloads.html [2] https://issues.apache.org/jira/browse/FLINK-20906 On Tue, Jan 12, 2021 at 7:15 PM Matthias Pohl <matth...@ververica.com> wrote: > Hi, > I'd like to initiate a discussion on releasing Flink 1.10.3. There were a > few requests in favor of this already in [1] and [2]. > > I checked the release-1.10 branch: 55 commits are not released, yet. > Some non-released fixes that might be relevant are: > - FLINK-20218 [3] - fix "module 'urllib' has no attribute 'parse'" due to > ProtoBuf version update > - FLINK-20013 [4] - BoundedBlockingSubpartition may leak network buffer > - FLINK-19252 [5] - temporary folder is not created when missing > - FLINK-19557 [6] - LeaderRetrievalListener notification upon ZooKeeper > reconnection > - FLINK-19523 [7] - hide sensitive information in logs > > In addition to that, we would like to include a backport for CVE-2020-17518 > and CVE-2020-17519 to cover the request in [2]. > > The travis-ci build chain for release-1.10 seems to be stable [8]. > Any thoughts on that? Unfortunately, I cannot volunteer as a release > manager due to the lack of permissions. But I wanted to start the > discussion, anyway. > > Best, > Matthias > > [1] > > http://apache-flink-mailing-list-archive.1008284.n3.nabble.com/ANNOUNCE-Weekly-Community-Update-2020-44-45-td46486.html#a47610 > [2] https://issues.apache.org/jira/browse/FLINK-20875 > [3] https://issues.apache.org/jira/browse/FLINK-20218 > [4] https://issues.apache.org/jira/browse/FLINK-20013 > [5] https://issues.apache.org/jira/browse/FLINK-19252 > [6] https://issues.apache.org/jira/browse/FLINK-19557 > [7] https://issues.apache.org/jira/browse/FLINK-19523 > [8] https://travis-ci.com/github/apache/flink/builds/212749910 >
