Ok, I will help out with the release. On Fri, Nov 24, 2023 at 6:45 PM Sergey Nuyanzin <snuyan...@gmail.com> wrote:
> Thanks everyone for responses > > I've started preparation steps to make it happened by following steps [1] > > One of the preliminary steps is publishing GPG key dist.apache.org > I don't have write access there and as it is also mentioned at wiki page > > >Note: Only PMC members have write access to the release repository. If you > end up getting 403 errors ask on the mailing list for assistance. > Could someone please help me here or tell me which mailing list I should > ask for assistance? > > [1] > > https://cwiki.apache.org/confluence/display/FLINK/Creating+a+flink-shaded+release#Creatingaflinkshadedrelease-Preparefortherelease > > > > > On Thu, Nov 23, 2023 at 11:25 AM Matthias Pohl > <matthias.p...@aiven.io.invalid> wrote: > > > +1 > > > > Thanks for driving this, Sergey. We could also think of removing the > > ZooKeeper versions 3.5 and 3.6, I guess. 3.6 reached EOL in 2022. Flink > > 1.17 already switched to 3.7 as the default version. > > > > On Thu, Nov 23, 2023 at 9:31 AM Jing Ge <j...@ververica.com.invalid> > > wrote: > > > > > +1 > > > > > > Does it make sense to use 32.1.3-jre Guava? > > > > > > Best regards, > > > Jing > > > > > > On Thu, Nov 23, 2023 at 8:42 AM Yun Tang <myas...@live.com> wrote: > > > > > > > +1, thanks Sergey for driving this work. > > > > > > > > Best > > > > Yun Tang > > > > ________________________________ > > > > From: Leonard Xu <xbjt...@gmail.com> > > > > Sent: Thursday, November 23, 2023 9:38 > > > > To: dev <dev@flink.apache.org> > > > > Subject: Re: [DISCUSS] Towards flink-shaded release 18.0 > > > > > > > > +1, thanks Sergey for driving this. > > > > > > > > > 2023年11月23日 上午5:46，Martijn Visser <martijnvis...@apache.org> 写道： > > > > > > > > > > +1. More than happy to help :) > > > > > > > > > > On Wed, Nov 22, 2023 at 9:16 PM Sergey Nuyanzin < > snuyan...@gmail.com > > > > > > > wrote: > > > > >> > > > > >> Hi everyone, > > > > >> > > > > >> I would like to start discussion about creating a new 18 release > for > > > > >> flink-shaded[1]. > > > > >> > > > > >> Among others it brings fix for ZooKeeper CVE [2], > > > > >> a couple of Guava CVEs [3], [4] > > > > >> and support of jdk 21 from netty mentioned in one of > > > > >> the java 21[5] support subtasks [6] > > > > >> > > > > >> Also making a release now will allow to have enough time > > > > >> for testing before Flink 1.19 release. > > > > >> > > > > >> I would volunteer to make the release happen > > > > >> however probably I guess I will need some PMC help > > > > >> > > > > >> > > > > >> [1] https://github.com/apache/flink-shaded > > > > >> [2] https://nvd.nist.gov/vuln/detail/CVE-2023-44981 > > > > >> [3] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2976 > > > > >> [4] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8908 > > > > >> [5] https://issues.apache.org/jira/browse/FLINK-33163 > > > > >> [6] https://issues.apache.org/jira/browse/FLINK-33331 > > > > >> > > > > >> > > > > >> > > > > >> > > > > >> > > > > >> > > > > >> -- > > > > >> Best regards, > > > > >> Sergey > > > > > > > > > > > > > > > > -- > Best regards, > Sergey >
