I took the liberty and created a 1.4.3 milestone <https://github.com/apache/iceberg/milestone/43> to track any issues that we want to backport.
Kind regards, Fokko Driesprong Op ma 20 nov 2023 om 08:50 schreef Driesprong, Fokko <fo...@driesprong.frl>: > Hey JB, > > Late to the party here, but 1.4.3 sounds like a great idea. Let me know if > you need any help with any release steps. > > Kind regards, > Fokko Driesprong > > Op ma 20 nov 2023 om 08:16 schreef Jean-Baptiste Onofré <j...@nanthrax.net>: > >> Hi >> >> As there's no objection, I will move forward and prepare the release to >> vote. >> >> I will keep you posted asap. >> >> Thanks, >> Regards >> JB >> >> On Wed, Nov 15, 2023 at 6:11 AM Jean-Baptiste Onofré <j...@nanthrax.net> >> wrote: >> > >> > Hi guys, >> > >> > Avro 1.11.3 has been released, fixing CVE-2023-39410. >> > We already updated to Avro 1.11.3 on main. >> > >> > About CVE, we also already use guava 32.1.3, fixing CVE-2023-2976. >> > >> > As the Avro CVE is classified high (see >> > https://nvd.nist.gov/vuln/detail/CVE-2023-39410), I propose to bump to >> > Avro 1.11.3 on our 1.4.x branch and release Iceberg 1.4.3 including >> > this. >> > >> > Thoughts ? >> > >> > If there are no objections, I'm volunteer to drive this release. >> > >> > Thanks, >> > Regards >> > JB >> >
