NiFi 1.28.1 build findings

Things to please change before RC2:

1. please remove 'subject' from the email subject

2. Bump apache parent to 33

3. Check docker file version ref in at least the dockerhub path.  It
appears to point to 1.24.0 and should be 1.28.1

4. if using maven versions:set be sure to use versions:commit as well [then
commit to git after both are run]
- this is a good way to eliminate any 'versionsBackup' files in between the
steps.

Observations towards the lack of supportability of the 1.x line

1. Observations regarding dependency vulnerability scan:
- 174 dependencies with potential vulnerabilities reported.  Many are tied
to the issues we know/expect but some appear solvable.

2. Observations regarding dependency fresh-ness:
- 293 dependencies with an incremental available.
- 2145 dependencies where the next version is a minor version available.
Many of these are tied to bom versions of cloud components and not worth
fixing but many are addressable.

Thanks again for taking on the RM duties here Ferenc.  You can definitely
make some of these adjustments on the support branch for 1.28.1 and not
wait for a pull request review.  They're just fit and finish for the
release process.  Just tag them to the release JIRA and keep rolling.  If
you have any questions happy to help.




On Wed, Nov 13, 2024 at 7:56 AM Ferenc Kis <briansolo1...@apache.org> wrote:

> Thanks for the feedback.
>
> I am cancelling this release candidate version.
>
> Regards
> Ferenc
>
> On Wed, Nov 13, 2024 at 3:39 PM David Handermann
> <exceptionfact...@apache.org> wrote:
> >
> > Concurring with Joe, the support/nifi-1.28 branch commit to update the
> > version to 1.28.1-SNAPSHOT added the versionsBackup files, so those
> > need to be removed.
> >
> >
> https://github.com/apache/nifi/commit/b124a9a8093eadd82552eea2165a71cd602cbc8e
> >
> > Regards,
> > David Handermann
> >
> > On Wed, Nov 13, 2024 at 8:33 AM Joe Witt <joe.w...@gmail.com> wrote:
> > >
> > > -1
> > >
> > > There appears to be many 'pom.xml.versionsBackup' files in this tree so
> > > perhaps not quite captured at the right point.
> > >
> > > Thanks
> > >
> > > On Wed, Nov 13, 2024 at 5:31 AM Ferenc Kis <briansolo1...@apache.org>
> wrote:
> > >
> > > > Team,
> > > >
> > > > I am pleased to be calling this vote for the source release of Apache
> > > > NiFi 1.28.1.
> > > >
> > > > Please review the following guide for how to verify a release
> > > > candidate build and please use "export VERSION=1.28.1" in
> Verification
> > > > Steps section:
> > > >
> > > >
> > > >
> https://cwiki.apache.org/confluence/display/NIFI/Release+Candidate+Verification
> > > >
> > > > The source being voted on the and the convenience binaries are
> > > > available on the Apache Distribution Repository:
> > > >
> > > > https://dist.apache.org/repos/dist/dev/nifi/nifi-1.28.1
> > > >
> > > > The build artifacts are available on the Apache Nexus Repository:
> > > >
> > > >
> https://repository.apache.org/content/repositories/orgapachenifi-1299
> > > >
> > > > Git Tag: nifi-1.28.1-RC1
> > > > Git Commit ID: 941662b560917f28b6f3fa23c732f8bd62ad77d4
> > > > GitHub Commit Link:
> > > >
> > > >
> https://github.com/apache/nifi/commit/941662b560917f28b6f3fa23c732f8bd62ad77d4
> > > >
> > > > Checksums of nifi-1.28.1-source-release.zip
> > > >
> > > > SHA256:
> 062d225a2f22fedb434865b054ac081a4e96d766d6e2385bd996e5f07303c05e
> > > > SHA512:
> > > >
> 130ba21fa19f630c68256840ed55941c3d29cb55952e1aba8e2f75f93145b826c15ba02412fd025dd10731fc0377a361bf979dede803a9500ca0812b47064501
> > > >
> > > > Release artifacts are signed with the following key:
> > > >
> > > > https://people.apache.org/keys/committer/briansolo1985.asc
> > > >
> > > > KEYS file is available on the Apache Distribution Repository:
> > > >
> > > > https://dist.apache.org/repos/dist/release/nifi/KEYS
> > > >
> > > > Issues resolved for this version: 10
> > > >
> > > >
> > > >
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316020&version=12355265
> > > >
> > > > Release note highlights can be found on the project wiki:
> > > >
> > > >
> > > >
> https://cwiki.apache.org/confluence/display/NIFI/Release+Notes#ReleaseNotes-Version1.28.1
> > > >
> > > > The vote will be open for 72 hours.
> > > >
> > > > Please download the release candidate and evaluate the necessary
> items
> > > > including checking hashes, signatures, build from source, and test.
> > > > Then please vote:
> > > >
> > > > [] +1 Release this package as nifi-1.28.1
> > > > [] +0 no opinion
> > > > [] -1 Do not release this package because...
> > > >
>

Reply via email to