+1 Thanks Rui, we should eliminate the GPL dependency ASAP.
-- Matteo Merli <matteo.me...@gmail.com> On Thu, Mar 3, 2022 at 2:08 AM Rui Fu <r...@apache.org> wrote: > > Hi everyone, > > I would like to start a discussion here about starting a new release of > pulsar-client-go v0.8.1. Recently we have some of dependencies updated PRs > from the community, [1] is bumping `github.com/beefsack/go-rate` to the > latest version, which migrates the license from GPL to MIT. [2] is bumping ` > github.com/prometheus/client_golang` to address the CVE-2022-21698. For > more details, please check the links below. > > As the v0.8.0 was just released weeks ago and the next release will start > about 2 month later, I think we should start the release of v0.8.1. > > [1]: https://github.com/apache/pulsar-client-go/pull/735 > [2]: https://github.com/apache/pulsar-client-go/pull/738 > > -- > > Best Regards, > > Rui Fu
