Re: [DISCUSS] Immediate dedicated StateFun releases for log4j vulnerability

2021-12-17 Thread Till Rohrmann
+1, Cheers, Till On Thu, Dec 16, 2021 at 8:15 PM Chesnay Schepler wrote: > +1 > > On 16/12/2021 19:30, Igal Shilman wrote: > > Hi All, > > > > Following the recent Apache Flink releases due to the log4j > vulnerability, > > I'd like to propose an immediate StateFun release - 3.1.1. > > This rel

Re: [DISCUSS] Immediate dedicated StateFun releases for log4j vulnerability

2021-12-16 Thread Chesnay Schepler
+1 On 16/12/2021 19:30, Igal Shilman wrote: Hi All, Following the recent Apache Flink releases due to the log4j vulnerability, I'd like to propose an immediate StateFun release - 3.1.1. This release is basically the same as 3.1 but updates the Flink dependency to 1.13.3. Please raise your conc

Re: [DISCUSS] Immediate dedicated StateFun releases for log4j vulnerability

2021-12-16 Thread Seth Wiesman
And I'm happy to help with the release. On Thu, Dec 16, 2021 at 12:55 PM Seth Wiesman wrote: > +1 > > On Thu, Dec 16, 2021 at 12:37 PM Igal Shilman wrote: > >> Hi All, >> >> Following the recent Apache Flink releases due to the log4j vulnerability, >> I'd like to propose an immediate StateFun r

Re: [DISCUSS] Immediate dedicated StateFun releases for log4j vulnerability

2021-12-16 Thread Seth Wiesman
+1 On Thu, Dec 16, 2021 at 12:37 PM Igal Shilman wrote: > Hi All, > > Following the recent Apache Flink releases due to the log4j vulnerability, > I'd like to propose an immediate StateFun release - 3.1.1. > This release is basically the same as 3.1 but updates the Flink dependency > to 1.13.3.

Re: [DISCUSS] Immediate dedicated StateFun releases for log4j vulnerability

2021-12-16 Thread Tzu-Li (Gordon) Tai
+1 On Thu, Dec 16, 2021, 10:30 Igal Shilman wrote: > Hi All, > > Following the recent Apache Flink releases due to the log4j vulnerability, > I'd like to propose an immediate StateFun release - 3.1.1. > This release is basically the same as 3.1 but updates the Flink dependency > to 1.13.3. > > P

[DISCUSS] Immediate dedicated StateFun releases for log4j vulnerability

2021-12-16 Thread Igal Shilman
Hi All, Following the recent Apache Flink releases due to the log4j vulnerability, I'd like to propose an immediate StateFun release - 3.1.1. This release is basically the same as 3.1 but updates the Flink dependency to 1.13.3. Please raise your concerns if any, otherwise we'll proceed with the r