Re: [VOTE] 3.8.1 RC0

2024-10-17 Thread Josep Prat
Hi all, I'm cancelling this vote and I'll generate a new RC soon. Best, On Wed, Oct 16, 2024 at 5:39 PM Josep Prat wrote: > Dependency update is on the way: > https://github.com/apache/kafka/pull/17517 > Once merged, I'll cherry-pick it to 3.8, 3.7 and 3.9 > > Best, > > On Wed, Oct 16, 2024 at

Re: [VOTE] 3.8.1 RC0

2024-10-16 Thread Josep Prat
Dependency update is on the way: https://github.com/apache/kafka/pull/17517 Once merged, I'll cherry-pick it to 3.8, 3.7 and 3.9 Best, On Wed, Oct 16, 2024 at 5:26 PM Chia-Ping Tsai wrote: > > If I understand your comment correctly, we can't yet update the > dependencies, right? We should wait

Re: [VOTE] 3.8.1 RC0

2024-10-16 Thread Chia-Ping Tsai
> If I understand your comment correctly, we can't yet update the dependencies, right? We should wait for 9.4.57. I double check the fix (https://github.com/jetty/jetty.project/pull/12012) and we don't need to wait for 9.4.57 as the fix of `CVE-2024-6763` will not be backported to 9.4.x ... CVE-2

Re: [VOTE] 3.8.1 RC0

2024-10-16 Thread Josep Prat
Hi Chia-Ping, This issue was created between me pushing the tag and finishing all the associated tasks for the RC. Nice catch! If I understand your comment correctly, we can't yet update the dependencies, right? We should wait for 9.4.57. Best, -- Josep Prat Open Source Engineeri

Re: [VOTE] 3.8.1 RC0

2024-10-16 Thread Chia-Ping Tsai
hi Josep I just notice https://issues.apache.org/jira/browse/KAFKA-17807 which want to fix the CVEs. Should we include it in 3.8.1? Best, Chia-Ping On 2024/10/16 08:21:02 Josep Prat wrote: > Hello Kafka users, developers and client-developers, > > This is the first candidate for release of Apa

[VOTE] 3.8.1 RC0

2024-10-16 Thread Josep Prat
Hello Kafka users, developers and client-developers, This is the first candidate for release of Apache Kafka 3.8.1. This is a bugfix release with several fixes. Release notes for the 3.8.1 release: https://dist.apache.org/repos/dist/dev/kafka/3.8.1-rc0/RELEASE_NOTES.html Please download, t