Re: [VOTE] Release Apache Cassandra 2.0.13

[Sylvain Lebresne]

+1

On Fri, Mar 13, 2015 at 3:00 AM, Jonathan Ellis  wrote:

> +1
>
> On Thu, Mar 12, 2015 at 8:55 PM, Jake Luciani  wrote:
>
> > I propose the following artifacts for release as 2.0.13.
> >
> > sha1: 20593c24a9f8c07aff8f848f4b5774ed88ea4687
> > Git:
> >
> http://git-wip-us.apache.org/repos/asf?p=cassandra.git;a=shortlog;h=refs/tags/2.0.13-tentative
> > Artifacts:
> >
> https://repository.apache.org/content/repositories/orgapachecassandra-1047/org/apache/cassandra/apache-cassandra/2.0.13/
> > Staging repository:
> >
> https://repository.apache.org/content/repositories/orgapachecassandra-1047/
> >
> > The artifacts as well as the debian package are also available here:
> > http://people.apache.org/~jake
> >
> > The vote will be open for 72 hours (longer if needed).
> >
> > [1]: http://goo.gl/ek6i06 (CHANGES.txt)
> > [2]: http://goo.gl/5JIY9g (NEWS.txt)
> >
>
>
>
> --
> Jonathan Ellis
> Project Chair, Apache Cassandra
> co-founder, http://www.datastax.com
> @spyced
>

Re: [VOTE] Release Apache Cassandra 2.0.13

[roy du]

+1

发自我的 iPhone

> 在 2015年3月13日，15:56，Sylvain Lebresne  写道：
> 
> +1
> 
>> On Fri, Mar 13, 2015 at 3:00 AM, Jonathan Ellis  wrote:
>> 
>> +1
>> 
>>> On Thu, Mar 12, 2015 at 8:55 PM, Jake Luciani  wrote:
>>> 
>>> I propose the following artifacts for release as 2.0.13.
>>> 
>>> sha1: 20593c24a9f8c07aff8f848f4b5774ed88ea4687
>>> Git:
>> http://git-wip-us.apache.org/repos/asf?p=cassandra.git;a=shortlog;h=refs/tags/2.0.13-tentative
>>> Artifacts:
>> https://repository.apache.org/content/repositories/orgapachecassandra-1047/org/apache/cassandra/apache-cassandra/2.0.13/
>>> Staging repository:
>> https://repository.apache.org/content/repositories/orgapachecassandra-1047/
>>> 
>>> The artifacts as well as the debian package are also available here:
>>> http://people.apache.org/~jake
>>> 
>>> The vote will be open for 72 hours (longer if needed).
>>> 
>>> [1]: http://goo.gl/ek6i06 (CHANGES.txt)
>>> [2]: http://goo.gl/5JIY9g (NEWS.txt)
>> 
>> 
>> 
>> --
>> Jonathan Ellis
>> Project Chair, Apache Cassandra
>> co-founder, http://www.datastax.com
>> @spyced
>> 

Re: [VOTE] Release Apache Cassandra 2.0.13

[Brandon Williams]

+1

On Thu, Mar 12, 2015 at 8:55 PM, Jake Luciani  wrote:

> I propose the following artifacts for release as 2.0.13.
>
> sha1: 20593c24a9f8c07aff8f848f4b5774ed88ea4687
> Git:
> http://git-wip-us.apache.org/repos/asf?p=cassandra.git;a=shortlog;h=refs/tags/2.0.13-tentative
> Artifacts:
> https://repository.apache.org/content/repositories/orgapachecassandra-1047/org/apache/cassandra/apache-cassandra/2.0.13/
> Staging repository:
> https://repository.apache.org/content/repositories/orgapachecassandra-1047/
>
> The artifacts as well as the debian package are also available here:
> http://people.apache.org/~jake
>
> The vote will be open for 72 hours (longer if needed).
>
> [1]: http://goo.gl/ek6i06 (CHANGES.txt)
> [2]: http://goo.gl/5JIY9g (NEWS.txt)
>

Question on updating Cassandra dependencies

[Joe Fasano]

Hello All,

I have been told by my team that some of the cassandra dependencies have some 
vulnerabilities and
should be upgraded.  Specifically,
Joda Time 1.6 should be upgraded to 2.7
Jackson 1.9.2 should be upgraded to 1.9.13

Is there any schedule or process of getting Cassandra updates to include 
updated dependencies?


Thanks,
joe


Joe Fasano
Sr. Development Manager
Symantec Corporation

Improving on release quality by iterating on our definition of done

[Ariel Weisberg]

Hi,

I wrote a doc 

 expounding on how tightening up our definition of when a ticket is done and 
merged can be used as a means of improving release quality.

This is meant as a starting point for discussion where we can come up with the 
definition we are going to use today and the process by which we will evolve 
that definition as we gain new testing capabilities and understanding.

This is targeted and dev and not QA and it’s important that everyone read (and 
comment if desired) because whatever we decide on is going to impact/bind 
everyone. Let’s start with an email discussion and we can do a hangout if that 
seems desirable.

Thanks,
Ariel

Re: Question on updating Cassandra dependencies

[Paul Brown]

Wow.  It would be great if the Jackson dep could move up to 2.x.  We'd even
be willing to provide a PR for it.

On Fri, Mar 13, 2015 at 12:22 PM, Joe Fasano 
wrote:

> Hello All,
>
> I have been told by my team that some of the cassandra dependencies have
> some vulnerabilities and
> should be upgraded.  Specifically,
> Joda Time 1.6 should be upgraded to 2.7
> Jackson 1.9.2 should be upgraded to 1.9.13
>
> Is there any schedule or process of getting Cassandra updates to include
> updated dependencies?
>
>
> Thanks,
> joe
>
>
> Joe Fasano
> Sr. Development Manager
> Symantec Corporation
>
>
>

Re: Question on updating Cassandra dependencies

[Aleksey Yeschenko]

We don’t upgrade dependencies in minor C* releases, so 2.0 and 2.1 will have to 
stick to what’s already there.

Feel free to open a JIRA issue for C* 3.0 to deal with upgrading all the 
dependencies, though. Just don’t create a PR - we cannot accept them. Just 
leave a comment with a link to your GH branch with the changes in JIRA.

Thanks.

-- 
AY

On March 13, 2015 at 15:26:47, Paul Brown (paulrbr...@gmail.com) wrote:

Wow. It would be great if the Jackson dep could move up to 2.x. We'd even  
be willing to provide a PR for it.  

On Fri, Mar 13, 2015 at 12:22 PM, Joe Fasano   
wrote:  

> Hello All,  
>  
> I have been told by my team that some of the cassandra dependencies have  
> some vulnerabilities and  
> should be upgraded. Specifically,  
> Joda Time 1.6 should be upgraded to 2.7  
> Jackson 1.9.2 should be upgraded to 1.9.13  
>  
> Is there any schedule or process of getting Cassandra updates to include  
> updated dependencies?  
>  
>  
> Thanks,  
> joe  
>  
>  
> Joe Fasano  
> Sr. Development Manager  
> Symantec Corporation  
>  
>  
>  

Re: Question on updating Cassandra dependencies

[Joe Fasano]

From blogs I read that the estimate for release of 3.0 is April 2015.

I'm not familiar with opening a JIRA, but would be great to open a general
incident for updating all dependencies in 3.0.

joe


On 3/13/2015 3:30 PM, Aleksey Yeschenko wrote:

We don’t upgrade dependencies in minor C* releases, so 2.0 and 2.1 will have to 
stick to what’s already there.

Feel free to open a JIRA issue for C* 3.0 to deal with upgrading all the 
dependencies, though. Just don’t create a PR - we cannot accept them. Just 
leave a comment with a link to your GH branch with the changes in JIRA.

Thanks.

--
AY

On March 13, 2015 at 15:26:47, Paul Brown (paulrbr...@gmail.com) wrote:

Wow. It would be great if the Jackson dep could move up to 2.x. We'd even
be willing to provide a PR for it.

On Fri, Mar 13, 2015 at 12:22 PM, Joe Fasano 
wrote:


Hello All,
  
I have been told by my team that some of the cassandra dependencies have

some vulnerabilities and
should be upgraded. Specifically,
Joda Time 1.6 should be upgraded to 2.7
Jackson 1.9.2 should be upgraded to 1.9.13
  
Is there any schedule or process of getting Cassandra updates to include

updated dependencies?
  
  
Thanks,

joe
  
  
Joe Fasano

Sr. Development Manager
Symantec Corporation