[GitHub] [arrow] zeroshade commented on pull request #13322: ARROW-16759: [Go] update testify to get security patch for gopkg.in/yaml.v3 (v7)

[GitBox <gi...@apache.org>]

zeroshade commented on PR #13322:
URL: https://github.com/apache/arrow/pull/13322#issuecomment-1151442679

   @dominicbarnes Please run `go mod tidy` in the directory so that it properly updates the `go.sum` file also and add that to this PR. You can also change this to merge to master, and we can cherry-pick the change into the other tagged release branches for those patch releases.
   
   As for backporting the change to the previous versions, can you send an email to the arrow dev mailing list to propose patch releases of v6.0.2, v7.0.1, and v8.0.1? Link this PR in the email please. Unfortunately the release process, even for patch releases like this, is still a manual process that needs to get approved by the PMC, so the best route here would be to bring the discussion up there and then we can move forward. Thanks!


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org