[GitHub] [pinot] siddharthteotia commented on pull request #8991: update-dependencies

[GitBox <gi...@apache.org>]

siddharthteotia commented on PR #8991:
URL: https://github.com/apache/pinot/pull/8991#issuecomment-1183675912

   So what is the conclusion here with this potentially conflicting with ongoing helix upgrade. Are we going to hold off massive dependency upgrades until helix upgrade finishes ?
   
   cc @jackjlli 
   
   > With all those vulnerabilities we are not allowed to push our pinot deployment to higher environments.
   
   @gyokketto  - Just want to clarify what this means. Does it mean we can't do a new Apache release until all of the problems called out in the above comment are fixed ?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org
For additional commands, e-mail: commits-help@pinot.apache.org