You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@kylin.apache.org by kangkaisen <ka...@apache.org> on 2018/06/25 07:49:45 UTC
[VOTE] Release apache-kylin-2.3.2 (RC1)
Hi all,
I have created a build for Apache Kylin 2.3.2, release candidate 1.
Changes highlights:
[KYLIN-3372] - Upgrade jackson-databind version due to security concerns
[KYLIN-3388] - Data may become not correct if mappers fail during the
redistribute step, "distribute by rand()"
[KYLIN-3400] - WipeCache and createCubeDesc causes deadlock
[KYLIN-3401] - The current using zip compress tool has an arbitrary file
write vulnerability
Thanks to everyone who has contributed to this release.
Here are release notes:
https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12343423&projectId=12316121
The commit to being voted upon:
https://github.com/apache/kylin/commit/7d9c001fa9332470f0ba9ac91c2fb9a4b0891651
Its hash is 7d9c001fa9332470f0ba9ac91c2fb9a4b0891651.
The artifacts to be voted on are located here:
https://dist.apache.org/repos/dist/dev/kylin/apache-kylin-2.3.2-rc1/
The hashes of the artifacts are as follows:
apache-kylin-2.3.2-source-release.zip.md5 f6babf000e247447840d323838365925
apache-kylin-2.3.2-source-release.zip.sha1
3a7681ad28ecbb6f437a4204bd92d946a5f3daa8
A staged Maven repository is available for review at:
https://repository.apache.org/content/repositories/orgapachekylin-1051/
Release artifacts are signed with the following key:
https://people.apache.org/keys/committer/kangkaisen.asc
Please vote on releasing this package as Apache Kylin 2.3.2.
The vote is open for the next 72 hours and passes if a majority of
at least three +1 PPMC votes are cast.
[ ] +1 Release this package as Apache Kylin 2.3.2
[ ] 0 I don't feel strongly about it, but I'm okay with the release
[ ] -1 Do not release this package because...
Here is my vote:
+1
--
Best regards,
KaiSen Kang 康凯森
--
Sent from: http://apache-kylin.74782.x6.nabble.com/
Re: [VOTE] Release apache-kylin-2.3.2 (RC1)
Posted by ShaoFeng Shi <sh...@apache.org>.
You're welcome Kaisen; It is a little hard to make the release first time.
We will wait for the RC2. Thanks for your effort!
2018-06-26 14:06 GMT+08:00 kangkaisen <ka...@apache.org>:
> Hi, Shaofeng. Thanks for your reminder.
>
> This Release vote is canceled.
>
> When I resolve the released source package issue, I will vote
> apache-kylin-2.3.2 (RC2).
>
> --
> Sent from: http://apache-kylin.74782.x6.nabble.com/
>
--
Best regards,
Shaofeng Shi 史少锋
Re: [VOTE] Release apache-kylin-2.3.2 (RC1)
Posted by kangkaisen <ka...@apache.org>.
Hi, Shaofeng. Thanks for your reminder.
This Release vote is canceled.
When I resolve the released source package issue, I will vote
apache-kylin-2.3.2 (RC2).
--
Sent from: http://apache-kylin.74782.x6.nabble.com/
Re: [VOTE] Release apache-kylin-2.3.2 (RC1)
Posted by ShaoFeng Shi <sh...@apache.org>.
Hi kaisen,
The "apache-kylin-2.3.2-source-release.zip" size is 284MB, which is
abnormal (I wasn't able to download it successfully). If you look at a
previously released source package, its size won't be more than 10MB.
Please double check.
2018-06-25 21:17 GMT+08:00 Yerui Sun <su...@gmail.com>:
> +1 binding
>
> 2018-06-25 15:49 GMT+08:00 kangkaisen <ka...@apache.org>:
> > Hi all,
> >
> > I have created a build for Apache Kylin 2.3.2, release candidate 1.
> >
> > Changes highlights:
> > [KYLIN-3372] - Upgrade jackson-databind version due to security concerns
> > [KYLIN-3388] - Data may become not correct if mappers fail during the
> > redistribute step, "distribute by rand()"
> > [KYLIN-3400] - WipeCache and createCubeDesc causes deadlock
> > [KYLIN-3401] - The current using zip compress tool has an arbitrary file
> > write vulnerability
> >
> > Thanks to everyone who has contributed to this release.
> > Here are release notes:
> > https://issues.apache.org/jira/secure/ReleaseNote.jspa?
> version=12343423&projectId=12316121
> >
> > The commit to being voted upon:
> > https://github.com/apache/kylin/commit/7d9c001fa9332470f0ba9ac91c2fb9
> a4b0891651
> >
> > Its hash is 7d9c001fa9332470f0ba9ac91c2fb9a4b0891651.
> >
> > The artifacts to be voted on are located here:
> > https://dist.apache.org/repos/dist/dev/kylin/apache-kylin-2.3.2-rc1/
> >
> > The hashes of the artifacts are as follows:
> > apache-kylin-2.3.2-source-release.zip.md5 f6babf000e247447840d3238383659
> 25
> > apache-kylin-2.3.2-source-release.zip.sha1
> > 3a7681ad28ecbb6f437a4204bd92d946a5f3daa8
> >
> > A staged Maven repository is available for review at:
> > https://repository.apache.org/content/repositories/orgapachekylin-1051/
> >
> > Release artifacts are signed with the following key:
> > https://people.apache.org/keys/committer/kangkaisen.asc
> >
> > Please vote on releasing this package as Apache Kylin 2.3.2.
> >
> > The vote is open for the next 72 hours and passes if a majority of
> > at least three +1 PPMC votes are cast.
> >
> > [ ] +1 Release this package as Apache Kylin 2.3.2
> > [ ] 0 I don't feel strongly about it, but I'm okay with the release
> > [ ] -1 Do not release this package because...
> >
> >
> > Here is my vote:
> >
> > +1
> >
> > --
> > Best regards,
> >
> > KaiSen Kang 康凯森
> >
> > --
> > Sent from: http://apache-kylin.74782.x6.nabble.com/
>
--
Best regards,
Shaofeng Shi 史少锋
Re: [VOTE] Release apache-kylin-2.3.2 (RC1)
Posted by Yerui Sun <su...@gmail.com>.
+1 binding
2018-06-25 15:49 GMT+08:00 kangkaisen <ka...@apache.org>:
> Hi all,
>
> I have created a build for Apache Kylin 2.3.2, release candidate 1.
>
> Changes highlights:
> [KYLIN-3372] - Upgrade jackson-databind version due to security concerns
> [KYLIN-3388] - Data may become not correct if mappers fail during the
> redistribute step, "distribute by rand()"
> [KYLIN-3400] - WipeCache and createCubeDesc causes deadlock
> [KYLIN-3401] - The current using zip compress tool has an arbitrary file
> write vulnerability
>
> Thanks to everyone who has contributed to this release.
> Here are release notes:
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12343423&projectId=12316121
>
> The commit to being voted upon:
> https://github.com/apache/kylin/commit/7d9c001fa9332470f0ba9ac91c2fb9a4b0891651
>
> Its hash is 7d9c001fa9332470f0ba9ac91c2fb9a4b0891651.
>
> The artifacts to be voted on are located here:
> https://dist.apache.org/repos/dist/dev/kylin/apache-kylin-2.3.2-rc1/
>
> The hashes of the artifacts are as follows:
> apache-kylin-2.3.2-source-release.zip.md5 f6babf000e247447840d323838365925
> apache-kylin-2.3.2-source-release.zip.sha1
> 3a7681ad28ecbb6f437a4204bd92d946a5f3daa8
>
> A staged Maven repository is available for review at:
> https://repository.apache.org/content/repositories/orgapachekylin-1051/
>
> Release artifacts are signed with the following key:
> https://people.apache.org/keys/committer/kangkaisen.asc
>
> Please vote on releasing this package as Apache Kylin 2.3.2.
>
> The vote is open for the next 72 hours and passes if a majority of
> at least three +1 PPMC votes are cast.
>
> [ ] +1 Release this package as Apache Kylin 2.3.2
> [ ] 0 I don't feel strongly about it, but I'm okay with the release
> [ ] -1 Do not release this package because...
>
>
> Here is my vote:
>
> +1
>
> --
> Best regards,
>
> KaiSen Kang 康凯森
>
> --
> Sent from: http://apache-kylin.74782.x6.nabble.com/