(superset) branch 4-0-release-notes updated: some more TODOs :)

[ru...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

rusackas pushed a commit to branch 4-0-release-notes
in repository https://gitbox.apache.org/repos/asf/superset.git


The following commit(s) were added to refs/heads/4-0-release-notes by this push:
     new aba20fefe6 some more TODOs :)
aba20fefe6 is described below

commit aba20fefe6bd5c1685ea99d8d90eeaa0e3c5aa72
Author: Evan Rusackas <ev...@rusackas.com>
AuthorDate: Tue Mar 19 18:46:21 2024 -0600

    some more TODOs :)
---
 RELEASING/release-notes-4-0/README.md | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/RELEASING/release-notes-4-0/README.md b/RELEASING/release-notes-4-0/README.md
index 65b2e904b5..9f6df26277 100644
--- a/RELEASING/release-notes-4-0/README.md
+++ b/RELEASING/release-notes-4-0/README.md
@@ -103,6 +103,10 @@ As part of the 4.0 approved initiatives, the following features were removed fro
 
 - Redirect API: [#26377](https://github.com/apache/superset/pull/26377) removed the deprecated Redirect API that supported short URLs (`/r`) and the `url` metadata table used to store them that was used before the permalink feature. Users lost the ability to generate R links ~1.5 years ago which seems sufficient time to remove the API.
 
+### Additional deprecations
+
+TODO @rusackas - go through the proposals and make sure we didn't miss anything noteworthy here.
+
 ### Business logic improvements
 
 As part of [[SIP-99] Proposal for correctly handling business logic](https://github.com/apache/superset/issues/25048) (specifically [SIP-99A](https://github.com/apache/superset/issues/25107) and [SIP-99B](https://github.com/apache/superset/issues/25108)), this release contains many improvements to the handling of business logic in Superset, specifically related to SQLAlchemy sessions and transactions. The goal of these efforts is to simplify the code, improve code quality, ensure a consi [...]
@@ -119,10 +123,19 @@ The ECharts version of the Sunburst chart was introduced by [#22833](https://git
 
 ![Sunburst](media/sunburst.png)
 
+### Centralized React Storybook
+
+TODO @rusackas
+
+### Notes on security
+
+TODO @rusackas @dpgaspar to note any CVEs from prior versions that are patched and public as of this release.
+
 ### Some cool stats
 
 - ~15K lines of code were removed by PRs related to 4.0 proposals
 - We reduced the number of NPM packages vulnerabilities by 72%
   - 3.1: 90 vulnerabilities (42 moderate, 34 high, 14 critical)
   - 4.0: 25 vulnerabilities (16 moderate, 8 high, 1 critical)
+- TODO @dpgaspar @rusackas stats on backend dependency CVEs - hopefully none?
 - 40+ dependency changes (upgrades, additions, and removals)