[DISCUSS] Someone to update 3rd-party libraries used by GEODE

[Mark Hanson <mh...@pivotal.io>]

Hello Apache Geode Community, 

It is time to update the 3rd-party libraries used by GEODE. To get that done, I am requesting a volunteer to take on the responsibility.

This consists of updates going through the libraries we depend on and updating them to the latest version that works with our code.

We would need to get this done within the next week or two, so that we have time to shake out issues before the next release.

Regards,
Mark Hanson on behalf of the Apache Geode team

Re: [DISCUSS] Someone to update 3rd-party libraries used by GEODE

[Owen Nichols <on...@pivotal.io>]

Thanks Mark for getting 1.11.0 shipped & sending out this reminder!  Anthony and I will volunteer this time around.

Bumping dependencies helps ensure Geode is using the most secure and reliable libraries, but nevertheless, this type of change can sometimes have unobvious side-effects that take some time to uncover.  With only a month left before we are scheduled to cut our release/1.12 branch, we already need to start thinking about stabilizing develop.

We have split the updates into two PRs for now:

“Easy" ones: #4537 <https://github.com/apache/geode/pull/4537>
Trickier ones: #4542 <https://github.com/apache/geode/pull/4542>

Some PR checks are still failing on the 2nd PR.  Any review comments are appreciated.  Hopefully we can get one or both merged soon.


> On Jan 3, 2020, at 11:01 AM, Mark Hanson <mh...@pivotal.io> wrote:
> 
> Hello Apache Geode Community, 
> 
> It is time to update the 3rd-party libraries used by GEODE. To get that done, I am requesting a volunteer to take on the responsibility.
> 
> This consists of updates going through the libraries we depend on and updating them to the latest version that works with our code.
> 
> We would need to get this done within the next week or two, so that we have time to shake out issues before the next release.
> 
> Regards,
> Mark Hanson on behalf of the Apache Geode team
>