[GitHub] [spark] dongjoon-hyun edited a comment on pull request #33656: [SPARK-36432][BUILD] Upgrade Jetty version to 9.4.43

[GitBox <gi...@apache.org>]

dongjoon-hyun edited a comment on pull request #33656:
URL: https://github.com/apache/spark/pull/33656#issuecomment-894448698


   > I don't see a merge button, can you please do the merging. We would like to get a SNAPSHOT release as soon as possible to test in our end.
   
   It seems that you are really new to the open source community or GitHub repositories. :) Let me explain the process.
   1. This is not your personal GitHub repository. Like you cannot merge someone-else's GitHub repository, the merge button are only allowed for the repository owners.
   2. Every Apache community has a group of committers. Only committers have the write permissions. For example, you are here Apache Spark community whose committers are enumerated here.
      - https://spark.apache.org/committers.html
   3. Although I'm a committer, I pinged two committers (at least) who may be interested in CVE or this PR. Since Apache community members lives across the world, we should wait until Asian people wake up. In general, Apache Foundation recommends 72 hours as a minimum time to build a consensus.
   
   If you are urgent, you had better build and use locally. It's not good to rely on Apache SNAPSHOT repo because it's changed by other commits too. It's out of your control. For example, we reverted some commits if we found some issues like the following. There is no guarantee with our daily snapshots.
   
   - https://github.com/apache/spark/commit/e17612d0bfa1b1dc719f6f2c202e2a4ea7870ff1


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org