Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [orbit-dev] Late 2021-03 M2 Build / Consuming I-builds
  • From: "Homer, Tony" <tony.homer@xxxxxxxxx>
  • Date: Wed, 27 Jan 2021 17:51:50 +0000
  • Accept-language: en-US
  • Arc-authentication-results: i=1; 1; spf=pass; dmarc=pass action=none; dkim=pass; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed;; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=KcwUVm4UCV9W22s0N/d6iP8Ogyw+83Sfwbw17LWzxS0=; b=BE8Ki/UYCSxLH7eq+ZMBJdovBGe1BvE7ZladFyyI88jpmXyr2PaaKcZq1c3z7Dikxo6I2qAJaE3h8PcnMSNaCm5TmeQdfYsrCrWYTERmoYDyzu8lB48fcLhNZFWfQJk+aDaiG3x8TBy5djxVOn8mkFxCHh6D/NfbPUPJ2Hz7z5YvchJdMZjW+YBGqSN1xaouvINiODHSgjkOM7v3ut4EqtlG8kVDQTFJUiRNTfF4GhvsyKTp/tPxY3FEOu8jQXJQSLwN+N4Tsjsp0i9X2STy5lQBOKXnNYYvgopSDQEe6QN+ObmAr13XBmAdgYyxzA64+ifLgZCwg0cxe2olEonwkQ==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector9901;; cv=none; b=UksDFkmEybXdfHAVdIwk0SX63g49xWwvP9PK6V6IrdvwCLgfCcEfG2sX/hJ2ItFuoxeHqo4Pi7ANRB2lcPgsydPZMunmtyn8QnxhGZNMR64d4C7bwr//mhNczsqxDeheVlPV/YpEQYZ+gZSEAlZ6gcHwMU2igFcdjb8/RordKD2MqZYXfxW9x6bUjxT+IMMzCNOZQp9OcXr9w/qXE5nBriBAZbsZfGyK19rbPNi9+QDX1hhrKTwgav1tfXk5K/gcFp4Q5f44QCj1f/6Ws/h8dewV55akT+bj4xMajKKUBqC77sR9JqjShUFHQg9H1PHkc8hkM6vX+kjCC+DC0/EuQA==
  • Delivered-to: orbit-dev@xxxxxxxxxxx
  • Ironport-sdr: K2jEKDe32PS95EqiaIMVarYm7sDWXrW7Cw/La2C92hN6hN+eJcBC2SsFCT+W2XUqhdcouZfSfo q4WXutwx/bmg==
  • Ironport-sdr: IaZI9cQzkJV2QdsghoWuwRcGsi57ao/08K17ycTS/mrIP3TQ6vDpnEK1S+trr6d80GRlFcYlQf TIxU/l8U0wbQ==
  • List-archive: <>
  • List-help: <>
  • List-subscribe: <>, <>
  • List-unsubscribe: <>, <>
  • Thread-index: AQHW9NUXSsydxZO/o02V4cYltf8gUg==
  • Thread-topic: [orbit-dev] Late 2021-03 M2 Build / Consuming I-builds
  • User-agent: Microsoft-MacOutlook/16.45.21010502

Thanks for this, Roland.

I intend to update 3 sets of dependencies for which the latest version available in Orbit is vulnerable to CVEs.
I plan to add Guava 30.1 (retaining 27.1 for now in order to give teams time to update), bump Jackson to 2.12.1 and bump apache http-client to 4.5.13.

I logged one issue in Bugzilla and will add the others today.
I hope to get the changes opened tomorrow morning (PST).
I hope to get some quick reviews so that I can merge these by Friday, then I will follow the steps you provided.

Tony Homer

´╗┐On 1/27/21 , 9:44 AM, "orbit-dev on behalf of Roland Grunberg" <orbit-dev-bounces@xxxxxxxxxxx on behalf of rgrunber@xxxxxxxxxx> wrote:

    Hey all,

    Unfortunately I don't think I'll have time to put together an M2 (S-
    build) so platform has continued using M1. Every change is also
    consumable through the latest I-builds so that is also possible. I'm
    still around to keep our builds in good working order, particularly
    leading up to the final release.

    There also haven't been many changes in Orbit for M2 but if any
    committer is interested, I have instructions at the following link on
    how promote an S-build for M2 :

    If anyone is interested but needs some extra hints/information, feel
    free to contact me.

    Roland Grunberg

    orbit-dev mailing list
    To unsubscribe from this list, visit

Back to the top