Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [orbit-dev] Late 2021-03 M2 Build / Consuming I-builds
  • From: "Homer, Tony" <tony.homer@xxxxxxxxx>
  • Date: Thu, 28 Jan 2021 03:43:49 +0000
  • Accept-language: en-US
  • Arc-authentication-results: i=1; 1; spf=pass; dmarc=pass action=none; dkim=pass; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed;; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=zHaDfB7hANpky3K/IVXtttuXCvUMGGAUa0Nul1bsjl8=; b=XOWRfBjtHepVY7nva4ZUSh0ydCE6l/8RBUi1U86cpw5eGS2srVf+756tzvSznMDbG7NbMNbWtagf7IjyJRE1cjdRLwbmUFaGupS9LpCKCIj7pLvzzDMwdfFCEGGSeNJYskW+Y40P81lRsdmeuoMRQBY5VlXKvcM8580aiPEP3WN9LLpHXo0mPiSTAZLIYLm+iHNuWUzNyNSrpBmKrKXlVD6AWXk+H2VSMjqqEqxCOe3oKqR7/D0I7U8k7qMT7eocn2r0fbayjASFduaL3y5etjyAyDCKb7KtpXe1lC5GasE3tHxRwo/8oa3YbdC+Nnlcclpiu6Y2u7XwVewM7EvW3A==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector9901;; cv=none; b=lAmH7xAUQTGHCPGRPYs6+zYY1TCyVm5q+1RufILlDxJSYtXZEoufM4s/SFqUEgak9MjtP8n+GG0rO922m5Pq8mGj4j6wZBsJa7wIWFEqmLAo8CFPnMUJo4yuR2hJ2g0cgHQWC/xEq5yvQKIWY3tDKpOKiwdaTaz28hSIkLOTPy7sbVkm85tpwpvQ8gYFpZ8cCcUAHA/Ylxu0WJLTe2BfylW4mE3pHfSCCv1e73+uIjXWZ+42qr5W+rJrpb9LnrvB/v+njFSCLjqDtmeiPElbQ8FI/naxGInGklzuAoUA1oMVMP9Yh7BRxhfzAZ4QQuFje4sedvif40PqmqmGng8uZw==
  • Delivered-to: orbit-dev@xxxxxxxxxxx
  • Ironport-sdr: MJqK/hM4aKWp14mP2MJjcKr0izyw4bk1ktEF5uaYUGxS2yCTgHCFj7HJZFNgSvVkPXK6/MXFz0 WtY3Baxjs/sA==
  • Ironport-sdr: AOV3N0xyaNchLRemFf46xVwzj+VcHQnUHUEtLEsZsV3f5GVtTSKAUJqVUszfJeRJpZJHJKAJt9 YIV0zKBqDkIg==
  • List-archive: <>
  • List-help: <>
  • List-subscribe: <>, <>
  • List-unsubscribe: <>, <>
  • Thread-index: AQHW9SfJjypq9SyLp0SfgbjuZcEnYQ==
  • Thread-topic: [orbit-dev] Late 2021-03 M2 Build / Consuming I-builds
  • User-agent: Microsoft-MacOutlook/16.45.21010502

Here are the change requests.  If anyone has time, will you give them a review?  They are all straightforward version bumps, so hopefully will not take a lot of time.


Update Guava to 30.1

Guava 27.1 is intentionally retained in order to provide transition window.


Update Apache HttpComponents HttpClient to 4.13.5


Update com.fasterxml.jackson to 2.12.1

This one is failing because it depends on 175412.  After that one is merged, this one will pass.



Tony Homer


From: orbit-dev <orbit-dev-bounces@xxxxxxxxxxx> on behalf of Jonah Graham <jonah@xxxxxxxxxxxxxxxx>
Reply-To: Orbit Developer discussion <orbit-dev@xxxxxxxxxxx>
Date: Wednesday, January 27, 2021 at 11:48 AM
To: Orbit Developer discussion <orbit-dev@xxxxxxxxxxx>
Subject: Re: [orbit-dev] Late 2021-03 M2 Build / Consuming I-builds



On Wed., Jan. 27, 2021, 14:01 Homer, Tony, <tony.homer@xxxxxxxxx> wrote:

Here are the Bugzilla entries:
Update Guava to 30.1
Update Apache HttpComponents HttpClient to 4.13.5
Update com.fasterxml.jackson to 2.12.1

I created CQs for some of the above (as mentioned in comments in above entries).
For several of the bundles, CQs already exist, approved for other (non-Orbit) projects.
If I understand correctly, with 2019/2020 IP changes, I don't need to create piggy-back CQs - I can just use the existing CQs directly.
Is that correct?


Yes, that is correct. 


On 1/27/21 , 9:51 AM, "orbit-dev on behalf of Homer, Tony" <orbit-dev-bounces@xxxxxxxxxxx on behalf of tony.homer@xxxxxxxxx> wrote:

    Thanks for this, Roland.

    I intend to update 3 sets of dependencies for which the latest version available in Orbit is vulnerable to CVEs.
    I plan to add Guava 30.1 (retaining 27.1 for now in order to give teams time to update), bump Jackson to 2.12.1 and bump apache http-client to 4.5.13.

    I logged one issue in Bugzilla and will add the others today.
    I hope to get the changes opened tomorrow morning (PST).
    I hope to get some quick reviews so that I can merge these by Friday, then I will follow the steps you provided.

    Tony Homer

    On 1/27/21 , 9:44 AM, "orbit-dev on behalf of Roland Grunberg" <orbit-dev-bounces@xxxxxxxxxxx on behalf of rgrunber@xxxxxxxxxx> wrote:

        Hey all,

        Unfortunately I don't think I'll have time to put together an M2 (S-
        build) so platform has continued using M1. Every change is also
        consumable through the latest I-builds so that is also possible. I'm
        still around to keep our builds in good working order, particularly
        leading up to the final release.

        There also haven't been many changes in Orbit for M2 but if any
        committer is interested, I have instructions at the following link on
        how promote an S-build for M2 :

        If anyone is interested but needs some extra hints/information, feel
        free to contact me.

        Roland Grunberg

        orbit-dev mailing list
        To unsubscribe from this list, visit

    orbit-dev mailing list
    To unsubscribe from this list, visit

orbit-dev mailing list
To unsubscribe from this list, visit

Back to the top