[ANNOUNCE] Gerrit 3.9.8

[syntonyze]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Gerrit version 3.9.8 is now available.

Includes security fixes;
please see the release notes for details.

Release Notes:
https://www.gerritcodereview.com/3.9.html#398

Documentation:
http://gerrit-documentation.storage.googleapis.com/Documentation/3.9.8/index.html


Log of changes since 3.9.7:
https://gerrit.googlesource.com/gerrit/+log/v3.9.7..v3.9.8?no-merges

Download:
https://gerrit-releases.storage.googleapis.com/gerrit-3.9.8.war

SHA1:
407264db9cab0f5730ae05033752cb0c8820a1b4

SHA256:
2ebfee1d2ed0534352d4f2bb57f55643df4ad944e294120da79093a46c89efd6

MD5:
9195140ae24877bb681855eb43918c12

Maintainers' public keys:
https://www.gerritcodereview.com/releases/public-keys.md

-----BEGIN PGP SIGNATURE-----
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=3ioi
-----END PGP SIGNATURE-----

[Clark Boylan]

On Tue, Nov 26, 2024 at 10:24 AM syntonyze <synt...@gmail.com> wrote:
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> Gerrit version 3.9.8 is now available.
>
> Includes security fixes;
> please see the release notes for details.

Looking at the release notes there were security fixes included in
3.9.7, but I'm not seeing any for 3.9.8. Can you clarify if this is
the case for 3.9.8 and update the release notes if this is the case?

>
> Release Notes:
> https://www.gerritcodereview.com/3.9.html#398

The hosted release notes don't seem to have been updated yet. The new
release notes can be found in the source code instead:
https://gerrit.googlesource.com/homepage/+/d5554683c0f58a146e3b093a2628dc2ff97c22ff/pages/site/releases/3.9.md

> --
> --
> To unsubscribe, email repo-discuss...@googlegroups.com
> More info at http://groups.google.com/group/repo-discuss?hl=en
>
> ---
> You received this message because you are subscribed to the Google Groups "Repo and Gerrit Discussion" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to repo-discuss...@googlegroups.com.
> To view this discussion visit https://groups.google.com/d/msgid/repo-discuss/CACv40UxWqcf3-ztkSbco3M6vftHcLEG%2BAMUqoGzsyB9vTeA1vw%40mail.gmail.com.

[Luca Milanesio]

On 26 Nov 2024, at 18:56, Clark Boylan <clark....@gmail.com> wrote:

On Tue, Nov 26, 2024 at 10:24 AM syntonyze <synt...@gmail.com> wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Gerrit version 3.9.8 is now available.

Includes security fixes;
please see the release notes for details.

Looking at the release notes there were security fixes included in
3.9.7, but I'm not seeing any for 3.9.8. Can you clarify if this is
the case for 3.9.8 and update the release notes if this is the case?

I don’t see security fixes either.

Release Notes:
https://www.gerritcodereview.com/3.9.html#398

The hosted release notes don't seem to have been updated yet. The new
release notes can be found in the source code instead:
https://gerrit.googlesource.com/homepage/+/d5554683c0f58a146e3b093a2628dc2ff97c22ff/pages/site/releases/3.9.md

Unfortunately, the publishing of the homepage is quite slow, as we had to introduce some extra 30s sleep between plugins info publishing (see [1]).

We have around 170 plugins, so if we do the maths, it takes *no less* than 85 mins to publish the home page.

I will ping the mailing list once the publication is done.

Luca.

[1] https://gerrit.googlesource.com/homepage/+/57bc8c5808cbebf085ad80d5e38059e0f97bed13%5E%21/#F0

To view this discussion visit https://groups.google.com/d/msgid/repo-discuss/CAAcH74jdhbB53maRnGtyr0o7sEa2_5GxTYXydRx5%2BQZcUgr5bg%40mail.gmail.com.

[Luca Milanesio]

> On 26 Nov 2024, at 21:24, Luca Milanesio <luca.mi...@gmail.com> wrote:
>
>
>
>> On 26 Nov 2024, at 18:56, Clark Boylan <clark....@gmail.com> wrote:
>>
>> On Tue, Nov 26, 2024 at 10:24 AM syntonyze <synt...@gmail.com> wrote:
>>>
>>> -----BEGIN PGP SIGNED MESSAGE-----
>>> Hash: SHA512
>>>
>>> Gerrit version 3.9.8 is now available.
>>>
>>> Includes security fixes;
>>> please see the release notes for details.
>>
>> Looking at the release notes there were security fixes included in
>> 3.9.7, but I'm not seeing any for 3.9.8. Can you clarify if this is
>> the case for 3.9.8 and update the release notes if this is the case?
>
> I don’t see security fixes either.
>
>>
>>>
>>> Release Notes:
>>> https://www.gerritcodereview.com/3.9.html#398
>>
>> The hosted release notes don't seem to have been updated yet. The new
>> release notes can be found in the source code instead:
>> https://gerrit.googlesource.com/homepage/+/d5554683c0f58a146e3b093a2628dc2ff97c22ff/pages/site/releases/3.9.md
>
> Unfortunately, the publishing of the homepage is quite slow, as we had to introduce some extra 30s sleep between plugins info publishing (see [1]).
> We have around 170 plugins, so if we do the maths, it takes *no less* than 85 mins to publish the home page.
>
> I will ping the mailing list once the publication is done.

The release notes are now available at https://www.gerritcodereview.com/3.9.html#398

Luca.

[Luca Milanesio]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Binary packages (Deb / Rpm) of Gerrit version 3.9.8 have been released
=========================================================================

How to install/upgrade: 3.9.8
*****************************

If you have a previous version of Gerrit 3.x installed via native packages:

(on Debian / Ubuntu)
apt-get update && apt-get install gerrit=3.9.8-1

(on AlmaLinux / RedHat)
yum clean all && yum install gerrit-3.9.8-1

(on Fedora)
dnf clean all && dnf install gerrit-3.9.8-1

If it is a new installation and you don't have the GerritForge repositories
configured, or if you are upgrading to ARM-64, please follow the instructions at:
https://gitenterprise.me/2022/11/23/arm-64-welcomes-gerrit-code-review/

Docker images
*************

Gerrit is distributed on DockerHub at:
https://hub.docker.com/r/gerritcodereview/gerrit/

The following tags have been published for amd64 and arm64:
3.9.8 => 3.9.8-almalinux9
3.9.8-almalinux9
3.9.8-ubuntu22

More information on how to use Gerrit Docker image for testing, staging, and production at:
https://gerrit.googlesource.com/docker-gerrit

MacOS native package
********************

MacOS Gerrit native installer is available for download at:

https://gerritforge.com/gerrit/mac/gerrit-installer-3.9.8.pkg

SHA1:
f61de5fff30e2ad2bce9623330a891583ca34de9

SHA256:
71c500169d5e5ec02a59702c9827c7faead57fa2aa9c08299d826ef572074731

-----BEGIN PGP SIGNATURE-----
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=DUbr
-----END PGP SIGNATURE-----