0.20.1 point release request

[Robert Young]

Hi all!

Putting on my IBM/RedHat hat for a moment. We have an LTS version of a product built on kroxylicious 0.20.0 and would be keen to have a point release of 0.20.x upstream to address some bugs and freshen up the dependencies. Particularly bumping JOSDK to 5.2.5 to get a fix for this https://github.com/operator-framework/java-operator-sdk/issues/2978

Are you happy to put out an 0.20.1 release?

Thanks,
Rob Young

[Sam Barker]

Hi Rob, 

Thanks for starting the conversation. We talked about this on the community call on the 18th of June. As part of that I said I'd write up the policy around this: see https://github.com/kroxylicious/kroxylicious.github.io/pull/262 

I don't have any objections to a 0.20.1 release, so feel free to get the ball rolling. 

Do you/should we start an issue listing all the things that we want to bump in that release?

Sam

--
You received this message because you are subscribed to the Google Groups "kroxylicious-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to kroxylicious-d...@googlegroups.com.
To view this discussion, visit https://groups.google.com/d/msgid/kroxylicious-dev/CAFxMxj1G_%2BGq4W_LmzZVTkxEdsuV9TcHKT90i4TnpTLbkdFy7g%40mail.gmail.com.

[Keith W]

Here's an issue enumerating the CVE fixes (production dependencies, with CVE score >= 5.0)

https://github.com/kroxylicious/kroxylicious/issues/4179