[ANNOUNCE] Gerrit 3.10.3

132 views
Skip to first unread message

syntonyze

unread,
Nov 26, 2024, 1:24:40 PM11/26/24
to Repo and Gerrit Discussion
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Gerrit version 3.10.3 is now available.

Includes security fixes;
please see the release notes for details.

Release Notes:
https://www.gerritcodereview.com/3.10.html#3103

Documentation:
http://gerrit-documentation.storage.googleapis.com/Documentation/3.10.3/index.html

Log of changes since 3.10.2:
https://gerrit.googlesource.com/gerrit/+log/v3.10.2..v3.10.3?no-merges

Download:
https://gerrit-releases.storage.googleapis.com/gerrit-3.10.3.war

SHA1:
cf8e45d8a1b9b3579fa2a99893122449517ea28d

SHA256:
a552396198a1bc936e69ba21d9d2defc0c37ef5acd3e219b68b51dd002e900d4

MD5:
7d3d71b3961296462e6854814a750fae

Maintainers' public keys:
https://www.gerritcodereview.com/releases/public-keys.md

-----BEGIN PGP SIGNATURE-----
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=MqON
-----END PGP SIGNATURE-----

Luca Milanesio

unread,
Nov 26, 2024, 7:50:50 PM11/26/24
to Repo and Gerrit Discussion, Luca Milanesio, Antonio Barone
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Binary packages (Deb / Rpm) of Gerrit version 3.10.3 have been released
=========================================================================

How to install/upgrade: 3.10.3
*****************************

If you have a previous version of Gerrit 3.x installed via native packages:

(on Debian / Ubuntu)
apt-get update && apt-get install gerrit=3.10.3-1

(on AlmaLinux / RedHat)
yum clean all && yum install gerrit-3.10.3-1

(on Fedora)
dnf clean all && dnf install gerrit-3.10.3-1

If it is a new installation and you don't have the GerritForge repositories
configured, or if you are upgrading to ARM-64, please follow the instructions at:
https://gitenterprise.me/2022/11/23/arm-64-welcomes-gerrit-code-review/

Docker images
*************

Gerrit is distributed on DockerHub at:
https://hub.docker.com/r/gerritcodereview/gerrit/

The following tags have been published for amd64 and arm64:
latest => 3.10.3
3.10.3 => 3.10.3-almalinux9
3.10.3-almalinux9
3.10.3-ubuntu22

More information on how to use Gerrit Docker image for testing, staging, and production at:
https://gerrit.googlesource.com/docker-gerrit

MacOS native package
********************

MacOS Gerrit native installer is available for download at:

https://gerritforge.com/gerrit/mac/gerrit-installer-3.10.3.pkg

SHA1:
520a6a38d9b608a83fc62b6f215b574b5a826204

SHA256:
273b691f4852aece060efe208a023f6478c2f0e93c5eea5441b1df8555fb569a

-----BEGIN PGP SIGNATURE-----
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=txI+
-----END PGP SIGNATURE-----

Antoine Musso

unread,
Dec 3, 2024, 11:16:29 AM12/3/24
to syntonyze, Repo and Gerrit Discussion
Le 26/11/2024 à 19:24, syntonyze a écrit :

Gerrit version 3.10.3 is now available.

Includes security fixes;
please see the release notes for details.

Hello,

The 3.10.3 release notes do not mention any security fix while 3.11 has three security fixes mentioned. Is that the security fixes were only made for 3.11 and the same message was copy pasted for the 3.10, 3.9, 3.8 announces?   Looks like the issues are not too dangerous and were not worth backporting.

Anyway, thank you for the December releases and for the newish 3.11!

-- 
Antoine "hashar" Musso
Release Engineering

Luca Milanesio

unread,
Dec 3, 2024, 12:14:31 PM12/3/24
to Repo and Gerrit Discussion, Luca Milanesio, Antonio Barone, Antoine Musso

On 3 Dec 2024, at 16:16, Antoine Musso <amu...@wikimedia.org> wrote:

Le 26/11/2024 à 19:24, syntonyze a écrit :

Gerrit version 3.10.3 is now available.

Includes security fixes;
please see the release notes for details.

Hello,

The 3.10.3 release notes do not mention any security fix while 3.11 has three security fixes mentioned. Is that the security fixes were only made for 3.11 and the same message was copy pasted for the 3.10, 3.9, 3.8 announces?   Looks like the issues are not too dangerous and were not worth backporting.


That is correct: the fixes are about minor security issues.

Anyway, thank you for the December releases and for the newish 3.11!


No problem, thanks to @Tony for driving this release and making my life so much easier :-)
I’ll present all the features and demo some of them at the GerritMeets on YouTube on the 4th of December 12:00 GMT [1].

See you there !

Luca.



-- 
Antoine "hashar" Musso
Release Engineering

--
--
To unsubscribe, email repo-discuss...@googlegroups.com
More info at http://groups.google.com/group/repo-discuss?hl=en

---
You received this message because you are subscribed to the Google Groups "Repo and Gerrit Discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to repo-discuss...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/repo-discuss/043eab51-af45-44d7-859e-007cd46c83fa%40wikimedia.org.

Reply all
Reply to author
Forward
0 new messages