[Quick Question] When is the next release after v0.34.0? #7121
-
|
Hi all, We need the vulnerability of grpc 1.45.0 fixed as soon as possible. We saw grpc was already upgraded to 1.57.2 in master branch after the latest Thanos official build, v0.34.0. When will the next release include this fix? Regards, |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 8 replies
-
|
I was planning for ~ 2-3 weeks after last major release. Is that acceptable? |
Beta Was this translation helpful? Give feedback.
-
|
Since v0.34.0 was released on Jan 26, I can expect the latest release will be no later than Feb 16, right? |
Beta Was this translation helpful? Give feedback.
-
|
@MichaHoffmann any change we get a patch release because of this CVE? |
Beta Was this translation helpful? Give feedback.
-
|
Oh, yeah; i can prepare one on the weekend; is that acceptable? |
Beta Was this translation helpful? Give feedback.
-
|
Thanks @MichaHoffmann , sounds great. |
Beta Was this translation helpful? Give feedback.
-
|
Is there already a fix on main that needs to be cherry-picked? |
Beta Was this translation helpful? Give feedback.
-
|
This one. |
Beta Was this translation helpful? Give feedback.
-
|
Ok, prepared a new patch release PR with the CVE fix cherry-picked: #7131 |
Beta Was this translation helpful? Give feedback.
Oh, yeah; i can prepare one on the weekend; is that acceptable?