Question on the "Updates Project" processes

Rob McKenna rob.mckenna at oracle.com
Wed Jul 18 23:03:08 UTC 2018


Hi Volker:

On 18/07/18 15:50, Volker Simonis wrote:
> Hi Rob,
> 
> yesterday you've pushed the security fixes for JDK 10.0.2 into the
> jdk10u repository [2] but I haven't seen a "Request for approval" for
> these changes as this has been requested for the corresponding
> security updates in the jdk8u project [3]. Aren't such approvals
> required any more for the new updates project?
> 

I'm in two minds about this. We've moved away from mailing list
approvals for the jdk-updates project and it seems redundant to add the
labels to these issues when they've already been through the critical
request process, but perhaps I need to rethink that. Leave that with me.

> Furthermore I've noticed that the "JDK Update Releases" page [4]
> contains some rough estimations for the planned releases (e.g. "Jul
> 2018" for jdk 10.0.2). But as these dates are not very precise, would
> it be possible to post some kind of "standardized" mails on this (or
> another, dedicated mailing list) which announce the final availability
> of each new update release (i.e. the landing of the security patches
> in the corresponding repositories). This would greatly simplify the
> work of down-stream projects which build/package OpenJDK update
> releases.

Yes, absolutely. I'll take an AI to send an automated notification when
the security patches land in subsequent releases.

    -Rob

> 
> Thank you and best regards,
> Volker
> 
> [1] http://mail.openjdk.java.net/pipermail/jdk-updates-changes/2018-July/000044.html
> [2] http://hg.openjdk.java.net/jdk-updates/jdk10u
> [3] http://mail.openjdk.java.net/pipermail/jdk8u-dev/2018-July/007668.html
> [4] http://openjdk.java.net/projects/jdk-updates/


More information about the jdk-updates-dev mailing list