oras-go icon indicating copy to clipboard operation
oras-go copied to clipboard

Published 20 hours ago • verified publisher icon oras-project

Vote for release of ORAS-go v1.2.1

Open FeynmanZhou opened this issue 2 years ago • 4 comments

Hi team @oras-project/oras-go-maintainers ,

Considering ORAS-go v2 is still experimental, ORAS-go v1 is stable and will be maintained by the ORAS community until ORAS v2 GA. Currently, ORAS-go v1 is not under active development, thus the ORAS community might only cut new releases to include necessary bug fixes.

There were two PRs merged since the ORAS-go 1.2.0 release:

  • Bump docker/distribution to address CWE-843 https://github.com/oras-project/oras-go/pull/276
  • Update implement info in the OCI store content implementation https://github.com/oras-project/oras-go/pull/187.

Meanwhile, @viovanov and @mihaibuzgau also requested a new patch release of v1. So I want to request a new release v1.2.1 in the community to include these two updates.

We need at least 4 approvals from 6 @oras-project/oras-go-maintainers to vote for releasing and cutting the tag v1.2.1 based on the v1 branch.

  • [ ] Avi Deitcher (@deitch)
  • [x] Josh Dolitsky (@jdolitsky)
  • [x] Sajay Antony (@sajayantony)
  • [x] Shiwei Zhang (@shizhMSFT)
  • [x] Steve Lasker (@stevelasker)
  • [ ] Sylvia Lei (@Wwwsylvia)

Please respond LGTM or REJECT (with reasoning).

FeynmanZhou avatar Aug 23 '22 08:08 FeynmanZhou

LGTM

jdolitsky avatar Oct 13 '22 13:10 jdolitsky

LGTM

sajayantony avatar Oct 13 '22 14:10 sajayantony

LGTM

SteveLasker avatar Oct 13 '22 14:10 SteveLasker

LGTM

shizhMSFT avatar Oct 13 '22 14:10 shizhMSFT

Thank you. Close it due to ORAS-go v1.2.1 was released https://github.com/oras-project/oras-go/releases/tag/v1.2.1

FeynmanZhou avatar Nov 01 '22 11:11 FeynmanZhou