-
Notifications
You must be signed in to change notification settings - Fork 67
Description
Hey folks,
I just saw that you have released a new version that bumps gRPC to 1.76.0 (which includes a security fix for a HIGH rated vulnerability).
That release should contain com.google.cloud:sdk-platform-java-config:3.54.0 which would then trigger the updates on downstream projects like Google Cloud Pub/Sub Client for Java. But the artifact is not showing up on Maven Central yet:
- https://central.sonatype.com/artifact/com.google.cloud/sdk-platform-java-config
- https://mvnrepository.com/artifact/com.google.cloud/sdk-platform-java-config
For all recent releases the GitHub release dates and the dates on e.g. mvnrepository.com match exactly, so I didn't expect a delay here. I also cannot find a recent release failed issue.
Could someone kindly check if the release process is blocked somewhere?
I'm sorry for the urgency, but we're on a quite tight SLA to fix the security issue, and we still need to get this version bump through the Pub/Sub Client. And looking at the actual bump PR this is nothing we can fix with a version constraint on our side.