Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:89746
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 74.125.82.43 as permitted sender)
MIME-Version: 1.0
Sender: tyra3l@gmail.com
In-Reply-To: <CAMUwpuQTfja0bWFDuO3SVHm6=UE4jX7H+oWQ4yDH0AD1GMEw8Q@mail.gmail.com>
References: <000c01d12fa0$384b8040$a8e280c0$@belski.net>
	<CAMUwpuTFc1FhGSqFczeeOU=H=6F5URhEnmm78uiRjWG1-NT89g@mail.gmail.com>
	<082001d131ac$ab522b80$01f68280$@belski.net>
	<5666C73B.1050407@php.net>
	<CAMUwpuQTfja0bWFDuO3SVHm6=UE4jX7H+oWQ4yDH0AD1GMEw8Q@mail.gmail.com>
Date: Tue, 8 Dec 2015 14:41:01 +0100
Message-ID: <CAH-PCH7khdTDZ57wEmTSsZcy0Y_XEUTR_ZViqVSkVzwjRmZkQg@mail.gmail.com>
To: Julien Pauli <jpauli@php.net>
Cc: Remi Collet <remi@php.net>, PHP Internals <internals@lists.php.net>, Anatol Belsky <ab@php.net>, 
	Stanislav Malyshev <stas@php.net>
Content-Type: multipart/alternative; boundary=001a1148e0f8dc0d5b0526631f32
Subject: Re: [PHP-DEV] Re: PHP 7.0.1 scheduling
From: tyrael@php.net (Ferenc Kovacs)

--001a1148e0f8dc0d5b0526631f32
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On Tue, Dec 8, 2015 at 1:26 PM, Julien Pauli <jpauli@php.net> wrote:

> On Tue, Dec 8, 2015 at 1:04 PM, Remi Collet <remi@php.net> wrote:
> > Le 08/12/2015 12:36, Anatol Belski a =C3=A9crit :
> >> Yeah, particularly our release schedule collides with many holidays
> this year. For a security release a holiday time is obviously very bad.
> >
> > +1
> >
> > Our Release Process state:
> >
> >         " At least one release per month, more at wish "
> >
> > Perhaps we should consider new release on
> >
> >         " 1st thursday of the month "
> >
> > (It seems every year, Christmas is end of month ;)
>
>
> Yep, end of year has always collided with our release cycle.
>
> Perhaps we should change this latter as proposed by Remi ?
>
>
> Also, we had another idea.
>
> Why not use RC2 as a chance for some security patches to get tested ?
> If we have a RC2 (which is not bad IMO, we have a time slice here at
> end of 2015 that enables us to release an RC2) , we then could merge
> into this one some well-selected security patches, f.e, some that are
> *low* classified , aka that can't get trigerred remotely by user
> payload.
>
> What you think ?
>
> CCing Stas as well, as he got many experience in security.
>
>
> Julien.P
>

we are just iterating by two weeks which makes the monthly release not
monthly but every 28 days, which is fine but that also means that sometimes
the release dates are not always at the same date on each month (stating
the obvious).
I think that there is no better alternative, we just have to handle the
exceptional cases.
As we seem to have security fixes (and unfortunatelly at least one of those
were directly pushed by laruance so now it is public information) maybe we
should release it one week earlier (cutting the RC period one week shorter)
instead of delaying it until january?

--001a1148e0f8dc0d5b0526631f32--