Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:89747 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 69448 invoked from network); 8 Dec 2015 14:02:57 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 8 Dec 2015 14:02:57 -0000 Authentication-Results: pb1.pair.com smtp.mail=anatol.php@belski.net; spf=permerror; sender-id=unknown Authentication-Results: pb1.pair.com header.from=anatol.php@belski.net; sender-id=unknown Received-SPF: error (pb1.pair.com: domain belski.net from 85.214.73.107 cause and error) X-PHP-List-Original-Sender: anatol.php@belski.net X-Host-Fingerprint: 85.214.73.107 klapt.com Received: from [85.214.73.107] ([85.214.73.107:34408] helo=h1123647.serverkompetenz.net) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 1A/D9-31749-F03E6665 for ; Tue, 08 Dec 2015 09:02:56 -0500 Received: from w530phpdev (pD9FD23A6.dip0.t-ipconnect.de [217.253.35.166]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by h1123647.serverkompetenz.net (Postfix) with ESMTPSA id 1BA4478C8DB; Tue, 8 Dec 2015 15:02:52 +0100 (CET) To: "'Ferenc Kovacs'" , "'Julien Pauli'" Cc: "'Remi Collet'" , "'PHP Internals'" , "'Anatol Belsky'" , "'Stanislav Malyshev'" References: <000c01d12fa0$384b8040$a8e280c0$@belski.net> <082001d131ac$ab522b80$01f68280$@belski.net> <5666C73B.1050407@php.net> In-Reply-To: Date: Tue, 8 Dec 2015 15:02:47 +0100 Message-ID: <086601d131c1$210ec400$632c4c00$@belski.net> MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 15.0 Thread-Index: AQLQUUADa5bV4IS9/QID+zXMY+qBmwHKzS9nAorb3ecCF2RFJwHSuhMUAdQHQHeccjzQkA== Content-Language: en-us Subject: RE: [PHP-DEV] Re: PHP 7.0.1 scheduling From: anatol.php@belski.net ("Anatol Belski") Hi Ferenc, > -----Original Message----- > From: tyra3l@gmail.com [mailto:tyra3l@gmail.com] On Behalf Of Ferenc > Kovacs > Sent: Tuesday, December 8, 2015 2:41 PM > To: Julien Pauli > Cc: Remi Collet ; PHP Internals = ; > Anatol Belsky ; Stanislav Malyshev > Subject: Re: [PHP-DEV] Re: PHP 7.0.1 scheduling >=20 > On Tue, Dec 8, 2015 at 1:26 PM, Julien Pauli wrote: >=20 > > On Tue, Dec 8, 2015 at 1:04 PM, Remi Collet wrote: > > > Le 08/12/2015 12:36, Anatol Belski a =C3=A9crit : > > >> Yeah, particularly our release schedule collides with many = holidays > > this year. For a security release a holiday time is obviously very = bad. > > > > > > +1 > > > > > > Our Release Process state: > > > > > > " At least one release per month, more at wish " > > > > > > Perhaps we should consider new release on > > > > > > " 1st thursday of the month " > > > > > > (It seems every year, Christmas is end of month ;) > > > > > > Yep, end of year has always collided with our release cycle. > > > > Perhaps we should change this latter as proposed by Remi ? > > > > > > Also, we had another idea. > > > > Why not use RC2 as a chance for some security patches to get tested = ? > > If we have a RC2 (which is not bad IMO, we have a time slice here at > > end of 2015 that enables us to release an RC2) , we then could merge > > into this one some well-selected security patches, f.e, some that = are > > *low* classified , aka that can't get trigerred remotely by user > > payload. > > > > What you think ? > > > > CCing Stas as well, as he got many experience in security. > > > > > > Julien.P > > >=20 > we are just iterating by two weeks which makes the monthly release not > monthly but every 28 days, which is fine but that also means that = sometimes the > release dates are not always at the same date on each month (stating = the > obvious). > I think that there is no better alternative, we just have to handle = the exceptional > cases. > As we seem to have security fixes (and unfortunatelly at least one of = those were > directly pushed by laruance so now it is public information) maybe we = should > release it one week earlier (cutting the RC period one week shorter) = instead of > delaying it until january? Yeah, that works for 7.0 alone in any case. If it's about 7.0.1 only, it = were - 7.0.1RC1 on 10th December - 7.0.1 final on 17th December - 7.0.2RC1 on 24th or 31st - 7.0.2 final next year together with 5.5.31 and 5.6.17 Probably it could make sense, 7.0.1 in any case on 17th then - what was = disclosed was only one patch and relevant for 7.0 only. 17th is also = holiday free, hopefully :) If PHP 5 branches could not be so far, we = should indeed get 7.0.1 out this year, and we would sync 5 and 7 release = dates starting with 7.0.2 and next year. How does it sound? Regards Anatol