Pentaho

 View Only

 How are versions organized ? Where to listen for security matters ?

Olivier Pessin's profile image
Olivier Pessin posted 01-20-2022 05:26

Hello,

I'm new to this community. However, since years, we've been using PDI (Kettle) Community edition. (not the other components of the Pentaho suite).

From what I understand, The community edition can still be downloaded from Sourceforge.
https://sourceforge.net/projects/pentaho/files/     latest at this time, is pdi-ce-9.2.0.0-290.zip
However, I'm not sure where is is actually "maintained" by the community.. as Sourceforge seems to publish zip archives, not source code.

Is it maintained through https://github.com/pentaho/pentaho-kettle ?
If so, I surprisingly don't see a tag for 9.2.0.0-290 (the above Sourceforge archive version).
Also, I can see multiple tags for 9.3.* (1st on 17 April 2021) but no 9.3 on Sourceforge.. Is it that the version 9.3 is not yet considered stable ? Any public roadmap document ?

Where can I find up to date information about how this is organized ?
I found https://pentaho-community.atlassian.net/wiki/spaces/EAI/overview but the information seems quite outdated.. like "What's new in PDI 4.0".

https://help.hitachivantara.com/Documentation/Pentaho seems up to date, but does not tell much (as far as I could see) about security fixes for instance... Is it mainly for the paid version rather than the community edition ?


Hence more importantly, Is there a "central" feed that should I subscribe/listen, in order to keep informed about security recommendations and upgrades ?
Maybe a mix of "this current community forum", https://jira.pentaho.com/projects/PDI/issues/
and https://support.pentaho.com/hc/en-us/sections/360010039791-Security-Updates ?

As you can see, I'm a bit lost among all these links... Is there a central home page or is everyone maintaining its own set of bookmarks ?

Andrew Cave's profile image
Andrew Cave

Hi Olivier

CE PDI only seems to get updated when a GA release is made (ie 9.1,9.2,9.3...)

The git repo appears to be work in progress for the CE work.   You could probably compile it yourself but it's a big task of course.

9.3 is currently aimed for this quarter, but it's already moved twice so possibly not.

Security patches have only been made available for Enterprise customers.

According to this a lot of the timeline was covered at https://sourceforge.net/p/pentaho/news/2020/05/qa-with-hitachi-vantara-how-pentaho-and-lumada-data-services-work-together-to-address-some-of-the-most-complex-digital-transformation-challenges-today/

But when you got to https://hitachivantara.bemyapp.com/dataops.next  to see the replays it's broken.

afaik there is no central resource for knowing what's going on.   Pentaho user groups can be good .  The London group https://www.meetup.com/Pentaho-London-User-Group/events/ seems to have good insight but the rest of us are a bit lost.