Make new v2.2.2 release of devfile/library

[michael-valdron]

Which area/kind this issue is related to?

/kind task

/area library
/area releng

Issue Description

A few steps to be done before a new v2.2.2 release of devfile/library can be made.

Acceptance Criteria

• Create new release on GitHub
• Make announcement about new version

[michael-valdron]

#1454 should be completed before v2.2.2 is released.

[Jdubrick]

@michael-valdron is this still blocked? Also, since the vulnerability fix went into registry-support we probably need to update the commit being used in library so that it can be apart of this release. wdyt?

[michael-valdron]

@Jdubrick

is this still blocked?

No, this should be unblocked now.

Also, since the vulnerability fix went into registry-support we probably need to update the commit being used in library so that it can be apart of this release. wdyt?

Yeah the devfile/library dependencies should be updated to use the release after v2.2.2 is cut 👍

[Jdubrick]

@Jdubrick

is this still blocked?

No, this should be unblocked now.

Also, since the vulnerability fix went into registry-support we probably need to update the commit being used in library so that it can be apart of this release. wdyt?

Yeah the devfile/library dependencies should be updated to use the release after v2.2.2 is cut 👍

@michael-valdron since in library it uses the registry-library portion of registry-support, should we not include the update to the dependencies on the library side before v2.2.2 is cut so that release contains the vulnerability fix upstream?
https://github.com/search?q=repo%3Adevfile%2Flibrary%20registry-support&type=code

[michael-valdron]

@Jdubrick

is this still blocked?

No, this should be unblocked now.

Also, since the vulnerability fix went into registry-support we probably need to update the commit being used in library so that it can be apart of this release. wdyt?

Yeah the devfile/library dependencies should be updated to use the release after v2.2.2 is cut 👍

@michael-valdron since in library it uses the registry-library portion of registry-support, should we not include the update to the dependencies on the library side before v2.2.2 is cut so that release contains the vulnerability fix upstream? https://github.com/search?q=repo%3Adevfile%2Flibrary%20registry-support&type=code

I believe it was already done by me last sprint under a dependabot PR devfile/library#204.

Unless there were other vulnerabilities raised and addressed since then.