[PROPOSAL] Delay OpenSearch 2.19.6

[Divyaasm]

Description

The OpenSearch 2.19.6 patch release scheduled for today (2026-06-30) is proposed to be delayed by upto 1 week due to Maven repository throttling under concurrent CI load, blocking builds across multiple components and distributions.

Reason for Delay

Maven Repository Throttling Under Parallel CI Load

Failure chain:

1. repo.maven returns HTTP 429 (Too Many Requests) due to rate limiting under parallel CI load
2. ci.opensearch.org/ci/dbc/snapshots/maven is checked first in Gradle's repository resolution order and returns HTTP 503 (Service Unavailable) — the backing Lambda is unable to process multiple concurrent requests
3. Gradle disables the repository entirely after the first 503 (Repository maven is disabled due to earlier error below), causing dependency resolution failures

Other Issues (Resolved)

• k-NN build failure — Fixed via opensearch-project/k-NN#3403 (merged). Root cause was sed modifying a file that a git patch also targeted, causing index mismatch in CI.

Impact

• Builds fail non-deterministically depending on concurrent CI load
• Not a flaky test — entire dependency resolution phase fails
• No security implications from the delay — this is a patch release

Proposed New Timeline

Milestone	Original Date	Proposed Date
Release	2026-06-30	2026-07-07

Resolution Path

1. Switch dependency resolution to ci.opensearch.org/maven2 first.
2. Validate builds succeed under concurrent load with updated repository ordering
3. Re-run distribution builds across all platforms and validate

[peterzhuamazon]

Pending these PRs:

• 2.19 (blocking): [RELEASE] Release version 2.19.6 opensearch-build#6050 (comment)
• Main (not blocking): [RELEASE] Release version 3.8.0 opensearch-build#6278 (comment)

[krisfreedain]

Sent a note via private TSC channel to get everyone's attention

[Divyaasm]

The Maven repository throttling issues for the components have been taken care across the 2.19 release branch.
We're currently waiting on:

1. Few CVE fixes from components - Pending merges
2. Integration test results to be green for the latest RC builds.

We're aiming to release on Thursday (2026-07-02). Will provide update once the CVE fixes are merged and integ test results status changes.
cc: @krisfreedain @andrross @epugh

[Divyaasm]

All the blockers identified in this proposal have been resolved:

✅ CVE fixes for components opensearch-project/cross-cluster-replication#1713 opensearch-project/anomaly-detection#1752 opensearch-project/performance-analyzer#957
✅ Integration tests fixes opensearch-project/sql#5601 opensearch-project/opensearch-dashboards-functional-test#2086 opensearch-project/flow-framework#1440
✅ Maven repository throttling (HTTP 429 / 503) — Fixed across the 2.19 release branch by updating dependency resolution ordering

The release was completed on July 2, 2026. The delay ensured all component CVE fixes and integration test fixes were included, and all builds were reproducible under concurrent CI load.

Thanks everyone for the patience and support.