Expert Answer
Anonymous
I would first assess the impact of the bug whether it is impacting core functionality, or impacting privacy or security.
I will follow with reproducibility trying to identify the conditions under which the bug is reproducible to assess if a quick fix is feasible.
I would engage stakeholders, quality assurance and developers to discuss the bug and brainstorm potential fixes.
I’ll follow with providing clear options to management: delay the release, implement a quick fix, or a workaround. Those options should include the risks and impact.
The final step is to create a retrospective describing the bug, what went well, what went bad, actions items and lessons learned.
When working at Flutter after implementing the automated code signing process an issue signing the ios libraries was identified a day before a release. I quickly notified the iOS team, stakeholders and management about the bug. At the same we started debugging the problem finding that the path to the library was wrong in the engine configuration files.
After root causing the problem a couple of options were identified: applying a fix potentially delaying the release for a few hours, manually resigning the library bypassing the software security supply chain validations. After presenting the options to management it was decided to take the risk of potentially delaying the release.
The fix was applied in the engine configurations and the artifacts were generated through the regular process and released on time.