When should we expect poi 5.0.1?

Hi,
Just curious when we should expect to see 5.0.1 released. 5.0.0 includes some dependencies with security issues, like commons-compress:1.20. I can certainly override the transitive dependency in my build if 5.0.1 is going to be a while (but https://poi.apache.org/changes.html implies that it might be in July, so figured I would ask about it).
Thank you!
--Dan Rabe