You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@openserverless.apache.org by Michele Sciabarra <mi...@nuvolaris.io> on 2026/09/10 14:46:44 UTC
[VOTE] Release Apache OpenServerless (Incubating) 0.9.0-incubating RC3
Hi all,
I propose the following RC to be released as the official
Apache OpenServerless 0.9.0-incubating release.
Apache OpenServerless is an effort undergoing incubation at The Apache
Software
Foundation (ASF), sponsored by the Apache Incubator. Incubation is required
of all newly accepted projects until a further review indicates that the
infrastructure, communications, and decision making process have stabilized
in a manner consistent with other successful ASF projects. While incubation
status is not necessarily a reflection of the completeness or stability of
the code, it does indicate that the project has yet to be fully endorsed by
the ASF.
The artifacts for this release candidate can be found at:
https://dist.apache.org/repos/dist/dev/incubator/openserverless/0.9.0-incubating-RC3
The Git tag to be voted upon is:
v0.9.0-incubating-RC3
https://github.com/apache/openserverless/releases/tag/v0.9.0-incubating-RC3
Release artifacts are signed with the GPG key of the release manager.
The KEYS file is available at:
https://dist.apache.org/repos/dist/dev/incubator/openserverless/KEYS
Please download, verify, and test the release candidate.
For detailed step-by-step instructions on how to verify this
release, please see the file VERIFY.md within the source
archive, or check:
https://github.com/apache/openserverless/blob/0.9.0/VERIFY.md
The vote will run for a minimum of 72 hours and close no earlier
than:
2026-09-13 16:30 UTC
Please vote:
[ ] +1 Release this package as Apache OpenServerless 0.9.0-incubating
[ ] +0
[ ] -1 Do not release this package because... (reason required)
Only PPMC members have binding votes, but community votes are
encouraged.
Checklist for reference:
[ ] Download links are valid
[ ] Checksums and signatures are valid
[ ] LICENSE/NOTICE files exist
[ ] No unexpected binary files in source
[ ] All source files have ASF headers
[ ] Can compile from source
On behalf of the Apache OpenServerless Podling PMC (PPMC),
--
Michele Sciabarrà - msciabarra@apache.org - linkedin.com/in/msciab
Apache OpenServerless committer - reddit.com/r/openserverless
Apache OpenWhisk PMC member - Author Learning Apache OpenWhisk
<https://www.oreilly.com/library/view/learning-apache-openwhisk/9781492046158/>
Re: [VOTE] Release Apache OpenServerless (Incubating) 0.9.0-incubating RC3
Posted by Michele Sciabarra <mi...@nuvolaris.io>.
We have to follow the process, you have to post the checklist and the
result of your checks.
Michele Sciabarra | CTO
m: +44 747 984 8388
e: michele@nuvolaris.io
l: https://linkedin.com/in/msciab
Nuvolaris Inc | 1209 Orange Street, 19801Wilmington DE - US
Michele Sciabarra | CTO
m: +44 747 984 8388
e: michele@nuvolaris.io
l: https://linkedin.com/in/msciab
Nuvolaris Inc | 1209 Orange Street, 19801Wilmington DE - US
On Thu, 10 Sept 2026 at 16:57, Michele Manzani
<mi...@gmail.com> wrote:
>
> I vote +1 to release this package as Apache OpenServerless 0.9.0-incubating.
>
>
>
>
> On 10 Sep 2026, at 16:46, Michele Sciabarra <mi...@nuvolaris.io> wrote:
>
> Hi all,
>
> I propose the following RC to be released as the official
> Apache OpenServerless 0.9.0-incubating release.
>
> Apache OpenServerless is an effort undergoing incubation at The Apache
> Software
> Foundation (ASF), sponsored by the Apache Incubator. Incubation is required
> of all newly accepted projects until a further review indicates that the
> infrastructure, communications, and decision making process have stabilized
> in a manner consistent with other successful ASF projects. While incubation
> status is not necessarily a reflection of the completeness or stability of
> the code, it does indicate that the project has yet to be fully endorsed by
> the ASF.
>
> The artifacts for this release candidate can be found at:
>
> https://dist.apache.org/repos/dist/dev/incubator/openserverless/0.9.0-incubating-RC3
>
> The Git tag to be voted upon is:
>
> v0.9.0-incubating-RC3
>
> https://github.com/apache/openserverless/releases/tag/v0.9.0-incubating-RC3
>
> Release artifacts are signed with the GPG key of the release manager.
>
> The KEYS file is available at:
>
> https://dist.apache.org/repos/dist/dev/incubator/openserverless/KEYS
>
> Please download, verify, and test the release candidate.
>
> For detailed step-by-step instructions on how to verify this
> release, please see the file VERIFY.md within the source
> archive, or check:
>
> https://github.com/apache/openserverless/blob/0.9.0/VERIFY.md
>
> The vote will run for a minimum of 72 hours and close no earlier
> than:
>
> 2026-09-13 16:30 UTC
>
> Please vote:
>
> [ ] +1 Release this package as Apache OpenServerless 0.9.0-incubating
> [ ] +0
> [ ] -1 Do not release this package because... (reason required)
>
> Only PPMC members have binding votes, but community votes are
> encouraged.
>
> Checklist for reference:
> [ ] Download links are valid
> [ ] Checksums and signatures are valid
> [ ] LICENSE/NOTICE files exist
> [ ] No unexpected binary files in source
> [ ] All source files have ASF headers
> [ ] Can compile from source
>
> On behalf of the Apache OpenServerless Podling PMC (PPMC),
> --
> Michele Sciabarrà - msciabarra@apache.org - linkedin.com/in/msciab
> Apache OpenServerless committer - reddit.com/r/openserverless
> Apache OpenWhisk PMC member - Author Learning Apache OpenWhisk
> <https://www.oreilly.com/library/view/learning-apache-openwhisk/9781492046158/>
>
>
Re: [VOTE] Release Apache OpenServerless (Incubating) 0.9.0-incubating RC3
Posted by Michele Manzani <mi...@gmail.com>.
I vote +1 to release this package as Apache OpenServerless 0.9.0-incubating.
> On 10 Sep 2026, at 16:46, Michele Sciabarra <mi...@nuvolaris.io> wrote:
>
> Hi all,
>
> I propose the following RC to be released as the official
> Apache OpenServerless 0.9.0-incubating release.
>
> Apache OpenServerless is an effort undergoing incubation at The Apache
> Software
> Foundation (ASF), sponsored by the Apache Incubator. Incubation is required
> of all newly accepted projects until a further review indicates that the
> infrastructure, communications, and decision making process have stabilized
> in a manner consistent with other successful ASF projects. While incubation
> status is not necessarily a reflection of the completeness or stability of
> the code, it does indicate that the project has yet to be fully endorsed by
> the ASF.
>
> The artifacts for this release candidate can be found at:
>
> https://dist.apache.org/repos/dist/dev/incubator/openserverless/0.9.0-incubating-RC3
>
> The Git tag to be voted upon is:
>
> v0.9.0-incubating-RC3
>
> https://github.com/apache/openserverless/releases/tag/v0.9.0-incubating-RC3
>
> Release artifacts are signed with the GPG key of the release manager.
>
> The KEYS file is available at:
>
> https://dist.apache.org/repos/dist/dev/incubator/openserverless/KEYS
>
> Please download, verify, and test the release candidate.
>
> For detailed step-by-step instructions on how to verify this
> release, please see the file VERIFY.md within the source
> archive, or check:
>
> https://github.com/apache/openserverless/blob/0.9.0/VERIFY.md
>
> The vote will run for a minimum of 72 hours and close no earlier
> than:
>
> 2026-09-13 16:30 UTC
>
> Please vote:
>
> [ ] +1 Release this package as Apache OpenServerless 0.9.0-incubating
> [ ] +0
> [ ] -1 Do not release this package because... (reason required)
>
> Only PPMC members have binding votes, but community votes are
> encouraged.
>
> Checklist for reference:
> [ ] Download links are valid
> [ ] Checksums and signatures are valid
> [ ] LICENSE/NOTICE files exist
> [ ] No unexpected binary files in source
> [ ] All source files have ASF headers
> [ ] Can compile from source
>
> On behalf of the Apache OpenServerless Podling PMC (PPMC),
> --
> Michele Sciabarrà - msciabarra@apache.org - linkedin.com/in/msciab
> Apache OpenServerless committer - reddit.com/r/openserverless
> Apache OpenWhisk PMC member - Author Learning Apache OpenWhisk
> <https://www.oreilly.com/library/view/learning-apache-openwhisk/9781492046158/>
Re: [VOTE] Release Apache OpenServerless (Incubating) 0.9.0-incubating RC3
Posted by Alessio Marinelli via dev <de...@openserverless.apache.org>.
-1 (non-binding)
I verified the release candidate as follows:
- Downloaded openserverless-0.9.0-incubating-RC3-src.tar.gz from https://dist.apache.org/repos/dist/dev/incubator/openserverless/0.9.0-incubating-RC3/- Imported KEYS, verified the GPG signature: "Good signature from Michele Sciabarra (Apache OpenServerless Release Key)"- Verified the SHA512 checksum: OK- Confirmed LICENSE, NOTICE, README.md, CHANGES present at the root- Ran build-and-test-ubuntu.sh on a clean environment: build completed, and all 13 applicable test scripts (deploy, ssl, sys-redis, sys-ferretdb, sys-postgres, sys-seaweedfs, login, static, user-redis, user-ferretdb, user-postgres, user-seaweedfs, runtime-testing) reported SUCCESS.
While checking for unexpected binary files in the source archive(per VERIFY.md section 5), I found:
- oplugins-op/enterprise-util/kafka/jmx/jmx_prometheus_javaagent-0.18.0.jar (544KB), a compiled third-party binary.
I checked both LICENSE and NOTICE at the root of the archive andfound no mention of this file or of jmx_prometheus_javaagent /Prometheus JMX exporter.
I haven't reviewed every other .jar file in the archive in thesame depth (there are also several small gradle-wrapper.jar andtest-fixture hello.jar files elsewhere, which I have not assessed),so my vote is specifically about this one undocumented binary, nota general claim about all binaries in the source tree.
I'd be happy to change my vote once this is addressed or clarified -apologies if I'm missing something.
Il giorno giovedì 10 settembre 2026 alle ore 16:47:16 CEST, Michele Sciabarra <mi...@nuvolaris.io> ha scritto:
Hi all,
I propose the following RC to be released as the official
Apache OpenServerless 0.9.0-incubating release.
Apache OpenServerless is an effort undergoing incubation at The Apache
Software
Foundation (ASF), sponsored by the Apache Incubator. Incubation is required
of all newly accepted projects until a further review indicates that the
infrastructure, communications, and decision making process have stabilized
in a manner consistent with other successful ASF projects. While incubation
status is not necessarily a reflection of the completeness or stability of
the code, it does indicate that the project has yet to be fully endorsed by
the ASF.
The artifacts for this release candidate can be found at:
https://dist.apache.org/repos/dist/dev/incubator/openserverless/0.9.0-incubating-RC3
The Git tag to be voted upon is:
v0.9.0-incubating-RC3
https://github.com/apache/openserverless/releases/tag/v0.9.0-incubating-RC3
Release artifacts are signed with the GPG key of the release manager.
The KEYS file is available at:
https://dist.apache.org/repos/dist/dev/incubator/openserverless/KEYS
Please download, verify, and test the release candidate.
For detailed step-by-step instructions on how to verify this
release, please see the file VERIFY.md within the source
archive, or check:
https://github.com/apache/openserverless/blob/0.9.0/VERIFY.md
The vote will run for a minimum of 72 hours and close no earlier
than:
2026-09-13 16:30 UTC
Please vote:
[ ] +1 Release this package as Apache OpenServerless 0.9.0-incubating
[ ] +0
[ ] -1 Do not release this package because... (reason required)
Only PPMC members have binding votes, but community votes are
encouraged.
Checklist for reference:
[ ] Download links are valid
[ ] Checksums and signatures are valid
[ ] LICENSE/NOTICE files exist
[ ] No unexpected binary files in source
[ ] All source files have ASF headers
[ ] Can compile from source
On behalf of the Apache OpenServerless Podling PMC (PPMC),
--
Michele Sciabarrà - msciabarra@apache.org - linkedin.com/in/msciab
Apache OpenServerless committer - reddit.com/r/openserverless
Apache OpenWhisk PMC member - Author Learning Apache OpenWhisk
<https://www.oreilly.com/library/view/learning-apache-openwhisk/9781492046158/>
Re: [VOTE] Release Apache OpenServerless (Incubating) 0.9.0-incubating RC3
Posted by Michele Sciabarra <mi...@nuvolaris.io>.
I have to vote -1 myself, I ran the verification and am posting this as an
example for the other members.
I found 4 unexpected binaries (4 bun.lockb files)
So what is the procedure now to abort the vote?
Please hold the vote dsi have to recreate the release removing those files.
[X] Download links are valid
$ curl -sOJ
https://dist.apache.org/repos/dist/dev/incubator/openserverless/0.9.0-incubating-RC3/openserverless-0.9.0-incubating-RC3-src.tar.gz
$ curl -sOJ
https://dist.apache.org/repos/dist/dev/incubator/openserverless/0.9.0-incubating-RC3/openserverless-0.9.0-incubating-RC3-src.tar.gz.asc
$ curl -sOJ
https://dist.apache.org/repos/dist/dev/incubator/openserverless/0.9.0-incubating-RC3/openserverless-0.9.0-incubating-RC3-src.tar.gz.sha512
$ ls -l
-rw-r--r--@ 1 msciab staff 28315866 10 Sep 17:32
openserverless-0.9.0-incubating-RC3-src.tar.gz
-rw-r--r--@ 1 msciab staff 870 10 Sep 17:32
openserverless-0.9.0-incubating-RC3-src.tar.gz.asc
-rw-r--r--@ 1 msciab staff 177 10 Sep 17:32
openserverless-0.9.0-incubating-RC3-src.tar.gz.sha
[X] Checksums and signatures are valid
$ sha512 -c openserverless-0.9.0-incubating-RC3-src.tar.gz.sha512
# no news is a good news
$ gpg --verify openserverless-0.9.0-incubating-RC3-src.tar.gz.asc
openserverless-0.9.0-incubating-RC3-src.tar.gz
gpg: Signature made Thu 10 Sep 15:45:58 2026 CEST
gpg: using RSA key E64863824BDA2495CBAA57FDCEBE1A0116BE6665
gpg: Good signature from "Michele Sciabarra (Apache OpenServerless Release
Key) <ms...@apache.org>" [ultimate]
[X] LICENSE/NOTICE files exist
❯ tar xzf openserverless-0.9.0-incubating-RC3-src.tar.gz
❯ ls openserverless-0.9.0-incubating-RC3/{LICENSE,NOTICE}
openserverless-0.9.0-incubating-RC3/LICENSE
openserverless-0.9.0-incubating-RC3/NOTICE
[ ] No unexpected binary files in source
$ find openserverless-0.9.0-incubating-RC3 -type f | xargs -L1 file | grep
binary
openserverless-0.9.0-incubating-RC3/oplugins/ide/deploy/bun.lockb: a
/usr/bin/env bun script executable (binary data)
openserverless-0.9.0-incubating-RC3/oplugins/util/config/configurator/bun.lockb:
a /usr/bin/env bun script executable (binary data)
openserverless-0.9.0-incubating-RC3/oplugins/util/upload/bun.lockb: a
/usr/bin/env bun script executable (binary data)
openserverless-0.9.0-incubating-RC3/oplugins/env/secrets/bun.lockb: a
/usr/bin/env bun script executable (binary data)
OOOPS!
[ X All source files have ASF headers
$ task license
INFO Loading configuration from file: .licenserc.yaml
INFO Totally checked 5095 files, valid: 15, invalid: 0, ignored: 5080,
fixed: 0
*** Checking license headers in admin-api
INFO Loading configuration from file: .licenserc.yaml
INFO Totally checked 57 files, valid: 44, invalid: 0, ignored: 13, fixed: 0
*** Checking license headers in build
INFO Loading configuration from file: .licenserc.yaml
INFO Totally checked 1148 files, valid: 20, invalid: 0, ignored: 1128,
fixed: 0
*** Checking license headers in cli
INFO Loading configuration from file: .licenserc.yaml
INFO Totally checked 2596 files, valid: 133, invalid: 0, ignored: 2463,
fixed: 0
*** Checking license headers in devcontainer
INFO Loading configuration from file: .licenserc.yaml
INFO Totally checked 20 files, valid: 13, invalid: 0, ignored: 7, fixed: 0
*** Checking license headers in oplugins-op
INFO Loading configuration from file: .licenserc.yaml
INFO Totally checked 595 files, valid: 515, invalid: 0, ignored: 80, fixed:
0
*** Checking license headers in oplugins
INFO Loading configuration from file: .licenserc.yaml
INFO Totally checked 207 files, valid: 144, invalid: 0, ignored: 63, fixed:
0
*** Checking license headers in runtimes
INFO Loading configuration from file: .licenserc.yaml
INFO Totally checked 303 files, valid: 141, invalid: 0, ignored: 162,
fixed: 0
*** Checking license headers in streamer
INFO Loading configuration from file: .licenserc.yaml
INFO Totally checked 29 files, valid: 20, invalid: 0, ignored: 9, fixed: 0
[X] Can compile from source
$ ./build-and-test-linux.sh
....
============================================
SUCCESS ./1-deploy.sh
SUCCESS ./2-ssl.sh
SUCCESS ./3-sys-redis.sh
SUCCESS ./4a-sys-ferretdb.sh
SUCCESS ./4b-sys-postgres.sh
SUCCESS ./5-sys-seaweedfs.sh
SUCCESS ./6-login.sh
SUCCESS ./7-static.sh
SUCCESS ./8-user-redis.sh
SUCCESS ./9a-user-ferretdb.sh
SUCCESS ./9b-user-postgres.sh
SUCCESS ./10-user-seaweedfs.sh
SUCCESS ./14-runtime-testing.sh
--
Michele Sciabarrà - msciabarra@apache.org - linkedin.com/in/msciab
Apache OpenServerless committer - reddit.com/r/openserverless
Apache OpenWhisk PMC member - Author Learning Apache OpenWhisk
<https://www.oreilly.com/library/view/learning-apache-openwhisk/9781492046158/>
On Thu, 10 Sept 2026 at 16:46, Michele Sciabarra <mi...@nuvolaris.io>
wrote:
> Hi all,
>
> I propose the following RC to be released as the official
> Apache OpenServerless 0.9.0-incubating release.
>
> Apache OpenServerless is an effort undergoing incubation at The Apache
> Software
> Foundation (ASF), sponsored by the Apache Incubator. Incubation is required
> of all newly accepted projects until a further review indicates that the
> infrastructure, communications, and decision making process have stabilized
> in a manner consistent with other successful ASF projects. While incubation
> status is not necessarily a reflection of the completeness or stability of
> the code, it does indicate that the project has yet to be fully endorsed by
> the ASF.
>
> The artifacts for this release candidate can be found at:
>
>
> https://dist.apache.org/repos/dist/dev/incubator/openserverless/0.9.0-incubating-RC3
>
> The Git tag to be voted upon is:
>
> v0.9.0-incubating-RC3
>
> https://github.com/apache/openserverless/releases/tag/v0.9.0-incubating-RC3
>
> Release artifacts are signed with the GPG key of the release manager.
>
> The KEYS file is available at:
>
> https://dist.apache.org/repos/dist/dev/incubator/openserverless/KEYS
>
> Please download, verify, and test the release candidate.
>
> For detailed step-by-step instructions on how to verify this
> release, please see the file VERIFY.md within the source
> archive, or check:
>
> https://github.com/apache/openserverless/blob/0.9.0/VERIFY.md
>
> The vote will run for a minimum of 72 hours and close no earlier
> than:
>
> 2026-09-13 16:30 UTC
>
> Please vote:
>
> [ ] +1 Release this package as Apache OpenServerless 0.9.0-incubating
> [ ] +0
> [ ] -1 Do not release this package because... (reason required)
>
> Only PPMC members have binding votes, but community votes are
> encouraged.
>
> Checklist for reference:
> [ ] Download links are valid
> [ ] Checksums and signatures are valid
> [ ] LICENSE/NOTICE files exist
> [ ] No unexpected binary files in source
> [ ] All source files have ASF headers
> [ ] Can compile from source
>
> On behalf of the Apache OpenServerless Podling PMC (PPMC),
> --
> Michele Sciabarrà - msciabarra@apache.org - linkedin.com/in/msciab
> Apache OpenServerless committer - reddit.com/r/openserverless
> Apache OpenWhisk PMC member - Author Learning Apache OpenWhisk
> <https://www.oreilly.com/library/view/learning-apache-openwhisk/9781492046158/>
>
>
>