You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@arrow.apache.org by Andrew Lamb <al...@influxdata.com> on 2021/12/10 19:30:01 UTC
[VOTE][RUST] Release Apache Arrow Rust 6.4.0 RC1
Hi,
I would like to propose a release of Apache Arrow Rust Implementation,
version 6.4.0. I am personally excited about this release as it contains
the input validation needed to close out the currently open RUSTSEC issues
for Arrow [5].
This release candidate is based on commit:
7a0bca35239f1d4fc3a1dca410384a1e5e962147 [1].
The proposed release tarball and signatures are hosted at [2].
The changelog is located at [3].
Please download, verify checksums and signatures, run the unit tests,
and vote on the release. There is a script [4] that automates some of
the verification.
The vote will be open for at least 72 hours.
[ ] +1 Release this as Apache Arrow Rust
[ ] +0
[ ] -1 Do not release this as Apache Arrow Rust because...
[1]:
https://github.com/apache/arrow-rs/tree/7a0bca35239f1d4fc3a1dca410384a1e5e962147
[2]: https://dist.apache.org/repos/dist/dev/arrow/apache-arrow-rs-6.4.0-rc1
[3]:
https://github.com/apache/arrow-rs/blob/7a0bca35239f1d4fc3a1dca410384a1e5e962147/CHANGELOG.md
[4]:
https://github.com/apache/arrow-rs/blob/master/dev/release/verify-release-candidate.sh
[5]: https://github.com/rustsec/advisory-db/tree/main/crates/arrow
Re: [VOTE][RUST] Release Apache Arrow Rust 6.4.0 RC1
Posted by Neal Richardson <ne...@gmail.com>.
+1
Ran the verification script on aarch64-apple-darwin.
Neal
On Mon, Dec 13, 2021 at 12:09 AM Benson Muite <be...@emailplus.org>
wrote:
> +1 non binding. Ran script on Rocky Linux 8.
>
> Steps:
> dnf -y update
> dnf -y install gcc tar git
> git clone https://github.com/apache/arrow-rs
> cd arrow-rs/dev/release
> bash verify-release-candidate.sh 6.4.0 1
>
> On 12/10/21 10:30 PM, Andrew Lamb wrote:
> > Hi,
> >
> > I would like to propose a release of Apache Arrow Rust Implementation,
> > version 6.4.0. I am personally excited about this release as it contains
> > the input validation needed to close out the currently open RUSTSEC
> issues
> > for Arrow [5].
> >
> > This release candidate is based on commit:
> > 7a0bca35239f1d4fc3a1dca410384a1e5e962147 [1].
> >
> > The proposed release tarball and signatures are hosted at [2].
> >
> > The changelog is located at [3].
> >
> > Please download, verify checksums and signatures, run the unit tests,
> > and vote on the release. There is a script [4] that automates some of
> > the verification.
> >
> > The vote will be open for at least 72 hours.
> >
> > [ ] +1 Release this as Apache Arrow Rust
> > [ ] +0
> > [ ] -1 Do not release this as Apache Arrow Rust because...
> >
> > [1]:
> >
> https://github.com/apache/arrow-rs/tree/7a0bca35239f1d4fc3a1dca410384a1e5e962147
> > [2]:
> https://dist.apache.org/repos/dist/dev/arrow/apache-arrow-rs-6.4.0-rc1
> > [3]:
> >
> https://github.com/apache/arrow-rs/blob/7a0bca35239f1d4fc3a1dca410384a1e5e962147/CHANGELOG.md
> > [4]:
> >
> https://github.com/apache/arrow-rs/blob/master/dev/release/verify-release-candidate.sh
> > [5]: https://github.com/rustsec/advisory-db/tree/main/crates/arrow
> >
>
>
Re: [VOTE][RUST] Release Apache Arrow Rust 6.4.0 RC1
Posted by Benson Muite <be...@emailplus.org>.
+1 non binding. Ran script on Rocky Linux 8.
Steps:
dnf -y update
dnf -y install gcc tar git
git clone https://github.com/apache/arrow-rs
cd arrow-rs/dev/release
bash verify-release-candidate.sh 6.4.0 1
On 12/10/21 10:30 PM, Andrew Lamb wrote:
> Hi,
>
> I would like to propose a release of Apache Arrow Rust Implementation,
> version 6.4.0. I am personally excited about this release as it contains
> the input validation needed to close out the currently open RUSTSEC issues
> for Arrow [5].
>
> This release candidate is based on commit:
> 7a0bca35239f1d4fc3a1dca410384a1e5e962147 [1].
>
> The proposed release tarball and signatures are hosted at [2].
>
> The changelog is located at [3].
>
> Please download, verify checksums and signatures, run the unit tests,
> and vote on the release. There is a script [4] that automates some of
> the verification.
>
> The vote will be open for at least 72 hours.
>
> [ ] +1 Release this as Apache Arrow Rust
> [ ] +0
> [ ] -1 Do not release this as Apache Arrow Rust because...
>
> [1]:
> https://github.com/apache/arrow-rs/tree/7a0bca35239f1d4fc3a1dca410384a1e5e962147
> [2]: https://dist.apache.org/repos/dist/dev/arrow/apache-arrow-rs-6.4.0-rc1
> [3]:
> https://github.com/apache/arrow-rs/blob/7a0bca35239f1d4fc3a1dca410384a1e5e962147/CHANGELOG.md
> [4]:
> https://github.com/apache/arrow-rs/blob/master/dev/release/verify-release-candidate.sh
> [5]: https://github.com/rustsec/advisory-db/tree/main/crates/arrow
>
[RESULT] Release Apache Arrow Rust 6.4.0 RC1
Posted by Andrew Lamb <al...@influxdata.com>.
The vote passes with 6 +1 (4 binding, 2 non binding) votes!
Thank you all, as always, for your help verifying and taking the time to
vote on this release
The release is available here:
https://dist.apache.org/repos/dist/release/arrow/arrow-rs-6.4.0
It has also been uploaded to crates.io:
https://crates.io/crates/arrow/6.4.0
https://crates.io/crates/arrow-flight/6.4.0
https://crates.io/crates/parquet/6.4.0
https://crates.io/crates/parquet-derive/6.4.0
Andrew
On Mon, Dec 13, 2021 at 1:34 PM Jörn Horstmann <jo...@signavio.com>
wrote:
> +1 (non-binding)
>
> Successfully ran the integration tests of our engine against the specified
> commit
>
> On Mon, Dec 13, 2021 at 5:09 PM Jorge Cardoso Leitão <
> jorgecarleitao@gmail.com> wrote:
>
> > +1
> >
> > Thank you!
> >
> > On Fri, Dec 10, 2021 at 9:50 PM Andy Grove <an...@gmail.com>
> wrote:
> >
> > > +1 (binding)
> > >
> > > Thank you, Andrew, and everyone else involved in the input validation
> > work.
> > > This definitely helps address one of the biggest criticisms of the
> crate.
> > >
> > > Andy.
> > >
> > > On Fri, Dec 10, 2021 at 12:30 PM Andrew Lamb <al...@influxdata.com>
> > wrote:
> > >
> > > > Hi,
> > > >
> > > > I would like to propose a release of Apache Arrow Rust
> Implementation,
> > > > version 6.4.0. I am personally excited about this release as it
> > contains
> > > > the input validation needed to close out the currently open RUSTSEC
> > > issues
> > > > for Arrow [5].
> > > >
> > > > This release candidate is based on commit:
> > > > 7a0bca35239f1d4fc3a1dca410384a1e5e962147 [1].
> > > >
> > > > The proposed release tarball and signatures are hosted at [2].
> > > >
> > > > The changelog is located at [3].
> > > >
> > > > Please download, verify checksums and signatures, run the unit tests,
> > > > and vote on the release. There is a script [4] that automates some of
> > > > the verification.
> > > >
> > > > The vote will be open for at least 72 hours.
> > > >
> > > > [ ] +1 Release this as Apache Arrow Rust
> > > > [ ] +0
> > > > [ ] -1 Do not release this as Apache Arrow Rust because...
> > > >
> > > > [1]:
> > > >
> > > >
> > >
> >
> https://github.com/apache/arrow-rs/tree/7a0bca35239f1d4fc3a1dca410384a1e5e962147
> > > > [2]:
> > > >
> https://dist.apache.org/repos/dist/dev/arrow/apache-arrow-rs-6.4.0-rc1
> > > > [3]:
> > > >
> > > >
> > >
> >
> https://github.com/apache/arrow-rs/blob/7a0bca35239f1d4fc3a1dca410384a1e5e962147/CHANGELOG.md
> > > > [4]:
> > > >
> > > >
> > >
> >
> https://github.com/apache/arrow-rs/blob/master/dev/release/verify-release-candidate.sh
> > > > [5]: https://github.com/rustsec/advisory-db/tree/main/crates/arrow
> > > >
> > >
> >
>
>
> --
> *Jörn Horstmann* | Senior Backend Engineer
>
> www.signavio.com
> Kurfürstenstraße 111, 10787 Berlin, Germany
>
> Work with us! <https://hubs.ly/H0wwzcr0>
>
>
>
> <https://www.linkedin.com/company/signavio/>
> <https://www.twitter.com/signavio> <https://www.facebook.com/signavio>
> <https://www.youtube.com/user/signavio>
> <https://www.xing.com/companies/signaviogmbh>
>
> <https://t-eu.xink.io/Tracking/Index/BSUAALBtAAAnu0MA0>
>
> HRB 121584 B Charlottenburg District Court, VAT ID: DE265675123
> Managing Directors: Dr. Gero Decker, Rouven Morato Adam
>
Re: [VOTE][RUST] Release Apache Arrow Rust 6.4.0 RC1
Posted by Jörn Horstmann <jo...@signavio.com>.
+1 (non-binding)
Successfully ran the integration tests of our engine against the specified
commit
On Mon, Dec 13, 2021 at 5:09 PM Jorge Cardoso Leitão <
jorgecarleitao@gmail.com> wrote:
> +1
>
> Thank you!
>
> On Fri, Dec 10, 2021 at 9:50 PM Andy Grove <an...@gmail.com> wrote:
>
> > +1 (binding)
> >
> > Thank you, Andrew, and everyone else involved in the input validation
> work.
> > This definitely helps address one of the biggest criticisms of the crate.
> >
> > Andy.
> >
> > On Fri, Dec 10, 2021 at 12:30 PM Andrew Lamb <al...@influxdata.com>
> wrote:
> >
> > > Hi,
> > >
> > > I would like to propose a release of Apache Arrow Rust Implementation,
> > > version 6.4.0. I am personally excited about this release as it
> contains
> > > the input validation needed to close out the currently open RUSTSEC
> > issues
> > > for Arrow [5].
> > >
> > > This release candidate is based on commit:
> > > 7a0bca35239f1d4fc3a1dca410384a1e5e962147 [1].
> > >
> > > The proposed release tarball and signatures are hosted at [2].
> > >
> > > The changelog is located at [3].
> > >
> > > Please download, verify checksums and signatures, run the unit tests,
> > > and vote on the release. There is a script [4] that automates some of
> > > the verification.
> > >
> > > The vote will be open for at least 72 hours.
> > >
> > > [ ] +1 Release this as Apache Arrow Rust
> > > [ ] +0
> > > [ ] -1 Do not release this as Apache Arrow Rust because...
> > >
> > > [1]:
> > >
> > >
> >
> https://github.com/apache/arrow-rs/tree/7a0bca35239f1d4fc3a1dca410384a1e5e962147
> > > [2]:
> > > https://dist.apache.org/repos/dist/dev/arrow/apache-arrow-rs-6.4.0-rc1
> > > [3]:
> > >
> > >
> >
> https://github.com/apache/arrow-rs/blob/7a0bca35239f1d4fc3a1dca410384a1e5e962147/CHANGELOG.md
> > > [4]:
> > >
> > >
> >
> https://github.com/apache/arrow-rs/blob/master/dev/release/verify-release-candidate.sh
> > > [5]: https://github.com/rustsec/advisory-db/tree/main/crates/arrow
> > >
> >
>
--
*Jörn Horstmann* | Senior Backend Engineer
www.signavio.com
Kurfürstenstraße 111, 10787 Berlin, Germany
Work with us! <https://hubs.ly/H0wwzcr0>
<https://www.linkedin.com/company/signavio/>
<https://www.twitter.com/signavio> <https://www.facebook.com/signavio>
<https://www.youtube.com/user/signavio>
<https://www.xing.com/companies/signaviogmbh>
<https://t-eu.xink.io/Tracking/Index/BSUAALBtAAAnu0MA0>
HRB 121584 B Charlottenburg District Court, VAT ID: DE265675123
Managing Directors: Dr. Gero Decker, Rouven Morato Adam
Re: [VOTE][RUST] Release Apache Arrow Rust 6.4.0 RC1
Posted by Jorge Cardoso Leitão <jo...@gmail.com>.
+1
Thank you!
On Fri, Dec 10, 2021 at 9:50 PM Andy Grove <an...@gmail.com> wrote:
> +1 (binding)
>
> Thank you, Andrew, and everyone else involved in the input validation work.
> This definitely helps address one of the biggest criticisms of the crate.
>
> Andy.
>
> On Fri, Dec 10, 2021 at 12:30 PM Andrew Lamb <al...@influxdata.com> wrote:
>
> > Hi,
> >
> > I would like to propose a release of Apache Arrow Rust Implementation,
> > version 6.4.0. I am personally excited about this release as it contains
> > the input validation needed to close out the currently open RUSTSEC
> issues
> > for Arrow [5].
> >
> > This release candidate is based on commit:
> > 7a0bca35239f1d4fc3a1dca410384a1e5e962147 [1].
> >
> > The proposed release tarball and signatures are hosted at [2].
> >
> > The changelog is located at [3].
> >
> > Please download, verify checksums and signatures, run the unit tests,
> > and vote on the release. There is a script [4] that automates some of
> > the verification.
> >
> > The vote will be open for at least 72 hours.
> >
> > [ ] +1 Release this as Apache Arrow Rust
> > [ ] +0
> > [ ] -1 Do not release this as Apache Arrow Rust because...
> >
> > [1]:
> >
> >
> https://github.com/apache/arrow-rs/tree/7a0bca35239f1d4fc3a1dca410384a1e5e962147
> > [2]:
> > https://dist.apache.org/repos/dist/dev/arrow/apache-arrow-rs-6.4.0-rc1
> > [3]:
> >
> >
> https://github.com/apache/arrow-rs/blob/7a0bca35239f1d4fc3a1dca410384a1e5e962147/CHANGELOG.md
> > [4]:
> >
> >
> https://github.com/apache/arrow-rs/blob/master/dev/release/verify-release-candidate.sh
> > [5]: https://github.com/rustsec/advisory-db/tree/main/crates/arrow
> >
>
Re: [VOTE][RUST] Release Apache Arrow Rust 6.4.0 RC1
Posted by Andy Grove <an...@gmail.com>.
+1 (binding)
Thank you, Andrew, and everyone else involved in the input validation work.
This definitely helps address one of the biggest criticisms of the crate.
Andy.
On Fri, Dec 10, 2021 at 12:30 PM Andrew Lamb <al...@influxdata.com> wrote:
> Hi,
>
> I would like to propose a release of Apache Arrow Rust Implementation,
> version 6.4.0. I am personally excited about this release as it contains
> the input validation needed to close out the currently open RUSTSEC issues
> for Arrow [5].
>
> This release candidate is based on commit:
> 7a0bca35239f1d4fc3a1dca410384a1e5e962147 [1].
>
> The proposed release tarball and signatures are hosted at [2].
>
> The changelog is located at [3].
>
> Please download, verify checksums and signatures, run the unit tests,
> and vote on the release. There is a script [4] that automates some of
> the verification.
>
> The vote will be open for at least 72 hours.
>
> [ ] +1 Release this as Apache Arrow Rust
> [ ] +0
> [ ] -1 Do not release this as Apache Arrow Rust because...
>
> [1]:
>
> https://github.com/apache/arrow-rs/tree/7a0bca35239f1d4fc3a1dca410384a1e5e962147
> [2]:
> https://dist.apache.org/repos/dist/dev/arrow/apache-arrow-rs-6.4.0-rc1
> [3]:
>
> https://github.com/apache/arrow-rs/blob/7a0bca35239f1d4fc3a1dca410384a1e5e962147/CHANGELOG.md
> [4]:
>
> https://github.com/apache/arrow-rs/blob/master/dev/release/verify-release-candidate.sh
> [5]: https://github.com/rustsec/advisory-db/tree/main/crates/arrow
>