You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@fory.apache.org by Shawn Yang <ch...@apache.org> on 2026/10/07 04:02:51 UTC
[VOTE] Release Apache Fory v1.7.7-rc2
Hello, Apache Fory Community:
This is a call for a vote to release Apache Fory 1.7.7.
Apache Fory is a blazingly fast multi-language serialization framework
for idiomatic domain objects, schema IDL, and cross-language data exchange.
Compared with RC1, this candidate includes the source, Python wheel, and JVM
license/NOTICE corrections. Source archives are now built directly from the
RC tag, without temporary licensing commits, and match direct git archive
output byte for byte.
The discussion thread:
https://lists.apache.org/thread/ypr4371o6vkmg21xsqoclhvcmfmhn370
The change list since Apache Fory 1.7.6:
https://github.com/apache/fory/compare/v1.7.6...v1.7.7-rc2
The release candidate artifacts:
https://dist.apache.org/repos/dist/dev/fory/1.7.7/
The Maven staging repositories:
Java and Kotlin:
https://repository.apache.org/content/repositories/orgapachefory-1138/
Scala:
https://repository.apache.org/content/repositories/orgapachefory-1139/
The release tag:
https://github.com/apache/fory/tree/v1.7.7-rc2
The release commit:
https://github.com/apache/fory/commit/f94e68178f952dbcc89ee303b07a4c187d1f422d
The artifacts are signed with PGP key fingerprint
1E2CDAE4C08AD7D694D1CB139D7BE8E45E580BA4, corresponding to
chaokunyang@apache.org. The key can be found in the KEYS file:
https://downloads.apache.org/fory/KEYS
The vote will remain open for at least 72 hours.
Please vote accordingly:
[ ] +1 approve
[ ] +0 no opinion
[ ] -1 disapprove (please explain why)
To learn more about Fory, please see:
https://fory.apache.org/
Checklist for reference:
[ ] The Fory source archive downloads successfully.
[ ] Checksums and PGP signatures are valid.
[ ] Source distribution names match the release version.
[ ] LICENSE and NOTICE files are correct.
[ ] Files have license headers where required.
[ ] No compiled archives are bundled in the source archive.
[ ] The release can be built from source.
How to build and test:
https://github.com/apache/fory/blob/v1.7.7-rc2/docs/development/index.md
Thanks,
Shawn Yang
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@fory.apache.org
For additional commands, e-mail: dev-help@fory.apache.org
Re: [VOTE] Release Apache Fory v1.7.7-rc2
Posted by Shawn Yang <sh...@gmail.com>.
Hi all,
Due to the JVM artifact reproducibility issue reported in #4138 and
several other recently reported bugs, I’m cancelling the vote for
Apache Fory 1.7.7-rc2.
I’m preparing 1.7.7-rc3 with the fixes and will start a new vote once
it is ready.
Thanks to everyone who reviewed this candidate and reported these issues.
Best,
Shawn
On Wed, Oct 7, 2026 at 11:07 PM Swatantra <ma...@gmail.com> wrote:
>
> +1 (non-binding)
>
> I have verified the release candidate v1.7.7-rc2 on Windows 11 (x86_64, Go
> 1.22):
>
> [x] The Fory source archive downloads successfully.
> [x] Checksums and PGP signatures are valid:
> - SHA-512 matches
> (f7b6a678c08281388968943fc787557e6447aad224b521f41b9a3ca3ac2b0856617e08a7b6abc377e34111e0a6979c7a712a4e4e1fe80d8ac09e8dcaf8192206)
> - PGP signature verified against Shawn Yang's key
> (1E2CDAE4C08AD7D694D1CB139D7BE8E45E580BA4)
> [x] Source distribution names match the release version.
> [x] LICENSE and NOTICE files are present and correct.
> [x] Files have license headers where required.
> [x] No compiled binaries found bundled in the source archive.
> [x] The release builds and tests pass from source:
> - Successfully ran `go test ./...` across all packages in go/fory with
> 100% pass.
>
> Thanks,
> Swatantra Yadav
>
> On Wed, 7 Oct 2026 at 15:43, PJ Fanning <fa...@apache.org> wrote:
>
> > +1 binding
> > [x] The Fory source archive downloads successfully.
> > [x] Checksums and PGP signatures are valid.
> > [x] Source distribution names match the release version.
> > [x] LICENSE and NOTICE files are correct.
> > [x] Files have license headers where required. -- 7 files are under
> > discussion still but not a blocker
> > [x] No compiled archives are bundled in the source archive.
> > [x] The release can be built from source. -- I only built the Java/Scala
> > parts
> >
> > The source archive appears to be reproducible now.
> > The jar files are not reproducible (except the Scala ones, which are
> > reproducible). I'm raising an issue for this.
> >
> > On Wed, 7 Oct 2026 at 05:03, Shawn Yang <ch...@apache.org> wrote:
> > >
> > > Hello, Apache Fory Community:
> > >
> > > This is a call for a vote to release Apache Fory 1.7.7.
> > >
> > > Apache Fory is a blazingly fast multi-language serialization framework
> > > for idiomatic domain objects, schema IDL, and cross-language data
> > exchange.
> > >
> > > Compared with RC1, this candidate includes the source, Python wheel, and
> > JVM
> > > license/NOTICE corrections. Source archives are now built directly from
> > the
> > > RC tag, without temporary licensing commits, and match direct git archive
> > > output byte for byte.
> > >
> > > The discussion thread:
> > > https://lists.apache.org/thread/ypr4371o6vkmg21xsqoclhvcmfmhn370
> > >
> > > The change list since Apache Fory 1.7.6:
> > > https://github.com/apache/fory/compare/v1.7.6...v1.7.7-rc2
> > >
> > > The release candidate artifacts:
> > > https://dist.apache.org/repos/dist/dev/fory/1.7.7/
> > >
> > > The Maven staging repositories:
> > > Java and Kotlin:
> > > https://repository.apache.org/content/repositories/orgapachefory-1138/
> > > Scala:
> > > https://repository.apache.org/content/repositories/orgapachefory-1139/
> > >
> > > The release tag:
> > > https://github.com/apache/fory/tree/v1.7.7-rc2
> > >
> > > The release commit:
> > >
> > https://github.com/apache/fory/commit/f94e68178f952dbcc89ee303b07a4c187d1f422d
> > >
> > > The artifacts are signed with PGP key fingerprint
> > > 1E2CDAE4C08AD7D694D1CB139D7BE8E45E580BA4, corresponding to
> > > chaokunyang@apache.org. The key can be found in the KEYS file:
> > > https://downloads.apache.org/fory/KEYS
> > >
> > > The vote will remain open for at least 72 hours.
> > >
> > > Please vote accordingly:
> > >
> > > [ ] +1 approve
> > > [ ] +0 no opinion
> > > [ ] -1 disapprove (please explain why)
> > >
> > > To learn more about Fory, please see:
> > > https://fory.apache.org/
> > >
> > > Checklist for reference:
> > >
> > > [ ] The Fory source archive downloads successfully.
> > > [ ] Checksums and PGP signatures are valid.
> > > [ ] Source distribution names match the release version.
> > > [ ] LICENSE and NOTICE files are correct.
> > > [ ] Files have license headers where required.
> > > [ ] No compiled archives are bundled in the source archive.
> > > [ ] The release can be built from source.
> > >
> > > How to build and test:
> > > https://github.com/apache/fory/blob/v1.7.7-rc2/docs/development/index.md
> > >
> > > Thanks,
> > > Shawn Yang
> > >
> > > ---------------------------------------------------------------------
> > > To unsubscribe, e-mail: dev-unsubscribe@fory.apache.org
> > > For additional commands, e-mail: dev-help@fory.apache.org
> > >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: dev-unsubscribe@fory.apache.org
> > For additional commands, e-mail: dev-help@fory.apache.org
> >
> >
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@fory.apache.org
For additional commands, e-mail: dev-help@fory.apache.org
Re: [VOTE] Release Apache Fory v1.7.7-rc2
Posted by Swatantra <ma...@gmail.com>.
+1 (non-binding)
I have verified the release candidate v1.7.7-rc2 on Windows 11 (x86_64, Go
1.22):
[x] The Fory source archive downloads successfully.
[x] Checksums and PGP signatures are valid:
- SHA-512 matches
(f7b6a678c08281388968943fc787557e6447aad224b521f41b9a3ca3ac2b0856617e08a7b6abc377e34111e0a6979c7a712a4e4e1fe80d8ac09e8dcaf8192206)
- PGP signature verified against Shawn Yang's key
(1E2CDAE4C08AD7D694D1CB139D7BE8E45E580BA4)
[x] Source distribution names match the release version.
[x] LICENSE and NOTICE files are present and correct.
[x] Files have license headers where required.
[x] No compiled binaries found bundled in the source archive.
[x] The release builds and tests pass from source:
- Successfully ran `go test ./...` across all packages in go/fory with
100% pass.
Thanks,
Swatantra Yadav
On Wed, 7 Oct 2026 at 15:43, PJ Fanning <fa...@apache.org> wrote:
> +1 binding
> [x] The Fory source archive downloads successfully.
> [x] Checksums and PGP signatures are valid.
> [x] Source distribution names match the release version.
> [x] LICENSE and NOTICE files are correct.
> [x] Files have license headers where required. -- 7 files are under
> discussion still but not a blocker
> [x] No compiled archives are bundled in the source archive.
> [x] The release can be built from source. -- I only built the Java/Scala
> parts
>
> The source archive appears to be reproducible now.
> The jar files are not reproducible (except the Scala ones, which are
> reproducible). I'm raising an issue for this.
>
> On Wed, 7 Oct 2026 at 05:03, Shawn Yang <ch...@apache.org> wrote:
> >
> > Hello, Apache Fory Community:
> >
> > This is a call for a vote to release Apache Fory 1.7.7.
> >
> > Apache Fory is a blazingly fast multi-language serialization framework
> > for idiomatic domain objects, schema IDL, and cross-language data
> exchange.
> >
> > Compared with RC1, this candidate includes the source, Python wheel, and
> JVM
> > license/NOTICE corrections. Source archives are now built directly from
> the
> > RC tag, without temporary licensing commits, and match direct git archive
> > output byte for byte.
> >
> > The discussion thread:
> > https://lists.apache.org/thread/ypr4371o6vkmg21xsqoclhvcmfmhn370
> >
> > The change list since Apache Fory 1.7.6:
> > https://github.com/apache/fory/compare/v1.7.6...v1.7.7-rc2
> >
> > The release candidate artifacts:
> > https://dist.apache.org/repos/dist/dev/fory/1.7.7/
> >
> > The Maven staging repositories:
> > Java and Kotlin:
> > https://repository.apache.org/content/repositories/orgapachefory-1138/
> > Scala:
> > https://repository.apache.org/content/repositories/orgapachefory-1139/
> >
> > The release tag:
> > https://github.com/apache/fory/tree/v1.7.7-rc2
> >
> > The release commit:
> >
> https://github.com/apache/fory/commit/f94e68178f952dbcc89ee303b07a4c187d1f422d
> >
> > The artifacts are signed with PGP key fingerprint
> > 1E2CDAE4C08AD7D694D1CB139D7BE8E45E580BA4, corresponding to
> > chaokunyang@apache.org. The key can be found in the KEYS file:
> > https://downloads.apache.org/fory/KEYS
> >
> > The vote will remain open for at least 72 hours.
> >
> > Please vote accordingly:
> >
> > [ ] +1 approve
> > [ ] +0 no opinion
> > [ ] -1 disapprove (please explain why)
> >
> > To learn more about Fory, please see:
> > https://fory.apache.org/
> >
> > Checklist for reference:
> >
> > [ ] The Fory source archive downloads successfully.
> > [ ] Checksums and PGP signatures are valid.
> > [ ] Source distribution names match the release version.
> > [ ] LICENSE and NOTICE files are correct.
> > [ ] Files have license headers where required.
> > [ ] No compiled archives are bundled in the source archive.
> > [ ] The release can be built from source.
> >
> > How to build and test:
> > https://github.com/apache/fory/blob/v1.7.7-rc2/docs/development/index.md
> >
> > Thanks,
> > Shawn Yang
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: dev-unsubscribe@fory.apache.org
> > For additional commands, e-mail: dev-help@fory.apache.org
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@fory.apache.org
> For additional commands, e-mail: dev-help@fory.apache.org
>
>
Re: [VOTE] Release Apache Fory v1.7.7-rc2
Posted by PJ Fanning <fa...@apache.org>.
+1 binding
[x] The Fory source archive downloads successfully.
[x] Checksums and PGP signatures are valid.
[x] Source distribution names match the release version.
[x] LICENSE and NOTICE files are correct.
[x] Files have license headers where required. -- 7 files are under
discussion still but not a blocker
[x] No compiled archives are bundled in the source archive.
[x] The release can be built from source. -- I only built the Java/Scala parts
The source archive appears to be reproducible now.
The jar files are not reproducible (except the Scala ones, which are
reproducible). I'm raising an issue for this.
On Wed, 7 Oct 2026 at 05:03, Shawn Yang <ch...@apache.org> wrote:
>
> Hello, Apache Fory Community:
>
> This is a call for a vote to release Apache Fory 1.7.7.
>
> Apache Fory is a blazingly fast multi-language serialization framework
> for idiomatic domain objects, schema IDL, and cross-language data exchange.
>
> Compared with RC1, this candidate includes the source, Python wheel, and JVM
> license/NOTICE corrections. Source archives are now built directly from the
> RC tag, without temporary licensing commits, and match direct git archive
> output byte for byte.
>
> The discussion thread:
> https://lists.apache.org/thread/ypr4371o6vkmg21xsqoclhvcmfmhn370
>
> The change list since Apache Fory 1.7.6:
> https://github.com/apache/fory/compare/v1.7.6...v1.7.7-rc2
>
> The release candidate artifacts:
> https://dist.apache.org/repos/dist/dev/fory/1.7.7/
>
> The Maven staging repositories:
> Java and Kotlin:
> https://repository.apache.org/content/repositories/orgapachefory-1138/
> Scala:
> https://repository.apache.org/content/repositories/orgapachefory-1139/
>
> The release tag:
> https://github.com/apache/fory/tree/v1.7.7-rc2
>
> The release commit:
> https://github.com/apache/fory/commit/f94e68178f952dbcc89ee303b07a4c187d1f422d
>
> The artifacts are signed with PGP key fingerprint
> 1E2CDAE4C08AD7D694D1CB139D7BE8E45E580BA4, corresponding to
> chaokunyang@apache.org. The key can be found in the KEYS file:
> https://downloads.apache.org/fory/KEYS
>
> The vote will remain open for at least 72 hours.
>
> Please vote accordingly:
>
> [ ] +1 approve
> [ ] +0 no opinion
> [ ] -1 disapprove (please explain why)
>
> To learn more about Fory, please see:
> https://fory.apache.org/
>
> Checklist for reference:
>
> [ ] The Fory source archive downloads successfully.
> [ ] Checksums and PGP signatures are valid.
> [ ] Source distribution names match the release version.
> [ ] LICENSE and NOTICE files are correct.
> [ ] Files have license headers where required.
> [ ] No compiled archives are bundled in the source archive.
> [ ] The release can be built from source.
>
> How to build and test:
> https://github.com/apache/fory/blob/v1.7.7-rc2/docs/development/index.md
>
> Thanks,
> Shawn Yang
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@fory.apache.org
> For additional commands, e-mail: dev-help@fory.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@fory.apache.org
For additional commands, e-mail: dev-help@fory.apache.org