You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@kafka.apache.org by Lucas Brutschy via dev <de...@kafka.apache.org> on 2026/02/03 16:15:31 UTC
Re: [VOTE] 3.9.2 RC0
+1 (binding)
* Verified SHA512 checksums for all artifacts
* Verified LICENSE and NOTICE files (binary NOTICE has 2021
copyright - known issue, not a blocker)
* Tested Docker image (apache/kafka:3.9.2-rc0) - quickstart works
* Verified topic creation, produce, and consume in KRaft mode
* Checked Javadoc and documentation links
* Verified Maven staging artifacts dated 2026-01-14
* Verified GitHub tag matches release
Cheers,
Lucas
On Sat, Jan 31, 2026 at 4:57 AM Chia-Ping Tsai <ch...@apache.org> wrote:
>
> +1 (binding)
>
> - run all tests with retries and they passed
> - deployed in a test environment with a standard pub/sub app. works as expected
>
> Note that KAFKA-19581 is still there,but since the included code only impacts e2e tests rather than production, I'm comfortable moving forward
>
> Best,
> Chia-Ping
>
> On 2026/01/15 03:45:05 PoAn Yang wrote:
> > Hello Kafka users, developers and client-developers,
> >
> > This is the RC0 candidate for release of Apache Kafka 3.9.2.
> >
> > This is a bug-fix & CVE-fix release like CVE-2024-29371, CVE-2025-58057, and CVE-2025-48734. In this version, we have a KIP-1252 to align AlterConfigPolicy behavior between ZK and Kraft.
> >
> > Release notes for the 3.9.2 release:
> > https://dist.apache.org/repos/dist/dev/kafka/3.9.2-rc0/RELEASE_NOTES.html
> >
> > Please download, test and vote by *Wednesday, January 21, 9:00 PM PT*
> >
> > Kafka's KEYS file containing PGP keys we use to sign the release:
> > https://kafka.apache.org/KEYS
> >
> > * Release artifacts to be voted upon (source and binary):
> > https://dist.apache.org/repos/dist/dev/kafka/3.9.2-rc0/
> >
> > * Docker release artifacts to be voted upon:
> > apache/kafka:3.9.2-rc0
> > apache/kafka-native:3.9.2-rc0
> >
> > * Maven artifacts to be voted upon:
> > https://repository.apache.org/content/groups/staging/org/apache/kafka/
> >
> > * Javadoc:
> > https://dist.apache.org/repos/dist/dev/kafka/3.9.2-rc0/javadoc/
> >
> > * Tag to be voted upon (off 3.9 branch) is the 3.9.2 tag:
> > https://github.com/apache/kafka/releases/tag/3.9.2-rc0
> >
> > * Documentation:
> > https://kafka.apache.org/39/documentation.html
> >
> > * Protocol:
> > https://kafka.apache.org/39/protocol.html
> >
> > * Successful CI builds for the 3.9 branch:
> > Unit/integration tests (There are some flaky tests): https://ci-builds.apache.org/job/Kafka/job/kafka/job/3.9/258/
> > System tests: https://jenkins.opensource4you.tw/job/kafka-e2e/629/
> > For failed tests, they can pass in another run, so the result is green: https://drive.google.com/drive/folders/1GXoTYEUu8PjuJYoVvUbAm9LCJotDRfJ-?usp=sharing
> >
> > * Successful Docker Image Github Actions Pipeline for 3.9 branch:
> > Docker Build Test Pipeline (JVM): https://github.com/apache/kafka/actions/runs/20997657980
> > Docker Build Test Pipeline (Native): https://github.com/apache/kafka/actions/runs/20997669079
> >
> > Thanks,
> > PoAn
Re: [VOTE] 3.9.2 RC0
Posted by PoAn Yang <ya...@gmail.com>.
Hello Kafka users, developers and client-developers,
I start a new thread for 3.9.2-rc1. Please help to review and vote it. Thank you.
https://lists.apache.org/thread/tr139g2q8f3l6v7876zgfw1wdxjqmd01
Kind regards,
PoAn
> On Feb 4, 2026, at 11:40 PM, PoAn Yang <ya...@gmail.com> wrote:
>
> Thanks for all voters (binding and non-binding).
>
> It looks like we have another CVE in 3.9 branch. I will check
> whether to include it in 3.9.2 release.
>
> https://github.com/apache/kafka/pull/21395
>
> Thank you for your patience.
> PoAn
>
>> On Feb 4, 2026, at 1:15 AM, Lucas Brutschy via dev <de...@kafka.apache.org> wrote:
>>
>> +1 (binding)
>>
>> * Verified SHA512 checksums for all artifacts
>> * Verified LICENSE and NOTICE files (binary NOTICE has 2021
>> copyright - known issue, not a blocker)
>> * Tested Docker image (apache/kafka:3.9.2-rc0) - quickstart works
>> * Verified topic creation, produce, and consume in KRaft mode
>> * Checked Javadoc and documentation links
>> * Verified Maven staging artifacts dated 2026-01-14
>> * Verified GitHub tag matches release
>>
>> Cheers,
>> Lucas
>>
>> On Sat, Jan 31, 2026 at 4:57 AM Chia-Ping Tsai <ch...@apache.org> wrote:
>>>
>>> +1 (binding)
>>>
>>> - run all tests with retries and they passed
>>> - deployed in a test environment with a standard pub/sub app. works as expected
>>>
>>> Note that KAFKA-19581 is still there,but since the included code only impacts e2e tests rather than production, I'm comfortable moving forward
>>>
>>> Best,
>>> Chia-Ping
>>>
>>> On 2026/01/15 03:45:05 PoAn Yang wrote:
>>>> Hello Kafka users, developers and client-developers,
>>>>
>>>> This is the RC0 candidate for release of Apache Kafka 3.9.2.
>>>>
>>>> This is a bug-fix & CVE-fix release like CVE-2024-29371, CVE-2025-58057, and CVE-2025-48734. In this version, we have a KIP-1252 to align AlterConfigPolicy behavior between ZK and Kraft.
>>>>
>>>> Release notes for the 3.9.2 release:
>>>> https://dist.apache.org/repos/dist/dev/kafka/3.9.2-rc0/RELEASE_NOTES.html
>>>>
>>>> Please download, test and vote by *Wednesday, January 21, 9:00 PM PT*
>>>>
>>>> Kafka's KEYS file containing PGP keys we use to sign the release:
>>>> https://kafka.apache.org/KEYS
>>>>
>>>> * Release artifacts to be voted upon (source and binary):
>>>> https://dist.apache.org/repos/dist/dev/kafka/3.9.2-rc0/
>>>>
>>>> * Docker release artifacts to be voted upon:
>>>> apache/kafka:3.9.2-rc0
>>>> apache/kafka-native:3.9.2-rc0
>>>>
>>>> * Maven artifacts to be voted upon:
>>>> https://repository.apache.org/content/groups/staging/org/apache/kafka/
>>>>
>>>> * Javadoc:
>>>> https://dist.apache.org/repos/dist/dev/kafka/3.9.2-rc0/javadoc/
>>>>
>>>> * Tag to be voted upon (off 3.9 branch) is the 3.9.2 tag:
>>>> https://github.com/apache/kafka/releases/tag/3.9.2-rc0
>>>>
>>>> * Documentation:
>>>> https://kafka.apache.org/39/documentation.html
>>>>
>>>> * Protocol:
>>>> https://kafka.apache.org/39/protocol.html
>>>>
>>>> * Successful CI builds for the 3.9 branch:
>>>> Unit/integration tests (There are some flaky tests): https://ci-builds.apache.org/job/Kafka/job/kafka/job/3.9/258/
>>>> System tests: https://jenkins.opensource4you.tw/job/kafka-e2e/629/
>>>> For failed tests, they can pass in another run, so the result is green: https://drive.google.com/drive/folders/1GXoTYEUu8PjuJYoVvUbAm9LCJotDRfJ-?usp=sharing
>>>>
>>>> * Successful Docker Image Github Actions Pipeline for 3.9 branch:
>>>> Docker Build Test Pipeline (JVM): https://github.com/apache/kafka/actions/runs/20997657980
>>>> Docker Build Test Pipeline (Native): https://github.com/apache/kafka/actions/runs/20997669079
>>>>
>>>> Thanks,
>>>> PoAn
>
Re: [VOTE] 3.9.2 RC0
Posted by PoAn Yang <ya...@gmail.com>.
Thanks for all voters (binding and non-binding).
It looks like we have another CVE in 3.9 branch. I will check
whether to include it in 3.9.2 release.
https://github.com/apache/kafka/pull/21395
Thank you for your patience.
PoAn
> On Feb 4, 2026, at 1:15 AM, Lucas Brutschy via dev <de...@kafka.apache.org> wrote:
>
> +1 (binding)
>
> * Verified SHA512 checksums for all artifacts
> * Verified LICENSE and NOTICE files (binary NOTICE has 2021
> copyright - known issue, not a blocker)
> * Tested Docker image (apache/kafka:3.9.2-rc0) - quickstart works
> * Verified topic creation, produce, and consume in KRaft mode
> * Checked Javadoc and documentation links
> * Verified Maven staging artifacts dated 2026-01-14
> * Verified GitHub tag matches release
>
> Cheers,
> Lucas
>
> On Sat, Jan 31, 2026 at 4:57 AM Chia-Ping Tsai <ch...@apache.org> wrote:
>>
>> +1 (binding)
>>
>> - run all tests with retries and they passed
>> - deployed in a test environment with a standard pub/sub app. works as expected
>>
>> Note that KAFKA-19581 is still there,but since the included code only impacts e2e tests rather than production, I'm comfortable moving forward
>>
>> Best,
>> Chia-Ping
>>
>> On 2026/01/15 03:45:05 PoAn Yang wrote:
>>> Hello Kafka users, developers and client-developers,
>>>
>>> This is the RC0 candidate for release of Apache Kafka 3.9.2.
>>>
>>> This is a bug-fix & CVE-fix release like CVE-2024-29371, CVE-2025-58057, and CVE-2025-48734. In this version, we have a KIP-1252 to align AlterConfigPolicy behavior between ZK and Kraft.
>>>
>>> Release notes for the 3.9.2 release:
>>> https://dist.apache.org/repos/dist/dev/kafka/3.9.2-rc0/RELEASE_NOTES.html
>>>
>>> Please download, test and vote by *Wednesday, January 21, 9:00 PM PT*
>>>
>>> Kafka's KEYS file containing PGP keys we use to sign the release:
>>> https://kafka.apache.org/KEYS
>>>
>>> * Release artifacts to be voted upon (source and binary):
>>> https://dist.apache.org/repos/dist/dev/kafka/3.9.2-rc0/
>>>
>>> * Docker release artifacts to be voted upon:
>>> apache/kafka:3.9.2-rc0
>>> apache/kafka-native:3.9.2-rc0
>>>
>>> * Maven artifacts to be voted upon:
>>> https://repository.apache.org/content/groups/staging/org/apache/kafka/
>>>
>>> * Javadoc:
>>> https://dist.apache.org/repos/dist/dev/kafka/3.9.2-rc0/javadoc/
>>>
>>> * Tag to be voted upon (off 3.9 branch) is the 3.9.2 tag:
>>> https://github.com/apache/kafka/releases/tag/3.9.2-rc0
>>>
>>> * Documentation:
>>> https://kafka.apache.org/39/documentation.html
>>>
>>> * Protocol:
>>> https://kafka.apache.org/39/protocol.html
>>>
>>> * Successful CI builds for the 3.9 branch:
>>> Unit/integration tests (There are some flaky tests): https://ci-builds.apache.org/job/Kafka/job/kafka/job/3.9/258/
>>> System tests: https://jenkins.opensource4you.tw/job/kafka-e2e/629/
>>> For failed tests, they can pass in another run, so the result is green: https://drive.google.com/drive/folders/1GXoTYEUu8PjuJYoVvUbAm9LCJotDRfJ-?usp=sharing
>>>
>>> * Successful Docker Image Github Actions Pipeline for 3.9 branch:
>>> Docker Build Test Pipeline (JVM): https://github.com/apache/kafka/actions/runs/20997657980
>>> Docker Build Test Pipeline (Native): https://github.com/apache/kafka/actions/runs/20997669079
>>>
>>> Thanks,
>>> PoAn