You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@pulsar.apache.org by Lari Hotari <lh...@apache.org> on 2021/05/28 10:09:55 UTC

[VOTE] Pulsar Release 2.6.4 Candidate 1

This is the first release candidate for Apache Pulsar, version 2.6.4.

It contains the following changes:
https://github.com/apache/pulsar/compare/v2.6.3...v2.6.4-candidate-1

The fix for CVE-2021-22160 [1] made as part of PR #9172 [2] has been
cherry-picked to branch-2.6 in commit 67e7e0cd [3].
It is included in this release.

*** Please download, test and vote on this release. This vote will stay
open for at least 72 hours ***

Note that we are voting upon the source (tag), binaries are provided for
convenience.

Source and binary files:
https://dist.apache.org/repos/dist/dev/pulsar/pulsar-2.6.4-candidate-1/

SHA-512 checksums:
1a2eaf978d07412668a51fb60d0635a4d5b40d5e9af1a1421100f784902e6a7f02c34dd4d579d58d97fb1b269cc323007943dbf4c3ad4c123a0a262522f6697e
 apache-pulsar-2.6.4-bin.tar.gz
c4f415688655ea531724c2d1e82d13a5a9d3d772830860c37213b5ce5bdb1ec3b79ead65e5b1b84015bfe6cf1fdef80b8555bf96b3b9e28815659a073b255342
 apache-pulsar-2.6.4-src.tar.gz

Maven staging repo:
https://repository.apache.org/content/repositories/orgapachepulsar-1082/

The tag to be voted upon:
v2.6.4-candidate-1 (a3f0b88658116ab2223d2e0243b0ee2d33ae8c63)
https://github.com/apache/pulsar/releases/tag/v2.6.4-candidate-1

Pulsar's KEYS file containing PGP keys we use to sign the release:
https://dist.apache.org/repos/dist/dev/pulsar/KEYS

Please download the source package, and follow the README to build and run
the Pulsar standalone service.

[1]
https://lists.apache.org/thread.html/r347650d15a3e9c5f58b83e918b6ad6dedc2a63d3eb63da8e6a7be87e%40%3Cdev.pulsar.apache.org%3E
[2] https://github.com/apache/pulsar/pull/9172
[3] https://github.com/apache/pulsar/commit/67e7e0cd

Re: [VOTE] Pulsar Release 2.6.4 Candidate 1

Posted by Nozomi Kurihara <nk...@yahoo-corp.jp>.
+1 (binding)

- check signatures/checksums
- compile the source
- standalone/producer/consumer worked
- function/cassandra-connector worked

Thank you for your great work.

Best Regards,
Nozomi

********************
栗原 望 (くりはらのぞみ)

ヤフー株式会社 テクノロジーグループ
システム統括本部 クラウドプラットフォーム本部

Nozomi Kurihara

Cloud Platform Development Division
System Management Group

Yahoo Japan Corporation
Kioi Tower, Tokyo Garden Terrace Kioicho,
1-3 Kioicho, Chiyoda-ku, Tokyo, 102-8282 Japan

TEL +81-3-6898-5866
nkurihar@yahoo-corp.jp
********************
________________________________
差出人: Yuri Mizushima <yu...@yahoo-corp.jp>
送信日時: 2021年5月31日 17:22
宛先: dev@pulsar.apache.org <de...@pulsar.apache.org>
件名: Re: [VOTE] Pulsar Release 2.6.4 Candidate 1

+1 (non-binding)

I checked
* shasum and signature
* pub/sub and Java Functions
* connectors
* stateful functions

and found no problem.
Also, I checked the commits and found https://github.com/apache/pulsar/pull/9172 in this release.
Thank you for your work!

--
Yuri Mizushima
yumizush@yahoo-corp.jp


"Lari Hotari" <lh...@apache.org> wrote:

    Please download, test and vote on this release asap.

    BR, Lari

    On Fri, May 28, 2021 at 1:09 PM Lari Hotari <lh...@apache.org> wrote:

    > This is the first release candidate for Apache Pulsar, version 2.6.4.
    >
    > It contains the following changes:
    > https://github.com/apache/pulsar/compare/v2.6.3...v2.6.4-candidate-1
    >
    > The fix for CVE-2021-22160 [1] made as part of PR #9172 [2] has been
    > cherry-picked to branch-2.6 in commit 67e7e0cd [3].
    > It is included in this release.
    >
    > *** Please download, test and vote on this release. This vote will stay
    > open for at least 72 hours ***
    >
    > Note that we are voting upon the source (tag), binaries are provided for
    > convenience.
    >
    > Source and binary files:
    > https://dist.apache.org/repos/dist/dev/pulsar/pulsar-2.6.4-candidate-1/
    >
    > SHA-512 checksums:
    > 1a2eaf978d07412668a51fb60d0635a4d5b40d5e9af1a1421100f784902e6a7f02c34dd4d579d58d97fb1b269cc323007943dbf4c3ad4c123a0a262522f6697e
    >  apache-pulsar-2.6.4-bin.tar.gz
    > c4f415688655ea531724c2d1e82d13a5a9d3d772830860c37213b5ce5bdb1ec3b79ead65e5b1b84015bfe6cf1fdef80b8555bf96b3b9e28815659a073b255342
    >  apache-pulsar-2.6.4-src.tar.gz
    >
    > Maven staging repo:
    > https://repository.apache.org/content/repositories/orgapachepulsar-1082/
    >
    > The tag to be voted upon:
    > v2.6.4-candidate-1 (a3f0b88658116ab2223d2e0243b0ee2d33ae8c63)
    > https://github.com/apache/pulsar/releases/tag/v2.6.4-candidate-1
    >
    > Pulsar's KEYS file containing PGP keys we use to sign the release:
    > https://dist.apache.org/repos/dist/dev/pulsar/KEYS
    >
    > Please download the source package, and follow the README to build and run
    > the Pulsar standalone service.
    >
    > [1]
    > https://lists.apache.org/thread.html/r347650d15a3e9c5f58b83e918b6ad6dedc2a63d3eb63da8e6a7be87e%40%3Cdev.pulsar.apache.org%3E
    > [2] https://github.com/apache/pulsar/pull/9172
    > [3] https://github.com/apache/pulsar/commit/67e7e0cd
    >


Re: [VOTE] Pulsar Release 2.6.4 Candidate 1

Posted by Yuri Mizushima <yu...@yahoo-corp.jp>.
+1 (non-binding)

I checked
* shasum and signature
* pub/sub and Java Functions
* connectors
* stateful functions

and found no problem.
Also, I checked the commits and found https://github.com/apache/pulsar/pull/9172 in this release.
Thank you for your work!

-- 
Yuri Mizushima
yumizush@yahoo-corp.jp
 

"Lari Hotari" <lh...@apache.org> wrote:

    Please download, test and vote on this release asap.

    BR, Lari

    On Fri, May 28, 2021 at 1:09 PM Lari Hotari <lh...@apache.org> wrote:

    > This is the first release candidate for Apache Pulsar, version 2.6.4.
    >
    > It contains the following changes:
    > https://github.com/apache/pulsar/compare/v2.6.3...v2.6.4-candidate-1
    >
    > The fix for CVE-2021-22160 [1] made as part of PR #9172 [2] has been
    > cherry-picked to branch-2.6 in commit 67e7e0cd [3].
    > It is included in this release.
    >
    > *** Please download, test and vote on this release. This vote will stay
    > open for at least 72 hours ***
    >
    > Note that we are voting upon the source (tag), binaries are provided for
    > convenience.
    >
    > Source and binary files:
    > https://dist.apache.org/repos/dist/dev/pulsar/pulsar-2.6.4-candidate-1/
    >
    > SHA-512 checksums:
    > 1a2eaf978d07412668a51fb60d0635a4d5b40d5e9af1a1421100f784902e6a7f02c34dd4d579d58d97fb1b269cc323007943dbf4c3ad4c123a0a262522f6697e
    >  apache-pulsar-2.6.4-bin.tar.gz
    > c4f415688655ea531724c2d1e82d13a5a9d3d772830860c37213b5ce5bdb1ec3b79ead65e5b1b84015bfe6cf1fdef80b8555bf96b3b9e28815659a073b255342
    >  apache-pulsar-2.6.4-src.tar.gz
    >
    > Maven staging repo:
    > https://repository.apache.org/content/repositories/orgapachepulsar-1082/
    >
    > The tag to be voted upon:
    > v2.6.4-candidate-1 (a3f0b88658116ab2223d2e0243b0ee2d33ae8c63)
    > https://github.com/apache/pulsar/releases/tag/v2.6.4-candidate-1
    >
    > Pulsar's KEYS file containing PGP keys we use to sign the release:
    > https://dist.apache.org/repos/dist/dev/pulsar/KEYS
    >
    > Please download the source package, and follow the README to build and run
    > the Pulsar standalone service.
    >
    > [1]
    > https://lists.apache.org/thread.html/r347650d15a3e9c5f58b83e918b6ad6dedc2a63d3eb63da8e6a7be87e%40%3Cdev.pulsar.apache.org%3E
    > [2] https://github.com/apache/pulsar/pull/9172
    > [3] https://github.com/apache/pulsar/commit/67e7e0cd
    >


Re: [VOTE] Pulsar Release 2.6.4 Candidate 1

Posted by Lari Hotari <lh...@apache.org>.
Please download, test and vote on this release asap.

BR, Lari

On Fri, May 28, 2021 at 1:09 PM Lari Hotari <lh...@apache.org> wrote:

> This is the first release candidate for Apache Pulsar, version 2.6.4.
>
> It contains the following changes:
> https://github.com/apache/pulsar/compare/v2.6.3...v2.6.4-candidate-1
>
> The fix for CVE-2021-22160 [1] made as part of PR #9172 [2] has been
> cherry-picked to branch-2.6 in commit 67e7e0cd [3].
> It is included in this release.
>
> *** Please download, test and vote on this release. This vote will stay
> open for at least 72 hours ***
>
> Note that we are voting upon the source (tag), binaries are provided for
> convenience.
>
> Source and binary files:
> https://dist.apache.org/repos/dist/dev/pulsar/pulsar-2.6.4-candidate-1/
>
> SHA-512 checksums:
> 1a2eaf978d07412668a51fb60d0635a4d5b40d5e9af1a1421100f784902e6a7f02c34dd4d579d58d97fb1b269cc323007943dbf4c3ad4c123a0a262522f6697e
>  apache-pulsar-2.6.4-bin.tar.gz
> c4f415688655ea531724c2d1e82d13a5a9d3d772830860c37213b5ce5bdb1ec3b79ead65e5b1b84015bfe6cf1fdef80b8555bf96b3b9e28815659a073b255342
>  apache-pulsar-2.6.4-src.tar.gz
>
> Maven staging repo:
> https://repository.apache.org/content/repositories/orgapachepulsar-1082/
>
> The tag to be voted upon:
> v2.6.4-candidate-1 (a3f0b88658116ab2223d2e0243b0ee2d33ae8c63)
> https://github.com/apache/pulsar/releases/tag/v2.6.4-candidate-1
>
> Pulsar's KEYS file containing PGP keys we use to sign the release:
> https://dist.apache.org/repos/dist/dev/pulsar/KEYS
>
> Please download the source package, and follow the README to build and run
> the Pulsar standalone service.
>
> [1]
> https://lists.apache.org/thread.html/r347650d15a3e9c5f58b83e918b6ad6dedc2a63d3eb63da8e6a7be87e%40%3Cdev.pulsar.apache.org%3E
> [2] https://github.com/apache/pulsar/pull/9172
> [3] https://github.com/apache/pulsar/commit/67e7e0cd
>

Re: [VOTE] Pulsar Release 2.6.4 Candidate 1

Posted by Lari Hotari <La...@hotari.net>.
Thank you to everyone involved in validating the 2.6.4 release. I'm closing
the vote now.

We have the required +3 binding votes and in addition there are +4
non-binding votes for the v2.6.4-candidate-1 tag. The v2.6.4-candidate-1
tag is approved for 2.6.4 release.

I will continue with "9. Promote the release"  in the release process [1]
and announce the release shortly.

BR, Lari

[1]
https://github.com/apache/pulsar/wiki/Release-process#9-promote-the-release


On Wed, Jun 2, 2021 at 7:21 PM Jerry Peng <je...@gmail.com>
wrote:

> +1 binding
>
> Checked (on MacOS Catalina) :
>  * Signatures
>  * Bin distribution:
>      - NOTICE, README, LICENS
>      - Start standalone
>      -  Validate Pub/Sub and Java Functions
>      - Validate Stateful Functions
>  * Src distribution:
>      - NOTICE,  README, LICENSE
>      - Compile
>      - Start standalone service
>
>
> Best,
>
> Jerry
>
>
> On Wed, Jun 2, 2021 at 8:25 AM Matteo Merli <ma...@gmail.com>
> wrote:
>
> > +1 binding
> >
> > Checked:
> >  * Signatures
> >  * Bin distribution:
> >      - NOTICE, README, LICENSE
> >      - Start standalone service and producer/consumer test
> >  * Src distribution:
> >      - NOTICE,  README, LICENSE
> >      - Compile and unit tests
> >      - Start standalone service
> >  * Checked staging maven repository artifacts
> >
> >
> >
> > --
> > Matteo Merli
> > <ma...@gmail.com>
> >
> >
> > On Wed, Jun 2, 2021 at 5:38 AM Lari Hotari <La...@hotari.net> wrote:
> > >
> > > Thank you to everyone involved in validating the 2.6.4 release. We have
> > one
> > > +1 binding vote and +4 non-binding votes for the v2.6.4-candidate-1
> tag.
> > >
> > > This is my first time as a release manager, so I have some questions.
> > Can I
> > > assume that v2.6.4-candidate-1 is now approved? I'll continue with "9.
> > > Promote the release"  in the release process [1] after confirmation
> from
> > a
> > > PMC member.
> > >
> > > The release notes and doc set for 2.6.4 is ready for review in PR
> #10783
> > > [2].
> > >
> > > Matteo (or other PMC members), can you help me complete the release?
> > >
> > > BR, Lari
> > >
> > > [1]
> > >
> >
> https://github.com/apache/pulsar/wiki/Release-process#9-promote-the-release
> > > [2] https://github.com/apache/pulsar/pull/10783
> > >
> > >
> > > On Tue, Jun 1, 2021 at 3:57 PM Hang Chen <ch...@apache.org> wrote:
> > >
> > > > +1 (non-binding)
> > > >     * checkout tag v2.6.4-candidate-1 and build from source code
> > > >     * start standalone server and run pub-sub tests
> > > >     * deploy on internal pulsar test cluster and run internal tests.
> > > >
> > > > Thank you Lari for driving the release.
> > > >
> > > > Thanks,
> > > > Hang
> > > >
> > > > Enrico Olivelli <eo...@gmail.com> 于2021年6月1日周二 下午3:51写道:
> > > >
> > > > > +1 (non binding)
> > > > > Build from sources
> > > > > Run Internal System tests with Fallout
> > > > >
> > > > > Thank you Lari for driving the release
> > > > >
> > > > > Enrico
> > > > >
> > > > > Il giorno mar 1 giu 2021 alle ore 09:28 rxl@apache.org
> > > > > <ra...@gmail.com> ha scritto:
> > > > > >
> > > > > > +1 (non-binding)
> > > > > >
> > > > > > - validate pub/sub and java/go functions
> > > > > > - validate connectors
> > > > > > - validate stateful functions
> > > > > > - validate go client pub/sub
> > > > > >
> > > > > >
> > > > > > --
> > > > > > Thanks
> > > > > > Xiaolong Ran
> > > > > >
> > > > > > Lari Hotari <lh...@apache.org> 于2021年5月28日周五 下午6:12写道:
> > > > > >
> > > > > > > This is the first release candidate for Apache Pulsar, version
> > 2.6.4.
> > > > > > >
> > > > > > > It contains the following changes:
> > > > > > >
> > https://github.com/apache/pulsar/compare/v2.6.3...v2.6.4-candidate-1
> > > > > > >
> > > > > > > The fix for CVE-2021-22160 [1] made as part of PR #9172 [2] has
> > been
> > > > > > > cherry-picked to branch-2.6 in commit 67e7e0cd [3].
> > > > > > > It is included in this release.
> > > > > > >
> > > > > > > *** Please download, test and vote on this release. This vote
> > will
> > > > stay
> > > > > > > open for at least 72 hours ***
> > > > > > >
> > > > > > > Note that we are voting upon the source (tag), binaries are
> > provided
> > > > > for
> > > > > > > convenience.
> > > > > > >
> > > > > > > Source and binary files:
> > > > > > >
> > > > >
> > https://dist.apache.org/repos/dist/dev/pulsar/pulsar-2.6.4-candidate-1/
> > > > > > >
> > > > > > > SHA-512 checksums:
> > > > > > >
> > > > > > >
> > > > >
> > > >
> >
> 1a2eaf978d07412668a51fb60d0635a4d5b40d5e9af1a1421100f784902e6a7f02c34dd4d579d58d97fb1b269cc323007943dbf4c3ad4c123a0a262522f6697e
> > > > > > >  apache-pulsar-2.6.4-bin.tar.gz
> > > > > > >
> > > > > > >
> > > > >
> > > >
> >
> c4f415688655ea531724c2d1e82d13a5a9d3d772830860c37213b5ce5bdb1ec3b79ead65e5b1b84015bfe6cf1fdef80b8555bf96b3b9e28815659a073b255342
> > > > > > >  apache-pulsar-2.6.4-src.tar.gz
> > > > > > >
> > > > > > > Maven staging repo:
> > > > > > >
> > > > >
> > https://repository.apache.org/content/repositories/orgapachepulsar-1082/
> > > > > > >
> > > > > > > The tag to be voted upon:
> > > > > > > v2.6.4-candidate-1 (a3f0b88658116ab2223d2e0243b0ee2d33ae8c63)
> > > > > > >
> https://github.com/apache/pulsar/releases/tag/v2.6.4-candidate-1
> > > > > > >
> > > > > > > Pulsar's KEYS file containing PGP keys we use to sign the
> > release:
> > > > > > > https://dist.apache.org/repos/dist/dev/pulsar/KEYS
> > > > > > >
> > > > > > > Please download the source package, and follow the README to
> > build
> > > > and
> > > > > run
> > > > > > > the Pulsar standalone service.
> > > > > > >
> > > > > > > [1]
> > > > > > >
> > > > > > >
> > > > >
> > > >
> >
> https://lists.apache.org/thread.html/r347650d15a3e9c5f58b83e918b6ad6dedc2a63d3eb63da8e6a7be87e%40%3Cdev.pulsar.apache.org%3E
> > > > > > > [2] https://github.com/apache/pulsar/pull/9172
> > > > > > > [3] https://github.com/apache/pulsar/commit/67e7e0cd
> > > > > > >
> > > > >
> > > >
> >
>

Re: [VOTE] Pulsar Release 2.6.4 Candidate 1

Posted by Jerry Peng <je...@gmail.com>.
+1 binding

Checked (on MacOS Catalina) :
 * Signatures
 * Bin distribution:
     - NOTICE, README, LICENS
     - Start standalone
     -  Validate Pub/Sub and Java Functions
     - Validate Stateful Functions
 * Src distribution:
     - NOTICE,  README, LICENSE
     - Compile
     - Start standalone service


Best,

Jerry


On Wed, Jun 2, 2021 at 8:25 AM Matteo Merli <ma...@gmail.com> wrote:

> +1 binding
>
> Checked:
>  * Signatures
>  * Bin distribution:
>      - NOTICE, README, LICENSE
>      - Start standalone service and producer/consumer test
>  * Src distribution:
>      - NOTICE,  README, LICENSE
>      - Compile and unit tests
>      - Start standalone service
>  * Checked staging maven repository artifacts
>
>
>
> --
> Matteo Merli
> <ma...@gmail.com>
>
>
> On Wed, Jun 2, 2021 at 5:38 AM Lari Hotari <La...@hotari.net> wrote:
> >
> > Thank you to everyone involved in validating the 2.6.4 release. We have
> one
> > +1 binding vote and +4 non-binding votes for the v2.6.4-candidate-1 tag.
> >
> > This is my first time as a release manager, so I have some questions.
> Can I
> > assume that v2.6.4-candidate-1 is now approved? I'll continue with "9.
> > Promote the release"  in the release process [1] after confirmation from
> a
> > PMC member.
> >
> > The release notes and doc set for 2.6.4 is ready for review in PR #10783
> > [2].
> >
> > Matteo (or other PMC members), can you help me complete the release?
> >
> > BR, Lari
> >
> > [1]
> >
> https://github.com/apache/pulsar/wiki/Release-process#9-promote-the-release
> > [2] https://github.com/apache/pulsar/pull/10783
> >
> >
> > On Tue, Jun 1, 2021 at 3:57 PM Hang Chen <ch...@apache.org> wrote:
> >
> > > +1 (non-binding)
> > >     * checkout tag v2.6.4-candidate-1 and build from source code
> > >     * start standalone server and run pub-sub tests
> > >     * deploy on internal pulsar test cluster and run internal tests.
> > >
> > > Thank you Lari for driving the release.
> > >
> > > Thanks,
> > > Hang
> > >
> > > Enrico Olivelli <eo...@gmail.com> 于2021年6月1日周二 下午3:51写道:
> > >
> > > > +1 (non binding)
> > > > Build from sources
> > > > Run Internal System tests with Fallout
> > > >
> > > > Thank you Lari for driving the release
> > > >
> > > > Enrico
> > > >
> > > > Il giorno mar 1 giu 2021 alle ore 09:28 rxl@apache.org
> > > > <ra...@gmail.com> ha scritto:
> > > > >
> > > > > +1 (non-binding)
> > > > >
> > > > > - validate pub/sub and java/go functions
> > > > > - validate connectors
> > > > > - validate stateful functions
> > > > > - validate go client pub/sub
> > > > >
> > > > >
> > > > > --
> > > > > Thanks
> > > > > Xiaolong Ran
> > > > >
> > > > > Lari Hotari <lh...@apache.org> 于2021年5月28日周五 下午6:12写道:
> > > > >
> > > > > > This is the first release candidate for Apache Pulsar, version
> 2.6.4.
> > > > > >
> > > > > > It contains the following changes:
> > > > > >
> https://github.com/apache/pulsar/compare/v2.6.3...v2.6.4-candidate-1
> > > > > >
> > > > > > The fix for CVE-2021-22160 [1] made as part of PR #9172 [2] has
> been
> > > > > > cherry-picked to branch-2.6 in commit 67e7e0cd [3].
> > > > > > It is included in this release.
> > > > > >
> > > > > > *** Please download, test and vote on this release. This vote
> will
> > > stay
> > > > > > open for at least 72 hours ***
> > > > > >
> > > > > > Note that we are voting upon the source (tag), binaries are
> provided
> > > > for
> > > > > > convenience.
> > > > > >
> > > > > > Source and binary files:
> > > > > >
> > > >
> https://dist.apache.org/repos/dist/dev/pulsar/pulsar-2.6.4-candidate-1/
> > > > > >
> > > > > > SHA-512 checksums:
> > > > > >
> > > > > >
> > > >
> > >
> 1a2eaf978d07412668a51fb60d0635a4d5b40d5e9af1a1421100f784902e6a7f02c34dd4d579d58d97fb1b269cc323007943dbf4c3ad4c123a0a262522f6697e
> > > > > >  apache-pulsar-2.6.4-bin.tar.gz
> > > > > >
> > > > > >
> > > >
> > >
> c4f415688655ea531724c2d1e82d13a5a9d3d772830860c37213b5ce5bdb1ec3b79ead65e5b1b84015bfe6cf1fdef80b8555bf96b3b9e28815659a073b255342
> > > > > >  apache-pulsar-2.6.4-src.tar.gz
> > > > > >
> > > > > > Maven staging repo:
> > > > > >
> > > >
> https://repository.apache.org/content/repositories/orgapachepulsar-1082/
> > > > > >
> > > > > > The tag to be voted upon:
> > > > > > v2.6.4-candidate-1 (a3f0b88658116ab2223d2e0243b0ee2d33ae8c63)
> > > > > > https://github.com/apache/pulsar/releases/tag/v2.6.4-candidate-1
> > > > > >
> > > > > > Pulsar's KEYS file containing PGP keys we use to sign the
> release:
> > > > > > https://dist.apache.org/repos/dist/dev/pulsar/KEYS
> > > > > >
> > > > > > Please download the source package, and follow the README to
> build
> > > and
> > > > run
> > > > > > the Pulsar standalone service.
> > > > > >
> > > > > > [1]
> > > > > >
> > > > > >
> > > >
> > >
> https://lists.apache.org/thread.html/r347650d15a3e9c5f58b83e918b6ad6dedc2a63d3eb63da8e6a7be87e%40%3Cdev.pulsar.apache.org%3E
> > > > > > [2] https://github.com/apache/pulsar/pull/9172
> > > > > > [3] https://github.com/apache/pulsar/commit/67e7e0cd
> > > > > >
> > > >
> > >
>

Re: [VOTE] Pulsar Release 2.6.4 Candidate 1

Posted by Matteo Merli <ma...@gmail.com>.
+1 binding

Checked:
 * Signatures
 * Bin distribution:
     - NOTICE, README, LICENSE
     - Start standalone service and producer/consumer test
 * Src distribution:
     - NOTICE,  README, LICENSE
     - Compile and unit tests
     - Start standalone service
 * Checked staging maven repository artifacts



--
Matteo Merli
<ma...@gmail.com>


On Wed, Jun 2, 2021 at 5:38 AM Lari Hotari <La...@hotari.net> wrote:
>
> Thank you to everyone involved in validating the 2.6.4 release. We have one
> +1 binding vote and +4 non-binding votes for the v2.6.4-candidate-1 tag.
>
> This is my first time as a release manager, so I have some questions. Can I
> assume that v2.6.4-candidate-1 is now approved? I'll continue with "9.
> Promote the release"  in the release process [1] after confirmation from a
> PMC member.
>
> The release notes and doc set for 2.6.4 is ready for review in PR #10783
> [2].
>
> Matteo (or other PMC members), can you help me complete the release?
>
> BR, Lari
>
> [1]
> https://github.com/apache/pulsar/wiki/Release-process#9-promote-the-release
> [2] https://github.com/apache/pulsar/pull/10783
>
>
> On Tue, Jun 1, 2021 at 3:57 PM Hang Chen <ch...@apache.org> wrote:
>
> > +1 (non-binding)
> >     * checkout tag v2.6.4-candidate-1 and build from source code
> >     * start standalone server and run pub-sub tests
> >     * deploy on internal pulsar test cluster and run internal tests.
> >
> > Thank you Lari for driving the release.
> >
> > Thanks,
> > Hang
> >
> > Enrico Olivelli <eo...@gmail.com> 于2021年6月1日周二 下午3:51写道:
> >
> > > +1 (non binding)
> > > Build from sources
> > > Run Internal System tests with Fallout
> > >
> > > Thank you Lari for driving the release
> > >
> > > Enrico
> > >
> > > Il giorno mar 1 giu 2021 alle ore 09:28 rxl@apache.org
> > > <ra...@gmail.com> ha scritto:
> > > >
> > > > +1 (non-binding)
> > > >
> > > > - validate pub/sub and java/go functions
> > > > - validate connectors
> > > > - validate stateful functions
> > > > - validate go client pub/sub
> > > >
> > > >
> > > > --
> > > > Thanks
> > > > Xiaolong Ran
> > > >
> > > > Lari Hotari <lh...@apache.org> 于2021年5月28日周五 下午6:12写道:
> > > >
> > > > > This is the first release candidate for Apache Pulsar, version 2.6.4.
> > > > >
> > > > > It contains the following changes:
> > > > > https://github.com/apache/pulsar/compare/v2.6.3...v2.6.4-candidate-1
> > > > >
> > > > > The fix for CVE-2021-22160 [1] made as part of PR #9172 [2] has been
> > > > > cherry-picked to branch-2.6 in commit 67e7e0cd [3].
> > > > > It is included in this release.
> > > > >
> > > > > *** Please download, test and vote on this release. This vote will
> > stay
> > > > > open for at least 72 hours ***
> > > > >
> > > > > Note that we are voting upon the source (tag), binaries are provided
> > > for
> > > > > convenience.
> > > > >
> > > > > Source and binary files:
> > > > >
> > > https://dist.apache.org/repos/dist/dev/pulsar/pulsar-2.6.4-candidate-1/
> > > > >
> > > > > SHA-512 checksums:
> > > > >
> > > > >
> > >
> > 1a2eaf978d07412668a51fb60d0635a4d5b40d5e9af1a1421100f784902e6a7f02c34dd4d579d58d97fb1b269cc323007943dbf4c3ad4c123a0a262522f6697e
> > > > >  apache-pulsar-2.6.4-bin.tar.gz
> > > > >
> > > > >
> > >
> > c4f415688655ea531724c2d1e82d13a5a9d3d772830860c37213b5ce5bdb1ec3b79ead65e5b1b84015bfe6cf1fdef80b8555bf96b3b9e28815659a073b255342
> > > > >  apache-pulsar-2.6.4-src.tar.gz
> > > > >
> > > > > Maven staging repo:
> > > > >
> > > https://repository.apache.org/content/repositories/orgapachepulsar-1082/
> > > > >
> > > > > The tag to be voted upon:
> > > > > v2.6.4-candidate-1 (a3f0b88658116ab2223d2e0243b0ee2d33ae8c63)
> > > > > https://github.com/apache/pulsar/releases/tag/v2.6.4-candidate-1
> > > > >
> > > > > Pulsar's KEYS file containing PGP keys we use to sign the release:
> > > > > https://dist.apache.org/repos/dist/dev/pulsar/KEYS
> > > > >
> > > > > Please download the source package, and follow the README to build
> > and
> > > run
> > > > > the Pulsar standalone service.
> > > > >
> > > > > [1]
> > > > >
> > > > >
> > >
> > https://lists.apache.org/thread.html/r347650d15a3e9c5f58b83e918b6ad6dedc2a63d3eb63da8e6a7be87e%40%3Cdev.pulsar.apache.org%3E
> > > > > [2] https://github.com/apache/pulsar/pull/9172
> > > > > [3] https://github.com/apache/pulsar/commit/67e7e0cd
> > > > >
> > >
> >

Re: [VOTE] Pulsar Release 2.6.4 Candidate 1

Posted by Lari Hotari <La...@hotari.net>.
Thank you to everyone involved in validating the 2.6.4 release. We have one
+1 binding vote and +4 non-binding votes for the v2.6.4-candidate-1 tag.

This is my first time as a release manager, so I have some questions. Can I
assume that v2.6.4-candidate-1 is now approved? I'll continue with "9.
Promote the release"  in the release process [1] after confirmation from a
PMC member.

The release notes and doc set for 2.6.4 is ready for review in PR #10783
[2].

Matteo (or other PMC members), can you help me complete the release?

BR, Lari

[1]
https://github.com/apache/pulsar/wiki/Release-process#9-promote-the-release
[2] https://github.com/apache/pulsar/pull/10783


On Tue, Jun 1, 2021 at 3:57 PM Hang Chen <ch...@apache.org> wrote:

> +1 (non-binding)
>     * checkout tag v2.6.4-candidate-1 and build from source code
>     * start standalone server and run pub-sub tests
>     * deploy on internal pulsar test cluster and run internal tests.
>
> Thank you Lari for driving the release.
>
> Thanks,
> Hang
>
> Enrico Olivelli <eo...@gmail.com> 于2021年6月1日周二 下午3:51写道:
>
> > +1 (non binding)
> > Build from sources
> > Run Internal System tests with Fallout
> >
> > Thank you Lari for driving the release
> >
> > Enrico
> >
> > Il giorno mar 1 giu 2021 alle ore 09:28 rxl@apache.org
> > <ra...@gmail.com> ha scritto:
> > >
> > > +1 (non-binding)
> > >
> > > - validate pub/sub and java/go functions
> > > - validate connectors
> > > - validate stateful functions
> > > - validate go client pub/sub
> > >
> > >
> > > --
> > > Thanks
> > > Xiaolong Ran
> > >
> > > Lari Hotari <lh...@apache.org> 于2021年5月28日周五 下午6:12写道:
> > >
> > > > This is the first release candidate for Apache Pulsar, version 2.6.4.
> > > >
> > > > It contains the following changes:
> > > > https://github.com/apache/pulsar/compare/v2.6.3...v2.6.4-candidate-1
> > > >
> > > > The fix for CVE-2021-22160 [1] made as part of PR #9172 [2] has been
> > > > cherry-picked to branch-2.6 in commit 67e7e0cd [3].
> > > > It is included in this release.
> > > >
> > > > *** Please download, test and vote on this release. This vote will
> stay
> > > > open for at least 72 hours ***
> > > >
> > > > Note that we are voting upon the source (tag), binaries are provided
> > for
> > > > convenience.
> > > >
> > > > Source and binary files:
> > > >
> > https://dist.apache.org/repos/dist/dev/pulsar/pulsar-2.6.4-candidate-1/
> > > >
> > > > SHA-512 checksums:
> > > >
> > > >
> >
> 1a2eaf978d07412668a51fb60d0635a4d5b40d5e9af1a1421100f784902e6a7f02c34dd4d579d58d97fb1b269cc323007943dbf4c3ad4c123a0a262522f6697e
> > > >  apache-pulsar-2.6.4-bin.tar.gz
> > > >
> > > >
> >
> c4f415688655ea531724c2d1e82d13a5a9d3d772830860c37213b5ce5bdb1ec3b79ead65e5b1b84015bfe6cf1fdef80b8555bf96b3b9e28815659a073b255342
> > > >  apache-pulsar-2.6.4-src.tar.gz
> > > >
> > > > Maven staging repo:
> > > >
> > https://repository.apache.org/content/repositories/orgapachepulsar-1082/
> > > >
> > > > The tag to be voted upon:
> > > > v2.6.4-candidate-1 (a3f0b88658116ab2223d2e0243b0ee2d33ae8c63)
> > > > https://github.com/apache/pulsar/releases/tag/v2.6.4-candidate-1
> > > >
> > > > Pulsar's KEYS file containing PGP keys we use to sign the release:
> > > > https://dist.apache.org/repos/dist/dev/pulsar/KEYS
> > > >
> > > > Please download the source package, and follow the README to build
> and
> > run
> > > > the Pulsar standalone service.
> > > >
> > > > [1]
> > > >
> > > >
> >
> https://lists.apache.org/thread.html/r347650d15a3e9c5f58b83e918b6ad6dedc2a63d3eb63da8e6a7be87e%40%3Cdev.pulsar.apache.org%3E
> > > > [2] https://github.com/apache/pulsar/pull/9172
> > > > [3] https://github.com/apache/pulsar/commit/67e7e0cd
> > > >
> >
>

Re: [VOTE] Pulsar Release 2.6.4 Candidate 1

Posted by Hang Chen <ch...@apache.org>.
+1 (non-binding)
    * checkout tag v2.6.4-candidate-1 and build from source code
    * start standalone server and run pub-sub tests
    * deploy on internal pulsar test cluster and run internal tests.

Thank you Lari for driving the release.

Thanks,
Hang

Enrico Olivelli <eo...@gmail.com> 于2021年6月1日周二 下午3:51写道:

> +1 (non binding)
> Build from sources
> Run Internal System tests with Fallout
>
> Thank you Lari for driving the release
>
> Enrico
>
> Il giorno mar 1 giu 2021 alle ore 09:28 rxl@apache.org
> <ra...@gmail.com> ha scritto:
> >
> > +1 (non-binding)
> >
> > - validate pub/sub and java/go functions
> > - validate connectors
> > - validate stateful functions
> > - validate go client pub/sub
> >
> >
> > --
> > Thanks
> > Xiaolong Ran
> >
> > Lari Hotari <lh...@apache.org> 于2021年5月28日周五 下午6:12写道:
> >
> > > This is the first release candidate for Apache Pulsar, version 2.6.4.
> > >
> > > It contains the following changes:
> > > https://github.com/apache/pulsar/compare/v2.6.3...v2.6.4-candidate-1
> > >
> > > The fix for CVE-2021-22160 [1] made as part of PR #9172 [2] has been
> > > cherry-picked to branch-2.6 in commit 67e7e0cd [3].
> > > It is included in this release.
> > >
> > > *** Please download, test and vote on this release. This vote will stay
> > > open for at least 72 hours ***
> > >
> > > Note that we are voting upon the source (tag), binaries are provided
> for
> > > convenience.
> > >
> > > Source and binary files:
> > >
> https://dist.apache.org/repos/dist/dev/pulsar/pulsar-2.6.4-candidate-1/
> > >
> > > SHA-512 checksums:
> > >
> > >
> 1a2eaf978d07412668a51fb60d0635a4d5b40d5e9af1a1421100f784902e6a7f02c34dd4d579d58d97fb1b269cc323007943dbf4c3ad4c123a0a262522f6697e
> > >  apache-pulsar-2.6.4-bin.tar.gz
> > >
> > >
> c4f415688655ea531724c2d1e82d13a5a9d3d772830860c37213b5ce5bdb1ec3b79ead65e5b1b84015bfe6cf1fdef80b8555bf96b3b9e28815659a073b255342
> > >  apache-pulsar-2.6.4-src.tar.gz
> > >
> > > Maven staging repo:
> > >
> https://repository.apache.org/content/repositories/orgapachepulsar-1082/
> > >
> > > The tag to be voted upon:
> > > v2.6.4-candidate-1 (a3f0b88658116ab2223d2e0243b0ee2d33ae8c63)
> > > https://github.com/apache/pulsar/releases/tag/v2.6.4-candidate-1
> > >
> > > Pulsar's KEYS file containing PGP keys we use to sign the release:
> > > https://dist.apache.org/repos/dist/dev/pulsar/KEYS
> > >
> > > Please download the source package, and follow the README to build and
> run
> > > the Pulsar standalone service.
> > >
> > > [1]
> > >
> > >
> https://lists.apache.org/thread.html/r347650d15a3e9c5f58b83e918b6ad6dedc2a63d3eb63da8e6a7be87e%40%3Cdev.pulsar.apache.org%3E
> > > [2] https://github.com/apache/pulsar/pull/9172
> > > [3] https://github.com/apache/pulsar/commit/67e7e0cd
> > >
>

Re: [VOTE] Pulsar Release 2.6.4 Candidate 1

Posted by Enrico Olivelli <eo...@gmail.com>.
+1 (non binding)
Build from sources
Run Internal System tests with Fallout

Thank you Lari for driving the release

Enrico

Il giorno mar 1 giu 2021 alle ore 09:28 rxl@apache.org
<ra...@gmail.com> ha scritto:
>
> +1 (non-binding)
>
> - validate pub/sub and java/go functions
> - validate connectors
> - validate stateful functions
> - validate go client pub/sub
>
>
> --
> Thanks
> Xiaolong Ran
>
> Lari Hotari <lh...@apache.org> 于2021年5月28日周五 下午6:12写道:
>
> > This is the first release candidate for Apache Pulsar, version 2.6.4.
> >
> > It contains the following changes:
> > https://github.com/apache/pulsar/compare/v2.6.3...v2.6.4-candidate-1
> >
> > The fix for CVE-2021-22160 [1] made as part of PR #9172 [2] has been
> > cherry-picked to branch-2.6 in commit 67e7e0cd [3].
> > It is included in this release.
> >
> > *** Please download, test and vote on this release. This vote will stay
> > open for at least 72 hours ***
> >
> > Note that we are voting upon the source (tag), binaries are provided for
> > convenience.
> >
> > Source and binary files:
> > https://dist.apache.org/repos/dist/dev/pulsar/pulsar-2.6.4-candidate-1/
> >
> > SHA-512 checksums:
> >
> > 1a2eaf978d07412668a51fb60d0635a4d5b40d5e9af1a1421100f784902e6a7f02c34dd4d579d58d97fb1b269cc323007943dbf4c3ad4c123a0a262522f6697e
> >  apache-pulsar-2.6.4-bin.tar.gz
> >
> > c4f415688655ea531724c2d1e82d13a5a9d3d772830860c37213b5ce5bdb1ec3b79ead65e5b1b84015bfe6cf1fdef80b8555bf96b3b9e28815659a073b255342
> >  apache-pulsar-2.6.4-src.tar.gz
> >
> > Maven staging repo:
> > https://repository.apache.org/content/repositories/orgapachepulsar-1082/
> >
> > The tag to be voted upon:
> > v2.6.4-candidate-1 (a3f0b88658116ab2223d2e0243b0ee2d33ae8c63)
> > https://github.com/apache/pulsar/releases/tag/v2.6.4-candidate-1
> >
> > Pulsar's KEYS file containing PGP keys we use to sign the release:
> > https://dist.apache.org/repos/dist/dev/pulsar/KEYS
> >
> > Please download the source package, and follow the README to build and run
> > the Pulsar standalone service.
> >
> > [1]
> >
> > https://lists.apache.org/thread.html/r347650d15a3e9c5f58b83e918b6ad6dedc2a63d3eb63da8e6a7be87e%40%3Cdev.pulsar.apache.org%3E
> > [2] https://github.com/apache/pulsar/pull/9172
> > [3] https://github.com/apache/pulsar/commit/67e7e0cd
> >

Re: [VOTE] Pulsar Release 2.6.4 Candidate 1

Posted by "rxl@apache.org" <ra...@gmail.com>.
+1 (non-binding)

- validate pub/sub and java/go functions
- validate connectors
- validate stateful functions
- validate go client pub/sub


--
Thanks
Xiaolong Ran

Lari Hotari <lh...@apache.org> 于2021年5月28日周五 下午6:12写道:

> This is the first release candidate for Apache Pulsar, version 2.6.4.
>
> It contains the following changes:
> https://github.com/apache/pulsar/compare/v2.6.3...v2.6.4-candidate-1
>
> The fix for CVE-2021-22160 [1] made as part of PR #9172 [2] has been
> cherry-picked to branch-2.6 in commit 67e7e0cd [3].
> It is included in this release.
>
> *** Please download, test and vote on this release. This vote will stay
> open for at least 72 hours ***
>
> Note that we are voting upon the source (tag), binaries are provided for
> convenience.
>
> Source and binary files:
> https://dist.apache.org/repos/dist/dev/pulsar/pulsar-2.6.4-candidate-1/
>
> SHA-512 checksums:
>
> 1a2eaf978d07412668a51fb60d0635a4d5b40d5e9af1a1421100f784902e6a7f02c34dd4d579d58d97fb1b269cc323007943dbf4c3ad4c123a0a262522f6697e
>  apache-pulsar-2.6.4-bin.tar.gz
>
> c4f415688655ea531724c2d1e82d13a5a9d3d772830860c37213b5ce5bdb1ec3b79ead65e5b1b84015bfe6cf1fdef80b8555bf96b3b9e28815659a073b255342
>  apache-pulsar-2.6.4-src.tar.gz
>
> Maven staging repo:
> https://repository.apache.org/content/repositories/orgapachepulsar-1082/
>
> The tag to be voted upon:
> v2.6.4-candidate-1 (a3f0b88658116ab2223d2e0243b0ee2d33ae8c63)
> https://github.com/apache/pulsar/releases/tag/v2.6.4-candidate-1
>
> Pulsar's KEYS file containing PGP keys we use to sign the release:
> https://dist.apache.org/repos/dist/dev/pulsar/KEYS
>
> Please download the source package, and follow the README to build and run
> the Pulsar standalone service.
>
> [1]
>
> https://lists.apache.org/thread.html/r347650d15a3e9c5f58b83e918b6ad6dedc2a63d3eb63da8e6a7be87e%40%3Cdev.pulsar.apache.org%3E
> [2] https://github.com/apache/pulsar/pull/9172
> [3] https://github.com/apache/pulsar/commit/67e7e0cd
>