You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@polaris.apache.org by Jean-Baptiste Onofré <jb...@nanthrax.net> on 2026/05/14 07:15:51 UTC
[VOTE] Release Apache Polaris 1.5.0 (rc0)
Hi everyone,
I propose that we release the following RC as the official Apache Polaris
1.5.0 release.
This corresponds to the tag: apache-polaris-1.5.0-rc0
* https://github.com/apache/polaris/commits/apache-polaris-1.5.0-rc0
*
https://github.com/apache/polaris/tree/da95233805815b1d6a8576c5b527143193e7d7e5
The release tarball, signature, and checksums are here:
* https://dist.apache.org/repos/dist/dev/polaris/1.5.0
Helm charts are available on:
* https://dist.apache.org/repos/dist/dev/polaris/helm-chart/1.5.0
NB: you have to build the Docker images locally in order to test Helm
charts.
The Python CLI wheel is available on:
* https://dist.apache.org/repos/dist/dev/polaris/python-client/1.5.0
The Python CLI is also available on Test PyPI:
* https://test.pypi.org/project/apache-polaris/1.5.0rc0/
You can find the KEYS file here:
* https://downloads.apache.org/polaris/KEYS
Convenience binary artifacts are staged on Nexus. The Maven repository URL
is:
* https://repository.apache.org/content/repositories/orgapachepolaris-1067/
Please download, verify, and test according to the release verification
guide, which can be found at:
*
https://polaris.apache.org/community/release-guides/release-verification-guide/
Please vote in the next 72 hours.
[ ] +1 Release this as Apache Polaris 1.5.0
[ ] +0
[ ] -1 Do not release this because...
Only PMC members have binding votes, but other community members are
encouraged to cast non-binding votes.
This vote will pass if there are 3 binding +1 votes and more binding +1
votes than -1 votes.
Regards
JB
Re: [VOTE] Release Apache Polaris 1.5.0 (rc0)
Posted by Jean-Baptiste Onofré <jb...@nanthrax.net>.
+1 (binding)
I checked:
- source distribution
-- signature and checksum are good
-- LICENSE and NOTICE are good.
-- ASF header is present in all expected files
-- No binary/compiled file found in the source distribution
- binary distribution
-- signature and checksum are good
-- LICENSE is good
-- NOTICE is acceptable, but it needs three "fixes":
--- Conscrypt is duplicated in the NOTICE (it appears twice)
--- NOTICE documents AWS SDK V1 NOTICE, but it should be AWS SDK V2 NOTICE
(copyright changed)
--- Joda Time NOTICE content should be included in the NOTICE
- Helm Chart
-- signature and checksum are good
-- LICENSE and NOTICE are good
-- Content is correct (tar.gz and prov)
- Python CLI
-- signature and checksum are good
-- wheel distribution is correct
-- All files contain the ASF header
-- LICENSE and NOTICE are good
- spark plugin (bundle jar)
-- signature and checksum are good
-- LICENSE and NOTICE (nit: MPL can be mentioned for Public Suffix,
transitive of Apache HttpComponents)
Regards
JB
On Thu, May 14, 2026 at 9:15 AM Jean-Baptiste Onofré <jb...@nanthrax.net>
wrote:
> Hi everyone,
>
> I propose that we release the following RC as the official Apache Polaris
> 1.5.0 release.
>
> This corresponds to the tag: apache-polaris-1.5.0-rc0
>
> * https://github.com/apache/polaris/commits/apache-polaris-1.5.0-rc0
> *
> https://github.com/apache/polaris/tree/da95233805815b1d6a8576c5b527143193e7d7e5
>
> The release tarball, signature, and checksums are here:
>
> * https://dist.apache.org/repos/dist/dev/polaris/1.5.0
>
> Helm charts are available on:
>
> * https://dist.apache.org/repos/dist/dev/polaris/helm-chart/1.5.0
>
> NB: you have to build the Docker images locally in order to test Helm
> charts.
>
> The Python CLI wheel is available on:
>
> * https://dist.apache.org/repos/dist/dev/polaris/python-client/1.5.0
>
> The Python CLI is also available on Test PyPI:
>
> * https://test.pypi.org/project/apache-polaris/1.5.0rc0/
>
> You can find the KEYS file here:
>
> * https://downloads.apache.org/polaris/KEYS
>
> Convenience binary artifacts are staged on Nexus. The Maven repository URL
> is:
>
> *
> https://repository.apache.org/content/repositories/orgapachepolaris-1067/
>
> Please download, verify, and test according to the release verification
> guide, which can be found at:
>
> *
> https://polaris.apache.org/community/release-guides/release-verification-guide/
>
> Please vote in the next 72 hours.
>
> [ ] +1 Release this as Apache Polaris 1.5.0
> [ ] +0
> [ ] -1 Do not release this because...
>
> Only PMC members have binding votes, but other community members are
> encouraged to cast non-binding votes.
> This vote will pass if there are 3 binding +1 votes and more binding +1
> votes than -1 votes.
>
> Regards
> JB
>
Re: [VOTE] Release Apache Polaris 1.5.0 (rc0)
Posted by Jean-Baptiste Onofré <jb...@nanthrax.net>.
Good catch François. I will update the doap.
Thanks,
Regards
JB
On Thu, May 14, 2026 at 10:12 PM Francois Papon <
francois.papon@openobject.fr> wrote:
> +1 (binding)
>
> All checks passed.
>
> Just a side note, the doap.rdf file in the source is not up to date, the
> latest release mentioned is 1.3.0-incubating.
>
> regards,
>
> François
> fpapon@apache.org
> francois.papon@openobject.fr
>
> Le 14/05/2026 à 09:15, Jean-Baptiste Onofré a écrit :
> > Hi everyone,
> >
> > I propose that we release the following RC as the official Apache Polaris
> > 1.5.0 release.
> >
> > This corresponds to the tag: apache-polaris-1.5.0-rc0
> >
> > * https://github.com/apache/polaris/commits/apache-polaris-1.5.0-rc0
> > *
> >
> https://github.com/apache/polaris/tree/da95233805815b1d6a8576c5b527143193e7d7e5
> >
> > The release tarball, signature, and checksums are here:
> >
> > * https://dist.apache.org/repos/dist/dev/polaris/1.5.0
> >
> > Helm charts are available on:
> >
> > * https://dist.apache.org/repos/dist/dev/polaris/helm-chart/1.5.0
> >
> > NB: you have to build the Docker images locally in order to test Helm
> > charts.
> >
> > The Python CLI wheel is available on:
> >
> > * https://dist.apache.org/repos/dist/dev/polaris/python-client/1.5.0
> >
> > The Python CLI is also available on Test PyPI:
> >
> > * https://test.pypi.org/project/apache-polaris/1.5.0rc0/
> >
> > You can find the KEYS file here:
> >
> > * https://downloads.apache.org/polaris/KEYS
> >
> > Convenience binary artifacts are staged on Nexus. The Maven repository
> URL
> > is:
> >
> > *
> https://repository.apache.org/content/repositories/orgapachepolaris-1067/
> >
> > Please download, verify, and test according to the release verification
> > guide, which can be found at:
> >
> > *
> >
> https://polaris.apache.org/community/release-guides/release-verification-guide/
> >
> > Please vote in the next 72 hours.
> >
> > [ ] +1 Release this as Apache Polaris 1.5.0
> > [ ] +0
> > [ ] -1 Do not release this because...
> >
> > Only PMC members have binding votes, but other community members are
> > encouraged to cast non-binding votes.
> > This vote will pass if there are 3 binding +1 votes and more binding +1
> > votes than -1 votes.
> >
> > Regards
> > JB
> >
>
Re: [VOTE] Release Apache Polaris 1.5.0 (rc0)
Posted by Ajantha Bhat <aj...@gmail.com>.
+1 (non-binding)
verified using the automation script `verify-release.sh`
- Ajantha
On Fri, May 15, 2026 at 11:00 AM Jean-Baptiste Onofré <jb...@nanthrax.net>
wrote:
> Hi Yufei
>
> Apache Solr NOTICE doesn't need to be included in our NOTICE: it's already
> covered by "This product includes software developed at
> The Apache Software Foundation (http://www.apache.org/)." (that's why we
> don't include NOTICE from ASF projects by default).
>
> The Jetty NOTICE is already included in our NOTICE: "This product bundles
> Jetty with the following in its NOTICE file:"
>
> So I don't see the problem here.
>
> For Joda time, it's good to include it, but regarding the NOTICE (
> https://github.com/JodaOrg/joda-time/blob/main/NOTICE.txt), I don't think
> it's a blocker.
>
> Regards
> JB
>
> On Fri, May 15, 2026 at 12:02 AM Yufei Gu <fl...@gmail.com> wrote:
>
> > -1
> >
> > The 1.5.0-rc0 introduces 19 newly-bundled third-party libraries in
> > polaris-bin/server/lib/main/ (per the LICENSE diff vs 1.4.0). Of these,
> > at least Apache Solr (solr-solrj 8.11.3, transitively via
> > ranger-audit-dest-solr), Eclipse Jetty (jetty-client / jetty-http
> 9.4.56),
> > and Joda-Time (2.10.6) contains substantive upstream NOTICE content that
> is
> > not propagated into polaris-bin/NOTICE, contrary to
> > https://www.apache.org/legal/release-policy.html#license-modules-incl.
> > Recommend (a) excluding ranger-audit-dest-solr if
> Solr-as-audit-destination
> > isn't a supported config, and (b) propagating the Jetty and Joda-Time
> > NOTICE blocks for what remains.
> >
> > More details for (a): The build already excludes ranger-audit-dest-hdfs
> > (line 29 in the extension's build file) but not ranger-audit-dest-solr.
> If
> > audit-to-Solr isn't a feature Polaris actually intends to ship, the easy
> > fix is to add a matching exclude:
> >
> > implementation(libs.ranger.authz.embedded) {
> > exclude("org.apache.ranger", "ranger-audit-dest-hdfs")
> > exclude("org.apache.ranger", "ranger-audit-dest-solr") // also drops
> > solr-solrj transitively
> > ...
> > }
> >
> > All other checks are good. Thanks JB for preparing it.
> >
> > Automated check (verify-release.sh)
> > - Exit 0, Automatic release check succeeded, empty failures log
> > - KEYS imported; GPG sigs + SHA512 valid for: source tarball,
> polaris-bin
> > (.tgz/.zip), Helm chart (+.prov), all 76 Maven module artifacts
> > - Local build (publishToMavenLocal sourceTarball assemble
> > -PjarWithGitInfo) succeeded
> > - LICENSE + NOTICE present in the source tree, all main/sources JARs
> > (META-INF/), polaris-bin tgz/zip, and Helm chart
> >
> > Manual checks
> > - Verified that no JDBC schema changes exist between versions 1.4.0 and
> > 1.5.0. If a user upgrades from 1.4.0 to 1.5.0, no JDBC schema migration
> is
> > required.
> > - Source tarball: no prohibited binaries (no
> .jar/.class/.so/.dll/.exe).
> > NOTICE correctly attributes ASF, Snowflake donation, and Nessie.
> > - Git log: 295 commits since apache-polaris-1.4.0; tag HEAD is the
> > expected [chore] Bump version to 1.5.0, preceded by normal feature/fix
> work
> > (no suspicious last-minute changes).
> > - Helm chart: helm lint clean, helm template renders
> > ConfigMap/Deployment/Service/ServiceAccount, Chart.yaml shows version:
> > 1.5.0, appVersion: 1.5.0.
> > - polaris-bin: contains both admin/ and server/ Quarkus apps with
> correct
> > 1.5.0 version on inner jars.
> > - Python wheel (ASF dist): GPG signature is good; SHA512 matches.
> > Compared to the Test PyPI wheel apache_polaris-1.5.0rc0-py3-none-any.whl:
> > source code byte-identical; only difference is METADATA Version: 1.5.0
> > (ASF) vs 1.5.0rc0 (TestPyPI), which is expected per staging convention.
> >
> >
> >
> > Yufei
> >
> >
> > On Thu, May 14, 2026 at 1:12 PM Francois Papon <
> > francois.papon@openobject.fr>
> > wrote:
> >
> > > +1 (binding)
> > >
> > > All checks passed.
> > >
> > > Just a side note, the doap.rdf file in the source is not up to date,
> the
> > > latest release mentioned is 1.3.0-incubating.
> > >
> > > regards,
> > >
> > > François
> > > fpapon@apache.org
> > > francois.papon@openobject.fr
> > >
> > > Le 14/05/2026 à 09:15, Jean-Baptiste Onofré a écrit :
> > > > Hi everyone,
> > > >
> > > > I propose that we release the following RC as the official Apache
> > Polaris
> > > > 1.5.0 release.
> > > >
> > > > This corresponds to the tag: apache-polaris-1.5.0-rc0
> > > >
> > > > * https://github.com/apache/polaris/commits/apache-polaris-1.5.0-rc0
> > > > *
> > > >
> > >
> >
> https://github.com/apache/polaris/tree/da95233805815b1d6a8576c5b527143193e7d7e5
> > > >
> > > > The release tarball, signature, and checksums are here:
> > > >
> > > > * https://dist.apache.org/repos/dist/dev/polaris/1.5.0
> > > >
> > > > Helm charts are available on:
> > > >
> > > > * https://dist.apache.org/repos/dist/dev/polaris/helm-chart/1.5.0
> > > >
> > > > NB: you have to build the Docker images locally in order to test Helm
> > > > charts.
> > > >
> > > > The Python CLI wheel is available on:
> > > >
> > > > * https://dist.apache.org/repos/dist/dev/polaris/python-client/1.5.0
> > > >
> > > > The Python CLI is also available on Test PyPI:
> > > >
> > > > * https://test.pypi.org/project/apache-polaris/1.5.0rc0/
> > > >
> > > > You can find the KEYS file here:
> > > >
> > > > * https://downloads.apache.org/polaris/KEYS
> > > >
> > > > Convenience binary artifacts are staged on Nexus. The Maven
> repository
> > > URL
> > > > is:
> > > >
> > > > *
> > >
> >
> https://repository.apache.org/content/repositories/orgapachepolaris-1067/
> > > >
> > > > Please download, verify, and test according to the release
> verification
> > > > guide, which can be found at:
> > > >
> > > > *
> > > >
> > >
> >
> https://polaris.apache.org/community/release-guides/release-verification-guide/
> > > >
> > > > Please vote in the next 72 hours.
> > > >
> > > > [ ] +1 Release this as Apache Polaris 1.5.0
> > > > [ ] +0
> > > > [ ] -1 Do not release this because...
> > > >
> > > > Only PMC members have binding votes, but other community members are
> > > > encouraged to cast non-binding votes.
> > > > This vote will pass if there are 3 binding +1 votes and more binding
> +1
> > > > votes than -1 votes.
> > > >
> > > > Regards
> > > > JB
> > > >
> > >
> >
>
Re: [VOTE] Release Apache Polaris 1.5.0 (rc0)
Posted by Jean-Baptiste Onofré <jb...@nanthrax.net>.
Hi Yufei,
Thank you for checking and for the clarification.
I will create an issue to track updating our NOTICE file with the Joda-Time
entry. In the meantime, I am doing a full pass on the release now.
Regards,
JB
On Fri, May 15, 2026 at 7:56 AM Yufei Gu <fl...@gmail.com> wrote:
> Thanks for the clarification, JB. Sorry for misunderstanding the Apache
> Solr notice issue. And I agree the Jetty case is covered. I still think
> propagating the Joda NOTICE would be cleaner for downstream redistribution
> hygiene, though I understand the argument that this likely does not rise to
> a release blocking issue. I revise my vote from -1 to 0.
>
> Yufei
>
>
> On Thu, May 14, 2026 at 10:31 PM Jean-Baptiste Onofré <jb...@nanthrax.net>
> wrote:
>
> > Hi Yufei
> >
> > Apache Solr NOTICE doesn't need to be included in our NOTICE: it's
> already
> > covered by "This product includes software developed at
> > The Apache Software Foundation (http://www.apache.org/)." (that's why we
> > don't include NOTICE from ASF projects by default).
> >
> > The Jetty NOTICE is already included in our NOTICE: "This product bundles
> > Jetty with the following in its NOTICE file:"
> >
> > So I don't see the problem here.
> >
> > For Joda time, it's good to include it, but regarding the NOTICE (
> > https://github.com/JodaOrg/joda-time/blob/main/NOTICE.txt), I don't
> think
> > it's a blocker.
> >
> > Regards
> > JB
> >
> > On Fri, May 15, 2026 at 12:02 AM Yufei Gu <fl...@gmail.com> wrote:
> >
> > > -1
> > >
> > > The 1.5.0-rc0 introduces 19 newly-bundled third-party libraries in
> > > polaris-bin/server/lib/main/ (per the LICENSE diff vs 1.4.0). Of these,
> > > at least Apache Solr (solr-solrj 8.11.3, transitively via
> > > ranger-audit-dest-solr), Eclipse Jetty (jetty-client / jetty-http
> > 9.4.56),
> > > and Joda-Time (2.10.6) contains substantive upstream NOTICE content
> that
> > is
> > > not propagated into polaris-bin/NOTICE, contrary to
> > > https://www.apache.org/legal/release-policy.html#license-modules-incl.
> > > Recommend (a) excluding ranger-audit-dest-solr if
> > Solr-as-audit-destination
> > > isn't a supported config, and (b) propagating the Jetty and Joda-Time
> > > NOTICE blocks for what remains.
> > >
> > > More details for (a): The build already excludes ranger-audit-dest-hdfs
> > > (line 29 in the extension's build file) but not ranger-audit-dest-solr.
> > If
> > > audit-to-Solr isn't a feature Polaris actually intends to ship, the
> easy
> > > fix is to add a matching exclude:
> > >
> > > implementation(libs.ranger.authz.embedded) {
> > > exclude("org.apache.ranger", "ranger-audit-dest-hdfs")
> > > exclude("org.apache.ranger", "ranger-audit-dest-solr") // also
> drops
> > > solr-solrj transitively
> > > ...
> > > }
> > >
> > > All other checks are good. Thanks JB for preparing it.
> > >
> > > Automated check (verify-release.sh)
> > > - Exit 0, Automatic release check succeeded, empty failures log
> > > - KEYS imported; GPG sigs + SHA512 valid for: source tarball,
> > polaris-bin
> > > (.tgz/.zip), Helm chart (+.prov), all 76 Maven module artifacts
> > > - Local build (publishToMavenLocal sourceTarball assemble
> > > -PjarWithGitInfo) succeeded
> > > - LICENSE + NOTICE present in the source tree, all main/sources JARs
> > > (META-INF/), polaris-bin tgz/zip, and Helm chart
> > >
> > > Manual checks
> > > - Verified that no JDBC schema changes exist between versions 1.4.0
> and
> > > 1.5.0. If a user upgrades from 1.4.0 to 1.5.0, no JDBC schema migration
> > is
> > > required.
> > > - Source tarball: no prohibited binaries (no
> > .jar/.class/.so/.dll/.exe).
> > > NOTICE correctly attributes ASF, Snowflake donation, and Nessie.
> > > - Git log: 295 commits since apache-polaris-1.4.0; tag HEAD is the
> > > expected [chore] Bump version to 1.5.0, preceded by normal feature/fix
> > work
> > > (no suspicious last-minute changes).
> > > - Helm chart: helm lint clean, helm template renders
> > > ConfigMap/Deployment/Service/ServiceAccount, Chart.yaml shows version:
> > > 1.5.0, appVersion: 1.5.0.
> > > - polaris-bin: contains both admin/ and server/ Quarkus apps with
> > correct
> > > 1.5.0 version on inner jars.
> > > - Python wheel (ASF dist): GPG signature is good; SHA512 matches.
> > > Compared to the Test PyPI wheel
> apache_polaris-1.5.0rc0-py3-none-any.whl:
> > > source code byte-identical; only difference is METADATA Version: 1.5.0
> > > (ASF) vs 1.5.0rc0 (TestPyPI), which is expected per staging convention.
> > >
> > >
> > >
> > > Yufei
> > >
> > >
> > > On Thu, May 14, 2026 at 1:12 PM Francois Papon <
> > > francois.papon@openobject.fr>
> > > wrote:
> > >
> > > > +1 (binding)
> > > >
> > > > All checks passed.
> > > >
> > > > Just a side note, the doap.rdf file in the source is not up to date,
> > the
> > > > latest release mentioned is 1.3.0-incubating.
> > > >
> > > > regards,
> > > >
> > > > François
> > > > fpapon@apache.org
> > > > francois.papon@openobject.fr
> > > >
> > > > Le 14/05/2026 à 09:15, Jean-Baptiste Onofré a écrit :
> > > > > Hi everyone,
> > > > >
> > > > > I propose that we release the following RC as the official Apache
> > > Polaris
> > > > > 1.5.0 release.
> > > > >
> > > > > This corresponds to the tag: apache-polaris-1.5.0-rc0
> > > > >
> > > > > *
> https://github.com/apache/polaris/commits/apache-polaris-1.5.0-rc0
> > > > > *
> > > > >
> > > >
> > >
> >
> https://github.com/apache/polaris/tree/da95233805815b1d6a8576c5b527143193e7d7e5
> > > > >
> > > > > The release tarball, signature, and checksums are here:
> > > > >
> > > > > * https://dist.apache.org/repos/dist/dev/polaris/1.5.0
> > > > >
> > > > > Helm charts are available on:
> > > > >
> > > > > * https://dist.apache.org/repos/dist/dev/polaris/helm-chart/1.5.0
> > > > >
> > > > > NB: you have to build the Docker images locally in order to test
> Helm
> > > > > charts.
> > > > >
> > > > > The Python CLI wheel is available on:
> > > > >
> > > > > *
> https://dist.apache.org/repos/dist/dev/polaris/python-client/1.5.0
> > > > >
> > > > > The Python CLI is also available on Test PyPI:
> > > > >
> > > > > * https://test.pypi.org/project/apache-polaris/1.5.0rc0/
> > > > >
> > > > > You can find the KEYS file here:
> > > > >
> > > > > * https://downloads.apache.org/polaris/KEYS
> > > > >
> > > > > Convenience binary artifacts are staged on Nexus. The Maven
> > repository
> > > > URL
> > > > > is:
> > > > >
> > > > > *
> > > >
> > >
> >
> https://repository.apache.org/content/repositories/orgapachepolaris-1067/
> > > > >
> > > > > Please download, verify, and test according to the release
> > verification
> > > > > guide, which can be found at:
> > > > >
> > > > > *
> > > > >
> > > >
> > >
> >
> https://polaris.apache.org/community/release-guides/release-verification-guide/
> > > > >
> > > > > Please vote in the next 72 hours.
> > > > >
> > > > > [ ] +1 Release this as Apache Polaris 1.5.0
> > > > > [ ] +0
> > > > > [ ] -1 Do not release this because...
> > > > >
> > > > > Only PMC members have binding votes, but other community members
> are
> > > > > encouraged to cast non-binding votes.
> > > > > This vote will pass if there are 3 binding +1 votes and more
> binding
> > +1
> > > > > votes than -1 votes.
> > > > >
> > > > > Regards
> > > > > JB
> > > > >
> > > >
> > >
> >
>
Re: [VOTE] Release Apache Polaris 1.5.0 (rc0)
Posted by Yufei Gu <fl...@gmail.com>.
Thanks for the clarification, JB. Sorry for misunderstanding the Apache
Solr notice issue. And I agree the Jetty case is covered. I still think
propagating the Joda NOTICE would be cleaner for downstream redistribution
hygiene, though I understand the argument that this likely does not rise to
a release blocking issue. I revise my vote from -1 to 0.
Yufei
On Thu, May 14, 2026 at 10:31 PM Jean-Baptiste Onofré <jb...@nanthrax.net>
wrote:
> Hi Yufei
>
> Apache Solr NOTICE doesn't need to be included in our NOTICE: it's already
> covered by "This product includes software developed at
> The Apache Software Foundation (http://www.apache.org/)." (that's why we
> don't include NOTICE from ASF projects by default).
>
> The Jetty NOTICE is already included in our NOTICE: "This product bundles
> Jetty with the following in its NOTICE file:"
>
> So I don't see the problem here.
>
> For Joda time, it's good to include it, but regarding the NOTICE (
> https://github.com/JodaOrg/joda-time/blob/main/NOTICE.txt), I don't think
> it's a blocker.
>
> Regards
> JB
>
> On Fri, May 15, 2026 at 12:02 AM Yufei Gu <fl...@gmail.com> wrote:
>
> > -1
> >
> > The 1.5.0-rc0 introduces 19 newly-bundled third-party libraries in
> > polaris-bin/server/lib/main/ (per the LICENSE diff vs 1.4.0). Of these,
> > at least Apache Solr (solr-solrj 8.11.3, transitively via
> > ranger-audit-dest-solr), Eclipse Jetty (jetty-client / jetty-http
> 9.4.56),
> > and Joda-Time (2.10.6) contains substantive upstream NOTICE content that
> is
> > not propagated into polaris-bin/NOTICE, contrary to
> > https://www.apache.org/legal/release-policy.html#license-modules-incl.
> > Recommend (a) excluding ranger-audit-dest-solr if
> Solr-as-audit-destination
> > isn't a supported config, and (b) propagating the Jetty and Joda-Time
> > NOTICE blocks for what remains.
> >
> > More details for (a): The build already excludes ranger-audit-dest-hdfs
> > (line 29 in the extension's build file) but not ranger-audit-dest-solr.
> If
> > audit-to-Solr isn't a feature Polaris actually intends to ship, the easy
> > fix is to add a matching exclude:
> >
> > implementation(libs.ranger.authz.embedded) {
> > exclude("org.apache.ranger", "ranger-audit-dest-hdfs")
> > exclude("org.apache.ranger", "ranger-audit-dest-solr") // also drops
> > solr-solrj transitively
> > ...
> > }
> >
> > All other checks are good. Thanks JB for preparing it.
> >
> > Automated check (verify-release.sh)
> > - Exit 0, Automatic release check succeeded, empty failures log
> > - KEYS imported; GPG sigs + SHA512 valid for: source tarball,
> polaris-bin
> > (.tgz/.zip), Helm chart (+.prov), all 76 Maven module artifacts
> > - Local build (publishToMavenLocal sourceTarball assemble
> > -PjarWithGitInfo) succeeded
> > - LICENSE + NOTICE present in the source tree, all main/sources JARs
> > (META-INF/), polaris-bin tgz/zip, and Helm chart
> >
> > Manual checks
> > - Verified that no JDBC schema changes exist between versions 1.4.0 and
> > 1.5.0. If a user upgrades from 1.4.0 to 1.5.0, no JDBC schema migration
> is
> > required.
> > - Source tarball: no prohibited binaries (no
> .jar/.class/.so/.dll/.exe).
> > NOTICE correctly attributes ASF, Snowflake donation, and Nessie.
> > - Git log: 295 commits since apache-polaris-1.4.0; tag HEAD is the
> > expected [chore] Bump version to 1.5.0, preceded by normal feature/fix
> work
> > (no suspicious last-minute changes).
> > - Helm chart: helm lint clean, helm template renders
> > ConfigMap/Deployment/Service/ServiceAccount, Chart.yaml shows version:
> > 1.5.0, appVersion: 1.5.0.
> > - polaris-bin: contains both admin/ and server/ Quarkus apps with
> correct
> > 1.5.0 version on inner jars.
> > - Python wheel (ASF dist): GPG signature is good; SHA512 matches.
> > Compared to the Test PyPI wheel apache_polaris-1.5.0rc0-py3-none-any.whl:
> > source code byte-identical; only difference is METADATA Version: 1.5.0
> > (ASF) vs 1.5.0rc0 (TestPyPI), which is expected per staging convention.
> >
> >
> >
> > Yufei
> >
> >
> > On Thu, May 14, 2026 at 1:12 PM Francois Papon <
> > francois.papon@openobject.fr>
> > wrote:
> >
> > > +1 (binding)
> > >
> > > All checks passed.
> > >
> > > Just a side note, the doap.rdf file in the source is not up to date,
> the
> > > latest release mentioned is 1.3.0-incubating.
> > >
> > > regards,
> > >
> > > François
> > > fpapon@apache.org
> > > francois.papon@openobject.fr
> > >
> > > Le 14/05/2026 à 09:15, Jean-Baptiste Onofré a écrit :
> > > > Hi everyone,
> > > >
> > > > I propose that we release the following RC as the official Apache
> > Polaris
> > > > 1.5.0 release.
> > > >
> > > > This corresponds to the tag: apache-polaris-1.5.0-rc0
> > > >
> > > > * https://github.com/apache/polaris/commits/apache-polaris-1.5.0-rc0
> > > > *
> > > >
> > >
> >
> https://github.com/apache/polaris/tree/da95233805815b1d6a8576c5b527143193e7d7e5
> > > >
> > > > The release tarball, signature, and checksums are here:
> > > >
> > > > * https://dist.apache.org/repos/dist/dev/polaris/1.5.0
> > > >
> > > > Helm charts are available on:
> > > >
> > > > * https://dist.apache.org/repos/dist/dev/polaris/helm-chart/1.5.0
> > > >
> > > > NB: you have to build the Docker images locally in order to test Helm
> > > > charts.
> > > >
> > > > The Python CLI wheel is available on:
> > > >
> > > > * https://dist.apache.org/repos/dist/dev/polaris/python-client/1.5.0
> > > >
> > > > The Python CLI is also available on Test PyPI:
> > > >
> > > > * https://test.pypi.org/project/apache-polaris/1.5.0rc0/
> > > >
> > > > You can find the KEYS file here:
> > > >
> > > > * https://downloads.apache.org/polaris/KEYS
> > > >
> > > > Convenience binary artifacts are staged on Nexus. The Maven
> repository
> > > URL
> > > > is:
> > > >
> > > > *
> > >
> >
> https://repository.apache.org/content/repositories/orgapachepolaris-1067/
> > > >
> > > > Please download, verify, and test according to the release
> verification
> > > > guide, which can be found at:
> > > >
> > > > *
> > > >
> > >
> >
> https://polaris.apache.org/community/release-guides/release-verification-guide/
> > > >
> > > > Please vote in the next 72 hours.
> > > >
> > > > [ ] +1 Release this as Apache Polaris 1.5.0
> > > > [ ] +0
> > > > [ ] -1 Do not release this because...
> > > >
> > > > Only PMC members have binding votes, but other community members are
> > > > encouraged to cast non-binding votes.
> > > > This vote will pass if there are 3 binding +1 votes and more binding
> +1
> > > > votes than -1 votes.
> > > >
> > > > Regards
> > > > JB
> > > >
> > >
> >
>
Re: [VOTE] Release Apache Polaris 1.5.0 (rc0)
Posted by Jean-Baptiste Onofré <jb...@nanthrax.net>.
Hi Yufei
Apache Solr NOTICE doesn't need to be included in our NOTICE: it's already
covered by "This product includes software developed at
The Apache Software Foundation (http://www.apache.org/)." (that's why we
don't include NOTICE from ASF projects by default).
The Jetty NOTICE is already included in our NOTICE: "This product bundles
Jetty with the following in its NOTICE file:"
So I don't see the problem here.
For Joda time, it's good to include it, but regarding the NOTICE (
https://github.com/JodaOrg/joda-time/blob/main/NOTICE.txt), I don't think
it's a blocker.
Regards
JB
On Fri, May 15, 2026 at 12:02 AM Yufei Gu <fl...@gmail.com> wrote:
> -1
>
> The 1.5.0-rc0 introduces 19 newly-bundled third-party libraries in
> polaris-bin/server/lib/main/ (per the LICENSE diff vs 1.4.0). Of these,
> at least Apache Solr (solr-solrj 8.11.3, transitively via
> ranger-audit-dest-solr), Eclipse Jetty (jetty-client / jetty-http 9.4.56),
> and Joda-Time (2.10.6) contains substantive upstream NOTICE content that is
> not propagated into polaris-bin/NOTICE, contrary to
> https://www.apache.org/legal/release-policy.html#license-modules-incl.
> Recommend (a) excluding ranger-audit-dest-solr if Solr-as-audit-destination
> isn't a supported config, and (b) propagating the Jetty and Joda-Time
> NOTICE blocks for what remains.
>
> More details for (a): The build already excludes ranger-audit-dest-hdfs
> (line 29 in the extension's build file) but not ranger-audit-dest-solr. If
> audit-to-Solr isn't a feature Polaris actually intends to ship, the easy
> fix is to add a matching exclude:
>
> implementation(libs.ranger.authz.embedded) {
> exclude("org.apache.ranger", "ranger-audit-dest-hdfs")
> exclude("org.apache.ranger", "ranger-audit-dest-solr") // also drops
> solr-solrj transitively
> ...
> }
>
> All other checks are good. Thanks JB for preparing it.
>
> Automated check (verify-release.sh)
> - Exit 0, Automatic release check succeeded, empty failures log
> - KEYS imported; GPG sigs + SHA512 valid for: source tarball, polaris-bin
> (.tgz/.zip), Helm chart (+.prov), all 76 Maven module artifacts
> - Local build (publishToMavenLocal sourceTarball assemble
> -PjarWithGitInfo) succeeded
> - LICENSE + NOTICE present in the source tree, all main/sources JARs
> (META-INF/), polaris-bin tgz/zip, and Helm chart
>
> Manual checks
> - Verified that no JDBC schema changes exist between versions 1.4.0 and
> 1.5.0. If a user upgrades from 1.4.0 to 1.5.0, no JDBC schema migration is
> required.
> - Source tarball: no prohibited binaries (no .jar/.class/.so/.dll/.exe).
> NOTICE correctly attributes ASF, Snowflake donation, and Nessie.
> - Git log: 295 commits since apache-polaris-1.4.0; tag HEAD is the
> expected [chore] Bump version to 1.5.0, preceded by normal feature/fix work
> (no suspicious last-minute changes).
> - Helm chart: helm lint clean, helm template renders
> ConfigMap/Deployment/Service/ServiceAccount, Chart.yaml shows version:
> 1.5.0, appVersion: 1.5.0.
> - polaris-bin: contains both admin/ and server/ Quarkus apps with correct
> 1.5.0 version on inner jars.
> - Python wheel (ASF dist): GPG signature is good; SHA512 matches.
> Compared to the Test PyPI wheel apache_polaris-1.5.0rc0-py3-none-any.whl:
> source code byte-identical; only difference is METADATA Version: 1.5.0
> (ASF) vs 1.5.0rc0 (TestPyPI), which is expected per staging convention.
>
>
>
> Yufei
>
>
> On Thu, May 14, 2026 at 1:12 PM Francois Papon <
> francois.papon@openobject.fr>
> wrote:
>
> > +1 (binding)
> >
> > All checks passed.
> >
> > Just a side note, the doap.rdf file in the source is not up to date, the
> > latest release mentioned is 1.3.0-incubating.
> >
> > regards,
> >
> > François
> > fpapon@apache.org
> > francois.papon@openobject.fr
> >
> > Le 14/05/2026 à 09:15, Jean-Baptiste Onofré a écrit :
> > > Hi everyone,
> > >
> > > I propose that we release the following RC as the official Apache
> Polaris
> > > 1.5.0 release.
> > >
> > > This corresponds to the tag: apache-polaris-1.5.0-rc0
> > >
> > > * https://github.com/apache/polaris/commits/apache-polaris-1.5.0-rc0
> > > *
> > >
> >
> https://github.com/apache/polaris/tree/da95233805815b1d6a8576c5b527143193e7d7e5
> > >
> > > The release tarball, signature, and checksums are here:
> > >
> > > * https://dist.apache.org/repos/dist/dev/polaris/1.5.0
> > >
> > > Helm charts are available on:
> > >
> > > * https://dist.apache.org/repos/dist/dev/polaris/helm-chart/1.5.0
> > >
> > > NB: you have to build the Docker images locally in order to test Helm
> > > charts.
> > >
> > > The Python CLI wheel is available on:
> > >
> > > * https://dist.apache.org/repos/dist/dev/polaris/python-client/1.5.0
> > >
> > > The Python CLI is also available on Test PyPI:
> > >
> > > * https://test.pypi.org/project/apache-polaris/1.5.0rc0/
> > >
> > > You can find the KEYS file here:
> > >
> > > * https://downloads.apache.org/polaris/KEYS
> > >
> > > Convenience binary artifacts are staged on Nexus. The Maven repository
> > URL
> > > is:
> > >
> > > *
> >
> https://repository.apache.org/content/repositories/orgapachepolaris-1067/
> > >
> > > Please download, verify, and test according to the release verification
> > > guide, which can be found at:
> > >
> > > *
> > >
> >
> https://polaris.apache.org/community/release-guides/release-verification-guide/
> > >
> > > Please vote in the next 72 hours.
> > >
> > > [ ] +1 Release this as Apache Polaris 1.5.0
> > > [ ] +0
> > > [ ] -1 Do not release this because...
> > >
> > > Only PMC members have binding votes, but other community members are
> > > encouraged to cast non-binding votes.
> > > This vote will pass if there are 3 binding +1 votes and more binding +1
> > > votes than -1 votes.
> > >
> > > Regards
> > > JB
> > >
> >
>
Re: [VOTE] Release Apache Polaris 1.5.0 (rc0)
Posted by Yufei Gu <fl...@gmail.com>.
-1
The 1.5.0-rc0 introduces 19 newly-bundled third-party libraries in
polaris-bin/server/lib/main/ (per the LICENSE diff vs 1.4.0). Of these,
at least Apache Solr (solr-solrj 8.11.3, transitively via
ranger-audit-dest-solr), Eclipse Jetty (jetty-client / jetty-http 9.4.56),
and Joda-Time (2.10.6) contains substantive upstream NOTICE content that is
not propagated into polaris-bin/NOTICE, contrary to
https://www.apache.org/legal/release-policy.html#license-modules-incl.
Recommend (a) excluding ranger-audit-dest-solr if Solr-as-audit-destination
isn't a supported config, and (b) propagating the Jetty and Joda-Time
NOTICE blocks for what remains.
More details for (a): The build already excludes ranger-audit-dest-hdfs
(line 29 in the extension's build file) but not ranger-audit-dest-solr. If
audit-to-Solr isn't a feature Polaris actually intends to ship, the easy
fix is to add a matching exclude:
implementation(libs.ranger.authz.embedded) {
exclude("org.apache.ranger", "ranger-audit-dest-hdfs")
exclude("org.apache.ranger", "ranger-audit-dest-solr") // also drops
solr-solrj transitively
...
}
All other checks are good. Thanks JB for preparing it.
Automated check (verify-release.sh)
- Exit 0, Automatic release check succeeded, empty failures log
- KEYS imported; GPG sigs + SHA512 valid for: source tarball, polaris-bin
(.tgz/.zip), Helm chart (+.prov), all 76 Maven module artifacts
- Local build (publishToMavenLocal sourceTarball assemble
-PjarWithGitInfo) succeeded
- LICENSE + NOTICE present in the source tree, all main/sources JARs
(META-INF/), polaris-bin tgz/zip, and Helm chart
Manual checks
- Verified that no JDBC schema changes exist between versions 1.4.0 and
1.5.0. If a user upgrades from 1.4.0 to 1.5.0, no JDBC schema migration is
required.
- Source tarball: no prohibited binaries (no .jar/.class/.so/.dll/.exe).
NOTICE correctly attributes ASF, Snowflake donation, and Nessie.
- Git log: 295 commits since apache-polaris-1.4.0; tag HEAD is the
expected [chore] Bump version to 1.5.0, preceded by normal feature/fix work
(no suspicious last-minute changes).
- Helm chart: helm lint clean, helm template renders
ConfigMap/Deployment/Service/ServiceAccount, Chart.yaml shows version:
1.5.0, appVersion: 1.5.0.
- polaris-bin: contains both admin/ and server/ Quarkus apps with correct
1.5.0 version on inner jars.
- Python wheel (ASF dist): GPG signature is good; SHA512 matches.
Compared to the Test PyPI wheel apache_polaris-1.5.0rc0-py3-none-any.whl:
source code byte-identical; only difference is METADATA Version: 1.5.0
(ASF) vs 1.5.0rc0 (TestPyPI), which is expected per staging convention.
Yufei
On Thu, May 14, 2026 at 1:12 PM Francois Papon <fr...@openobject.fr>
wrote:
> +1 (binding)
>
> All checks passed.
>
> Just a side note, the doap.rdf file in the source is not up to date, the
> latest release mentioned is 1.3.0-incubating.
>
> regards,
>
> François
> fpapon@apache.org
> francois.papon@openobject.fr
>
> Le 14/05/2026 à 09:15, Jean-Baptiste Onofré a écrit :
> > Hi everyone,
> >
> > I propose that we release the following RC as the official Apache Polaris
> > 1.5.0 release.
> >
> > This corresponds to the tag: apache-polaris-1.5.0-rc0
> >
> > * https://github.com/apache/polaris/commits/apache-polaris-1.5.0-rc0
> > *
> >
> https://github.com/apache/polaris/tree/da95233805815b1d6a8576c5b527143193e7d7e5
> >
> > The release tarball, signature, and checksums are here:
> >
> > * https://dist.apache.org/repos/dist/dev/polaris/1.5.0
> >
> > Helm charts are available on:
> >
> > * https://dist.apache.org/repos/dist/dev/polaris/helm-chart/1.5.0
> >
> > NB: you have to build the Docker images locally in order to test Helm
> > charts.
> >
> > The Python CLI wheel is available on:
> >
> > * https://dist.apache.org/repos/dist/dev/polaris/python-client/1.5.0
> >
> > The Python CLI is also available on Test PyPI:
> >
> > * https://test.pypi.org/project/apache-polaris/1.5.0rc0/
> >
> > You can find the KEYS file here:
> >
> > * https://downloads.apache.org/polaris/KEYS
> >
> > Convenience binary artifacts are staged on Nexus. The Maven repository
> URL
> > is:
> >
> > *
> https://repository.apache.org/content/repositories/orgapachepolaris-1067/
> >
> > Please download, verify, and test according to the release verification
> > guide, which can be found at:
> >
> > *
> >
> https://polaris.apache.org/community/release-guides/release-verification-guide/
> >
> > Please vote in the next 72 hours.
> >
> > [ ] +1 Release this as Apache Polaris 1.5.0
> > [ ] +0
> > [ ] -1 Do not release this because...
> >
> > Only PMC members have binding votes, but other community members are
> > encouraged to cast non-binding votes.
> > This vote will pass if there are 3 binding +1 votes and more binding +1
> > votes than -1 votes.
> >
> > Regards
> > JB
> >
>
Re: [VOTE] Release Apache Polaris 1.5.0 (rc0)
Posted by Romain Manni-Bucau <rm...@gmail.com>.
+1, tested on my datalake
Romain Manni-Bucau
@rmannibucau <https://x.com/rmannibucau> | .NET Blog
<https://dotnetbirdie.github.io/> | Blog <https://rmannibucau.github.io/> | Old
Blog <http://rmannibucau.wordpress.com> | Github
<https://github.com/rmannibucau> | LinkedIn
<https://www.linkedin.com/in/rmannibucau> | Book
<https://www.packtpub.com/en-us/product/java-ee-8-high-performance-9781788473064>
Javaccino founder (Java/.NET service - contact via linkedin)
Le jeu. 14 mai 2026 à 22:13, Francois Papon <fr...@openobject.fr>
a écrit :
> +1 (binding)
>
> All checks passed.
>
> Just a side note, the doap.rdf file in the source is not up to date, the
> latest release mentioned is 1.3.0-incubating.
>
> regards,
>
> François
> fpapon@apache.org
> francois.papon@openobject.fr
>
> Le 14/05/2026 à 09:15, Jean-Baptiste Onofré a écrit :
> > Hi everyone,
> >
> > I propose that we release the following RC as the official Apache Polaris
> > 1.5.0 release.
> >
> > This corresponds to the tag: apache-polaris-1.5.0-rc0
> >
> > * https://github.com/apache/polaris/commits/apache-polaris-1.5.0-rc0
> > *
> >
> https://github.com/apache/polaris/tree/da95233805815b1d6a8576c5b527143193e7d7e5
> >
> > The release tarball, signature, and checksums are here:
> >
> > * https://dist.apache.org/repos/dist/dev/polaris/1.5.0
> >
> > Helm charts are available on:
> >
> > * https://dist.apache.org/repos/dist/dev/polaris/helm-chart/1.5.0
> >
> > NB: you have to build the Docker images locally in order to test Helm
> > charts.
> >
> > The Python CLI wheel is available on:
> >
> > * https://dist.apache.org/repos/dist/dev/polaris/python-client/1.5.0
> >
> > The Python CLI is also available on Test PyPI:
> >
> > * https://test.pypi.org/project/apache-polaris/1.5.0rc0/
> >
> > You can find the KEYS file here:
> >
> > * https://downloads.apache.org/polaris/KEYS
> >
> > Convenience binary artifacts are staged on Nexus. The Maven repository
> URL
> > is:
> >
> > *
> https://repository.apache.org/content/repositories/orgapachepolaris-1067/
> >
> > Please download, verify, and test according to the release verification
> > guide, which can be found at:
> >
> > *
> >
> https://polaris.apache.org/community/release-guides/release-verification-guide/
> >
> > Please vote in the next 72 hours.
> >
> > [ ] +1 Release this as Apache Polaris 1.5.0
> > [ ] +0
> > [ ] -1 Do not release this because...
> >
> > Only PMC members have binding votes, but other community members are
> > encouraged to cast non-binding votes.
> > This vote will pass if there are 3 binding +1 votes and more binding +1
> > votes than -1 votes.
> >
> > Regards
> > JB
> >
>
Re: [VOTE] Release Apache Polaris 1.5.0 (rc0)
Posted by Francois Papon <fr...@openobject.fr>.
+1 (binding)
All checks passed.
Just a side note, the doap.rdf file in the source is not up to date, the
latest release mentioned is 1.3.0-incubating.
regards,
François
fpapon@apache.org
francois.papon@openobject.fr
Le 14/05/2026 à 09:15, Jean-Baptiste Onofré a écrit :
> Hi everyone,
>
> I propose that we release the following RC as the official Apache Polaris
> 1.5.0 release.
>
> This corresponds to the tag: apache-polaris-1.5.0-rc0
>
> * https://github.com/apache/polaris/commits/apache-polaris-1.5.0-rc0
> *
> https://github.com/apache/polaris/tree/da95233805815b1d6a8576c5b527143193e7d7e5
>
> The release tarball, signature, and checksums are here:
>
> * https://dist.apache.org/repos/dist/dev/polaris/1.5.0
>
> Helm charts are available on:
>
> * https://dist.apache.org/repos/dist/dev/polaris/helm-chart/1.5.0
>
> NB: you have to build the Docker images locally in order to test Helm
> charts.
>
> The Python CLI wheel is available on:
>
> * https://dist.apache.org/repos/dist/dev/polaris/python-client/1.5.0
>
> The Python CLI is also available on Test PyPI:
>
> * https://test.pypi.org/project/apache-polaris/1.5.0rc0/
>
> You can find the KEYS file here:
>
> * https://downloads.apache.org/polaris/KEYS
>
> Convenience binary artifacts are staged on Nexus. The Maven repository URL
> is:
>
> * https://repository.apache.org/content/repositories/orgapachepolaris-1067/
>
> Please download, verify, and test according to the release verification
> guide, which can be found at:
>
> *
> https://polaris.apache.org/community/release-guides/release-verification-guide/
>
> Please vote in the next 72 hours.
>
> [ ] +1 Release this as Apache Polaris 1.5.0
> [ ] +0
> [ ] -1 Do not release this because...
>
> Only PMC members have binding votes, but other community members are
> encouraged to cast non-binding votes.
> This vote will pass if there are 3 binding +1 votes and more binding +1
> votes than -1 votes.
>
> Regards
> JB
>
Re: [VOTE] Release Apache Polaris 1.5.0 (rc0)
Posted by Yong Zheng <yo...@gmail.com>.
+1 (binding)
Verified:
- Helm
- CLI
Thanks,
Yong Zheng
On Fri, May 15, 2026 at 10:11 AM Dmitri Bourlatchkov <di...@apache.org>
wrote:
> +1 (binding)
>
> Verified:
> * checksums
> * signatures
> * gradle assemble from source
> * local Python CLI install and package info
> * Helm install with Posgres using 1.5.0 charts and 1.4.1 images
>
> nit: The Python package is missing the "Home-page" and "Author" tags (even
> though the email is set):
>
> $ venv/bin/pip show apache-polaris
> Name: apache-polaris
> Version: 1.5.0
> Summary: Apache Polaris
> Home-page:
> Author:
> Author-email: Apache Software Foundation <de...@polaris.apache.org>
> License: Apache-2.0
>
> Cheers,
> Dmitri.
>
> On Thu, May 14, 2026 at 3:17 AM Jean-Baptiste Onofré <jb...@nanthrax.net>
> wrote:
>
> > Hi everyone,
> >
> > I propose that we release the following RC as the official Apache Polaris
> > 1.5.0 release.
> >
> > This corresponds to the tag: apache-polaris-1.5.0-rc0
> >
> > * https://github.com/apache/polaris/commits/apache-polaris-1.5.0-rc0
> > *
> >
> >
> https://github.com/apache/polaris/tree/da95233805815b1d6a8576c5b527143193e7d7e5
> >
> > The release tarball, signature, and checksums are here:
> >
> > * https://dist.apache.org/repos/dist/dev/polaris/1.5.0
> >
> > Helm charts are available on:
> >
> > * https://dist.apache.org/repos/dist/dev/polaris/helm-chart/1.5.0
> >
> > NB: you have to build the Docker images locally in order to test Helm
> > charts.
> >
> > The Python CLI wheel is available on:
> >
> > * https://dist.apache.org/repos/dist/dev/polaris/python-client/1.5.0
> >
> > The Python CLI is also available on Test PyPI:
> >
> > * https://test.pypi.org/project/apache-polaris/1.5.0rc0/
> >
> > You can find the KEYS file here:
> >
> > * https://downloads.apache.org/polaris/KEYS
> >
> > Convenience binary artifacts are staged on Nexus. The Maven repository
> URL
> > is:
> >
> > *
> >
> https://repository.apache.org/content/repositories/orgapachepolaris-1067/
> >
> > Please download, verify, and test according to the release verification
> > guide, which can be found at:
> >
> > *
> >
> >
> https://polaris.apache.org/community/release-guides/release-verification-guide/
> >
> > Please vote in the next 72 hours.
> >
> > [ ] +1 Release this as Apache Polaris 1.5.0
> > [ ] +0
> > [ ] -1 Do not release this because...
> >
> > Only PMC members have binding votes, but other community members are
> > encouraged to cast non-binding votes.
> > This vote will pass if there are 3 binding +1 votes and more binding +1
> > votes than -1 votes.
> >
> > Regards
> > JB
> >
>
Re: [VOTE] Release Apache Polaris 1.5.0 (rc0)
Posted by Dmitri Bourlatchkov <di...@apache.org>.
+1 (binding)
Verified:
* checksums
* signatures
* gradle assemble from source
* local Python CLI install and package info
* Helm install with Posgres using 1.5.0 charts and 1.4.1 images
nit: The Python package is missing the "Home-page" and "Author" tags (even
though the email is set):
$ venv/bin/pip show apache-polaris
Name: apache-polaris
Version: 1.5.0
Summary: Apache Polaris
Home-page:
Author:
Author-email: Apache Software Foundation <de...@polaris.apache.org>
License: Apache-2.0
Cheers,
Dmitri.
On Thu, May 14, 2026 at 3:17 AM Jean-Baptiste Onofré <jb...@nanthrax.net>
wrote:
> Hi everyone,
>
> I propose that we release the following RC as the official Apache Polaris
> 1.5.0 release.
>
> This corresponds to the tag: apache-polaris-1.5.0-rc0
>
> * https://github.com/apache/polaris/commits/apache-polaris-1.5.0-rc0
> *
>
> https://github.com/apache/polaris/tree/da95233805815b1d6a8576c5b527143193e7d7e5
>
> The release tarball, signature, and checksums are here:
>
> * https://dist.apache.org/repos/dist/dev/polaris/1.5.0
>
> Helm charts are available on:
>
> * https://dist.apache.org/repos/dist/dev/polaris/helm-chart/1.5.0
>
> NB: you have to build the Docker images locally in order to test Helm
> charts.
>
> The Python CLI wheel is available on:
>
> * https://dist.apache.org/repos/dist/dev/polaris/python-client/1.5.0
>
> The Python CLI is also available on Test PyPI:
>
> * https://test.pypi.org/project/apache-polaris/1.5.0rc0/
>
> You can find the KEYS file here:
>
> * https://downloads.apache.org/polaris/KEYS
>
> Convenience binary artifacts are staged on Nexus. The Maven repository URL
> is:
>
> *
> https://repository.apache.org/content/repositories/orgapachepolaris-1067/
>
> Please download, verify, and test according to the release verification
> guide, which can be found at:
>
> *
>
> https://polaris.apache.org/community/release-guides/release-verification-guide/
>
> Please vote in the next 72 hours.
>
> [ ] +1 Release this as Apache Polaris 1.5.0
> [ ] +0
> [ ] -1 Do not release this because...
>
> Only PMC members have binding votes, but other community members are
> encouraged to cast non-binding votes.
> This vote will pass if there are 3 binding +1 votes and more binding +1
> votes than -1 votes.
>
> Regards
> JB
>
[RESULT][VOTE] Release Apache Polaris 1.5.0 (rc0)
Posted by Jean-Baptiste Onofré <jb...@nanthrax.net>.
Hi everyone,
This vote passed with the following result:
+1 (binding): Robert Stupp, François Papon, Dmitri Bourlatchkov, Yong
Zheng, JB Onofré
+1 (non binding): Romain Manni-Bucau, Ajantha Bhat
0: Yufei Gu
I'm finalizing the release and I will do the announcement.
Thanks everyone for your vote!
Regards
JB
On Thu, May 14, 2026 at 9:15 AM Jean-Baptiste Onofré <jb...@nanthrax.net>
wrote:
> Hi everyone,
>
> I propose that we release the following RC as the official Apache Polaris
> 1.5.0 release.
>
> This corresponds to the tag: apache-polaris-1.5.0-rc0
>
> * https://github.com/apache/polaris/commits/apache-polaris-1.5.0-rc0
> *
> https://github.com/apache/polaris/tree/da95233805815b1d6a8576c5b527143193e7d7e5
>
> The release tarball, signature, and checksums are here:
>
> * https://dist.apache.org/repos/dist/dev/polaris/1.5.0
>
> Helm charts are available on:
>
> * https://dist.apache.org/repos/dist/dev/polaris/helm-chart/1.5.0
>
> NB: you have to build the Docker images locally in order to test Helm
> charts.
>
> The Python CLI wheel is available on:
>
> * https://dist.apache.org/repos/dist/dev/polaris/python-client/1.5.0
>
> The Python CLI is also available on Test PyPI:
>
> * https://test.pypi.org/project/apache-polaris/1.5.0rc0/
>
> You can find the KEYS file here:
>
> * https://downloads.apache.org/polaris/KEYS
>
> Convenience binary artifacts are staged on Nexus. The Maven repository URL
> is:
>
> *
> https://repository.apache.org/content/repositories/orgapachepolaris-1067/
>
> Please download, verify, and test according to the release verification
> guide, which can be found at:
>
> *
> https://polaris.apache.org/community/release-guides/release-verification-guide/
>
> Please vote in the next 72 hours.
>
> [ ] +1 Release this as Apache Polaris 1.5.0
> [ ] +0
> [ ] -1 Do not release this because...
>
> Only PMC members have binding votes, but other community members are
> encouraged to cast non-binding votes.
> This vote will pass if there are 3 binding +1 votes and more binding +1
> votes than -1 votes.
>
> Regards
> JB
>
Re: [VOTE] Release Apache Polaris 1.5.0 (rc0)
Posted by Robert Stupp <sn...@snazy.de>.
+1 (binding)
Verified the release using the release verification script, following the
documentation for technical checks against the staged source artifact,
Maven repo, and Helm charts (checksums, signatures, build reproducibility).
Script arguments: -v 1.5.0-rc0 -m 1067 -s
da95233805815b1d6a8576c5b527143193e7d7e5
I ran some local experiments against the release candidate, no issues found.
On Thu, May 14, 2026 at 9:16 AM Jean-Baptiste Onofré <jb...@nanthrax.net>
wrote:
> Hi everyone,
>
> I propose that we release the following RC as the official Apache Polaris
> 1.5.0 release.
>
> This corresponds to the tag: apache-polaris-1.5.0-rc0
>
> * https://github.com/apache/polaris/commits/apache-polaris-1.5.0-rc0
> *
>
> https://github.com/apache/polaris/tree/da95233805815b1d6a8576c5b527143193e7d7e5
>
> The release tarball, signature, and checksums are here:
>
> * https://dist.apache.org/repos/dist/dev/polaris/1.5.0
>
> Helm charts are available on:
>
> * https://dist.apache.org/repos/dist/dev/polaris/helm-chart/1.5.0
>
> NB: you have to build the Docker images locally in order to test Helm
> charts.
>
> The Python CLI wheel is available on:
>
> * https://dist.apache.org/repos/dist/dev/polaris/python-client/1.5.0
>
> The Python CLI is also available on Test PyPI:
>
> * https://test.pypi.org/project/apache-polaris/1.5.0rc0/
>
> You can find the KEYS file here:
>
> * https://downloads.apache.org/polaris/KEYS
>
> Convenience binary artifacts are staged on Nexus. The Maven repository URL
> is:
>
> *
> https://repository.apache.org/content/repositories/orgapachepolaris-1067/
>
> Please download, verify, and test according to the release verification
> guide, which can be found at:
>
> *
>
> https://polaris.apache.org/community/release-guides/release-verification-guide/
>
> Please vote in the next 72 hours.
>
> [ ] +1 Release this as Apache Polaris 1.5.0
> [ ] +0
> [ ] -1 Do not release this because...
>
> Only PMC members have binding votes, but other community members are
> encouraged to cast non-binding votes.
> This vote will pass if there are 3 binding +1 votes and more binding +1
> votes than -1 votes.
>
> Regards
> JB
>