You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@zookeeper.apache.org by Szalay-Bekő Máté <sz...@gmail.com> on 2022/12/18 20:01:41 UTC

[VOTE] Apache ZooKeeper release 3.6.4 candidate 2

This is a bugfix release candidate for 3.6.4. It fixes 42 issues, including
CVE fixes,
log4j1 removal (using reload4j from now) and various other bug fixes
(thread leaks, data
corruption, snapshotting and SASL related fixes).

Please note, that based on our Release Strategy (
https://zookeeper.apache.org/releases.html#release-strategy) branch 3.6
should become end-of-life and most likely 3.6.4 will be our last 3.6
release.

The full release notes is available at:
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310801&version=12350076

*** Please download, test and vote by December 29th 2022, 23:59 UTC+0. ***


Source files:
https://people.apache.org/~symat/zookeeper-3.6.4-rc2/

Maven staging repo:
https://repository.apache.org/content/groups/staging/org/apache/zookeeper/zookeeper/3.6.4/

The release candidate tag in git to be voted upon: release-3.6.4-2
(please note, branch-3.6.4 will move here only after the vote)

ZooKeeper's KEYS file containing PGP keys we use to sign the release:
https://www.apache.org/dist/zookeeper/KEYS

The staging version of the website is:
https://people.apache.org/~symat/zookeeper-3.6.4-rc2/website/


Should we release this candidate?


Best regards,
Máté

Re: [VOTE] Apache ZooKeeper release 3.6.4 candidate 2

Posted by Szalay-Bekő Máté <sz...@gmail.com>.
Thank you all for testing the release candidate!

I'm happy to announce that we have unanimously approved this release.
There are 3 approving votes, all of them are binding:

- Chris Nauroth (binding)
- Enrico Olivelli (binding)
- Máté Szalay-Bekő (binding)

There are no disapproving votes.

I will promote the artifacts and complete the release procedure.

Thanks to everyone who contributed to this release!

Best Regards,
Máté

On Fri, Dec 23, 2022 at 11:37 AM Enrico Olivelli <eo...@gmail.com>
wrote:

> +1 (binding)
>
> Built from sources and run all the tests (on Mac M1 with JDK8
> 1.8.0_352, vendor: Azul Systems)
>
> Enrico Olivelli
>
> Il giorno lun 19 dic 2022 alle ore 18:07 Chris Nauroth
> <cn...@apache.org> ha scritto:
> >
> > +1 (binding)
> >
> > - Verified all checksums.
> > - Verified all signatures.
> > - Built from source, including native code on Linux.
> > - Tests passed.
> > - Ran several small samples successfully.
> >
> > Máté, thank you for your diligence with these release candidates!
> >
> > Chris Nauroth
> >
> >
> > On Sun, Dec 18, 2022 at 12:03 PM Szalay-Bekő Máté <
> > szalay.beko.mate@gmail.com> wrote:
> >
> > > +1 (binding)
> > >
> > > I did the following tests for the release candidate:
> > > - verified checksum and gpg signature of the artifacts
> > > - I built the source code (incl. the C-client, using -Pfull-build) on
> > > Ubuntu 20.04.5 using OpenJDK 8u352, maven 3.6.3 and GCC version 9.4.0
> > > - all the unit tests passed (both Java and C-client)
> > > - I also built and executed unit tests for zkpython
> > > - I also built the java code (without -Pfull-build) using other JDK
> > > versions: 11.0.15, 17.0.3, 18.0.1, 19.0.1 (but didn't run the tests
> this
> > > time, just used 'clean install -DskipTests')
> > > - checkstyle and spotbugs passed
> > > - apache-rat passed
> > > - owasp (CVE check) passed
> > > - fatjar built
> > > - I executed quick rolling-upgrade tests (using
> > > https://github.com/symat/zk-rolling-upgrade-test):
> > >   - rolling upgrade from 3.5.10 to 3.6.4
> > >   - rolling upgrade from 3.6.3 to 3.6.4
> > >   - rolling upgrade from 3.6.4 to 3.7.1
> > >   - rolling upgrade from 3.6.4 to 3.8.0
> > > - checked the generated documentation (zookeeper-docs/target/html)
> > > - compared generated release notes (
> > >
> > >
> https://people.apache.org/~symat/zookeeper-3.6.4-rc2/website/releasenotes.html
> > > )
> > > with Jira (
> > >
> > >
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310801&version=12350076
> > > )
> > >
> > > Best regards,
> > > Máté
> > >
> > > On Sun, Dec 18, 2022 at 9:01 PM Szalay-Bekő Máté <
> > > szalay.beko.mate@gmail.com>
> > > wrote:
> > >
> > > > This is a bugfix release candidate for 3.6.4. It fixes 42 issues,
> > > > including CVE fixes,
> > > > log4j1 removal (using reload4j from now) and various other bug fixes
> > > > (thread leaks, data
> > > > corruption, snapshotting and SASL related fixes).
> > > >
> > > > Please note, that based on our Release Strategy (
> > > > https://zookeeper.apache.org/releases.html#release-strategy) branch
> 3.6
> > > > should become end-of-life and most likely 3.6.4 will be our last 3.6
> > > > release.
> > > >
> > > > The full release notes is available at:
> > > >
> > > >
> > >
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310801&version=12350076
> > > >
> > > > *** Please download, test and vote by December 29th 2022, 23:59
> UTC+0.
> > > ***
> > > >
> > > >
> > > > Source files:
> > > > https://people.apache.org/~symat/zookeeper-3.6.4-rc2/
> > > >
> > > > Maven staging repo:
> > > >
> > > >
> > >
> https://repository.apache.org/content/groups/staging/org/apache/zookeeper/zookeeper/3.6.4/
> > > >
> > > > The release candidate tag in git to be voted upon: release-3.6.4-2
> > > > (please note, branch-3.6.4 will move here only after the vote)
> > > >
> > > > ZooKeeper's KEYS file containing PGP keys we use to sign the release:
> > > > https://www.apache.org/dist/zookeeper/KEYS
> > > >
> > > > The staging version of the website is:
> > > > https://people.apache.org/~symat/zookeeper-3.6.4-rc2/website/
> > > >
> > > >
> > > > Should we release this candidate?
> > > >
> > > >
> > > > Best regards,
> > > > Máté
> > > >
> > >
>

Re: [VOTE] Apache ZooKeeper release 3.6.4 candidate 2

Posted by Enrico Olivelli <eo...@gmail.com>.
+1 (binding)

Built from sources and run all the tests (on Mac M1 with JDK8
1.8.0_352, vendor: Azul Systems)

Enrico Olivelli

Il giorno lun 19 dic 2022 alle ore 18:07 Chris Nauroth
<cn...@apache.org> ha scritto:
>
> +1 (binding)
>
> - Verified all checksums.
> - Verified all signatures.
> - Built from source, including native code on Linux.
> - Tests passed.
> - Ran several small samples successfully.
>
> Máté, thank you for your diligence with these release candidates!
>
> Chris Nauroth
>
>
> On Sun, Dec 18, 2022 at 12:03 PM Szalay-Bekő Máté <
> szalay.beko.mate@gmail.com> wrote:
>
> > +1 (binding)
> >
> > I did the following tests for the release candidate:
> > - verified checksum and gpg signature of the artifacts
> > - I built the source code (incl. the C-client, using -Pfull-build) on
> > Ubuntu 20.04.5 using OpenJDK 8u352, maven 3.6.3 and GCC version 9.4.0
> > - all the unit tests passed (both Java and C-client)
> > - I also built and executed unit tests for zkpython
> > - I also built the java code (without -Pfull-build) using other JDK
> > versions: 11.0.15, 17.0.3, 18.0.1, 19.0.1 (but didn't run the tests this
> > time, just used 'clean install -DskipTests')
> > - checkstyle and spotbugs passed
> > - apache-rat passed
> > - owasp (CVE check) passed
> > - fatjar built
> > - I executed quick rolling-upgrade tests (using
> > https://github.com/symat/zk-rolling-upgrade-test):
> >   - rolling upgrade from 3.5.10 to 3.6.4
> >   - rolling upgrade from 3.6.3 to 3.6.4
> >   - rolling upgrade from 3.6.4 to 3.7.1
> >   - rolling upgrade from 3.6.4 to 3.8.0
> > - checked the generated documentation (zookeeper-docs/target/html)
> > - compared generated release notes (
> >
> > https://people.apache.org/~symat/zookeeper-3.6.4-rc2/website/releasenotes.html
> > )
> > with Jira (
> >
> > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310801&version=12350076
> > )
> >
> > Best regards,
> > Máté
> >
> > On Sun, Dec 18, 2022 at 9:01 PM Szalay-Bekő Máté <
> > szalay.beko.mate@gmail.com>
> > wrote:
> >
> > > This is a bugfix release candidate for 3.6.4. It fixes 42 issues,
> > > including CVE fixes,
> > > log4j1 removal (using reload4j from now) and various other bug fixes
> > > (thread leaks, data
> > > corruption, snapshotting and SASL related fixes).
> > >
> > > Please note, that based on our Release Strategy (
> > > https://zookeeper.apache.org/releases.html#release-strategy) branch 3.6
> > > should become end-of-life and most likely 3.6.4 will be our last 3.6
> > > release.
> > >
> > > The full release notes is available at:
> > >
> > >
> > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310801&version=12350076
> > >
> > > *** Please download, test and vote by December 29th 2022, 23:59 UTC+0.
> > ***
> > >
> > >
> > > Source files:
> > > https://people.apache.org/~symat/zookeeper-3.6.4-rc2/
> > >
> > > Maven staging repo:
> > >
> > >
> > https://repository.apache.org/content/groups/staging/org/apache/zookeeper/zookeeper/3.6.4/
> > >
> > > The release candidate tag in git to be voted upon: release-3.6.4-2
> > > (please note, branch-3.6.4 will move here only after the vote)
> > >
> > > ZooKeeper's KEYS file containing PGP keys we use to sign the release:
> > > https://www.apache.org/dist/zookeeper/KEYS
> > >
> > > The staging version of the website is:
> > > https://people.apache.org/~symat/zookeeper-3.6.4-rc2/website/
> > >
> > >
> > > Should we release this candidate?
> > >
> > >
> > > Best regards,
> > > Máté
> > >
> >

Re: [VOTE] Apache ZooKeeper release 3.6.4 candidate 2

Posted by Chris Nauroth <cn...@apache.org>.
+1 (binding)

- Verified all checksums.
- Verified all signatures.
- Built from source, including native code on Linux.
- Tests passed.
- Ran several small samples successfully.

Máté, thank you for your diligence with these release candidates!

Chris Nauroth


On Sun, Dec 18, 2022 at 12:03 PM Szalay-Bekő Máté <
szalay.beko.mate@gmail.com> wrote:

> +1 (binding)
>
> I did the following tests for the release candidate:
> - verified checksum and gpg signature of the artifacts
> - I built the source code (incl. the C-client, using -Pfull-build) on
> Ubuntu 20.04.5 using OpenJDK 8u352, maven 3.6.3 and GCC version 9.4.0
> - all the unit tests passed (both Java and C-client)
> - I also built and executed unit tests for zkpython
> - I also built the java code (without -Pfull-build) using other JDK
> versions: 11.0.15, 17.0.3, 18.0.1, 19.0.1 (but didn't run the tests this
> time, just used 'clean install -DskipTests')
> - checkstyle and spotbugs passed
> - apache-rat passed
> - owasp (CVE check) passed
> - fatjar built
> - I executed quick rolling-upgrade tests (using
> https://github.com/symat/zk-rolling-upgrade-test):
>   - rolling upgrade from 3.5.10 to 3.6.4
>   - rolling upgrade from 3.6.3 to 3.6.4
>   - rolling upgrade from 3.6.4 to 3.7.1
>   - rolling upgrade from 3.6.4 to 3.8.0
> - checked the generated documentation (zookeeper-docs/target/html)
> - compared generated release notes (
>
> https://people.apache.org/~symat/zookeeper-3.6.4-rc2/website/releasenotes.html
> )
> with Jira (
>
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310801&version=12350076
> )
>
> Best regards,
> Máté
>
> On Sun, Dec 18, 2022 at 9:01 PM Szalay-Bekő Máté <
> szalay.beko.mate@gmail.com>
> wrote:
>
> > This is a bugfix release candidate for 3.6.4. It fixes 42 issues,
> > including CVE fixes,
> > log4j1 removal (using reload4j from now) and various other bug fixes
> > (thread leaks, data
> > corruption, snapshotting and SASL related fixes).
> >
> > Please note, that based on our Release Strategy (
> > https://zookeeper.apache.org/releases.html#release-strategy) branch 3.6
> > should become end-of-life and most likely 3.6.4 will be our last 3.6
> > release.
> >
> > The full release notes is available at:
> >
> >
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310801&version=12350076
> >
> > *** Please download, test and vote by December 29th 2022, 23:59 UTC+0.
> ***
> >
> >
> > Source files:
> > https://people.apache.org/~symat/zookeeper-3.6.4-rc2/
> >
> > Maven staging repo:
> >
> >
> https://repository.apache.org/content/groups/staging/org/apache/zookeeper/zookeeper/3.6.4/
> >
> > The release candidate tag in git to be voted upon: release-3.6.4-2
> > (please note, branch-3.6.4 will move here only after the vote)
> >
> > ZooKeeper's KEYS file containing PGP keys we use to sign the release:
> > https://www.apache.org/dist/zookeeper/KEYS
> >
> > The staging version of the website is:
> > https://people.apache.org/~symat/zookeeper-3.6.4-rc2/website/
> >
> >
> > Should we release this candidate?
> >
> >
> > Best regards,
> > Máté
> >
>

Re: [VOTE] Apache ZooKeeper release 3.6.4 candidate 2

Posted by Szalay-Bekő Máté <sz...@gmail.com>.
+1 (binding)

I did the following tests for the release candidate:
- verified checksum and gpg signature of the artifacts
- I built the source code (incl. the C-client, using -Pfull-build) on
Ubuntu 20.04.5 using OpenJDK 8u352, maven 3.6.3 and GCC version 9.4.0
- all the unit tests passed (both Java and C-client)
- I also built and executed unit tests for zkpython
- I also built the java code (without -Pfull-build) using other JDK
versions: 11.0.15, 17.0.3, 18.0.1, 19.0.1 (but didn't run the tests this
time, just used 'clean install -DskipTests')
- checkstyle and spotbugs passed
- apache-rat passed
- owasp (CVE check) passed
- fatjar built
- I executed quick rolling-upgrade tests (using
https://github.com/symat/zk-rolling-upgrade-test):
  - rolling upgrade from 3.5.10 to 3.6.4
  - rolling upgrade from 3.6.3 to 3.6.4
  - rolling upgrade from 3.6.4 to 3.7.1
  - rolling upgrade from 3.6.4 to 3.8.0
- checked the generated documentation (zookeeper-docs/target/html)
- compared generated release notes (
https://people.apache.org/~symat/zookeeper-3.6.4-rc2/website/releasenotes.html)
with Jira (
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310801&version=12350076
)

Best regards,
Máté

On Sun, Dec 18, 2022 at 9:01 PM Szalay-Bekő Máté <sz...@gmail.com>
wrote:

> This is a bugfix release candidate for 3.6.4. It fixes 42 issues,
> including CVE fixes,
> log4j1 removal (using reload4j from now) and various other bug fixes
> (thread leaks, data
> corruption, snapshotting and SASL related fixes).
>
> Please note, that based on our Release Strategy (
> https://zookeeper.apache.org/releases.html#release-strategy) branch 3.6
> should become end-of-life and most likely 3.6.4 will be our last 3.6
> release.
>
> The full release notes is available at:
>
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310801&version=12350076
>
> *** Please download, test and vote by December 29th 2022, 23:59 UTC+0. ***
>
>
> Source files:
> https://people.apache.org/~symat/zookeeper-3.6.4-rc2/
>
> Maven staging repo:
>
> https://repository.apache.org/content/groups/staging/org/apache/zookeeper/zookeeper/3.6.4/
>
> The release candidate tag in git to be voted upon: release-3.6.4-2
> (please note, branch-3.6.4 will move here only after the vote)
>
> ZooKeeper's KEYS file containing PGP keys we use to sign the release:
> https://www.apache.org/dist/zookeeper/KEYS
>
> The staging version of the website is:
> https://people.apache.org/~symat/zookeeper-3.6.4-rc2/website/
>
>
> Should we release this candidate?
>
>
> Best regards,
> Máté
>