+1 binding - Download Links ok - Imported KEYS successfully - Verified SHA512 checksum successfully - Verified GPG signature successfully - Extracted the source archive successfully - Checked LICENSE and NOTICE files exist
Thanks, Ming Wen, Apache APISIX PMC Chair On Thu, 11 Jun 2026 at 14:39, YuanSheng Wang <[email protected]> wrote: > +1 (binding) > > I have verified the Apache APISIX 3.17.0 release candidate: > > All four mandatory checks pass: > 1. ✅ Download Links — all 7 URLs return HTTP 200 > 2. ✅ SHA512 Checksum — OK; GPG Signature — Good signature from > [email protected] > 3. ✅ LICENSE (Apache 2.0, complete text) and NOTICE (correct ASF > attribution) present > 4. ✅ No binary files — 366 files, zero compiled binaries > > Verified on Darwin 25.5.0 (arm64), GPG 2.4.7, shasum (builtin). > > Regards, > Yuansheng Wang > > On Thu, Jun 11, 2026 at 6:13 AM Zhiyuan Ju <[email protected]> wrote: > > > Thanks! +1 (binding) > > > > I checked the Apache APISIX 3.17.0 release candidate. > > > > Environment: > > - Ubuntu 22.04 > > - OpenResty/APISIX Runtime built from the release verification script > with > > APISIX_RUNTIME=1.3.6 > > - LuaRocks 3.12.0 > > > > Checks performed: > > - Imported KEYS successfully > > - Verified SHA512 checksum successfully > > - Verified GPG signature successfully > > - Extracted the source archive successfully > > - Checked LICENSE and NOTICE files exist > > - Checked the source archive does not contain common generated binary > > artifacts > > - Built and installed APISIX Runtime successfully > > > > > > On Wed, Jun 10, 2026 at 6:21 PM Abhishek Choudhary < > > [email protected]> wrote: > > > > > Hello, Community, > > > > > > This is a call for the vote to release Apache APISIX version > > > > > > Release notes: > > > > > > https://github.com/apache/apisix/blob/release/3.17/CHANGELOG.md#3170 > > > > > > The release candidates: > > > > > > https://dist.apache.org/repos/dist/dev/apisix/3.17.0/ > > > > > > Release Commit ID: > > > > > > https://github.com/apache/apisix/commit/06f3037b > > > > > > Keys to verify the Release Candidate: > > > > > > https://dist.apache.org/repos/dist/dev/apisix/KEYS > > > > > > Steps to validating the release: > > > > > > 1. Download the release > > > > > > wget > > > > > > > > > https://dist.apache.org/repos/dist/dev/apisix/3.17.0/apache-apisix-3.17.0-src.tgz > > > > > > 2. Checksums and signatures > > > > > > wget https://dist.apache.org/repos/dist/dev/apisix/KEYS > > > > > > wget > > > > > > > > > https://dist.apache.org/repos/dist/dev/apisix/3.17.0/apache-apisix-3.17.0-src.tgz.asc > > > > > > wget > > > > > > > > > https://dist.apache.org/repos/dist/dev/apisix/3.17.0/apache-apisix-3.17.0-src.tgz.sha512 > > > > > > gpg --import KEYS > > > > > > shasum -c apache-apisix-3.17.0-src.tgz.sha512 > > > > > > gpg --verify apache-apisix-3.17.0-src.tgz.asc > > apache-apisix-3.17.0-src.tgz > > > > > > 3. Unzip and Check files > > > > > > tar zxvf apache-apisix-3.17.0-src.tgz > > > > > > 4. Build Apache APISIX: > > > > > > curl -sL > > > > > > > > > https://raw.githubusercontent.com/apache/apisix/release/3.17/utils/install-dependencies.sh > > > | APISIX_RUNTIME=1.3.6 bash - > > > > > > export PATH=$PATH:/usr/local/openresty/bin/ > > > > > > luarocks install apisix-master-0.rockspec --tree deps --only-deps > > > > > > 4.1 To build Apache APISIX from GitHub source code, please refer to: > > > > > > > > > > > > https://github.com/apache/apisix/blob/release/3.17/docs/en/latest/building-apisix.md#building-apisix-from-source > > > > > > The vote will be open for at least 72 hours or until the necessary > number > > > of > > > votes are reached. > > > > > > Please vote accordingly: > > > > > > [ ] +1 approve > > > [ ] +0 no opinion > > > [ ] -1 disapprove with the reason > > > > > > > > -- > > *MembPhis* > My GitHub: https://github.com/membphis > Apache APISIX: https://github.com/apache/apisix >
