Hi everyone, The results are in: the vote to release RC1 as version 1.11.5 has PASSED
Binding votes in favour of RC1 from Martin, Nándor and myself, and a non-binding vote from JB. I'll upload the artefacts later today. In closure, I'd like to thank everyone for voting, and especially Martin for being alert. Kind regards, Oscar On Wed, 15 Oct 2025 at 08:56, Oscar Westra van Holthe - Kind < [email protected]> wrote: > Hi everyone, > > As Martin indicated, I made a mistake in not replying to my own call to > vote... > > So, here's my +1 vote to release RC1 as 1.11.5. > > > Kind regards, > Oscar > > On Tue, 14 Oct 2025 at 10:43, Martin Grigorov <[email protected]> > wrote: > >> Hi Oscar, >> >> On Tue, Oct 14, 2025 at 9:48 AM Oscar Westra van Holthe - Kind < >> [email protected]> wrote: >> >> > Hi everyone, >> > >> > The current state of the vote for 1.11.5: >> > >> > RC0: >> > - NOT passed: 3 votes in favour, 1 against >> > - Reason to block: a missing security fix >> > >> > RC1: >> > - OPEN: 2 binding & 1 non-binding votes in favour: >> > >> >> I count only my vote as binding and JB Onofre's vote as non-binding. >> Why do you think there are 2 binding votes ? Do you count Nandor's (it is >> for RC0, not RC1) or yourself (I think you didn't vote yet) ? >> >> >> > >> > We need one more vote to release RC1 as 1.11.5 >> > >> > >> > Kind regards, >> > Oscar >> > >> > >> > On Mon, 29 Sept 2025 at 09:14, Martin Grigorov <[email protected]> >> > wrote: >> > >> > > +1 binding >> > > >> > > On Thu, Sep 11, 2025 at 1:55 PM Oscar Westra van Holthe - Kind < >> > > [email protected]> wrote: >> > > >> > > > Hi, >> > > > >> > > > I've cherry-picked the missing change for AVRO-4053 (doc >> consistency in >> > > > velocity templates), and created a new RC. >> > > > >> > > > I'd like to propose to release this RC1 as the official Apache Avro >> > > 1.11.5 >> > > > release. >> > > > >> > > > The commit id is >> > > > >> > > > >> > > >> > >> https://github.com/apache/avro/commit/257db287e4cf3f3831013780e709226d4aa188d9 >> > > > This corresponds to the tag: release-1.11.5-rc1: >> > > > https://github.com/apache/avro/tree/release-1.11.5-RC1 >> > > > >> > > > The release tarball, signature, and checksums are here (revision >> > r79245): >> > > > https://dist.apache.org/repos/dist/dev/avro/avro-1.11.5-RC1/ >> > > > The Maven artefacts are staged here: >> > > > >> https://repository.apache.org/content/repositories/orgapacheavro-1045/ >> > > > You can find the KEYS file here: >> > > > https://dist.apache.org/repos/dist/release/avro/KEYS >> > > > >> > > > This release includes the following security fixes: >> > > > * Prevent class with empty Java package being trusted by >> > > > SpecificDatumReader (#3311) >> > > > * Remove the default serializable packages and deprecated the >> property >> > to >> > > > introduce org.apache.avro.SERIALIZABLE_CLASSES instead (#3376) >> > > > * java-[key-]class allowed packages must be packages (#3453) >> > > > * doc consistency in velocity templates (#3150) >> > > > >> > > > Did I leave anything important out? >> > > > >> > > > >> > > > Please download, verify, and test. This vote will remain open for at >> > > least >> > > > 72 hours. >> > > > >> > > > [ ] +1 Release this as Apache Avro 1.11.5 >> > > > [ ] 0 >> > > > [ ] -1 Do not release this because... >> > > > >> > > > >> > > > Kind regards, >> > > > Oscar >> > > > >> > > > On Wed, 10 Sept 2025 at 16:32, Oscar Westra van Holthe - Kind < >> > > > [email protected]> wrote: >> > > > >> > > > > Hi, >> > > > > >> > > > > I'm adjusting my vote to -1, don't release, because we should >> include >> > > the >> > > > > change for AVRO-4053 (doc consistency in velocity templates). >> > > > > >> > > > > I'll create a new RC shortly. >> > > > > >> > > > > >> > > > > Kind regards, >> > > > > Oscar >> > > > > >> > > > > >> > > > > On Tue, 9 Sept 2025 at 10:06, Nándor Kollár <[email protected]> >> > > wrote: >> > > > > >> > > > >> +1 >> > > > >> >> > > > >> On 2025/09/07 18:05:18 Martin Grigorov wrote: >> > > > >> > +1 to release >> > > > >> > >> > > > >> > On Sat, 6 Sep 2025 at 0:19, Oscar Westra van Holthe - Kind < >> > > > >> > [email protected]> wrote: >> > > > >> > >> > > > >> > > And a +1 from me >> > > > >> > > >> > > > >> > > We need only one more vote... >> > > > >> > > >> > > > >> > > >> > > > >> > > Kind regards, >> > > > >> > > Oscar >> > > > >> > > >> > > > >> > > On Wed, 3 Sept 2025 at 22:38, Driesprong, Fokko >> > > > <[email protected] >> > > > >> > >> > > > >> > > wrote: >> > > > >> > > >> > > > >> > > > Hi Oscar, >> > > > >> > > > >> > > > >> > > > Thanks for running the release. This slipped through the >> > cracks >> > > of >> > > > >> my >> > > > >> > > > mailbox. >> > > > >> > > > >> > > > >> > > > +1 from my end >> > > > >> > > > >> > > > >> > > > Kind regards, >> > > > >> > > > Fokko >> > > > >> > > > >> > > > >> > > > Op wo 20 aug 2025 om 22:38 schreef Oscar Westra van Holthe >> - >> > > Kind >> > > > < >> > > > >> > > > [email protected]>: >> > > > >> > > > >> > > > >> > > > > Hi everyone, >> > > > >> > > > > >> > > > >> > > > > It took a bit longer than anticipated (learning about >> Perl >> > > > builds, >> > > > >> > > among >> > > > >> > > > > other things), but I've created a RC0 of Avro 1.11.5. >> > > > >> > > > > I'd like to propose to release this RC0 as the official >> > Apache >> > > > >> Avro >> > > > >> > > > 1.11.5 >> > > > >> > > > > release. >> > > > >> > > > > >> > > > >> > > > > The commit id is >> > > > >> > > > > >> > > > >> > > > > >> > > > >> > > > >> > > > >> > > >> > > > >> >> > > > >> > > >> > >> https://github.com/apache/avro/commit/a0d0130aea75b8319f251c3805f18a1776efa563 >> > > > >> > > > > This corresponds to the tag: release-1.11.5-rc0: >> > > > >> > > > > https://github.com/apache/avro/tree/release-1.11.5-RC0 >> > > > >> > > > > >> > > > >> > > > > The release tarball, signature, and checksums are here >> > > (revision >> > > > >> > > r78771): >> > > > >> > > > > >> > https://dist.apache.org/repos/dist/dev/avro/avro-1.11.5-RC0/ >> > > > >> > > > > The Maven artefacts are staged here: >> > > > >> > > > > >> > > > >> > > > > >> > > > >> > > > >> > > > >> > > >> > > > >> >> > > > >> > > >> > >> https://repository.apache.org/content/repositories/orgapacheavro-1042/org/apache/avro/ >> > > > >> > > > > >> > > > >> > > > > You can find the KEYS file here: >> > > > >> > > > > https://dist.apache.org/repos/dist/release/avro/KEYS >> > > > >> > > > > >> > > > >> > > > > This release includes the following security fixes: >> > > > >> > > > > * Prevent class with empty Java package being trusted by >> > > > >> > > > > SpecificDatumReader (#3311) >> > > > >> > > > > * Remove the default serializable packages and deprecated >> > the >> > > > >> property >> > > > >> > > to >> > > > >> > > > > introduce org.apache.avro.SERIALIZABLE_CLASSES instead >> > (#3376) >> > > > >> > > > > * java-[key-]class allowed packages must be packages >> (#3453) >> > > > >> > > > > >> > > > >> > > > > Did I leave anything important out? >> > > > >> > > > > >> > > > >> > > > > >> > > > >> > > > > Please download, verify, and test. This vote will remain >> > open >> > > > for >> > > > >> at >> > > > >> > > > least >> > > > >> > > > > 72 hours. >> > > > >> > > > > >> > > > >> > > > > [ ] +1 Release this as Apache Avro 1.11.5 >> > > > >> > > > > [ ] 0 >> > > > >> > > > > [ ] -1 Do not release this because... >> > > > >> > > > > >> > > > >> > > > > >> > > > >> > > > > Kind regards, >> > > > >> > > > > Oscar >> > > > >> > > > > >> > > > >> > > > > -- >> > > > >> > > > > ✉️ Oscar Westra van Holthe - Kind <[email protected]> >> > > > >> > > > > 🌐 https://github.com/opwvhk/ >> > > > >> > > > > >> > > > >> > > > >> > > > >> > > >> > > > >> > > >> > > > >> > > -- >> > > > >> > > >> > > > >> > > ✉️ Oscar Westra van Holthe - Kind <[email protected]>🌐 >> > > > >> > > https://github.com/opwvhk/ >> > > > >> > > >> > > > >> > >> > > > >> >> > > > > >> > > > > >> > > > > -- >> > > > > >> > > > > ✉️ Oscar Westra van Holthe - Kind <[email protected]> >> > > > > >> > > > > >> > > > >> > > > -- >> > > > >> > > > ✉️ Oscar Westra van Holthe - Kind <[email protected]>🌐 >> > > > https://github.com/opwvhk/ >> > > > >> > > >> > >> > >> > -- >> > >> > ✉️ Oscar Westra van Holthe - Kind <[email protected]> >> > >> > > > -- > > ✉️ Oscar Westra van Holthe - Kind <[email protected]> > > -- ✉️ Oscar Westra van Holthe - Kind <[email protected]>
