not sure what the current vote timeline/status is, but I did a smoke test of
iceberg with the latest rc and nothing failed
https://github.com/apache/iceberg/pull/17188
On 2026/07/13 11:17:47 Ismaël Mejía wrote:
> When trying to downstream the dependency upgrade into Apache Spark I
> also noticed another issue, that requires a fix in the Spark project
> (not on our side):
>
> AVRO-4257 (included in Avro 1.12.2) changes readResolve() to use the
> non-validating internal parser (JsonSchemaParser.parseInternal). Avro
> 1.12.2 **intentionally** stopped validating field defaults when
> deserializing a `Schema` object (patch comment says so explicitly).
>
> This breaks one Spark test that introduced in:
>
> SPARK-39775 disabled Avro default-value validation at parse time so
> Spark can parse and use schemas that carry invalid but unused default
> values (common when reading data produced by other systems). Spark
> does this in AvroUtils.parseAvroSchema via
> Schema.Parser().setValidateDefaults(false).
>
> This aligns the behavior on both sides, but the test on the Spark side
> expects the previous Avro behavior. Not an issue for the vote but to
> keep in mind when downstreaming the dependency. Here it is my
> suggested patch. I will take care of that once the release is out.
> https://github.com/iemejia/spark/commit/21691c8cef1611bc5fa0eb61c8bfd3c938e5dad2
>
> Ismael
>
>
> On Tue, Jun 30, 2026 at 7:07 PM Ryan Skraba <[email protected]> wrote:
> >
> > I'm quite a bit past the deadline -- I just wanted to put out a status
> > report.
> >
> > I've been checking Avro 1.12.2-rc1 against some downstream projects:
> > Iceberg, Flink and Parquet. We are definitely going to need to
> > communicate to these projects the new system properties for Avro
> > 1.12.0 and (hopefully) help them upgrade.
> >
> > Unfortunately, I've discovered some behavioural changes in Avro 1.12.2
> > that need investigation, starting with Parquet, and I'm taking a
> > closer look.
> >
> > The good news is that I've validated Python 1.12.2 against a larger
> > internal project and it seems to be OK, but I'm not quite ready to
> > give this release a +1 !
> >
> > Has anyone else given some validation a try? Any issues with changed
> > behaviour?
> >
> > All my best, Ryan
> >
> > On Thu, 25 Jun 2026 at 18:44, Ryan Skraba <[email protected]> wrote:
> > >
> > > It's interesting Martin, I still can't reproduce your failure -- and
> > > I've given it a few tries!
> > >
> > > These are the exact steps I've used to build the artifacts:
> > >
> > > ```
> > > wget -qO-
> > > https://dist.apache.org/repos/dist/dev/avro/avro-1.12.2-rc1/avro-src-1.12.2.tar.gz
> > > | gunzip | tar xvf -
> > > cd avro-src-1.12.2/
> > > git init
> > > ./build.sh docker
> > > ./build.sh clean test dist
> > > ```
> > >
> > > On my hand, I've validated the Java artifacts with Iceberg and some
> > > internal projects.
> > >
> > > I have been trying to run some Python code, which is why I've delayed
> > > my vote a bit, but it's all looking OK for the moment.
> > >
> > > Has anybody else given some downstream ASF projects a try?
> > >
> > > All my best, Ryan
> > >
> > > On Wed, 24 Jun 2026 at 12:49, Martin Grigorov <[email protected]>
> > > wrote:
> > > >
> > > > Hi,
> > > >
> > > > For me the Perl SDK keeps failing due to:
> > > >
> > > > => [11/25] RUN curl -sSL https://cpanmin.us | perl - --self-upgrade &&
> > > > cpanm --mirror https://www.cpan.org/ install Compress::Zstd 110.7s
> > > > => => # ! Download
> > > > http://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7049.tar.gz
> > > > failed. Retrying ...
> > > >
> > > > Because of this the Docker based testing fails ...
> > > >
> > > > I believe cpanminus fails because it uses HTTP instead of HTTPS:
> > > >
> > > > ❯
> > > > curl
> > > > -L
> > > > https://cpanmin.us
> > > > |
> > > > perl
> > > > -
> > > > App::cpanminus
> > > > % Total % Received % Xferd Average Speed Time Time Time Current Dload
> > > > Upload Total Spent Left Speed 100 295k 100 295k 0 0 3730k 0 --:--:--
> > > > --:--:-- --:--:-- 3698k ! ! Can't write to /Library/Perl/5.34 and
> > > > /usr/local/bin: Installing modules to /Users/mgrigorov/perl5 ! To turn
> > > > off
> > > > this warning, you have to do one of the following: ! - run me as a root
> > > > or
> > > > with --sudo option (to install to /Library/Perl/5.34 and
> > > > /usr/local/bin) !
> > > > - Configure local::lib in your existing shell to set PERL_MM_OPT etc. !
> > > > -
> > > > Install local::lib by running the following commands ! ! cpanm
> > > > --local-lib=~/perl5 local::lib && eval $(perl -I ~/perl5/lib/perl5/
> > > > -Mlocal::lib) ! --> Working on App::cpanminus Fetching
> > > > http://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7049.tar.gz
> > > > ... FAIL ! Download
> > > > http://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7049.tar.gz
> > > > failed. Retrying ... ! Download
> > > > http://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7049.tar.gz
> > > > failed. Retrying ... ! Download
> > > > http://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7049.tar.gz
> > > > failed. Retrying ... ! Failed to download
> > > > http://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7049.tar.gz
> > > > !
> > > > Failed to fetch distribution App-cpanminus-1.7049
> > > >
> > > > and https://metacpan.org/pod/App::cpanminus has a Security Advisory at
> > > > the
> > > > top:
> > > >
> > > > CVE-2024-45321 (2024-08-27)
> > > >
> > > > The App::cpanminus package through 1.7047 for Perl downloads code via
> > > > insecure HTTP, enabling code execution for network attackers.
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > On Sat, Jun 20, 2026 at 8:06 PM Ryan Skraba <[email protected]> wrote:
> > > >
> > > > > Hi everyone,
> > > > >
> > > > > I'd like to propose the following RC1 to be released as the official
> > > > > Apache
> > > > > Avro 1.12.2 release.
> > > > >
> > > > > The commit id is 3dd516fb146a8e733867ece19b15a01a37a68595
> > > > > * This corresponds to the tag: release-1.12.2-rc1
> > > > > * https://github.com/apache/avro/releases/tag/release-1.12.2-rc1
> > > > >
> > > > > The release tarball, signature, and checksums are here (revision
> > > > > 85347)
> > > > > * https://dist.apache.org/repos/dist/dev/avro/avro-1.12.2-rc1/
> > > > >
> > > > > You can find the KEYS file here:
> > > > > * https://dist.apache.org/repos/dist/dev/avro/KEYS
> > > > >
> > > > > Binary artifacts for Java are staged in Nexus here:
> > > > > *
> > > > > https://repository.apache.org/content/groups/staging/org/apache/avro/avro/1.12.2/
> > > > >
> > > > > This release includes ~30 Jira issues:
> > > > > *
> > > > > https://issues.apache.org/jira/issues/?jql=project%3DAVRO%20AND%20fixVersion%3D1.12.2
> > > > >
> > > > > I'll send a follow-up email with the notable highlights for each
> > > > > language and SDK, but I wanted to give everyone a head start to
> > > > > check their favourite fixed JIRAs and features!
> > > > >
> > > > > Please download, verify, and test. This vote will remain open for at
> > > > > least
> > > > > 72 hours. I would like to close at 18h00 UTC Wednesday, June 24th,
> > > > > 2026.
> > > > >
> > > > > [ ] +1 Release this as Apache Avro 1.12.2
> > > > > [ ] +0
> > > > > [ ] -1 Do not release this because...
> > > > >
> > > > > Best regards,
> > > > > Ryan Skraba
> > > > > [Countdown to vote]:
> > > > > https://www.timeanddate.com/countdown/to?iso=20260624T180000&p0=1440
> > > > >
>