Thank you Kashif for working on the release! +1 binding
noticed that the src tarball contains a bunch of `jar` files ; which pump up its size to 500MB - earlier releases were also had those; so I don't think thats a blocker; but push a fix for it so that future releases will be smaller :D
otherwise look good! Linux amd64, OpenJDK 21 - sha512 checksums: ok - signing key 62773F2189EE2AEA0F4C5E58303608E3456CA262 matches kfaraz.asc - tag druid-38.0.0-rc1 points to 01f20f3f26e79592db473b04a31be1e2aae2a72f - LICENSE and NOTICE present in src and bin - mvn apache-rat:check -Prat passes: 0 unapproved files - built from the src tarball: `mvn clean install -Papache-release,dist -Dgpg.skip -DskipTests -Ddependency-check.skip` (file list matches) - ran micro-quickstart from the bin tarball: ingested the wikipedia sample with SQL INSERT (39244 rows), queried it back, web console loads - docker image apache/druid:38.0.0-rc1 has digest sha256:bed99bf52f5067ed6df866794e0212a0f3b0c72b2ede628bb3c7b4b24bf9c285 - ran distribution/docker/docker-compose.yml with the RC image: all services came up and answer SQL - signatures of sampled artifacts in the staged Maven repo (druid-processing, druid-server, druid-sql) verify - ingested NYC to a launched instance ; run some queries cheers, Zoltan On 9/28/26 9:51 AM, Kashif Faraz wrote:
Gentle reminder to vote on the RC1 artifacts for Druid 38 release. Thanks Kashif On Thu, Sep 24, 2026 at 7:44 PM Kashif Faraz <[email protected]> wrote:Hi I have created a build for Apache Druid 38.0.0, release candidate 1. Thanks to everyone who has helped contribute to the release! You can read the proposed release notes here: https://github.com/apache/druid/issues/20416 The release candidate has been tagged in GitHub as druid-38.0.0-rc1 (01f20f3f26e79592db473b04a31be1e2aae2a72f), available here: https://github.com/apache/druid/releases/tag/druid-38.0.0-rc1 The artifacts to be voted on are located here: https://dist.apache.org/repos/dist/dev/druid/38.0.0-rc1/ A staged Maven repository is available for review at: https://repository.apache.org/content/repositories/orgapachedruid-1099/ A Docker image containing the binary of the release candidate can be retrieved via: docker pull apache/druid:38.0.0-rc1 Artifact checksums: src: 841b4b8d57fd439278ab1b939c56abd9baf6673ef6d44dadd4962942e6cbc9458e8f61cec57e14f33b3cc6abe0c69ef494afdeee3ea77be8844d77894c22b26f bin: aafbc2696d97ddc7f760a6a10b367fa0228a28642b11e1db6eed541eb3a5f5bbcd874144ffafa0dd8e1135dbdec39372c9072025e5e3fb76b88e48088cab47a0 docker: bed99bf52f5067ed6df866794e0212a0f3b0c72b2ede628bb3c7b4b24bf9c285 Release artifacts are signed with the following key: https://people.apache.org/keys/committer/kfaraz.asc This key and the key of other committers can also be found in the project's KEYS file here: https://dist.apache.org/repos/dist/release/druid/KEYS (If you are a committer, please feel free to add your own key to that file by following the instructions in the file's header.) Verify checksums: diff <(shasum -a512 apache-druid-38.0.0-src.tar.gz | \ cut -d ' ' -f1) \ <(cat apache-druid-38.0.0-src.tar.gz.sha512 ; echo) diff <(shasum -a512 apache-druid-38.0.0-bin.tar.gz | \ cut -d ' ' -f1) \ <(cat apache-druid-38.0.0-bin.tar.gz.sha512 ; echo) Verify signatures: gpg --verify apache-druid-38.0.0-src.tar.gz.asc \ apache-druid-38.0.0-src.tar.gz gpg --verify apache-druid-38.0.0-bin.tar.gz.asc \ apache-druid-38.0.0-bin.tar.gz Please review the proposed artifacts and vote. Note that Apache has specific requirements that must be met before +1 binding votes can be cast by PMC members. Please refer to the policy at http://www.apache.org/legal/release-policy.html#policy for more details. As part of the validation process, the release artifacts can be generated from source by running: mvn clean install -Papache-release,dist -Dgpg.skip The RAT license check can be run from source by: mvn apache-rat:check -Prat This vote will be open for at least 72 hours. The vote will pass if a majority of at least three +1 PMC votes are cast. [ ] +1 Release this package as Apache Druid 38.0.0 [ ] 0 I don't feel strongly about it, but I'm okay with the release [ ] -1 Do not release this package because...
OpenPGP_signature.asc
Description: OpenPGP digital signature
