+1 (non-binding) I checked: - SHA512 checksum of the source release verified - GPG signature verified against key 16AE0DDBBB2F380B (Ferenc Csaky) - LICENSE and NOTICE files present at the source root - No binary files in source archive - No SNAPSHOT dependencies in pom files - All POM files reference the same version (4.2.0) - README.md content looks correct - Source tarball contents match git tag v4.2.0-rc1 (only dev-only files differ: .asf.yaml, .github, .gitignore, .idea, tools/releasing/shared submodule) - Built from source successfully (mvn clean install -DskipTests) on JDK 11 - Maven staging artifacts (jar, sources, javadoc, tests, pom) present with .asc signatures and checksums - CI build green (workflow #341, Java 8/11/17 all passed) - Website PR #851 reviewed
Minor observation (non-blocking, consistent with v4.1.0): the shaded flink-sql-connector-pulsar jar bundles classes from io.netty, com.google.protobuf, org.apache.avro and others via pulsar-client-all (relocated under org.apache.pulsar.shade.*), but its META-INF/NOTICE only lists direct shaded dependencies. Other Flink connectors take different approaches here — flink-connector-aws flattens the full transitive tree in its NOTICE, while flink-connector-kafka follows the same pattern as Pulsar. Flagging for awareness, not a vote blocker. Thanks! -- Fabrizzio > El 16 may. 2026, a las 04:04, Yanquan Lv <[email protected]> escribió: > > +1 (non-binding) > > I checked: > - Source release (checksum, GPG signature verified against key > 16AE0DDBBB2F380B) > - LICENSE and NOTICE files present and correct for new dependencies added > in v4.2.0-rc1 compared to v4.1.0 > - No binary files in source archive > - No SNAPSHOT dependencies > - Built from source successfully (mvn clean install -DskipTests) > - Source tarball matches git tag v4.2.0-rc1 > - Maven staging repository artifacts are complete with signatures > - CI build green (Java 8/11/17 all passed) > - Website PR #851 reviewed > > Thanks Ferenc for driving this release! > > Ferenc Csaky <[email protected]> 于2026年5月14日周四 20:36写道： > >> Hi everyone, >> >> Please review and vote on release candidate #1 for flink-connector-pulsar >> v4.2.0, as follows: >> [ ] +1, Approve the release >> [ ] -1, Do not approve the release (please provide specific comments) >> >> >> The complete staging area is available for your review, which includes: >> * JIRA release notes [1], >> * the official Apache source release to be deployed to dist.apache.org >> [2], which are signed with the key with fingerprint 16AE0DDBBB2F380B [3], >> * all artifacts to be deployed to the Maven Central Repository [4], >> * source code tag v4.2.0-rc1 [5], >> * website pull request listing the new release [6]. >> * CI build of the tag [7]. >> >> The vote will be open for at least 72 hours. It is adopted by majority >> approval, with at least 3 PMC affirmative votes. >> >> Thanks, >> Ferenc >> >> [1] >> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12315522&version=12354027 >> [2] >> https://dist.apache.org/repos/dist/dev/flink/flink-connector-pulsar-4.2.0-rc1 >> [3] https://dist.apache.org/repos/dist/release/flink/KEYS >> [4] https://repository.apache.org/content/repositories/orgapacheflink-1913 >> [5] >> https://github.com/apache/flink-connector-pulsar/releases/tag/v4.2.0-rc1 >> [6] https://github.com/apache/flink-web/pull/851 >> [7] >> https://github.com/apache/flink-connector-pulsar/actions/runs/25819074276 >>
