+1 (binding) - Verified GPG signatures and SHA512 checksums for the source archive and both binary distributions. The signing fingerprint matches EA96AD42DECC72437E0FAC157A366E479A726BA0. - Confirmed no compiled binaries in the source archive and a byte-for-byte match with release-3.7.0-rc1 at commit 045e8da45df4b1017849b04e2d8bfe8f0ed7936d. - Passed Apache RAT on a pristine source extraction. - Built all 57 modules with Maven 3.9.9 on macOS arm64: Flink 1.20 with JDK 11 and Flink 2.2 with JDK 17. Tests and the E2E runtime download were skipped during packaging. - Passed 223 selected unit-test executions with zero failures, errors, or skipped tests. - Checked version consistency across 57 source POMs and 104 staging POMs. - Verified signatures, checksums, Java 11 bytecode, and LICENSE/NOTICE presence for six sampled Maven JARs. (The JTS/SLF4J license-forwarding issue has already been acknowledged by yanquan and will be addressed as a follow-up.) - Passed CDC API smoke checks for both release variants. - Checked the release notes - Reviewed the web PR
Best, Lincoln Lee Spoorthi Basu <[email protected]> 于2026年10月9日周五 23:35写道： > +1 (non-binding) > > - verified checksums and signatures of the source and binary tarballs > - checked the source tarball matches the release-3.7.0-rc1 tag > - checked LICENSE and NOTICE files are included > - checked the source tarball contains no unexpected binary files or > SNAPSHOT dependencies > - built from source with JDK 11 + Flink 1.20.3 and JDK 17 + Flink 2.2.0 > - ran all tests for the snapshot split metadata release option on both > builds (incremental source framework, MySQL, MongoDB, PostgreSQL, SQL > Server, Oracle and Db2), including the failover cases > - ran a MySQL to Values YAML pipeline with both binary packages on local > Flink 1.20.3 and 2.2.0 clusters, with metadata release enabled (released as > expected after entering the binlog phase) > - checked the Maven staging repository: all deployable modules are staged > for both 3.7.0-1.20 and 3.7.0-2.2, and every jar and pom has a valid > signature and matching checksums > - checked the release notes > - reviewed the web PR > > Found a small JIRA issue (non-blocking): 9 issues in the release blog are > not tagged cdc-3.7.0, so they are missing from the JIRA release notes: > FLINK-39252, FLINK-39732, FLINK-39759, FLINK-34806, FLINK-39757, > FLINK-40411, FLINK-40623, FLINK-40690, FLINK-40739. Three of them > (FLINK-39252, FLINK-39732, FLINK-39759) are tagged cdc-3.6.0 instead, and > four (FLINK-34806, FLINK-40623, FLINK-40690, FLINK-40739) are also still > open although their PRs are merged. It would be good to update them before > the release is announced. > > Thanks Xiqian for driving this release! > > Best, > Spoorthi Basu > > On Thu, Oct 8, 2026 at 7:23 PM Hang Ruan <[email protected]> wrote: > > > +1 (binding) > > > > - verified signatures and checksums > > - checked the GitHub release tag > > - checked the source archive matches the release tag > > - checked LICENSE and NOTICE files > > - checked the source archive contains no unexpected binary files > > - built the RC from source code with JDK 11 + Flink 2.2.0 > > - checked Maven staging artifacts for both 3.7.0-1.20 and 3.7.0-2.2 > > - checked the release notes > > - reviewed the web PR > > > > Best, > > Hang > > >
