+1 (non-binding)

I verified Apache Flink 1.20.6-rc3 (ATR revision 00007).

- KEYS: Rui's key DD8E 6D70 0C7B 5D22 CEF7 11C5 57DD 44DE 3590 F304 is in
  https://dist.apache.org/repos/dist/release/flink/KEYS and matches the
vote email.

- Tag: release-1.20.6-rc3 is a GPG-signed tag pointing to
  9c8444ef4c32b89a91f42a3e28f33367e51a5aac; the signature verifies against
KEYS.

- Python artifacts: the 12 wheels and the apache-flink sdist carry a good
  signature from the key above and match their .sha512 files.

- Source build: exported the tag and ran
    ./mvnw clean install -DskipTests -Pskip-webui-build -T 1C
  with JDK 8 and the bundled Maven 3.8.6. All 179 modules built successfully
  (~40 min), including the RAT check.

- Staged Maven artifacts (orgapacheflink-1950): 130 modules, every jar has a
  signature. flink-core, flink-clients and flink-table-api-java are
identical to
  what I built from the tag, except Built-By/Build-Jdk in
META-INF/MANIFEST.MF
  (Created-By: Apache Maven 3.8.6 matches).

- Binary distribution: the distribution produced by the from-source build
matches
  flink-dist/src/main/assemblies/bin.xml
(LICENSE/README.txt/bin/conf/examples/
  lib with 13 jars/log/opt/plugins, no NOTICE at the root).

- Python package provenance: the four manylinux wheels are byte-identical
to the
  artifacts of GHA run 43379970724, and the Python sources inside the
  wheels/sdist match the tag (0 differences over 216 files; only setup.cfg
in the
  sdist differs).

- Release notes / JIRA: all 46 issue keys in the announcement map to
commits in
  the tag; RC3 differs from RC2 only by one YARN test commit.

- flink-web#892 looks correct (version and download links).

- CI: branch run 43378636579 is green. The failed job in the wheel build run
  43379970724 is an infrastructure problem ("SSL peer shut down incorrectly"
  while downloading avatica-parent:1.11.0), not a code issue.

Thanks Rui for driving the release!

Yanquan

fanrui.apache.org via dev <[email protected]> 于2026年11月13日周五 16:37写道:

> Hi everyone,
>
> Please review and vote on the release candidate #3 for the version
> 1.20.6, as follows:
> [ ] +1, Approve the release
> [ ] -1, Do not approve the release (please provide specific comments)
>
> The complete staging area is available for your review, which includes:
> * JIRA release notes [1],
> * the official Apache source release and binary convenience releases,
>   including the PyFlink source distributions and 12 wheels under
>   python/, staged on Apache Trusted Releases (ATR) for review [2] and
>   to be deployed to dist.apache.org, which are signed with the key with
>   fingerprint DD8E 6D70 0C7B 5D22 CEF7  11C5 57DD 44DE 3590 F304 [3],
> * all artifacts to be deployed to the Maven Central Repository [4],
> * source code tag "release-1.20.6-rc3" [5], pointing to commit
>   9c8444ef4c32b89a91f42a3e28f33367e51a5aac,
> * website pull request listing the new release and adding the
>   announcement blog post [6].
>
> Every file of this candidate (ATR revision 00007) can be downloaded
> without login from
> https://releases.apache.org/download/path/flink/1.20.6/<file>, for
> example
> https://releases.apache.org/download/path/flink/1.20.6/flink-1.20.6-src.tgz
> ;
> the complete file list is at [7].
>
> The Python wheels were built by the GitHub Actions run [8] on the
> release commit. The CI run of the release branch commit the candidate
> is built on is [9].
>
> To verify the candidate, please check the signatures and checksums
> against KEYS [3], build the source release (JDK 8, Maven 3.8.6 via the
> bundled ./mvnw), and follow the checklist in [10].
>
> The vote will be open for at least 72 hours (excluding the weekend),
> until 2026-11-18 10:00 UTC. It is adopted by majority approval, with
> at least 3 PMC affirmative votes.
>
> Thanks,
> Rui
>
> [1]
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12357158&projectId=12315522
> [2] https://releases.apache.org/vote/flink/1.20.6
> [3] https://dist.apache.org/repos/dist/release/flink/KEYS
> [4]
> https://repository.apache.org/content/repositories/orgapacheflink-1950/
> [5] https://github.com/apache/flink/releases/tag/release-1.20.6-rc3
> [6] https://github.com/apache/flink-web/pull/892
> [7]
> https://releases.apache.org/api/release/paths/flink/1.20.6/00007?limit=1000
> [8] https://github.com/apache/flink/actions/runs/43379970724
> [9] https://github.com/apache/flink/actions/runs/43378636579
> [10]
> https://cwiki.apache.org/confluence/display/FLINK/Verifying+a+Flink+Release
>
> This email was sent by [email protected] on the Apache Trusted Releases
> platform
>

Reply via email to