+1 (non-binding) Verified:
* SHA-512 and GPG signature: OK (key 80763BA3EDCCE745, Amogh Jahagirdar) * Tag apache-iceberg-1.10.2-rc1 = 57396d628cb9f92e121f9c2919398475393f0a3a * Source archive matches the tag (only iceberg-build.properties and version.txt added) * LICENSE / NOTICE / README present; dev/check-license passed * No binaries (.jar/.war/.nar) in source tarball * ./gradlew build -x integrationTest -x test succeeded * Maven staging repo looks good Thanks, Huaxin On Thu, May 14, 2026 at 3:06 PM Yufei Gu <[email protected]> wrote: > +1 binding. > > Checks passed: > > - shasum -a 512 -c apache-iceberg-1.10.2.tar.gz.sha512: OK. > - gpg --verify using Iceberg KEYS: good signature from Amogh > Jahagirdar <[email protected]>, key > 7180E16D410C476E010F37E180763BA3EDCCE745. > - Git tag apache-iceberg-1.10.2-rc1 resolves to > 57396d628cb9f92e121f9c2919398475393f0a3a. > - Source archive matches the Git tag tree, except expected generated > release files iceberg-build.properties and version.txt; those record > version 1.10.2, tag apache-iceberg-1.10.2-rc1, and the same commit. > - LICENSE, NOTICE, README.md present; dev/check-license passed. > - Source tarball contains no .jar, .war, or .nar files. > - ./gradlew build -x integrationTest succeeded. > > Thanks Amogh! > > On Thu, May 14, 2026 at 12:10 PM Kevin Liu <[email protected]> wrote: > >> +1 binding >> >> - Verified signature, checksum >> - Build + test passed >> - Checked LICENSE/NOTICE files >> - No unexpected binary files >> >> I double checked all the LICENSE/NOTICE files against the main branch, >> and it looks good. >> I also verified that we're not publishing the open-api jar, compared to >> 1.10.1 [1][2]. >> I see that we are still publishing `iceberg-kafka-connect-1.10.2.jar` but >> that is expected [3][4]. >> >> Thanks again for running the release! >> >> Best, >> Kevin Liu >> >> [1] >> https://repository.apache.org/content/repositories/orgapacheiceberg-1281/org/apache/iceberg/iceberg-open-api/1.10.2/ >> [2] >> https://repo1.maven.org/maven2/org/apache/iceberg/iceberg-open-api/1.10.1/ >> [3] >> https://repository.apache.org/content/repositories/orgapacheiceberg-1281/org/apache/iceberg/iceberg-kafka-connect/1.10.2/ >> [4] >> https://repo1.maven.org/maven2/org/apache/iceberg/iceberg-kafka-connect/1.10.1/ >> >> On Thu, May 14, 2026 at 8:43 AM Russell Spitzer < >> [email protected]> wrote: >> >>> +1 Binding - >>> >>> One minor cleanup to the NOTICE file that we should do but I don't think >>> blocks release >>> >>> BUNDLE-NOTICE inside iceberg-spark-runtime-3.5_2.13-1.10.2.jar: >>> >>> Lines 2–3: Apache Iceberg / Copyright 2017-2025 The Apache Software >>> Foundation >>> Lines 28–29: Apache Iceberg / Copyright 2017-2026 The Apache Software >>> Foundation >>> >>> So it looks like we missed the year bump on the 1.10.x branch >>> >>> Ran my automation - >>> >>> Apache Iceberg 1.10.2 RC1 — Validation Report >>> Tag: apache-iceberg-1.10.2-rc1 (commit >>> 57396d628cb9f92e121f9c2919398475393f0a3a) >>> Signed by: Amogh Jahagirdar <[email protected]> (RSA >>> 7180E16D410C476E010F37E180763BA3EDCCE745) >>> Passed >>> ------ >>> 1. GPG signature verified against KEYS: >>> gpg --verify apache-iceberg-1.10.2.tar.gz.asc >>> apache-iceberg-1.10.2.tar.gz >>> -> Good signature from "Amogh Jahagirdar <[email protected]>" >>> The same key signs all Maven staging artifacts (verified >>> iceberg-core-1.10.2.jar.asc). >>> 2. SHA-512 checksum matches: >>> expected/actual = >>> 7eba5c85037bc150efcea3e06dae6653be961a275f1bc5d5333c9a22d18c67d6 >>> 8c40f6396ee9501bfad15906d9df13858940326ea2258728c8e0d5eedd65b9bd >>> 3. Source tarball hygiene: >>> - LICENSE present, Apache 2.0 >>> - NOTICE present >>> - No DISCLAIMER (correct: TLP, not incubating) >>> - Only binary files are PNG/ICO logos and favicons >>> - License headers scanned on 3,059 / 3,062 source files -- Russ (We ship >>> a few javascript files in the docs without an ASF header because we didn't >>> write them) >>> 4. Tag points at the expected commit: >>> git rev-parse apache-iceberg-1.10.2-rc1^{commit} >>> -> 57396d628cb9f92e121f9c2919398475393f0a3a (matches vote email) >>> 5. Builds from source on macOS / OpenJDK 21.0.7: >>> ./gradlew build -x test -x integrationTest >>> -> BUILD SUCCESSFUL in 1m 54s (432 tasks) >>> 6. Unit tests pass for the highest-stability modules: >>> ./gradlew :iceberg-core:test :iceberg-api:test >>> -> 8,008 tests, 0 failures, 0 errors, 452 skipped (across 331 test >>> classes) >>> 7. Maven staging repo (orgapacheiceberg-1281) looks complete: >>> - 50 modules published under org.apache.iceberg >>> - Each artifact has .jar, .pom, .module, -sources.jar, -javadoc.jar, >>> -tests.jar >>> - Each file is accompanied by .asc, .md5, .sha1, .sha256, .sha512 >>> - iceberg-core-1.10.2.pom: correct groupId/artifactId/version, Apache 2.0 >>> license, GitHub issues SCM URL >>> - Shaded runtime jars (e.g. iceberg-spark-runtime-3.5_2.13, >>> iceberg-bundled-guava) >>> bundle LICENSE/NOTICE plus per-dependency licenses under >>> META-INF/licenses/ >>> 8. Bundled dependency licenses cross-reference cleanly with >>> BUNDLE-LICENSE in >>> iceberg-spark-runtime-3.5_2.13-1.10.2.jar: >>> - 43 bundled coordinates (Jackson, Guava, Avro, Parquet, ORC, Arrow, >>> Netty, >>> httpcomponents5, datasketches, eclipse-collections, JTS, Nessie, >>> threeten-extra, >>> failsafe, microprofile-openapi, …) all have entries in BUNDLE-LICENSE. >>> - No Category X (GPL/AGPL) licenses present. Only Apache 2.0, MIT, >>> BSD-2/3, >>> Eclipse Distribution License v1.0, and MPL 2.0 (Mozilla Public Suffix >>> List >>> bundled by Apache HttpComponents). >>> - "Lesser General Public" string flagged by a heuristic scanner is >>> purely from >>> the standard MPL 2.0 "Secondary License" definition (Section 1.12); no >>> actual >>> LGPL-licensed code is bundled. >>> - BUNDLE-NOTICE reproduces upstream NOTICE text for the major deps with >>> their >>> own NOTICE files (Netty, Jackson, Nessie, MicroProfile OpenAPI, >>> Aircompressor). >>> >>> >>> On Wed, May 13, 2026 at 7:13 PM Amogh Jahagirdar <[email protected]> >>> wrote: >>> >>>> Hi Everyone, >>>> >>>> I propose that we release the following RC as the official Apache >>>> Iceberg 1.10.2 release. >>>> >>>> The commit ID is 57396d628cb9f92e121f9c2919398475393f0a3a >>>> * This corresponds to the tag: apache-iceberg-1.10.2-rc1 >>>> * https://github.com/apache/iceberg/commits/apache-iceberg-1.10.2-rc1 >>>> * >>>> https://github.com/apache/iceberg/tree/57396d628cb9f92e121f9c2919398475393f0a3a >>>> >>>> The release tarball, signature, and checksums are here: >>>> * >>>> https://dist.apache.org/repos/dist/dev/iceberg/apache-iceberg-1.10.2-rc1 >>>> >>>> You can find the KEYS file here: >>>> * https://downloads.apache.org/iceberg/KEYS >>>> >>>> Convenience binary artifacts are staged on Nexus. The Maven repository >>>> URL is: >>>> * >>>> https://repository.apache.org/content/repositories/orgapacheiceberg-1281/ >>>> >>>> Please download, verify, and test. >>>> >>>> Instructions for verifying a release can be found here: >>>> * https://iceberg.apache.org/how-to-release/#how-to-verify-a-release >>>> >>>> Please vote in the next 72 hours. >>>> >>>> [ ] +1 Release this as Apache Iceberg 1.10.2 >>>> [ ] +0 >>>> [ ] -1 Do not release this because... >>>> >>>> Only PMC members have binding votes, but other community members are >>>> encouraged to cast >>>> non-binding votes. This vote will pass if there are 3 binding +1 votes >>>> and more binding >>>> +1 votes than -1 votes. >>>> >>>
