+1 (binding)

-- Robot Text Below

Apache Iceberg 1.11.0 RC4 — Validation Report

Tag:    apache-iceberg-1.11.0-rc4 (6976e020b894f6a6777704df2b8c4458cb291ae9)
Signer: Steven Wu (CODE SIGNING KEY) <[email protected]>
        AEAE 3953 E54C B1C8 C7D3 38BA 0EB5 DEF0 AE3E 299A

Source dist:
https://dist.apache.org/repos/dist/dev/iceberg/apache-iceberg-1.11.0-rc4/
Maven stage:
https://repository.apache.org/content/repositories/orgapacheiceberg-1282/

Passed
------
- GPG signature on source tarball: good (Steven Wu, key
  AEAE3953E54CB1C8C7D338BA0EB5DEF0AE3E299A, present in
  https://downloads.apache.org/iceberg/KEYS).
- SHA-512 on source tarball: matches
  (a4ec6ffc...c1e9e4d).
- Git tag apache-iceberg-1.11.0-rc4 resolves to
  6976e020b894f6a6777704df2b8c4458cb291ae9 (matches announcement).
- Source tarball contents:
  * LICENSE (345 lines, Apache 2.0) and NOTICE (Apache Iceberg, 2017-2026,
ASF + Kite attribution) present.
  * Apache 2.0 header check across 3,609 source files: only 3 files flagged
(site/docs/assets/javascript/{extra.js, lottie-player.js, termynal.js}).
  * No stray binaries (.jar/.class/.war/.nar/.so/.dylib/.dll/.exe).
    Only image assets are present (PNG/ICO favicons and docs).
- Build from source:
  ./gradlew build -x integrationTest -x test
    => BUILD SUCCESSFUL in 2m 17s
    => 448 actionable tasks: 438 executed, 5 from cache, 5 up-to-date
    => spark-runtime-4.1, spark-extensions-4.1, flink runtimes, and
       open-api all assembled.
- Maven staging (orgapacheiceberg-1282):
  * All expected modules published (api, core, aws, aws-bundle,
    azure/-bundle, bigquery, bom, bundled-guava, common, data, dell,
    delta-lake, flink-{1.20,2.0,2.1}, flink-runtime-{1.20,2.0,2.1},
    gcp/-bundle, hive-metastore, kafka-connect-{events,transforms,
    runtime}, mr, nessie, open-api, orc, parquet, snowflake,
    spark-{3.4,3.5,4.0,4.1} family + extensions + runtimes).
  * Each artifact ships .jar, .pom, .module, -sources.jar,
    -javadoc.jar, -tests.jar with matching .asc and
    .md5/.sha1/.sha256/.sha512.
  * Spot-checked iceberg-core-1.11.0.jar:
    - SHA-512 OK
    - GPG good (same Steven Wu key)
    - iceberg-build.properties inside jar:
        git.commit.id=6976e020b894f6a6777704df2b8c4458cb291ae9
        git.closest.tag.name=apache-iceberg-1.11.0-rc4
        git.build.version=1.11.0
    - POM has groupId org.apache.iceberg, version 1.11.0,
      Apache License 2.0, project URL iceberg.apache.org, dev
      mailing list, GitHub issue mgmt.
  * Spot-checked iceberg-spark-runtime-4.1_2.13-1.11.0.jar
    (uber jar):
    - SHA-512 OK
    - GPG good (same key)
- Dependency / license cross-reference on
  iceberg-spark-runtime-4.1_2.13-1.11.0.jar:
  * Bundled coordinates (44) covered by the shipped LICENSE, e.g.
    Apache (Avro/Parquet/ORC/Arrow/Hive-storage-api/Datasketches/
    HttpComponents/Thrift via Parquet), Jackson, Caffeine,
    Aircompressor, Netty, Guava (relocated), Failsafe, Flatbuffers,
    Eclipse Collections (EDL 1.0), Eclipse MicroProfile OpenAPI,
    JTS Topology Suite (EDL 1.0), ThreeTen Extra, Project Nessie,
    Zero-Allocation Hashing, jctools.
  * Non-Apache licenses present: MIT, BSD, MPL, EDL (Eclipse
    Distribution License — BSD-style). All ASF Category A or B,
    so acceptable in a binary distribution.
  * No GPL/AGPL/Category-X dependencies. The lone "Lesser General
    Public" string in the LICENSE is verbatim text from the MPL 2.0
    definitions section ("Secondary License"), not an actual LGPL
    dependency.

Issues
------
None. JB Onofré's earlier nits on the bundle JARs (META-INF/LICENSE
and META-INF/NOTICE duplicated alongside root LICENSE/NOTICE in the
AWS/Azure/Flink-runtime bundles, plus extra reactor-core/reactor-netty
NOTICE content for Azure) are real cleanup follow-ups but are not
blockers for this RC.


On Mon, May 18, 2026 at 7:11 AM Andrei Tserakhau via dev <
[email protected]> wrote:

> +1 (non-binding)
>
> On Mon, May 18, 2026 at 12:55 PM Eduard Tudenhöfner <
> [email protected]> wrote:
>
>> +1 (binding)
>>
>>   - ✅ GPG signature: Good — Steven Wu, key AEAE 3953 E54C B1C8 C7D3 38BA
>> 0EB5 DEF0 AE3E 299A, in official KEYS
>>   - ✅ SHA512: matches (a4ec6ffc…c1e9e4d)
>>   - ✅ Tag apache-iceberg-1.11.0-rc4 → commit
>> 6976e020b894f6a6777704df2b8c4458cb291ae9 (matches announcement; tagger
>> Steven Wu)
>>   - ✅ Tarball == git tree, plus version.txt (1.11.0) and
>> iceberg-build.properties (confirms commit id)
>>   - ✅ LICENSE + NOTICE present, NOTICE copyright = 2017-2026
>>   - ✅ No stray binaries (wrapper jar intentionally not in git — gradle
>> bootstraps it during build)
>>   - ✅ Build and tests passed
>>
>>
>> On Mon, May 18, 2026 at 9:03 AM Neelesh Salian <[email protected]>
>> wrote:
>>
>>> +1 (non-binding)
>>>
>>> Verified locally:
>>>
>>>    - SHA-512: matches
>>>    - GPG signature: Good signature from Steven Wu (CODE SIGNING KEY) <
>>>    [email protected]>
>>>    - Tag apache-iceberg-1.11.0-rc4 =
>>>    6976e020b894f6a6777704df2b8c4458cb291ae9
>>>    - LICENSE / NOTICE / README.md present
>>>    - dev/check-license: RAT checks passed
>>>    - No binary artifacts (.jar/.war/.nar/.class/.so/.dylib/.dll/.exe)
>>>    in source tarball
>>>    - ./gradlew build -x integrationTest -x test: Build Successful
>>>
>>>
>>> Thanks Aihua for the release and all of the community for the
>>> contributions!
>>>
>>> On Sun, May 17, 2026 at 10:15 PM Yuya Ebihara <
>>> [email protected]> wrote:
>>>
>>>> +1 (non-binding) from Trino perspective.
>>>>
>>>> Confirmed that Trino CI is green.
>>>> It runs tests against several catalogs, including HMS, Glue, JDBC
>>>> (PostgreSQL), REST (Polaris, Unity, S3 Tables, Tabular), Nessie, and
>>>> Snowflake.
>>>>
>>>> Thanks again for running the release!
>>>>
>>>> Yuya
>>>>
>>>> On Mon, May 18, 2026 at 1:54 PM Jean-Baptiste Onofré <[email protected]>
>>>> wrote:
>>>>
>>>>> +1 (non binding)
>>>>>
>>>>> Some minor improvements to note (see below).
>>>>>
>>>>> I checked:
>>>>> - source distribution
>>>>> -- signature and checksum are correct
>>>>> -- LICENSE and NOTICE are good (nit: Presto and Delta Lake has NOTICE
>>>>> files that could be included in the Iceberg NOTICE)
>>>>> -- ASF header is present in all expected files
>>>>> -- No binary file found in the source distribution
>>>>> - AWS Bundle
>>>>> -- signature and checksum are correct
>>>>> -- nit: jar contains LICENSE/NOTICE in the root, but also
>>>>> META-INF/LICENSE and META-INF/NOTICE. Usually, we should have only
>>>>> META-INF/LICENSE and META-INF/NOTICE. Also, it seems LICENSE and NOTICE 
>>>>> are
>>>>> packaged twice in the jar.
>>>>> -- LICENSE and NOTICE are correct (nit: aws-crt-java,
>>>>> aws-eventstream-java have different NOTICE then the "regular" AWS Java 
>>>>> SDK).
>>>>> - Azure Bundle
>>>>> -- signature and checksum are correct
>>>>> -- LICENSE and NOTICE are good (nit: NOTICE could include NOTICE
>>>>> content from reactor-core and reactor-netty). As for AWS bundle, filtering
>>>>> META-INF/LICENSE and META-INF/NOTICE in the shade plugin would be good.
>>>>> - GCP Bundle
>>>>> -- signature and checksum are correct
>>>>> -- LICENSE and NOTICE are good (as for AWS and Azure bundle, filtering
>>>>> on the shade plugin would be welcome).
>>>>> - Flink Runtime
>>>>> -- signature and checksum are correct
>>>>> -- LICENSE and NOTICE are good. Nit: LICENSE and NOTICE are packaged
>>>>> twice in the jar file. META-INF/LICENSE* and META-INF/NOTICE* should be
>>>>> cleanup in favor of the Iceberg LICENSE/NOTICE.
>>>>> - Spark Runtime
>>>>> -- signature and checksum are correct
>>>>> -- LICENSE and NOTICE are good
>>>>>
>>>>> Regards
>>>>> JB
>>>>>
>>>>> On Fri, May 15, 2026 at 7:32 AM Aihua Xu <[email protected]> wrote:
>>>>>
>>>>>> Hi Everyone,
>>>>>>
>>>>>> I propose that we release the following RC as the official Apache
>>>>>> Iceberg 1.11.0 release.
>>>>>>
>>>>>> The commit ID is 6976e020b894f6a6777704df2b8c4458cb291ae9
>>>>>> * This corresponds to the tag: apache-iceberg-1.11.0-rc4
>>>>>> * https://github.com/apache/iceberg/commits/apache-iceberg-1.11.0-rc4
>>>>>> *
>>>>>> https://github.com/apache/iceberg/tree/6976e020b894f6a6777704df2b8c4458cb291ae9
>>>>>>
>>>>>> The release tarball, signature, and checksums are here:
>>>>>> *
>>>>>> https://dist.apache.org/repos/dist/dev/iceberg/apache-iceberg-1.11.0-rc4
>>>>>>
>>>>>> You can find the KEYS file here:
>>>>>> * https://downloads.apache.org/iceberg/KEYS
>>>>>>
>>>>>> Convenience binary artifacts are staged on Nexus. The Maven
>>>>>> repository URL is:
>>>>>> *
>>>>>> https://repository.apache.org/content/repositories/orgapacheiceberg-1282/
>>>>>>
>>>>>> Please download, verify, and test.
>>>>>>
>>>>>> Instructions for verifying a release can be found here:
>>>>>> * https://iceberg.apache.org/how-to-release/#how-to-verify-a-release
>>>>>>
>>>>>> Please vote in the next 72 hours.
>>>>>>
>>>>>> [ ] +1 Release this as Apache Iceberg 1.11.0
>>>>>> [ ] +0
>>>>>> [ ] -1 Do not release this because...
>>>>>>
>>>>>>
>>>>>>
>>>>>>

Reply via email to