Thanks for all voters (binding and non-binding). It looks like we have another CVE in 3.9 branch. I will check whether to include it in 3.9.2 release.
https://github.com/apache/kafka/pull/21395 Thank you for your patience. PoAn > On Feb 4, 2026, at 1:15 AM, Lucas Brutschy via dev <[email protected]> > wrote: > > +1 (binding) > > * Verified SHA512 checksums for all artifacts > * Verified LICENSE and NOTICE files (binary NOTICE has 2021 > copyright - known issue, not a blocker) > * Tested Docker image (apache/kafka:3.9.2-rc0) - quickstart works > * Verified topic creation, produce, and consume in KRaft mode > * Checked Javadoc and documentation links > * Verified Maven staging artifacts dated 2026-01-14 > * Verified GitHub tag matches release > > Cheers, > Lucas > > On Sat, Jan 31, 2026 at 4:57 AM Chia-Ping Tsai <[email protected]> wrote: >> >> +1 (binding) >> >> - run all tests with retries and they passed >> - deployed in a test environment with a standard pub/sub app. works as >> expected >> >> Note that KAFKA-19581 is still there,but since the included code only >> impacts e2e tests rather than production, I'm comfortable moving forward >> >> Best, >> Chia-Ping >> >> On 2026/01/15 03:45:05 PoAn Yang wrote: >>> Hello Kafka users, developers and client-developers, >>> >>> This is the RC0 candidate for release of Apache Kafka 3.9.2. >>> >>> This is a bug-fix & CVE-fix release like CVE-2024-29371, CVE-2025-58057, >>> and CVE-2025-48734. In this version, we have a KIP-1252 to align >>> AlterConfigPolicy behavior between ZK and Kraft. >>> >>> Release notes for the 3.9.2 release: >>> https://dist.apache.org/repos/dist/dev/kafka/3.9.2-rc0/RELEASE_NOTES.html >>> >>> Please download, test and vote by *Wednesday, January 21, 9:00 PM PT* >>> >>> Kafka's KEYS file containing PGP keys we use to sign the release: >>> https://kafka.apache.org/KEYS >>> >>> * Release artifacts to be voted upon (source and binary): >>> https://dist.apache.org/repos/dist/dev/kafka/3.9.2-rc0/ >>> >>> * Docker release artifacts to be voted upon: >>> apache/kafka:3.9.2-rc0 >>> apache/kafka-native:3.9.2-rc0 >>> >>> * Maven artifacts to be voted upon: >>> https://repository.apache.org/content/groups/staging/org/apache/kafka/ >>> >>> * Javadoc: >>> https://dist.apache.org/repos/dist/dev/kafka/3.9.2-rc0/javadoc/ >>> >>> * Tag to be voted upon (off 3.9 branch) is the 3.9.2 tag: >>> https://github.com/apache/kafka/releases/tag/3.9.2-rc0 >>> >>> * Documentation: >>> https://kafka.apache.org/39/documentation.html >>> >>> * Protocol: >>> https://kafka.apache.org/39/protocol.html >>> >>> * Successful CI builds for the 3.9 branch: >>> Unit/integration tests (There are some flaky tests): >>> https://ci-builds.apache.org/job/Kafka/job/kafka/job/3.9/258/ >>> System tests: https://jenkins.opensource4you.tw/job/kafka-e2e/629/ >>> For failed tests, they can pass in another run, so the result is green: >>> https://drive.google.com/drive/folders/1GXoTYEUu8PjuJYoVvUbAm9LCJotDRfJ-?usp=sharing >>> >>> * Successful Docker Image Github Actions Pipeline for 3.9 branch: >>> Docker Build Test Pipeline (JVM): >>> https://github.com/apache/kafka/actions/runs/20997657980 >>> Docker Build Test Pipeline (Native): >>> https://github.com/apache/kafka/actions/runs/20997669079 >>> >>> Thanks, >>> PoAn
