Hi Jiunn-Yang,

Thanks for running the 4.3.2 release.

I did the following to validate 4.3.2-rc0:

- Verified checksums (md5/sha1/sha512) and GPG signatures
  - Artifacts: source, binary, site-docs, RELEASE_NOTES
  - Signed by Jiunn Yang Huang <[email protected]>
  - Key 062C22C0F467AF9A02D512B5504473FAF80CBBCB
- Built from source with JDK 17
  - Ran the core, clients and streams unit tests
- Ran quickstarts from the bundled site-docs against the binary
  distribution
  - Broker quickstart
  - Kafka Streams WordCount quickstart
  - Used both the classic and streams (KIP-1071) group protocols
- Ran the same quickstarts against the Docker images
  - apache/kafka:4.3.2-rc0
  - apache/kafka-native:4.3.2-rc0
- Checked shipped jar versions for the dependency and CVE bumps
  - jackson-databind 2.21.6
  - log4j 2.25.5
  - jetty 12.0.37
  - lz4-java 1.11.2
  - jline 3.30.15 (jline-remote-telnet no longer shipped)
- Exercised these bug fixes by hand against local clusters
  - Streams:
    - KAFKA-14597, KAFKA-20464, KAFKA-20711, KAFKA-20782
    - KAFKA-20876, KAFKA-20877, KAFKA-20940
  - Broker:
    - KAFKA-20354 (docs), KAFKA-20434, KAFKA-20442, KAFKA-20533
    - KAFKA-20601, KAFKA-20832, KAFKA-21096
  - Clients:
    - KAFKA-20700, KAFKA-20769, KAFKA-20780
  - Connect:
    - KAFKA-20450, KAFKA-20555

I noticed a few minor non-blocking issues:

- The apache/kafka link in the vote email carries
  sha256:aad4e610..., which is the linux/amd64 manifest of
  apache/kafka-native. The apache/kafka:4.3.2-rc0 index is
  sha256:5bd263149a366634adda4a2963aa8d80e7430b8eaa09bb685058df883f957b48

- These JIRAs have commits in 4.3.2-rc0 but no fix version, so
  they are missing from RELEASE_NOTES.html:
  - KAFKA-13499 (windowed restore now skips expired records)
  - KAFKA-20870, KAFKA-20875, KAFKA-20916

- The quickstarts still reference 4.3.0 downloads and tags

+1 (binding)

Thanks,
Bill

On Tue, Sep 29, 2026 at 8:24 AM 黃竣陽 <[email protected]> wrote:

> Hello Kafka users, developers and client-developers,
>
> This is the first candidate for release of Apache Kafka 4.3.2.
>
> This is a bugfix release in 4.3 line.
>
> Release notes for the 4.3.2 release:
> https://dist.apache.org/repos/dist/dev/kafka/4.3.2-rc0/RELEASE_NOTES.html
>
> Please download, test and vote by Friday, October 2nd, 9am PT
>
> Kafka's KEYS file containing PGP keys we use to sign the release:
> https://downloads.apache.org/kafka/KEYS
>
> * Release artifacts to be voted upon (source and binary):
> https://dist.apache.org/repos/dist/dev/kafka/4.3.2-rc0/
>
> * Docker release artifacts to be voted upon:
> apache/kafka:4.3.2-rc0 <
> https://hub.docker.com/layers/apache/kafka/4.3.2-rc0/images/sha256-aad4e610fcbbb44b142dfe89c5d1e62262d0323bba68b46092853d3ee961c719
> >
> apache/kafka-native:4.3.2-rc0 <
> https://hub.docker.com/layers/apache/kafka-native/4.3.2-rc0/images/sha256-aad4e610fcbbb44b142dfe89c5d1e62262d0323bba68b46092853d3ee961c719
> >
>
> * Maven artifacts to be voted upon:
> https://repository.apache.org/content/groups/staging/org/apache/kafka/
>
> * Javadoc:
> https://dist.apache.org/repos/dist/dev/kafka/4.3.2-rc0/javadoc/index.html
>
> * Tag to be voted upon (off 4.3 branch) is the 4.3.2 tag:
> https://github.com/apache/kafka/releases/tag/4.3.2-rc0
>
> * Documentation:
> https://kafka.apache.org/43/documentation.html
>
> * Protocol:
> https://kafka.apache.org/43/design/protocol
>
> * Successful CI builds for the 4.3 branch:
> Unit/integration tests:
> https://github.com/apache/kafka/actions/runs/36498239102
> System tests: [will provide it soon]
>
> * Successful Docker Image Github Actions Pipeline for 4.3 branch:
> Docker Build Test Pipeline (JVM):
> https://github.com/apache/kafka/actions/runs/36444796001
> Docker Build Test Pipeline (Native):
> https://github.com/apache/kafka/actions/runs/36444991180
>
> Thanks,
> Jiunn-Yang Huang

Reply via email to