-1 binding Thanks for sending this again Pierre, I didn't see the original email come through directly or in the mailing list archives.
Due to the recent publication of CVE‐2025‐12183 related to the lz4-java library, this is a good opportunity to incorporate the dependency replacement [1] in the NiFi 2.7.0 release version. Regards, David Handermann [1] https://github.com/apache/nifi/pull/10597 On Wed, Dec 3, 2025 at 2:05 PM Pierre Villard <[email protected]> wrote: > > Note - it looks like my previous email didn't go through, sending again > > Team, > > I am pleased to be calling this vote for the source release of Apache > NiFi 2.7.0. > > Please review the following guide for how to verify a release candidate > build: > > https://cwiki.apache.org/confluence/display/NIFI/Release+Candidate+Verification > > The source being voted on the and the convenience binaries are > available on the Apache Distribution Repository: > > https://dist.apache.org/repos/dist/dev/nifi/nifi-2.7.0 > > The build artifacts are available on the Apache Nexus Repository: > > https://repository.apache.org/content/repositories/orgapachenifi-1322 > > Git Tag: nifi-2.7.0-RC2 > Git Commit ID: 9af4183f397b003770600ce39a7e1152fbbda0f2 > GitHub Commit Link: > https://github.com/apache/nifi/commit/9af4183f397b003770600ce39a7e1152fbbda0f2 > > Hash of nifi-2.7.0-source-release.zip > > SHA512: > 1dd9a7636b35c8a0cde5a8d593f64cc6784221dc9ea9431b7ee709b2b18237a2e8acee9a3cc124f400e395b2e99866d543a582415703e97f9f683a93bcad4fb3 > > Release artifacts are signed with the following key: > > https://people.apache.org/keys/committer/pvillard.asc > > KEYS file is available on the Apache Distribution Repository: > > https://dist.apache.org/repos/dist/release/nifi/KEYS > > Issues resolved for this version: 254 > > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316020&version=12356272 > > Release note highlights can be found on the project wiki: > > https://cwiki.apache.org/confluence/display/NIFI/Release+Notes#ReleaseNotes-Version2.7.0 > > The vote will be open for 72 hours. > > Please download the release candidate and evaluate the necessary items > including checking hashes, signatures, build from source, and test. > Then please vote: > > [] +1 Release this package as nifi-2.7.0 > [] +0 no opinion > [] -1 Do not release this package because...
