+1 (binding)
I verified： - SHA-512 checksum and OpenPGP signature verified - The signed v0.4.0-rc2 tag resolves to commit 29727bfe9bffd4a8d775999bc35015547772280c - The source tarball is byte-for-byte reproducible from the signed tag - cargo build --locked --workspace --release passed - Rust core and REST server tests passed - License headers, cargo-deny license checks, and dependency reports passed - Source-built Python and Go bindings passed smoke tests Best regards, Zelin Yu On Thu, Oct 8, 2026 at 11:42 PM hongbo.xiao <[email protected]> wrote: > Hi everyone, > > Please review and vote on release candidate #2 for Apache Paimon Rust > 0.4.0. > > The source release candidate is available at: > https://dist.apache.org/repos/dist/dev/paimon/paimon-rust-0.4.0-rc2/ > > Git tag: > https://github.com/apache/paimon-rust/tree/v0.4.0-rc2 > > Git commit: > 29727bfe9bffd4a8d775999bc35015547772280c > > KEYS for signature verification: > https://downloads.apache.org/paimon/KEYS > > Verification instructions: > > https://github.com/apache/paimon-rust/blob/v0.4.0-rc2/docs/src/release/verifying-a-release-candidate.md > > Convenience artifacts for testing: > > Python binding: > https://test.pypi.org/project/pypaimon-rust/0.4.0rc2/ > > Go binding: > https://github.com/apache/paimon-rust/releases/tag/bindings/go/v0.4.0-rc2 > > Please vote: > > [ ] +1 Approve the release > [ ] +0 No opinion > [ ] -1 Do not approve (please provide specific comments) > > The vote will remain open for at least 72 hours. > > Thanks, > Hongbo Xiao
