I checked all checksums and signatures. Built everything and made sure Thrift wasn't there
One issue that is a bit of an issue is the SCM text is currently incorrect <scm> <connection>scm:git:[email protected]:apache/parquet-java.git</connection> <url>scm:git:[email protected]:apache/parquet-java.git</url> <developerConnection>scm:git:[email protected]: apache/parquet-java.git</developerConnection> * <tag>apache-parquet-1.18.0-rc2</tag>*</scm> This is of course my fault. It's technically wrong, but it's not a huge deal. I'd request fixing this and releasing another candidate. I'll put up fixes for this in the release scripts ASAP. On Wed, Nov 4, 2026 at 9:32 AM Manu Zhang <[email protected]> wrote: > +1 (non-binding) > > I checked: > > - SHA512 checksum and GPG signature are good (key > DD1E0FA356E5268BE450B2AAA528E51BCE01BCFE, which is in KEYS) > - The source tarball is byte-identical to `git archive` of tag > apache-parquet-1.18.2-rc1 (ae6bc0aa) > - The stray thrift-0.25.0/ tree from RC0 is gone. There are no binaries > and no SNAPSHOT versions in the source. > - RAT check passes > - Built from the source tarball and ran tests with JDK 17 and thrift > 0.25.0 on macOS arm64. The build succeeded and all tests passed. > - Staging repo orgapacheparquet-1092 has the same artifacts as 1.18.1, > and all 108 files have good signatures and SHA1 checksums > - parquet-jackson shades jackson-core/jackson-databind 2.22.4 > - Ran Iceberg CI against the RC in > https://github.com/apache/iceberg/pull/18789 and all checks pass. > That includes the Trivy CVE scan with the ignores for the shaded > Jackson CVEs removed. > > On Wed, Nov 4, 2026 at 9:58 PM Gang Wu <[email protected]> wrote: > > > +1 (binding) > > > > On Wed, Nov 4, 2026 at 8:30 PM Manu Zhang <[email protected]> > wrote: > > > > > Hi everyone, > > > > > > I propose the following RC to be released as official Apache Parquet > > 1.18.2 > > > release. > > > > > > The commit id is ae6bc0aa5d4331df6076fe25ec772be469cfbcda > > > * This corresponds to the tag: apache-parquet-1.18.2-rc1 > > > * > > > > > > > > > https://github.com/apache/parquet-java/tree/ae6bc0aa5d4331df6076fe25ec772be469cfbcda > > > > > > The release tarball, signature, and checksums are here: > > > * > > https://dist.apache.org/repos/dist/dev/parquet/apache-parquet-1.18.2-rc1 > > > > > > You can find the KEYS file here: > > > * https://downloads.apache.org/parquet/KEYS > > > > > > You can find the changelog here: > > > > > > > > > https://github.com/apache/parquet-java/releases/tag/apache-parquet-1.18.2-rc1 > > > > > > Binary artifacts are staged in Nexus here: > > > * > > https://repository.apache.org/content/groups/staging/org/apache/parquet/ > > > * Staging repository ID: orgapacheparquet-1092 > > > > > > Please download, verify, and test. > > > > > > Please vote in the next 72 hours. > > > > > > [ ] +1 Release this as Apache Parquet 1.18.2 > > > [ ] +0 > > > [ ] -1 Do not release this because... > > > > > >
