https://github.com/apache/parquet-java/pull/3933
Fix to the automation scripts to correctly set SCM details On Wed, Nov 4, 2026 at 12:40 PM Russell Spitzer <[email protected]> wrote: > I checked all checksums and signatures. > Built everything and made sure Thrift wasn't there > > > One issue that is a bit of an issue is the SCM text is currently incorrect > > <scm> > <connection>scm:git:[email protected]:apache/parquet-java.git</connection> > <url>scm:git:[email protected]:apache/parquet-java.git</url> > <developerConnection>scm:git:[email protected]: > apache/parquet-java.git</developerConnection> > > * <tag>apache-parquet-1.18.0-rc2</tag>*</scm> > > This is of course my fault. It's technically wrong, but it's not a huge > deal. I'd request fixing this and releasing another candidate. I'll put up > fixes for this in the release scripts ASAP. > > > On Wed, Nov 4, 2026 at 9:32 AM Manu Zhang <[email protected]> wrote: > >> +1 (non-binding) >> >> I checked: >> >> - SHA512 checksum and GPG signature are good (key >> DD1E0FA356E5268BE450B2AAA528E51BCE01BCFE, which is in KEYS) >> - The source tarball is byte-identical to `git archive` of tag >> apache-parquet-1.18.2-rc1 (ae6bc0aa) >> - The stray thrift-0.25.0/ tree from RC0 is gone. There are no binaries >> and no SNAPSHOT versions in the source. >> - RAT check passes >> - Built from the source tarball and ran tests with JDK 17 and thrift >> 0.25.0 on macOS arm64. The build succeeded and all tests passed. >> - Staging repo orgapacheparquet-1092 has the same artifacts as 1.18.1, >> and all 108 files have good signatures and SHA1 checksums >> - parquet-jackson shades jackson-core/jackson-databind 2.22.4 >> - Ran Iceberg CI against the RC in >> https://github.com/apache/iceberg/pull/18789 and all checks pass. >> That includes the Trivy CVE scan with the ignores for the shaded >> Jackson CVEs removed. >> >> On Wed, Nov 4, 2026 at 9:58 PM Gang Wu <[email protected]> wrote: >> >> > +1 (binding) >> > >> > On Wed, Nov 4, 2026 at 8:30 PM Manu Zhang <[email protected]> >> wrote: >> > >> > > Hi everyone, >> > > >> > > I propose the following RC to be released as official Apache Parquet >> > 1.18.2 >> > > release. >> > > >> > > The commit id is ae6bc0aa5d4331df6076fe25ec772be469cfbcda >> > > * This corresponds to the tag: apache-parquet-1.18.2-rc1 >> > > * >> > > >> > > >> > >> https://github.com/apache/parquet-java/tree/ae6bc0aa5d4331df6076fe25ec772be469cfbcda >> > > >> > > The release tarball, signature, and checksums are here: >> > > * >> > >> https://dist.apache.org/repos/dist/dev/parquet/apache-parquet-1.18.2-rc1 >> > > >> > > You can find the KEYS file here: >> > > * https://downloads.apache.org/parquet/KEYS >> > > >> > > You can find the changelog here: >> > > >> > > >> > >> https://github.com/apache/parquet-java/releases/tag/apache-parquet-1.18.2-rc1 >> > > >> > > Binary artifacts are staged in Nexus here: >> > > * >> > >> https://repository.apache.org/content/groups/staging/org/apache/parquet/ >> > > * Staging repository ID: orgapacheparquet-1092 >> > > >> > > Please download, verify, and test. >> > > >> > > Please vote in the next 72 hours. >> > > >> > > [ ] +1 Release this as Apache Parquet 1.18.2 >> > > [ ] +0 >> > > [ ] -1 Do not release this because... >> > > >> > >> >
