Thanks Russell for catching this! Let's cancel RC1 as well. :)
On Thu, Nov 5, 2026 at 2:59 AM Russell Spitzer <[email protected]> wrote: > https://github.com/apache/parquet-java/pull/3933 > > Fix to the automation scripts to correctly set SCM details > > On Wed, Nov 4, 2026 at 12:40 PM Russell Spitzer <[email protected] > > > wrote: > > > I checked all checksums and signatures. > > Built everything and made sure Thrift wasn't there > > > > > > One issue that is a bit of an issue is the SCM text is currently > incorrect > > > > <scm> > > <connection>scm:git:[email protected]: > apache/parquet-java.git</connection> > > <url>scm:git:[email protected]:apache/parquet-java.git</url> > > <developerConnection>scm:git:[email protected]: > > apache/parquet-java.git</developerConnection> > > > > * <tag>apache-parquet-1.18.0-rc2</tag>*</scm> > > > > This is of course my fault. It's technically wrong, but it's not a huge > > deal. I'd request fixing this and releasing another candidate. I'll put > up > > fixes for this in the release scripts ASAP. > > > > > > On Wed, Nov 4, 2026 at 9:32 AM Manu Zhang <[email protected]> > wrote: > > > >> +1 (non-binding) > >> > >> I checked: > >> > >> - SHA512 checksum and GPG signature are good (key > >> DD1E0FA356E5268BE450B2AAA528E51BCE01BCFE, which is in KEYS) > >> - The source tarball is byte-identical to `git archive` of tag > >> apache-parquet-1.18.2-rc1 (ae6bc0aa) > >> - The stray thrift-0.25.0/ tree from RC0 is gone. There are no binaries > >> and no SNAPSHOT versions in the source. > >> - RAT check passes > >> - Built from the source tarball and ran tests with JDK 17 and thrift > >> 0.25.0 on macOS arm64. The build succeeded and all tests passed. > >> - Staging repo orgapacheparquet-1092 has the same artifacts as 1.18.1, > >> and all 108 files have good signatures and SHA1 checksums > >> - parquet-jackson shades jackson-core/jackson-databind 2.22.4 > >> - Ran Iceberg CI against the RC in > >> https://github.com/apache/iceberg/pull/18789 and all checks pass. > >> That includes the Trivy CVE scan with the ignores for the shaded > >> Jackson CVEs removed. > >> > >> On Wed, Nov 4, 2026 at 9:58 PM Gang Wu <[email protected]> wrote: > >> > >> > +1 (binding) > >> > > >> > On Wed, Nov 4, 2026 at 8:30 PM Manu Zhang <[email protected]> > >> wrote: > >> > > >> > > Hi everyone, > >> > > > >> > > I propose the following RC to be released as official Apache Parquet > >> > 1.18.2 > >> > > release. > >> > > > >> > > The commit id is ae6bc0aa5d4331df6076fe25ec772be469cfbcda > >> > > * This corresponds to the tag: apache-parquet-1.18.2-rc1 > >> > > * > >> > > > >> > > > >> > > >> > https://github.com/apache/parquet-java/tree/ae6bc0aa5d4331df6076fe25ec772be469cfbcda > >> > > > >> > > The release tarball, signature, and checksums are here: > >> > > * > >> > > >> > https://dist.apache.org/repos/dist/dev/parquet/apache-parquet-1.18.2-rc1 > >> > > > >> > > You can find the KEYS file here: > >> > > * https://downloads.apache.org/parquet/KEYS > >> > > > >> > > You can find the changelog here: > >> > > > >> > > > >> > > >> > https://github.com/apache/parquet-java/releases/tag/apache-parquet-1.18.2-rc1 > >> > > > >> > > Binary artifacts are staged in Nexus here: > >> > > * > >> > > >> > https://repository.apache.org/content/groups/staging/org/apache/parquet/ > >> > > * Staging repository ID: orgapacheparquet-1092 > >> > > > >> > > Please download, verify, and test. > >> > > > >> > > Please vote in the next 72 hours. > >> > > > >> > > [ ] +1 Release this as Apache Parquet 1.18.2 > >> > > [ ] +0 > >> > > [ ] -1 Do not release this because... > >> > > > >> > > >> > > >
