Apache Polaris Iceberg catalog migrator 1.0.0 RC3 — Validation Report
Tag: apache-polaris-iceberg-catalog-migrator-1.0.0-rc3
(5fd6eed5e63deb655422839a6f1041f3df09a95e)
Signed by: Ajantha Bhat ([email protected])
Key fingerprint: C9F5 0E96 A9CB F484 BED0 46B9 72E8 0368 4280 EDCC
Passed
------
1. GPG Signature
$ gpg --verify apache-polaris-iceberg-catalog-migrator-1.0.0.tar.gz.asc
gpg: Good signature from "Ajantha Bhat (code signing key) <
[email protected]>"
2. SHA-512 Checksum
$ shasum -a 512 apache-polaris-iceberg-catalog-migrator-1.0.0.tar.gz
a346e94a...acfd37 — matches provided .sha512 file
3. Tarball Contents
- LICENSE present: Apache License 2.0 (full text)
- NOTICE present: correct Apache Polaris copyright 2026, Dremio donation
attribution
- No binary files (.jar, .class, .so, etc.)
- No DISCLAIMER file (correct for non-incubating)
- Apache license headers present on all .java, .kt, .kts source files
- Only gradle-wrapper.properties lacks header (Gradle-generated,
acceptable)
4. Tag / Commit Match
$ git rev-parse
apache-polaris-iceberg-catalog-migrator-1.0.0-rc3^{commit}
5fd6eed5e63deb655422839a6f1041f3df09a95e — matches vote email
Source tarball diff'd against tag checkout: identical (excluding .kotlin
build cache)
5. Build from Source
$ ./gradlew build -x intTest
BUILD SUCCESSFUL in 1m 28s — 72 tasks, all unit tests pass
Deprecation warnings about Gradle 10 compatibility (non-blocking)
6. Maven Staging (orgapachepolaris-1058)
Three modules staged at version 1.0.0:
- iceberg-catalog-migrator-api-test: .jar, .pom, -sources.jar,
-javadoc.jar, .module, .asc, checksums
- iceberg-catalog-migrator-api: .jar, .pom, -sources.jar, -javadoc.jar,
.module, .asc, checksums
- iceberg-catalog-migrator-cli: .jar (~140MB uber-jar), .pom, .asc,
checksums
POM metadata: correct groupId
(org.apache.polaris.tools.iceberg-catalog-migrator),
version 1.0.0, Apache-2.0 license, SCM pointing to
github.com/apache/polaris-tools
----
For licensing I did another Agent backed sweep it did pick up a few things
which apparently all Apache projects are also currently not doing so I
dismissed them as false positives.
Derby - has some IBM CLA,
Commons-math - has some Orekit disclaimer
Google Snappy - Has some bsd licensed code in the C++ code in the native lib
Google LevelDB - Similar BSD licensed code in native lib
jaxb-impl - We include a disclaimer for jaxb-api but not the impl
I checked a bunch of other Apache projects with these deps and none of them
mention these notices so I think we are fine
+1
On Wed, Mar 18, 2026 at 11:01 AM Jean-Baptiste Onofré <[email protected]>
wrote:
> Hi everyone,
>
> SVN should be back to normal now with no data loss. You should be able to
> access the artifacts for verification.
>
> Regards,
> JB
>
> On Wed, Mar 18, 2026 at 4:07 PM Russell Spitzer <[email protected]
> >
> wrote:
>
> > https://status.apache.org/
> >
> > Identified - Our colo hosting svn/dist is offline. Infra is waiting for a
> > response from the colo provider, and will fail over to DR if the problem
> is
> > not resolved by 0800 UTC.
> > Mar 18, 2026 - 01:02 UTC
> > Update - Infra has acknowledged downtime on ASF Subversion Services
> > (svn.a.o/dist.a.o) and is investigating.
> > Mar 18, 2026 - 00:57 UTC
> > Investigating - ASF Subversion Services (svn.a.o/dist.a.o) is
> experiencing
> > issues.
> > Mar 18, 2026 - 00:57 UTC
> >
> > On Wed, Mar 18, 2026 at 10:02 AM Russell Spitzer <
> > [email protected]>
> > wrote:
> >
> > > I'm not able to download the artifacts right now, Is that just me or is
> > > anyone else getting timeouts from apache?
> > >
> > > On Wed, Mar 18, 2026 at 7:01 AM Ajantha Bhat <[email protected]>
> > > wrote:
> > >
> > >> Gentle reminder: Please verify and vote.
> > >>
> > >> Thanks.
> > >>
> > >> On Mon, Mar 16, 2026 at 12:54 PM Ajantha Bhat <[email protected]>
> > >> wrote:
> > >>
> > >> > Hi everyone,
> > >> >
> > >> > I propose that we release the following RC as the official
> > >> > Apache Polaris Iceberg catalog migrator 1.0.0 release.
> > >> >
> > >> > * This corresponds to the tag:
> > >> > apache-polaris-iceberg-catalog-migrator-1.0.0-rc3
> > >> > *
> > >> >
> > >>
> >
> https://github.com/apache/polaris-tools/commits/apache-polaris-iceberg-catalog-migrator-1.0.0-rc3/
> > >> > *
> > >> >
> > >>
> >
> https://github.com/apache/polaris-tools/tree/5fd6eed5e63deb655422839a6f1041f3df09a95e
> > >> >
> > >> > The release tarball, signature, and checksums are here:
> > >> > *
> > >> >
> > >>
> >
> https://dist.apache.org/repos/dist/dev/polaris/apache-polaris-iceberg-catalog-migrator/1.0.0/
> > >> >
> > >> > You can find the KEYS file here:
> > >> > * https://downloads.apache.org/polaris/KEYS
> > >> >
> > >> > Convenience binary artifacts are staged on Nexus. The Maven
> > repositories
> > >> > URLs are:
> > >> > *
> > >> >
> > >>
> >
> https://repository.apache.org/content/repositories/orgapachepolaris-1058/
> > >> >
> > >> > Please download, verify, and test.
> > >> >
> > >> > Please vote in the next 72 hours.
> > >> >
> > >> > [ ] +1 Release this as Apache Polaris Iceberg catalog migrator 1.0.0
> > >> > [ ] +0
> > >> > [ ] -1 Do not release this because...
> > >> >
> > >> > Only PMC members have binding votes, but other community
> > >> > members are encouraged to cast non-binding votes. This vote will
> pass
> > if
> > >> > there are
> > >> > 3 binding +1 votes and more binding +1 votes than -1 votes.
> > >> >
> > >> > - Ajantha
> > >> >
> > >>
> > >
> >
>
