+1 (binding) I verified the following for Apache Polaris 1.4.0-rc1:
Automated checks (verify-release.sh) - Git tag apache-polaris-1.4.0-rc1 matches expected SHA 70f7a028... - Mandatory files (LICENSE, NOTICE, version.txt) present in source tree - GPG signatures valid for all artifacts (helm charts, dist, Maven staging repo) - SHA512/SHA256/SHA1/MD5 checksums valid for all artifacts - Full source build from tag succeeded (Java 21) - LICENSE/NOTICE present in all main and sources JARs (META-INF/) - LICENSE/NOTICE present in binary distribution tgz and zip - LICENSE/NOTICE present in Helm chart package Other manual checks: License report validation - Ran generateLicenseReport for both server and admin modules - passed - All runtime dependencies are properly mentioned in the distribution LICENSE files - No missing, no superfluous dependency mentions - No dependencies with disallowed licenses (dependencies-without-allowed-license.json is empty) - All licenses are ASF Category A or Category B LICENSE/NOTICE review - Counted 33 non-Apache license blocks in server distribution LICENSE, all include full license text (MIT, BSD, Go) or URL references (EPL, EDL) - Server distribution NOTICE: counted 19 bundled dependency NOTICE sections - All NOTICE files (root, server dist, admin dist, helm) have correct copyright year (2026) and proper attributions (ASF, Snowflake donation, Nessie/Dremio) Spark Plugin - polaris-spark-3.5_2.12-1.4.0.jar (thin): no bundled deps, no LICENSE/NOTICE (expected) - polaris-spark-3.5_2.12-1.4.0-bundle.jar (fat): root-level custom BUNDLE-LICENSE/BUNDLE-NOTICE files - polaris-spark-3.5_2.13-*: Same - polaris-spark-integration-*: regular META-INF/LICENSE + META-INF/NOTICE files Smoke tests: binary distribution - Unpacked polaris-bin-1.4.0.tgz - Admin tool --help works (prints usage with bootstrap, purge, nosql commands) - Server starts in ~3s, reports: polaris-server 1.4.0 on JVM (powered by Quarkus 3.32.3) - Health check (/q/health): UP - Metrics endpoint (/q/metrics): returns Prometheus metrics - API endpoints require auth (HTTP 401 without token) - OAuth token acquisition + authenticated API calls work (list catalogs, list principal roles) Smoke tests: source distribution - Unpacked apache-polaris-1.4.0.tar.gz - Source build (./gradlew :polaris-server:assemble :polaris-admin:assemble) succeeded - Admin tool --help works from source build - Server starts and passes same health/API checks as binary distribution Smoke tests: Helm chart - helm lint: passed (0 failures) - helm template: renders correctly - helm template --validate: no errors - Chart.yaml: version=1.4.0, appVersion=1.4.0 - values.schema.json included for schema validation CHANGELOG and version - CHANGELOG.md has a proper [1.4.0] section - version.txt correctly reads 1.4.0 Thanks, Alex On Tue, Apr 7, 2026 at 3:37 AM Adnan Hemani via dev <[email protected]> wrote: > > Hi everyone, > > I propose that we release the following RC as the official Apache Polaris > 1.4.0 release. (Do not worry, there is no RC0 for this release :) > > This corresponds to the tag: apache-polaris-1.4.0-rc1 > * https://github.com/apache/polaris/commits/apache-polaris-1.4.0-rc1 > * > https://github.com/apache/polaris/tree/70f7a0288412f80197fca71d5f635ca221eb6331 > > The release tarball, signature, and checksums are here: > * https://dist.apache.org/repos/dist/dev/polaris/1.4.0 > > Helm charts are available on: > * https://dist.apache.org/repos/dist/dev/polaris/helm-chart/1.4.0 > > NB: you have to build the Docker images locally in order to test Helm > charts. > > You can find the KEYS file here: > * https://downloads.apache.org/polaris/KEYS > > Convenience binary artifacts are staged on Nexus. The Maven repositories > URLs are: > * https://repository.apache.org/content/repositories/orgapachepolaris-1063/ > > Please download, verify, and test according to the release verification > guide, which can be found at: > * > https://polaris.apache.org/community/release-guides/release-verification-guide/ > > Please vote in the next 96 hours (extra time given due to Iceberg Summit). > > [ ] +1 Release this as Apache Polaris 1.4.0 > [ ] +0 > [ ] -1 Do not release this because... > > Only PMC members have binding votes, but other community members are > encouraged to cast non-binding votes. > This vote will pass if there are 3 binding +1 votes and more binding +1 > votes than -1 votes. > > Best, > Adnan Hemani
