Hi JB, Just a minor wording fix: Instead of "The PMC worked efficiently on identifying, reporting, fixing, releasing these security issues.", it reads a bit like "we've released something with the security issues" (at least to me), maybe use "The PMC worked efficiently on identifying, reporting, and fixing these security issues with the ASF security team and releasing a patch-version with the fixes."
Robert On Tue, May 5, 2026 at 9:56 AM Francois Papon <[email protected]> wrote: > LGTM > > Thanks JB! > > regards, > > François > [email protected] > [email protected] > > Le 05/05/2026 à 09:32, Jean-Baptiste Onofré a écrit : > > Hi folks, > > > > We have to report this month (the third and last monthly report post > > graduation before reporting every quarter). > > I drafted the following report: > > > > > ------------------------------------------------------------------------------------------------------ > > ## Description: > > The mission of Apache Polaris is the creation and maintenance of software > > related to a catalog for data lakes. It provides new levels of choice, > > flexibility and control over data, with full enterprise security and > Apache > > Iceberg interoperability across a multitude of engines and infrastructure > > > > ## Project Status: > > Current project status: Ongoing > > Issues for the board: None > > > > ## Membership Data: > > Apache Polaris was founded 2026-02-18 (3 months ago) > > There are currently 31 committers and 19 PMC members in this project. > > The Committer-to-PMC ratio is roughly 8:5. > > > > Community changes, past quarter: > > - Sung Yun was added to the PMC on 2026-04-27 > > - Adam Christian was added as committer on 2026-03-07 > > - Adnan Hemani was added as committer on 2026-03-07 > > - Christopher Lambert was added as committer on 2026-03-11 > > - Danica Fine was added as committer on 2026-02-27 > > > > ## Project Activity: > > Apache Polaris 1.4.0 was released on April 23, 2026, making the project's > > first major release as fully graduated TLP. This release represents a > > significant milestone, with the project returning to a regalar monthly > > cadence > > following graduation. The 1.4.0 release highlights are: > > - Credential vending support for Azure and Google Cloud Storage backends > > - Catalog federation design advances, allowing Polaris to serve as a > front > > for > > multiple catalog backends in multi-cloud environments (AWS, Azure, > GCS) > > - S3 KMS encryption support for AWS-backed catalogs > > - Polaris Python CLI 1.4.0 released alongside the server distribution > > > > Quickly after, Apache Polaris 1.4.1 was released on May 1, 2026, as a > > security > > release, fixing 4 CVEs: > > - CVE-2026-42809 > > - CVE-2026-42810 > > - CVE-2026-42811 > > - CVE-2026-42812 The PMC worked efficiently on identifying, reporting, > > fixing, > > releasing these security issues. > > > > ## Community Health: > > Sung Yun has been elected as new PMC member on 2026_04-27. > Post-graduation > > development has been highly active, with multiple design proposals > advancing > > simultaneously on the dev mailing list (69% increase in traffic in the > past > > quarter). We can note the following active design proposals in the > > community: > > - Apache Ranger Authorization RFC: the community proposes opt-in Ranger > > integration for organizations running Ranger alongside Hive, Spark, > and > > Trino. It provides unified governance framework eliminating policy > > duplication. > > - OpenLineage integration: the community is discussing OpenLineage > > integration, around events, and proxy approaches. > > - AGENTS.md: the community discussed about adding AGENDS.md to the > > repository > > to provide agent-readable metadata. It improves the compatibility > with AI > > coding tools and automated contribution workflows. This reflects a > broader > > trend across the ASF projects to address AI tooling in the development > > workflow. > > > > In terms of event outreach, Iceberg Summit 2026 showed Apache Polaris > > features > > prominently as part of the open lakehouse ecosystem. Polaris Community > > Sprint > > gathered Polaris community members to discuss proposals. Also Iceberg > > Pre-Summit Meetup hosted by Bloomberg Engineering included Polaris > > representation. > > > > On the trademark part, the PMC is actively managing third-party use of > the > > Polaris brand in compliance with The ASF branding guidelines. > > > ------------------------------------------------------------------------------------------------------ > > > > Please let me know if I forgot anything, or if you want me to make > changes. > > > > I will send the report by the end of the week. > > > > Thanks! > > > > Regards > > JB > > >
