Hi JB, The report LGTM to me as well.
+1 to Robert’s suggested wording tweak for the security-release sentence. Thanks for putting this together. Yufei On Tue, 5 May 2026 12:04:59 -0400, Dmitri Bourlatchkov [email protected] wrote: Hi JB, The report LGTM! Thanks for putting it together! +1 to Robert’s suggestion. Cheers, Dmitri. On Tue, May 5, 2026 at 4:24 AM Jean-Baptiste Onofré [email protected] wrote: That works for me. I will update the report accordingly. Thanks Robert! Regards JB On Tue, May 5, 2026 at 10:15 AM Robert Stupp [email protected] wrote: Hi JB, Just a minor wording fix: Instead of “The PMC worked efficiently on identifying, reporting, fixing, releasing these security issues.”, it reads a bit like “we’ve released something with the security issues” (at least to me), maybe use “The PMC worked efficiently on identifying, reporting, and fixing these security issues with the ASF security team and releasing a patch-version with the fixes.” Robert On Tue, May 5, 2026 at 9:56 AM Francois Papon [email protected] wrote: LGTM Thanks JB! regards, François [email protected] [email protected] Le 05/05/2026 à 09:32, Jean-Baptiste Onofré a écrit : Hi folks, We have to report this month (the third and last monthly report post graduation before reporting every quarter). I drafted the following report: Description: The mission of Apache Polaris is the creation and maintenance of software related to a catalog for data lakes. It provides new levels of choice, flexibility and control over data, with full enterprise security and Apache Iceberg interoperability across a multitude of engines and infrastructure Project Status: Current project status: Ongoing Issues for the board: None Membership Data: Apache Polaris was founded 2026-02-18 (3 months ago) There are currently 31 committers and 19 PMC members in this project. The Committer-to-PMC ratio is roughly 8:5. Community changes, past quarter: - Sung Yun was added to the PMC on 2026-04-27 - Adam Christian was added as committer on 2026-03-07 - Adnan Hemani was added as committer on 2026-03-07 - Christopher Lambert was added as committer on 2026-03-11 - Danica Fine was added as committer on 2026-02-27 Project Activity: Apache Polaris 1.4.0 was released on April 23, 2026, making the project’s first major release as fully graduated TLP. This release represents a significant milestone, with the project returning to a regalar monthly cadence following graduation. The 1.4.0 release highlights are: - Credential vending support for Azure and Google Cloud Storage backends - Catalog federation design advances, allowing Polaris to serve as a front for multiple catalog backends in multi-cloud environments (AWS, Azure, GCS) - S3 KMS encryption support for AWS-backed catalogs - Polaris Python CLI 1.4.0 released alongside the server distribution Quickly after, Apache Polaris 1.4.1 was released on May 1, 2026, as a security release, fixing 4 CVEs: - CVE-2026-42809 - CVE-2026-42810 - CVE-2026-42811 - CVE-2026-42812 The PMC worked efficiently on identifying, reporting, fixing, releasing these security issues. Community Health: Sung Yun has been elected as new PMC member on 2026_04-27. Post-graduation development has been highly active, with multiple design proposals advancing simultaneously on the dev mailing list (69% increase in traffic in the past quarter). We can note the following active design proposals in the community: - Apache Ranger Authorization RFC: the community proposes opt-in Ranger integration for organizations running Ranger alongside Hive, Spark, and Trino. It provides unified governance framework eliminating policy duplication. - OpenLineage integration: the community is discussing OpenLineage integration, around events, and proxy approaches. - AGENTS.md: the community discussed about adding AGENDS.md to the repository to provide agent-readable metadata. It improves the compatibility with AI coding tools and automated contribution workflows. This reflects a broader trend across the ASF projects to address AI tooling in the development workflow. In terms of event outreach, Iceberg Summit 2026 showed Apache Polaris features prominently as part of the open lakehouse ecosystem. Polaris Community Sprint gathered Polaris community members to discuss proposals. Also Iceberg Pre-Summit Meetup hosted by Bloomberg Engineering included Polaris representation. On the trademark part, the PMC is actively managing third-party use of the Polaris brand in compliance with The ASF branding guidelines. Please let me know if I forgot anything, or if you want me to make changes. I will send the report by the end of the week. Thanks! Regards JB
