It should be fine to continue this candidate since the regression will not impact oss pulsar. It depends how user customize the authorization plugin.
+1 binding Regards Penghui On Thu, Jul 31, 2025, 3:54 AM xiangying meng <xiangy...@apache.org> wrote: > +1 (binding) > > - Built from source > - Checked the signatures of the source and binary release artifacts > - Ran pulsar standalone > - Checked producer and consumer > - Verified the Cassandra connector > - Verified the Stateful function > On Thu, Jul 31, 2025 at 5:43 PM Lari Hotari <lhot...@apache.org> wrote: > > > > Thank you, Penghui. Do you think we can proceed with 4.0.6, mention > > the possible regression in release notes and provide the fix in 4.0.7 > > ? > > > > -Lari > > > > On Thu, 31 Jul 2025 at 09:11, PengHui Li <peng...@apache.org> wrote: > > > > > > Hi Lari, > > > > > > There is a potential issue introduced by > > > https://github.com/apache/pulsar/pull/24533 recently > > > It might impact the customized authorization provider which check both > role > > > name and authdata > > > > > > I have pushed out the fixed PR: > https://github.com/apache/pulsar/pull/24593 > > > > > > Regards, > > > Penghui > > > > > > On Wed, Jul 30, 2025 at 7:13 AM Yunze Xu <x...@apache.org> wrote: > > > > > > > I decided to cancel my -1, this release should not be blocked now. > See > > > > https://github.com/apache/pulsar/pull/24590#issuecomment-3136536310 > > > > for my explanation. https://github.com/apache/pulsar/pull/24590 > should > > > > fix the test, and we don't need to include that PR in this release. > > > > > > > > Thanks, > > > > Yunze > > > > > > > > On Wed, Jul 30, 2025 at 9:25 PM Yunze Xu <x...@apache.org> wrote: > > > > > > > > > > -1 (binding) > > > > > > > > > > I found a regression introduced by > > > > > https://github.com/apache/pulsar/pull/24189. See comments of > > > > > https://github.com/apache/pulsar/issues/24583 for how to > reproduce. > > > > > > > > > > It seems to be an issue with topic policies. > > > > > > > > > > Thanks, > > > > > Yunze > > > > > > > > > > > > > > > On Wed, Jul 30, 2025 at 8:21 PM Lari Hotari <lhot...@apache.org> > wrote: > > > > > > > > > > > > Hello Apache Pulsar Community, > > > > > > > > > > > > This is a call for the vote to release the Apache Pulsar version > 4.0.6 > > > > > > based on 4.0.6-candidate-1. > > > > > > > > > > > > Included changes since the previous release: > > > > > > > https://github.com/apache/pulsar/compare/v4.0.5...v4.0.6-candidate-1 > > > > > > > > > > > > *** Please download, test and vote on this release. This vote > will > > > > stay open > > > > > > for at least 24 hours *** > > > > > > > > > > > > Only votes from PMC members are binding, but members of the > community > > > > are > > > > > > encouraged to test the release and vote with "(non-binding)". > > > > > > > > > > > > Note that we are voting upon the source (tag), binaries are > provided > > > > for > > > > > > convenience. > > > > > > > > > > > > The release candidate is available at: > > > > > > > > > > > https://dist.apache.org/repos/dist/dev/pulsar/pulsar-4.0.6-candidate-1/ > > > > > > > > > > > > SHA-512 checksums: > > > > > > > > > > > b11a1d424f60f092191216c1f0ca1cee0ce3a7d965fe4223611f6b6157c5e676e6af13ad76448eda5f0ce76b30c31d7ac4026890187c0f1f9dc52e96574bda69 > > > > > > apache-pulsar-4.0.6-src.tar.gz > > > > > > > > > > > ac174f604e94473215e07024d05853dbf24bf1520ec222c8bb0d87707a5f126749df7d5733e06a2423456421489ed371e122f4f5a7793a5146a5a1b47f437e90 > > > > > > apache-pulsar-4.0.6-bin.tar.gz > > > > > > > > > > > > Maven staging repo: > > > > > > > > > > > https://repository.apache.org/content/repositories/orgapachepulsar-1347 > > > > > > > > > > > > The tag to be voted upon: > > > > > > v4.0.6-candidate-1 (commit > 4538ef7645c45a3c8686092128fde6c5d61c762b) > > > > > > https://github.com/apache/pulsar/releases/tag/v4.0.6-candidate-1 > > > > > > > > > > > > Pulsar's KEYS file containing PGP keys you use to sign the > release: > > > > > > https://downloads.apache.org/pulsar/KEYS > > > > > > > > > > > > Docker images: > > > > > > docker pull lhotari/pulsar:4.0.6-4538ef7 > > > > > > > > > > > https://hub.docker.com/layers/lhotari/pulsar/4.0.6-4538ef7/images/sha256-c215e70b80505f8592d68e53f7d93ecf16a10bddaf11b539d411320506b6d410 > > > > > > docker pull lhotari/pulsar-all:4.0.6-4538ef7 > > > > > > > > > > > https://hub.docker.com/layers/lhotari/pulsar-all/4.0.6-4538ef7/images/sha256-ae7c884c07257a6d939789a308e99c579de15fd066d197b5fac1a12451c0e9da > > > > > > > > > > > > Please download the source package, and follow the README to > build > > > > > > and run the Pulsar standalone service. > > > > > > > > > > > > More advanced release validation instructions can be found at > > > > > > https://pulsar.apache.org/contribute/validate-release-candidate/ > > > > > > > > > > > > Thanks, > > > > > > > > > > > > Lari Hotari > > > > >
