+1 binding I verified the release candidate:
Integrity and signatures: - Downloaded the candidate artifacts from [1] and the KEYS file from https://downloads.apache.org/pulsar/KEYS - sha512sum -c passes, and the SHA-512 matches the value posted in this thread - GPG signature verifies: Good signature from "Lari Hotari (CODE SIGNING KEY) <[email protected]>" (RSA 4096, fingerprint C663D2F64DA2CA09DB28D9ABD3FA67D522C55256), present in the official KEYS - The signed tag v3.0.0-M1-candidate-1 verifies with the same key and points to commit 259064ce41f6ab8c9c6644cee5eac90f452ecb2e, as stated in the vote Contents: - The extracted source tarball is identical to the git tag (no differences) - LICENSE and NOTICE are in order, including the attribution of the derived Spring projects; all 390 .java files carry license headers, with the original Spring headers kept for derived files, as stated in the vote - ./gradlew rat passes: 476 approved, 0 unapproved, 0 unknown; the docs fonts carry the SIL OFL 1.1 license alongside, as documented Build and artifacts: - ./gradlew assemble with JDK 25: BUILD SUCCESSFUL - The staging repository [2] has all 7 modules (6 jars + BOM) with pom, Gradle module metadata, sources and javadoc jars, each with signatures and checksums; spot-checked org.apache.pulsar:pulsar-spring:3.0.0-M1: jar and pom signatures verify, META-INF/LICENSE and NOTICE match the source release, and the sources jar is byte-identical to the source release contents [1] https://dist.apache.org/repos/dist/dev/pulsar/pulsar-spring-3.0.0-M1-candidate-1 [2] https://repository.apache.org/content/repositories/orgapachepulsar-1425 On 2026-11-06 16:09 UTC Lari Hotari via dev wrote: > This is a vote to release Apache Pulsar support for Spring, version 3.0.0-M1. > > Apache Pulsar support for Spring is derived from Spring for Apache Pulsar, > also > known as Spring Pulsar (https://github.com/spring-projects/spring-pulsar), > from > the Apache Pulsar starter and auto-configuration in Spring Boot > (https://github.com/spring-projects/spring-boot), and from the Apache Pulsar > binder in Spring Cloud Stream > (https://github.com/spring-cloud/spring-cloud-stream), all licensed under the > Apache License, Version 2.0. > Those works remain the copyright of their original authors and contributors, > as > stated in the headers of the source files. > > For more information, see the reference documentation and the source > repository: > https://pulsar.apache.org/pulsar-spring/reference > https://github.com/apache/pulsar-spring > > Source release, with its checksum and signature: > https://dist.apache.org/repos/dist/dev/pulsar/pulsar-spring-3.0.0-M1-candidate-1 > > SHA-512 checksum: > aee0545e1871502e07d021549c8390c4250e4c4a588bd9a6a15fce6cd134716c58e51a51a87ef4f25b735ec040218df1796e8d8d44f032fbc9df5427e3f383de > apache-pulsar-spring-3.0.0-M1-src.tar.gz > > Maven staging repository: > https://repository.apache.org/content/repositories/orgapachepulsar-1425 > > Git tag: > v3.0.0-M1-candidate-1 (commit 259064ce41f6ab8c9c6644cee5eac90f452ecb2e) > https://github.com/apache/pulsar-spring/releases/tag/v3.0.0-M1-candidate-1 > > The source release is signed with a key in: > https://downloads.apache.org/pulsar/KEYS > > To verify the source release: > > > CANDIDATE_URL=https://dist.apache.org/repos/dist/dev/pulsar/pulsar-spring-3.0.0-M1-candidate-1 > wget > $CANDIDATE_URL/apache-pulsar-spring-3.0.0-M1-src.tar.gz{,.sha512,.asc} > sha512sum -c apache-pulsar-spring-3.0.0-M1-src.tar.gz.sha512 > gpg --verify apache-pulsar-spring-3.0.0-M1-src.tar.gz.asc > tar xzf apache-pulsar-spring-3.0.0-M1-src.tar.gz > cd apache-pulsar-spring-3.0.0-M1-src > ./gradlew assemble > > This requires JDK 25, and doesn't run the tests. To also run them, use > ./gradlew build instead, which requires Docker and takes about 8-12 minutes. > > The vote is open for at least 72 hours, and passes with at least three > binding +1 votes and more binding +1 votes than binding -1 votes. Votes of > PMC members are binding. > > [ ] +1 Release this candidate > [ ] -1 Don't release this candidate, because ... >
