The key issue was fixed. On Mon, 26 May 2025 at 10:05, Hyukjin Kwon <gurwls...@apache.org> wrote:
> Probably should avoid backporting it for improvements but If there is a > CVE that directly affects Spark, let's upgrade. > > On Mon, 26 May 2025 at 00:27, Rozov, Vlad <vro...@amazon.com.invalid> > wrote: > >> Should parquet version be upgraded to 1.15.1 or 1.15.2? There are 10 CVEs >> in the current 1.13.1 and even though they may not impact Spark there are >> other improvements (better performance) that will benefit Spark users. >> >> Thank you, >> >> Vlad >> >> On May 24, 2025, at 8:02 PM, Hyukjin Kwon <gurwls...@apache.org> wrote: >> >> Oh let me check. Thanks for letting me know. >> >> On Sun, May 25, 2025 at 12:00 PM Dongjoon Hyun <dongj...@apache.org> >> wrote: >> >>> I saw 38 commits to make this work. Thank you for driving this, Hyukjin. >>> >>> BTW, your key seems to be new and is not in >>> https://dist.apache.org/repos/dist/dev/spark/KEYS yet. Could you >>> double-check? >>> >>> $ curl -LO https://dist.apache.org/repos/dist/dev/spark/KEYS >>> $ gpg --import KEYS >>> $ gpg --verify spark-3.5.6-bin-hadoop3.tgz.asc >>> gpg: assuming signed data in 'spark-3.5.6-bin-hadoop3.tgz' >>> gpg: Signature made Thu May 22 23:49:54 2025 PDT >>> gpg: using RSA key >>> 0FE4571297AB84440673665669600C8338F65970 >>> gpg: issuer "gurwls...@apache.org" >>> gpg: Can't check signature: No public key >>> >>> Dongjoon. >>> >>> On 2025/05/23 17:56:25 Allison Wang wrote: >>> > +1 >>> > >>> > On Fri, May 23, 2025 at 10:15 AM Hyukjin Kwon <gurwls...@apache.org> >>> wrote: >>> > >>> > > Oh it's actually a test and also to release. Let me know if you have >>> any >>> > > concern! >>> > > >>> > > On Fri, May 23, 2025 at 11:25 PM Mridul Muralidharan < >>> mri...@gmail.com> >>> > > wrote: >>> > > >>> > >> Hi Hyukjin, >>> > >> >>> > >> This thread is to test the automated release, right ? >>> > >> Not to actually release it ? >>> > >> >>> > >> Regards, >>> > >> Mridul >>> > >> >>> > >> On Fri, May 23, 2025 at 8:26 AM Ruifeng Zheng <ruife...@apache.org> >>> > >> wrote: >>> > >> >>> > >>> +1 >>> > >>> >>> > >>> On Fri, May 23, 2025 at 5:27 PM Hyukjin Kwon <gurwls...@apache.org >>> > >>> > >>> wrote: >>> > >>> >>> > >>>> Please vote on releasing the following candidate as Apache Spark >>> > >>>> version 3.5.6. >>> > >>>> >>> > >>>> The vote is open until May 27 (PST) and passes if a majority +1 >>> PMC >>> > >>>> votes are cast, with >>> > >>>> a minimum of 3 +1 votes. >>> > >>>> >>> > >>>> [ ] +1 Release this package as Apache Spark 3.5.6 >>> > >>>> [ ] -1 Do not release this package because ... >>> > >>>> >>> > >>>> To learn more about Apache Spark, please see >>> https://spark.apache.org/ >>> > >>>> >>> > >>>> The tag to be voted on is v3.5.6-rc5 (commit >>> > >>>> 303c18c74664f161b9b969ac343784c088b47593): >>> > >>>> >>> > >>>> >>> https://github.com/apache/spark/tree/303c18c74664f161b9b969ac343784c088b47593 >>> > >>>> >>> > >>>> The release files, including signatures, digests, etc. can be >>> found at: >>> > >>>> https://dist.apache.org/repos/dist/dev/spark/v3.5.6-rc1-bin/ >>> > >>>> >>> > >>>> Signatures used for Spark RCs can be found in this file: >>> > >>>> https://dist.apache.org/repos/dist/dev/spark/KEYS >>> > >>>> >>> > >>>> The staging repository for this release can be found at: >>> > >>>> >>> https://repository.apache.org/content/repositories/orgapachespark-1495/ >>> > >>>> >>> > >>>> The documentation corresponding to this release can be found at: >>> > >>>> https://dist.apache.org/repos/dist/dev/spark/v3.5.6-rc1-docs/ >>> > >>>> >>> > >>>> The list of bug fixes going into 3.5.6 can be found at the >>> following >>> > >>>> URL: >>> > >>>> https://issues.apache.org/jira/projects/SPARK/versions/12355703 >>> > >>>> >>> > >>>> FAQ >>> > >>>> >>> > >>>> ========================= >>> > >>>> How can I help test this release? >>> > >>>> ========================= >>> > >>>> >>> > >>>> If you are a Spark user, you can help us test this release by >>> taking >>> > >>>> an existing Spark workload and running on this release candidate, >>> then >>> > >>>> reporting any regressions. >>> > >>>> >>> > >>>> If you're working in PySpark you can set up a virtual env and >>> install >>> > >>>> the current RC via "pip install >>> > >>>> >>> https://dist.apache.org/repos/dist/dev/spark/v3.5.6-rc1-bin/pyspark-3.5.6.tar.gz >>> > >>>> " >>> > >>>> and see if anything important breaks. >>> > >>>> In the Java/Scala, you can add the staging repository to your >>> projects >>> > >>>> resolvers and test >>> > >>>> with the RC (make sure to clean up the artifact cache >>> before/after so >>> > >>>> you don't end up building with a out of date RC going forward). >>> > >>>> >>> > >>> >>> > >>> >>> --------------------------------------------------------------------- >>> To unsubscribe e-mail: dev-unsubscr...@spark.apache.org >>> >>> >>
