+1 (non-binding) Here are the verification steps I performed:
1. Signature verification: Downloaded all 5 artifacts from dist.apache.org/repos/dist/dev/storm/apache-storm-2.8.9-rc1/ (source tar.gz/zip, binary tar.gz/zip, RELEASE_NOTES.html). Imported the official KEYS file and verified all signatures: good signature from Rui Abreu which is listed in the official KEYS file. 2. Checksum verification: All 5 SHA512 checksums verified OK with sha512sum -c. Note: dev-tools/rc/verify-release-file.sh reports a false mismatch because it uses gpg --print-md output format, while the published .sha512 files use sha512sum format; the hashes themselves match. 3. Source vs git tag: Diffed the extracted source tarball against the v2.8.9 tag from apache/storm: no content differences in any tracked file. 4. Build from source: mvn clean install -DskipTests on the source tarball: BUILD SUCCESS. 5. Standalone cluster test: Started a standalone cluster from the binary tar.gz (dev-zookeeper, nimbus, supervisor, UI). bin/storm version reports Storm 2.8.9, Branch v2.8.9; the UI REST API responded correctly. The UI frontend worked correctly. 6. Topology smoke test: Submitted WordCountTopology (storm-starter jar built from the RC sources): topology went ACTIVE with 3 workers / 28 tasks, ~40k tuples emitted within ~90 s, split and count bolts acking with zero failed tuples and no errors; word counts visible in worker logs. 7. CLI test: storm list and storm kill both worked; the topology was cleanly removed. 8. Release notes: Content is consistent with the changelog (dependency bumps plus the Flux viewer fix #8890). Many thanks to Rui for preparing and managing this RC! Cheers, Gianluca Il giorno dom 19 lug 2026 alle ore 12:44 Richard Zowalla <[email protected]> ha scritto: > +1 (binding) > > Actions taken to verify the release: > > - Downloaded all artifacts from > https://dist.apache.org/repos/dist/dev/storm/apache-storm-2.8.9-rc1/ > - Verified GPG signatures of the source and binary artifacts against the > KEYS file (good signatures from 72B4 3655 8AA9 CDCA 2C4C BAC3 40D4 B35E > 2C14 52E5, Rui Abreu > - Verified all SHA-512 checksum > - Checked the source tarball: version 2.8.9 in the reactor pom, LICENSE > and NOTICE present > - Checked the Nexus staging repository resolves (storm-client-2.8.9) > Ran the binary distribution in a docker compose cluster (zookeeper 3.9.3, > nimbus, supervisor, ui, Temurin 21 JRE): cluster healthy, submitted > ExclamationTopology (storm-starter-2.8.9.jar from the staging repo) > > Thanks for putting the RC together, Rui! > > > Am 18.07.2026 um 18:54 schrieb Rui Abreu <[email protected]>: > > > > Ran the 2.8.9-RC1 using storm-docker. > > Uploaded KafkaSpoutTopologyMainNamedTopics from storm-examples. > > UI looks good, topologies are processing normally. > > > > Verified signatures and checksum for all files > > > > +1 (binding) > > > > On Sat, 18 Jul 2026 at 17:23, Rui Abreu <[email protected]> wrote: > >> > >> Hi folks, > >> > >> I have posted the 1st release candidate for Apache Storm 2.8.9 > >> release and it is ready for testing. > >> > >> The Nexus staging repository is here: > >> https://repository.apache.org/content/repositories/orgapachestorm-1126 > >> > >> Storm Source and Binary Release with sha512 signature files are here: > >> https://dist.apache.org/repos/dist/dev/storm/apache-storm-2.8.9-rc1/ > >> > >> The release artifacts are signed with the following key: > >> > https://keyserver.ubuntu.com/pks/lookup?op=index&fingerprint=on&search=rabreu > >> in this file https://www.apache.org/dist/storm/KEYS > >> > >> The release was made from the Apache Storm 2.8.9 tag at: > >> https://github.com/apache/storm/tree/v2.8.9 > >> > >> Full list of changes in this release: > >> > https://dist.apache.org/repos/dist/dev/storm/apache-storm-2.8.9-rc1/RELEASE_NOTES.html > >> > >> To use it in a Maven build set the version for Storm to 2.8.9 and add > >> the following URL to your settings.xml file: > >> https://repository.apache.org/content/repositories/orgapachestorm-1126 > >> > >> The release was made using the Storm release process, documented on > >> the GitHub repository: > >> https://github.com/apache/storm/blob/master/RELEASING.md > >> > >> Please vote on releasing these packages as Apache Storm 2.8.9. The > >> vote is open for at least the next 72 hours. > >> > >> "How to vote" is described here: > >> > https://github.com/apache/storm/blob/master/RELEASING.md#how-to-vote-on-a-release-candidate > >> When voting, please list the actions taken to verify the release. > >> > >> Only votes from the Storm PMC are binding, but everyone is welcome to > >> check the release candidate and vote. > >> The vote passes if at least three binding +1 votes are cast. > >> > >> [ ] +1 Release this package as Apache Storm 2.8.9 > >> [ ] 0 No opinion > >> [ ] -1 Do not release this package because... > >> > >> Thanks to everyone who contributed to this release. > >
