[RESULT] [VOTE] Apache ZooKeeper release 3.7.2 candidate 0

2023-10-09 Thread Andor Molnar
I'm happy to announce that we have unanimously approved this release.
 
There are 4 approving votes, 3 of which are binding:
 
- Damien Diederen (non-binding)
- Mate Szalay-Beko (binding)
- Patrick Hunt (binding)
- Andor Molnar (binding)
 
There are no disapproving votes.
 
I will promote the artifacts and complete the release procedure.
 
Thanks to every one who contributed to this great release !
 
Andor



On Fri, 2023-10-06 at 12:04 +0200, Andor Molnar wrote:
> Hi ZK folks,
> 
> This is a release candidate for 3.7.2.
> 
> This is a bugfix release for the 3.7 release line. Includes important
> bugfixes and dependency upgrades to address CVEs.
> 
> The full release notes is available at:
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310801=12351732
> 
> 
> *** Please download, test and vote by October 9th 2023, 23:59 UTC+0.
> ***
> 
> 
> Source files:
> https://dist.apache.org/repos/dist/dev/zookeeper/zookeeper-3.7.2-candidate-0/
> 
> Maven staging repo:
> https://repository.apache.org/content/repositories/orgapachezookeeper-1098/
> 
> The release candidate tag in git to be voted upon: release-3.7.2-0
> https://github.com/apache/zookeeper/releases/tag/release-3.7.2-0
> 
> ZooKeeper's KEYS file containing PGP keys we use to sign the release:
> https://www.apache.org/dist/zookeeper/KEYS
> 
> The staging version of the website is:
> https://dist.apache.org/repos/dist/dev/zookeeper/zookeeper-3.7.2-candidate-0/website/index.html
> 
> 
> Should we release this candidate?
> 
> 
> Regards,
> Andor
> 
> 
> 



Re: [VOTE] Apache ZooKeeper release 3.7.2 candidate 0

2023-10-09 Thread Andor Molnar
+1

- checksum / signature good
- rat run clean
- owasp dependency check passed
- java unit tests passed on Ubuntu 20.04 / openjdk version "11.0.12"
- one of C++ tests is still failing for me, but CI looks good:
https://ci-hadoop.apache.org/view/ZooKeeper/job/zookeeper-multi-branch-build/job/branch-3.7.2/

- created 3-node SSL ensemble and ran a few smoke tests
- release notes looks fine, but history lacks the notes of 3.7.0 - I'll
make a note in the release guide
- verified CLI commands

Regards,
Andor


On Fri, 2023-10-06 at 12:04 +0200, Andor Molnar wrote:
> Hi ZK folks,
> 
> This is a release candidate for 3.7.2.
> 
> This is a bugfix release for the 3.7 release line. Includes important
> bugfixes and dependency upgrades to address CVEs.
> 
> The full release notes is available at:
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310801=12351732
> 
> 
> *** Please download, test and vote by October 9th 2023, 23:59 UTC+0.
> ***
> 
> 
> Source files:
> https://dist.apache.org/repos/dist/dev/zookeeper/zookeeper-3.7.2-candidate-0/
> 
> Maven staging repo:
> https://repository.apache.org/content/repositories/orgapachezookeeper-1098/
> 
> The release candidate tag in git to be voted upon: release-3.7.2-0
> https://github.com/apache/zookeeper/releases/tag/release-3.7.2-0
> 
> ZooKeeper's KEYS file containing PGP keys we use to sign the release:
> https://www.apache.org/dist/zookeeper/KEYS
> 
> The staging version of the website is:
> https://dist.apache.org/repos/dist/dev/zookeeper/zookeeper-3.7.2-candidate-0/website/index.html
> 
> 
> Should we release this candidate?
> 
> 
> Regards,
> Andor
> 
> 
> 



Re: [VOTE] Apache ZooKeeper release 3.7.2 candidate 0

2023-10-06 Thread Patrick Hunt
+1 - xsums validated, rat ran clean, was able to compile successfully,
owasp check is green, able to run multiple configurations/ensembles
successfully.

Patrick

On Fri, Oct 6, 2023 at 3:06 AM Andor Molnar  wrote:

> Hi ZK folks,
>
> This is a release candidate for 3.7.2.
>
> This is a bugfix release for the 3.7 release line. Includes important
> bugfixes and dependency upgrades to address CVEs.
>
> The full release notes is available at:
>
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310801=12351732
>
>
> *** Please download, test and vote by October 9th 2023, 23:59 UTC+0.
> ***
>
>
> Source files:
>
> https://dist.apache.org/repos/dist/dev/zookeeper/zookeeper-3.7.2-candidate-0/
>
> Maven staging repo:
> https://repository.apache.org/content/repositories/orgapachezookeeper-1098/
>
> The release candidate tag in git to be voted upon: release-3.7.2-0
> https://github.com/apache/zookeeper/releases/tag/release-3.7.2-0
>
> ZooKeeper's KEYS file containing PGP keys we use to sign the release:
> https://www.apache.org/dist/zookeeper/KEYS
>
> The staging version of the website is:
>
> https://dist.apache.org/repos/dist/dev/zookeeper/zookeeper-3.7.2-candidate-0/website/index.html
>
>
> Should we release this candidate?
>
>
> Regards,
> Andor
>
>
>
>


Re: [VOTE] Apache ZooKeeper release 3.7.2 candidate 0

2023-10-06 Thread Damien Diederen


Greetings, all,

+1 (non-binding)

  * Verified checksum/signature;
  * Upgraded a 5-node ensemble to apache-zookeeper-3.7.2-bin.tar.gz,
ran a few smoke tests;
  * Reviewed the Release Notes;
  * Ran dependency-check:check on the source tree.

Cheers, -D


Andor Molnar  writes:
> Hi ZK folks,
>
> This is a release candidate for 3.7.2.
>
> This is a bugfix release for the 3.7 release line. Includes important
> bugfixes and dependency upgrades to address CVEs.
>
> The full release notes is available at:
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310801=12351732
>
>
> *** Please download, test and vote by October 9th 2023, 23:59 UTC+0.
> ***
>
>
> Source files:
> https://dist.apache.org/repos/dist/dev/zookeeper/zookeeper-3.7.2-candidate-0/
>
> Maven staging repo:
> https://repository.apache.org/content/repositories/orgapachezookeeper-1098/
>
> The release candidate tag in git to be voted upon: release-3.7.2-0
> https://github.com/apache/zookeeper/releases/tag/release-3.7.2-0
>
> ZooKeeper's KEYS file containing PGP keys we use to sign the release:
> https://www.apache.org/dist/zookeeper/KEYS
>
> The staging version of the website is:
> https://dist.apache.org/repos/dist/dev/zookeeper/zookeeper-3.7.2-candidate-0/website/index.html
>
>
> Should we release this candidate?
>
>
> Regards,
> Andor


Re: [VOTE] Apache ZooKeeper release 3.7.2 candidate 0

2023-10-06 Thread Szalay-Bekő Máté
+1 (binding)

I did the following tests for the release candidate:
- verified checksum and gpg signature of the artifacts
- I built the source code (incl. the C-client, using -Pfull-build) on
Ubuntu 18.04.2 using OpenJDK 8u372, maven 3.9.3 and GCC version 7.4.0
- all the unit tests passed eventually (both Java and C-client), although I
saw a few flakies again
- I also built and executed unit tests for zkpython
- I also built the java code (without -Pfull-build) using other JDK
versions: 11.0.19, 17.0.7, 20.0.1 (but didn't run the tests this time, just
used 'clean install -DskipTests')
- checkstyle and spotbugs passed
- apache-rat passed
- owasp (CVE check) passed
- fatjar built
- I executed quick rolling-upgrade tests (using
https://github.com/symat/zk-rolling-upgrade-test):
  - rolling upgrade from 3.5.10 to 3.7.2
  - rolling upgrade from 3.6.4 to 3.7.2
  - rolling upgrade from 3.7.1 to 3.7.2
  - rolling upgrade from 3.7.2 to 3.8.2
  - rolling upgrade from 3.7.2 to 3.8.3 RC0
  - rolling upgrade from 3.7.2 to 3.9.0
  - rolling upgrade from 3.7.2 to 3.9.1 RC0
- checked the generated documentation (zookeeper-docs/target/html)
- compared generated release notes (
https://dist.apache.org/repos/dist/dev/zookeeper/zookeeper-3.7.2-candidate-0/website/releasenotes.html)
with Jira (
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310801=12351732
)

Best regards,
Máté

On Fri, Oct 6, 2023 at 12:06 PM Andor Molnar  wrote:

> Hi ZK folks,
>
> This is a release candidate for 3.7.2.
>
> This is a bugfix release for the 3.7 release line. Includes important
> bugfixes and dependency upgrades to address CVEs.
>
> The full release notes is available at:
>
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310801=12351732
>
>
> *** Please download, test and vote by October 9th 2023, 23:59 UTC+0.
> ***
>
>
> Source files:
>
> https://dist.apache.org/repos/dist/dev/zookeeper/zookeeper-3.7.2-candidate-0/
>
> Maven staging repo:
> https://repository.apache.org/content/repositories/orgapachezookeeper-1098/
>
> The release candidate tag in git to be voted upon: release-3.7.2-0
> https://github.com/apache/zookeeper/releases/tag/release-3.7.2-0
>
> ZooKeeper's KEYS file containing PGP keys we use to sign the release:
> https://www.apache.org/dist/zookeeper/KEYS
>
> The staging version of the website is:
>
> https://dist.apache.org/repos/dist/dev/zookeeper/zookeeper-3.7.2-candidate-0/website/index.html
>
>
> Should we release this candidate?
>
>
> Regards,
> Andor
>
>
>
>


[VOTE] Apache ZooKeeper release 3.7.2 candidate 0

2023-10-06 Thread Andor Molnar
Hi ZK folks,

This is a release candidate for 3.7.2.

This is a bugfix release for the 3.7 release line. Includes important
bugfixes and dependency upgrades to address CVEs.

The full release notes is available at:
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310801=12351732


*** Please download, test and vote by October 9th 2023, 23:59 UTC+0.
***


Source files:
https://dist.apache.org/repos/dist/dev/zookeeper/zookeeper-3.7.2-candidate-0/

Maven staging repo:
https://repository.apache.org/content/repositories/orgapachezookeeper-1098/

The release candidate tag in git to be voted upon: release-3.7.2-0
https://github.com/apache/zookeeper/releases/tag/release-3.7.2-0

ZooKeeper's KEYS file containing PGP keys we use to sign the release:
https://www.apache.org/dist/zookeeper/KEYS

The staging version of the website is:
https://dist.apache.org/repos/dist/dev/zookeeper/zookeeper-3.7.2-candidate-0/website/index.html


Should we release this candidate?


Regards,
Andor