+1(binding). I checked the following items: - [X] Download links are valid. - [X] Checksums and PGP signatures are valid. - [X] LICENSE and NOTICE files are correct for the repository. - [X] Source code artifacts have correct names matching the current release. - [X] All files have license headers if necessary. - [X] Building is OK using `mvn clean install` on JDK_1.8.0_202. - [X] Built Hadoop trunk successfully with updated thirdparty (include update protobuf shaded path). - [X] No difference between tag and release src tar.
Good Luck! Best Regards, - He Xiaoqiao On Sun, Feb 4, 2024 at 10:29 PM slfan1989 <slfan1...@apache.org> wrote: > Hi folks, > > Xiaoqiao He and I have put together a release candidate (RC1) for Hadoop > Thirdparty 1.2.0. > > The RC is available at: > https://dist.apache.org/repos/dist/dev/hadoop/hadoop-thirdparty-1.2.0-RC1 > > The RC tag is > https://github.com/apache/hadoop-thirdparty/releases/tag/release-1.2.0-RC1 > > The maven artifacts are staged at > https://repository.apache.org/content/repositories/orgapachehadoop-1401 > > Comparing to 1.1.1, there are three additional fixes: > > HADOOP-18197. Upgrade Protobuf-Java to 3.21.12 > https://github.com/apache/hadoop-thirdparty/pull/26 > > HADOOP-18921. Upgrade to avro 1.11.3 > https://github.com/apache/hadoop-thirdparty/pull/24 > > HADOOP-18843. Guava version 32.0.1 bump to fix CVE-2023-2976 (#23) > https://github.com/apache/hadoop-thirdparty/pull/23 > > You can find my public key at : > https://dist.apache.org/repos/dist/release/hadoop/common/KEYS > > Best Regards, > Shilun Fan. > >
