thanks, let's see what else we can get I see an avro CVE just dropped: https://nvd.nist.gov/vuln/detail/CVE-2025-33042
I propose *not* holding up the release for it, but instead just doing a dependency update in a few weeks with some cadence of "regular dependency and critical code issues (cves, loss of data) more frequently than we've done before, stopping ~all other code into branch-3.4. On Wed, 18 Feb 2026 at 22:57, Dongjoon Hyun <[email protected]> wrote: > +1 (non-binding) > > I tested with Apache ORC. > Thank you, Steve and all. > > Dongjoon. > > On 2026/02/18 14:45:52 Cheng Pan wrote: > > +1 (non-binding) > > > > Pass integration tests with Apache Spark. > > > > Thanks, > > Cheng Pan > > > > On 2026/02/16 17:00:39 Steve Loughran wrote: > > > Apache Hadoop 3.4.3 > > > > > > I have put together a release candidate (RC1) for Hadoop 3.4.3. > > > > > > What we would like is for anyone who can to verify the tarballs, > especially > > > anyone who can try the arm64 binaries as we want to include them too. > > > > > > The RC is available at: > > > https://dist.apache.org/repos/dist/dev/hadoop/hadoop-3.4.3-RC1/ > > > > > > The git tag is release-3.4.3-RC1, commit 9d50c688466 > > > > > > The maven artifacts are staged at > > > > https://repository.apache.org/content/repositories/orgapachehadoop-1465 > > > > > > You can find my public key at: > > > https://dist.apache.org/repos/dist/release/hadoop/common/KEYS > > > > > > Change log > > > > https://dist.apache.org/repos/dist/dev/hadoop/hadoop-3.4.3-RC1/CHANGELOG.md > > > > > > Release notes > > > > https://dist.apache.org/repos/dist/dev/hadoop/hadoop-3.4.3-RC1/RELEASENOTES.md > > > > > > Build note: the maven artifacts are off the aarch64 release, not the > x86; > > > single builds on ec2 VMs through our cloud infra kept resulting in > multiple > > > staging repos, > > > probably a side effect of our VPN setup. > > > > > > AWS SDK > > > ------- > > > > > > Previous releases included a "lean" tar without the AWS SDK, and/or > > > encountered > > > problems with the size of the .tar artifacts. > > > > > > Now all releases are built without the AWS SDK; it must be explicitly > added > > > to > > > share/hadoop/common/lib/ > > > > > > To add aws support to hadoop, download from Maven Central the version > of > > > the SDK > > > you wish to use: > > > > > > > https://central.sonatype.com/artifact/software.amazon.awssdk/bundle/versions > > > > > > For this release, the version to download is 2.35.4 > > > https://repo1.maven.org/maven2/software/amazon/awssdk/bundle/2.35.4/) > > > > > > 1. Download the bundle-2.35.4.jar artifact and check its signature with > > > the accompanying bundle-2.35.4.jar.asc file. > > > > > > 2. Copy the JAR to share/hadoop/common/lib/ > > > > > > Newer AWS SDK versions _should_ work, though regressions are almost > > > inevitable. > > > > > > Please try the release and vote. The vote will run for 5 days. > > > > > > Here's my vote (with artifacts verified, including presence of > hadoop-azure > > > and hadoop-aws in common/lib) > > > > > > +1 (binding) > > > > > > Steve > > > > > > > > > > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: [email protected] > > For additional commands, e-mail: [email protected] > > > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > >
