Hi Pedro, yes I think filing an issue would be good. It looks like 61a09f5af2c8f08a1f395a39bf74b580b082f0de is the cause and that the download function in arrow-go's script needs to behave more like the script in the arrow repo [1] to handle the closer.lua script.
[1] https://github.com/apache/arrow/blob/main/dev/release/verify-release-candidate.sh#L106 On Thu, Apr 23, 2026 at 7:42 AM Pedro Matias <[email protected]> wrote: > > Hi, > > Is the verification script working properly? > > I tried to verify and got the following error: > > + curl --fail --location --remote-name --show-error --silent ' > https://www.apache.org/dyn/closer.lua?action=download&filename=arrow/KEYS' > + gpg --import KEYS gpg: can't open 'KEYS': No such file or directory gpg: > Total number processed: 0 + cleanup + go clean -modcache + '[' no = yes ']' > + echo 'Failed to verify release candidate. See > /var/folders/xf/clw5qnz95sn0ybzsd8dvjkqc0000gn/T/arrow-go-18.6.0-0.XXXXX.saumrr0W4u > for details.' Failed to verify release candidate. See > /var/folders/xf/clw5qnz95sn0ybzsd8dvjkqc0000gn/T/arrow-go-18.6.0-0.XXXXX.saumrr0W4u > for details. > > I changed the ARROW_KEYS_URL like so: > ARROW_KEYS_URL="https://downloads.apache.org/arrow/KEYS"; > > And was able to verify the release. Shall I open an issue/PR with this? > > Just holding my +1 until this is cleared up. > > Best, > > Pedro > > On Wed, Apr 22, 2026 at 11:40 PM Matt Topol <[email protected]> wrote: > > > Hi, > > > > I would like to propose the following release candidate (RC0) of > > Apache Arrow Go version 18.6.0. > > > > This release candidate is based on commit: > > 7d825c02571af354a3047d55e33aae95b08f975c [1] > > > > The source release rc0 is hosted at [2]. > > > > This is not a permanent URL. If the RC is accepted, it will be moved to > > the final release location. The SHA512 hash of the source tarball is: > > > > a536e3a57b45fb4fdd7f90aa58ef0a999d51f8fbf560a177a8842e792298ee6cd05e0fb068ce61cc071d9bb8069114b7010480b1a71f6dfbf5dafe30a433c070. > > > > Please download, verify checksums and signatures, run the unit tests, > > and vote on the release. See [3] for how to validate a release candidate. > > > > The vote will be open for at least 72 hours. > > > > [ ] +1 Release this as Apache Arrow Go 18.6.0 > > [ ] +0 > > [ ] -1 Do not release this as Apache Arrow Go 18.6.0 because... > > > > --Matt > > > > [1]: > > https://github.com/apache/arrow-go/tree/7d825c02571af354a3047d55e33aae95b08f975c > > [2]: https://github.com/apache/arrow-go/releases/v18.6.0-rc0 > > [3]: > > https://github.com/apache/arrow-go/blob/main/dev/release/README.md#verify > >
