Hi,

For me the Perl SDK keeps failing due to:

=> [11/25] RUN curl -sSL https://cpanmin.us | perl - --self-upgrade &&
cpanm --mirror https://www.cpan.org/ install Compress::Zstd 110.7s
=> => # ! Download
http://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7049.tar.gz
failed. Retrying ...

Because of this the Docker based testing fails ...

I believe cpanminus fails because it uses HTTP instead of HTTPS:

❯
curl
-L
https://cpanmin.us
|
perl
-
App::cpanminus
% Total % Received % Xferd Average Speed Time Time Time Current Dload
Upload Total Spent Left Speed 100 295k 100 295k 0 0 3730k 0 --:--:--
--:--:-- --:--:-- 3698k ! ! Can't write to /Library/Perl/5.34 and
/usr/local/bin: Installing modules to /Users/mgrigorov/perl5 ! To turn off
this warning, you have to do one of the following: ! - run me as a root or
with --sudo option (to install to /Library/Perl/5.34 and /usr/local/bin) !
- Configure local::lib in your existing shell to set PERL_MM_OPT etc. ! -
Install local::lib by running the following commands ! ! cpanm
--local-lib=~/perl5 local::lib && eval $(perl -I ~/perl5/lib/perl5/
-Mlocal::lib) ! --> Working on App::cpanminus Fetching
http://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7049.tar.gz
... FAIL ! Download
http://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7049.tar.gz
failed. Retrying ... ! Download
http://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7049.tar.gz
failed. Retrying ... ! Download
http://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7049.tar.gz
failed. Retrying ... ! Failed to download
http://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7049.tar.gz !
Failed to fetch distribution App-cpanminus-1.7049

and https://metacpan.org/pod/App::cpanminus has a Security Advisory at the
top:

CVE-2024-45321 (2024-08-27)

The App::cpanminus package through 1.7047 for Perl downloads code via
insecure HTTP, enabling code execution for network attackers.





On Sat, Jun 20, 2026 at 8:06 PM Ryan Skraba <[email protected]> wrote:

> Hi everyone,
>
> I'd like to propose the following RC1 to be released as the official Apache
> Avro 1.12.2 release.
>
> The commit id is 3dd516fb146a8e733867ece19b15a01a37a68595
> * This corresponds to the tag: release-1.12.2-rc1
> * https://github.com/apache/avro/releases/tag/release-1.12.2-rc1
>
> The release tarball, signature, and checksums are here (revision 85347)
> * https://dist.apache.org/repos/dist/dev/avro/avro-1.12.2-rc1/
>
> You can find the KEYS file here:
> * https://dist.apache.org/repos/dist/dev/avro/KEYS
>
> Binary artifacts for Java are staged in Nexus here:
> *
> https://repository.apache.org/content/groups/staging/org/apache/avro/avro/1.12.2/
>
> This release includes ~30 Jira issues:
> *
> https://issues.apache.org/jira/issues/?jql=project%3DAVRO%20AND%20fixVersion%3D1.12.2
>
> I'll send a follow-up email with the notable highlights for each
> language and SDK, but I wanted to give everyone a head start to
> check their favourite fixed JIRAs and features!
>
> Please download, verify, and test. This vote will remain open for at least
> 72 hours.  I would like to close at 18h00 UTC Wednesday, June 24th, 2026.
>
> [ ] +1 Release this as Apache Avro 1.12.2
> [ ] +0
> [ ] -1 Do not release this because...
>
> Best regards,
> Ryan Skraba
> [Countdown to vote]:
> https://www.timeanddate.com/countdown/to?iso=20260624T180000&p0=1440
>

Reply via email to