Hi all,

Attempts to build RC0 failed for me (tox installed some dependencies only
partially). Building RC1 succeeds for me.

I think we should push through, release this and consider doing a
> major 1.13.0 release (and another minor release) in the next quarter.

I agree.


Kind regards,
Oscar

On Wed, 24 Jun 2026 at 12:49, Martin Grigorov <[email protected]> wrote:

> Hi,
>
> For me the Perl SDK keeps failing due to:
>
> => [11/25] RUN curl -sSL https://cpanmin.us | perl - --self-upgrade &&
> cpanm --mirror https://www.cpan.org/ install Compress::Zstd 110.7s
> => => # ! Download
> http://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7049.tar.gz
> failed. Retrying ...
>
> Because of this the Docker based testing fails ...
>
> I believe cpanminus fails because it uses HTTP instead of HTTPS:
>
> ❯
> curl
> -L
> https://cpanmin.us
> |
> perl
> -
> App::cpanminus
> % Total % Received % Xferd Average Speed Time Time Time Current Dload
> Upload Total Spent Left Speed 100 295k 100 295k 0 0 3730k 0 --:--:--
> --:--:-- --:--:-- 3698k ! ! Can't write to /Library/Perl/5.34 and
> /usr/local/bin: Installing modules to /Users/mgrigorov/perl5 ! To turn off
> this warning, you have to do one of the following: ! - run me as a root or
> with --sudo option (to install to /Library/Perl/5.34 and /usr/local/bin) !
> - Configure local::lib in your existing shell to set PERL_MM_OPT etc. ! -
> Install local::lib by running the following commands ! ! cpanm
> --local-lib=~/perl5 local::lib && eval $(perl -I ~/perl5/lib/perl5/
> -Mlocal::lib) ! --> Working on App::cpanminus Fetching
> http://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7049.tar.gz
> ... FAIL ! Download
> http://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7049.tar.gz
> failed. Retrying ... ! Download
> http://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7049.tar.gz
> failed. Retrying ... ! Download
> http://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7049.tar.gz
> failed. Retrying ... ! Failed to download
> http://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7049.tar.gz !
> Failed to fetch distribution App-cpanminus-1.7049
>
> and https://metacpan.org/pod/App::cpanminus has a Security Advisory at the
> top:
>
> CVE-2024-45321 (2024-08-27)
>
> The App::cpanminus package through 1.7047 for Perl downloads code via
> insecure HTTP, enabling code execution for network attackers.
>
>
>
>
>
> On Sat, Jun 20, 2026 at 8:06 PM Ryan Skraba <[email protected]> wrote:
>
> > Hi everyone,
> >
> > I'd like to propose the following RC1 to be released as the official
> Apache
> > Avro 1.12.2 release.
> >
> > The commit id is 3dd516fb146a8e733867ece19b15a01a37a68595
> > * This corresponds to the tag: release-1.12.2-rc1
> > * https://github.com/apache/avro/releases/tag/release-1.12.2-rc1
> >
> > The release tarball, signature, and checksums are here (revision 85347)
> > * https://dist.apache.org/repos/dist/dev/avro/avro-1.12.2-rc1/
> >
> > You can find the KEYS file here:
> > * https://dist.apache.org/repos/dist/dev/avro/KEYS
> >
> > Binary artifacts for Java are staged in Nexus here:
> > *
> >
> https://repository.apache.org/content/groups/staging/org/apache/avro/avro/1.12.2/
> >
> > This release includes ~30 Jira issues:
> > *
> >
> https://issues.apache.org/jira/issues/?jql=project%3DAVRO%20AND%20fixVersion%3D1.12.2
> >
> > I'll send a follow-up email with the notable highlights for each
> > language and SDK, but I wanted to give everyone a head start to
> > check their favourite fixed JIRAs and features!
> >
> > Please download, verify, and test. This vote will remain open for at
> least
> > 72 hours.  I would like to close at 18h00 UTC Wednesday, June 24th, 2026.
> >
> > [ ] +1 Release this as Apache Avro 1.12.2
> > [ ] +0
> > [ ] -1 Do not release this because...
> >
> > Best regards,
> > Ryan Skraba
> > [Countdown to vote]:
> > https://www.timeanddate.com/countdown/to?iso=20260624T180000&p0=1440
> >
>


-- 

✉️ Oscar Westra van Holthe - Kind <[email protected]>

Reply via email to