It's interesting Martin, I still can't reproduce your failure -- and
I've given it a few tries!

These are the exact steps I've used to build the artifacts:

```
wget -qO- 
https://dist.apache.org/repos/dist/dev/avro/avro-1.12.2-rc1/avro-src-1.12.2.tar.gz
| gunzip | tar xvf -
cd avro-src-1.12.2/
git init
./build.sh docker
./build.sh clean test dist
```

On my hand, I've validated the Java artifacts with Iceberg and some
internal projects.

I have been trying to run some Python code, which is why I've delayed
my vote a bit, but it's all looking OK for the moment.

Has anybody else given some downstream ASF projects a try?

All  my best, Ryan

On Wed, 24 Jun 2026 at 12:49, Martin Grigorov <[email protected]> wrote:
>
> Hi,
>
> For me the Perl SDK keeps failing due to:
>
> => [11/25] RUN curl -sSL https://cpanmin.us | perl - --self-upgrade &&
> cpanm --mirror https://www.cpan.org/ install Compress::Zstd 110.7s
> => => # ! Download
> http://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7049.tar.gz
> failed. Retrying ...
>
> Because of this the Docker based testing fails ...
>
> I believe cpanminus fails because it uses HTTP instead of HTTPS:
>
> ❯
> curl
> -L
> https://cpanmin.us
> |
> perl
> -
> App::cpanminus
> % Total % Received % Xferd Average Speed Time Time Time Current Dload
> Upload Total Spent Left Speed 100 295k 100 295k 0 0 3730k 0 --:--:--
> --:--:-- --:--:-- 3698k ! ! Can't write to /Library/Perl/5.34 and
> /usr/local/bin: Installing modules to /Users/mgrigorov/perl5 ! To turn off
> this warning, you have to do one of the following: ! - run me as a root or
> with --sudo option (to install to /Library/Perl/5.34 and /usr/local/bin) !
> - Configure local::lib in your existing shell to set PERL_MM_OPT etc. ! -
> Install local::lib by running the following commands ! ! cpanm
> --local-lib=~/perl5 local::lib && eval $(perl -I ~/perl5/lib/perl5/
> -Mlocal::lib) ! --> Working on App::cpanminus Fetching
> http://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7049.tar.gz
> ... FAIL ! Download
> http://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7049.tar.gz
> failed. Retrying ... ! Download
> http://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7049.tar.gz
> failed. Retrying ... ! Download
> http://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7049.tar.gz
> failed. Retrying ... ! Failed to download
> http://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7049.tar.gz !
> Failed to fetch distribution App-cpanminus-1.7049
>
> and https://metacpan.org/pod/App::cpanminus has a Security Advisory at the
> top:
>
> CVE-2024-45321 (2024-08-27)
>
> The App::cpanminus package through 1.7047 for Perl downloads code via
> insecure HTTP, enabling code execution for network attackers.
>
>
>
>
>
> On Sat, Jun 20, 2026 at 8:06 PM Ryan Skraba <[email protected]> wrote:
>
> > Hi everyone,
> >
> > I'd like to propose the following RC1 to be released as the official Apache
> > Avro 1.12.2 release.
> >
> > The commit id is 3dd516fb146a8e733867ece19b15a01a37a68595
> > * This corresponds to the tag: release-1.12.2-rc1
> > * https://github.com/apache/avro/releases/tag/release-1.12.2-rc1
> >
> > The release tarball, signature, and checksums are here (revision 85347)
> > * https://dist.apache.org/repos/dist/dev/avro/avro-1.12.2-rc1/
> >
> > You can find the KEYS file here:
> > * https://dist.apache.org/repos/dist/dev/avro/KEYS
> >
> > Binary artifacts for Java are staged in Nexus here:
> > *
> > https://repository.apache.org/content/groups/staging/org/apache/avro/avro/1.12.2/
> >
> > This release includes ~30 Jira issues:
> > *
> > https://issues.apache.org/jira/issues/?jql=project%3DAVRO%20AND%20fixVersion%3D1.12.2
> >
> > I'll send a follow-up email with the notable highlights for each
> > language and SDK, but I wanted to give everyone a head start to
> > check their favourite fixed JIRAs and features!
> >
> > Please download, verify, and test. This vote will remain open for at least
> > 72 hours.  I would like to close at 18h00 UTC Wednesday, June 24th, 2026.
> >
> > [ ] +1 Release this as Apache Avro 1.12.2
> > [ ] +0
> > [ ] -1 Do not release this because...
> >
> > Best regards,
> > Ryan Skraba
> > [Countdown to vote]:
> > https://www.timeanddate.com/countdown/to?iso=20260624T180000&p0=1440
> >

Reply via email to