+1 Ran the verification script and getting the same results as Caleb and Mick.
On 2025/10/16 06:55:00 Mick wrote: > +1 > > (same process as Caleb) > > > Checked > - signing correct > - checksums are correct > - source artefact builds (JDK 8+11) > - binary artefact runs (JDK 8+11) > - debian package runs (JDK 8+11) > - debian repo runs (JDK 8+11) > - redhat* package runs (JDK 8+11) > - redhat* repo runs (JDK 8+11) > > > > > On 16 Oct 2025, at 05:57, Caleb Rackliffe <[email protected]> wrote: > > > > +1 > > > > See verification script output below… > > > > Downloading KEYS > > Downloading > > https://repository.apache.org/content/repositories/orgapachecassandra-1421/org/apache/cassandra/cassandra-all/4.0.19 > > Downloading https://dist.apache.org/repos/dist/dev/cassandra/4.0.19/ > > > > ====== CHECK RESULTS ====== > > > > gpg: key F8358FA2F2833C93: 421 signatures not checked due to missing keys > > gpg: key F8358FA2F2833C93: "Eric Evans <[email protected]>" not changed > > gpg: key F8358FA2F2833C93: 443 signatures not checked due to missing keys > > gpg: key F8358FA2F2833C93: "Eric Evans <[email protected]>" not changed > > gpg: key F758CE318D77295D: 93 signatures not checked due to missing keys > > gpg: key F758CE318D77295D: "Eric Evans <[email protected]>" not changed > > gpg: key E91335D77E3E87CB: 2 signatures not checked due to missing keys > > gpg: key E91335D77E3E87CB: "Michael Semb Wever <[email protected]>" > > not changed > > gpg: key F1000962B7F6840C: "Alex Petrov <[email protected]>" not > > changed > > gpg: key D0062876AF30F054: "Jordan West <[email protected]>" not changed > > gpg: key 5E85B9AE0B84C041: "Brandon Williams <[email protected]>" > > not changed > > gpg: key 63E9BAD215BBF5F0: "Ekaterina Buryanova Dimitrova (CODE SIGNING > > KEY) <[email protected]>" not changed > > gpg: key 50EE103D162C5A55: "Sam Tunnicliffe (CODE SIGNING KEY) > > <[email protected]>" not changed > > gpg: key 32F35CB2F546D93E: "Stefan Miklosovic <[email protected]>" not > > changed > > gpg: key 650B72EB14CCD622: "Berenguer Blasi (Code Signing Key) > > <[email protected]>" not changed > > gpg: key 3B6042413D323470: "Dinesh A. Joshi <[email protected]>" not changed > > gpg: key B6E83A2D2E447E56: "Bret McGuire (ASF) <[email protected]>" > > not changed > > gpg: key 277B602ED2C52277: "Doug Rohrer (RSA CODE SIGNING KEY) > > <[email protected]>" not changed > > gpg: key 80083B749CE192F5: "Andrew Tolbert (CODE SIGNING KEY) > > <[email protected]>" not changed > > gpg: key DFCB6EEAC588E28D: "Francisco Guerrero <[email protected]>" not > > changed > > gpg: key 5822297F68AE605F: "Francisco Guerrero (CODE SIGNING KEY) > > <[email protected]>" not changed > > gpg: key FC806A59EDDF405C: "Bernardo Botella Corbi (Apache Software > > Foundation Key) <[email protected]>" not changed > > gpg: key CE0ED1BE38958C64: "Jo\C3\A3o Reis (ASF) <[email protected]>" not > > changed > > gpg: Total number processed: 19 > > gpg: unchanged: 19 > > gpg: assuming signed data in 'cassandra-all-4.0.19.jar' > > gpg: Signature made Tue 14 Oct 2025 02:38:49 PM CDT > > gpg: using RSA key A4C465FEA0C552561A392A61E91335D77E3E87CB > > gpg: Good signature from "Michael Semb Wever <[email protected]>" > > [unknown] > > gpg: aka "Michael Semb Wever <[email protected]>" [unknown] > > gpg: WARNING: This key is not certified with a trusted signature! > > gpg: There is no indication that the signature belongs to the > > owner. > > Primary key fingerprint: A4C4 65FE A0C5 5256 1A39 2A61 E913 35D7 7E3E 87CB > > gpg: assuming signed data in 'cassandra-all-4.0.19-javadoc.jar' > > gpg: Signature made Tue 14 Oct 2025 02:39:01 PM CDT > > gpg: using RSA key A4C465FEA0C552561A392A61E91335D77E3E87CB > > gpg: Good signature from "Michael Semb Wever <[email protected]>" > > [unknown] > > gpg: aka "Michael Semb Wever <[email protected]>" [unknown] > > gpg: WARNING: This key is not certified with a trusted signature! > > gpg: There is no indication that the signature belongs to the > > owner. > > Primary key fingerprint: A4C4 65FE A0C5 5256 1A39 2A61 E913 35D7 7E3E 87CB > > gpg: assuming signed data in 'cassandra-all-4.0.19.pom' > > gpg: Signature made Tue 14 Oct 2025 02:39:02 PM CDT > > gpg: using RSA key A4C465FEA0C552561A392A61E91335D77E3E87CB > > gpg: Good signature from "Michael Semb Wever <[email protected]>" > > [unknown] > > gpg: aka "Michael Semb Wever <[email protected]>" [unknown] > > gpg: WARNING: This key is not certified with a trusted signature! > > gpg: There is no indication that the signature belongs to the > > owner. > > Primary key fingerprint: A4C4 65FE A0C5 5256 1A39 2A61 E913 35D7 7E3E 87CB > > gpg: assuming signed data in 'cassandra-all-4.0.19-sources.jar' > > gpg: Signature made Tue 14 Oct 2025 02:38:55 PM CDT > > gpg: using RSA key A4C465FEA0C552561A392A61E91335D77E3E87CB > > gpg: Good signature from "Michael Semb Wever <[email protected]>" > > [unknown] > > gpg: aka "Michael Semb Wever <[email protected]>" [unknown] > > gpg: WARNING: This key is not certified with a trusted signature! > > gpg: There is no indication that the signature belongs to the > > owner. > > Primary key fingerprint: A4C4 65FE A0C5 5256 1A39 2A61 E913 35D7 7E3E 87CB > > sha1: cassandra-all-4.0.19.pom: OK > > md5: cassandra-all-4.0.19.pom: OK > > sha1: cassandra-all-4.0.19.jar: OK > > md5: cassandra-all-4.0.19.jar: OK > > sha1: cassandra-all-4.0.19-javadoc.jar: OK > > md5: cassandra-all-4.0.19-javadoc.jar: OK > > sha1: cassandra-all-4.0.19-sources.jar: OK > > md5: cassandra-all-4.0.19-sources.jar: OK > > sha1: cassandra-all-4.0.19.jar.asc: OK > > md5: cassandra-all-4.0.19.jar.asc: OK > > sha1: cassandra-all-4.0.19-javadoc.jar.asc: OK > > md5: cassandra-all-4.0.19-javadoc.jar.asc: OK > > sha1: cassandra-all-4.0.19.pom.asc: OK > > md5: cassandra-all-4.0.19.pom.asc: OK > > sha1: cassandra-all-4.0.19-sources.jar.asc: OK > > md5: cassandra-all-4.0.19-sources.jar.asc: OK > > gpg: assuming signed data in 'apache-cassandra-4.0.19-bin.tar.gz' > > gpg: Signature made Tue 14 Oct 2025 02:39:08 PM CDT > > gpg: using RSA key A4C465FEA0C552561A392A61E91335D77E3E87CB > > gpg: Good signature from "Michael Semb Wever <[email protected]>" > > [unknown] > > gpg: aka "Michael Semb Wever <[email protected]>" [unknown] > > gpg: WARNING: This key is not certified with a trusted signature! > > gpg: There is no indication that the signature belongs to the > > owner. > > Primary key fingerprint: A4C4 65FE A0C5 5256 1A39 2A61 E913 35D7 7E3E 87CB > > gpg: assuming signed data in 'apache-cassandra-4.0.19-src.tar.gz' > > gpg: Signature made Tue 14 Oct 2025 02:39:12 PM CDT > > gpg: using RSA key A4C465FEA0C552561A392A61E91335D77E3E87CB > > gpg: Good signature from "Michael Semb Wever <[email protected]>" > > [unknown] > > gpg: aka "Michael Semb Wever <[email protected]>" [unknown] > > gpg: WARNING: This key is not certified with a trusted signature! > > gpg: There is no indication that the signature belongs to the > > owner. > > Primary key fingerprint: A4C4 65FE A0C5 5256 1A39 2A61 E913 35D7 7E3E 87CB > > sha256: apache-cassandra-4.0.19-bin.tar.gz: OK > > sha512:apache-cassandra-4.0.19-bin.tar.gz: OK > > sha256: apache-cassandra-4.0.19-src.tar.gz: OK > > sha512:apache-cassandra-4.0.19-src.tar.gz: OK > > > > Source build (JDK 8) OK > > Binary artefact (JDK 8) OK > > Debian package (JDK 8) OK > > Debian repository (JDK 8) OK > > Redhat package (almalinux JDK 8) OK > > Redhat repository (almalinux JDK 8) OK > > Redhat package (noboolean JDK 8) OK > > Redhat repository (noboolean JDK 8) OK > > > > Source build (JDK 11) OK > > > > OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated > > in version 9.0 and will likely be removed in a future release. > > Binary artefact (JDK 11) OK > > > > OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated > > in version 9.0 and will likely be removed in a future release. > > > > Debian package (JDK 11) OK > > > > OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated > > in version 9.0 and will likely be removed in a future release. > > Debian repository (JDK 11) OK > > > > OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated > > in version 9.0 and will likely be removed in a future release. > > Redhat package (almalinux JDK 11) OK > > > > OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated > > in version 9.0 and will likely be removed in a future release. > > cRedhat repository (almalinux JDK 11) OK > > > > OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated > > in version 9.0 and will likely be removed in a future release. > > Redhat package (noboolean JDK 11) OK > > > > OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated > > in version 9.0 and will likely be removed in a future release. > > Redhat repository (noboolean JDK 11) OK > > > > Done. > > > >> On Oct 15, 2025, at 3:20 PM, Mick <[email protected]> wrote: > >> > >> > >> Proposing the test build of Cassandra 4.0.19 for release. > >> > >> sha1: 45fa31beb44c12b01d1e6a8cca1565650f5b1c98 > >> Git: https://github.com/apache/cassandra/tree/4.0.19-tentative > >> Maven Artifacts: > >> https://repository.apache.org/content/repositories/orgapachecassandra-1421/org/apache/cassandra/cassandra-all/4.0.19/ > >> > >> The Source and Build Artifacts, and the Debian and RPM packages and > >> repositories, are available here: > >> https://dist.apache.org/repos/dist/dev/cassandra/4.0.19/ > >> > >> The vote will be open for 72 hours (longer if needed). Everyone who has > >> tested the build is invited to vote. Votes by PMC members are considered > >> binding. A vote passes if there are at least three binding +1s and no -1's. > >> > >> [1]: CHANGES.txt: > >> https://github.com/apache/cassandra/blob/4.0.19-tentative/CHANGES.txt > >> [2]: NEWS.txt: > >> https://github.com/apache/cassandra/blob/4.0.19-tentative/NEWS.txt > >
