+1 (binding) - Verified the signatures and checksums of all release files, and the signed tag - The source release matches the tag; built it from source on Ubuntu with JDK 8 - Compared the source, binary, staged Maven artifacts and Python packages with 1.20.5: all changes are expected - The Python wheels are byte-identical to the ones built by the project's CI from the tag - Started a local cluster and ran WordCount and a SQL Client query - Installed PyFlink (Python 3.10) and ran Table API and DataStream jobs - Checked the website PR
Best, Rui Yanquan Lv via dev <[email protected]> 于 2026年11月14日周六 12:09写道： > +1 (non-binding) > > I verified Apache Flink 1.20.6-rc3 (ATR revision 00007). > > - KEYS: Rui's key DD8E 6D70 0C7B 5D22 CEF7 11C5 57DD 44DE 3590 F304 is in > https://dist.apache.org/repos/dist/release/flink/KEYS and matches the > vote email. > > - Tag: release-1.20.6-rc3 is a GPG-signed tag pointing to > 9c8444ef4c32b89a91f42a3e28f33367e51a5aac; the signature verifies against > KEYS. > > - Python artifacts: the 12 wheels and the apache-flink sdist carry a good > signature from the key above and match their .sha512 files. > > - Source build: exported the tag and ran > ./mvnw clean install -DskipTests -Pskip-webui-build -T 1C > with JDK 8 and the bundled Maven 3.8.6. All 179 modules built > successfully > (~40 min), including the RAT check. > > - Staged Maven artifacts (orgapacheflink-1950): 130 modules, every jar has > a > signature. flink-core, flink-clients and flink-table-api-java are > identical to > what I built from the tag, except Built-By/Build-Jdk in > META-INF/MANIFEST.MF > (Created-By: Apache Maven 3.8.6 matches). > > - Binary distribution: the distribution produced by the from-source build > matches > flink-dist/src/main/assemblies/bin.xml > (LICENSE/README.txt/bin/conf/examples/ > lib with 13 jars/log/opt/plugins, no NOTICE at the root). > > - Python package provenance: the four manylinux wheels are byte-identical > to the > artifacts of GHA run 43379970724, and the Python sources inside the > wheels/sdist match the tag (0 differences over 216 files; only setup.cfg > in the > sdist differs). > > - Release notes / JIRA: all 46 issue keys in the announcement map to > commits in > the tag; RC3 differs from RC2 only by one YARN test commit. > > - flink-web#892 looks correct (version and download links). > > - CI: branch run 43378636579 is green. The failed job in the wheel build > run > 43379970724 is an infrastructure problem ("SSL peer shut down > incorrectly" > while downloading avatica-parent:1.11.0), not a code issue. > > Thanks Rui for driving the release! > > Yanquan > > fanrui.apache.org via dev <[email protected]> 于2026年11月13日周五 16:37写道： > > > Hi everyone, > > > > Please review and vote on the release candidate #3 for the version > > 1.20.6, as follows: > > [ ] +1, Approve the release > > [ ] -1, Do not approve the release (please provide specific comments) > > > > The complete staging area is available for your review, which includes: > > * JIRA release notes [1], > > * the official Apache source release and binary convenience releases, > > including the PyFlink source distributions and 12 wheels under > > python/, staged on Apache Trusted Releases (ATR) for review [2] and > > to be deployed to dist.apache.org, which are signed with the key with > > fingerprint DD8E 6D70 0C7B 5D22 CEF7 11C5 57DD 44DE 3590 F304 [3], > > * all artifacts to be deployed to the Maven Central Repository [4], > > * source code tag "release-1.20.6-rc3" [5], pointing to commit > > 9c8444ef4c32b89a91f42a3e28f33367e51a5aac, > > * website pull request listing the new release and adding the > > announcement blog post [6]. > > > > Every file of this candidate (ATR revision 00007) can be downloaded > > without login from > > https://releases.apache.org/download/path/flink/1.20.6/<file>, for > > example > > > https://releases.apache.org/download/path/flink/1.20.6/flink-1.20.6-src.tgz > > ; > > the complete file list is at [7]. > > > > The Python wheels were built by the GitHub Actions run [8] on the > > release commit. The CI run of the release branch commit the candidate > > is built on is [9]. > > > > To verify the candidate, please check the signatures and checksums > > against KEYS [3], build the source release (JDK 8, Maven 3.8.6 via the > > bundled ./mvnw), and follow the checklist in [10]. > > > > The vote will be open for at least 72 hours (excluding the weekend), > > until 2026-11-18 10:00 UTC. It is adopted by majority approval, with > > at least 3 PMC affirmative votes. > > > > Thanks, > > Rui > > > > [1] > > > https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12357158&projectId=12315522 > > [2] https://releases.apache.org/vote/flink/1.20.6 > > [3] https://dist.apache.org/repos/dist/release/flink/KEYS > > [4] > > https://repository.apache.org/content/repositories/orgapacheflink-1950/ > > [5] https://github.com/apache/flink/releases/tag/release-1.20.6-rc3 > > [6] https://github.com/apache/flink-web/pull/892 > > [7] > > > https://releases.apache.org/api/release/paths/flink/1.20.6/00007?limit=1000 > > [8] https://github.com/apache/flink/actions/runs/43379970724 > > [9] https://github.com/apache/flink/actions/runs/43378636579 > > [10] > > > https://cwiki.apache.org/confluence/display/FLINK/Verifying+a+Flink+Release > > > > This email was sent by [email protected] on the Apache Trusted Releases > > platform > > >
