+1 (binding) Verified the 5.0.1-candidate-2 release candidate:
* Source archive SHA-512 checksum matches the value stated in the call for vote (be1dfbda...89a), cross-checked against the .sha512 file in the dist dev directory and a fresh local download. * PGP signature is valid: "Good signature from Lari Hotari (CODE SIGNING KEY) <[email protected]>", verified against the official Pulsar KEYS file. * The v5.0.1-candidate-2 tag resolves to commit 9ef1a62af60850cfae91c386e8d3bf84aa401a5c, matching the call for vote. * Maven staging repository orgapachepulsar-1424 is accessible and contains the 5.0.1 artifacts (checksums and signatures present). * Source tarball layout is complete (LICENSE, NOTICE, README, Gradle build files all present). Thanks Lari for driving the release. Xiangying On Fri, Oct 23, 2026 at 1:26 PM PengHui Li <[email protected]> wrote: > > +1 > > I validated 5.0.1-candidate-2 and found no blocking issues in the checks > performed: > > - Verified the source and binary SHA-512 checksums, PGP signatures, and > signed Git tag. The source archive matches the tag. > - Built the source with JDK 21 using ./gradlew assemble rat, including a > rerun with build-cache reuse disabled. RAT reported no unapproved licenses. > - Passed 90 focused tests, including the candidate-2 compressed cursor > metadata regression and V5 client interoperability tests. > - Tested source-built and binary standalone services, Java 17 client/CLI > compatibility, pub/sub, redelivery, message recovery after restart, and > Java Functions. > - Tested the candidate Docker image on Linux ARM64. > > Thanks, > Penghui > > On Thu, Oct 22, 2026 at 3:44 PM Lari Hotari <[email protected]> wrote: > > > Hello Apache Pulsar Community, > > > > This is a call for the vote to release the Apache Pulsar version 5.0.1 > > based on 5.0.1-candidate-2. > > > > Included changes since the previous release: > > https://github.com/apache/pulsar/compare/v5.0.0...v5.0.1-candidate-2 > > > > *** Please download, test and vote on this release. This vote will stay > > open > > for at least 72 hours *** > > > > Only votes from PMC members are binding, but members of the community are > > encouraged to test the release and vote with "(non-binding)". > > > > Note that we are voting upon the source (tag), binaries are provided for > > convenience. > > > > The release candidate is available at: > > https://dist.apache.org/repos/dist/dev/pulsar/pulsar-5.0.1-candidate-2/ > > > > SHA-512 checksums: > > > > be1dfbda6ff1eb0ded4f4ab3a19a7cff19daf070055e325d41f40f2df00f780b25150dc54e8f32e9272bc783573edeb7683ca06422f3c817a3b864545610089a > > apache-pulsar-5.0.1-src.tar.gz > > > > 97baef9c5d04d906b1a5fb7b9a8905fd8f9db5e639c400bcedf0e5092dcde56d5b036bef4d9213fbe52fcc0030708689db1d7c8bffe13e4781d5659ca2637f27 > > apache-pulsar-5.0.1-bin.tar.gz > > > > Maven staging repo: > > https://repository.apache.org/content/repositories/orgapachepulsar-1424 > > > > The tag to be voted upon: > > v5.0.1-candidate-2 (commit 9ef1a62af60850cfae91c386e8d3bf84aa401a5c) > > https://github.com/apache/pulsar/releases/tag/v5.0.1-candidate-2 > > > > Pulsar's KEYS file containing PGP keys you use to sign the release: > > https://downloads.apache.org/pulsar/KEYS > > > > Docker images: > > docker pull lhotari/pulsar:5.0.1-9ef1a62 > > > > https://hub.docker.com/layers/lhotari/pulsar/5.0.1-9ef1a62/images/sha256-fb95bc2d73687ef7df3a21f3424a897860926e25303bd3857898ab887ead85c3 > > > > Please download the source package, and follow the README to build > > and run the Pulsar standalone service. > > > > More advanced release validation instructions can be found at > > https://pulsar.apache.org/contribute/validate-release-candidate/ > > > > Thanks, > > > > Lari Hotari > >
