+1 (binding) I skipped the OWASP test (expecting it to break).
I did the following tests for the release candidate: - verified checksum and gpg signature of the artifacts - I built the source code (incl. the C-client, using -Pfull-build) on Ubuntu 22.04.5 using OpenJDK 8u402, maven 3.9.6 and GCC version 11.4.0 - all the java unit tests passed for me - all the C-client tests passed too - I also built and executed unit tests for zkpython - I also built the java code (without -Pfull-build) using other JDK versions: 11.0.28, 17.0.16, 21.0.8, 23.0.2 (but didn't run the tests this time, just used 'clean install -DskipTests') - checkstyle and spotbugs passed - apache-rat passed - fatjar built - I executed quick rolling-upgrade tests without SSL (using https://github.com/symat/zk-rolling-upgrade-test): - rolling upgrade from 3.6.4 to 3.9.7 RC0 - rolling upgrade from 3.7.2 to 3.9.7 RC0 - rolling upgrade from 3.8.7 to 3.9.7 RC0 - rolling upgrade from 3.8.8 RC0 to 3.9.7 RC0 - rolling upgrade from 3.9.6 to 3.9.7 RC0 - I am not sure if it is still relevant, but I checked the uploaded documentation ( https://dist.apache.org/repos/dist/dev/zookeeper/zookeeper-3.9.7-candidate-1/website/index.html ) - compared generated release notes ( https://dist.apache.org/repos/dist/dev/zookeeper/zookeeper-3.9.7-candidate-1/website/releasenotes.html) with Jira ( https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310801&version=12357529 ) On Mon, Oct 26, 2026 at 3:01 PM Patrick Hunt <[email protected]> wrote: > +1 - xsums/sigs verify, was able to build successfully and the license > files look ok. > > > On Thu, Oct 22, 2026 at 7:23 AM Andor Molnár <[email protected]> wrote: > > > Hi, > > > > This is a release candidate for 3.9.7. > > This is a minor release with bug- and security fixes. > > > > The full release notes is available at: > > > > > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310801&version=12357529 > > > > *** Please download, test and vote by October 30th 2026, 23:59 UTC+0. *** > > > > Source files: > > > > > https://dist.apache.org/repos/dist/dev/zookeeper/zookeeper-3.9.7-candidate-1/ > > > > Maven staging repo: > > > https://repository.apache.org/content/repositories/orgapachezookeeper-1121/ > > > > The release candidate tag in git to be voted upon: release-3.9.7-1 > > https://github.com/apache/zookeeper/tree/release-3.9.7-1 > > > > ZooKeeper's KEYS file containing PGP keys we use to sign the release: > > https://www.apache.org/dist/zookeeper/KEYS > > > > The staging version of the website is: > > > > > https://dist.apache.org/repos/dist/dev/zookeeper/zookeeper-3.9.7-candidate-1/website/index.html > > > > > > Should we release this candidate? > > > > Andor > > > > > > >
