+1 (binding) Verified the 2026-09-09 wave (38 providers) against https://dist.apache.org/repos/dist/dev/airflow/providers/2026-09-09
* Folder complete: 231 files = 38 x 6 + source trio; 77 .sha512 / 77 .asc, no double-extension leftovers. * SHA512: 77/77. * Signatures: 77/77 good, all on your key 1E7A857875E0EE49DB99E4431B17D6C5938CED00 (present in KEYS). * Reproducible builds: 77/77 byte-identical -- 76 wheels and sdists rebuilt from the providers/2026-09-09 tag (209e34c5022a78c7691ac68a50f60d976242e17d), plus the source tarball. * Licences: Apache RAT 0.18 -- 0 unapproved, 0 unknown (10146 standard files, all AL2.0). * All 38 rc tags point at the wave commit; 38/38 pyproject versions match their changelog tops; 38/38 PyPI rc pages resolve with wheel and sdist. I also tested my own changes in this wave (akeyless, fab, keycloak -- all security hardening), confirmed each is present in the shipped wheels rather than only at the tag, and ran their unit tests: 520 passed, 1 skipped. Ticked on https://github.com/apache/airflow/issues/72902 One non-blocking observation, pre-existing and unchanged since the 2026-08-18 wave: the source tarball ships two OFL-1.1 web fonts at registry/public/fonts/jetbrains-mono-latin.woff2 and registry/public/fonts/plus-jakarta-sans-latin.woff2 while the root LICENSE is bare AL2.0 with no third-party section. They are source-tarball only -- no provider wheel contains them -- so this is a LICENSE follow-up rather than a reason to re-cut. Cheers, Jarek --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
