Hello, Apologies for the late response to this thread. While not related to the vote, I do have a related question about administration of releases such as this. I notice:
1. There is no 8.0.1 release notes [1] - should this be added? It's worth noting that no release notes currently reference ARROW-16759. Given this issue was sufficiently critical to warrant an 8.0.1 release, I suspect we would want to ensure it appears in release notes somewhere. 2. There is no 8.0.1 documentation [2] - should this be generated? I suspect not, given there is no change in functionality (or docs contents). I will note that lack of documentation could cause (Go) user confusion, if they find they are using a version 8.0.1 and are presented with documentation for 8.0.0. [1] https://arrow.apache.org/release/ [2] https://arrow.apache.org/docs/index.html (see version selector drop-down) Thanks, Todd On Mon, Jul 18, 2022 at 7:04 PM Sutou Kouhei <k...@clear-code.com> wrote: > Hi, > > I've released 8.0.1: > > * I've published > https://dist.apache.org/repos/dist/release/arrow/arrow-8.0.1/ > * I've pushed the > https://github.com/apache/arrow/releases/tag/go%2Fv8.0.1 > tag > * I've made the "8.0.1" version on JIRA "released": > https://issues.apache.org/jira/projects/ARROW/versions/12352081 > * I've added 8.0.1 entry to Apache Committee Report by > https://reporter.apache.org/addrelease.html?arrow > > Thanks, > -- > kou > > In <20220719.093100.685134697791841749....@clear-code.com> > "[RESULT][VOTE] Release Apache Arrow 8.0.1 - RC0" on Tue, 19 Jul 2022 > 09:31:00 +0900 (JST), > Sutou Kouhei <k...@clear-code.com> wrote: > > > Hi, > > > > The vote carries with 4 +1 binding votes and 2 +1 > > non-binding votes. > > > > I'll publish this as 8.0.1. > > > > Thanks, > > -- > > kou > > > > In <20220715.061057.1116573445635493266....@clear-code.com> > > "[VOTE] Release Apache Arrow 8.0.1 - RC0" on Fri, 15 Jul 2022 06:10:57 > +0900 (JST), > > Sutou Kouhei <k...@clear-code.com> wrote: > > > >> Hi, > >> > >> I would like to propose the following release candidate > >> (RC0) of Apache Arrow version 8.0.1. This is a release > >> consisting of 1 resolved JIRA issues[1]. > >> > >> This is one of releases[2] that focus on a Go related > >> security vulnerability[3]. We don't publish binary artifacts > >> of this release because we don't have Go related binaries. > >> > >> This release candidate is based on commit: > >> 9966c39583f1e203bac9200753e9db32478d43a6 [4] > >> > >> The source release rc0 is hosted at [5]. > >> The changelog is located at [6]. > >> > >> Please download, verify checksums and signatures, run the > >> unit tests, and vote on the release. See [7] for how to > >> validate a release candidate. But you need to verify only Go > >> related tests because this release candidate only includes a > >> change for Go. So we can use the following command line: > >> > >> TEST_DEFAULT=0 TEST_GO=1 dev/release/verify-release-candidate.sh > 8.0.1 0 > >> > >> The vote will be open for at least 72 hours. > >> > >> [ ] +1 Release this as Apache Arrow 8.0.1 > >> [ ] +0 > >> [ ] -1 Do not release this as Apache Arrow 8.0.1 because... > >> > >> [1]: > https://issues.apache.org/jira/issues/?jql=project%20%3D%20ARROW%20AND%20status%20in%20%28Resolved%2C%20Closed%29%20AND%20fixVersion%20%3D%208.0.1 > >> [2] https://lists.apache.org/thread/qkkzpvmxc0coqhdkc1qoygwy6h4v5sgn > >> [3] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28948 > >> [4]: > https://github.com/apache/arrow/tree/9966c39583f1e203bac9200753e9db32478d43a6 > >> [5]: > https://dist.apache.org/repos/dist/dev/arrow/apache-arrow-8.0.1-rc0 > >> [6]: > https://github.com/apache/arrow/blob/9966c39583f1e203bac9200753e9db32478d43a6/CHANGELOG.md > >> [7]: > https://cwiki.apache.org/confluence/display/ARROW/How+to+Verify+Release+Candidates >
