[VOTE] Release 1.10.3, release candidate #1

[Xintong Song-2]

Hi everyone,

Please review and vote on the release candidate #1 for the version 1.10.3,
as follows:

[ ] +1, Approve the release
[ ] -1, Do not approve the release (please provide specific comments)

The complete staging area is available for your review, which includes:
* JIRA release notes [1],
* the official Apache source release and binary convenience releases to be
deployed to dist.apache.org [2], which are signed with the key with
fingerprint F8E419AA0B60C28879E876859DFF40967ABFC5A4 [3],
* all artifacts to be deployed to the Maven Central Repository [4],
* source code tag "release-1.10.3-rc1" [5],
* website pull request listing the new release and adding announcement blog
post [6].

The vote will be open for at least 72 hours. It is adopted by majority
approval, with at least 3 PMC affirmative votes.

Thanks,
Xintong Song

[1]
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12315522&version=12348668
[2] https://dist.apache.org/repos/dist/dev/flink/flink-1.10.3-rc1
[3] https://dist.apache.org/repos/dist/release/flink/KEYS
[4] https://repository.apache.org/content/repositories/orgapacheflink-1412
[5] https://github.com/apache/flink/releases/tag/release-1.10.3-rc1
[6] https://github.com/apache/flink-web/pull/413

[Matthias]

+1 (non-binding)

- verified checksums
- build Flink from the provided source code
- double-checked that the security fix is included in the source code
- started the a local Flink cluster and ran a job checking the logs for
exceptions
- verified that CVE-2020-17518 cannot be reproduced using the Flink
binaries

Thanks for driving this, Xintong!

On Thu, Jan 21, 2021 at 2:50 AM Xintong Song <[hidden email]> wrote:

> Hi everyone,
>
> Please review and vote on the release candidate #1 for the version 1.10.3,
> as follows:
>
> [ ] +1, Approve the release
> [ ] -1, Do not approve the release (please provide specific comments)
>
> The complete staging area is available for your review, which includes:
> * JIRA release notes [1],
> * the official Apache source release and binary convenience releases to be
> deployed to dist.apache.org [2], which are signed with the key with
> fingerprint F8E419AA0B60C28879E876859DFF40967ABFC5A4 [3],
> * all artifacts to be deployed to the Maven Central Repository [4],
> * source code tag "release-1.10.3-rc1" [5],
> * website pull request listing the new release and adding announcement blog
> post [6].
>
> The vote will be open for at least 72 hours. It is adopted by majority
> approval, with at least 3 PMC affirmative votes.
>
> Thanks,
> Xintong Song
>
> [1]
>
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12315522&version=12348668
> [2] https://dist.apache.org/repos/dist/dev/flink/flink-1.10.3-rc1
> [3] https://dist.apache.org/repos/dist/release/flink/KEYS
> [4] https://repository.apache.org/content/repositories/orgapacheflink-1412
> [5] https://github.com/apache/flink/releases/tag/release-1.10.3-rc1
> [6] https://github.com/apache/flink-web/pull/413
>

--

Matthias Pohl | Engineer

Follow us @VervericaData Ververica <https://www.ververica.com/>

--

Join Flink Forward <https://flink-forward.org/> - The Apache Flink
Conference

Stream Processing | Event Driven | Real Time

--

Ververica GmbH | Invalidenstrasse 115, 10115 Berlin, Germany

--
Ververica GmbH
Registered at Amtsgericht Charlottenburg: HRB 158244 B
Managing Directors: Yip Park Tung Jason, Jinwei (Kevin) Zhang, Karl Anton
Wehner

[Leonard Xu]

+1 (non-binding)

- checked/verified signatures and checksums
- built from source code succeeded
- checked that there are no missed dependency artifacts
- started a cluster, WebUI was accessible, ran a wordcount job , no suspicious log output
- tested using SQL Client to submit a simple SQL job and the query result is expected
- the web PR LGTM


Best,
Leonard

> 在 2021年1月21日，23:13，Matthias Pohl <[hidden email]> 写道：
>
> +1 (non-binding)
>
> - verified checksums
> - build Flink from the provided source code
> - double-checked that the security fix is included in the source code
> - started the a local Flink cluster and ran a job checking the logs for
> exceptions
> - verified that CVE-2020-17518 cannot be reproduced using the Flink
> binaries
>
> Thanks for driving this, Xintong!
>
> On Thu, Jan 21, 2021 at 2:50 AM Xintong Song <[hidden email]> wrote:
>
>> Hi everyone,
>>
>> Please review and vote on the release candidate #1 for the version 1.10.3,
>> as follows:
>>
>> [ ] +1, Approve the release
>> [ ] -1, Do not approve the release (please provide specific comments)
>>
>> The complete staging area is available for your review, which includes:
>> * JIRA release notes [1],
>> * the official Apache source release and binary convenience releases to be
>> deployed to dist.apache.org [2], which are signed with the key with
>> fingerprint F8E419AA0B60C28879E876859DFF40967ABFC5A4 [3],
>> * all artifacts to be deployed to the Maven Central Repository [4],
>> * source code tag "release-1.10.3-rc1" [5],
>> * website pull request listing the new release and adding announcement blog
>> post [6].
>>
>> The vote will be open for at least 72 hours. It is adopted by majority
>> approval, with at least 3 PMC affirmative votes.
>>
>> Thanks,
>> Xintong Song
>>
>> [1]
>>
>> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12315522&version=12348668
>> [2] https://dist.apache.org/repos/dist/dev/flink/flink-1.10.3-rc1
>> [3] https://dist.apache.org/repos/dist/release/flink/KEYS
>> [4] https://repository.apache.org/content/repositories/orgapacheflink-1412
>> [5] https://github.com/apache/flink/releases/tag/release-1.10.3-rc1
>> [6] https://github.com/apache/flink-web/pull/413
>>
>
>
> --
>
> Matthias Pohl | Engineer
>
> Follow us @VervericaData Ververica <https://www.ververica.com/>
>
> --
>
> Join Flink Forward <https://flink-forward.org/> - The Apache Flink
> Conference
>
> Stream Processing | Event Driven | Real Time
>
> --
>
> Ververica GmbH | Invalidenstrasse 115, 10115 Berlin, Germany
>
> --
> Ververica GmbH
> Registered at Amtsgericht Charlottenburg: HRB 158244 B
> Managing Directors: Yip Park Tung Jason, Jinwei (Kevin) Zhang, Karl Anton
> Wehner

[Yang Wang]

+1 (non-binding)

- checked/verified signatures and checksums
- build Flink from the attached source code
- started a Yarn per-job/session cluster
- check webUI is normal and no suspicious logs and exceptions

Best,
Yang

Leonard Xu <[hidden email]> 于2021年1月25日周一 上午10:31写道：

> +1 (non-binding)
>
> - checked/verified signatures and checksums
> - built from source code succeeded
> - checked that there are no missed dependency artifacts
> - started a cluster, WebUI was accessible, ran a wordcount job , no
> suspicious log output
> - tested using SQL Client to submit a simple SQL job and the query result
> is expected
> - the web PR LGTM
>
>
> Best,
> Leonard
>
> > 在 2021年1月21日，23:13，Matthias Pohl <[hidden email]> 写道：
> >
> > +1 (non-binding)
> >
> > - verified checksums
> > - build Flink from the provided source code
> > - double-checked that the security fix is included in the source code
> > - started the a local Flink cluster and ran a job checking the logs for
> > exceptions
> > - verified that CVE-2020-17518 cannot be reproduced using the Flink
> > binaries
> >
> > Thanks for driving this, Xintong!
> >
> > On Thu, Jan 21, 2021 at 2:50 AM Xintong Song <[hidden email]> wrote:
> >
> >> Hi everyone,
> >>
> >> Please review and vote on the release candidate #1 for the version
> 1.10.3,
> >> as follows:
> >>
> >> [ ] +1, Approve the release
> >> [ ] -1, Do not approve the release (please provide specific comments)
> >>
> >> The complete staging area is available for your review, which includes:
> >> * JIRA release notes [1],
> >> * the official Apache source release and binary convenience releases to
> be
> >> deployed to dist.apache.org [2], which are signed with the key with
> >> fingerprint F8E419AA0B60C28879E876859DFF40967ABFC5A4 [3],
> >> * all artifacts to be deployed to the Maven Central Repository [4],
> >> * source code tag "release-1.10.3-rc1" [5],
> >> * website pull request listing the new release and adding announcement
> blog
> >> post [6].
> >>
> >> The vote will be open for at least 72 hours. It is adopted by majority
> >> approval, with at least 3 PMC affirmative votes.
> >>
> >> Thanks,
> >> Xintong Song
> >>
> >> [1]
> >>
> >>
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12315522&version=12348668
> >> [2] https://dist.apache.org/repos/dist/dev/flink/flink-1.10.3-rc1
> >> [3] https://dist.apache.org/repos/dist/release/flink/KEYS
> >> [4]
> https://repository.apache.org/content/repositories/orgapacheflink-1412
> >> [5] https://github.com/apache/flink/releases/tag/release-1.10.3-rc1
> >> [6] https://github.com/apache/flink-web/pull/413
> >>
> >
> >
> > --
> >
> > Matthias Pohl | Engineer
> >
> > Follow us @VervericaData Ververica <https://www.ververica.com/>
> >
> > --
> >
> > Join Flink Forward <https://flink-forward.org/> - The Apache Flink
> > Conference
> >
> > Stream Processing | Event Driven | Real Time
> >
> > --
> >
> > Ververica GmbH | Invalidenstrasse 115, 10115 Berlin, Germany
> >
> > --
> > Ververica GmbH
> > Registered at Amtsgericht Charlottenburg: HRB 158244 B
> > Managing Directors: Yip Park Tung Jason, Jinwei (Kevin) Zhang, Karl Anton
> > Wehner
>
>

[Robert Metzger]

+1 (binding)

- checked the diff between 1.10.2 and 1.10.3:
https://github.com/apache/flink/compare/release-1.10.2...release-1.10.3-rc1
  - I didn't spot any dependency changes
- the ci builds for the 1.10 branch seem to be pretty stable:
https://travis-ci.com/github/apache/flink/builds
- the jars in the staging repo seem fine
- approved the website updates
- binary archive seems fine.

Thanks a lot for putting the RC together!


On Mon, Jan 25, 2021 at 11:30 AM Yang Wang <[hidden email]> wrote:

> +1 (non-binding)
>
> - checked/verified signatures and checksums
> - build Flink from the attached source code
> - started a Yarn per-job/session cluster
> - check webUI is normal and no suspicious logs and exceptions
>
> Best,
> Yang
>
> Leonard Xu <[hidden email]> 于2021年1月25日周一 上午10:31写道：
>
> > +1 (non-binding)
> >
> > - checked/verified signatures and checksums
> > - built from source code succeeded
> > - checked that there are no missed dependency artifacts
> > - started a cluster, WebUI was accessible, ran a wordcount job , no
> > suspicious log output
> > - tested using SQL Client to submit a simple SQL job and the query result
> > is expected
> > - the web PR LGTM
> >
> >
> > Best,
> > Leonard
> >
> > > 在 2021年1月21日，23:13，Matthias Pohl <[hidden email]> 写道：
> > >
> > > +1 (non-binding)
> > >
> > > - verified checksums
> > > - build Flink from the provided source code
> > > - double-checked that the security fix is included in the source code
> > > - started the a local Flink cluster and ran a job checking the logs for
> > > exceptions
> > > - verified that CVE-2020-17518 cannot be reproduced using the Flink
> > > binaries
> > >
> > > Thanks for driving this, Xintong!
> > >
> > > On Thu, Jan 21, 2021 at 2:50 AM Xintong Song <[hidden email]>
> wrote:
> > >
> > >> Hi everyone,
> > >>
> > >> Please review and vote on the release candidate #1 for the version
> > 1.10.3,
> > >> as follows:
> > >>
> > >> [ ] +1, Approve the release
> > >> [ ] -1, Do not approve the release (please provide specific comments)
> > >>
> > >> The complete staging area is available for your review, which
> includes:
> > >> * JIRA release notes [1],
> > >> * the official Apache source release and binary convenience releases
> to
> > be
> > >> deployed to dist.apache.org [2], which are signed with the key with
> > >> fingerprint F8E419AA0B60C28879E876859DFF40967ABFC5A4 [3],
> > >> * all artifacts to be deployed to the Maven Central Repository [4],
> > >> * source code tag "release-1.10.3-rc1" [5],
> > >> * website pull request listing the new release and adding announcement
> > blog
> > >> post [6].
> > >>
> > >> The vote will be open for at least 72 hours. It is adopted by majority
> > >> approval, with at least 3 PMC affirmative votes.
> > >>
> > >> Thanks,
> > >> Xintong Song
> > >>
> > >> [1]
> > >>
> > >>
> >
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12315522&version=12348668
> > >> [2] https://dist.apache.org/repos/dist/dev/flink/flink-1.10.3-rc1
> > >> [3] https://dist.apache.org/repos/dist/release/flink/KEYS
> > >> [4]
> > https://repository.apache.org/content/repositories/orgapacheflink-1412
> > >> [5] https://github.com/apache/flink/releases/tag/release-1.10.3-rc1
> > >> [6] https://github.com/apache/flink-web/pull/413
> > >>
> > >
> > >
> > > --
> > >
> > > Matthias Pohl | Engineer
> > >
> > > Follow us @VervericaData Ververica <https://www.ververica.com/>
> > >
> > > --
> > >
> > > Join Flink Forward <https://flink-forward.org/> - The Apache Flink
> > > Conference
> > >
> > > Stream Processing | Event Driven | Real Time
> > >
> > > --
> > >
> > > Ververica GmbH | Invalidenstrasse 115, 10115 Berlin, Germany
> > >
> > > --
> > > Ververica GmbH
> > > Registered at Amtsgericht Charlottenburg: HRB 158244 B
> > > Managing Directors: Yip Park Tung Jason, Jinwei (Kevin) Zhang, Karl
> Anton
> > > Wehner
> >
> >
>

[Zhu Zhu]

+1 (binding)
- checked signatures and checksums
- built from source
- ran streaming/batch jobs on a YARN cluster. checked output and logs.
- the web PR looks good

Thanks,
Zhu

Robert Metzger <[hidden email]> 于2021年1月25日周一 下午9:42写道：

> +1 (binding)
>
> - checked the diff between 1.10.2 and 1.10.3:
> https://github.com/apache/flink/compare/release-1.10.2...release-1.10.3-rc1
>   - I didn't spot any dependency changes
> - the ci builds for the 1.10 branch seem to be pretty stable:
> https://travis-ci.com/github/apache/flink/builds
> - the jars in the staging repo seem fine
> - approved the website updates
> - binary archive seems fine.
>
> Thanks a lot for putting the RC together!
>
>
> On Mon, Jan 25, 2021 at 11:30 AM Yang Wang <[hidden email]> wrote:
>
> > +1 (non-binding)
> >
> > - checked/verified signatures and checksums
> > - build Flink from the attached source code
> > - started a Yarn per-job/session cluster
> > - check webUI is normal and no suspicious logs and exceptions
> >
> > Best,
> > Yang
> >
> > Leonard Xu <[hidden email]> 于2021年1月25日周一 上午10:31写道：
> >
> > > +1 (non-binding)
> > >
> > > - checked/verified signatures and checksums
> > > - built from source code succeeded
> > > - checked that there are no missed dependency artifacts
> > > - started a cluster, WebUI was accessible, ran a wordcount job , no
> > > suspicious log output
> > > - tested using SQL Client to submit a simple SQL job and the query
> result
> > > is expected
> > > - the web PR LGTM
> > >
> > >
> > > Best,
> > > Leonard
> > >
> > > > 在 2021年1月21日，23:13，Matthias Pohl <[hidden email]> 写道：
> > > >
> > > > +1 (non-binding)
> > > >
> > > > - verified checksums
> > > > - build Flink from the provided source code
> > > > - double-checked that the security fix is included in the source code
> > > > - started the a local Flink cluster and ran a job checking the logs
> for
> > > > exceptions
> > > > - verified that CVE-2020-17518 cannot be reproduced using the Flink
> > > > binaries
> > > >
> > > > Thanks for driving this, Xintong!
> > > >
> > > > On Thu, Jan 21, 2021 at 2:50 AM Xintong Song <[hidden email]>
> > wrote:
> > > >
> > > >> Hi everyone,
> > > >>
> > > >> Please review and vote on the release candidate #1 for the version
> > > 1.10.3,
> > > >> as follows:
> > > >>
> > > >> [ ] +1, Approve the release
> > > >> [ ] -1, Do not approve the release (please provide specific
> comments)
> > > >>
> > > >> The complete staging area is available for your review, which
> > includes:
> > > >> * JIRA release notes [1],
> > > >> * the official Apache source release and binary convenience releases
> > to
> > > be
> > > >> deployed to dist.apache.org [2], which are signed with the key with
> > > >> fingerprint F8E419AA0B60C28879E876859DFF40967ABFC5A4 [3],
> > > >> * all artifacts to be deployed to the Maven Central Repository [4],
> > > >> * source code tag "release-1.10.3-rc1" [5],
> > > >> * website pull request listing the new release and adding
> announcement
> > > blog
> > > >> post [6].
> > > >>
> > > >> The vote will be open for at least 72 hours. It is adopted by
> majority
> > > >> approval, with at least 3 PMC affirmative votes.
> > > >>
> > > >> Thanks,
> > > >> Xintong Song
> > > >>
> > > >> [1]
> > > >>
> > > >>
> > >
> >
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12315522&version=12348668
> > > >> [2] https://dist.apache.org/repos/dist/dev/flink/flink-1.10.3-rc1
> > > >> [3] https://dist.apache.org/repos/dist/release/flink/KEYS
> > > >> [4]
> > > https://repository.apache.org/content/repositories/orgapacheflink-1412
> > > >> [5] https://github.com/apache/flink/releases/tag/release-1.10.3-rc1
> > > >> [6] https://github.com/apache/flink-web/pull/413
> > > >>
> > > >
> > > >
> > > > --
> > > >
> > > > Matthias Pohl | Engineer
> > > >
> > > > Follow us @VervericaData Ververica <https://www.ververica.com/>
> > > >
> > > > --
> > > >
> > > > Join Flink Forward <https://flink-forward.org/> - The Apache Flink
> > > > Conference
> > > >
> > > > Stream Processing | Event Driven | Real Time
> > > >
> > > > --
> > > >
> > > > Ververica GmbH | Invalidenstrasse 115, 10115 Berlin, Germany
> > > >
> > > > --
> > > > Ververica GmbH
> > > > Registered at Amtsgericht Charlottenburg: HRB 158244 B
> > > > Managing Directors: Yip Park Tung Jason, Jinwei (Kevin) Zhang, Karl
> > Anton
> > > > Wehner
> > >
> > >
> >
>

[Xingbo Huang]

+1 (non-binding)

- verified signatures and checksums
- built from source
- pip install in mac
- run python udf to verify FLINK-20218

Best,
Xingbo

Zhu Zhu <[hidden email]> 于2021年1月27日周三 下午10:01写道：

> +1 (binding)
> - checked signatures and checksums
> - built from source
> - ran streaming/batch jobs on a YARN cluster. checked output and logs.
> - the web PR looks good
>
> Thanks,
> Zhu
>
> Robert Metzger <[hidden email]> 于2021年1月25日周一 下午9:42写道：
>
> > +1 (binding)
> >
> > - checked the diff between 1.10.2 and 1.10.3:
> >
> https://github.com/apache/flink/compare/release-1.10.2...release-1.10.3-rc1
> >   - I didn't spot any dependency changes
> > - the ci builds for the 1.10 branch seem to be pretty stable:
> > https://travis-ci.com/github/apache/flink/builds
> > - the jars in the staging repo seem fine
> > - approved the website updates
> > - binary archive seems fine.
> >
> > Thanks a lot for putting the RC together!
> >
> >
> > On Mon, Jan 25, 2021 at 11:30 AM Yang Wang <[hidden email]>
> wrote:
> >
> > > +1 (non-binding)
> > >
> > > - checked/verified signatures and checksums
> > > - build Flink from the attached source code
> > > - started a Yarn per-job/session cluster
> > > - check webUI is normal and no suspicious logs and exceptions
> > >
> > > Best,
> > > Yang
> > >
> > > Leonard Xu <[hidden email]> 于2021年1月25日周一 上午10:31写道：
> > >
> > > > +1 (non-binding)
> > > >
> > > > - checked/verified signatures and checksums
> > > > - built from source code succeeded
> > > > - checked that there are no missed dependency artifacts
> > > > - started a cluster, WebUI was accessible, ran a wordcount job , no
> > > > suspicious log output
> > > > - tested using SQL Client to submit a simple SQL job and the query
> > result
> > > > is expected
> > > > - the web PR LGTM
> > > >
> > > >
> > > > Best,
> > > > Leonard
> > > >
> > > > > 在 2021年1月21日，23:13，Matthias Pohl <[hidden email]> 写道：
> > > > >
> > > > > +1 (non-binding)
> > > > >
> > > > > - verified checksums
> > > > > - build Flink from the provided source code
> > > > > - double-checked that the security fix is included in the source
> code
> > > > > - started the a local Flink cluster and ran a job checking the logs
> > for
> > > > > exceptions
> > > > > - verified that CVE-2020-17518 cannot be reproduced using the Flink
> > > > > binaries
> > > > >
> > > > > Thanks for driving this, Xintong!
> > > > >
> > > > > On Thu, Jan 21, 2021 at 2:50 AM Xintong Song <[hidden email]>
> > > wrote:
> > > > >
> > > > >> Hi everyone,
> > > > >>
> > > > >> Please review and vote on the release candidate #1 for the version
> > > > 1.10.3,
> > > > >> as follows:
> > > > >>
> > > > >> [ ] +1, Approve the release
> > > > >> [ ] -1, Do not approve the release (please provide specific
> > comments)
> > > > >>
> > > > >> The complete staging area is available for your review, which
> > > includes:
> > > > >> * JIRA release notes [1],
> > > > >> * the official Apache source release and binary convenience
> releases
> > > to
> > > > be
> > > > >> deployed to dist.apache.org [2], which are signed with the key
> with
> > > > >> fingerprint F8E419AA0B60C28879E876859DFF40967ABFC5A4 [3],
> > > > >> * all artifacts to be deployed to the Maven Central Repository
> [4],
> > > > >> * source code tag "release-1.10.3-rc1" [5],
> > > > >> * website pull request listing the new release and adding
> > announcement
> > > > blog
> > > > >> post [6].
> > > > >>
> > > > >> The vote will be open for at least 72 hours. It is adopted by
> > majority
> > > > >> approval, with at least 3 PMC affirmative votes.
> > > > >>
> > > > >> Thanks,
> > > > >> Xintong Song
> > > > >>
> > > > >> [1]
> > > > >>
> > > > >>
> > > >
> > >
> >
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12315522&version=12348668
> > > > >> [2] https://dist.apache.org/repos/dist/dev/flink/flink-1.10.3-rc1
> > > > >> [3] https://dist.apache.org/repos/dist/release/flink/KEYS
> > > > >> [4]
> > > >
> https://repository.apache.org/content/repositories/orgapacheflink-1412
> > > > >> [5]
> https://github.com/apache/flink/releases/tag/release-1.10.3-rc1
> > > > >> [6] https://github.com/apache/flink-web/pull/413
> > > > >>
> > > > >
> > > > >
> > > > > --
> > > > >
> > > > > Matthias Pohl | Engineer
> > > > >
> > > > > Follow us @VervericaData Ververica <https://www.ververica.com/>
> > > > >
> > > > > --
> > > > >
> > > > > Join Flink Forward <https://flink-forward.org/> - The Apache Flink
> > > > > Conference
> > > > >
> > > > > Stream Processing | Event Driven | Real Time
> > > > >
> > > > > --
> > > > >
> > > > > Ververica GmbH | Invalidenstrasse 115, 10115 Berlin, Germany
> > > > >
> > > > > --
> > > > > Ververica GmbH
> > > > > Registered at Amtsgericht Charlottenburg: HRB 158244 B
> > > > > Managing Directors: Yip Park Tung Jason, Jinwei (Kevin) Zhang, Karl
> > > Anton
> > > > > Wehner
> > > >
> > > >
> > >
> >
>

[Dian Fu-2]

+1 (binding)

- checked the changes since 1.10.2 and it looks good to me as there are no dependency changes
- checked the website PR, have left a minor comment
- verified the signatures and checksums

Thanks,
Dian

> 在 2021年1月28日，下午2:39，Xingbo Huang <[hidden email]> 写道：
>
> +1 (non-binding)
>
> - verified signatures and checksums
> - built from source
> - pip install in mac
> - run python udf to verify FLINK-20218
>
> Best,
> Xingbo
>
> Zhu Zhu <[hidden email]> 于2021年1月27日周三 下午10:01写道：
>
>> +1 (binding)
>> - checked signatures and checksums
>> - built from source
>> - ran streaming/batch jobs on a YARN cluster. checked output and logs.
>> - the web PR looks good
>>
>> Thanks,
>> Zhu
>>
>> Robert Metzger <[hidden email]> 于2021年1月25日周一 下午9:42写道：
>>
>>> +1 (binding)
>>>
>>> - checked the diff between 1.10.2 and 1.10.3:
>>>
>> https://github.com/apache/flink/compare/release-1.10.2...release-1.10.3-rc1
>>>  - I didn't spot any dependency changes
>>> - the ci builds for the 1.10 branch seem to be pretty stable:
>>> https://travis-ci.com/github/apache/flink/builds
>>> - the jars in the staging repo seem fine
>>> - approved the website updates
>>> - binary archive seems fine.
>>>
>>> Thanks a lot for putting the RC together!
>>>
>>>
>>> On Mon, Jan 25, 2021 at 11:30 AM Yang Wang <[hidden email]>
>> wrote:
>>>
>>>> +1 (non-binding)
>>>>
>>>> - checked/verified signatures and checksums
>>>> - build Flink from the attached source code
>>>> - started a Yarn per-job/session cluster
>>>> - check webUI is normal and no suspicious logs and exceptions
>>>>
>>>> Best,
>>>> Yang
>>>>
>>>> Leonard Xu <[hidden email]> 于2021年1月25日周一 上午10:31写道：
>>>>
>>>>> +1 (non-binding)
>>>>>
>>>>> - checked/verified signatures and checksums
>>>>> - built from source code succeeded
>>>>> - checked that there are no missed dependency artifacts
>>>>> - started a cluster, WebUI was accessible, ran a wordcount job , no
>>>>> suspicious log output
>>>>> - tested using SQL Client to submit a simple SQL job and the query
>>> result
>>>>> is expected
>>>>> - the web PR LGTM
>>>>>
>>>>>
>>>>> Best,
>>>>> Leonard
>>>>>
>>>>>> 在 2021年1月21日，23:13，Matthias Pohl <[hidden email]> 写道：
>>>>>>
>>>>>> +1 (non-binding)
>>>>>>
>>>>>> - verified checksums
>>>>>> - build Flink from the provided source code
>>>>>> - double-checked that the security fix is included in the source
>> code
>>>>>> - started the a local Flink cluster and ran a job checking the logs
>>> for
>>>>>> exceptions
>>>>>> - verified that CVE-2020-17518 cannot be reproduced using the Flink
>>>>>> binaries
>>>>>>
>>>>>> Thanks for driving this, Xintong!
>>>>>>
>>>>>> On Thu, Jan 21, 2021 at 2:50 AM Xintong Song <[hidden email]>
>>>> wrote:
>>>>>>
>>>>>>> Hi everyone,
>>>>>>>
>>>>>>> Please review and vote on the release candidate #1 for the version
>>>>> 1.10.3,
>>>>>>> as follows:
>>>>>>>
>>>>>>> [ ] +1, Approve the release
>>>>>>> [ ] -1, Do not approve the release (please provide specific
>>> comments)
>>>>>>>
>>>>>>> The complete staging area is available for your review, which
>>>> includes:
>>>>>>> * JIRA release notes [1],
>>>>>>> * the official Apache source release and binary convenience
>> releases
>>>> to
>>>>> be
>>>>>>> deployed to dist.apache.org [2], which are signed with the key
>> with
>>>>>>> fingerprint F8E419AA0B60C28879E876859DFF40967ABFC5A4 [3],
>>>>>>> * all artifacts to be deployed to the Maven Central Repository
>> [4],
>>>>>>> * source code tag "release-1.10.3-rc1" [5],
>>>>>>> * website pull request listing the new release and adding
>>> announcement
>>>>> blog
>>>>>>> post [6].
>>>>>>>
>>>>>>> The vote will be open for at least 72 hours. It is adopted by
>>> majority
>>>>>>> approval, with at least 3 PMC affirmative votes.
>>>>>>>
>>>>>>> Thanks,
>>>>>>> Xintong Song
>>>>>>>
>>>>>>> [1]
>>>>>>>
>>>>>>>
>>>>>
>>>>
>>>
>> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12315522&version=12348668
>>>>>>> [2] https://dist.apache.org/repos/dist/dev/flink/flink-1.10.3-rc1
>>>>>>> [3] https://dist.apache.org/repos/dist/release/flink/KEYS
>>>>>>> [4]
>>>>>
>> https://repository.apache.org/content/repositories/orgapacheflink-1412
>>>>>>> [5]
>> https://github.com/apache/flink/releases/tag/release-1.10.3-rc1
>>>>>>> [6] https://github.com/apache/flink-web/pull/413
>>>>>>>
>>>>>>
>>>>>>
>>>>>> --
>>>>>>
>>>>>> Matthias Pohl | Engineer
>>>>>>
>>>>>> Follow us @VervericaData Ververica <https://www.ververica.com/>
>>>>>>
>>>>>> --
>>>>>>
>>>>>> Join Flink Forward <https://flink-forward.org/> - The Apache Flink
>>>>>> Conference
>>>>>>
>>>>>> Stream Processing | Event Driven | Real Time
>>>>>>
>>>>>> --
>>>>>>
>>>>>> Ververica GmbH | Invalidenstrasse 115, 10115 Berlin, Germany
>>>>>>
>>>>>> --
>>>>>> Ververica GmbH
>>>>>> Registered at Amtsgericht Charlottenburg: HRB 158244 B
>>>>>> Managing Directors: Yip Park Tung Jason, Jinwei (Kevin) Zhang, Karl
>>>> Anton
>>>>>> Wehner
>>>>>
>>>>>
>>>>
>>>
>>

[Xintong Song]

Thanks all for the voting.

We have collected 3 binding votes. I'm closing this vote in a separate
thread.

Thank you~

Xintong Song



On Thu, Jan 28, 2021 at 4:38 PM Dian Fu <[hidden email]> wrote:

> +1 (binding)
>
> - checked the changes since 1.10.2 and it looks good to me as there are no
> dependency changes
> - checked the website PR, have left a minor comment
> - verified the signatures and checksums
>
> Thanks,
> Dian
>
> > 在 2021年1月28日，下午2:39，Xingbo Huang <[hidden email]> 写道：
> >
> > +1 (non-binding)
> >
> > - verified signatures and checksums
> > - built from source
> > - pip install in mac
> > - run python udf to verify FLINK-20218
> >
> > Best,
> > Xingbo
> >
> > Zhu Zhu <[hidden email]> 于2021年1月27日周三 下午10:01写道：
> >
> >> +1 (binding)
> >> - checked signatures and checksums
> >> - built from source
> >> - ran streaming/batch jobs on a YARN cluster. checked output and logs.
> >> - the web PR looks good
> >>
> >> Thanks,
> >> Zhu
> >>
> >> Robert Metzger <[hidden email]> 于2021年1月25日周一 下午9:42写道：
> >>
> >>> +1 (binding)
> >>>
> >>> - checked the diff between 1.10.2 and 1.10.3:
> >>>
> >>
> https://github.com/apache/flink/compare/release-1.10.2...release-1.10.3-rc1
> >>>  - I didn't spot any dependency changes
> >>> - the ci builds for the 1.10 branch seem to be pretty stable:
> >>> https://travis-ci.com/github/apache/flink/builds
> >>> - the jars in the staging repo seem fine
> >>> - approved the website updates
> >>> - binary archive seems fine.
> >>>
> >>> Thanks a lot for putting the RC together!
> >>>
> >>>
> >>> On Mon, Jan 25, 2021 at 11:30 AM Yang Wang <[hidden email]>
> >> wrote:
> >>>
> >>>> +1 (non-binding)
> >>>>
> >>>> - checked/verified signatures and checksums
> >>>> - build Flink from the attached source code
> >>>> - started a Yarn per-job/session cluster
> >>>> - check webUI is normal and no suspicious logs and exceptions
> >>>>
> >>>> Best,
> >>>> Yang
> >>>>
> >>>> Leonard Xu <[hidden email]> 于2021年1月25日周一 上午10:31写道：
> >>>>
> >>>>> +1 (non-binding)
> >>>>>
> >>>>> - checked/verified signatures and checksums
> >>>>> - built from source code succeeded
> >>>>> - checked that there are no missed dependency artifacts
> >>>>> - started a cluster, WebUI was accessible, ran a wordcount job , no
> >>>>> suspicious log output
> >>>>> - tested using SQL Client to submit a simple SQL job and the query
> >>> result
> >>>>> is expected
> >>>>> - the web PR LGTM
> >>>>>
> >>>>>
> >>>>> Best,
> >>>>> Leonard
> >>>>>
> >>>>>> 在 2021年1月21日，23:13，Matthias Pohl <[hidden email]> 写道：
> >>>>>>
> >>>>>> +1 (non-binding)
> >>>>>>
> >>>>>> - verified checksums
> >>>>>> - build Flink from the provided source code
> >>>>>> - double-checked that the security fix is included in the source
> >> code
> >>>>>> - started the a local Flink cluster and ran a job checking the logs
> >>> for
> >>>>>> exceptions
> >>>>>> - verified that CVE-2020-17518 cannot be reproduced using the Flink
> >>>>>> binaries
> >>>>>>
> >>>>>> Thanks for driving this, Xintong!
> >>>>>>
> >>>>>> On Thu, Jan 21, 2021 at 2:50 AM Xintong Song <[hidden email]>
> >>>> wrote:
> >>>>>>
> >>>>>>> Hi everyone,
> >>>>>>>
> >>>>>>> Please review and vote on the release candidate #1 for the version
> >>>>> 1.10.3,
> >>>>>>> as follows:
> >>>>>>>
> >>>>>>> [ ] +1, Approve the release
> >>>>>>> [ ] -1, Do not approve the release (please provide specific
> >>> comments)
> >>>>>>>
> >>>>>>> The complete staging area is available for your review, which
> >>>> includes:
> >>>>>>> * JIRA release notes [1],
> >>>>>>> * the official Apache source release and binary convenience
> >> releases
> >>>> to
> >>>>> be
> >>>>>>> deployed to dist.apache.org [2], which are signed with the key
> >> with
> >>>>>>> fingerprint F8E419AA0B60C28879E876859DFF40967ABFC5A4 [3],
> >>>>>>> * all artifacts to be deployed to the Maven Central Repository
> >> [4],
> >>>>>>> * source code tag "release-1.10.3-rc1" [5],
> >>>>>>> * website pull request listing the new release and adding
> >>> announcement
> >>>>> blog
> >>>>>>> post [6].
> >>>>>>>
> >>>>>>> The vote will be open for at least 72 hours. It is adopted by
> >>> majority
> >>>>>>> approval, with at least 3 PMC affirmative votes.
> >>>>>>>
> >>>>>>> Thanks,
> >>>>>>> Xintong Song
> >>>>>>>
> >>>>>>> [1]
> >>>>>>>
> >>>>>>>
> >>>>>
> >>>>
> >>>
> >>
> https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12315522&version=12348668
> >>>>>>> [2] https://dist.apache.org/repos/dist/dev/flink/flink-1.10.3-rc1
> >>>>>>> [3] https://dist.apache.org/repos/dist/release/flink/KEYS
> >>>>>>> [4]
> >>>>>
> >> https://repository.apache.org/content/repositories/orgapacheflink-1412
> >>>>>>> [5]
> >> https://github.com/apache/flink/releases/tag/release-1.10.3-rc1
> >>>>>>> [6] https://github.com/apache/flink-web/pull/413
> >>>>>>>
> >>>>>>
> >>>>>>
> >>>>>> --
> >>>>>>
> >>>>>> Matthias Pohl | Engineer
> >>>>>>
> >>>>>> Follow us @VervericaData Ververica <https://www.ververica.com/>
> >>>>>>
> >>>>>> --
> >>>>>>
> >>>>>> Join Flink Forward <https://flink-forward.org/> - The Apache Flink
> >>>>>> Conference
> >>>>>>
> >>>>>> Stream Processing | Event Driven | Real Time
> >>>>>>
> >>>>>> --
> >>>>>>
> >>>>>> Ververica GmbH | Invalidenstrasse 115, 10115 Berlin, Germany
> >>>>>>
> >>>>>> --
> >>>>>> Ververica GmbH
> >>>>>> Registered at Amtsgericht Charlottenburg: HRB 158244 B
> >>>>>> Managing Directors: Yip Park Tung Jason, Jinwei (Kevin) Zhang, Karl
> >>>> Anton
> >>>>>> Wehner
> >>>>>
> >>>>>
> >>>>
> >>>
> >>
>
>