Re: [VOTE] 3.3.0 RC2

[Josep Prat]

Hi David,

Thanks for driving this. One question, should we include in the release notes the recently fixed CVE vulnerability? I understand this not being explicitly mentioned on the recently released versions to not cause an unintentional 0-day, but I think it could be mentioned for this release. What do you think?

Best,

On Wed, Sep 21, 2022 at 1:17 AM David Arthur <david...@apache.org> wrote:

Hello Kafka users, developers and client-developers,

This is the second release candidate for Apache Kafka 3.3.0. Many new
features and bug fixes are included in this major release of Kafka. A
significant number of the issues in this release are related to KRaft,
which will be considered "production ready" as part of this release
(KIP-833)

KRaft improvements:
* KIP-778: Online KRaft to KRaft Upgrades
* KIP-833: Mark KRaft as Production Ready
* KIP-835: Monitor Quorum health (many new KRaft metrics)
* KIP-836: Expose voter lag via kafka-metadata-quorum.sh
* KIP-841: Fenced replicas should not be allowed to join the ISR in KRaft
* KIP-859: Add Metadata Log Processing Error Related Metrics

Other major improvements include:
* KIP-618: Exactly-Once Support for Source Connectors
* KIP-831: Add metric for log recovery progress
* KIP-827: Expose logdirs total and usable space via Kafka API
* KIP-834: Add ability to Pause / Resume KafkaStreams Topologies

The full release notes are available here:
https://home.apache.org/~davidarthur/kafka-3.3.0-rc2/RELEASE_NOTES.html

Please download, test and vote by Monday, Sep 26 at 5pm EDT

Also, huge thanks to José for running the release so far. He has done
the vast majority of the work to prepare this rather large release :)

---------------------

Kafka's KEYS file containing PGP keys we use to sign the release:
https://kafka.apache.org/KEYS

* Release artifacts to be voted upon (source and binary):
https://home.apache.org/~davidarthur/kafka-3.3.0-rc2/

* Maven artifacts to be voted upon:
https://repository.apache.org/content/groups/staging/org/apache/kafka/

* Javadoc: https://home.apache.org/~davidarthur/kafka-3.3.0-rc2/javadoc/

* Tag to be voted upon (off 3.3 branch) is the 3.3.0 tag:
https://github.com/apache/kafka/releases/tag/3.3.0-rc2

* Documentation:  https://kafka.apache.org/33/documentation.html

* Protocol: https://kafka.apache.org/33/protocol.html




Successful Jenkins builds to follow in a future update to this email.


Thanks!
David Arthur

--

Josep Prat Open Source Engineering Director, Aiven josep...@aiven.io   |   +491715557497 aiven.io   |

Aiven Deutschland GmbH Immanuelkirchstraße 26, 10405 Berlin Geschäftsführer: Oskari Saarenmaa & Hannu Valtonen Amtsgericht Charlottenburg, HRB 209739 B

[David Arthur]

Josep, thanks for the note. We will mention the CVEs fixed in this release in the announcement email. I believe we can also update the release notes HTML after the vote is complete.

-David

--
You received this message because you are subscribed to the Google Groups "kafka-clients" group.
To unsubscribe from this group and stop receiving emails from it, send an email to kafka-client...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/kafka-clients/CAOJ18G4DE9Q_DYyZTbDLF6J6MRj30WrCNj6njrYRV3SQeThs-w%40mail.gmail.com.

--

-David

[John Roesler]

Thanks for running this, David!

I've verified the signatures, looked at the docs, and run the quickstart (ZK and KRaft). I also ran the unit tests, as well as all the tests for Streams locally.

The docs look a little malformed (the "collapse/expand" button floats over the text, the collapsed doc tree is only halfway collapsed, and there's a weird empty panel on the right).

We can fix the docs site independent of this release, so I'm +1 (binding).

Thanks,
-John

[David Jacot]

Thanks for running the release, José and David.

I performed the following validations:
* Verified all checksums and signatures.
* Built from source and ran unit tests.
* Ran the first quickstart steps for both ZK and KRaft.
* Spotchecked the Javadocs.

I have also noticed that the doc is malformed but we can fix this separately.

I am +1 (binding), assuming that the system tests look good. It would
be great if you could share them.

Best,
David

[Bill Bejeck]

Hi Jose and David,

Thanks for running the release!

I did the following verification steps:

I performed the following validations:

1.   Verified all checksums and signatures.

1.   Built from source and ran unit tests.

1.   Ran the first quickstart steps

1. Zookeeper quick start
2. KRaft quick start
3. The raft test script
1.  Spot checked the docs

I noticed the docs page is a little mal-formed, but this doesn't need to block the release we can fix it separately.  Also, the quickstart page still references 3.2, but this can be fixed on a followup docs PR.

+1(binding)

Thanks,

Bill