Skip to content

Commit c53599a

Browse files
authored
Announce 1.11.5 & 1.12.1 releases (#3518)
* Add release announcements for 1.11.5 and 1.12.1 * Fix version numbers * Update Avro committers Add Oscar (me), move two comitters (PMC members) to the emeriti as indicated by them on the mailing list.
1 parent 6aa1048 commit c53599a

File tree

4 files changed

+164
-26
lines changed

4 files changed

+164
-26
lines changed

doc/config.toml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -109,7 +109,7 @@ weight = 1
109109
section = ["HTML", "print", "RSS"]
110110

111111
[params]
112-
avroversion = "++version++"
112+
avroversion = "1.12.1"
113113
copyright = "The Apache Software Foundation"
114114
apache_foundation = "https://www.apache.org/"
115115
apache_events_logo = "https://www.apache.org/events/current-event-234x60.png"
@@ -132,7 +132,7 @@ archived_version = false
132132
# The version number for the version of the docs represented in this doc set.
133133
# Used in the "version-banner" partial to display a version number for the
134134
# current doc set.
135-
version = "1.12.0"
135+
version = "1.12.1"
136136

137137
# A link to latest version of the docs. Used in the "version-banner" partial to
138138
# point people to the main doc site.
Lines changed: 48 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,48 @@
1+
---
2+
title: "Avro 1.11.5"
3+
linkTitle: "Avro 1.11.5"
4+
date: 2025-10-16
5+
---
6+
7+
<!--
8+
9+
Licensed to the Apache Software Foundation (ASF) under one
10+
or more contributor license agreements. See the NOTICE file
11+
distributed with this work for additional information
12+
regarding copyright ownership. The ASF licenses this file
13+
to you under the Apache License, Version 2.0 (the
14+
"License"); you may not use this file except in compliance
15+
with the License. You may obtain a copy of the License at
16+
17+
https://www.apache.org/licenses/LICENSE-2.0
18+
19+
Unless required by applicable law or agreed to in writing,
20+
software distributed under the License is distributed on an
21+
"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
22+
KIND, either express or implied. See the License for the
23+
specific language governing permissions and limitations
24+
under the License.
25+
26+
-->
27+
28+
The Apache Avro community is pleased to announce the release of Avro 1.11.5!
29+
30+
All signed release artifacts, signatures and verification instructions can
31+
be found <a href="{{< relref "/project/download" >}}">here</a>
32+
33+
## Security Fixes
34+
35+
This release addresses 4 security fixes:
36+
* Prevent class with empty Java package being trusted by SpecificDatumReader ([#3311](https://github.com/apache/avro/pull/3311))
37+
* Remove the default serializable packages and deprecated the property to introduce org.apache.avro.SERIALIZABLE_CLASSES instead ([#3376](https://github.com/apache/avro/pull/3376))
38+
* java-[key-]class allowed packages must be packages ([#3453](https://github.com/apache/avro/pull/3453))
39+
* [AVRO-4053](https://issues.apache.org/jira/browse/AVRO-4053): doc consistency in velocity templates ([#3150](https://github.com/apache/avro/pull/3150))
40+
41+
These fixes apply only to the Java SDK. All other SDKs have no difference with their 1.11.4 release.
42+
43+
44+
## Language SDK / Convenience artifacts
45+
46+
* Java: https://repo1.maven.org/maven2/org/apache/avro/avro/1.11.5/
47+
48+
Thanks to everyone for contributing!
Lines changed: 90 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,90 @@
1+
---
2+
title: "Avro 1.12.1"
3+
linkTitle: "Avro 1.12.1"
4+
date: 2025-10-16
5+
---
6+
7+
<!--
8+
9+
Licensed to the Apache Software Foundation (ASF) under one
10+
or more contributor license agreements. See the NOTICE file
11+
distributed with this work for additional information
12+
regarding copyright ownership. The ASF licenses this file
13+
to you under the Apache License, Version 2.0 (the
14+
"License"); you may not use this file except in compliance
15+
with the License. You may obtain a copy of the License at
16+
17+
https://www.apache.org/licenses/LICENSE-2.0
18+
19+
Unless required by applicable law or agreed to in writing,
20+
software distributed under the License is distributed on an
21+
"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
22+
KIND, either express or implied. See the License for the
23+
specific language governing permissions and limitations
24+
under the License.
25+
26+
-->
27+
28+
The Apache Avro community is pleased to announce the release of Avro 1.12.1!
29+
30+
All signed release artifacts, signatures and verification instructions can be found <a href="{{< relref "/project/download" >}}">here</a>
31+
32+
## Security Fixes
33+
34+
This release addresses 4 security fixes:
35+
* Prevent class with empty Java package being trusted by SpecificDatumReader ([#3311](https://github.com/apache/avro/pull/3311))
36+
* Remove the default serializable packages and deprecated the property to introduce org.apache.avro.SERIALIZABLE_CLASSES instead ([#3376](https://github.com/apache/avro/pull/3376))
37+
* java-[key-]class allowed packages must be packages ([#3453](https://github.com/apache/avro/pull/3453))
38+
* [AVRO-4053](https://issues.apache.org/jira/browse/AVRO-4053): doc consistency in velocity templates ([#3150](https://github.com/apache/avro/pull/3150))
39+
40+
These fixes apply only to the Java SDK.
41+
42+
43+
## Highlights
44+
45+
### C++
46+
* [AVRO-4038](https://issues.apache.org/jira/browse/AVRO-4038): Add support local-timestamp-nanos and timestamp-nanos
47+
* [AVRO-4081](https://issues.apache.org/jira/browse/AVRO-4081): Add big decimal support
48+
* [AVRO-4058](https://issues.apache.org/jira/browse/AVRO-4058): Allow custom attributes in arrays
49+
* [AVRO-4120](https://issues.apache.org/jira/browse/AVRO-4120): Allow custom attributes for MAP and FIXED types
50+
* [AVRO-4140](https://issues.apache.org/jira/browse/AVRO-4140): Support uuid to annotate fixed
51+
* [AVRO-3984](https://issues.apache.org/jira/browse/AVRO-3984): Improved code generation for unions
52+
53+
### C#
54+
* [AVRO-4075](https://issues.apache.org/jira/browse/AVRO-4075): Fix JsonDecoder string type failing to decode ISO string date
55+
* [AVRO-2032](https://issues.apache.org/jira/browse/AVRO-2032): Add support for NaN, Infinity and -Infinity in JsonDecoder
56+
57+
### Java
58+
* [AVRO-4062](https://issues.apache.org/jira/browse/AVRO-4062): Allow leading underscores for names in idl
59+
* [AVRO-4119](https://issues.apache.org/jira/browse/AVRO-4119): Make Nullable and NotNull annotations configurable
60+
* [AVRO-4039](https://issues.apache.org/jira/browse/AVRO-4039): fix GenericData.newArray to only return an appropriate array implementation
61+
* [AVRO-3940](https://issues.apache.org/jira/browse/AVRO-3940): Allow schema redefinition when equal
62+
* [AVRO-3230](https://issues.apache.org/jira/browse/AVRO-3230): Enable fastread by default
63+
* [AVRO-4133](https://issues.apache.org/jira/browse/AVRO-4133): Support default enum value in Protobuf to Avro
64+
* [AVRO-4165](https://issues.apache.org/jira/browse/AVRO-4165): ability to specify AvroEncode on a class
65+
66+
### PHP
67+
* [AVRO-2843](https://issues.apache.org/jira/browse/AVRO-2843): PHP submit package on packagist.org
68+
* [AVRO-4046](https://issues.apache.org/jira/browse/AVRO-4046): Handling of default values
69+
70+
71+
## Other changes
72+
73+
These SDKs have upgraded dependencies and minor bugfixes:
74+
* C++
75+
* C#
76+
* Javascript
77+
* Java
78+
* Python
79+
80+
81+
## Language SDK / Convenience artifacts
82+
83+
* C#: https://www.nuget.org/packages/Apache.Avro/1.12.1
84+
* Java: https://repo1.maven.org/maven2/org/apache/avro/avro/1.12.1/
85+
* Javascript: https://www.npmjs.com/package/avro-js/v/1.12.1
86+
* Perl: https://metacpan.org/release/Avro
87+
* Python 3: https://pypi.org/project/avro/1.12.1
88+
* Ruby: https://rubygems.org/gems/avro/versions/1.12.1
89+
90+
Thanks to everyone for contributing!

doc/content/en/project/Credits/_index.md

Lines changed: 24 additions & 24 deletions
Original file line numberDiff line numberDiff line change
@@ -33,29 +33,28 @@ aliases:
3333

3434
Apache Avro's active committers are:
3535

36-
| **username** | **name** | **organization** | **roles** | **timezone** |
37-
|:-------------|:--------------------|:------------------------|:----------------------:|:------------:|
38-
| blue | Ryan Blue | Netflix | spec, java, ruby | -8 |
39-
| brucem | Bruce Mitchener | Army of Bruce | c | +7 |
40-
| busbey | Sean Busbey | Cloudera | java, ruby | -6 |
41-
| cutting | Doug Cutting | Cloudera | spec, java | -8 |
42-
| dcreager | Douglas Creager | RedJack, LLC | c | -5 |
43-
| hammer | Jeff Hammerbacher | Cloudera | python | -8 |
44-
| iemejia | Ismaël Mejía | Talend | java, docker | +1 |
45-
| kojiromike | Michael A. Smith | Independent | python, docker | -5 |
46-
| massie | Matt Massie | UC Berkeley | c | -8 |
47-
| martinkl | Martin Kleppmann | University of Cambridge | c, ruby | 0 |
48-
| mgrigorov | Martin Grigorov | Huawei | rust | +2 |
49-
| nielsbasjes | Niels Basjes | Bol.com | java, docker | +1 |
50-
| philz | Philip Zeyliger | Cloudera | java | -8 |
51-
| rskraba | Ryan Skraba | Talend | java, docker | +1 |
52-
| sbanacho | Scott Banachowski | Microsoft | c++ | -8 |
53-
| scottcarey | Scott Carey | RichRelevance | java | -8 |
54-
| sekikn | Kengo Seki | NTT Data | perl, interoperability | +9 |
55-
| sharadag | Sharad Agarwal | InMobi | python | +5.5 |
56-
| thiru | Thiruvalluvan M. G. | VertiCloud | java | +5.5 |
57-
| tjwp | Tim Perkins | Shopify | ruby | -5 |
58-
| tomwhite | Tom White | Cloudera | java | 0 |
36+
| **username** | **name** | **organization** | **roles** | **timezone** |
37+
|:-------------|:-------------------------------|:------------------------|:----------------------:|:------------:|
38+
| blue | Ryan Blue | Netflix | spec, java, ruby | -8 |
39+
| brucem | Bruce Mitchener | Army of Bruce | c | +7 |
40+
| busbey | Sean Busbey | Cloudera | java, ruby | -6 |
41+
| cutting | Doug Cutting | Cloudera | spec, java | -8 |
42+
| dcreager | Douglas Creager | RedJack, LLC | c | -5 |
43+
| hammer | Jeff Hammerbacher | Cloudera | python | -8 |
44+
| iemejia | Ismaël Mejía | Talend | java, docker | +1 |
45+
| kojiromike | Michael A. Smith | Independent | python, docker | -5 |
46+
| massie | Matt Massie | UC Berkeley | c | -8 |
47+
| mgrigorov | Martin Grigorov | Huawei | rust | +2 |
48+
| nielsbasjes | Niels Basjes | Bol.com | java, docker | +1 |
49+
| opwvhk | Oscar Westra van Holthe - Kind | Royal Schiphol Group | spec, java, docker | +1 |
50+
| rskraba | Ryan Skraba | Talend | java, docker | +1 |
51+
| sbanacho | Scott Banachowski | Microsoft | c++ | -8 |
52+
| scottcarey | Scott Carey | RichRelevance | java | -8 |
53+
| sekikn | Kengo Seki | NTT Data | perl, interoperability | +9 |
54+
| sharadag | Sharad Agarwal | InMobi | python | +5.5 |
55+
| thiru | Thiruvalluvan M. G. | VertiCloud | java | +5.5 |
56+
| tjwp | Tim Perkins | Shopify | ruby | -5 |
57+
| tomwhite | Tom White | Cloudera | java | 0 |
5958
-------------
6059

6160
### Contributors
@@ -64,4 +63,5 @@ A list of Avro contributors and their contributions is available from [Jira](htt
6463
### Emeriti
6564
Contributors who are no longer active on Avro are:
6665

67-
* None
66+
* Philip Zeyliger
67+
* Martin Kleppmann

0 commit comments

Comments
 (0)