+1 Looks good to me, thanks Bret! Ran my usual validation script to verify both the source distributable and the staged nexus artifacts. Diff'd changes between 4.19.3 and 4.19.4 and everything looks good.
[Sat Sep 26 05:27:43 PM UTC 2026] [KEY] Downloading KEYS file from https://dist.apache.org/repos/dist/release/cassandra/KEYS ... [1.638s] [OK] [Sat Sep 26 05:27:45 PM UTC 2026] [KEY] Importing all entries in KEYS file ... [0.083s] [OK] [Sat Sep 26 05:27:45 PM UTC 2026] [KEY] Trusting all entries in KEYS file ... [0.074s] [OK] [Sat Sep 26 05:27:45 PM UTC 2026] [DIR] Downloading distributables from https://dist.apache.org/repos/dist/dev/cassandra/cassandra-java-driver/4.19.4 ... [3.942s] [OK] [Sat Sep 26 05:27:49 PM UTC 2026] [SIG] apache-cassandra-java-driver-4.19.4-source.tar.gz: ensuring signature matches an entry in KEYS ... [0.026s] [OK] [Sat Sep 26 05:27:49 PM UTC 2026] [SHA] apache-cassandra-java-driver-4.19.4-source.tar.gz: ensuring sha256 matches ... [0.017s] [OK] [Sat Sep 26 05:27:50 PM UTC 2026] [SHA] apache-cassandra-java-driver-4.19.4-source.tar.gz: ensuring sha512 matches ... [0.015s] [OK] [Sat Sep 26 05:27:50 PM UTC 2026] [BUILD] Extracting apache-cassandra-java-driver-4.19.4-source.tar.gz ... [0.121s] [OK] [Sat Sep 26 05:27:50 PM UTC 2026] [BUILD] Building from source and running unit tests ... [101.571s] [OK] [Sat Sep 26 05:29:32 PM UTC 2026] [TEST] Running a basic connectivity test with artifact 4.19.4 from nexus staging repo 1482 ... [40.860s] [OK] [Sat Sep 26 05:30:13 PM UTC 2026] [DONE] Completed with all tests passing! [149.188s] [DONE] Thanks, Andy On Thu, Sep 24, 2026, at 9:49 PM, Bret McGuire wrote: > Greetings all! > > > I’m proposing the Cassandra Java Driver 4.19.4 for release. > > > sha1: b98e35eb055837d4396f207c4e4e9ab428da1e9d > > git: https://github.com/apache/cassandra-java-driver/tree/4.19.4 > > Maven Artifacts: > https://repository.apache.org/content/repositories/orgapachecassandra-1482/ > > > The Source release is available here: > > https://dist.apache.org/repos/dist/dev/cassandra/cassandra-java-driver/4.19.4/ > > > This is a security release primarily aimed at updating Netty to a > more recent version in order to address a large number of CVEs. This > release mirrors the recently proposed 3.13.0 release [1] for the 4.x > line. Our original plan was that there would be no further 4.x > releases (with all further work focused on 5.0.0) but the quantity of > CVE fixes in this Netty upgrade seemed to warrant an additional > release. The full changelog can be found at > https://github.com/apache/cassandra-java-driver/tree/4.19.4/changelog#4194. > > > The vote will be open for 120 hours (longer if needed). Everyone who > has tested the build is invited to vote. Votes by PMC members are > considered binding. A vote passes if there are at least three binding > +1s and no -1's. > > > Thanks! > > > > - Bret - > > > > [1] - https://lists.apache.org/thread/x8wbbqp3jrol6qvokmqvtyk56vvccsfx
