You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@kyuubi.apache.org by "bowenliang123 (via GitHub)" <gi...@apache.org> on 2026/07/30 06:01:23 UTC

[PR] [KYUUBI #7584][INFRA] Update dev/dependencyList for postgresql 42.7.12 [kyuubi]

bowenliang123 opened a new pull request, #7605:
URL: https://github.com/apache/kyuubi/pull/7605

   ### Why are the changes needed?
   
   [PR #7584](https://github.com/apache/kyuubi/pull/7584) bumped `org.postgresql:postgresql` from 42.7.11 to 42.7.12 (security: [CVE-2026-54291](https://nvd.nist.gov/vuln/detail/CVE-2026-54291)) but updated only `pom.xml`. It did not regenerate `dev/dependencyList` via `build/dependency.sh --replace`, so the two are now out of sync and the **Dependencies CI check fails on `master`**:
   
   ```
   Dependency List Changed Detected:
   - postgresql/42.7.11//postgresql-42.7.11.jar
   + postgresql/42.7.12//postgresql-42.7.12.jar
   ```
   
   This PR brings `dev/dependencyList` back in line with the pom so CI is green again.
   
   ### How was this patch tested?
   
   - [x] Verified the only diff is the postgresql entry expected by the pom bump in #7584
   - [x] `git diff` against the version produced by `build/dependency.sh` shows no further drift
   
   `build/dependency.sh` requires downloading Spark/Flink/Hive engines and running a full `mvn install` to verify locally; CI will exercise it on the PR branch.
   
   ### Was this patch authored or co-authored using generative AI tooling?
   
   Yes.
   Assisted-by: OpenCode with MiniMax-M3


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org


Re: [PR] [KYUUBI #7584] Update dev/dependencyList for postgresql 42.7.12 [kyuubi]

Posted by "bowenliang123 (via GitHub)" <gi...@apache.org>.
bowenliang123 commented on PR #7605:
URL: https://github.com/apache/kyuubi/pull/7605#issuecomment-5127223086

   Will merge it for a quick fix once it passes the dependency checks.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org


Re: [PR] [KYUUBI #7584] Update dev/dependencyList for postgresql 42.7.12 [kyuubi]

Posted by "bowenliang123 (via GitHub)" <gi...@apache.org>.
bowenliang123 commented on PR #7605:
URL: https://github.com/apache/kyuubi/pull/7605#issuecomment-5127398906

   Thanks. Merged to the master/branch-1.12/branch-1.11 branches.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org


Re: [PR] [KYUUBI #7584] Update dev/dependencyList for postgresql 42.7.12 [kyuubi]

Posted by "bowenliang123 (via GitHub)" <gi...@apache.org>.
bowenliang123 closed pull request #7605: [KYUUBI #7584] Update dev/dependencyList for postgresql 42.7.12
URL: https://github.com/apache/kyuubi/pull/7605


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@kyuubi.apache.org
For additional commands, e-mail: notifications-help@kyuubi.apache.org