You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@tez.apache.org by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/05/18 18:09:30 UTC
[PR] Bump org.asynchttpclient:async-http-client from 2.12.4 to 2.15.0 [tez]
dependabot[bot] opened a new pull request, #501:
URL: https://github.com/apache/tez/pull/501
Bumps [org.asynchttpclient:async-http-client](https://github.com/AsyncHttpClient/async-http-client) from 2.12.4 to 2.15.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/AsyncHttpClient/async-http-client/releases">org.asynchttpclient:async-http-client's releases</a>.</em></p>
<blockquote>
<h2>AHC v2.15.0 Release</h2>
<h2>Security Advisory</h2>
<p><a href="https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-fmxf-pm6p-7xgm">https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-fmxf-pm6p-7xgm</a></p>
<p><strong>Full Changelog</strong>: <a href="https://github.com/AsyncHttpClient/async-http-client/compare/async-http-client-project-2.14.5...async-http-client-project-2.15.0">https://github.com/AsyncHttpClient/async-http-client/compare/async-http-client-project-2.14.5...async-http-client-project-2.15.0</a></p>
<h2>AHC v2.14.5 Release</h2>
<h2>Security Advisory</h2>
<p><a href="https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-cmxv-58fp-fm3g">https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-cmxv-58fp-fm3g</a></p>
<p><strong>Full Changelog</strong>: <a href="https://github.com/AsyncHttpClient/async-http-client/compare/async-http-client-project-2.12.4...async-http-client-project-2.14.5">https://github.com/AsyncHttpClient/async-http-client/compare/async-http-client-project-2.12.4...async-http-client-project-2.14.5</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/AsyncHttpClient/async-http-client/commit/9e52c0ca7cc10d8d19fc77a460e6e016f14a90d9"><code>9e52c0c</code></a> chore: Dependency upgrade</li>
<li><a href="https://github.com/AsyncHttpClient/async-http-client/commit/5eed33962a412a0100f8117dca849930652bfe30"><code>5eed339</code></a> Patch Security Advisory: GHSA-fmxf-pm6p-7xgm</li>
<li><a href="https://github.com/AsyncHttpClient/async-http-client/commit/ae557ad35246721c09dafb2976609cd0004e78ae"><code>ae557ad</code></a> Release 2.14.5: Security fixes and dependency upgrades</li>
<li>See full diff in <a href="https://github.com/AsyncHttpClient/async-http-client/compare/async-http-client-project-2.12.4...async-http-client-project-2.15.0">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/apache/tez/network/alerts).
</details>
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@tez.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Bump org.asynchttpclient:async-http-client from 2.12.4 to 2.15.0 [tez]
Posted by "tez-yetus (via GitHub)" <gi...@apache.org>.
tez-yetus commented on PR #501:
URL: https://github.com/apache/tez/pull/501#issuecomment-4481166911
:broken_heart: **-1 overall**
| Vote | Subsystem | Runtime | Logfile | Comment |
|:----:|----------:|--------:|:--------:|:-------:|
| +0 :ok: | reexec | 3m 19s | | Docker mode activated. |
|||| _ Prechecks _ |
| +1 :green_heart: | dupname | 0m 0s | | No case conflicting files found. |
| +0 :ok: | detsecrets | 0m 1s | | detect-secrets was not available. |
| +0 :ok: | xmllint | 0m 1s | | xmllint was not available. |
| +1 :green_heart: | @author | 0m 0s | | The patch does not contain any @author tags. |
| -1 :x: | test4tests | 0m 0s | | The patch doesn't appear to include any new or modified tests. Please justify why no new tests are needed for this patch. Also please list what manual steps were performed to verify this patch. |
|||| _ master Compile Tests _ |
| +1 :green_heart: | mvninstall | 2m 54s | | master passed |
| +1 :green_heart: | compile | 1m 1s | | master passed |
| +1 :green_heart: | javadoc | 1m 0s | | master passed |
|||| _ Patch Compile Tests _ |
| +1 :green_heart: | mvninstall | 2m 14s | | the patch passed |
| +1 :green_heart: | codespell | 0m 48s | | No new issues. |
| +1 :green_heart: | compile | 1m 3s | | the patch passed |
| +1 :green_heart: | javac | 1m 3s | | the patch passed |
| +1 :green_heart: | blanks | 0m 0s | | The patch has no blanks issues. |
| +1 :green_heart: | javadoc | 0m 53s | | the patch passed |
|||| _ Other Tests _ |
| +1 :green_heart: | unit | 57m 13s | | root in the patch passed. |
| +1 :green_heart: | asflicense | 0m 35s | | The patch does not generate ASF License warnings. |
| | | 71m 55s | | |
| Subsystem | Report/Notes |
|----------:|:-------------|
| Docker | ClientAPI=1.54 ServerAPI=1.54 base: https://ci-hadoop.apache.org/job/tez-multibranch/job/PR-501/1/artifact/out/Dockerfile |
| GITHUB PR | https://github.com/apache/tez/pull/501 |
| Optional Tests | dupname asflicense javac javadoc unit codespell detsecrets xmllint compile |
| uname | Linux a241143631e2 5.15.0-173-generic #183-Ubuntu SMP Fri Mar 6 13:29:34 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux |
| Build tool | maven |
| Personality | /home/jenkins/jenkins-home/workspace/tez-multibranch_PR-501/src/.yetus/personality.sh |
| git revision | master / 4ff946e4656eb48df92940d5bc7d9d8af5d7f772 |
| Default Java | Eclipse Adoptium-21.0.11+10-LTS |
| Test Results | https://ci-hadoop.apache.org/job/tez-multibranch/job/PR-501/1/testReport/ |
| Max. process+thread count | 1389 (vs. ulimit of 5500) |
| modules | C: . U: . |
| Console output | https://ci-hadoop.apache.org/job/tez-multibranch/job/PR-501/1/console |
| versions | git=2.43.0 maven=3.9.15 codespell=2.4.1 |
| Powered by | Apache Yetus 0.15.1 https://yetus.apache.org |
This message was automatically generated.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@tez.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org