You are viewing a plain text version of this content. The canonical link for it is here.
Posted to reviews@impala.apache.org by "Michael Smith (Code Review)" <ge...@cloudera.org> on 2026/05/20 19:34:21 UTC

[Impala-ASF-CR] IMPALA-15026: Update Python infra dependencies for CVEs

Michael Smith has uploaded this change for review. ( http://gerrit.cloudera.org:8080/24333


Change subject: IMPALA-15026: Update Python infra dependencies for CVEs
......................................................................

IMPALA-15026: Update Python infra dependencies for CVEs

Updates infra/python/deps to address CVEs highlighted by dependabot.

Change-Id: I7d2811cec99dd21d201faaae413b37e44f5f051e
---
M infra/python/README
M infra/python/deps/adls-requirements.txt
M infra/python/deps/extended-test-requirements.txt
M infra/python/deps/gcovr-requirements.txt
M infra/python/deps/requirements.txt
5 files changed, 14 insertions(+), 16 deletions(-)



  git pull ssh://gerrit.cloudera.org:29418/Impala-ASF refs/changes/33/24333/1
-- 
To view, visit http://gerrit.cloudera.org:8080/24333
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: newchange
Gerrit-Change-Id: I7d2811cec99dd21d201faaae413b37e44f5f051e
Gerrit-Change-Number: 24333
Gerrit-PatchSet: 1
Gerrit-Owner: Michael Smith <mi...@cloudera.com>

[Impala-ASF-CR] IMPALA-15026: Update Python infra dependencies for CVEs

Posted by "Impala Public Jenkins (Code Review)" <ge...@cloudera.org>.
Impala Public Jenkins has posted comments on this change. ( http://gerrit.cloudera.org:8080/24333 )

Change subject: IMPALA-15026: Update Python infra dependencies for CVEs
......................................................................


Patch Set 1:

Build Successful 

https://jenkins.impala.io/job/gerrit-code-review-checks/22556/ : Initial code review checks passed. Use gerrit-verify-dryrun-external or gerrit-verify-dryrun to run full precommit tests.


-- 
To view, visit http://gerrit.cloudera.org:8080/24333
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: I7d2811cec99dd21d201faaae413b37e44f5f051e
Gerrit-Change-Number: 24333
Gerrit-PatchSet: 1
Gerrit-Owner: Michael Smith <mi...@cloudera.com>
Gerrit-Reviewer: Csaba Ringhofer <cs...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Reviewer: Jason Fehr <jf...@cloudera.com>
Gerrit-Reviewer: Joe McDonnell <jo...@cloudera.com>
Gerrit-Reviewer: Michael Smith <mi...@cloudera.com>
Gerrit-Comment-Date: Wed, 20 May 2026 19:57:30 +0000
Gerrit-HasComments: No

[Impala-ASF-CR] IMPALA-15026: Update Python infra dependencies for CVEs

Posted by "Impala Public Jenkins (Code Review)" <ge...@cloudera.org>.
Impala Public Jenkins has submitted this change and it was merged. ( http://gerrit.cloudera.org:8080/24333 )

Change subject: IMPALA-15026: Update Python infra dependencies for CVEs
......................................................................

IMPALA-15026: Update Python infra dependencies for CVEs

Updates infra/python/deps to address CVEs highlighted by dependabot.

Omits updating pytest because going to version 9 requires more work.

Testing: tested adls and gcovr requirements with

    env TARGET_FILESYSTEM=adls azure_client_id=a azure_tenant_id=b
    azure_client_secret=c azure_data_lake_store_name=d
    ./buildall.sh -notests -codecoverage

Change-Id: I7d2811cec99dd21d201faaae413b37e44f5f051e
Reviewed-on: http://gerrit.cloudera.org:8080/24333
Reviewed-by: Jason Fehr <jf...@cloudera.com>
Tested-by: Impala Public Jenkins <im...@cloudera.com>
---
M infra/python/README
M infra/python/deps/adls-requirements.txt
M infra/python/deps/extended-test-requirements.txt
M infra/python/deps/gcovr-requirements.txt
M infra/python/deps/requirements.txt
M infra/python/deps/setuptools-requirements.txt
6 files changed, 35 insertions(+), 23 deletions(-)

Approvals:
  Jason Fehr: Looks good to me, approved
  Impala Public Jenkins: Verified

-- 
To view, visit http://gerrit.cloudera.org:8080/24333
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: merged
Gerrit-Change-Id: I7d2811cec99dd21d201faaae413b37e44f5f051e
Gerrit-Change-Number: 24333
Gerrit-PatchSet: 8
Gerrit-Owner: Michael Smith <mi...@cloudera.com>
Gerrit-Reviewer: Csaba Ringhofer <cs...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Reviewer: Jason Fehr <jf...@cloudera.com>
Gerrit-Reviewer: Joe McDonnell <jo...@cloudera.com>
Gerrit-Reviewer: Michael Smith <mi...@cloudera.com>

[Impala-ASF-CR] IMPALA-15026: Update Python infra dependencies for CVEs

Posted by "Impala Public Jenkins (Code Review)" <ge...@cloudera.org>.
Impala Public Jenkins has posted comments on this change. ( http://gerrit.cloudera.org:8080/24333 )

Change subject: IMPALA-15026: Update Python infra dependencies for CVEs
......................................................................


Patch Set 3:

Build started: https://jenkins.impala.io/job/gerrit-verify-dryrun/13530/ DRY_RUN=false


-- 
To view, visit http://gerrit.cloudera.org:8080/24333
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: I7d2811cec99dd21d201faaae413b37e44f5f051e
Gerrit-Change-Number: 24333
Gerrit-PatchSet: 3
Gerrit-Owner: Michael Smith <mi...@cloudera.com>
Gerrit-Reviewer: Csaba Ringhofer <cs...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Reviewer: Jason Fehr <jf...@cloudera.com>
Gerrit-Reviewer: Joe McDonnell <jo...@cloudera.com>
Gerrit-Reviewer: Michael Smith <mi...@cloudera.com>
Gerrit-Comment-Date: Thu, 21 May 2026 15:44:49 +0000
Gerrit-HasComments: No

[Impala-ASF-CR] IMPALA-15026: Update Python infra dependencies for CVEs

Posted by "Jason Fehr (Code Review)" <ge...@cloudera.org>.
Jason Fehr has posted comments on this change. ( http://gerrit.cloudera.org:8080/24333 )

Change subject: IMPALA-15026: Update Python infra dependencies for CVEs
......................................................................


Patch Set 7: Code-Review+2


-- 
To view, visit http://gerrit.cloudera.org:8080/24333
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: I7d2811cec99dd21d201faaae413b37e44f5f051e
Gerrit-Change-Number: 24333
Gerrit-PatchSet: 7
Gerrit-Owner: Michael Smith <mi...@cloudera.com>
Gerrit-Reviewer: Csaba Ringhofer <cs...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Reviewer: Jason Fehr <jf...@cloudera.com>
Gerrit-Reviewer: Joe McDonnell <jo...@cloudera.com>
Gerrit-Reviewer: Michael Smith <mi...@cloudera.com>
Gerrit-Comment-Date: Thu, 28 May 2026 21:59:11 +0000
Gerrit-HasComments: No

[Impala-ASF-CR] IMPALA-15026: Update Python infra dependencies for CVEs

Posted by "Joe McDonnell (Code Review)" <ge...@cloudera.org>.
Joe McDonnell has posted comments on this change. ( http://gerrit.cloudera.org:8080/24333 )

Change subject: IMPALA-15026: Update Python infra dependencies for CVEs
......................................................................


Patch Set 1:

(2 comments)

http://gerrit.cloudera.org:8080/#/c/24333/1/infra/python/deps/requirements.txt
File infra/python/deps/requirements.txt:

http://gerrit.cloudera.org:8080/#/c/24333/1/infra/python/deps/requirements.txt@48
PS1, Line 48: pytest == 9.0.3
I tried this a while back and ran into issues with how we use HS2TestSuite. I split it off of the python 3.11 upgrade to avoid complication. I have a prototype here that I could update: https://gerrit.cloudera.org/#/c/23981/


http://gerrit.cloudera.org:8080/#/c/24333/1/infra/python/deps/requirements.txt@74
PS1, Line 74: sqlparse == 0.5.5
Newer versions of sqlparse have a bug that doesn't parse some of our SQLs properly. It breaks dataload, which relies on it splitting up SQL files into individual SQLs. I think it was related to escaped backslash. There is an issue posted on the sqlparse project about it: https://github.com/andialbrecht/sqlparse/issues/814 and there are a couple PRs trying to address it that haven't been merged. I was hoping sqlparse might put out a 0.5.6 with the fixes, but it has been a while.



-- 
To view, visit http://gerrit.cloudera.org:8080/24333
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: I7d2811cec99dd21d201faaae413b37e44f5f051e
Gerrit-Change-Number: 24333
Gerrit-PatchSet: 1
Gerrit-Owner: Michael Smith <mi...@cloudera.com>
Gerrit-Reviewer: Csaba Ringhofer <cs...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Reviewer: Jason Fehr <jf...@cloudera.com>
Gerrit-Reviewer: Joe McDonnell <jo...@cloudera.com>
Gerrit-Reviewer: Michael Smith <mi...@cloudera.com>
Gerrit-Comment-Date: Wed, 20 May 2026 19:53:28 +0000
Gerrit-HasComments: Yes

[Impala-ASF-CR] IMPALA-15026: Update Python infra dependencies for CVEs

Posted by "Michael Smith (Code Review)" <ge...@cloudera.org>.
Michael Smith has posted comments on this change. ( http://gerrit.cloudera.org:8080/24333 )

Change subject: IMPALA-15026: Update Python infra dependencies for CVEs
......................................................................


Patch Set 5:

(1 comment)

I'm running tests with code coverage to test that the gcovr changes don't break anything.

http://gerrit.cloudera.org:8080/#/c/24333/3/infra/python/deps/requirements.txt
File infra/python/deps/requirements.txt:

http://gerrit.cloudera.org:8080/#/c/24333/3/infra/python/deps/requirements.txt@48
PS3, Line 48: pytest == 6.2.5
> Oops, yes I need to back that out.
Done



-- 
To view, visit http://gerrit.cloudera.org:8080/24333
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: I7d2811cec99dd21d201faaae413b37e44f5f051e
Gerrit-Change-Number: 24333
Gerrit-PatchSet: 5
Gerrit-Owner: Michael Smith <mi...@cloudera.com>
Gerrit-Reviewer: Csaba Ringhofer <cs...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Reviewer: Jason Fehr <jf...@cloudera.com>
Gerrit-Reviewer: Joe McDonnell <jo...@cloudera.com>
Gerrit-Reviewer: Michael Smith <mi...@cloudera.com>
Gerrit-Comment-Date: Thu, 21 May 2026 21:26:31 +0000
Gerrit-HasComments: Yes

[Impala-ASF-CR] IMPALA-15026: Update Python infra dependencies for CVEs

Posted by "Impala Public Jenkins (Code Review)" <ge...@cloudera.org>.
Impala Public Jenkins has posted comments on this change. ( http://gerrit.cloudera.org:8080/24333 )

Change subject: IMPALA-15026: Update Python infra dependencies for CVEs
......................................................................


Patch Set 4:

Build Successful 

https://jenkins.impala.io/job/gerrit-code-review-checks/22575/ : Initial code review checks passed. Use gerrit-verify-dryrun-external or gerrit-verify-dryrun to run full precommit tests.


-- 
To view, visit http://gerrit.cloudera.org:8080/24333
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: I7d2811cec99dd21d201faaae413b37e44f5f051e
Gerrit-Change-Number: 24333
Gerrit-PatchSet: 4
Gerrit-Owner: Michael Smith <mi...@cloudera.com>
Gerrit-Reviewer: Csaba Ringhofer <cs...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Reviewer: Jason Fehr <jf...@cloudera.com>
Gerrit-Reviewer: Joe McDonnell <jo...@cloudera.com>
Gerrit-Reviewer: Michael Smith <mi...@cloudera.com>
Gerrit-Comment-Date: Thu, 21 May 2026 18:54:14 +0000
Gerrit-HasComments: No

[Impala-ASF-CR] IMPALA-15026: Update Python infra dependencies for CVEs

Posted by "Joe McDonnell (Code Review)" <ge...@cloudera.org>.
Joe McDonnell has posted comments on this change. ( http://gerrit.cloudera.org:8080/24333 )

Change subject: IMPALA-15026: Update Python infra dependencies for CVEs
......................................................................


Patch Set 3:

(1 comment)

http://gerrit.cloudera.org:8080/#/c/24333/3/infra/python/deps/requirements.txt
File infra/python/deps/requirements.txt:

http://gerrit.cloudera.org:8080/#/c/24333/3/infra/python/deps/requirements.txt@48
PS3, Line 48: pytest == 9.0.3
I assume we don't intend to include this in this change?



-- 
To view, visit http://gerrit.cloudera.org:8080/24333
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: I7d2811cec99dd21d201faaae413b37e44f5f051e
Gerrit-Change-Number: 24333
Gerrit-PatchSet: 3
Gerrit-Owner: Michael Smith <mi...@cloudera.com>
Gerrit-Reviewer: Csaba Ringhofer <cs...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Reviewer: Jason Fehr <jf...@cloudera.com>
Gerrit-Reviewer: Joe McDonnell <jo...@cloudera.com>
Gerrit-Reviewer: Michael Smith <mi...@cloudera.com>
Gerrit-Comment-Date: Thu, 21 May 2026 17:19:39 +0000
Gerrit-HasComments: Yes

[Impala-ASF-CR] IMPALA-15026: Update Python infra dependencies for CVEs

Posted by "Impala Public Jenkins (Code Review)" <ge...@cloudera.org>.
Impala Public Jenkins has posted comments on this change. ( http://gerrit.cloudera.org:8080/24333 )

Change subject: IMPALA-15026: Update Python infra dependencies for CVEs
......................................................................


Patch Set 7: Verified+1


-- 
To view, visit http://gerrit.cloudera.org:8080/24333
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: I7d2811cec99dd21d201faaae413b37e44f5f051e
Gerrit-Change-Number: 24333
Gerrit-PatchSet: 7
Gerrit-Owner: Michael Smith <mi...@cloudera.com>
Gerrit-Reviewer: Csaba Ringhofer <cs...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Reviewer: Jason Fehr <jf...@cloudera.com>
Gerrit-Reviewer: Joe McDonnell <jo...@cloudera.com>
Gerrit-Reviewer: Michael Smith <mi...@cloudera.com>
Gerrit-Comment-Date: Fri, 29 May 2026 02:18:14 +0000
Gerrit-HasComments: No

[Impala-ASF-CR] IMPALA-15026: Update Python infra dependencies for CVEs

Posted by "Michael Smith (Code Review)" <ge...@cloudera.org>.
Hello Jason Fehr, Joe McDonnell, Csaba Ringhofer, Impala Public Jenkins, 

I'd like you to reexamine a change. Please visit

    http://gerrit.cloudera.org:8080/24333

to look at the new patch set (#2).

Change subject: IMPALA-15026: Update Python infra dependencies for CVEs
......................................................................

IMPALA-15026: Update Python infra dependencies for CVEs

Updates infra/python/deps to address CVEs highlighted by dependabot.

Change-Id: I7d2811cec99dd21d201faaae413b37e44f5f051e
---
M infra/python/README
M infra/python/deps/adls-requirements.txt
M infra/python/deps/extended-test-requirements.txt
M infra/python/deps/gcovr-requirements.txt
M infra/python/deps/requirements.txt
5 files changed, 14 insertions(+), 15 deletions(-)


  git pull ssh://gerrit.cloudera.org:29418/Impala-ASF refs/changes/33/24333/2
-- 
To view, visit http://gerrit.cloudera.org:8080/24333
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: newpatchset
Gerrit-Change-Id: I7d2811cec99dd21d201faaae413b37e44f5f051e
Gerrit-Change-Number: 24333
Gerrit-PatchSet: 2
Gerrit-Owner: Michael Smith <mi...@cloudera.com>
Gerrit-Reviewer: Csaba Ringhofer <cs...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Reviewer: Jason Fehr <jf...@cloudera.com>
Gerrit-Reviewer: Joe McDonnell <jo...@cloudera.com>
Gerrit-Reviewer: Michael Smith <mi...@cloudera.com>

[Impala-ASF-CR] IMPALA-15026: Update Python infra dependencies for CVEs

Posted by "Impala Public Jenkins (Code Review)" <ge...@cloudera.org>.
Impala Public Jenkins has posted comments on this change. ( http://gerrit.cloudera.org:8080/24333 )

Change subject: IMPALA-15026: Update Python infra dependencies for CVEs
......................................................................


Patch Set 5:

Build Successful 

https://jenkins.impala.io/job/gerrit-code-review-checks/22579/ : Initial code review checks passed. Use gerrit-verify-dryrun-external or gerrit-verify-dryrun to run full precommit tests.


-- 
To view, visit http://gerrit.cloudera.org:8080/24333
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: I7d2811cec99dd21d201faaae413b37e44f5f051e
Gerrit-Change-Number: 24333
Gerrit-PatchSet: 5
Gerrit-Owner: Michael Smith <mi...@cloudera.com>
Gerrit-Reviewer: Csaba Ringhofer <cs...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Reviewer: Jason Fehr <jf...@cloudera.com>
Gerrit-Reviewer: Joe McDonnell <jo...@cloudera.com>
Gerrit-Reviewer: Michael Smith <mi...@cloudera.com>
Gerrit-Comment-Date: Thu, 21 May 2026 21:45:49 +0000
Gerrit-HasComments: No

[Impala-ASF-CR] IMPALA-15026: Update Python infra dependencies for CVEs

Posted by "Jason Fehr (Code Review)" <ge...@cloudera.org>.
Jason Fehr has posted comments on this change. ( http://gerrit.cloudera.org:8080/24333 )

Change subject: IMPALA-15026: Update Python infra dependencies for CVEs
......................................................................


Patch Set 6: Code-Review+1


-- 
To view, visit http://gerrit.cloudera.org:8080/24333
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: I7d2811cec99dd21d201faaae413b37e44f5f051e
Gerrit-Change-Number: 24333
Gerrit-PatchSet: 6
Gerrit-Owner: Michael Smith <mi...@cloudera.com>
Gerrit-Reviewer: Csaba Ringhofer <cs...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Reviewer: Jason Fehr <jf...@cloudera.com>
Gerrit-Reviewer: Joe McDonnell <jo...@cloudera.com>
Gerrit-Reviewer: Michael Smith <mi...@cloudera.com>
Gerrit-Comment-Date: Thu, 28 May 2026 21:06:45 +0000
Gerrit-HasComments: No

[Impala-ASF-CR] IMPALA-15026: Update Python infra dependencies for CVEs

Posted by "Michael Smith (Code Review)" <ge...@cloudera.org>.
Michael Smith has posted comments on this change. ( http://gerrit.cloudera.org:8080/24333 )

Change subject: IMPALA-15026: Update Python infra dependencies for CVEs
......................................................................


Patch Set 1:

(2 comments)

http://gerrit.cloudera.org:8080/#/c/24333/1/infra/python/deps/requirements.txt
File infra/python/deps/requirements.txt:

http://gerrit.cloudera.org:8080/#/c/24333/1/infra/python/deps/requirements.txt@48
PS1, Line 48: pytest == 9.0.3
> I tried this a while back and ran into issues with how we use HS2TestSuite.
I'm in favor.


http://gerrit.cloudera.org:8080/#/c/24333/1/infra/python/deps/requirements.txt@74
PS1, Line 74: sqlparse == 0.5.5
> Newer versions of sqlparse have a bug that doesn't parse some of our SQLs p
Ack



-- 
To view, visit http://gerrit.cloudera.org:8080/24333
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: I7d2811cec99dd21d201faaae413b37e44f5f051e
Gerrit-Change-Number: 24333
Gerrit-PatchSet: 1
Gerrit-Owner: Michael Smith <mi...@cloudera.com>
Gerrit-Reviewer: Csaba Ringhofer <cs...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Reviewer: Jason Fehr <jf...@cloudera.com>
Gerrit-Reviewer: Joe McDonnell <jo...@cloudera.com>
Gerrit-Reviewer: Michael Smith <mi...@cloudera.com>
Gerrit-Comment-Date: Wed, 20 May 2026 21:12:24 +0000
Gerrit-HasComments: Yes

[Impala-ASF-CR] IMPALA-15026: Update Python infra dependencies for CVEs

Posted by "Michael Smith (Code Review)" <ge...@cloudera.org>.
Michael Smith has posted comments on this change. ( http://gerrit.cloudera.org:8080/24333 )

Change subject: IMPALA-15026: Update Python infra dependencies for CVEs
......................................................................


Patch Set 3:

(1 comment)

http://gerrit.cloudera.org:8080/#/c/24333/3/infra/python/deps/requirements.txt
File infra/python/deps/requirements.txt:

http://gerrit.cloudera.org:8080/#/c/24333/3/infra/python/deps/requirements.txt@48
PS3, Line 48: pytest == 9.0.3
> I assume we don't intend to include this in this change?
Oops, yes I need to back that out.



-- 
To view, visit http://gerrit.cloudera.org:8080/24333
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: I7d2811cec99dd21d201faaae413b37e44f5f051e
Gerrit-Change-Number: 24333
Gerrit-PatchSet: 3
Gerrit-Owner: Michael Smith <mi...@cloudera.com>
Gerrit-Reviewer: Csaba Ringhofer <cs...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Reviewer: Jason Fehr <jf...@cloudera.com>
Gerrit-Reviewer: Joe McDonnell <jo...@cloudera.com>
Gerrit-Reviewer: Michael Smith <mi...@cloudera.com>
Gerrit-Comment-Date: Thu, 21 May 2026 18:00:37 +0000
Gerrit-HasComments: Yes

[Impala-ASF-CR] IMPALA-15026: Update Python infra dependencies for CVEs

Posted by "Jason Fehr (Code Review)" <ge...@cloudera.org>.
Jason Fehr has removed a vote on this change.

Change subject: IMPALA-15026: Update Python infra dependencies for CVEs
......................................................................


Removed Code-Review+2 by Jason Fehr <jf...@cloudera.com>
-- 
To view, visit http://gerrit.cloudera.org:8080/24333
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: deleteVote
Gerrit-Change-Id: I7d2811cec99dd21d201faaae413b37e44f5f051e
Gerrit-Change-Number: 24333
Gerrit-PatchSet: 3
Gerrit-Owner: Michael Smith <mi...@cloudera.com>
Gerrit-Reviewer: Csaba Ringhofer <cs...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Reviewer: Jason Fehr <jf...@cloudera.com>
Gerrit-Reviewer: Joe McDonnell <jo...@cloudera.com>
Gerrit-Reviewer: Michael Smith <mi...@cloudera.com>

[Impala-ASF-CR] IMPALA-15026: Update Python infra dependencies for CVEs

Posted by "Impala Public Jenkins (Code Review)" <ge...@cloudera.org>.
Impala Public Jenkins has posted comments on this change. ( http://gerrit.cloudera.org:8080/24333 )

Change subject: IMPALA-15026: Update Python infra dependencies for CVEs
......................................................................


Patch Set 2:

Build Successful 

https://jenkins.impala.io/job/gerrit-code-review-checks/22571/ : Initial code review checks passed. Use gerrit-verify-dryrun-external or gerrit-verify-dryrun to run full precommit tests.


-- 
To view, visit http://gerrit.cloudera.org:8080/24333
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: I7d2811cec99dd21d201faaae413b37e44f5f051e
Gerrit-Change-Number: 24333
Gerrit-PatchSet: 2
Gerrit-Owner: Michael Smith <mi...@cloudera.com>
Gerrit-Reviewer: Csaba Ringhofer <cs...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Reviewer: Jason Fehr <jf...@cloudera.com>
Gerrit-Reviewer: Joe McDonnell <jo...@cloudera.com>
Gerrit-Reviewer: Michael Smith <mi...@cloudera.com>
Gerrit-Comment-Date: Thu, 21 May 2026 16:07:52 +0000
Gerrit-HasComments: No

[Impala-ASF-CR] IMPALA-15026: Update Python infra dependencies for CVEs

Posted by "Impala Public Jenkins (Code Review)" <ge...@cloudera.org>.
Impala Public Jenkins has posted comments on this change. ( http://gerrit.cloudera.org:8080/24333 )

Change subject: IMPALA-15026: Update Python infra dependencies for CVEs
......................................................................


Patch Set 2:

Build Failed 

https://jenkins.impala.io/job/gerrit-code-review-checks/22559/ : Initial code review checks failed. See linked job for details on the failure.


-- 
To view, visit http://gerrit.cloudera.org:8080/24333
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: I7d2811cec99dd21d201faaae413b37e44f5f051e
Gerrit-Change-Number: 24333
Gerrit-PatchSet: 2
Gerrit-Owner: Michael Smith <mi...@cloudera.com>
Gerrit-Reviewer: Csaba Ringhofer <cs...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Reviewer: Jason Fehr <jf...@cloudera.com>
Gerrit-Reviewer: Joe McDonnell <jo...@cloudera.com>
Gerrit-Reviewer: Michael Smith <mi...@cloudera.com>
Gerrit-Comment-Date: Wed, 20 May 2026 21:34:51 +0000
Gerrit-HasComments: No

[Impala-ASF-CR] IMPALA-15026: Update Python infra dependencies for CVEs

Posted by "Jason Fehr (Code Review)" <ge...@cloudera.org>.
Jason Fehr has posted comments on this change. ( http://gerrit.cloudera.org:8080/24333 )

Change subject: IMPALA-15026: Update Python infra dependencies for CVEs
......................................................................


Patch Set 5: Code-Review+1


-- 
To view, visit http://gerrit.cloudera.org:8080/24333
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: I7d2811cec99dd21d201faaae413b37e44f5f051e
Gerrit-Change-Number: 24333
Gerrit-PatchSet: 5
Gerrit-Owner: Michael Smith <mi...@cloudera.com>
Gerrit-Reviewer: Csaba Ringhofer <cs...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Reviewer: Jason Fehr <jf...@cloudera.com>
Gerrit-Reviewer: Joe McDonnell <jo...@cloudera.com>
Gerrit-Reviewer: Michael Smith <mi...@cloudera.com>
Gerrit-Comment-Date: Fri, 22 May 2026 16:11:14 +0000
Gerrit-HasComments: No

[Impala-ASF-CR] IMPALA-15026: Update Python infra dependencies for CVEs

Posted by "Csaba Ringhofer (Code Review)" <ge...@cloudera.org>.
Csaba Ringhofer has posted comments on this change. ( http://gerrit.cloudera.org:8080/24333 )

Change subject: IMPALA-15026: Update Python infra dependencies for CVEs
......................................................................


Patch Set 3: Code-Review+1


-- 
To view, visit http://gerrit.cloudera.org:8080/24333
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: I7d2811cec99dd21d201faaae413b37e44f5f051e
Gerrit-Change-Number: 24333
Gerrit-PatchSet: 3
Gerrit-Owner: Michael Smith <mi...@cloudera.com>
Gerrit-Reviewer: Csaba Ringhofer <cs...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Reviewer: Jason Fehr <jf...@cloudera.com>
Gerrit-Reviewer: Joe McDonnell <jo...@cloudera.com>
Gerrit-Reviewer: Michael Smith <mi...@cloudera.com>
Gerrit-Comment-Date: Thu, 21 May 2026 17:16:06 +0000
Gerrit-HasComments: No

[Impala-ASF-CR] IMPALA-15026: Update Python infra dependencies for CVEs

Posted by "Impala Public Jenkins (Code Review)" <ge...@cloudera.org>.
Impala Public Jenkins has posted comments on this change. ( http://gerrit.cloudera.org:8080/24333 )

Change subject: IMPALA-15026: Update Python infra dependencies for CVEs
......................................................................


Patch Set 7:

Build started: https://jenkins.impala.io/job/gerrit-verify-dryrun/13549/ DRY_RUN=false


-- 
To view, visit http://gerrit.cloudera.org:8080/24333
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: I7d2811cec99dd21d201faaae413b37e44f5f051e
Gerrit-Change-Number: 24333
Gerrit-PatchSet: 7
Gerrit-Owner: Michael Smith <mi...@cloudera.com>
Gerrit-Reviewer: Csaba Ringhofer <cs...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Reviewer: Jason Fehr <jf...@cloudera.com>
Gerrit-Reviewer: Joe McDonnell <jo...@cloudera.com>
Gerrit-Reviewer: Michael Smith <mi...@cloudera.com>
Gerrit-Comment-Date: Thu, 28 May 2026 21:48:11 +0000
Gerrit-HasComments: No

[Impala-ASF-CR] IMPALA-15026: Update Python infra dependencies for CVEs

Posted by "Joe McDonnell (Code Review)" <ge...@cloudera.org>.
Joe McDonnell has posted comments on this change. ( http://gerrit.cloudera.org:8080/24333 )

Change subject: IMPALA-15026: Update Python infra dependencies for CVEs
......................................................................


Patch Set 6: Code-Review+1


-- 
To view, visit http://gerrit.cloudera.org:8080/24333
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: I7d2811cec99dd21d201faaae413b37e44f5f051e
Gerrit-Change-Number: 24333
Gerrit-PatchSet: 6
Gerrit-Owner: Michael Smith <mi...@cloudera.com>
Gerrit-Reviewer: Csaba Ringhofer <cs...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Reviewer: Jason Fehr <jf...@cloudera.com>
Gerrit-Reviewer: Joe McDonnell <jo...@cloudera.com>
Gerrit-Reviewer: Michael Smith <mi...@cloudera.com>
Gerrit-Comment-Date: Thu, 28 May 2026 21:39:24 +0000
Gerrit-HasComments: No

[Impala-ASF-CR] IMPALA-15026: Update Python infra dependencies for CVEs

Posted by "Jason Fehr (Code Review)" <ge...@cloudera.org>.
Jason Fehr has posted comments on this change. ( http://gerrit.cloudera.org:8080/24333 )

Change subject: IMPALA-15026: Update Python infra dependencies for CVEs
......................................................................


Patch Set 3: Code-Review+2


-- 
To view, visit http://gerrit.cloudera.org:8080/24333
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: I7d2811cec99dd21d201faaae413b37e44f5f051e
Gerrit-Change-Number: 24333
Gerrit-PatchSet: 3
Gerrit-Owner: Michael Smith <mi...@cloudera.com>
Gerrit-Reviewer: Csaba Ringhofer <cs...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Reviewer: Jason Fehr <jf...@cloudera.com>
Gerrit-Reviewer: Joe McDonnell <jo...@cloudera.com>
Gerrit-Reviewer: Michael Smith <mi...@cloudera.com>
Gerrit-Comment-Date: Thu, 21 May 2026 17:17:02 +0000
Gerrit-HasComments: No

[Impala-ASF-CR] IMPALA-15026: Update Python infra dependencies for CVEs

Posted by "Impala Public Jenkins (Code Review)" <ge...@cloudera.org>.
Impala Public Jenkins has posted comments on this change. ( http://gerrit.cloudera.org:8080/24333 )

Change subject: IMPALA-15026: Update Python infra dependencies for CVEs
......................................................................


Patch Set 3: Verified-1

Build failed: https://jenkins.impala.io/job/gerrit-verify-dryrun/13530/


-- 
To view, visit http://gerrit.cloudera.org:8080/24333
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: I7d2811cec99dd21d201faaae413b37e44f5f051e
Gerrit-Change-Number: 24333
Gerrit-PatchSet: 3
Gerrit-Owner: Michael Smith <mi...@cloudera.com>
Gerrit-Reviewer: Csaba Ringhofer <cs...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Reviewer: Jason Fehr <jf...@cloudera.com>
Gerrit-Reviewer: Joe McDonnell <jo...@cloudera.com>
Gerrit-Reviewer: Michael Smith <mi...@cloudera.com>
Gerrit-Comment-Date: Thu, 21 May 2026 20:01:56 +0000
Gerrit-HasComments: No

[Impala-ASF-CR] IMPALA-15026: Update Python infra dependencies for CVEs

Posted by "Jason Fehr (Code Review)" <ge...@cloudera.org>.
Jason Fehr has posted comments on this change. ( http://gerrit.cloudera.org:8080/24333 )

Change subject: IMPALA-15026: Update Python infra dependencies for CVEs
......................................................................


Patch Set 4: Code-Review+1


-- 
To view, visit http://gerrit.cloudera.org:8080/24333
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: I7d2811cec99dd21d201faaae413b37e44f5f051e
Gerrit-Change-Number: 24333
Gerrit-PatchSet: 4
Gerrit-Owner: Michael Smith <mi...@cloudera.com>
Gerrit-Reviewer: Csaba Ringhofer <cs...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Reviewer: Jason Fehr <jf...@cloudera.com>
Gerrit-Reviewer: Joe McDonnell <jo...@cloudera.com>
Gerrit-Reviewer: Michael Smith <mi...@cloudera.com>
Gerrit-Comment-Date: Thu, 21 May 2026 18:34:05 +0000
Gerrit-HasComments: No

[Impala-ASF-CR] IMPALA-15026: Update Python infra dependencies for CVEs

Posted by "Michael Smith (Code Review)" <ge...@cloudera.org>.
Hello Jason Fehr, Joe McDonnell, Csaba Ringhofer, Impala Public Jenkins, 

I'd like you to reexamine a change. Please visit

    http://gerrit.cloudera.org:8080/24333

to look at the new patch set (#5).

Change subject: IMPALA-15026: Update Python infra dependencies for CVEs
......................................................................

IMPALA-15026: Update Python infra dependencies for CVEs

Updates infra/python/deps to address CVEs highlighted by dependabot.

Omits updating pytest because going to version 9 requires more work.

Testing: tested adls and gcovr requirements with

    env TARGET_FILESYSTEM=adls azure_client_id=a azure_tenant_id=b
    azure_client_secret=c azure_data_lake_store_name=d
    ./buildall.sh -notests -codecoverage

Change-Id: I7d2811cec99dd21d201faaae413b37e44f5f051e
---
M infra/python/README
M infra/python/deps/adls-requirements.txt
M infra/python/deps/extended-test-requirements.txt
M infra/python/deps/gcovr-requirements.txt
M infra/python/deps/requirements.txt
M infra/python/deps/setuptools-requirements.txt
6 files changed, 35 insertions(+), 23 deletions(-)


  git pull ssh://gerrit.cloudera.org:29418/Impala-ASF refs/changes/33/24333/5
-- 
To view, visit http://gerrit.cloudera.org:8080/24333
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: newpatchset
Gerrit-Change-Id: I7d2811cec99dd21d201faaae413b37e44f5f051e
Gerrit-Change-Number: 24333
Gerrit-PatchSet: 5
Gerrit-Owner: Michael Smith <mi...@cloudera.com>
Gerrit-Reviewer: Csaba Ringhofer <cs...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Reviewer: Jason Fehr <jf...@cloudera.com>
Gerrit-Reviewer: Joe McDonnell <jo...@cloudera.com>
Gerrit-Reviewer: Michael Smith <mi...@cloudera.com>

[Impala-ASF-CR] IMPALA-15026: Update Python infra dependencies for CVEs

Posted by "Michael Smith (Code Review)" <ge...@cloudera.org>.
Hello Jason Fehr, Joe McDonnell, Csaba Ringhofer, Impala Public Jenkins, 

I'd like you to reexamine a change. Please visit

    http://gerrit.cloudera.org:8080/24333

to look at the new patch set (#4).

Change subject: IMPALA-15026: Update Python infra dependencies for CVEs
......................................................................

IMPALA-15026: Update Python infra dependencies for CVEs

Updates infra/python/deps to address CVEs highlighted by dependabot.

Omits updating pytest because going to version 9 requires more work.

Change-Id: I7d2811cec99dd21d201faaae413b37e44f5f051e
---
M infra/python/README
M infra/python/deps/adls-requirements.txt
M infra/python/deps/extended-test-requirements.txt
M infra/python/deps/gcovr-requirements.txt
M infra/python/deps/requirements.txt
5 files changed, 13 insertions(+), 14 deletions(-)


  git pull ssh://gerrit.cloudera.org:29418/Impala-ASF refs/changes/33/24333/4
-- 
To view, visit http://gerrit.cloudera.org:8080/24333
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: newpatchset
Gerrit-Change-Id: I7d2811cec99dd21d201faaae413b37e44f5f051e
Gerrit-Change-Number: 24333
Gerrit-PatchSet: 4
Gerrit-Owner: Michael Smith <mi...@cloudera.com>
Gerrit-Reviewer: Csaba Ringhofer <cs...@cloudera.com>
Gerrit-Reviewer: Impala Public Jenkins <im...@cloudera.com>
Gerrit-Reviewer: Jason Fehr <jf...@cloudera.com>
Gerrit-Reviewer: Joe McDonnell <jo...@cloudera.com>
Gerrit-Reviewer: Michael Smith <mi...@cloudera.com>