You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@polaris.apache.org by yz...@apache.org on 2026/05/26 21:51:37 UTC

(polaris) branch yzou-generic-table-location-validation updated (f5d3c59b8d -> 88958e757a)

This is an automated email from the ASF dual-hosted git repository.

gh-yzou pushed a change to branch yzou-generic-table-location-validation
in repository https://gitbox.apache.org/repos/asf/polaris.git


    omit f5d3c59b8d add overlap checking
    omit 58095a17d2 fix test failure
    omit 9237acb57b fix tests
     add adebc33f4b Ranger: map REGISTER_VIEW to view-create privilege (#4529)
     add 3e577ab867 Forbid special characters in entity names (#4479)
     add 872d6b8ca7 CLI: Add REPL support to CLI (#4465)
     add b637d327e6 Migrate remaining modules to JSpecify null annotations (#4517)
     add 4e2e71ac11 Remove deprecated task timeout constants (#4532)
     add d2fbd5b840 fix(catalog): return 404 instead of 503 when drop races with concurrent delete (#4499)
     add 6b16f7a25e Update registry.access.redhat.com/ubi9/openjdk-21-runtime Docker tag to v1.24-2.1779229707 (#4539)
     add 382613adac Revert update gradle/actions action to v5 (#4518)
     add 95d28e13a5 NoSQL: Add commit log offset coverage (#4528)
     add d33c3d1a56 NoSQL: Fix retry sleep elapsed time calculation (#4527)
     add 1066115a87 NoSQL: Bypass decorators during retention scans (#4525)
     add a9e4f53093 NoSQL: Avoid deserializing lazy NoSQL index tombstones (#4474)
     add b4e98d201e NoSQL: vertx async exec test coverage + rare race fix (#4504)
     add 832e9507e7 Add Polaris threat model and security guidance for agents (#4433)
     add fc3a83c2b1 nit: Fix deprecation warnings after upgrade to Iceberg 1.11 (#4536)
     add fd61947f84 fix tests
     add a8d7ff3061 fix test failure
     add 440a2fe55b add overlap checking
     add 88958e757a fix regression tests

This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version.  This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:

 * -- * -- B -- O -- O -- O   (f5d3c59b8d)
            \
             N -- N -- N   refs/heads/yzou-generic-table-location-validation (88958e757a)

You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.

Any revisions marked "omit" are not gone; other references still
refer to them.  Any revisions marked "discard" are gone forever.

No new revisions were added by this update.

Summary of changes:
 .../actions/ci-incr-build-cache-prepare/action.yml |   2 +-
 AGENTS.md                                          |  20 +
 CHANGELOG.md                                       |   8 +-
 SECURITY-THREAT-MODEL.md                           | 740 +++++++++++++++++++++
 .../python/apache_polaris/cli/command/__init__.py  |   7 +
 client/python/apache_polaris/cli/command/repl.py   | 168 +++++
 client/python/apache_polaris/cli/constants.py      |  12 +
 .../apache_polaris/cli/options/option_tree.py      |  11 +
 client/python/apache_polaris/cli/polaris_cli.py    |   4 +-
 client/python/tests/test_parser_basic.py           |   1 +
 client/python/tests/test_repl_command.py           | 193 ++++++
 extensions/auth/opa/impl/build.gradle.kts          |   1 +
 .../extension/auth/opa/OpaPolarisAuthorizer.java   |  32 +-
 .../auth/opa/token/BearerTokenProvider.java        |   5 +-
 .../auth/opa/token/FileBearerTokenProvider.java    |   2 +-
 .../auth/opa/token/StaticBearerTokenProvider.java  |   4 +-
 extensions/auth/ranger/impl/build.gradle.kts       |   2 +-
 .../auth/ranger/RangerPolarisAuthorizer.java       |  26 +-
 .../ranger/RangerPolarisOperationSemantics.java    |   3 +
 .../authz_tests/tests_authz_namespace.json         |   4 +
 .../it/test/PolarisRestCatalogIntegrationBase.java |  41 +-
 .../polaris/nosql/async/vertx/VertxAsyncExec.java  | 105 ++-
 .../nosql/async/vertx/TestVertxAsyncExec.java      | 133 ++++
 .../persistence/nosql/api/index/IndexKey.java      |   8 +
 .../nosql/api/index/IndexValueSerializer.java      |   8 +
 .../polaris/persistence/nosql/api/obj/ObjRef.java  |   5 +
 .../persistence/nosql/api/index/TestIndexKey.java  |   5 +
 .../persistence/nosql/api/obj/TestObjRef.java      |  11 +
 .../nosql/impl/commits/retry/RetryLoopImpl.java    |   2 +-
 .../nosql/impl/indexes/AbstractIndexElement.java   |   5 +
 .../nosql/impl/indexes/IndexElementIter.java       |   3 +-
 .../persistence/nosql/impl/indexes/IndexImpl.java  | 110 ++-
 .../nosql/impl/indexes/InternalIndexElement.java   |   2 +
 .../impl/commits/retry/TestRetryLoopImpl.java      |   8 +-
 .../nosql/impl/indexes/ObjTestValue.java           |   5 +
 .../nosql/impl/indexes/TestIndexImpl.java          | 236 ++++++-
 .../nosql/impl/commits/BaseTestCommitLogImpl.java  |  62 ++
 .../maintenance/impl/MaintenanceServiceImpl.java   |   2 +-
 .../coretypes/catalog/EntityIdSetSerializer.java   |   5 +
 .../nosql/coretypes/changes/ChangeSerializer.java  |  19 +
 .../coretypes/realm/PolicyMappingSerializer.java   |   5 +
 .../nosql/coretypes/catalog/TestEntityIdSet.java   |   6 +
 .../nosql/coretypes/changes/TestChanges.java       |   5 +
 .../nosql/coretypes/realm/TestPolicyMapping.java   |   5 +
 persistence/relational-jdbc/build.gradle.kts       |   2 +-
 .../relational/jdbc/DatasourceOperations.java      |  12 +-
 .../relational/jdbc/JdbcBasePersistenceImpl.java   | 156 ++---
 .../jdbc/JdbcMetaStoreManagerFactory.java          |   2 +-
 .../relational/jdbc/QueryGenerator.java            |  96 +--
 .../RelationalJdbcIdempotencyStore.java            |   4 +-
 .../jdbc/models/ModelCommitMetricsReport.java      |  23 +-
 .../relational/jdbc/models/ModelEvent.java         |   8 +-
 .../jdbc/models/ModelIdempotencyRecord.java        |  23 +-
 .../jdbc/models/ModelScanMetricsReport.java        |  35 +-
 .../spark/v3.5/regtests/suites/spark_sql_delta.ref |   4 +-
 .../spark/v3.5/regtests/suites/spark_sql_delta.sh  |   4 +-
 .../spark/v3.5/regtests/suites/spark_sql_hudi.ref  |   4 +-
 .../spark/v3.5/regtests/suites/spark_sql_hudi.sh   |   4 +-
 plugins/spark/v3.5/spark/build.gradle.kts          |   2 +-
 .../apache/polaris/spark/rest/GenericTable.java    |   2 +-
 .../polaris/core/entity/PolarisTaskConstants.java  |  14 -
 runtime/admin/build.gradle.kts                     |   1 +
 runtime/admin/src/main/docker/Dockerfile.jvm       |   2 +-
 .../admintool/config/AdminToolProducers.java       |   2 +-
 runtime/server/src/main/docker/Dockerfile.jvm      |   2 +-
 runtime/service/build.gradle.kts                   |   3 +
 .../service/it/RestCatalogMinIOSpecialIT.java      |  36 -
 .../polaris/service/admin/PolarisAdminService.java |  48 +-
 .../polaris/service/auth/PolarisCredential.java    |  11 +-
 .../auth/external/mapping/ClaimsLocator.java       |   2 +-
 .../auth/internal/broker/InternalPolarisToken.java |   6 +-
 .../auth/internal/broker/LocalRSAKeyProvider.java  |   6 +-
 .../auth/internal/broker/TokenResponse.java        |  11 +-
 .../internal/service/OAuthTokenErrorResponse.java  |   2 +-
 .../service/catalog/AccessDelegationMode.java      |   2 +-
 .../catalog/AccessDelegationModeResolver.java      |   9 +-
 .../DefaultAccessDelegationModeResolver.java       |  10 +-
 .../service/catalog/common/LocationUtils.java      |   4 +-
 .../catalog/iceberg/CatalogHandlerUtils.java       |   2 +-
 .../service/catalog/iceberg/IcebergCatalog.java    |  33 +-
 .../catalog/iceberg/IcebergCatalogHandler.java     |   6 +-
 .../service/catalog/io/DefaultFileIOFactory.java   |  10 +-
 .../polaris/service/catalog/io/FileIOFactory.java  |   8 +-
 .../catalog/io/StorageAccessConfigProvider.java    |  12 +-
 .../catalog/io/WasbTranslatingFileIOFactory.java   |   8 +-
 .../service/catalog/policy/PolicyCatalog.java      |   2 +-
 .../catalog/policy/PolicyCatalogHandler.java       |   2 +-
 .../service/catalog/policy/PolicyCatalogUtils.java |   6 +-
 .../catalog/validation/EntityNameValidator.java    |  42 +-
 .../validation/IcebergPropertiesValidation.java    |  10 +-
 .../service/config/DefaultConfigurationStore.java  |   8 +-
 .../DefaultPolarisCredentialManager.java           |   6 +-
 .../BearerConnectionCredentialVendor.java          |   6 +-
 .../ImplicitConnectionCredentialVendor.java        |   6 +-
 .../connection/OAuthClientCredentialVendor.java    |   6 +-
 .../SigV4ConnectionCredentialVendor.java           |   8 +-
 .../IcebergJsonProcessingExceptionMapper.java      |   2 +-
 .../apache/polaris/service/http/IfNoneMatch.java   |   4 +-
 .../AwsIamServiceIdentityConfiguration.java        |   6 +-
 .../ResolvableServiceIdentityConfiguration.java    |   4 +-
 .../provider/DefaultServiceIdentityProvider.java   |   8 +-
 .../metrics/PolarisValueExpressionResolver.java    |   6 +-
 .../InMemoryPolarisMetaStoreManagerFactory.java    |  12 +-
 .../PolarisStorageIntegrationProviderImpl.java     |  24 +-
 .../task/ManifestFileCleanupTaskHandler.java       |   2 +-
 .../polaris/service/task/TaskExecutorImpl.java     |   6 +-
 .../service/tracing/DefaultRequestIdGenerator.java |   4 +-
 .../service/admin/PolarisAuthzTestBase.java        |   4 +-
 .../iceberg/AbstractIcebergCatalogTest.java        |  72 +-
 .../iceberg/IcebergOverlappingTableTest.java       |  29 +-
 .../service/catalog/io/FileIOFactoryTest.java      |   4 +-
 .../validation/EntityNameValidatorTest.java        |  69 +-
 .../apache/polaris/service/task/TaskTestUtils.java |   4 +-
 .../apache/polaris/service/task/TestSnapshot.java  |   6 +-
 .../service/catalog/io/MeasuredFileIOFactory.java  |   8 +-
 .../in-dev/unreleased/command-line-interface.md    |  18 +
 site/content/in-dev/unreleased/entities.md         |  18 +
 tools/config-docs/generator/build.gradle.kts       |   1 +
 .../docs/generator/PolarisConfigurationInfo.java   |   2 +-
 tools/misc-types/build.gradle.kts                  |   1 +
 .../polaris/misc/types/memorysize/MemorySize.java  |  10 +-
 .../misc/types/memorysize/TestMemorySize.java      |   8 +-
 122 files changed, 2524 insertions(+), 582 deletions(-)
 create mode 100644 SECURITY-THREAT-MODEL.md
 create mode 100644 client/python/apache_polaris/cli/command/repl.py
 create mode 100644 client/python/tests/test_repl_command.py