You are viewing a plain text version of this content. The canonical link for it is here.

Posted to notifications@texera.apache.org by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/14 13:19:23 UTC

[PR] fix(deps): bump io.altoo:scala-kryo-serialization_2.13 from 1.3.0 to 1.5.2 [texera]

dependabot[bot] opened a new pull request, #6410:
URL: https://github.com/apache/texera/pull/6410

   Bumps [io.altoo:scala-kryo-serialization_2.13](https://github.com/altoo-ag/scala-kryo-serialization) from 1.3.0 to 1.5.2.
   <details>
   <summary>Release notes</summary>
   <p><em>Sourced from <a href="https://github.com/altoo-ag/scala-kryo-serialization/releases">io.altoo:scala-kryo-serialization_2.13's releases</a>.</em></p>
   <blockquote>
   <h2>v1.5.2</h2>
   <h2>What's Changed</h2>
   <ul>
   <li>Add serializer-cache to allow to use ThreadLocal based caching or disable caching.</li>
   <li>Allow to customize the number of held instances in the queue serializer-cache.</li>
   </ul>
   <p><strong>Full Changelog</strong>: <a href="https://github.com/altoo-ag/scala-kryo-serialization/compare/v1.5.0...v1.5.2">https://github.com/altoo-ag/scala-kryo-serialization/compare/v1.5.0...v1.5.2</a></p>
   <h2>v1.5.0</h2>
   <h2>What's Changed</h2>
   <ul>
   <li>Dropped support for jdk11 and scala 2.12</li>
   <li>Serializer performance optimizations in concurrency and collection deserialization</li>
   </ul>
   <p><strong>Full Changelog</strong>: <a href="https://github.com/altoo-ag/scala-kryo-serialization/compare/v1.4.0...v1.5.0">https://github.com/altoo-ag/scala-kryo-serialization/compare/v1.4.0...v1.5.0</a></p>
   <h2>v1.4.0</h2>
   <h2>What's Changed</h2>
   <ul>
   <li>Remove dependency to agrona (replace with jdk queue)</li>
   <li>Fix issue when concurrently serializing lazy vals.  Contributed by <a href="https://github.com/sujeenoh-dev"><code>@sujeenoh-dev</code></a> in <a href="https://redirect.github.com/altoo-ag/scala-kryo-serialization/pull/31">altoo-ag/scala-kryo-serialization#31</a></li>
   <li>Various simple cleanups</li>
   <li>Dependency upgrades</li>
   </ul>
   <p><strong>Full Changelog</strong>: <a href="https://github.com/altoo-ag/scala-kryo-serialization/compare/v1.3.1...v1.4.0">https://github.com/altoo-ag/scala-kryo-serialization/compare/v1.3.1...v1.4.0</a></p>
   <h2>v1.3.1</h2>
   <h2>What's Changed</h2>
   <ul>
   <li>fix lz4 <a href="https://sites.google.com/sonatype.com/vulnerabilities/cve-2025-12183">cve-2025-12183</a> by using the latest library</li>
   <li>test improvements</li>
   </ul>
   <p><strong>Full Changelog</strong>: <a href="https://github.com/altoo-ag/scala-kryo-serialization/compare/v1.3.0...v1.3.1">https://github.com/altoo-ag/scala-kryo-serialization/compare/v1.3.0...v1.3.1</a></p>
   </blockquote>
   </details>
   <details>
   <summary>Commits</summary>
   <ul>
   <li><a href="https://github.com/altoo-ag/scala-kryo-serialization/commit/f743503e736b187b89aba91ac3da8f673b23051d"><code>f743503</code></a> Setting version to 1.5.2</li>
   <li><a href="https://github.com/altoo-ag/scala-kryo-serialization/commit/178374374d80cb06d9188152bdf9bf1c513e2f9b"><code>1783743</code></a> Try to improve naming of the new serializer-cache but retain the name queue t...</li>
   <li><a href="https://github.com/altoo-ag/scala-kryo-serialization/commit/424a08cf1f9f9ba3b0ab2e9780363ea5f1b06c00"><code>424a08c</code></a> Fix test to also work on github since always new is far slower.</li>
   <li><a href="https://github.com/altoo-ag/scala-kryo-serialization/commit/54ff4658e3a18a0d872686b5a9b7e43437ce17ae"><code>54ff465</code></a> Implement a pool which always creates a new instance.</li>
   <li><a href="https://github.com/altoo-ag/scala-kryo-serialization/commit/825f7f3c6ec89363a3b6e80508132410137f71cb"><code>825f7f3</code></a> Setting version to 1.5.2-SNAPSHOT</li>
   <li><a href="https://github.com/altoo-ag/scala-kryo-serialization/commit/fa3d07fb0ec7853defb04000772a5b1ed966105e"><code>fa3d07f</code></a> Setting version to 1.5.1</li>
   <li><a href="https://github.com/altoo-ag/scala-kryo-serialization/commit/c7612c6cae930ccf3bf5faaefdf8fc2e10b6606d"><code>c7612c6</code></a> Update documentation before release</li>
   <li><a href="https://github.com/altoo-ag/scala-kryo-serialization/commit/eea3fcdf1ac13f9e38b4e93f8bc2eb811c682c22"><code>eea3fcd</code></a> Implement a threadlocal based pool for serializers</li>
   <li><a href="https://github.com/altoo-ag/scala-kryo-serialization/commit/a204db3fea9c41e6d88e2ca18c93c7f88bb8e45f"><code>a204db3</code></a> Implement a threadlocal based pool for serializers</li>
   <li><a href="https://github.com/altoo-ag/scala-kryo-serialization/commit/5a4bdc19f33b22fbb908a811c8a9a47a4c6c1078"><code>5a4bdc1</code></a> Log interesting kryo pool actions</li>
   <li>Additional commits viewable in <a href="https://github.com/altoo-ag/scala-kryo-serialization/compare/v1.3.0...v1.5.2">compare view</a></li>
   </ul>
   </details>
   <br />
   
   
   [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=io.altoo:scala-kryo-serialization_2.13&package-manager=sbt&previous-version=1.3.0&new-version=1.5.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   <details>
   <summary>Dependabot commands and options</summary>
   <br />
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
   - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
   
   
   </details>


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] chore(deps): bump io.altoo:scala-kryo-serialization_2.13 from 1.3.0 to 1.5.2 [texera]

Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.

github-actions[bot] commented on PR #6410:
URL: https://github.com/apache/texera/pull/6410#issuecomment-5125118905

   <!-- texera:template-compliance -->
   👋 Thanks for opening this pull request, @dependabot[bot]!
   
   It looks like the pull request description doesn't quite follow our template yet:
   
   - The **What changes were proposed in this PR?** section is missing; please keep the template's headings.
   - The **How was this PR tested?** section is missing; please keep the template's headings.
   - The **Was this PR authored or co-authored using generative AI tooling?** section is missing; please keep the template's headings.
   
   Filling out the template helps reviewers understand and triage your contribution faster. Please edit the description to complete it. This message will disappear automatically once the template is followed.
   
   You can find the template prompts by editing the description, or see [CONTRIBUTING.md](https://github.com/apache/texera/blob/main/CONTRIBUTING.md) for the full contribution flow.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] fix(deps): bump io.altoo:scala-kryo-serialization_2.13 from 1.3.0 to 1.5.2 [texera]

Posted by "aglinxinyuan (via GitHub)" <gi...@apache.org>.

aglinxinyuan closed pull request #6410: fix(deps): bump io.altoo:scala-kryo-serialization_2.13 from 1.3.0 to 1.5.2
URL: https://github.com/apache/texera/pull/6410


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] fix(deps): bump io.altoo:scala-kryo-serialization_2.13 from 1.3.0 to 1.5.2 [texera]

Posted by "Yicong-Huang (via GitHub)" <gi...@apache.org>.

Yicong-Huang closed pull request #6410: fix(deps): bump io.altoo:scala-kryo-serialization_2.13 from 1.3.0 to 1.5.2
URL: https://github.com/apache/texera/pull/6410


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] fix(deps): bump io.altoo:scala-kryo-serialization_2.13 from 1.3.0 to 1.5.2 [texera]

Posted by "Copilot (via GitHub)" <gi...@apache.org>.

Copilot commented on code in PR #6410:
URL: https://github.com/apache/texera/pull/6410#discussion_r3583797768


##########
amber/build.sbt:
##########
@@ -306,7 +306,7 @@ libraryDependencies += "com.esotericsoftware" % "kryo5" % "5.6.0"
 libraryDependencies += "io.altoo" %% "pekko-kryo-serialization" % "1.3.0"
 
 // https://mvnrepository.com/artifact/io.altoo/scala-kryo-serialization
-libraryDependencies += "io.altoo" %% "scala-kryo-serialization" % "1.3.0"
+libraryDependencies += "io.altoo" %% "scala-kryo-serialization" % "1.5.2"
 

Review Comment:
   Bumping scala-kryo-serialization changes the bundled jar version, but amber/LICENSE-binary-java still lists io.altoo.scala-kryo-serialization_2.13-1.3.0.jar. CI runs bin/licensing/check_binary_deps.py against amber/LICENSE-binary-java for the unzipped dist lib dir, so this PR will fail the license drift check unless LICENSE-binary-java is updated to match the new resolved jar version.



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] fix(deps): bump io.altoo:scala-kryo-serialization_2.13 from 1.3.0 to 1.5.2 [texera]

Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.

github-actions[bot] commented on PR #6410:
URL: https://github.com/apache/texera/pull/6410#issuecomment-4969694147

   <!-- texera-benchmarks-comment -->
   ## ⚠️ Benchmark changes need a look
   
   🟢 0 better · 🔴 6 worse · ⚪ 9 noise (<±5%) · 0 without baseline
   
   > Compared against main `0485d02` benchmarked on **this same runner**, so the delta is largely free of cross-runner hardware noise. The "7d avg" column still reflects the gh-pages dashboard. Treat <±5% as noise unless repeated.
   
   [Dashboard](https://apache.github.io/texera/dev/bench/) · [Run](https://github.com/apache/texera/actions/runs/29336001049)
   
   | | config | throughput | MB/s | latency | max Δ latest / 7d |
   |---|---|---:|---:|---:|---:|
   | 🔴 | bs=10 sw=10 sl=64 | 486 | 0.297 | 19,666/27,905/27,905 us | 🔴 +12.8% / 🔴 +92.6% |
   | 🔴 | bs=100 sw=10 sl=64 | 1,128 | 0.688 | 84,738/120,153/120,153 us | 🔴 +24.6% / 🔴 +19.6% |
   | ⚪ | bs=1000 sw=10 sl=64 | 1,409 | 0.86 | 707,693/774,054/774,054 us | ⚪ within ±5% / 🟢 +27.6% |
   
   <details><summary>Baseline details</summary>
   
   Latest main `0485d02` from same runner
   
   | config | metric | PR | latest main | 7d avg | Δ latest | Δ 7d |
   |---|---|---:|---:|---:|---:|---:|
   | bs=10 sw=10 sl=64 | throughput | 486 tuples/sec | 509 tuples/sec | 830.77 tuples/sec | -4.5% | -41.5% |
   | bs=10 sw=10 sl=64 | MB/s | 0.297 MB/s | 0.31 MB/s | 0.507 MB/s | -4.2% | -41.4% |
   | bs=10 sw=10 sl=64 | p50 | 19,666 us | 20,326 us | 11,905 us | -3.2% | +65.2% |
   | bs=10 sw=10 sl=64 | p95 | 27,905 us | 24,747 us | 14,486 us | +12.8% | +92.6% |
   | bs=10 sw=10 sl=64 | p99 | 27,905 us | 24,747 us | 19,430 us | +12.8% | +43.6% |
   | bs=100 sw=10 sl=64 | throughput | 1,128 tuples/sec | 1,224 tuples/sec | 1,082 tuples/sec | -7.8% | +4.2% |
   | bs=100 sw=10 sl=64 | MB/s | 0.688 MB/s | 0.747 MB/s | 0.66 MB/s | -7.9% | +4.2% |
   | bs=100 sw=10 sl=64 | p50 | 84,738 us | 81,191 us | 93,412 us | +4.4% | -9.3% |
   | bs=100 sw=10 sl=64 | p95 | 120,153 us | 96,433 us | 100,489 us | +24.6% | +19.6% |
   | bs=100 sw=10 sl=64 | p99 | 120,153 us | 96,433 us | 111,365 us | +24.6% | +7.9% |
   | bs=1000 sw=10 sl=64 | throughput | 1,409 tuples/sec | 1,411 tuples/sec | 1,104 tuples/sec | -0.1% | +27.6% |
   | bs=1000 sw=10 sl=64 | MB/s | 0.86 MB/s | 0.861 MB/s | 0.674 MB/s | -0.1% | +27.6% |
   | bs=1000 sw=10 sl=64 | p50 | 707,693 us | 711,848 us | 925,459 us | -0.6% | -23.5% |
   | bs=1000 sw=10 sl=64 | p95 | 774,054 us | 779,721 us | 967,138 us | -0.7% | -20.0% |
   | bs=1000 sw=10 sl=64 | p99 | 774,054 us | 779,721 us | 997,758 us | -0.7% | -22.4% |
   
   </details>
   
   <details><summary>Raw CSV</summary>
   
   ```csv
   config_idx,batch_size,schema_width,string_len,num_batches,total_ms,total_tuples,total_bytes,tuples_per_sec,mb_per_sec,lat_p50_us,lat_p95_us,lat_p99_us
   0,10,10,64,20,411.55,200,128000,486,0.297,19666.32,27904.59,27904.59
   1,100,10,64,20,1773.10,2000,1280000,1128,0.688,84738.23,120153.49,120153.49
   2,1000,10,64,20,14198.36,20000,12800000,1409,0.860,707693.45,774054.06,774054.06
   ```
   
   </details>
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] fix(deps): bump io.altoo:scala-kryo-serialization_2.13 from 1.3.0 to 1.5.2 [texera]

Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.

github-actions[bot] commented on PR #6410:
URL: https://github.com/apache/texera/pull/6410#issuecomment-5125096660

   <!-- backport-auto-label-report -->
   ### Backport auto-label report
   
   This `fix:` PR was checked against each actively-supported release branch. `release/*` labels drive the post-merge backport, so add or remove one to change where this fix lands.
   
   | Release branch | Analysis |
   | --- | --- |
   | ✅ `release/v1.2` | Change detected on this branch — label added; this fix is queued to backport here. Requested review from @xuang7. |
   
   _[Auto-label run](https://github.com/apache/texera/actions/runs/30504488251)._


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] fix(deps): bump io.altoo:scala-kryo-serialization_2.13 from 1.3.0 to 1.5.2 [texera]

Posted by "dependabot[bot] (via GitHub)" <gi...@apache.org>.

dependabot[bot] commented on PR #6410:
URL: https://github.com/apache/texera/pull/6410#issuecomment-5050016040

   OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting `@dependabot ignore this major version` or `@dependabot ignore this minor version`. You can also ignore all major, minor, or patch releases for a dependency by adding an [`ignore` condition](https://docs.github.com/en/code-security/supply-chain-security/configuration-options-for-dependency-updates#ignore) with the desired `update_types` to your config file.
   
   If you change your mind, just re-open this PR and I'll resolve any conflicts on it.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] fix(deps): bump io.altoo:scala-kryo-serialization_2.13 from 1.3.0 to 1.5.2 [texera]

Posted by "codecov-commenter (via GitHub)" <gi...@apache.org>.

codecov-commenter commented on PR #6410:
URL: https://github.com/apache/texera/pull/6410#issuecomment-4975848901

   ### :warning: JUnit XML file not found
   The CLI was unable to find any JUnit XML files to upload.
   For more help, visit our [troubleshooting guide](https://docs.codecov.com/docs/test-analytics#troubleshooting).


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] chore(deps): bump io.altoo:scala-kryo-serialization_2.13 from 1.3.0 to 1.5.2 [texera]

Posted by "aglinxinyuan (via GitHub)" <gi...@apache.org>.

aglinxinyuan merged PR #6410:
URL: https://github.com/apache/texera/pull/6410


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] fix(deps): bump io.altoo:scala-kryo-serialization_2.13 from 1.3.0 to 1.5.2 [texera]

Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.

github-actions[bot] commented on PR #6410:
URL: https://github.com/apache/texera/pull/6410#issuecomment-4969621964

   <!-- texera-reviewer-suggestion -->
   ### Automated Reviewer Suggestions
   
   Based on the `git blame` history of the changed files, we recommend the following reviewers:
   
   - No candidates found from `git blame` history.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@texera.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org