You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by "lhotari (via GitHub)" <gi...@apache.org> on 2025/11/17 07:23:20 UTC
[PR] [fix][sec] Upgrade avro to 1.12.1 [pulsar]
lhotari opened a new pull request, #24992:
URL: https://github.com/apache/pulsar/pull/24992
### Motivation
avro 1.12.1 contains 4 security fixes:
https://avro.apache.org/blog/2025/10/16/avro-1.12.1/
### Modifications
Upgrade avro from 1.12.0 to 1.12.1
### Documentation
<!-- DO NOT REMOVE THIS SECTION. CHECK THE PROPER BOX ONLY. -->
- [ ] `doc` <!-- Your PR contains doc changes. -->
- [ ] `doc-required` <!-- Your PR changes impact docs and you will update later -->
- [x] `doc-not-needed` <!-- Your PR changes do not impact docs -->
- [ ] `doc-complete` <!-- Docs have been already added -->
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] [fix][sec] Upgrade avro to 1.12.1 [pulsar]
Posted by "lhotari (via GitHub)" <gi...@apache.org>.
lhotari commented on PR #24992:
URL: https://github.com/apache/pulsar/pull/24992#issuecomment-3559482097
Issue reported to Avro project: https://issues.apache.org/jira/browse/AVRO-4209
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] [fix][sec] Upgrade avro to 1.12.1 [pulsar]
Posted by "lhotari (via GitHub)" <gi...@apache.org>.
lhotari commented on PR #24992:
URL: https://github.com/apache/pulsar/pull/24992#issuecomment-3557896966
The change https://github.com/apache/avro/pull/3304 causes the StackOverflowError issue.
```
Caused by: java.lang.StackOverflowError
at org.apache.avro.specific.SpecificData.createSchema(SpecificData.java:492)
at org.apache.avro.reflect.ReflectData.createSchema(ReflectData.java:673)
at org.apache.avro.reflect.ReflectData.createNonStringMapSchema(ReflectData.java:548)
at org.apache.avro.reflect.ReflectData.createSchema(ReflectData.java:642)
at org.apache.avro.reflect.ReflectData.createFieldSchema(ReflectData.java:894)
at org.apache.avro.reflect.ReflectData$AllowNull.createFieldSchema(ReflectData.java:98)
at org.apache.avro.reflect.ReflectData.createSchema(ReflectData.java:744)
at org.apache.avro.reflect.ReflectData.createSchema(ReflectData.java:649)
at org.apache.avro.reflect.ReflectData.createFieldSchema(ReflectData.java:894)
at org.apache.avro.reflect.ReflectData$AllowNull.createFieldSchema(ReflectData.java:98)
at org.apache.avro.reflect.ReflectData.createSchema(ReflectData.java:744)
at org.apache.avro.reflect.ReflectData.createNonStringMapSchema(ReflectData.java:549)
at org.apache.avro.reflect.ReflectData.createSchema(ReflectData.java:642)
at org.apache.avro.reflect.ReflectData.createFieldSchema(ReflectData.java:894)
at org.apache.avro.reflect.ReflectData$AllowNull.createFieldSchema(ReflectData.java:98)
at org.apache.avro.reflect.ReflectData.createSchema(ReflectData.java:744)
at org.apache.avro.reflect.ReflectData.createSchema(ReflectData.java:649)
at org.apache.avro.reflect.ReflectData.createFieldSchema(ReflectData.java:894)
at org.apache.avro.reflect.ReflectData$AllowNull.createFieldSchema(ReflectData.java:98)
at org.apache.avro.reflect.ReflectData.createSchema(ReflectData.java:744)
at org.apache.avro.reflect.ReflectData.createNonStringMapSchema(ReflectData.java:549)
at org.apache.avro.reflect.ReflectData.createSchema(ReflectData.java:642)
at org.apache.avro.reflect.ReflectData.createFieldSchema(ReflectData.java:894)
at org.apache.avro.reflect.ReflectData$AllowNull.createFieldSchema(ReflectData.java:98)
at org.apache.avro.reflect.ReflectData.createSchema(ReflectData.java:744)
at org.apache.avro.reflect.ReflectData.createSchema(ReflectData.java:649)
at org.apache.avro.reflect.ReflectData.createFieldSchema(ReflectData.java:894)
at org.apache.avro.reflect.ReflectData$AllowNull.createFieldSchema(ReflectData.java:98)
at org.apache.avro.reflect.ReflectData.createSchema(ReflectData.java:744)
at org.apache.avro.reflect.ReflectData.createNonStringMapSchema(ReflectData.java:549)
at org.apache.avro.reflect.ReflectData.createSchema(ReflectData.java:642)
at org.apache.avro.reflect.ReflectData.createFieldSchema(ReflectData.java:894)
at org.apache.avro.reflect.ReflectData$AllowNull.createFieldSchema(ReflectData.java:98)
at org.apache.avro.reflect.ReflectData.createSchema(ReflectData.java:744)
at org.apache.avro.reflect.ReflectData.createSchema(ReflectData.java:649)
at org.apache.avro.reflect.ReflectData.createFieldSchema(ReflectData.java:894)
at org.apache.avro.reflect.ReflectData$AllowNull.createFieldSchema(ReflectData.java:98)
at org.apache.avro.reflect.ReflectData.createSchema(ReflectData.java:744)
at org.apache.avro.reflect.ReflectData.createNonStringMapSchema(ReflectData.java:549)
at org.apache.avro.reflect.ReflectData.createSchema(ReflectData.java:642)
at org.apache.avro.reflect.ReflectData.createFieldSchema(ReflectData.java:894)
at org.apache.avro.reflect.ReflectData$AllowNull.createFieldSchema(ReflectData.java:98)
at org.apache.avro.reflect.ReflectData.createSchema(ReflectData.java:744)
at org.apache.avro.reflect.ReflectData.createSchema(ReflectData.java:649)
at org.apache.avro.reflect.ReflectData.createFieldSchema(ReflectData.java:894)
at org.apache.avro.reflect.ReflectData$AllowNull.createFieldSchema(ReflectData.java:98)
at org.apache.avro.reflect.ReflectData.createSchema(ReflectData.java:744)
at org.apache.avro.reflect.ReflectData.createNonStringMapSchema(ReflectData.java:549)
at org.apache.avro.reflect.ReflectData.createSchema(ReflectData.java:642)
at org.apache.avro.reflect.ReflectData.createFieldSchema(ReflectData.java:894)
at org.apache.avro.reflect.ReflectData$AllowNull.createFieldSchema(ReflectData.java:98)
at org.apache.avro.reflect.ReflectData.createSchema(ReflectData.java:744)
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] [fix][sec] Upgrade avro to 1.12.2 [pulsar]
Posted by "lhotari (via GitHub)" <gi...@apache.org>.
lhotari commented on PR #24992:
URL: https://github.com/apache/pulsar/pull/24992#issuecomment-4459633276
waiting for Avro 1.12.2 release
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] [fix][sec] Upgrade avro to 1.12.1 [pulsar]
Posted by "codecov-commenter (via GitHub)" <gi...@apache.org>.
codecov-commenter commented on PR #24992:
URL: https://github.com/apache/pulsar/pull/24992#issuecomment-3561695912
## [Codecov](https://app.codecov.io/gh/apache/pulsar/pull/24992?dropdown=coverage&src=pr&el=h1&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) Report
:white_check_mark: All modified and coverable lines are covered by tests.
:white_check_mark: Project coverage is 38.63%. Comparing base ([`212ee6a`](https://app.codecov.io/gh/apache/pulsar/commit/212ee6a2e273558cf7a93af274c0697b0547b534?dropdown=coverage&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache)) to head ([`e1ac129`](https://app.codecov.io/gh/apache/pulsar/commit/e1ac12901ae667ae733d46164881556e6cf30dfe?dropdown=coverage&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache)).
:warning: Report is 6 commits behind head on master.
> :exclamation: There is a different number of reports uploaded between BASE (212ee6a) and HEAD (e1ac129). Click for more details.
>
> <details><summary>HEAD has 2 uploads less than BASE</summary>
>
>| Flag | BASE (212ee6a) | HEAD (e1ac129) |
>|------|------|------|
>|unittests|2|1|
>|systests|2|1|
></details>
<details><summary>Additional details and impacted files</summary>
[](https://app.codecov.io/gh/apache/pulsar/pull/24992?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache)
```diff
@@ Coverage Diff @@
## master #24992 +/- ##
=============================================
- Coverage 74.28% 38.63% -35.66%
+ Complexity 34065 13325 -20740
=============================================
Files 1920 1863 -57
Lines 150302 146139 -4163
Branches 17450 16964 -486
=============================================
- Hits 111656 56455 -55201
- Misses 29740 82061 +52321
+ Partials 8906 7623 -1283
```
| [Flag](https://app.codecov.io/gh/apache/pulsar/pull/24992/flags?src=pr&el=flags&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | Coverage Δ | |
|---|---|---|
| [inttests](https://app.codecov.io/gh/apache/pulsar/pull/24992/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | `26.41% <ø> (-0.05%)` | :arrow_down: |
| [systests](https://app.codecov.io/gh/apache/pulsar/pull/24992/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | `22.90% <ø> (+<0.01%)` | :arrow_up: |
| [unittests](https://app.codecov.io/gh/apache/pulsar/pull/24992/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | `34.79% <ø> (-39.03%)` | :arrow_down: |
Flags with carried forward coverage won't be shown. [Click here](https://docs.codecov.io/docs/carryforward-flags?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache#carryforward-flags-in-the-pull-request-comment) to find out more.
[see 1417 files with indirect coverage changes](https://app.codecov.io/gh/apache/pulsar/pull/24992/indirect-changes?src=pr&el=tree-more&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache)
</details>
<details><summary> :rocket: New features to boost your workflow: </summary>
- :snowflake: [Test Analytics](https://docs.codecov.com/docs/test-analytics): Detect flaky tests, report on failures, and find test suite problems.
- :package: [JS Bundle Analysis](https://docs.codecov.com/docs/javascript-bundle-analysis): Save yourself from yourself by tracking and limiting bundle sizes in JS merges.
</details>
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] [fix][sec] Upgrade avro to 1.12.2 [pulsar]
Posted by "merlimat (via GitHub)" <gi...@apache.org>.
merlimat merged PR #24992:
URL: https://github.com/apache/pulsar/pull/24992
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org