You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@flink.apache.org by "kartik-3513 (via GitHub)" <gi...@apache.org> on 2024/10/14 10:59:57 UTC

[PR] [FLINK-36528] [Kubernetes Operator] Update org.apache.avro from 1.8.2 to 1.12.0 [flink-kubernetes-operator]

kartik-3513 opened a new pull request, #901:
URL: https://github.com/apache/flink-kubernetes-operator/pull/901

   ## What is the purpose of the change
   
   This PR updates the dependency "org.apache.avro:avro" version from 1.8.2 to 1.12.0
   
   
   ## Brief change log
   
   The transitive dependency "org.apache.avro:avro" version 1.8.2 present in beam-sdks-java-core under flink-beam-example module has 2 direct and 12 vulnerabilities from dependent packages. Updating it to 1.12.0 removes all of them. List can be found here: https://mvnrepository.com/artifact/org.apache.avro/avro/1.8.2 
   
   ## Verifying this change
   
   This change is a trivial rework / code cleanup without any test coverage.
   
   ## Does this pull request potentially affect one of the following parts:
   
     - Dependencies (does it add or upgrade a dependency): yes
     - The public API, i.e., is any changes to the `CustomResourceDescriptors`: no
     - Core observer or reconciler logic that is regularly executed: no
   
   ## Documentation
   
     - Does this pull request introduce a new feature? no
     - If yes, how is the feature documented? not applicable
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@flink.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] [FLINK-36528] [Kubernetes Operator] Update org.apache.avro from 1.8.2 to 1.12.0 [flink-kubernetes-operator]

Posted by "gyfora (via GitHub)" <gi...@apache.org>.
gyfora commented on PR #901:
URL: https://github.com/apache/flink-kubernetes-operator/pull/901#issuecomment-2411036421

   Still an example so we should probably not make this change and simply close it 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@flink.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] [FLINK-36528] [Kubernetes Operator] Update org.apache.avro from 1.8.2 to 1.12.0 [flink-kubernetes-operator]

Posted by "gyfora (via GitHub)" <gi...@apache.org>.
gyfora commented on PR #901:
URL: https://github.com/apache/flink-kubernetes-operator/pull/901#issuecomment-2838530885

   Closing this in favor of updating the beam dependency later. Please re-open when necessary :) 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@flink.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] [FLINK-36528] [Kubernetes Operator] Update org.apache.avro from 1.8.2 to 1.12.0 [flink-kubernetes-operator]

Posted by "gyfora (via GitHub)" <gi...@apache.org>.
gyfora closed pull request #901: [FLINK-36528] [Kubernetes Operator] Update org.apache.avro from 1.8.2 to 1.12.0
URL: https://github.com/apache/flink-kubernetes-operator/pull/901


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@flink.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] [FLINK-36528] [Kubernetes Operator] Update org.apache.avro from 1.8.2 to 1.12.0 [flink-kubernetes-operator]

Posted by "kartik-3513 (via GitHub)" <gi...@apache.org>.
kartik-3513 commented on PR #901:
URL: https://github.com/apache/flink-kubernetes-operator/pull/901#issuecomment-2410974613

   I mistakenly pushed the wrong state of code, I have updated it, please check again.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@flink.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] [FLINK-36528] [Kubernetes Operator] Update org.apache.avro from 1.8.2 to 1.12.0 [flink-kubernetes-operator]

Posted by "gyfora (via GitHub)" <gi...@apache.org>.
gyfora commented on PR #901:
URL: https://github.com/apache/flink-kubernetes-operator/pull/901#issuecomment-2411038174

   We can update beam dependency in the future instead 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@flink.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] [FLINK-36528] [Kubernetes Operator] Update org.apache.avro from 1.8.2 to 1.12.0 [flink-kubernetes-operator]

Posted by "gyfora (via GitHub)" <gi...@apache.org>.
gyfora commented on PR #901:
URL: https://github.com/apache/flink-kubernetes-operator/pull/901#issuecomment-2410966452

   This PR only contains comments + it is not an issue as it is related to an example. I suggest closing the jira ticket and the PR without merging


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@flink.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] [FLINK-36528] [Kubernetes Operator] Update org.apache.avro from 1.8.2 to 1.12.0 [flink-kubernetes-operator]

Posted by "kartik-3513 (via GitHub)" <gi...@apache.org>.
kartik-3513 commented on PR #901:
URL: https://github.com/apache/flink-kubernetes-operator/pull/901#issuecomment-2412922906

   I have evaluated updating beam-dependency, we can proceed with that.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@flink.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] [FLINK-36528] [Kubernetes Operator] Update org.apache.avro from 1.8.2 to 1.12.0 [flink-kubernetes-operator]

Posted by "kartik-3513 (via GitHub)" <gi...@apache.org>.
kartik-3513 commented on PR #901:
URL: https://github.com/apache/flink-kubernetes-operator/pull/901#issuecomment-2411059262

   Sure, thanks for your input. 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@flink.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org