You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spark.apache.org by do...@apache.org on 2024/09/03 23:17:32 UTC
(spark) branch master updated: [SPARK-49486][BUILD] Upgrade tink to 1.15.0
This is an automated email from the ASF dual-hosted git repository.
dongjoon pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/spark.git
The following commit(s) were added to refs/heads/master by this push:
new e49dfcb73bab [SPARK-49486][BUILD] Upgrade tink to 1.15.0
e49dfcb73bab is described below
commit e49dfcb73bab3b8503cfc5288c27d5d84fa3cf04
Author: panbingkun <pa...@baidu.com>
AuthorDate: Tue Sep 3 16:17:18 2024 -0700
[SPARK-49486][BUILD] Upgrade tink to 1.15.0
### What changes were proposed in this pull request?
The pr aims to upgrade `tink` from `1.14.1` to `1.15.0`.
### Why are the changes needed?
The full release notes as follows:
- https://github.com/tink-crypto/tink-java/releases/tag/v1.15.0
Use Conscrypt to verify RSA SSA PKCS1 signatures if it is available. This fixes a bug when Tink is used in FIPS-only mode and when using ConfigurationFips140v2.
Use Conscrypt for RSA SSA PSS signatures if it is available. RSA SSA PSS is now available when Tink is used in FIPS-only mode and when using ConfigurationFips140v2.
RsaSsaPssSignJce and RsaSsaPssVerifyJce now throw an exception if sigHash and mgf1Hash are not equal. This makes these functions consistent with the non-subtle API and with other languages.
### Does this PR introduce _any_ user-facing change?
No.
### How was this patch tested?
Pass GA.
### Was this patch authored or co-authored using generative AI tooling?
No.
Closes #47950 from panbingkun/SPARK-49486.
Authored-by: panbingkun <pa...@baidu.com>
Signed-off-by: Dongjoon Hyun <do...@apache.org>
---
dev/deps/spark-deps-hadoop-3-hive-2.3 | 2 +-
pom.xml | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/dev/deps/spark-deps-hadoop-3-hive-2.3 b/dev/deps/spark-deps-hadoop-3-hive-2.3
index 8edb8b36cacb..2ce8fe80d081 100644
--- a/dev/deps/spark-deps-hadoop-3-hive-2.3
+++ b/dev/deps/spark-deps-hadoop-3-hive-2.3
@@ -265,7 +265,7 @@ stax-api/1.0.1//stax-api-1.0.1.jar
stream/2.9.8//stream-2.9.8.jar
super-csv/2.2.0//super-csv-2.2.0.jar
threeten-extra/1.7.1//threeten-extra-1.7.1.jar
-tink/1.14.1//tink-1.14.1.jar
+tink/1.15.0//tink-1.15.0.jar
transaction-api/1.1//transaction-api-1.1.jar
univocity-parsers/2.9.1//univocity-parsers-2.9.1.jar
wildfly-openssl/1.1.3.Final//wildfly-openssl-1.1.3.Final.jar
diff --git a/pom.xml b/pom.xml
index 1cf74ed907ab..1fc6af837c0e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -212,7 +212,7 @@
<commons-crypto.version>1.1.0</commons-crypto.version>
<commons-cli.version>1.9.0</commons-cli.version>
<bouncycastle.version>1.78</bouncycastle.version>
- <tink.version>1.14.1</tink.version>
+ <tink.version>1.15.0</tink.version>
<datasketches.version>6.0.0</datasketches.version>
<netty.version>4.1.110.Final</netty.version>
<netty-tcnative.version>2.0.65.Final</netty-tcnative.version>
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@spark.apache.org
For additional commands, e-mail: commits-help@spark.apache.org