-
Notifications
You must be signed in to change notification settings - Fork 14.4k
KAFKA-15159: upgrade minor dependencies #13982
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
KAFKA-15159: upgrade minor dependencies #13982
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thank you for the changes. We need to update the corresponding entries in LICENSE file too:
Line 244 in d481163
netty-buffer-4.1.92.Final |
Thanks @divijvaidya for the PR. Should we update LICENSE-binary in the same PR, see https://github.com/apache/kafka/blob/trunk/gradle/dependencies.gradle#L73-L74 You'll have to update that file regardless when you run the release. But I think it's easier to keep it in sync if we do it when we bump dependencies. |
yes, I left the same comment for the author of the PR above. I will wait for them to update this PR until tomorrow. |
Thanks for the review. Already update LICENSE. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
scalaCollectionCompat has a new version 2.11
, did we consider that?
…s minimum JDK 11.
Yes, just find the release note here, seems harmless. By the way, scalaLogging also has a new version '3.9.5', but the release notes didn't update, do you think we can upgrade it as well ? |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thank you for making the changes. Let's pick up scalaCollectionCompat and scala-logging in a separate PR since I don't want to block 3.5.1 on upgrading those two. They don't seem to bring in anything important.
Let's merge this one for now.
Unrelated test failures
|
Reviewers: Divij Vaidya <[email protected]> --------- Co-authored-by: Damon Xie <[email protected]>
Reviewers: Divij Vaidya <[email protected]> --------- Co-authored-by: Damon Xie <[email protected]>
Upgrade minor versions with backward compatible changes. Similar with #13673
Release notes for dependencies:
bcpkix 1.73 -> 1.75
Defects Fixed in 1.74 and 1.75. Addtional features and functionality in 1.74 doesn't impact Kafka.
Release notes:
https://www.bouncycastle.org/releasenotes.html#r1rv74
https://www.bouncycastle.org/releasenotes.html#r1rv75
jqwik 1.7.2 -> 1.7.4
Bug fixes. Breaking changes and new & enhancement features doesn't impact Kafka.
Release notes:
https://jqwik.net/release-notes.html#173
https://jqwik.net/release-notes.html#174
mavenArtifact 3.8.4 -> 3.8.8
Regression fixes and general fixes.
Release notes:
https://maven.apache.org/docs/3.8.5/release-notes.html
https://maven.apache.org/docs/3.8.6/release-notes.html
https://maven.apache.org/docs/3.8.7/release-notes.html
https://maven.apache.org/docs/3.8.8/release-notes.html
netty: 4.1.92.Final -> 4.1.94.Final
Bug fixes releases. Fix CVE-2023-34462
Release notes:
https://netty.io/news/2023/05/25/4-1-93-Final.html
https://netty.io/news/2023/06/19/4-1-94-Final.html
Compatibility
Verify build and test with JDK8 and JDK17.
Committer Checklist (excluded from commit message)