[KYUUBI #7584] Update dev/dependencyList for postgresql 42.7.12 - #7605
Closed
bowenliang123 wants to merge 1 commit into
Closed
[KYUUBI #7584] Update dev/dependencyList for postgresql 42.7.12#7605bowenliang123 wants to merge 1 commit into
bowenliang123 wants to merge 1 commit into
Conversation
PR #7584 (merged in 2ffc997) bumped org.postgresql:postgresql from 42.7.11 to 42.7.12 in pom.xml only, but did not regenerate dev/dependencyList via build/dependency.sh --replace. As a result, the Dependencies CI check (build/dependency.sh) fails on master with: Dependency List Changed Detected: - postgresql/42.7.11//postgresql-42.7.11.jar + postgresql/42.7.12//postgresql-42.7.12.jar Regenerate the entry to match the pom version so CI is green again.
bowenliang123
changed the title
pan3793
approved these changes
Jul 30, 2026
Contributor
Author
|
Will merge it for a quick fix once it passes the dependency checks. |
bowenliang123
added a commit
that referenced
this pull request
Jul 30, 2026
### Why are the changes needed? [PR #7584](#7584) bumped `org.postgresql:postgresql` from 42.7.11 to 42.7.12 (security: [CVE-2026-54291](https://nvd.nist.gov/vuln/detail/CVE-2026-54291)) but updated only `pom.xml`. It did not regenerate `dev/dependencyList` via `build/dependency.sh --replace`, so the two are now out of sync and the **Dependencies CI check fails on `master`**: ``` Dependency List Changed Detected: - postgresql/42.7.11//postgresql-42.7.11.jar + postgresql/42.7.12//postgresql-42.7.12.jar ``` This PR brings `dev/dependencyList` back in line with the pom so CI is green again. ### How was this patch tested? - [x] Verified the only diff is the postgresql entry expected by the pom bump in #7584 - [x] `git diff` against the version produced by `build/dependency.sh` shows no further drift `build/dependency.sh` requires downloading Spark/Flink/Hive engines and running a full `mvn install` to verify locally; CI will exercise it on the PR branch. ### Was this patch authored or co-authored using generative AI tooling? Yes. Assisted-by: OpenCode with MiniMax-M3 Closes #7605 from bowenliang123/kyuubi-7584-update-dependency-list. Closes #7584 387af51 [bowenliang123] [KYUUBI #7584][INFRA] Update dev/dependencyList for postgresql 42.7.12 Authored-by: bowenliang123 <liang.bowen.123@qq.com> Signed-off-by: bowenliang123 <liang.bowen.123@qq.com> (cherry picked from commit d627103) Signed-off-by: bowenliang123 <liang.bowen.123@qq.com>
bowenliang123
added a commit
that referenced
this pull request
Jul 30, 2026
### Why are the changes needed? [PR #7584](#7584) bumped `org.postgresql:postgresql` from 42.7.11 to 42.7.12 (security: [CVE-2026-54291](https://nvd.nist.gov/vuln/detail/CVE-2026-54291)) but updated only `pom.xml`. It did not regenerate `dev/dependencyList` via `build/dependency.sh --replace`, so the two are now out of sync and the **Dependencies CI check fails on `master`**: ``` Dependency List Changed Detected: - postgresql/42.7.11//postgresql-42.7.11.jar + postgresql/42.7.12//postgresql-42.7.12.jar ``` This PR brings `dev/dependencyList` back in line with the pom so CI is green again. ### How was this patch tested? - [x] Verified the only diff is the postgresql entry expected by the pom bump in #7584 - [x] `git diff` against the version produced by `build/dependency.sh` shows no further drift `build/dependency.sh` requires downloading Spark/Flink/Hive engines and running a full `mvn install` to verify locally; CI will exercise it on the PR branch. ### Was this patch authored or co-authored using generative AI tooling? Yes. Assisted-by: OpenCode with MiniMax-M3 Closes #7605 from bowenliang123/kyuubi-7584-update-dependency-list. Closes #7584 387af51 [bowenliang123] [KYUUBI #7584][INFRA] Update dev/dependencyList for postgresql 42.7.12 Authored-by: bowenliang123 <liang.bowen.123@qq.com> Signed-off-by: bowenliang123 <liang.bowen.123@qq.com> (cherry picked from commit d627103) Signed-off-by: bowenliang123 <liang.bowen.123@qq.com>
Contributor
Author
|
Thanks. Merged to the master/branch-1.12/branch-1.11 branches. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Why are the changes needed?
PR #7584 bumped
org.postgresql:postgresqlfrom 42.7.11 to 42.7.12 (security: CVE-2026-54291) but updated onlypom.xml. It did not regeneratedev/dependencyListviabuild/dependency.sh --replace, so the two are now out of sync and the Dependencies CI check fails onmaster:This PR brings
dev/dependencyListback in line with the pom so CI is green again.How was this patch tested?
git diffagainst the version produced bybuild/dependency.shshows no further driftbuild/dependency.shrequires downloading Spark/Flink/Hive engines and running a fullmvn installto verify locally; CI will exercise it on the PR branch.Was this patch authored or co-authored using generative AI tooling?
Yes.
Assisted-by: OpenCode with MiniMax-M3