KAFKA-15159: upgrade minor dependencies#13982
Conversation
divijvaidya
left a comment
There was a problem hiding this comment.
Thank you for the changes. We need to update the corresponding entries in LICENSE file too:
Line 244 in d481163
|
Thanks @divijvaidya for the PR. Should we update LICENSE-binary in the same PR, see https://github.com/apache/kafka/blob/trunk/gradle/dependencies.gradle#L73-L74 You'll have to update that file regardless when you run the release. But I think it's easier to keep it in sync if we do it when we bump dependencies. |
yes, I left the same comment for the author of the PR above. I will wait for them to update this PR until tomorrow. |
Thanks for the review. Already update LICENSE. |
divijvaidya
left a comment
There was a problem hiding this comment.
scalaCollectionCompat has a new version 2.11, did we consider that?
…s minimum JDK 11.
Yes, just find the release note here, seems harmless. By the way, scalaLogging also has a new version '3.9.5', but the release notes didn't update, do you think we can upgrade it as well ? |
divijvaidya
left a comment
There was a problem hiding this comment.
Thank you for making the changes. Let's pick up scalaCollectionCompat and scala-logging in a separate PR since I don't want to block 3.5.1 on upgrading those two. They don't seem to bring in anything important.
Let's merge this one for now.
|
Unrelated test failures |
Reviewers: Divij Vaidya <diviv@amazon.com> --------- Co-authored-by: Damon Xie <damon.xie@zoom.us>
Reviewers: Divij Vaidya <diviv@amazon.com> --------- Co-authored-by: Damon Xie <damon.xie@zoom.us>

Upgrade minor versions with backward compatible changes. Similar with #13673
Release notes for dependencies:
bcpkix 1.73 -> 1.75
Defects Fixed in 1.74 and 1.75. Addtional features and functionality in 1.74 doesn't impact Kafka.
Release notes:
https://www.bouncycastle.org/releasenotes.html#r1rv74
https://www.bouncycastle.org/releasenotes.html#r1rv75
jqwik 1.7.2 -> 1.7.4
Bug fixes. Breaking changes and new & enhancement features doesn't impact Kafka.
Release notes:
https://jqwik.net/release-notes.html#173
https://jqwik.net/release-notes.html#174
mavenArtifact 3.8.4 -> 3.8.8
Regression fixes and general fixes.
Release notes:
https://maven.apache.org/docs/3.8.5/release-notes.html
https://maven.apache.org/docs/3.8.6/release-notes.html
https://maven.apache.org/docs/3.8.7/release-notes.html
https://maven.apache.org/docs/3.8.8/release-notes.html
netty: 4.1.92.Final -> 4.1.94.Final
Bug fixes releases. Fix CVE-2023-34462
Release notes:
https://netty.io/news/2023/05/25/4-1-93-Final.html
https://netty.io/news/2023/06/19/4-1-94-Final.html
Compatibility
Verify build and test with JDK8 and JDK17.
Committer Checklist (excluded from commit message)