Skip to content

V1: Manifest list encryption basics#1

Open
ggershinsky wants to merge 3107 commits intomasterfrom
manifest-list-encryption
Open

V1: Manifest list encryption basics#1
ggershinsky wants to merge 3107 commits intomasterfrom
manifest-list-encryption

Conversation

@ggershinsky
Copy link
Copy Markdown
Owner

No description provided.

fivetran-caseykarst and others added 29 commits September 16, 2025 12:35
* Core: Add CountNull Aggregation Support

* renew UT
Co-authored-by: Yuya Ebihara <ebyhry@gmail.com>
Co-authored-by: Eduard Tudenhoefner <etudenhoefner@gmail.com>
…tes (apache#14103)

External contributors are usually not very familiar with all the procedures and rules and such at Apache.

Important "stop signs" should be added to the issue templates, highlighting to not share sensitive information and particularly to report potential vulnerabilities and security issues via security@apache.org.
…tes (apache#14103)

External contributors are usually not very familiar with all the procedures and rules and such at Apache.

Important "stop signs" should be added to the issue templates, highlighting to not share sensitive information and particularly to report potential vulnerabilities and security issues via security@apache.org.
…he#14113)

---------

Co-authored-by: Eduard Tudenhoefner <etudenhoefner@gmail.com>
…es in manifests (apache#14111)

apache#13411 help maintain passed in ordering of files in manifest lists and this help ensure this ordering guarantee
Co-authored-by: Prashant Singh <prashant.singh@snowflake.com>
…14133)

Bumps software.amazon.awssdk:bom from 2.33.9 to 2.34.0.

---
updated-dependencies:
- dependency-name: software.amazon.awssdk:bom
  dependency-version: 2.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [mkdocs-material](https://github.com/squidfunk/mkdocs-material) from 9.6.19 to 9.6.20.
- [Release notes](https://github.com/squidfunk/mkdocs-material/releases)
- [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG)
- [Commits](squidfunk/mkdocs-material@9.6.19...9.6.20)

---
updated-dependencies:
- dependency-name: mkdocs-material
  dependency-version: 9.6.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
)

Bumps [org.assertj:assertj-core](https://github.com/assertj/assertj) from 3.27.4 to 3.27.5.
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](assertj/assertj@assertj-build-3.27.4...assertj-build-3.27.5)

---
updated-dependencies:
- dependency-name: org.assertj:assertj-core
  dependency-version: 3.27.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
update snapshot producer

update the patch

clean up

fix for previous patch

address review comments

move key wrapping to metadata encryption

encrypt manifest list key metadata

new aad util

null key needs no encryption

comment; clearer method/var names

use key encryption key for manifest list keys

add encryption util changes

update EncryptionTestHelpers

handle api change

remove unused lines

revert revapi.yml

KEK cache

unitest update

rename var

address review comments

fix timeout default

change writer kek timeout default

Updates from review.

cache unwrapped keys

compile and ci fixes

spotless apply

re-apply unwrapped cache patch

Co-authored-by: Ryan Blue <rdblue@gmail.com>

caching limit

address review comments

spotless apply

sync with spec changes

add missing method

rm empty line

pass encrypted output

a better unitest

rm type, rename class

post rebase changes

clean up

post rebase changes

clean up

discussed before
@ggershinsky ggershinsky force-pushed the manifest-list-encryption branch from b55acdd to 5fa3da1 Compare September 21, 2025 06:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.