Skip to content

Conversation

@sumi-mathew
Copy link
Contributor

@sumi-mathew sumi-mathew commented Mar 11, 2025

Description

Upgrade the org.apache.calcite dependency from version 1.32.0 to 1.38.0 to avoiding CVE issues.

Motivation and Context

Upgrading the org.apache.calcite dependency from version 1.32.0 to 1.38.0 to reduce the risk of introducing new security flaws

Impact

Test Plan

Contributor checklist

  • Please make sure your submission complies with our contributing guide, in particular code style and commit standards.
  • PR description addresses the issue accurately and concisely. If the change is non-trivial, a GitHub Issue is referenced.
  • Documented new properties (with its default value), SQL syntax, functions, or other functionality.
  • If release notes are required, they follow the release notes guidelines.
  • Adequate tests were added if applicable.
  • CI passed.

Release Notes

Please follow release notes guidelines and fill in the release notes below.


== RELEASE NOTES ==

Security Changes
* Upgrade org.apache.calcite to 1.38.0 in response to `CVE-2023-2976<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2976>`_. 




@prestodb-ci prestodb-ci added the from:IBM PR from IBM label Mar 11, 2025
@sumi-mathew sumi-mathew force-pushed the upgarde-calcite branch 2 times, most recently from ca42f83 to 5832dfe Compare March 13, 2025 04:57
@sumi-mathew sumi-mathew marked this pull request as ready for review March 19, 2025 05:17
@sumi-mathew sumi-mathew requested a review from a team as a code owner March 19, 2025 05:17
@sumi-mathew sumi-mathew requested a review from presto-oss March 19, 2025 05:17
@prestodb-ci prestodb-ci requested review from a team, NivinCS and pramodsatya and removed request for a team March 19, 2025 05:17
@NivinCS
Copy link
Contributor

NivinCS commented Mar 19, 2025

Please check the dependency tree with the latest changes and confirm that the same version is updated throughout the entire project.

@sumi-mathew sumi-mathew force-pushed the upgarde-calcite branch 2 times, most recently from 1271cea to 60855f2 Compare March 19, 2025 06:48
Copy link
Contributor

@pratyakshsharma pratyakshsharma left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for the fix.

@yingsu00 yingsu00 merged commit 07c31ab into prestodb:master Mar 20, 2025
92 checks passed
@prestodb-ci prestodb-ci mentioned this pull request Mar 28, 2025
30 tasks
@prestodb-ci prestodb-ci requested review from a team and removed request for a team April 3, 2025 04:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants