Open
Conversation
7 tasks
unidevel
added a commit
to prestodb/presto
that referenced
this pull request
Mar 31, 2026
#27466) ## Description 1. presto-release-tools can not be fetched due to maven central publishing limitation 2. check maven central publishing requirements 3. add required `<name>` field to presto-lance ## Motivation and Context Depends on PRs: - prestodb/presto-release-tools#65 - prestodb/presto-release-tools#64 - prestodb/presto-release-tools#63 - prestodb/presto-release-tools#62 ## Impact CI ## Test Plan Tested with: 1. release note check action: https://github.com/prestodb/presto/actions/runs/23815800338/job/69414865062?pr=27466 2. maven central publishing requirements check: https://github.com/unix280/presto/actions/runs/23812452401/job/69402863222#step:8:76 3. Prepare release action in presto => https://github.com/unix280/presto/actions/runs/23812844511 4. Release notes PR => unix280#52 5. Release notes missing list file => https://github.com/unix280/presto/blob/release-notes-0.297/release-notes-missing-0.297.md ## Contributor checklist - [ ] Please make sure your submission complies with our [contributing guide](https://github.com/prestodb/presto/blob/master/CONTRIBUTING.md), in particular [code style](https://github.com/prestodb/presto/blob/master/CONTRIBUTING.md#code-style) and [commit standards](https://github.com/prestodb/presto/blob/master/CONTRIBUTING.md#commit-standards). - [ ] PR description addresses the issue accurately and concisely. If the change is non-trivial, a GitHub Issue is referenced. - [ ] Documented new properties (with its default value), SQL syntax, functions, or other functionality. - [ ] If release notes are required, they follow the [release notes guidelines](https://github.com/prestodb/presto/wiki/Release-Notes-Guidelines). - [ ] Adequate tests were added if applicable. - [ ] CI passed. - [ ] If adding new dependencies, verified they have an [OpenSSF Scorecard](https://securityscorecards.dev/#the-checks) score of 5.0 or higher (or obtained explicit TSC approval for lower scores). ## Release Notes Please follow [release notes guidelines](https://github.com/prestodb/presto/wiki/Release-Notes-Guidelines) and fill in the release notes below. ``` == NO RELEASE NOTE == ``` ## Summary by Sourcery Update CI and release scripts to retrieve presto-release-tools from GitHub releases using a configurable version instead of Maven Central. CI: - Change release-notes-check workflow to download the presto-release-tools executable directly from GitHub releases and run it from a temporary path. - Make the release-notes-check workflow use a configurable RELEASE_TOOLS_VERSION with a default of 0.13. Deployment: - Update release preparation workflow and release-notes script to use a configurable RELEASE_TOOLS_VERSION (default 0.13) and fetch presto-release-tools from GitHub releases instead of Maven. Chores: - Align release tooling version and retrieval method across CI workflows and release scripts.
bibith4
pushed a commit
to bibith4/presto
that referenced
this pull request
Apr 1, 2026
prestodb#27466) ## Description 1. presto-release-tools can not be fetched due to maven central publishing limitation 2. check maven central publishing requirements 3. add required `<name>` field to presto-lance ## Motivation and Context Depends on PRs: - prestodb/presto-release-tools#65 - prestodb/presto-release-tools#64 - prestodb/presto-release-tools#63 - prestodb/presto-release-tools#62 ## Impact CI ## Test Plan Tested with: 1. release note check action: https://github.com/prestodb/presto/actions/runs/23815800338/job/69414865062?pr=27466 2. maven central publishing requirements check: https://github.com/unix280/presto/actions/runs/23812452401/job/69402863222#step:8:76 3. Prepare release action in presto => https://github.com/unix280/presto/actions/runs/23812844511 4. Release notes PR => unix280#52 5. Release notes missing list file => https://github.com/unix280/presto/blob/release-notes-0.297/release-notes-missing-0.297.md ## Contributor checklist - [ ] Please make sure your submission complies with our [contributing guide](https://github.com/prestodb/presto/blob/master/CONTRIBUTING.md), in particular [code style](https://github.com/prestodb/presto/blob/master/CONTRIBUTING.md#code-style) and [commit standards](https://github.com/prestodb/presto/blob/master/CONTRIBUTING.md#commit-standards). - [ ] PR description addresses the issue accurately and concisely. If the change is non-trivial, a GitHub Issue is referenced. - [ ] Documented new properties (with its default value), SQL syntax, functions, or other functionality. - [ ] If release notes are required, they follow the [release notes guidelines](https://github.com/prestodb/presto/wiki/Release-Notes-Guidelines). - [ ] Adequate tests were added if applicable. - [ ] CI passed. - [ ] If adding new dependencies, verified they have an [OpenSSF Scorecard](https://securityscorecards.dev/#the-checks) score of 5.0 or higher (or obtained explicit TSC approval for lower scores). ## Release Notes Please follow [release notes guidelines](https://github.com/prestodb/presto/wiki/Release-Notes-Guidelines) and fill in the release notes below. ``` == NO RELEASE NOTE == ``` ## Summary by Sourcery Update CI and release scripts to retrieve presto-release-tools from GitHub releases using a configurable version instead of Maven Central. CI: - Change release-notes-check workflow to download the presto-release-tools executable directly from GitHub releases and run it from a temporary path. - Make the release-notes-check workflow use a configurable RELEASE_TOOLS_VERSION with a default of 0.13. Deployment: - Update release preparation workflow and release-notes script to use a configurable RELEASE_TOOLS_VERSION (default 0.13) and fetch presto-release-tools from GitHub releases instead of Maven. Chores: - Align release tooling version and retrieval method across CI workflows and release scripts.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Missing Release Notes
Apurva Kumar
Chandrakant Vankayalapati
Dong Wang
rewrite_data_filesprocedure prestodb/presto#26374 feat(plugin-iceberg): Addrewrite_data_filesprocedure (Merged by: Dong Wang)Prabhu Shankar
Pramod Satya
Reetika Agrawal
Sreeni Viswanadha
XiaoDu
Zac
adheer-araokar
tanjialiang
unidevel
Extracted Release Notes
optimizer.optimize-top-n-rankto enable the rewrite.24302.Connector.beginTransactionin a backward compatible way to support passing the autocommit context into connector transactions.Access-Control-Allow-Originheader validation for cross-origin requests and restricts WebSocket connections from IP addresses in theOriginheader unless explicitly configured viaallowedHosts. This dependency is used for local development only and does not affect production runtime.admin/properties:\`resource-manager.http-server-enabled``and :ref:admin/properties:``resource-manager.communication-protocol```.CVE-2025-59250<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59250>_.CVE-2025-66566 <https://nvd.nist.gov/vuln/detail/CVE-2025-66566>_.materialized_viewstable to the information schema.USE_STITCHINGmode formaterialized_view_stale_read_behaviorsession property to selectively recompute stale data instead of full recomputation.materialized_view_staleness_windowsession property to configure acceptable staleness duration.materialized_view_force_stalesession property for testing stale read behavior.iceberg.materialized-view-max-changed-partitionsconfig property (default: 100) to limit partition tracking for predicate stitching.http-server.https.keystore.scan-interval-secondsconfiguration flag to scan the keystore file periodically for new certs.CVE-2025-5115 <https://nvd.nist.gov/vuln/detail/CVE-2025-5115>_.materialized_view_stale_read_behaviorsession property andmaterialized-view-stale-read-behaviorconfig property.stale_read_behaviorandstaleness_windowtable properties for materialized views.img-src 'http: https:'in response toCWE-693 <https://cwe.mitre.org/data/definitions/693.html>_. :pr:25910.hive.restrict-procedure-callfor ranger and sql-standard access control. It defaults totrue, meaning procedure calls are restricted. To allow procedure calls, set this configuration property tofalse.iceberg.securityproperty in the Iceberg catalog properties file. The supported types areallow-allandfile.CVE-2024-53990 <https://github.com/advisories/GHSA-mfj5-cf8g-g2fv>_ andCVE-2025-12183 <https://github.com/advisories/GHSA-vqf4-7m7x-wgfc>_.CVE-2025-66566 <https://github.com/advisories/GHSA-cmp6-m4wj-q63q>_.CVE-2025-66453 <https://github.com/advisories/GHSA-3w8q-xq97-5j7x>_.CVE-2025-67735 <https://github.com/advisories/GHSA-84h7-rjj3-6jx4>_.CVE-2025-68161 <https://nvd.nist.gov/vuln/detail/CVE-2025-68161>_.CREATE BRANCH.CREATE BRANCHsupport for Iceberg.CREATE_VIEW_WITH_SELECT_COLUMNSpermission for definer rights MVs prestodb/presto#26902 (Author: Timothy Meehan): fix(analyzer): CheckCREATE_VIEW_WITH_SELECT_COLUMNSpermission for definer rights MVsDEFINERrights to requireCREATE_VIEW_WITH_SELECT_COLUMNSon base tables.CVE-2025-68161 <https://nvd.nist.gov/vuln/detail/CVE-2025-68161>_.CVE-2020-26237 <https://github.com/advisories/GHSA-vfrc-7r7c-w9mx>_.functions/plugin-loaded-functions:array functions.CVE-2025-12183 <https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-12183>_.NativeFunctionHandleparsing.CVE-2025-13465 <https://github.com/advisories/GHSA-xxjr-mmjv-4gpg>_.CVE-2025-13465 <https://github.com/advisories/GHSA-xxjr-mmjv-4gpg>_.native_max_target_file_sizesession property to control the maximum target file size for writers. When a file exceeds this size during writing, the writer will close the current file and start writing to a new file.webpackfrom5.97.1to5.104.1to address security vulnerabilities including a user information bypass in HttpUriPlugin and SSRF prevention improvements. This is a development dependency used for building the Presto UI and does not affect production runtime./presto_cpp/limitations.PushdownThroughUnnestoptimizer rule that pushes projections and filter conjuncts not dependent on unnest output variables below the UnnestNode, gated by thepushdown_through_unnestsession property (default enabled).experimental.max-total-running-task-count-to-not-execute-new-query) is enabled.CVE-2025-67721 <https://www.cve.org/CVERecord?id=CVE-2025-67721>_.CVE-2025-69873 <https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69873>_.textfile_field_delim,textfile_escape_delim,textfile_collection_delim, andtextfile_mapkey_delim./connector/lancefor reading and writing LanceDB datasets.materialized_view_query_rewrite_cost_based_selection_enabledsession property.SimplifyCoalesceOverJoinKeysthat simplifies redundantCOALESCEexpressions over equi-join key pairs based on join type, enabling bucketed join optimizations for tool-generated queries. Controlled by thesimplify_coalesce_over_join_keyssession property (disabled by default).IFexpressions:IF(x, IF(y, v, E), E)is rewritten toIF(x AND y, v, E)when the outer and inner else branches are identical. Handles arbitrary nesting depth and both null and non-null else branches.pre_aggregate_before_grouping_sets. (:pr:27290).UPDATING FORclause.LIKE '%substring%'pattern matching by rewriting toSTRPOSinstead ofCARDINALITY(SPLIT(...)), improving CPU and memory efficiency. :pr:27311.CVE-2026-24281 <https://github.com/advisories/GHSA-7xrh-hqfc-g7qr>,CVE-2026-24308 <https://github.com/advisories/GHSA-crhr-qqj8-rpxc>./functions/table.ADD COLUMN DEFAULT.ADD COLUMN DEFAULT./developer/table-functions.flattedfrom3.3.3to3.4.2in response toGHSA-rf6f-7fwh-wjgh <https://github.com/WebReflection/flatted/security/advisories/GHSA-rf6f-7fwh-wjgh>_ addressing a HIGH severity prototype pollution vulnerability (CWE-1321) in the parse() function. This dependency is used by the UI development tooling and does not affect production runtime.UnaliasSymbolReferenceswhen alias mapping contains a cycle caused by multiple variables mapped to the same constant expression across different ProjectNodes.handlebarsfrom4.7.8to4.7.9in response to multiple security advisories includingGHSA-2w6w-674q-4c4q <https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-2w6w-674q-4c4q>,GHSA-3mfm-83xf-c92r <https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-3mfm-83xf-c92r>,GHSA-xhpv-hc6g-r9c6 <https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xhpv-hc6g-r9c6>,GHSA-xjpj-3mr7-gcpf <https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xjpj-3mr7-gcpf>,GHSA-9cx6-37pm-9jff <https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-9cx6-37pm-9jff>,GHSA-2qvq-rjwj-gvw9 <https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-2qvq-rjwj-gvw9>,GHSA-7rx3-28cr-v5wh <https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-7rx3-28cr-v5wh>, andGHSA-442j-39wm-28r2 <https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-442j-39wm-28r2>. This dependency is used by thets-jesttesting framework and does not affect production runtime.CVE-2026-33891 <https://www.cve.org/CVERecord?id=CVE-2026-33891>_ (DoS in BigInteger.modInverse),CVE-2026-33894 <https://www.cve.org/CVERecord?id=CVE-2026-33894>_ (RSA-PKCS signature forgery),CVE-2026-33895 <https://www.cve.org/CVERecord?id=CVE-2026-33895>_ (Ed25519 signature forgery), andCVE-2026-33896 <https://www.cve.org/CVERecord?id=CVE-2026-33896>_ (basicConstraints bypass in certificate chain verification). This dependency is used bywebpack-dev-serverfor development and does not affect production runtime.CVE-2026-33871 <https://github.com/advisories/GHSA-w9fj-cfpg-grvv>_.All Commits
nimble.stats.enable_vectorizedfor consi… (misc: Rename config key tonimble.stats.enable_vectorizedfor consi… prestodb/presto#27398) (Ke)LIKErewrites for prefix/suffix patterns in native execution (perf(native): AvoidLIKErewrites for prefix/suffix patterns in native execution prestodb/presto#27363) (Pramod Satya)sorted_byfordata_rewrite_filesprocedure (feat: Supportsorted_byfordata_rewrite_filesprocedure prestodb/presto#26804) (Dong Wang)CREATE_VIEW_WITH_SELECT_COLUMNSpermission for definer rights MVs (fix(analyzer): CheckCREATE_VIEW_WITH_SELECT_COLUMNSpermission for definer rights MVs prestodb/presto#26902) (Timothy MRelease Notes
Note: The full release notes summary was too large (76176 characters) for GitHub's PR body limit.
The complete summary has been saved to
release-notes-missing-0.297.mdin this pull request.Please delete this file before merging.