Bump org.xerial.snappy:snappy-java from 1.1.10.3 to 1.1.10.4 in /test/fixtures/hdfs-fixture by dependabot[bot] · Pull Request #10206 · opensearch-project/OpenSearch

dependabot · 2023-09-25T13:05:14Z

Bumps org.xerial.snappy:snappy-java from 1.1.10.3 to 1.1.10.4.

Release notes

Sourced from org.xerial.snappy:snappy-java's releases.

v1.1.10.4

What's Changed

Security Fix

Fixed SnappyInputStream so as not to allocate too large memory when decompressing data with an extremely large chunk size by @tunnelshade (code change)

This does not affect users only using Snappy.compress/uncompress methods

🚀 Features

feature: Upgrade the internal snappy version to 1.1.10 (1.1.8 was wrongly used before) by @xerial in xerial/snappy-java#508

Support JDK21 (no internal change)

🔗 Dependency Updates

Update scalafmt-core to 3.7.11 by @xerial-bot in xerial/snappy-java#485

Update sbt to 1.9.3 by @xerial-bot in xerial/snappy-java#483

Update scalafmt-core to 3.7.12 by @xerial-bot in xerial/snappy-java#487

Bump actions/checkout from 3 to 4 by @dependabot in xerial/snappy-java#502

Update sbt to 1.9.4 by @xerial-bot in xerial/snappy-java#496

Update scalafmt-core to 3.7.14 by @xerial-bot in xerial/snappy-java#501

Update sbt to 1.9.6 by @xerial-bot in xerial/snappy-java#505

Update native libraries by @github-actions in xerial/snappy-java#503

🛠 Internal Updates

Update airframe-log to 23.7.4 by @xerial-bot in xerial/snappy-java#486

Update airframe-log to 23.8.0 by @xerial-bot in xerial/snappy-java#488

Update sbt-scalafmt to 2.5.2 by @xerial-bot in xerial/snappy-java#500

Update airframe-log to 23.8.6 by @xerial-bot in xerial/snappy-java#497

Update sbt-scalafmt to 2.5.1 by @xerial-bot in xerial/snappy-java#499

Update airframe-log to 23.9.1 by @xerial-bot in xerial/snappy-java#504

Update airframe-log to 23.9.2 by @xerial-bot in xerial/snappy-java#509

Other Changes

Update NOTICE by @imsudiproy in xerial/snappy-java#492

Full Changelog: xerial/snappy-java@v1.1.10.3...v1.1.10.4

Commits

9f8c3cf Merge pull request from GHSA-55g7-9cwv-5qfv
49d7001 Update airframe-log to 23.9.2 (#509)
1f07c31 Update native libraries for f2e97f27be0dc6c691369040ba8a673bface484c (#503)
13f8db1 Update sbt to 1.9.6 (#505)
f2e97f2 feature: Upgrade the internal snappy version to 1.1.10 (1.1.8 was wrongly use...
98b2225 Update airframe-log to 23.9.1 (#504)
9f29b5c Update NOTICE (#492)
55639b5 Update sbt-scalafmt to 2.5.1 (#499)
a5d81a6 Update airframe-log to 23.8.6 (#497)
6495da1 Update scalafmt-core to 3.7.14 (#501)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

reta · 2023-09-25T13:35:13Z

@dependabot recreate please

Bumps [org.xerial.snappy:snappy-java](https://github.com/xerial/snappy-java) from 1.1.10.3 to 1.1.10.4. - [Release notes](https://github.com/xerial/snappy-java/releases) - [Commits](xerial/snappy-java@v1.1.10.3...v1.1.10.4) --- updated-dependencies: - dependency-name: org.xerial.snappy:snappy-java dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2023-09-25T13:41:13Z

Compatibility status:

Checks if related components are compatible with change 4af0c29

Incompatible components

Incompatible components: [https://github.com/opensearch-project/k-nn.git]

Skipped components

Compatible components

Compatible components: [https://github.com/opensearch-project/security.git, https://github.com/opensearch-project/alerting.git, https://github.com/opensearch-project/index-management.git, https://github.com/opensearch-project/anomaly-detection.git, https://github.com/opensearch-project/sql.git, https://github.com/opensearch-project/job-scheduler.git, https://github.com/opensearch-project/asynchronous-search.git, https://github.com/opensearch-project/observability.git, https://github.com/opensearch-project/common-utils.git, https://github.com/opensearch-project/reporting.git, https://github.com/opensearch-project/cross-cluster-replication.git, https://github.com/opensearch-project/security-analytics.git, https://github.com/opensearch-project/custom-codecs.git, https://github.com/opensearch-project/performance-analyzer.git, https://github.com/opensearch-project/ml-commons.git, https://github.com/opensearch-project/performance-analyzer-rca.git, https://github.com/opensearch-project/opensearch-oci-object-storage.git, https://github.com/opensearch-project/geospatial.git, https://github.com/opensearch-project/notifications.git, https://github.com/opensearch-project/neural-search.git]

github-actions · 2023-09-25T13:57:24Z

Gradle Check (Jenkins) Run Completed with:

RESULT: UNSTABLE ❕
TEST FAILURES:

      1 org.opensearch.index.ShardIndexingPressureIT.testShardIndexingPressureTrackingDuringBulkWrites

URL: https://build.ci.opensearch.org/job/gradle-check/26211/
CommitID: b353a25
Please review all flaky tests that succeeded after retry and create an issue if one does not already exist to track the flaky failure.

codecov · 2023-09-25T13:58:23Z

Codecov Report

Merging #10206 (4af0c29) into main (1dde018) will increase coverage by 0.05%.
The diff coverage is n/a.

@@             Coverage Diff              @@
##               main   #10206      +/-   ##
============================================
+ Coverage     71.22%   71.27%   +0.05%     
- Complexity    58240    58294      +54     
============================================
  Files          4828     4828              
  Lines        274419   274419              
  Branches      39989    39989              
============================================
+ Hits         195443   195581     +138     
+ Misses        62574    62457     -117     
+ Partials      16402    16381      -21

see 467 files with indirect coverage changes

github-actions · 2023-09-25T14:13:37Z

Gradle Check (Jenkins) Run Completed with:

RESULT: FAILURE ❌
URL: https://build.ci.opensearch.org/job/gradle-check/26217/
CommitID: 4af0c29
Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green.
Is the failure a flaky test unrelated to your change?

github-actions · 2023-09-25T14:26:29Z

Gradle Check (Jenkins) Run Completed with:

RESULT: FAILURE ❌
URL: https://build.ci.opensearch.org/job/gradle-check/26216/
CommitID: c2767a2
Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green.
Is the failure a flaky test unrelated to your change?

github-actions · 2023-09-25T15:07:35Z

Gradle Check (Jenkins) Run Completed with:

RESULT: SUCCESS ✅
URL: https://build.ci.opensearch.org/job/gradle-check/26229/
CommitID: 4af0c29

opensearch-trigger-bot · 2023-09-25T15:14:52Z

The backport to 2.x failed:

The process '/usr/bin/git' failed with exit code 128

To backport manually, run these commands in your terminal:

# Navigate to the root of your repository
cd $(git rev-parse --show-toplevel)
# Fetch latest updates from GitHub
git fetch
# Create a new working tree
git worktree add ../.worktrees/OpenSearch/backport-2.x 2.x
# Navigate to the new working tree
pushd ../.worktrees/OpenSearch/backport-2.x
# Create a new branch
git switch --create backport/backport-10206-to-2.x
# Cherry-pick the merged commit of this pull request and resolve the conflicts
git cherry-pick -x --mainline 1 b83f4333bdc774c56b574e04229a66eeae2b9f32
# Push it to GitHub
git push --set-upstream origin backport/backport-10206-to-2.x
# Go back to the original working tree
popd
# Delete the working tree
git worktree remove ../.worktrees/OpenSearch/backport-2.x

Then, create a pull request where the base branch is 2.x and the compare/head branch is backport/backport-10206-to-2.x.

…/fixtures/hdfs-fixture (opensearch-project#10206) * Bump org.xerial.snappy:snappy-java in /test/fixtures/hdfs-fixture Bumps [org.xerial.snappy:snappy-java](https://github.com/xerial/snappy-java) from 1.1.10.3 to 1.1.10.4. - [Release notes](https://github.com/xerial/snappy-java/releases) - [Commits](xerial/snappy-java@v1.1.10.3...v1.1.10.4) --- updated-dependencies: - dependency-name: org.xerial.snappy:snappy-java dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * Update changelog Signed-off-by: dependabot[bot] <support@github.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: dependabot[bot] <dependabot[bot]@users.noreply.github.com> (cherry picked from commit b83f433)

…/fixtures/hdfs-fixture (opensearch-project#10206) * Bump org.xerial.snappy:snappy-java in /test/fixtures/hdfs-fixture Bumps [org.xerial.snappy:snappy-java](https://github.com/xerial/snappy-java) from 1.1.10.3 to 1.1.10.4. - [Release notes](https://github.com/xerial/snappy-java/releases) - [Commits](xerial/snappy-java@v1.1.10.3...v1.1.10.4) --- updated-dependencies: - dependency-name: org.xerial.snappy:snappy-java dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * Update changelog Signed-off-by: dependabot[bot] <support@github.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: dependabot[bot] <dependabot[bot]@users.noreply.github.com> Signed-off-by: Ivan Brusic <ivan.brusic@flocksafety.com>

…/fixtures/hdfs-fixture (#10206) (#10213) * Bump org.xerial.snappy:snappy-java in /test/fixtures/hdfs-fixture Bumps [org.xerial.snappy:snappy-java](https://github.com/xerial/snappy-java) from 1.1.10.3 to 1.1.10.4. - [Release notes](https://github.com/xerial/snappy-java/releases) - [Commits](xerial/snappy-java@v1.1.10.3...v1.1.10.4) --- updated-dependencies: - dependency-name: org.xerial.snappy:snappy-java dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * Update changelog Signed-off-by: dependabot[bot] <support@github.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: dependabot[bot] <dependabot[bot]@users.noreply.github.com> (cherry picked from commit b83f433) Signed-off-by: Andriy Redko <andriy.redko@aiven.io> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…/fixtures/hdfs-fixture (opensearch-project#10206) * Bump org.xerial.snappy:snappy-java in /test/fixtures/hdfs-fixture Bumps [org.xerial.snappy:snappy-java](https://github.com/xerial/snappy-java) from 1.1.10.3 to 1.1.10.4. - [Release notes](https://github.com/xerial/snappy-java/releases) - [Commits](xerial/snappy-java@v1.1.10.3...v1.1.10.4) --- updated-dependencies: - dependency-name: org.xerial.snappy:snappy-java dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * Update changelog Signed-off-by: dependabot[bot] <support@github.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: dependabot[bot] <dependabot[bot]@users.noreply.github.com>

…/fixtures/hdfs-fixture (opensearch-project#10206) * Bump org.xerial.snappy:snappy-java in /test/fixtures/hdfs-fixture Bumps [org.xerial.snappy:snappy-java](https://github.com/xerial/snappy-java) from 1.1.10.3 to 1.1.10.4. - [Release notes](https://github.com/xerial/snappy-java/releases) - [Commits](xerial/snappy-java@v1.1.10.3...v1.1.10.4) --- updated-dependencies: - dependency-name: org.xerial.snappy:snappy-java dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * Update changelog Signed-off-by: dependabot[bot] <support@github.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: dependabot[bot] <dependabot[bot]@users.noreply.github.com> Signed-off-by: Shivansh Arora <hishiv@amazon.com>

dependabot Bot requested review from Bukhtawar, anasalkouz, andrross and reta as code owners September 25, 2023 13:05

dependabot Bot added the dependabot PRs with auto version bumps from dependabot label Sep 25, 2023

dependabot Bot requested a review from CEHENKLE as a code owner September 25, 2023 13:05

dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 25, 2023

dependabot Bot requested review from Rishikesh1159, VachaShah, dblock, dbwiddis, dreamer-89, gbbafna, kartg, kotwanikunal, mch2, msfroh, nknize, owaiskazi19, peternied, ryanbogan, sachinpkale, saratvemulapalli, setiah, shwetathareja and sohami as code owners September 25, 2023 13:05

dependabot Bot force-pushed the dependabot/gradle/test/fixtures/hdfs-fixture/org.xerial.snappy-snappy-java-1.1.10.4 branch from b353a25 to c2767a2 Compare September 25, 2023 13:35

Update changelog

4af0c29

Signed-off-by: dependabot[bot] <support@github.com>

reta mentioned this pull request Sep 25, 2023

Bump org.xerial.snappy:snappy-java from 1.1.10.3 to 1.1.10.4 #10207

Closed

6 tasks

reta approved these changes Sep 25, 2023

View reviewed changes

reta merged commit b83f433 into main Sep 25, 2023

reta added the backport 2.x Backport to 2.x branch label Sep 25, 2023

dependabot Bot deleted the dependabot/gradle/test/fixtures/hdfs-fixture/org.xerial.snappy-snappy-java-1.1.10.4 branch September 25, 2023 15:13

opensearch-trigger-bot Bot added the backport-failed label Sep 25, 2023

reta mentioned this pull request Sep 25, 2023

[Backport] [2.x] Bump org.xerial.snappy:snappy-java from 1.1.10.3 to 1.1.10.4 in /test/fixtures/hdfs-fixture (#10206) #10213

Merged

AlexRuiz7 mentioned this pull request Nov 17, 2023

Compatibility with OpenSearch 2.11.0 wazuh/wazuh-dashboard#113

Closed

4 tasks

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump org.xerial.snappy:snappy-java from 1.1.10.3 to 1.1.10.4 in /test/fixtures/hdfs-fixture#10206

Bump org.xerial.snappy:snappy-java from 1.1.10.3 to 1.1.10.4 in /test/fixtures/hdfs-fixture#10206
reta merged 2 commits intomainfrom
dependabot/gradle/test/fixtures/hdfs-fixture/org.xerial.snappy-snappy-java-1.1.10.4

dependabot Bot commented on behalf of github Sep 25, 2023 •

edited

Loading

Uh oh!

reta commented Sep 25, 2023

Uh oh!

github-actions Bot commented Sep 25, 2023 •

edited

Loading

Uh oh!

github-actions Bot commented Sep 25, 2023

Uh oh!

codecov Bot commented Sep 25, 2023 •

edited

Loading

Uh oh!

github-actions Bot commented Sep 25, 2023

Uh oh!

github-actions Bot commented Sep 25, 2023

Uh oh!

github-actions Bot commented Sep 25, 2023

Uh oh!

opensearch-trigger-bot Bot commented Sep 25, 2023

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Sep 25, 2023 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.1.10.4

What's Changed

Security Fix

🚀 Features

🔗 Dependency Updates

🛠 Internal Updates

Other Changes

Uh oh!

reta commented Sep 25, 2023

Uh oh!

github-actions Bot commented Sep 25, 2023 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Compatibility status:

Incompatible components

Skipped components

Compatible components

Uh oh!

github-actions Bot commented Sep 25, 2023

Gradle Check (Jenkins) Run Completed with:

Uh oh!

codecov Bot commented Sep 25, 2023 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

github-actions Bot commented Sep 25, 2023

Gradle Check (Jenkins) Run Completed with:

Uh oh!

github-actions Bot commented Sep 25, 2023

Gradle Check (Jenkins) Run Completed with:

Uh oh!

github-actions Bot commented Sep 25, 2023

Gradle Check (Jenkins) Run Completed with:

Uh oh!

opensearch-trigger-bot Bot commented Sep 25, 2023

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Sep 25, 2023 •

edited

Loading

github-actions Bot commented Sep 25, 2023 •

edited

Loading

codecov Bot commented Sep 25, 2023 •

edited

Loading