Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ODP-2167 Upgrade janino version #29

Merged
merged 3 commits into from
Sep 4, 2024
Merged

ODP-2167 Upgrade janino version #29

merged 3 commits into from
Sep 4, 2024

Conversation

senthh
Copy link
Collaborator

@senthh senthh commented Sep 4, 2024

What changes were proposed in this pull request?

Upgrade janino version to 3.1.10

Why are the changes needed?

To fix CVE issue CVE-2023-33546, we need to upgrade janino version to greater than 3.1.9. And we changed to one version up to 3.1.10.

Does this PR introduce any user-facing change?

No

Prashant Singh and others added 3 commits September 4, 2024 16:15
### What changes were proposed in this pull request?

upgrade janino to 3.1.7 from 3.0.16

### Why are the changes needed?

- The proposed version contains bug fix in janino by maropu.
   - janino-compiler/janino#148
- contains `getBytecodes` method which can be used to simplify the way to get bytecodes from ClassBodyEvaluator in CodeGenerator#updateAndGetCompilationStats method. (by LuciferYang)
   - apache#32536

### Does this PR introduce _any_ user-facing change?

No

### How was this patch tested?

Existing UTs

Closes apache#37202 from singhpk234/upgrade/bump-janino.

Authored-by: Prashant Singh <psinghvk@amazon.com>
Signed-off-by: Sean Owen <srowen@gmail.com>

(cherry picked from commit 29ed337)
### What changes were proposed in this pull request?
This pr aims upgrade janino from 3.1.7 to 3.1.9

### Why are the changes needed?
This version bring some improvement and bug fix, and janino 3.1.9 will no longer test Java 12, 15, 16 because these STS versions have been EOL:

- janino-compiler/janino@v3.1.7...v3.1.9

### Does this PR introduce _any_ user-facing change?
No

### How was this patch tested?
- Pass GitHub Actions
- Manual test this pr with Scala 2.13, all test passed

Closes apache#38075 from LuciferYang/SPARK-40633.

Lead-authored-by: yangjie01 <yangjie01@baidu.com>
Co-authored-by: YangJie <yangjie01@baidu.com>
Signed-off-by: Sean Owen <srowen@gmail.com>

(cherry picked from commit 49e102b)
@senthh senthh merged commit 62589f6 into ODP-2049 Sep 4, 2024
10 of 13 checks passed
@prabhjyotsingh prabhjyotsingh deleted the ODP-2167 branch September 27, 2024 12:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants