apache / seatunnel

SeaTunnel is a next-generation super high-performance, distributed, massive data integration tool.
https://seatunnel.apache.org/
Apache License 2.0
8.06k stars 1.83k forks source link

[Improve] Use avro 1.11.4 due to CVE-2024-47561 #8075

Open caicancai opened 1 week ago

caicancai commented 1 week ago

Purpose of this pull request

Does this PR introduce any user-facing change?

How was this patch tested?

Check list

Hisoka-X commented 1 week ago

Thanks @caicancai ! Could you follow the guide to open github actioin on your fork repository? https://github.com/apache/seatunnel/pull/8075/checks?check_run_id=33103257441

Hisoka-X commented 1 week ago

Close/Reopen will lost our CI status. Please try open github action on your fork repository, then push an empty commit to re-trigger CI.

caicancai commented 1 week ago

Close/Reopen will lost our CI status. Please try open github action on your fork repository, then push an empty commit to re-trigger CI.

Thanks

Hisoka-X commented 4 days ago

Hi @caicancai , please fix ci or retrigger failed ci.

caicancai commented 3 days ago

Hi @caicancai , please fix ci or retrigger failed ci.

I tried to fix it over the weekend

caicancai commented 1 hour ago

@Hisoka-X It seems to be some specification issues. I may need to familiarize myself with the seatunnel specifications.

Hisoka-X commented 1 hour ago

@Hisoka-X It seems to be some specification issues. I may need to familiarize myself with the seatunnel specifications.

Please update https://github.com/apache/seatunnel/blob/e1010dceae9b71d00bad0971ce803131d2cf134b/tools/dependencies/known-dependencies.txt#L47 to 1.11.4 to fix it.