open-metadata / OpenMetadata

OpenMetadata is a unified metadata platform for data discovery, data observability, and data governance powered by a central metadata repository, in-depth column level lineage, and seamless team collaboration.
https://open-metadata.org
Apache License 2.0
5.13k stars 975 forks source link

Update SQLParse to Version 0.5 #15952

Open IceS2 opened 4 months ago

IceS2 commented 4 months ago

It would be great to check out if we could upgrade the sqlparse library to the latest version due to some Uncontrolled Recursion issue that might happen on version 0.4

arnehe030 commented 2 months ago

Are there any plans to upgrade the sqlparse dependency in collate-sqllineage to v0.5 fixing CVE-2024-4340?

kzajaczkowski commented 2 months ago

Lack of support for sqlparse 0.5 means that there's an incompatibility with dbt-core starting with 1.7.13, because the dependency was updated here: https://github.com/dbt-labs/dbt-core/issues/9949