This is an automated email from the ASF dual-hosted git repository.
FrankChen021 pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/druid.git
The following commit(s) were added to refs/heads/master by this push:
new 4bf9aa2ac84 build(deps): bump orc.version from 1.7.6 to 2.3.1 (#19971)
4bf9aa2ac84 is described below
commit 4bf9aa2ac8443740a94539142363fa12d4346e15
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Thu Aug 13 09:38:41 2026 +0800
build(deps): bump orc.version from 1.7.6 to 2.3.1 (#19971)
* build(deps): bump orc.version from 1.7.6 to 2.3.1
Bumps `orc.version` from 1.7.6 to 2.3.1.
Updates `org.apache.orc:orc-mapreduce` from 1.7.6 to 2.3.1
Updates `org.apache.orc:orc-core` from 1.7.6 to 2.3.1
---
updated-dependencies:
- dependency-name: org.apache.orc:orc-mapreduce
dependency-version: 2.3.1
dependency-type: direct:production
update-type: version-update:semver-major
- dependency-name: org.apache.orc:orc-core
dependency-version: 2.3.1
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected]>
* build: align ORC 2.3.1 dependencies
---------
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Frank Chen <[email protected]>
---
extensions-core/orc-extensions/pom.xml | 2 +-
licenses.yaml | 93 ++++++++++++++++++++++++++++++----
licenses/bin/google-brotli.MIT | 19 +++++++
pom.xml | 2 +-
4 files changed, 105 insertions(+), 11 deletions(-)
diff --git a/extensions-core/orc-extensions/pom.xml
b/extensions-core/orc-extensions/pom.xml
index 7a0dc4e24c2..67a0f198258 100644
--- a/extensions-core/orc-extensions/pom.xml
+++ b/extensions-core/orc-extensions/pom.xml
@@ -32,7 +32,7 @@
<modelVersion>4.0.0</modelVersion>
<properties>
<hive-storage-api.version>2.8.1</hive-storage-api.version>
- <orc.version>1.7.6</orc.version>
+ <orc.version>2.3.1</orc.version>
</properties>
<dependencies>
<dependency>
diff --git a/licenses.yaml b/licenses.yaml
index c35e4563ad3..97ae3a692d1 100644
--- a/licenses.yaml
+++ b/licenses.yaml
@@ -4260,7 +4260,7 @@ name: Apache ORC libraries
license_category: binary
module: extensions/druid-orc-extensions
license_name: Apache License version 2.0
-version: 1.7.6
+version: 2.3.1
libraries:
- org.apache.orc: orc-mapreduce
- org.apache.orc: orc-core
@@ -4268,13 +4268,27 @@ libraries:
notices:
- orc-mapreduce: |
ORC MapReduce
- Copyright 2013-2021 The Apache Software Foundation
+ Copyright 2013-2026 The Apache Software Foundation
- orc-core: |
ORC Core
- Copyright 2013-2021 The Apache Software Foundation
+ Copyright 2013-2026 The Apache Software Foundation
- orc-shims: |
ORC Shims
- Copyright 2013-2021 The Apache Software Foundation
+ Copyright 2013-2026 The Apache Software Foundation
+
+---
+
+name: Apache ORC Format
+license_category: binary
+module: extensions/druid-orc-extensions
+license_name: Apache License version 2.0
+version: 1.1.1
+libraries:
+ - org.apache.orc: orc-format
+notices:
+ - orc-format: |
+ Apache ORC Format
+ Copyright 2013-2022 The Apache Software Foundation
---
@@ -4282,7 +4296,7 @@ name: ThreeTen
license_category: binary
module: extensions/druid-orc-extensions
license_name: BSD-3-Clause License
-version: 1.5.0
+version: 1.9.0
libraries:
- org.threeten: threeten-extra
notices:
@@ -4292,6 +4306,58 @@ notices:
---
+name: Brotli4j
+license_category: binary
+module: extensions/druid-orc-extensions
+license_name: Apache License version 2.0
+version: 1.20.0
+libraries:
+ - com.aayushatharva.brotli4j: brotli4j
+ - com.aayushatharva.brotli4j: service
+ - com.aayushatharva.brotli4j: native-linux-x86_64
+ - com.aayushatharva.brotli4j: native-linux-s390x
+ - com.aayushatharva.brotli4j: native-linux-ppc64le
+ - com.aayushatharva.brotli4j: native-linux-aarch64
+ - com.aayushatharva.brotli4j: native-linux-armv7
+ - com.aayushatharva.brotli4j: native-linux-riscv64
+ - com.aayushatharva.brotli4j: native-windows-x86_64
+ - com.aayushatharva.brotli4j: native-windows-aarch64
+ - com.aayushatharva.brotli4j: native-osx-x86_64
+ - com.aayushatharva.brotli4j: native-osx-aarch64
+notice: |
+ =============== Brotli4j ===============
+
+ Copyright 2021, Aayush Atharva
+
+ Brotli4j licenses this file to you under the
+ Apache License, Version 2.0 (the "License");
+ you may not use this file except in compliance with the License.
+ You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+
+ =========================================
+
+ This product includes Google Brotli, which is available under the MIT
License.
+
+---
+
+name: Google Brotli bundled by Brotli4j
+license_category: binary
+module: extensions/druid-orc-extensions
+license_name: MIT License
+version: 1.1.0
+copyright: 2009, 2010, 2013-2016 the Brotli Authors
+license_file_path: licenses/bin/google-brotli.MIT
+
+---
+
name: aircompressor
license_category: binary
module: extensions/druid-orc-extensions
@@ -5298,8 +5364,8 @@ libraries:
name: snappy-java
license_category: binary
-version: 1.1.10.4
-module: druid-ranger-security
+version: 1.1.10.8
+module: java-core
license_name: Apache License version 2.0
libraries:
- org.xerial.snappy: snappy-java
@@ -5308,9 +5374,12 @@ notices:
This product includes software developed by Google
Snappy: http://code.google.com/p/snappy/ (New BSD License)
+ This product includes software developed by Apache
+ PureJavaCrc32C from apache-hadoop-common http://hadoop.apache.org/
+ (Apache 2.0 license)
- This library containd statically linked libstdc++. This inclusion is
allowed by
- "GCC RUntime Library Exception"
+ This library contains statically linked libstdc++. This inclusion is
allowed by
+ "GCC Runtime Library Exception"
http://gcc.gnu.org/onlinedocs/libstdc++/manual/license.html
== Contributors ==
@@ -5319,6 +5388,12 @@ notices:
* Alec Wysoker
* Performance and memory usage improvement
+ Third-Party Notices and Licenses:
+
+ - Hadoop: Apache Hadoop is used as a dependency
+ License: Apache License 2.0
+ Source/Reference:
https://github.com/apache/hadoop/blob/trunk/NOTICE.txt
+
---
name: Woodstox
diff --git a/licenses/bin/google-brotli.MIT b/licenses/bin/google-brotli.MIT
new file mode 100644
index 00000000000..39b20ca5e52
--- /dev/null
+++ b/licenses/bin/google-brotli.MIT
@@ -0,0 +1,19 @@
+Copyright (c) 2009, 2010, 2013-2016 by the Brotli Authors.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
diff --git a/pom.xml b/pom.xml
index 810e4120aa7..e7d74009eab 100644
--- a/pom.xml
+++ b/pom.xml
@@ -995,7 +995,7 @@
<dependency>
<groupId>org.xerial.snappy</groupId>
<artifactId>snappy-java</artifactId>
- <version>1.1.10.7</version>
+ <version>1.1.10.8</version>
</dependency>
<dependency>
<groupId>com.google.protobuf</groupId>
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
