This is an automated email from the ASF dual-hosted git repository. github-merge-queue[bot] pushed a commit to branch gh-readonly-queue/main/pr-7284-a3c01c585738876ab06c7e92a882d6006b2abdff in repository https://gitbox.apache.org/repos/asf/texera.git
commit 9fe36eeab474bd215f4e09d937355bba2f1ad728 Author: Mend Renovate <[email protected]> AuthorDate: Mon Aug 3 23:48:02 2026 +0100 chore(deps, amber): update dependency io.altoo:pekko-kryo-serialization to v1.5.1 (#7284) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [io.altoo:pekko-kryo-serialization](https://redirect.github.com/altoo-ag/pekko-kryo-serialization) | minor | `1.3.0` → `1.5.1` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/6912) for more information. --- ### Release Notes <details> <summary>altoo-ag/pekko-kryo-serialization (io.altoo:pekko-kryo-serialization)</summary> ### [`v1.5.1`](https://redirect.github.com/altoo-ag/pekko-kryo-serialization/releases/tag/v1.5.1) [Compare Source](https://redirect.github.com/altoo-ag/pekko-kryo-serialization/compare/v1.5.0...v1.5.1) #### What's Changed - Use the new threadlocal based serializer-cache for pekko. **Full Changelog**: <https://github.com/altoo-ag/pekko-kryo-serialization/compare/v1.5.0...v1.5.1> ### [`v1.5.0`](https://redirect.github.com/altoo-ag/pekko-kryo-serialization/releases/tag/v1.5.0) [Compare Source](https://redirect.github.com/altoo-ag/pekko-kryo-serialization/compare/v1.4.0...v1.5.0) #### What's Changed - Drop scala 2.12 and jdk 11 support since upstream pekko 2.x also drops these - Tested against pekko 2.x as well as pekko 1.x - Several performance optimizations in concurrency, collection deserialization and ByteString see benchmark.md **Full Changelog**: <https://github.com/altoo-ag/pekko-kryo-serialization/compare/v1.4.0...v1.5.0> ### [`v1.4.0`](https://redirect.github.com/altoo-ag/pekko-kryo-serialization/releases/tag/v1.4.0) [Compare Source](https://redirect.github.com/altoo-ag/pekko-kryo-serialization/compare/v1.3.2...v1.4.0) #### What's Changed - Upgrade dependencies and make compatible to pekko 2.x - Updated documentation **Full Changelog**: <https://github.com/altoo-ag/pekko-kryo-serialization/compare/v1.3.2...v1.4.0> ### [`v1.3.2`](https://redirect.github.com/altoo-ag/pekko-kryo-serialization/releases/tag/v1.3.2) [Compare Source](https://redirect.github.com/altoo-ag/pekko-kryo-serialization/compare/v1.3.1...v1.3.2) #### What's Changed - No functional change - upgraded scala versions - added tests for jdk 25 and pekko 1.4.0 (additional to 1.1.5) **Full Changelog**: <https://github.com/altoo-ag/pekko-kryo-serialization/compare/v1.3.1...v1.3.2> ### [`v1.3.1`](https://redirect.github.com/altoo-ag/pekko-kryo-serialization/releases/tag/v1.3.1) [Compare Source](https://redirect.github.com/altoo-ag/pekko-kryo-serialization/compare/v1.3.0...v1.3.1) #### What's Changed - fix lz4 [cve-2025-12183](https://sites.google.com/sonatype.com/vulnerabilities/cve-2025-12183) by using the latest lz4 library (upgrade scala-kryo-serialization) - update documentation **Full Changelog**: <https://github.com/altoo-ag/pekko-kryo-serialization/compare/v1.3.0...v1.3.1> </details> --- ### Configuration 📅 **Schedule**: (in timezone Etc/UTC) - Branch creation - "before 8am on monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/apache/texera). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zLjIiLCJ1cGRhdGVkSW5WZXIiOiI0NC4zLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==--> --------- Co-authored-by: Xinyuan Lin <[email protected]> Co-authored-by: Claude Opus 5 <[email protected]> --- amber/LICENSE-binary-java | 2 +- amber/build.sbt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/amber/LICENSE-binary-java b/amber/LICENSE-binary-java index cec00dff80..5bd2534e11 100644 --- a/amber/LICENSE-binary-java +++ b/amber/LICENSE-binary-java @@ -298,7 +298,7 @@ Scala/Java jars: - commons-pool.commons-pool-1.6.jar - dev.failsafe.failsafe-3.3.2.jar - io.airlift.aircompressor-2.0.2.jar - - io.altoo.pekko-kryo-serialization_2.13-1.3.0.jar + - io.altoo.pekko-kryo-serialization_2.13-1.5.1.jar - io.altoo.scala-kryo-serialization_2.13-1.5.2.jar - io.dropwizard-bundles.dropwizard-redirect-bundle-1.0.5.jar - io.dropwizard.dropwizard-auth-1.3.23.jar diff --git a/amber/build.sbt b/amber/build.sbt index 8aace630e5..1814e4cedd 100644 --- a/amber/build.sbt +++ b/amber/build.sbt @@ -303,7 +303,7 @@ libraryDependencies += "com.esotericsoftware" % "kryo" % "5.6.2" libraryDependencies += "com.esotericsoftware" % "kryo5" % "5.6.0" // https://mvnrepository.com/artifact/io.altoo/pekko-kryo-serialization -libraryDependencies += "io.altoo" %% "pekko-kryo-serialization" % "1.3.0" +libraryDependencies += "io.altoo" %% "pekko-kryo-serialization" % "1.5.1" // https://mvnrepository.com/artifact/io.altoo/scala-kryo-serialization libraryDependencies += "io.altoo" %% "scala-kryo-serialization" % "1.5.2"
