[ 
https://issues.apache.org/jira/browse/ARROW-17056?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17566081#comment-17566081
 ] 

Weston Pace commented on ARROW-17056:
-------------------------------------

[~apitrou] is right.  Substrait is just a spec so bumping to newer versions 
isn't likely to be needed for security reasons.  Plus, Substrait uses protobuf 
and aims to generally be backwards compatible so a newer producer should be 
fine even if we are targetting an older version as consumer.  Substrait is also 
iterating rapidly and will tend to have a new version / week for a while.  For 
the time being we should probably only bump Substrait when we need some kind of 
new feature for our own implementation.

> [C++] Bump version of bundled substrait
> ---------------------------------------
>
>                 Key: ARROW-17056
>                 URL: https://issues.apache.org/jira/browse/ARROW-17056
>             Project: Apache Arrow
>          Issue Type: Sub-task
>          Components: C++
>            Reporter: Raúl Cumplido
>            Priority: Major
>             Fix For: 9.0.0
>
>
> There has been a new substrait version released:
> https://github.com/substrait-io/substrait/releases/tag/v0.7.0



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to