[ https://issues.apache.org/jira/browse/ARROW-17056?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17566081#comment-17566081 ]
Weston Pace commented on ARROW-17056: ------------------------------------- [~apitrou] is right. Substrait is just a spec so bumping to newer versions isn't likely to be needed for security reasons. Plus, Substrait uses protobuf and aims to generally be backwards compatible so a newer producer should be fine even if we are targetting an older version as consumer. Substrait is also iterating rapidly and will tend to have a new version / week for a while. For the time being we should probably only bump Substrait when we need some kind of new feature for our own implementation. > [C++] Bump version of bundled substrait > --------------------------------------- > > Key: ARROW-17056 > URL: https://issues.apache.org/jira/browse/ARROW-17056 > Project: Apache Arrow > Issue Type: Sub-task > Components: C++ > Reporter: Raúl Cumplido > Priority: Major > Fix For: 9.0.0 > > > There has been a new substrait version released: > https://github.com/substrait-io/substrait/releases/tag/v0.7.0 -- This message was sent by Atlassian Jira (v8.20.10#820010)