Re: [PR] Get rid of pyarrow-hotfix for CVE-2023-47248 [airflow]

potiuk merged PR #36697: URL: https://github.com/apache/airflow/pull/36697 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: commits-unsubscr...@airflow.a

Re: [PR] Get rid of pyarrow-hotfix for CVE-2023-47248 [airflow]

potiuk commented on code in PR #36697: URL: https://github.com/apache/airflow/pull/36697#discussion_r1446564939 ## generated/provider_dependencies.json: ## @@ -56,7 +56,8 @@ "apache.beam": { "deps": [ "apache-airflow>=2.6.0", - "apache-beam>=2.47.0" + "a

Re: [PR] Get rid of pyarrow-hotfix for CVE-2023-47248 [airflow]

hussein-awala commented on code in PR #36697: URL: https://github.com/apache/airflow/pull/36697#discussion_r1446542990 ## generated/provider_dependencies.json: ## @@ -56,7 +56,8 @@ "apache.beam": { "deps": [ "apache-airflow>=2.6.0", - "apache-beam>=2.47.0" +

Re: [PR] Get rid of pyarrow-hotfix for CVE-2023-47248 [airflow]

potiuk commented on code in PR #36697: URL: https://github.com/apache/airflow/pull/36697#discussion_r1446537433 ## generated/provider_dependencies.json: ## @@ -56,7 +56,8 @@ "apache.beam": { "deps": [ "apache-airflow>=2.6.0", - "apache-beam>=2.47.0" + "a

Re: [PR] Get rid of pyarrow-hotfix for CVE-2023-47248 [airflow]

potiuk commented on code in PR #36697: URL: https://github.com/apache/airflow/pull/36697#discussion_r1446537433 ## generated/provider_dependencies.json: ## @@ -56,7 +56,8 @@ "apache.beam": { "deps": [ "apache-airflow>=2.6.0", - "apache-beam>=2.47.0" + "a

Re: [PR] Get rid of pyarrow-hotfix for CVE-2023-47248 [airflow]

potiuk commented on code in PR #36697: URL: https://github.com/apache/airflow/pull/36697#discussion_r1446537433 ## generated/provider_dependencies.json: ## @@ -56,7 +56,8 @@ "apache.beam": { "deps": [ "apache-airflow>=2.6.0", - "apache-beam>=2.47.0" + "a

Re: [PR] Get rid of pyarrow-hotfix for CVE-2023-47248 [airflow]

hussein-awala commented on code in PR #36697: URL: https://github.com/apache/airflow/pull/36697#discussion_r1446533287 ## generated/provider_dependencies.json: ## @@ -56,7 +56,8 @@ "apache.beam": { "deps": [ "apache-airflow>=2.6.0", - "apache-beam>=2.47.0" +

[PR] Get rid of pyarrow-hotfix for CVE-2023-47248 [airflow]

potiuk opened a new pull request, #36697: URL: https://github.com/apache/airflow/pull/36697 The #35650 introduced a hotfix for Pyarrow CVE-2023-47248. So far we have been blocked from removing it by Apache Beam that limited Airflow from bumping pyarrow to a version that was not vulnerable.