Skip to content

[SPARK-55309][BUILD] Upgrade protobuf to 33.5#54090

Closed
LuciferYang wants to merge 1 commit intoapache:masterfrom
LuciferYang:protobuf-33.5
Closed

[SPARK-55309][BUILD] Upgrade protobuf to 33.5#54090
LuciferYang wants to merge 1 commit intoapache:masterfrom
LuciferYang:protobuf-33.5

Conversation

@LuciferYang
Copy link
Copy Markdown
Contributor

@LuciferYang LuciferYang commented Feb 2, 2026

What changes were proposed in this pull request?

This pr aims to upgrade protobuf from 33.0 to 33.5:

  • For Java, upgrading from version 4.33.0 to 4.33.5
  • For Python, upgrading from version 6.33.0 to 6.33.5

Why are the changes needed?

The new version brings CVE fixes for CVE-2026-0994, and the full release notes as follows:

Does this PR introduce any user-facing change?

No

How was this patch tested?

Pass Github Actions

Was this patch authored or co-authored using generative AI tooling?

No

@github-actions
Copy link
Copy Markdown

github-actions bot commented Feb 2, 2026

JIRA Issue Information

=== Improvement SPARK-55309 ===
Summary: Upgrade protobuf to 33.5
Assignee: None
Status: Open
Affected: ["4.2.0"]


This comment was automatically generated by GitHub Actions

@LuciferYang LuciferYang marked this pull request as draft February 2, 2026 11:28
@LuciferYang
Copy link
Copy Markdown
Contributor Author

https://github.com/LuciferYang/spark/actions/runs/21588221553/job/62201559851

@dongjoon-hyun
Copy link
Copy Markdown
Member

Thank you, @LuciferYang !

@LuciferYang LuciferYang marked this pull request as ready for review February 3, 2026 02:39
Copy link
Copy Markdown
Member

@dongjoon-hyun dongjoon-hyun left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

+1, LGTM. Thank you, @LuciferYang .

@LuciferYang
Copy link
Copy Markdown
Contributor Author

@LuciferYang
Copy link
Copy Markdown
Contributor Author

Merged into master. Thanks @dongjoon-hyun

LuciferYang pushed a commit that referenced this pull request Feb 4, 2026
### What changes were proposed in this pull request?

Bump protobuf version for minimum docker images like #54090

### Why are the changes needed?

I think the original PR just missed these two images. CI is failing on these two.

### Does this PR introduce _any_ user-facing change?

No.

### How was this patch tested?

This is to fix scheduled CI.

### Was this patch authored or co-authored using generative AI tooling?

No.

Closes #54122 from gaogaotiantian/bump-container-protobuf-version.

Authored-by: Tian Gao <gaogaotiantian@hotmail.com>
Signed-off-by: yangjie01 <yangjie01@baidu.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants