chore: Bump github.com/twmb/avro from 1.5.0 to 1.7.2 - #1167
Conversation
Bumps [github.com/twmb/avro](https://github.com/twmb/avro) from 1.5.0 to 1.7.2. - [Commits](twmb/avro@v1.5.0...v1.7.2) --- updated-dependencies: - dependency-name: github.com/twmb/avro dependency-version: 1.7.2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
zeroshade
left a comment
zeroshade
left a comment
There was a problem hiding this comment.
Straightforward dependency update. I verified the exact PR head still uses github.com/twmb/avro throughout arrow/avro, including OCF reading, schema parsing, logical values, and the associated tests.
The change is limited to the version and checksums. The module's go.mod checksum is unchanged, so this does not alter its transitive dependency graph. The upstream range includes decoder fixes and recursion-depth hardening, and Arrow Go's full CI matrix is green.
This review was drafted by an AI-assisted tool and confirmed by an Apache Arrow Go maintainer. The maintainer approving this PR has read the findings and signed off. If something feels off, please reply on the PR and a maintainer will follow up.
More on how Apache Arrow Go handles maintainer review: CONTRIBUTING.md.
1 participant
Bumps github.com/twmb/avro from 1.5.0 to 1.7.2.
Commits
be720b1Merge pull request #37 from twmb/fix-nil-interface-fast-pathsfd58334review: tighten setIface to reject non-interface v774f7d5review: round of fixes (scanner-advance comment, UUID split, errIndirectDeep ...5441c13review: propagate errTooDeep through JSON union trial loopsd03c6e3review: fail-fast assignability check in decodeRecordAnyfd6d018review: pin stale-key semantics of map reuse in *any decode4cc4943review feedback: clarify TaggedUnions doc, drop errIndirectDeep, harden concu...8f118bftest: fuzz pathologically deep + cyclic inputs21006caall: cap remaining pointer/interface unwrap loops at maxIndirectDeptha302d51all: comprehensive recursion depth audit, decoder + bypass pathsDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)