Skip to content

[SPARK-55309][BUILD] Upgrade protobuf to 33.5 - #54090

Closed
LuciferYang wants to merge 1 commit into
apache:masterfrom
LuciferYang:protobuf-33.5
Closed

[SPARK-55309][BUILD] Upgrade protobuf to 33.5#54090
LuciferYang wants to merge 1 commit into
apache:masterfrom
LuciferYang:protobuf-33.5

Conversation

@LuciferYang

@LuciferYangLuciferYang commented Feb 2, 2026

Copy link
Copy Markdown
Contributor

What changes were proposed in this pull request?

This pr aims to upgrade protobuf from 33.0 to 33.5:

  • For Java, upgrading from version 4.33.0 to 4.33.5
  • For Python, upgrading from version 6.33.0 to 6.33.5

Why are the changes needed?

The new version brings CVE fixes for CVE-2026-0994, and the full release notes as follows:

Does this PR introduce any user-facing change?

No

How was this patch tested?

Pass Github Actions

Was this patch authored or co-authored using generative AI tooling?

No

@github-actions

Copy link
Copy Markdown

JIRA Issue Information

=== Improvement SPARK-55309 ===
Summary: Upgrade protobuf to 33.5
Assignee: None
Status: Open
Affected: ["4.2.0"]


This comment was automatically generated by GitHub Actions

@LuciferYang
LuciferYang marked this pull request as draft February 2, 2026 11:28
@LuciferYang

Copy link
Copy Markdown
ContributorAuthor

https://github.com/LuciferYang/spark/actions/runs/21588221553/job/62201559851

@dongjoon-hyun

Copy link
Copy Markdown
Member

Thank you, @LuciferYang !

@LuciferYang
LuciferYang marked this pull request as ready for review February 3, 2026 02:39

@dongjoon-hyundongjoon-hyun left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

+1, LGTM. Thank you, @LuciferYang .

@LuciferYang

Copy link
Copy Markdown
ContributorAuthor

@LuciferYang

Copy link
Copy Markdown
ContributorAuthor

Merged into master. Thanks @dongjoon-hyun

LuciferYang pushed a commit that referenced this pull request Feb 4, 2026
### What changes were proposed in this pull request?
Bump protobuf version for minimum docker images like #54090
### Why are the changes needed?
I think the original PR just missed these two images. CI is failing on these two.
### Does this PR introduce _any_ user-facing change?
No.
### How was this patch tested?
This is to fix scheduled CI.
### Was this patch authored or co-authored using generative AI tooling?
No.
Closes#54122 from gaogaotiantian/bump-container-protobuf-version.
Authored-by: Tian Gao <gaogaotiantian@hotmail.com>
Signed-off-by: yangjie01 <yangjie01@baidu.com>
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@LuciferYang@dongjoon-hyun