Skip to content

Security updates #138

Merged
novatechflow merged 2 commits intoKafScale:mainfrom
novatechflow:security
Apr 17, 2026
Merged

Security updates #138
novatechflow merged 2 commits intoKafScale:mainfrom
novatechflow:security

Conversation

@novatechflow
Copy link
Copy Markdown
Collaborator

Changes

  • bump org.apache.kafka:kafka-clients to patched versions in the Java SDK and demo apps
  • bump go.opentelemetry.io/otel/sdk to v1.43.0
  • bump github.com/aws/aws-sdk-go-v2/service/s3 to v1.97.3
  • bump github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream to v1.7.8
  • bump github.com/go-jose/go-jose/v4 to v4.1.4 in the iceberg processor
  • refresh affected go.sum entries

Verification

  • go test ./... in repo root
  • go test ./... in addons/processors/iceberg-processor
  • go test ./... in addons/processors/sql-processor
  • mvn -q -DskipTests package in examples/E30_flink-kafscale-demo
  • mvn -q -DskipTests package in examples/E40_spark-kafscale-demo

Notes

  • addons/processors/sql-processor/go.mod now uses go 1.25.0 because the patched OpenTelemetry dependency graph requires it
  • local Maven verification for lfs-client-sdk/java and examples/E10_java-kafka-client-demo is blocked by the current machine's JDK being older than Java 17

@novatechflow novatechflow merged commit f7e2336 into KafScale:main Apr 17, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants