This is an automated email from the ASF dual-hosted git repository.
asf-ci-deploy pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/calcite-site.git
The following commit(s) were added to refs/heads/main by this push:
new d778240b7 Website deployed from
calcite@3ab351f622682f068c3878e4db90292bcee4b2e2
d778240b7 is described below
commit d778240b7b60dd653ce143de4002c3f050100767
Author: rubenada <[email protected]>
AuthorDate: Tue Sep 15 07:45:12 2026 +0000
Website deployed from calcite@3ab351f622682f068c3878e4db90292bcee4b2e2
---
docs/history.html | 11 +++++++++++
1 file changed, 11 insertions(+)
diff --git a/docs/history.html b/docs/history.html
index 4f0bc7332..83bebc588 100644
--- a/docs/history.html
+++ b/docs/history.html
@@ -136,6 +136,17 @@ creation will fail with `IllegalArgumentException: class X
is not annotated @Inp
`KafkaTableFactory` row converter operand now requires the presence of a
`public`
constructor for instantiating the class.
+* [<a
href="https://issues.apache.org/jira/browse/CALCITE-7773";>CALCITE-7773</a>]
+`KafkaTableFactory` now validates the `consumer.params` operand at table
+creation. Keys whose values name a class the Kafka client would load and
+initialize (deserializers, interceptors, metric reporters, partition
+assignment strategies, callback handlers, JAAS/security providers, and any
+key ending in `.class` or `.classes`) are rejected with `SecurityException`.
+`key.deserializer` and `value.deserializer` remain accepted after an
+interface check. Set `-Dcalcite.kafka.consumer.params.trusted=true` to
+restore the previous forwarding behavior when models are entirely
+operator-supplied.
+
* [<a
href="https://issues.apache.org/jira/browse/CALCITE-7713";>CALCITE-7713</a>]
Class loading from model files has been disabled by default. Any attempt to
load
classes from model files will lead to `SecurityException` unless an appropriate
