This is an automated email from the ASF dual-hosted git repository.
FrankChen021 pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/druid.git
The following commit(s) were added to refs/heads/master by this push:
new bab7e91076f build(deps): bump aws.sdk.v2.version from 2.40.0 to 2.49.6
(#19796)
bab7e91076f is described below
commit bab7e91076f46ebcc92f648b682ce43bb3b92829
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Thu Jul 30 21:04:24 2026 +0800
build(deps): bump aws.sdk.v2.version from 2.40.0 to 2.49.6 (#19796)
* build(deps): bump aws.sdk.v2.version from 2.40.0 to 2.49.6
Bumps `aws.sdk.v2.version` from 2.40.0 to 2.49.6.
Updates `software.amazon.awssdk:s3` from 2.40.0 to 2.49.6
Updates `software.amazon.awssdk:s3-transfer-manager` from 2.40.0 to 2.49.6
Updates `software.amazon.awssdk:sts` from 2.40.0 to 2.49.6
Updates `software.amazon.awssdk:apache-client` from 2.40.0 to 2.49.6
Updates `software.amazon.awssdk:auth` from 2.40.0 to 2.49.6
Updates `software.amazon.awssdk:regions` from 2.40.0 to 2.49.6
Updates `software.amazon.awssdk:ec2` from 2.40.0 to 2.49.6
Updates `software.amazon.awssdk:aws-core` from 2.40.0 to 2.49.6
Updates `software.amazon.awssdk:sdk-core` from 2.40.0 to 2.49.6
Updates `software.amazon.awssdk:netty-nio-client` from 2.40.0 to 2.49.6
Updates `software.amazon.awssdk:aws-crt-client` from 2.40.0 to 2.49.6
Updates `software.amazon.awssdk:bom` from 2.40.0 to 2.49.6
Updates `software.amazon.awssdk:kinesis` from 2.40.0 to 2.49.6
Updates `software.amazon.awssdk:http-client-spi` from 2.40.0 to 2.49.6
Updates `software.amazon.awssdk:utils` from 2.40.0 to 2.49.6
Updates `software.amazon.awssdk:rds` from 2.40.0 to 2.49.6
Updates `software.amazon.awssdk:glue` from 2.40.0 to 2.49.6
Updates `software.amazon.awssdk:kms` from 2.40.0 to 2.49.6
Updates `software.amazon.awssdk:bundle` from 2.40.0 to 2.49.6
---
updated-dependencies:
- dependency-name: software.amazon.awssdk:s3
dependency-version: 2.49.6
dependency-type: direct:development
update-type: version-update:semver-minor
- dependency-name: software.amazon.awssdk:s3-transfer-manager
dependency-version: 2.49.6
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: software.amazon.awssdk:sts
dependency-version: 2.49.6
dependency-type: direct:development
update-type: version-update:semver-minor
- dependency-name: software.amazon.awssdk:apache-client
dependency-version: 2.49.6
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: software.amazon.awssdk:auth
dependency-version: 2.49.6
dependency-type: direct:development
update-type: version-update:semver-minor
- dependency-name: software.amazon.awssdk:regions
dependency-version: 2.49.6
dependency-type: direct:development
update-type: version-update:semver-minor
- dependency-name: software.amazon.awssdk:ec2
dependency-version: 2.49.6
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: software.amazon.awssdk:aws-core
dependency-version: 2.49.6
dependency-type: direct:development
update-type: version-update:semver-minor
- dependency-name: software.amazon.awssdk:sdk-core
dependency-version: 2.49.6
dependency-type: direct:development
update-type: version-update:semver-minor
- dependency-name: software.amazon.awssdk:netty-nio-client
dependency-version: 2.49.6
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: software.amazon.awssdk:aws-crt-client
dependency-version: 2.49.6
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: software.amazon.awssdk:bom
dependency-version: 2.49.6
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: software.amazon.awssdk:kinesis
dependency-version: 2.49.6
dependency-type: direct:development
update-type: version-update:semver-minor
- dependency-name: software.amazon.awssdk:http-client-spi
dependency-version: 2.49.6
dependency-type: direct:development
update-type: version-update:semver-minor
- dependency-name: software.amazon.awssdk:utils
dependency-version: 2.49.6
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: software.amazon.awssdk:rds
dependency-version: 2.49.6
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: software.amazon.awssdk:glue
dependency-version: 2.49.6
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: software.amazon.awssdk:kms
dependency-version: 2.49.6
dependency-type: direct:production
update-type: version-update:semver-minor
- dependency-name: software.amazon.awssdk:bundle
dependency-version: 2.49.6
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]>
* fix(deps): align AWS SDK HTTP clients
* fix(deps): update AWS CRT license version
---------
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Frank Chen <[email protected]>
---
.../druid-iceberg-extensions/pom.xml | 7 ++++
licenses.yaml | 37 ++++++++++++++++++++--
pom.xml | 6 ++--
3 files changed, 45 insertions(+), 5 deletions(-)
diff --git a/extensions-contrib/druid-iceberg-extensions/pom.xml
b/extensions-contrib/druid-iceberg-extensions/pom.xml
index b1c4079fe44..8203357197e 100644
--- a/extensions-contrib/druid-iceberg-extensions/pom.xml
+++ b/extensions-contrib/druid-iceberg-extensions/pom.xml
@@ -285,6 +285,13 @@
<artifactId>glue</artifactId>
<version>${aws.sdk.v2.version}</version>
</dependency>
+ <!-- Iceberg AWS still loads the Apache 4 client reflectively. -->
+ <dependency>
+ <groupId>software.amazon.awssdk</groupId>
+ <artifactId>apache-client</artifactId>
+ <version>${aws.sdk.v2.version}</version>
+ <scope>runtime</scope>
+ </dependency>
<!-- software/amazon/awssdk/services/sts/model/Tag needed for GlueCatalog
initialize -->
<dependency>
<groupId>software.amazon.awssdk</groupId>
diff --git a/licenses.yaml b/licenses.yaml
index 65a066c8248..f629839c9b6 100644
--- a/licenses.yaml
+++ b/licenses.yaml
@@ -240,10 +240,11 @@ name: AWS SDK for Java 2
license_category: binary
module: java-core
license_name: Apache License version 2.0
-version: 2.40.0
+version: 2.49.6
libraries:
- software.amazon.awssdk: annotations
- software.amazon.awssdk: apache-client
+ - software.amazon.awssdk: apache5-client
- software.amazon.awssdk: arns
- software.amazon.awssdk: auth
- software.amazon.awssdk: aws-core
@@ -308,7 +309,7 @@ name: AWS CRT
license_category: binary
module: extensions-core/s3-extensions
license_name: Apache License version 2.0
-version: 0.40.1
+version: 0.48.0
libraries:
- software.amazon.awssdk.crt: aws-crt
notice: |
@@ -2036,6 +2037,38 @@ notices:
---
+name: Apache HttpClient 5
+license_category: binary
+module: java-core
+license_name: Apache License version 2.0
+version: 5.6.2
+libraries:
+ - org.apache.httpcomponents.client5: httpclient5
+notices:
+ - httpclient5: |
+ Apache HttpClient
+ Copyright 1999-2021 The Apache Software Foundation
+
+---
+
+name: Apache HttpCore 5
+license_category: binary
+module: java-core
+license_name: Apache License version 2.0
+version: 5.4.3
+libraries:
+ - org.apache.httpcomponents.core5: httpcore5
+ - org.apache.httpcomponents.core5: httpcore5-h2
+notices:
+ - httpcore5: |
+ Apache HttpComponents Core HTTP/1.1
+ Copyright 2005-2021 The Apache Software Foundation
+ - httpcore5-h2: |
+ Apache HttpComponents Core HTTP/2
+ Copyright 2005-2021 The Apache Software Foundation
+
+---
+
name: Apache Log4j
license_category: binary
module: java-core
diff --git a/pom.xml b/pom.xml
index 8ccd2a28c8e..7945140edaf 100644
--- a/pom.xml
+++ b/pom.xml
@@ -124,7 +124,7 @@
<!-- AWS SDK v1 is still used as a transitive dependency by Hadoop and
Ranger extensions.
It should be removed once those extensions are upgraded or
dropped (see #19109). -->
<aws.sdk.v1.version>1.12.793</aws.sdk.v1.version>
- <aws.sdk.v2.version>2.40.0</aws.sdk.v2.version>
+ <aws.sdk.v2.version>2.49.6</aws.sdk.v2.version>
<caffeine.version>3.2.4</caffeine.version>
<jacoco.version>0.8.14</jacoco.version>
<testcontainers.version>2.0.3</testcontainers.version>
@@ -1041,12 +1041,12 @@
<dependency>
<groupId>org.apache.httpcomponents.client5</groupId>
<artifactId>httpclient5</artifactId>
- <version>5.5.1</version>
+ <version>5.6.2</version>
</dependency>
<dependency>
<groupId>org.apache.httpcomponents.core5</groupId>
<artifactId>httpcore5</artifactId>
- <version>5.3.6</version>
+ <version>5.4.3</version>
</dependency>
<dependency>
<groupId>org.apache.httpcomponents</groupId>
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
