This is an automated email from the ASF dual-hosted git repository.
dongjoon-hyun pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/spark.git
The following commit(s) were added to refs/heads/master by this push:
new 046f574fce3f [SPARK-60629][BUILD] Upgrade `commons-codec` to 1.23.0
046f574fce3f is described below
commit 046f574fce3ffd93925f7bcdd459221fa11a730d
Author: Dongjoon Hyun <[email protected]>
AuthorDate: Wed Oct 28 16:05:55 2026 -0700
[SPARK-60629][BUILD] Upgrade `commons-codec` to 1.23.0
### What changes were proposed in this pull request?
This PR aims to upgrade `commons-codec` from 1.22.1 to 1.23.0.
- `pom.xml`: `commons-codec.version` 1.22.1 -> 1.23.0
- `dev/deps/spark-deps-hadoop-3-hive-2.3`: regenerated with
`dev/test-dependencies.sh --replace-manifest` (only the `commons-codec` line
changes)
### Why are the changes needed?
To keep the dependency up to date with the latest stable release of Apache
Commons Codec:
- Release tag:
https://github.com/apache/commons-codec/tree/rel/commons-codec-1.23.0 (tagged
2026-10-11)
- Changes report:
https://commons.apache.org/proper/commons-codec/changes.html (release date
2026-10-04)
The release requires Java 8 or later, so it is compatible with Spark's Java
17+ baseline. No API is removed; only the `PhoneticEngine` and
`BeiderMorseEncoder` constructors are deprecated in favor of builders.
The release also contains behavior changes (e.g., `Hex` decoding accepts
only ASCII hex digits, STRICT `Base32`/`Base64` decoding requires the canonical
form, `Base58` input length limits, and `QuotedPrintableCodec` line-break
handling). Spark's own usage is limited to:
- `new Base32()` with the default decoding policy in
`to_base32`/`from_base32` (`stringExpressions.scala`)
- `StringUtils.newStringUtf8` in `ThriftHttpServlet`
- `Hex` and `Base64` in benchmarks (`HexBenchmark`, `Base64Benchmark`)
None of these code paths use the changed behaviors.
### Does this PR introduce _any_ user-facing change?
No.
### How was this patch tested?
- Verified the dependency manifest with `dev/test-dependencies.sh
--replace-manifest` (the diff is the single `commons-codec` line).
- `build/sbt core/compile`
- `build/sbt 'catalyst/testOnly
org.apache.spark.sql.catalyst.expressions.StringExpressionsSuite'` (73 tests
passed, including `to_base32/from_base32`)
- `build/sbt 'sql/testOnly org.apache.spark.sql.StringFunctionsSuite'` (86
tests passed, including `to_base32/from_base32`)
### Was this patch authored or co-authored using generative AI tooling?
Generated-by: Claude Sonnet 5.5
Closes #59877 from dongjoon-hyun/SPARK-60629.
Authored-by: Dongjoon Hyun <[email protected]>
Signed-off-by: Dongjoon Hyun <[email protected]>
---
dev/deps/spark-deps-hadoop-3-hive-2.3 | 2 +-
pom.xml | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/dev/deps/spark-deps-hadoop-3-hive-2.3
b/dev/deps/spark-deps-hadoop-3-hive-2.3
index 4e507db98e9d..6f671943b5b9 100644
--- a/dev/deps/spark-deps-hadoop-3-hive-2.3
+++ b/dev/deps/spark-deps-hadoop-3-hive-2.3
@@ -42,7 +42,7 @@ cats-kernel_2.13/2.8.0//cats-kernel_2.13-2.8.0.jar
chill-java/0.10.0//chill-java-0.10.0.jar
chill_2.13/0.10.0//chill_2.13-0.10.0.jar
commons-cli/1.11.0//commons-cli-1.11.0.jar
-commons-codec/1.22.1//commons-codec-1.22.1.jar
+commons-codec/1.23.0//commons-codec-1.23.0.jar
commons-collections4/4.6.0//commons-collections4-4.6.0.jar
commons-compiler/3.1.12//commons-compiler-3.1.12.jar
commons-compress/1.28.0//commons-compress-1.28.0.jar
diff --git a/pom.xml b/pom.xml
index f31a670d7d7e..fd4430f780d2 100644
--- a/pom.xml
+++ b/pom.xml
@@ -189,7 +189,7 @@
<ws.xmlschema.version>2.3.1</ws.xmlschema.version>
<snappy.version>1.1.10.12</snappy.version>
<netlib.ludovic.dev.version>3.2.0</netlib.ludovic.dev.version>
- <commons-codec.version>1.22.1</commons-codec.version>
+ <commons-codec.version>1.23.0</commons-codec.version>
<commons-compress.version>1.28.0</commons-compress.version>
<commons-io.version>2.22.0</commons-io.version>
<!-- To support Hive UDF jars built by Hive 2.0.0 ~ 2.3.9 and 3.0.0 ~
3.1.3. -->
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
