This is an automated email from the ASF dual-hosted git repository.
rusackas pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/superset.git
The following commit(s) were added to refs/heads/master by this push:
new 23d5b634217 chore(deps): bump pyarrow from 24.0.0 to 25.0.0 (#42415)
23d5b634217 is described below
commit 23d5b634217911c450e3ce6579dee89cc3b56225
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Wed Jul 29 16:16:00 2026 -0700
chore(deps): bump pyarrow from 24.0.0 to 25.0.0 (#42415)
Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: github-actions[bot]
<41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot]
<41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Evan Rusackas <[email protected]>
Co-authored-by: Joe Li <[email protected]>
---
pyproject.toml | 2 +-
requirements/base.in | 2 +-
requirements/base.txt | 2 +-
requirements/development.txt | 2 +-
4 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/pyproject.toml b/pyproject.toml
index 37590322a9d..5b0d2320723 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -96,7 +96,7 @@ dependencies = [
"python-dateutil",
"python-dotenv", # optional dependencies for Flask but required for
Superset, see
https://flask.palletsprojects.com/en/stable/installation/#optional-dependencies
"pygeohash",
- "pyarrow>=24.0.0, <25", # before upgrading pyarrow, check that all db
dependencies support this, see e.g.
https://github.com/apache/superset/pull/34693
+ "pyarrow>=24.0.0, <26", # before upgrading pyarrow, check that all db
dependencies support this, see e.g.
https://github.com/apache/superset/pull/34693
"pyyaml>=6.0.3, <7.0.0",
"PyJWT>=2.4.0, <3.0",
"redis>=5.0.0, <9.0",
diff --git a/requirements/base.in b/requirements/base.in
index 64a30d0bccc..946592c8ed6 100644
--- a/requirements/base.in
+++ b/requirements/base.in
@@ -30,7 +30,7 @@ cryptography>=49.0.0,<50.0.0
# Security: Snyk - XSS vulnerability in Mako templates
mako>=1.3.11,<2.0.0
# Security: CVE-2024-52338 (CRITICAL) - Deserialization of untrusted data in
IPC/Parquet readers
-pyarrow>=24.0.0,<25.0.0
+pyarrow>=24.0.0,<26.0.0
# Security: CVE-2026-27459 - pyopenssl certificate validation
pyopenssl>=26.0.0,<27.0.0
# Security: CVE-2026-25645 (MEDIUM) - Insecure Temporary File
diff --git a/requirements/base.txt b/requirements/base.txt
index cbd57f5fa27..94b95d1effb 100644
--- a/requirements/base.txt
+++ b/requirements/base.txt
@@ -297,7 +297,7 @@ prison==0.2.1
# via flask-appbuilder
prompt-toolkit==3.0.51
# via click-repl
-pyarrow==24.0.0
+pyarrow==25.0.0
# via
# -r requirements/base.in
# apache-superset (pyproject.toml)
diff --git a/requirements/development.txt b/requirements/development.txt
index 42563fb8814..3cf52d0d88b 100644
--- a/requirements/development.txt
+++ b/requirements/development.txt
@@ -721,7 +721,7 @@ psycopg2-binary==2.9.12
# via apache-superset
py-key-value-aio==0.4.4
# via fastmcp-slim
-pyarrow==24.0.0
+pyarrow==25.0.0
# via
# -c requirements/base-constraint.txt
# apache-superset
