The GitHub Actions job "Release Auditing" on 
texera.git/feat/6929-byo-s3-storage-foundation has succeeded.
Run started by GitHub user mengw15 (triggered by mengw15).

Head commit for run:
d264e35f4ccf634ef9f7b5e836165cb181c568e7 / mengw15 
<[email protected]>
fix(storage): reject '/' in port-identity fields on the Python side too

The Scala serde was given a '/' guard alongside its existing '_' guard, because
both characters would otherwise let a user-chosen operator id forge structure in
the VFS URI the id is interpolated into. Python's serialize_global_port_identity
mirrors that serializer but only ever checked '_', so the contract held in one
language and not the other.

No production Python code builds these URIs today, so this closes the gap rather
than fixing a reachable bug -- but the guard is the contract both sides parse
against, and it should not depend on which language wrote the string.

Report URL: https://github.com/apache/texera/actions/runs/30397776021

With regards,
GitHub Actions via GitBox

Reply via email to