This is an automated email from the ASF dual-hosted git repository.
github-merge-queue[bot] pushed a commit to branch
gh-readonly-queue/main/pr-6410-226614b527bf51a010355778440e1972ed3130a7
in repository https://gitbox.apache.org/repos/asf/texera.git
commit 3579fc97140b985f4b6b2c02420ee60e981497c5
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Thu Jul 30 01:49:57 2026 +0000
chore(deps): bump io.altoo:scala-kryo-serialization_2.13 from 1.3.0 to
1.5.2 (#6410)
Bumps
[io.altoo:scala-kryo-serialization_2.13](https://github.com/altoo-ag/scala-kryo-serialization)
from 1.3.0 to 1.5.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/altoo-ag/scala-kryo-serialization/releases";>io.altoo:scala-kryo-serialization_2.13's
releases</a>.</em></p>
<blockquote>
<h2>v1.5.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Add serializer-cache to allow to use ThreadLocal based caching or
disable caching.</li>
<li>Allow to customize the number of held instances in the queue
serializer-cache.</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/altoo-ag/scala-kryo-serialization/compare/v1.5.0...v1.5.2";>https://github.com/altoo-ag/scala-kryo-serialization/compare/v1.5.0...v1.5.2</a></p>
<h2>v1.5.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Dropped support for jdk11 and scala 2.12</li>
<li>Serializer performance optimizations in concurrency and collection
deserialization</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/altoo-ag/scala-kryo-serialization/compare/v1.4.0...v1.5.0";>https://github.com/altoo-ag/scala-kryo-serialization/compare/v1.4.0...v1.5.0</a></p>
<h2>v1.4.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Remove dependency to agrona (replace with jdk queue)</li>
<li>Fix issue when concurrently serializing lazy vals. Contributed by <a
href="https://github.com/sujeenoh-dev";><code>@​sujeenoh-dev</code></a>
in <a
href="https://redirect.github.com/altoo-ag/scala-kryo-serialization/pull/31";>altoo-ag/scala-kryo-serialization#31</a></li>
<li>Various simple cleanups</li>
<li>Dependency upgrades</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/altoo-ag/scala-kryo-serialization/compare/v1.3.1...v1.4.0";>https://github.com/altoo-ag/scala-kryo-serialization/compare/v1.3.1...v1.4.0</a></p>
<h2>v1.3.1</h2>
<h2>What's Changed</h2>
<ul>
<li>fix lz4 <a
href="https://sites.google.com/sonatype.com/vulnerabilities/cve-2025-12183";>cve-2025-12183</a>
by using the latest library</li>
<li>test improvements</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/altoo-ag/scala-kryo-serialization/compare/v1.3.0...v1.3.1";>https://github.com/altoo-ag/scala-kryo-serialization/compare/v1.3.0...v1.3.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/altoo-ag/scala-kryo-serialization/commit/f743503e736b187b89aba91ac3da8f673b23051d";><code>f743503</code></a>
Setting version to 1.5.2</li>
<li><a
href="https://github.com/altoo-ag/scala-kryo-serialization/commit/178374374d80cb06d9188152bdf9bf1c513e2f9b";><code>1783743</code></a>
Try to improve naming of the new serializer-cache but retain the name
queue t...</li>
<li><a
href="https://github.com/altoo-ag/scala-kryo-serialization/commit/424a08cf1f9f9ba3b0ab2e9780363ea5f1b06c00";><code>424a08c</code></a>
Fix test to also work on github since always new is far slower.</li>
<li><a
href="https://github.com/altoo-ag/scala-kryo-serialization/commit/54ff4658e3a18a0d872686b5a9b7e43437ce17ae";><code>54ff465</code></a>
Implement a pool which always creates a new instance.</li>
<li><a
href="https://github.com/altoo-ag/scala-kryo-serialization/commit/825f7f3c6ec89363a3b6e80508132410137f71cb";><code>825f7f3</code></a>
Setting version to 1.5.2-SNAPSHOT</li>
<li><a
href="https://github.com/altoo-ag/scala-kryo-serialization/commit/fa3d07fb0ec7853defb04000772a5b1ed966105e";><code>fa3d07f</code></a>
Setting version to 1.5.1</li>
<li><a
href="https://github.com/altoo-ag/scala-kryo-serialization/commit/c7612c6cae930ccf3bf5faaefdf8fc2e10b6606d";><code>c7612c6</code></a>
Update documentation before release</li>
<li><a
href="https://github.com/altoo-ag/scala-kryo-serialization/commit/eea3fcdf1ac13f9e38b4e93f8bc2eb811c682c22";><code>eea3fcd</code></a>
Implement a threadlocal based pool for serializers</li>
<li><a
href="https://github.com/altoo-ag/scala-kryo-serialization/commit/a204db3fea9c41e6d88e2ca18c93c7f88bb8e45f";><code>a204db3</code></a>
Implement a threadlocal based pool for serializers</li>
<li><a
href="https://github.com/altoo-ag/scala-kryo-serialization/commit/5a4bdc19f33b22fbb908a811c8a9a47a4c6c1078";><code>5a4bdc1</code></a>
Log interesting kryo pool actions</li>
<li>Additional commits viewable in <a
href="https://github.com/altoo-ag/scala-kryo-serialization/compare/v1.3.0...v1.5.2";>compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
---------
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Xinyuan Lin <[email protected]>
---
amber/LICENSE-binary-java | 8 ++++----
amber/build.sbt | 2 +-
2 files changed, 5 insertions(+), 5 deletions(-)
diff --git a/amber/LICENSE-binary-java b/amber/LICENSE-binary-java
index f09d98c0a4..d438b2eb52 100644
--- a/amber/LICENSE-binary-java
+++ b/amber/LICENSE-binary-java
@@ -299,7 +299,7 @@ Scala/Java jars:
- dev.failsafe.failsafe-3.3.2.jar
- io.airlift.aircompressor-2.0.2.jar
- io.altoo.pekko-kryo-serialization_2.13-1.3.0.jar
- - io.altoo.scala-kryo-serialization_2.13-1.3.0.jar
+ - io.altoo.scala-kryo-serialization_2.13-1.5.2.jar
- io.dropwizard-bundles.dropwizard-redirect-bundle-1.0.5.jar
- io.dropwizard.dropwizard-auth-1.3.23.jar
- io.dropwizard.dropwizard-client-1.3.23.jar
@@ -491,17 +491,17 @@ Scala/Java jars:
- org.jooq.jooq-3.19.36.jar
- org.json4s.json4s-ast_2.13-4.0.6.jar
- org.json4s.json4s-jackson-core_2.13-4.0.6.jar
- - org.lz4.lz4-java-1.8.0.jar
+ - at.yawk.lz4.lz4-java-1.10.2.jar
- org.objenesis.objenesis-3.4.jar
- org.openapitools.jackson-databind-nullable-0.2.6.jar
- org.roaringbitmap.RoaringBitmap-1.3.0.jar
- - org.scala-lang.modules.scala-collection-compat_2.13-2.13.0.jar
+ - org.scala-lang.modules.scala-collection-compat_2.13-2.14.0.jar
- org.scala-lang.modules.scala-collection-contrib_2.13-0.3.0.jar
- org.scala-lang.modules.scala-parser-combinators_2.13-1.1.2.jar
- org.scala-lang.scala-library-2.13.18.jar
- org.scala-lang.scala-reflect-2.13.18.jar
- org.scalactic.scalactic_2.13-3.2.20.jar
- - org.slf4j.log4j-over-slf4j-2.0.16.jar
+ - org.slf4j.log4j-over-slf4j-2.0.17.jar
- org.typelevel.cats-effect-kernel_2.13-3.6.3.jar
- org.typelevel.cats-effect-std_2.13-3.6.3.jar
- org.typelevel.cats-effect_2.13-3.6.3.jar
diff --git a/amber/build.sbt b/amber/build.sbt
index 8d2ac747af..769bcb15bd 100644
--- a/amber/build.sbt
+++ b/amber/build.sbt
@@ -306,7 +306,7 @@ libraryDependencies += "com.esotericsoftware" % "kryo5" %
"5.6.0"
libraryDependencies += "io.altoo" %% "pekko-kryo-serialization" % "1.3.0"
// https://mvnrepository.com/artifact/io.altoo/scala-kryo-serialization
-libraryDependencies += "io.altoo" %% "scala-kryo-serialization" % "1.3.0"
+libraryDependencies += "io.altoo" %% "scala-kryo-serialization" % "1.5.2"
// https://mvnrepository.com/artifact/com.twitter/util-core
libraryDependencies += "com.twitter" %% "util-core" % "22.12.0"
