dependabot[bot] opened a new pull request, #32: URL: https://github.com/apache/beam-starter-python/pull/32
Bumps [apache-beam](https://github.com/apache/beam) from 2.55.1 to 2.56.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/apache/beam/releases";>apache-beam's releases</a>.</em></p> <blockquote> <h2>Beam 2.56.0 release</h2> <p>We are happy to present the new 2.56.0 release of Beam. This release includes both improvements and new functionality. See the <a href="https://github.com/apache/beam/blob/HEAD/get-started/downloads/#2550-2023-03-25";>download page</a> for this release.</p> <!-- raw HTML omitted --> <p>For more information on changes in 2.56.0, check out the <a href="https://github.com/apache/beam/milestone/20";>detailed release notes</a>.</p> <h2>Highlights</h2> <ul> <li>Added FlinkRunner for Flink 1.17, removed support for Flink 1.12 and 1.13. Previous version of Pipeline running on Flink 1.16 and below can be upgraded to 1.17, if the Pipeline is first updated to Beam 2.56.0 with the same Flink version. After Pipeline runs with Beam 2.56.0, it should be possible to upgrade to FlinkRunner with Flink 1.17. (<a href="https://redirect.github.com/apache/beam/issues/29939";>#29939</a>)</li> </ul> <h2>I/Os</h2> <ul> <li>Upgraded Avro version to 1.11.3, kafka-avro-serializer and kafka-schema-registry-client versions to 7.6.0 (Java) (<a href="https://redirect.github.com/apache/beam/pull/30638";>#30638</a>). The newer Avro package is known to have breaking changes. If you are affected, you can keep pinned to older Avro versions which are also tested with Beam.</li> </ul> <h2>New Features / Improvements</h2> <ul> <li>Profiling of Cythonized code has been disabled by default. This might improve performance for some Python pipelines (<a href="https://redirect.github.com/apache/beam/pull/30938";>#30938</a>).</li> <li>Bigtable enrichment handler now accepts a custom function to build a composite row key. (Python) (<a href="https://redirect.github.com/apache/beam/issues/30975";>#30974</a>).</li> </ul> <h2>Breaking Changes</h2> <ul> <li>Default consumer polling timeout for KafkaIO.Read was increased from 1 second to 2 seconds. Use KafkaIO.read().withConsumerPollingTimeout(Duration duration) to configure this timeout value when necessary (<a href="https://redirect.github.com/apache/beam/issues/30870";>#30870</a>).</li> <li>Python Dataflow users no longer need to manually specify --streaming for pipelines using unbounded sources such as ReadFromPubSub.</li> </ul> <h2>Bugfixes</h2> <ul> <li>Fixed locking issue when shutting down inactive bundle processors. Symptoms of this issue include slowness or stuckness in long-running jobs (Python) (<a href="https://redirect.github.com/apache/beam/pull/30679";>#30679</a>).</li> <li>Fixed logging issue that caused silecing the pip output when installing of dependencies provided in <code>--requirements_file</code> (Python).</li> </ul> <h2>List of Contributors</h2> <p>According to git shortlog, the following people contributed to the {$RELEASE_VERSION} release. Thank you to all contributors!</p> <p>Abacn</p> <p>Ahmed Abualsaud</p> <p>Andrei Gurau</p> <p>Andrey Devyatkin</p> <p>Aravind Pedapudi</p> <p>Arun Pandian</p> <p>Arvind Ram</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/apache/beam/blob/master/CHANGES.md";>apache-beam's changelog</a>.</em></p> <blockquote> <h1>[2.56.0] - Unreleased</h1> <h2>Highlights</h2> <ul> <li>Added FlinkRunner for Flink 1.17, removed support for Flink 1.12 and 1.13. Previous version of Pipeline running on Flink 1.16 and below can be upgraded to 1.17, if the Pipeline is first updated to Beam 2.56.0 with the same Flink version. After Pipeline runs with Beam 2.56.0, it should be possible to upgrade to FlinkRunner with Flink 1.17. (<a href="https://redirect.github.com/apache/beam/issues/29939";>#29939</a>)</li> </ul> <h2>I/Os</h2> <ul> <li>Support for X source added (Java/Python) (<a href="https://github.com/apache/beam/issues/X";>#X</a>).</li> <li>Upgraded Avro version to 1.11.3, kafka-avro-serializer and kafka-schema-registry-client versions to 7.6.0 (Java) (<a href="https://redirect.github.com/apache/beam/pull/30638";>#30638</a>). The newer Avro package is known to have breaking changes. If you are affected, you can keep pinned to older Avro versions which are also tested with Beam.</li> </ul> <h2>New Features / Improvements</h2> <ul> <li>Added ability to control the exact number of models loaded across processes by RunInference. This may be useful for pipelines with tight memory constraints (<a href="https://redirect.github.com/apache/beam/pull/31052";>#31052</a>)</li> <li>Profiling of Cythonized code has been disabled by default. This might improve performance for some Python pipelines (<a href="https://redirect.github.com/apache/beam/pull/30938";>#30938</a>).</li> <li>Bigtable enrichment handler now accepts a custom function to build a composite row key. (Python) (<a href="https://redirect.github.com/apache/beam/issues/30975";>#30974</a>).</li> </ul> <h2>Breaking Changes</h2> <ul> <li>X behavior was changed (<a href="https://github.com/apache/beam/issues/X";>#X</a>).</li> <li>Default consumer polling timeout for KafkaIO.Read was increased from 1 second to 2 seconds. Use KafkaIO.read().withConsumerPollingTimeout(Duration duration) to configure this timeout value when necessary (<a href="https://redirect.github.com/apache/beam/issues/30870";>#30870</a>).</li> <li>Python Dataflow users no longer need to manually specify --streaming for pipelines using unbounded sources such as ReadFromPubSub.</li> </ul> <h2>Deprecations</h2> <ul> <li>X behavior is deprecated and will be removed in X versions (<a href="https://github.com/apache/beam/issues/X";>#X</a>).</li> </ul> <h2>Bugfixes</h2> <ul> <li>Fixed locking issue when shutting down inactive bundle processors. Symptoms of this issue include slowness or stuckness in long-running jobs (Python) (<a href="https://redirect.github.com/apache/beam/pull/30679";>#30679</a>).</li> <li>Fixed logging issue that caused silecing the pip output when installing of dependencies provided in <code>--requirements_file</code> (Python).</li> <li>Fixed pipeline stuckness issue by disallowing versions of grpcio that can cause the stuckness (Python) (<a href="https://redirect.github.com/apache/beam/issues/30867";>#30867</a>).</li> </ul> <h2>Security Fixes</h2> <ul> <li>Fixed (CVE-YYYY-NNNN)[https://www.cve.org/CVERecord?id=CVE-YYYY-NNNN] (Java/Python/Go) (<a href="https://github.com/apache/beam/issues/X";>#X</a>).</li> </ul> <h2>Known Issues</h2> <ul> <li>(<a href="https://github.com/apache/beam/issues/X";>#X</a>).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/apache/beam/commit/b34cf54b0a1511e88f76836d040c4ee67e420a71";><code>b34cf54</code></a> Set version for 2.56.0 RC2</li> <li><a href="https://github.com/apache/beam/commit/96d2a281cd69698463d5455861335b4d7d09e795";><code>96d2a28</code></a> One more macos change (<a href="https://redirect.github.com/apache/beam/issues/31124";>#31124</a>)</li> <li><a href="https://github.com/apache/beam/commit/26241f9a3e7406558354d288c76a3ee76de5377d";><code>26241f9</code></a> Try fixing build wheels (<a href="https://redirect.github.com/apache/beam/issues/31115";>#31115</a>) (<a href="https://redirect.github.com/apache/beam/issues/31119";>#31119</a>)</li> <li><a href="https://github.com/apache/beam/commit/2eb4aa5c8f24e770a2fd50291ec56782ff0026f7";><code>2eb4aa5</code></a> Cherry picking snake_case conversions (<a href="https://redirect.github.com/apache/beam/issues/31110";>#31110</a>)</li> <li><a href="https://github.com/apache/beam/commit/d07cc622c807d1078437ddbd931feefe06dfb52c";><code>d07cc62</code></a> Simplify intermediate data in Iceberg sink; use manifest files (<a href="https://redirect.github.com/apache/beam/issues/31090";>#31090</a>)</li> <li><a href="https://github.com/apache/beam/commit/fe00df6b92433e7ab8226ecdc03bdf4164b46e22";><code>fe00df6</code></a> Add ability to load multiple copies of a model across processes (<a href="https://redirect.github.com/apache/beam/issues/31052";>#31052</a>) (<a href="https://redirect.github.com/apache/beam/issues/31";>#31</a>...</li> <li><a href="https://github.com/apache/beam/commit/6384a4b5fda10bb859f4f4926fb05cb55f14495c";><code>6384a4b</code></a> Cherrypicking <a href="https://redirect.github.com/apache/beam/issues/30910";>#30910</a> into release-2.56.0 (<a href="https://redirect.github.com/apache/beam/issues/31076";>#31076</a>)</li> <li><a href="https://github.com/apache/beam/commit/bba3ac366769c73858c0447462af1bdc7ce08406";><code>bba3ac3</code></a> [release-2.56.0] Cherry-picks <a href="https://redirect.github.com/apache/beam/issues/31070";>#31070</a> (<a href="https://redirect.github.com/apache/beam/issues/31072";>#31072</a>)</li> <li><a href="https://github.com/apache/beam/commit/8aee226649d5a6461d54081004dd8e7435c9e408";><code>8aee226</code></a> Better and earlier error for missing service loader metadata. (<a href="https://redirect.github.com/apache/beam/issues/31042";>#31042</a>) (<a href="https://redirect.github.com/apache/beam/issues/31056";>#31056</a>)</li> <li><a href="https://github.com/apache/beam/commit/99688da2ba75e239603f0cd031e2d83d0ab761d4";><code>99688da</code></a> [release-2.56.0] Exclude broken versions of GRPCIO and upgrade the base image...</li> <li>Additional commits viewable in <a href="https://github.com/apache/beam/compare/v2.55.1...v2.56.0";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
