dependabot[bot] opened a new pull request, #27: URL: https://github.com/apache/beam-starter-kotlin/pull/27
Bumps `beamVersion` from 2.48.0 to 2.73.0. Updates `org.apache.beam:beam-sdks-java-core` from 2.48.0 to 2.73.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/apache/beam/releases";>org.apache.beam:beam-sdks-java-core's releases</a>.</em></p> <blockquote> <h2>Beam 2.73.0 release</h2> <p>We are happy to present the new 2.73.0 release of Beam. This release includes both improvements and new functionality. See the <a href="https://github.com/apache/beam/blob/HEAD/get-started/downloads/#2730-2026-04-29";>download page</a> for this release.</p> <!-- raw HTML omitted --> <p>For more information on changes in 2.73.0, check out the <a href="https://github.com/apache/beam/milestone/41";>detailed release notes</a>.</p> <h2>Highlights</h2> <h3>I/Os</h3> <ul> <li>DebeziumIO (Java): added <code>OffsetRetainer</code> interface and <code>FileSystemOffsetRetainer</code> implementation to persist and restore CDC offsets across pipeline restarts, and exposed <code>withStartOffset</code> / <code>withOffsetRetainer</code> on <code>DebeziumIO.Read</code> and the cross-language <code>ReadBuilder</code> (<a href="https://redirect.github.com/apache/beam/issues/28248";>#28248</a>).</li> </ul> <h3>New Features / Improvements</h3> <ul> <li>(Python) Added BigQuery CDC streaming source (<a href="https://redirect.github.com/apache/beam/issues/37724";>#37724</a>)</li> <li>Added <code>ADKAgentModelHandler</code> for running Google Agent Development Kit (ADK) agents (Python) (<a href="https://redirect.github.com/apache/beam/issues/37917";>#37917</a>).</li> <li>(Python) Added exception chaining to preserve error context in CloudSQLEnrichmentHandler, processes utilities, and core transforms (<a href="https://redirect.github.com/apache/beam/issues/37422";>#37422</a>).</li> <li>(Python) Added a pipeline option <code>--experiments=pip_no_build_isolation</code> to disable build isolation when installing dependencies in the runtime environment (<a href="https://redirect.github.com/apache/beam/issues/37331";>#37331</a>).</li> <li>(Go) Added OrderedListState support to the Go SDK stateful DoFn API (<a href="https://redirect.github.com/apache/beam/issues/37629";>#37629</a>).</li> <li>Added support for large pipeline options via a file (Python) (<a href="https://redirect.github.com/apache/beam/issues/37370";>#37370</a>).</li> <li>Supported infer schema from dataclass (Python) (<a href="https://redirect.github.com/apache/beam/issues/22085";>#22085</a>). Default coder for typehint-ed (or set with_output_type) for non-frozen dataclasses changed to RowCoder. To preserve the old behavior (fast primitive coder), explicitly register the type with FastPrimitiveCoder.</li> <li>Updates minimum Go version to 1.26.1 (<a href="https://redirect.github.com/apache/beam/issues/37897";>#37897</a>).</li> <li>(Python) Added image embedding support in <code>apache_beam.ml.rag</code> package (<a href="https://redirect.github.com/apache/beam/issues/37628";>#37628</a>).</li> <li>(Python) Added support for Python version 3.14 (<a href="https://redirect.github.com/apache/beam/issues/37247";>#37247</a>).</li> </ul> <h3>Breaking Changes</h3> <ul> <li>The Python SDK container's <code>boot.go</code> now passes pipeline options through a file instead of the <code>PIPELINE_OPTIONS</code> environment variable. If a user pairs a new Python SDK container with an older SDK version (which does not support the file-based approach), the pipeline options will not be recognized and the pipeline will fail. Users must ensure their SDK and container versions are synchronized (<a href="https://redirect.github.com/apache/beam/issues/37370";>#37370</a>).</li> <li>Python DoFn.with_exception_handling now respects user DoFn typehints. This can break update compatibility if coders change. It can also break pipeline compilation if existing typehints are incorrect. To update safely sepcify the pipeline option <code>--update_compatibility_version=2.72.0</code>. To fix typehints replace any incorrect typehints that were previously ignored (<a href="https://redirect.github.com/apache/beam/issues/37590";>#37590</a>)</li> </ul> <h3>Bugfixes</h3> <ul> <li>Fixed ProcessManager not reaping child processes, causing zombie process accumulation on long-running Flink deployments (Java) (<a href="https://redirect.github.com/apache/beam/issues/37930";>#37930</a>).</li> </ul> <h3>Security Fixes</h3> <ul> <li>Fixed <a href="https://www.cve.org/CVERecord?id=CVE-2023-46604";>CVE-2023-46604</a> (CVSS 10.0) and <a href="https://www.cve.org/CVERecord?id=CVE-2022-41678";>CVE-2022-41678</a> by upgrading ActiveMQ from 5.14.5 to 5.19.2 (Java) (<a href="https://redirect.github.com/apache/beam/issues/37943";>#37943</a>).</li> <li>Fixed <a href="https://www.cve.org/CVERecord?id=CVE-2024-1597";>CVE-2024-1597</a>, <a href="https://www.cve.org/CVERecord?id=CVE-2022-31197";>CVE-2022-31197</a>, and <a href="https://www.cve.org/CVERecord?id=CVE-2022-21724";>CVE-2022-21724</a> by upgrading PostgreSQL JDBC Driver from 42.2.16 to 42.6.2 (Java) (<a href="https://redirect.github.com/apache/beam/issues/37942";>#37942</a>).</li> </ul> <h2>List of Contributors</h2> <p>According to git shortlog, the following people contributed to the 2.73.0 release. Thank you to all contributors!</p> <p>Abdelrahman Ibrahim, Ahmed Abualsaud, Alex Malao, Alexander Nieuwenhuijse, Andres Tiko, Andrew Crites, Arun Pandian, Bentsi Leviav, Bruno Volpato, Chamikara Jayalath, Chandra Kiran Bolla, Danny McCormick, Deji Ibrahim, Derrick Williams, Elia LIU, Esmelealem, Hannes Gustafsson, Jack McCluskey, Joey Tran, Kenneth Knowles, M Junaid Shaukat, Mansi Singh, Matej Aleksandrov, Mathijs Deelen, Mattie Fu, Praneet Nadella, Radek Stankiewicz, Radosław Stankiewicz, Reuven Lax, RuiLong J., S. Veyrié, Sakthivel Subramanian, Sam Whittle, Shubham Thakur, Shunping Huang, Subramanya V, Tarun Annapareddy, Tobias Kaymak, Valentyn Tymofieiev, Vitaly Terentyev, XQ Hu, Yi Hu, ZIHAN DAI, claudevdm, kishorepola, parveensania</p> <h2>Beam 2.72.0 release</h2> <p>We are happy to present the new 2.72.0 release of Beam.</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/apache/beam/blob/master/CHANGES.md";>org.apache.beam:beam-sdks-java-core's changelog</a>.</em></p> <blockquote> <h1>[2.73.0] - 2026-04-29</h1> <h2>Highlights</h2> <h2>I/Os</h2> <ul> <li>DebeziumIO (Java): added <code>OffsetRetainer</code> interface and <code>FileSystemOffsetRetainer</code> implementation to persist and restore CDC offsets across pipeline restarts, and exposed <code>withStartOffset</code> / <code>withOffsetRetainer</code> on <code>DebeziumIO.Read</code> and the cross-language <code>ReadBuilder</code> (<a href="https://redirect.github.com/apache/beam/issues/28248";>#28248</a>).</li> </ul> <h2>New Features / Improvements</h2> <ul> <li>(Python) Added BigQuery CDC streaming source (<a href="https://redirect.github.com/apache/beam/issues/37724";>#37724</a>)</li> <li>Added <code>ADKAgentModelHandler</code> for running Google Agent Development Kit (ADK) agents (Python) (<a href="https://redirect.github.com/apache/beam/issues/37917";>#37917</a>).</li> <li>(Python) Added exception chaining to preserve error context in CloudSQLEnrichmentHandler, processes utilities, and core transforms (<a href="https://redirect.github.com/apache/beam/issues/37422";>#37422</a>).</li> <li>(Python) Added a pipeline option <code>--experiments=pip_no_build_isolation</code> to disable build isolation when installing dependencies in the runtime environment (<a href="https://redirect.github.com/apache/beam/issues/37331";>#37331</a>).</li> <li>(Go) Added OrderedListState support to the Go SDK stateful DoFn API (<a href="https://redirect.github.com/apache/beam/issues/37629";>#37629</a>).</li> <li>Added support for large pipeline options via a file (Python) (<a href="https://redirect.github.com/apache/beam/issues/37370";>#37370</a>).</li> <li>Supported infer schema from dataclass (Python) (<a href="https://redirect.github.com/apache/beam/issues/22085";>#22085</a>). Default coder for typehint-ed (or set with_output_type) for non-frozen dataclasses changed to RowCoder. To preserve the old behavior (fast primitive coder), explicitly register the type with FastPrimitiveCoder.</li> <li>Updates minimum Go version to 1.26.1 (<a href="https://redirect.github.com/apache/beam/issues/37897";>#37897</a>).</li> <li>(Python) Added image embedding support in <code>apache_beam.ml.rag</code> package (<a href="https://redirect.github.com/apache/beam/issues/37628";>#37628</a>).</li> <li>(Python) Added support for Python version 3.14 (<a href="https://redirect.github.com/apache/beam/issues/37247";>#37247</a>).</li> </ul> <h2>Breaking Changes</h2> <ul> <li>The Python SDK container's <code>boot.go</code> now passes pipeline options through a file instead of the <code>PIPELINE_OPTIONS</code> environment variable. If a user pairs a new Python SDK container with an older SDK version (which does not support the file-based approach), the pipeline options will not be recognized and the pipeline will fail. Users must ensure their SDK and container versions are synchronized (<a href="https://redirect.github.com/apache/beam/issues/37370";>#37370</a>).</li> <li>Python DoFn.with_exception_handling now respects user DoFn typehints. This can break update compatibility if coders change. It can also break pipeline compilation if existing typehints are incorrect. To update safely sepcify the pipeline option <code>--update_compatibility_version=2.72.0</code>. To fix typehints replace any incorrect typehints that were previously ignored (<a href="https://redirect.github.com/apache/beam/issues/37590";>#37590</a>)</li> </ul> <h2>Bugfixes</h2> <ul> <li>Fixed ProcessManager not reaping child processes, causing zombie process accumulation on long-running Flink deployments (Java) (<a href="https://redirect.github.com/apache/beam/issues/37930";>#37930</a>).</li> </ul> <h2>Security Fixes</h2> <ul> <li>Fixed <a href="https://www.cve.org/CVERecord?id=CVE-2023-46604";>CVE-2023-46604</a> (CVSS 10.0) and <a href="https://www.cve.org/CVERecord?id=CVE-2022-41678";>CVE-2022-41678</a> by upgrading ActiveMQ from 5.14.5 to 5.19.2 (Java) (<a href="https://redirect.github.com/apache/beam/issues/37943";>#37943</a>).</li> <li>Fixed <a href="https://www.cve.org/CVERecord?id=CVE-2024-1597";>CVE-2024-1597</a>, <a href="https://www.cve.org/CVERecord?id=CVE-2022-31197";>CVE-2022-31197</a>, and <a href="https://www.cve.org/CVERecord?id=CVE-2022-21724";>CVE-2022-21724</a> by upgrading PostgreSQL JDBC Driver from 42.2.16 to 42.6.2 (Java) (<a href="https://redirect.github.com/apache/beam/issues/37942";>#37942</a>).</li> </ul> <h1>[2.72.0] - 2026-03-30</h1> <h2>Highlights</h2> <ul> <li>Flink 2.0 support (<a href="https://redirect.github.com/apache/beam/issues/36947";>#36947</a>).</li> </ul> <h2>I/Os</h2> <ul> <li>Add Datadog IO support (Java) (<a href="https://redirect.github.com/apache/beam/issues/37318";>#37318</a>).</li> <li>Remove Pubsublite IO support, since service will be deprecated in March 2026. (<a href="https://redirect.github.com/apache/beam/issues/37375";>#37375</a>).</li> <li>(Java) ClickHouse - migrating from the legacy JDBC driver (v0.6.3) to ClickHouse Java Client v2 (v0.9.6). See the <a href="https://beam.apache.org/releases/javadoc/current/org/apache/beam/sdk/io/clickhouse/ClickHouseIO.html";>class documentation</a> for migration guide (<a href="https://redirect.github.com/apache/beam/issues/37610";>#37610</a>).</li> <li>(Java) Upgraded GoogleAdsIO to use GoogleAdsIO API v23 (<a href="https://redirect.github.com/apache/beam/issues/37620";>#37620</a>).</li> <li>(Java) Added support for withMinRowCountForPageSizeCheck to ParquetIO.Sink to avoid OOM when writing large columns (<a href="https://redirect.github.com/apache/beam/issues/37740";>#37740</a>).</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/apache/beam/commit/d686c10a4ae462546a122e13634a95346ed4f622";><code>d686c10</code></a> Set version for 2.73.0 RC2</li> <li><a href="https://github.com/apache/beam/commit/181e90b435e7e298945ce82e3ea6853c37fcafa0";><code>181e90b</code></a> Cherrypick <a href="https://redirect.github.com/apache/beam/issues/38132";>#38132</a> Retry transient NOT_FOUND on Storage API default stream</li> <li><a href="https://github.com/apache/beam/commit/bb9baf8a83546ee6ad3b0cc8fce1d82100cb41af";><code>bb9baf8</code></a> Cherrypick name-mapping fix (<a href="https://redirect.github.com/apache/beam/issues/38238";>#38238</a>)</li> <li><a href="https://github.com/apache/beam/commit/406455c620c9882ea34262b0e4cd1bbc65dbfa56";><code>406455c</code></a> cherry pick name mapping for AddFiles (<a href="https://redirect.github.com/apache/beam/issues/38205";>#38205</a>)</li> <li><a href="https://github.com/apache/beam/commit/80bd9f9dbe8645d1fb46c900d0bc78bb850e5c6c";><code>80bd9f9</code></a> Merge pull request <a href="https://redirect.github.com/apache/beam/issues/38203";>#38203</a> from apache/cp-38191</li> <li><a href="https://github.com/apache/beam/commit/5142617dde6f888ba1745548e1b476de0c2cc8ca";><code>5142617</code></a> CP <a href="https://redirect.github.com/apache/beam/issues/38191";>#38191</a> Fix Lint PreCommit</li> <li><a href="https://github.com/apache/beam/commit/b8c2dbf9d5880c81a93248d56dbe76b6867939d2";><code>b8c2dbf</code></a> Merge pull request <a href="https://redirect.github.com/apache/beam/issues/38190";>#38190</a> from apache/forwardRefCherrypick</li> <li><a href="https://github.com/apache/beam/commit/959c542717a0c68b5b904cf74a6f4f777674564b";><code>959c542</code></a> Merge pull request <a href="https://redirect.github.com/apache/beam/issues/38169";>#38169</a> from acrites/cherrypick_pr_38073</li> <li><a href="https://github.com/apache/beam/commit/1be727f8e7bca4efd9046e8b9db9ecb92a09796e";><code>1be727f</code></a> Merge pull request <a href="https://redirect.github.com/apache/beam/issues/38181";>#38181</a> from apache/cp-38090</li> <li><a href="https://github.com/apache/beam/commit/35d23a4ae5058debbb2dd77762fe5aba0468607f";><code>35d23a4</code></a> Merge pull request <a href="https://redirect.github.com/apache/beam/issues/38163";>#38163</a> from ahmedabu98/cp_38078</li> <li>Additional commits viewable in <a href="https://github.com/apache/beam/compare/v2.48.0...v2.73.0";>compare view</a></li> </ul> </details> <br /> Updates `org.apache.beam:beam-runners-direct-java` from 2.48.0 to 2.73.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/apache/beam/releases";>org.apache.beam:beam-runners-direct-java's releases</a>.</em></p> <blockquote> <h2>Beam 2.73.0 release</h2> <p>We are happy to present the new 2.73.0 release of Beam. This release includes both improvements and new functionality. See the <a href="https://github.com/apache/beam/blob/HEAD/get-started/downloads/#2730-2026-04-29";>download page</a> for this release.</p> <!-- raw HTML omitted --> <p>For more information on changes in 2.73.0, check out the <a href="https://github.com/apache/beam/milestone/41";>detailed release notes</a>.</p> <h2>Highlights</h2> <h3>I/Os</h3> <ul> <li>DebeziumIO (Java): added <code>OffsetRetainer</code> interface and <code>FileSystemOffsetRetainer</code> implementation to persist and restore CDC offsets across pipeline restarts, and exposed <code>withStartOffset</code> / <code>withOffsetRetainer</code> on <code>DebeziumIO.Read</code> and the cross-language <code>ReadBuilder</code> (<a href="https://redirect.github.com/apache/beam/issues/28248";>#28248</a>).</li> </ul> <h3>New Features / Improvements</h3> <ul> <li>(Python) Added BigQuery CDC streaming source (<a href="https://redirect.github.com/apache/beam/issues/37724";>#37724</a>)</li> <li>Added <code>ADKAgentModelHandler</code> for running Google Agent Development Kit (ADK) agents (Python) (<a href="https://redirect.github.com/apache/beam/issues/37917";>#37917</a>).</li> <li>(Python) Added exception chaining to preserve error context in CloudSQLEnrichmentHandler, processes utilities, and core transforms (<a href="https://redirect.github.com/apache/beam/issues/37422";>#37422</a>).</li> <li>(Python) Added a pipeline option <code>--experiments=pip_no_build_isolation</code> to disable build isolation when installing dependencies in the runtime environment (<a href="https://redirect.github.com/apache/beam/issues/37331";>#37331</a>).</li> <li>(Go) Added OrderedListState support to the Go SDK stateful DoFn API (<a href="https://redirect.github.com/apache/beam/issues/37629";>#37629</a>).</li> <li>Added support for large pipeline options via a file (Python) (<a href="https://redirect.github.com/apache/beam/issues/37370";>#37370</a>).</li> <li>Supported infer schema from dataclass (Python) (<a href="https://redirect.github.com/apache/beam/issues/22085";>#22085</a>). Default coder for typehint-ed (or set with_output_type) for non-frozen dataclasses changed to RowCoder. To preserve the old behavior (fast primitive coder), explicitly register the type with FastPrimitiveCoder.</li> <li>Updates minimum Go version to 1.26.1 (<a href="https://redirect.github.com/apache/beam/issues/37897";>#37897</a>).</li> <li>(Python) Added image embedding support in <code>apache_beam.ml.rag</code> package (<a href="https://redirect.github.com/apache/beam/issues/37628";>#37628</a>).</li> <li>(Python) Added support for Python version 3.14 (<a href="https://redirect.github.com/apache/beam/issues/37247";>#37247</a>).</li> </ul> <h3>Breaking Changes</h3> <ul> <li>The Python SDK container's <code>boot.go</code> now passes pipeline options through a file instead of the <code>PIPELINE_OPTIONS</code> environment variable. If a user pairs a new Python SDK container with an older SDK version (which does not support the file-based approach), the pipeline options will not be recognized and the pipeline will fail. Users must ensure their SDK and container versions are synchronized (<a href="https://redirect.github.com/apache/beam/issues/37370";>#37370</a>).</li> <li>Python DoFn.with_exception_handling now respects user DoFn typehints. This can break update compatibility if coders change. It can also break pipeline compilation if existing typehints are incorrect. To update safely sepcify the pipeline option <code>--update_compatibility_version=2.72.0</code>. To fix typehints replace any incorrect typehints that were previously ignored (<a href="https://redirect.github.com/apache/beam/issues/37590";>#37590</a>)</li> </ul> <h3>Bugfixes</h3> <ul> <li>Fixed ProcessManager not reaping child processes, causing zombie process accumulation on long-running Flink deployments (Java) (<a href="https://redirect.github.com/apache/beam/issues/37930";>#37930</a>).</li> </ul> <h3>Security Fixes</h3> <ul> <li>Fixed <a href="https://www.cve.org/CVERecord?id=CVE-2023-46604";>CVE-2023-46604</a> (CVSS 10.0) and <a href="https://www.cve.org/CVERecord?id=CVE-2022-41678";>CVE-2022-41678</a> by upgrading ActiveMQ from 5.14.5 to 5.19.2 (Java) (<a href="https://redirect.github.com/apache/beam/issues/37943";>#37943</a>).</li> <li>Fixed <a href="https://www.cve.org/CVERecord?id=CVE-2024-1597";>CVE-2024-1597</a>, <a href="https://www.cve.org/CVERecord?id=CVE-2022-31197";>CVE-2022-31197</a>, and <a href="https://www.cve.org/CVERecord?id=CVE-2022-21724";>CVE-2022-21724</a> by upgrading PostgreSQL JDBC Driver from 42.2.16 to 42.6.2 (Java) (<a href="https://redirect.github.com/apache/beam/issues/37942";>#37942</a>).</li> </ul> <h2>List of Contributors</h2> <p>According to git shortlog, the following people contributed to the 2.73.0 release. Thank you to all contributors!</p> <p>Abdelrahman Ibrahim, Ahmed Abualsaud, Alex Malao, Alexander Nieuwenhuijse, Andres Tiko, Andrew Crites, Arun Pandian, Bentsi Leviav, Bruno Volpato, Chamikara Jayalath, Chandra Kiran Bolla, Danny McCormick, Deji Ibrahim, Derrick Williams, Elia LIU, Esmelealem, Hannes Gustafsson, Jack McCluskey, Joey Tran, Kenneth Knowles, M Junaid Shaukat, Mansi Singh, Matej Aleksandrov, Mathijs Deelen, Mattie Fu, Praneet Nadella, Radek Stankiewicz, Radosław Stankiewicz, Reuven Lax, RuiLong J., S. Veyrié, Sakthivel Subramanian, Sam Whittle, Shubham Thakur, Shunping Huang, Subramanya V, Tarun Annapareddy, Tobias Kaymak, Valentyn Tymofieiev, Vitaly Terentyev, XQ Hu, Yi Hu, ZIHAN DAI, claudevdm, kishorepola, parveensania</p> <h2>Beam 2.72.0 release</h2> <p>We are happy to present the new 2.72.0 release of Beam.</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/apache/beam/blob/master/CHANGES.md";>org.apache.beam:beam-runners-direct-java's changelog</a>.</em></p> <blockquote> <h1>[2.73.0] - 2026-04-29</h1> <h2>Highlights</h2> <h2>I/Os</h2> <ul> <li>DebeziumIO (Java): added <code>OffsetRetainer</code> interface and <code>FileSystemOffsetRetainer</code> implementation to persist and restore CDC offsets across pipeline restarts, and exposed <code>withStartOffset</code> / <code>withOffsetRetainer</code> on <code>DebeziumIO.Read</code> and the cross-language <code>ReadBuilder</code> (<a href="https://redirect.github.com/apache/beam/issues/28248";>#28248</a>).</li> </ul> <h2>New Features / Improvements</h2> <ul> <li>(Python) Added BigQuery CDC streaming source (<a href="https://redirect.github.com/apache/beam/issues/37724";>#37724</a>)</li> <li>Added <code>ADKAgentModelHandler</code> for running Google Agent Development Kit (ADK) agents (Python) (<a href="https://redirect.github.com/apache/beam/issues/37917";>#37917</a>).</li> <li>(Python) Added exception chaining to preserve error context in CloudSQLEnrichmentHandler, processes utilities, and core transforms (<a href="https://redirect.github.com/apache/beam/issues/37422";>#37422</a>).</li> <li>(Python) Added a pipeline option <code>--experiments=pip_no_build_isolation</code> to disable build isolation when installing dependencies in the runtime environment (<a href="https://redirect.github.com/apache/beam/issues/37331";>#37331</a>).</li> <li>(Go) Added OrderedListState support to the Go SDK stateful DoFn API (<a href="https://redirect.github.com/apache/beam/issues/37629";>#37629</a>).</li> <li>Added support for large pipeline options via a file (Python) (<a href="https://redirect.github.com/apache/beam/issues/37370";>#37370</a>).</li> <li>Supported infer schema from dataclass (Python) (<a href="https://redirect.github.com/apache/beam/issues/22085";>#22085</a>). Default coder for typehint-ed (or set with_output_type) for non-frozen dataclasses changed to RowCoder. To preserve the old behavior (fast primitive coder), explicitly register the type with FastPrimitiveCoder.</li> <li>Updates minimum Go version to 1.26.1 (<a href="https://redirect.github.com/apache/beam/issues/37897";>#37897</a>).</li> <li>(Python) Added image embedding support in <code>apache_beam.ml.rag</code> package (<a href="https://redirect.github.com/apache/beam/issues/37628";>#37628</a>).</li> <li>(Python) Added support for Python version 3.14 (<a href="https://redirect.github.com/apache/beam/issues/37247";>#37247</a>).</li> </ul> <h2>Breaking Changes</h2> <ul> <li>The Python SDK container's <code>boot.go</code> now passes pipeline options through a file instead of the <code>PIPELINE_OPTIONS</code> environment variable. If a user pairs a new Python SDK container with an older SDK version (which does not support the file-based approach), the pipeline options will not be recognized and the pipeline will fail. Users must ensure their SDK and container versions are synchronized (<a href="https://redirect.github.com/apache/beam/issues/37370";>#37370</a>).</li> <li>Python DoFn.with_exception_handling now respects user DoFn typehints. This can break update compatibility if coders change. It can also break pipeline compilation if existing typehints are incorrect. To update safely sepcify the pipeline option <code>--update_compatibility_version=2.72.0</code>. To fix typehints replace any incorrect typehints that were previously ignored (<a href="https://redirect.github.com/apache/beam/issues/37590";>#37590</a>)</li> </ul> <h2>Bugfixes</h2> <ul> <li>Fixed ProcessManager not reaping child processes, causing zombie process accumulation on long-running Flink deployments (Java) (<a href="https://redirect.github.com/apache/beam/issues/37930";>#37930</a>).</li> </ul> <h2>Security Fixes</h2> <ul> <li>Fixed <a href="https://www.cve.org/CVERecord?id=CVE-2023-46604";>CVE-2023-46604</a> (CVSS 10.0) and <a href="https://www.cve.org/CVERecord?id=CVE-2022-41678";>CVE-2022-41678</a> by upgrading ActiveMQ from 5.14.5 to 5.19.2 (Java) (<a href="https://redirect.github.com/apache/beam/issues/37943";>#37943</a>).</li> <li>Fixed <a href="https://www.cve.org/CVERecord?id=CVE-2024-1597";>CVE-2024-1597</a>, <a href="https://www.cve.org/CVERecord?id=CVE-2022-31197";>CVE-2022-31197</a>, and <a href="https://www.cve.org/CVERecord?id=CVE-2022-21724";>CVE-2022-21724</a> by upgrading PostgreSQL JDBC Driver from 42.2.16 to 42.6.2 (Java) (<a href="https://redirect.github.com/apache/beam/issues/37942";>#37942</a>).</li> </ul> <h1>[2.72.0] - 2026-03-30</h1> <h2>Highlights</h2> <ul> <li>Flink 2.0 support (<a href="https://redirect.github.com/apache/beam/issues/36947";>#36947</a>).</li> </ul> <h2>I/Os</h2> <ul> <li>Add Datadog IO support (Java) (<a href="https://redirect.github.com/apache/beam/issues/37318";>#37318</a>).</li> <li>Remove Pubsublite IO support, since service will be deprecated in March 2026. (<a href="https://redirect.github.com/apache/beam/issues/37375";>#37375</a>).</li> <li>(Java) ClickHouse - migrating from the legacy JDBC driver (v0.6.3) to ClickHouse Java Client v2 (v0.9.6). See the <a href="https://beam.apache.org/releases/javadoc/current/org/apache/beam/sdk/io/clickhouse/ClickHouseIO.html";>class documentation</a> for migration guide (<a href="https://redirect.github.com/apache/beam/issues/37610";>#37610</a>).</li> <li>(Java) Upgraded GoogleAdsIO to use GoogleAdsIO API v23 (<a href="https://redirect.github.com/apache/beam/issues/37620";>#37620</a>).</li> <li>(Java) Added support for withMinRowCountForPageSizeCheck to ParquetIO.Sink to avoid OOM when writing large columns (<a href="https://redirect.github.com/apache/beam/issues/37740";>#37740</a>).</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/apache/beam/commit/d686c10a4ae462546a122e13634a95346ed4f622";><code>d686c10</code></a> Set version for 2.73.0 RC2</li> <li><a href="https://github.com/apache/beam/commit/181e90b435e7e298945ce82e3ea6853c37fcafa0";><code>181e90b</code></a> Cherrypick <a href="https://redirect.github.com/apache/beam/issues/38132";>#38132</a> Retry transient NOT_FOUND on Storage API default stream</li> <li><a href="https://github.com/apache/beam/commit/bb9baf8a83546ee6ad3b0cc8fce1d82100cb41af";><code>bb9baf8</code></a> Cherrypick name-mapping fix (<a href="https://redirect.github.com/apache/beam/issues/38238";>#38238</a>)</li> <li><a href="https://github.com/apache/beam/commit/406455c620c9882ea34262b0e4cd1bbc65dbfa56";><code>406455c</code></a> cherry pick name mapping for AddFiles (<a href="https://redirect.github.com/apache/beam/issues/38205";>#38205</a>)</li> <li><a href="https://github.com/apache/beam/commit/80bd9f9dbe8645d1fb46c900d0bc78bb850e5c6c";><code>80bd9f9</code></a> Merge pull request <a href="https://redirect.github.com/apache/beam/issues/38203";>#38203</a> from apache/cp-38191</li> <li><a href="https://github.com/apache/beam/commit/5142617dde6f888ba1745548e1b476de0c2cc8ca";><code>5142617</code></a> CP <a href="https://redirect.github.com/apache/beam/issues/38191";>#38191</a> Fix Lint PreCommit</li> <li><a href="https://github.com/apache/beam/commit/b8c2dbf9d5880c81a93248d56dbe76b6867939d2";><code>b8c2dbf</code></a> Merge pull request <a href="https://redirect.github.com/apache/beam/issues/38190";>#38190</a> from apache/forwardRefCherrypick</li> <li><a href="https://github.com/apache/beam/commit/959c542717a0c68b5b904cf74a6f4f777674564b";><code>959c542</code></a> Merge pull request <a href="https://redirect.github.com/apache/beam/issues/38169";>#38169</a> from acrites/cherrypick_pr_38073</li> <li><a href="https://github.com/apache/beam/commit/1be727f8e7bca4efd9046e8b9db9ecb92a09796e";><code>1be727f</code></a> Merge pull request <a href="https://redirect.github.com/apache/beam/issues/38181";>#38181</a> from apache/cp-38090</li> <li><a href="https://github.com/apache/beam/commit/35d23a4ae5058debbb2dd77762fe5aba0468607f";><code>35d23a4</code></a> Merge pull request <a href="https://redirect.github.com/apache/beam/issues/38163";>#38163</a> from ahmedabu98/cp_38078</li> <li>Additional commits viewable in <a href="https://github.com/apache/beam/compare/v2.48.0...v2.73.0";>compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
