FrancescoCastaldi commented on PR #45186: URL: https://github.com/apache/superset/pull/45186#issuecomment-6469272801
Rebased onto `upstream/master`, cleanly resolving all merge conflicts across `requirements/base.in`, `UPDATING.md`, and Snowflake engine spec test coverage: - **Upstream Alignment**: Aligned with upstream master dependencies while retaining explicit security vulnerability documentation for CVE-2026-25087 and preserving `msgpack>=1.2.3,<1.3.0`. - **Snowflake Keypair Authentication**: Validated keypair material with PKCS8 DER serialization, added explicit unit tests for both file path (`privatekey_path`) and inline PEM string (`privatekey_body`), and handled empty/whitespace passphrase inputs safely. - **UPDATING.md & Documentation**: Preserved all recent upstream entries alongside the PR note and the comprehensive scanner remediation guide under `docs/admin_docs/security/dependency-vulnerability-remediation.mdx`. - **Clean DCO & Commits**: All commits are signed-off with DCO. Ready for re-review. cc @sadpandajoe @hainenber -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
