trillian-examples icon indicating copy to clipboard operation
trillian-examples copied to clipboard
verified publisher icon google

Bump the all-deps group across 1 directory with 5 updates

Open dependabot[bot] opened this issue 1 month ago • 1 comments

Bumps the all-deps group with 3 updates in the / directory: github.com/apache/beam/sdks/v2, github.com/usbarmory/tamago and golang.org/x/mod.

Updates github.com/apache/beam/sdks/v2 from 2.68.0 to 2.69.0

Release notes

Sourced from github.com/apache/beam/sdks/v2's releases.

Beam 2.69.0 release

We are happy to present the new 2.69.0 release of Beam. This release includes both improvements and new functionality. See the download page for this release.

For more information on changes in 2.69.0, check out the detailed release notes.

Highlights

  • (Python) Add YAML Editor and Visualization Panel (#35772).
  • (Java) Java 25 Support (#35772).

I/Os

  • Upgraded Iceberg dependency to 1.10.0 (#36123).

New Features / Improvements

  • Enhance JAXBCoder with XMLInputFactory support (Java) (#36446).
  • Python examples added for CloudSQL enrichment handler on Beam website (Python) (#35473).
  • Support for batch mode execution in WriteToPubSub transform added (Python) (#35990).
  • Added official support for Python 3.13 (#34869).
  • Added an optional output_schema verification to all YAML transforms (#35952).
  • Support for encryption when using GroupByKey added, along with --gbek pipeline option to automatically replace all GroupByKey transforms (Java/Python) (#36214).

Breaking Changes

  • (Python) dill is no longer a required, default dependency for Apache Beam (#21298).
    • This change only affects pipelines that explicitly use the pickle_library=dill pipeline option.
    • While dill==0.3.1.1 is still pre-installed on the official Beam SDK base images, it is no longer a direct dependency of the apache-beam Python package. This means it can be overridden by other dependencies in your environment.
    • If your pipeline uses pickle_library=dill, you must manually ensure dill==0.3.1.1 is installed in both your submission and runtime environments.
      • Submission environment: Install the dill extra in your local environment pip install apache-beam[gcpdill].
      • Runtime (worker) environment: Your action depends on how you manage your worker's environment.
        • If using default containers or custom containers with the official Beam base image e.g. FROM apache/beam_python3.10_sdk:2.69.0
          • Add dill==0.3.1.1 to your worker's requirements file (e.g., requirements.txt)
          • Pass this file to your pipeline using the --requirements_file requirements.txt pipeline option (For more details see managing Dataflow dependencies).
        • If custom containers with a non-Beam base image e.g. FROM python:3.9-slim
          • Install apache-beam with the dill extra in your docker file e.g. RUN pip install --no-cache-dir apache-beam[gcp,dill]
    • If there is a dill version mismatch between submission and runtime environments you might encounter unpickling errors like Can't get attribute '_create_code' on <module 'dill._dill' from....
    • If dill is not installed in the runtime environment you will see the error ImportError: Pipeline option pickle_library=dill is set, but dill is not installed...
    • Report any issues you encounter when using pickle_library=dill to the GitHub issue (#21298)
  • (Python) Added a pickle_library=dill_unsafe pipeline option. This allows overriding dill==0.3.1.1 using dill as the pickle_library. Use with extreme caution. Other versions of dill has not been tested with Apache Beam (#21298).
  • (Python) The deterministic fallback coder for complex types like NamedTuple, Enum, and dataclasses now normalizes filepaths for better determinism guarantees. This affects streaming pipelines updating from 2.68 to 2.69 that utilize this fallback coder. If your pipeline is affected, you may see a warning like: "Using fallback deterministic coder for type X...". To update safely sepcify the pipeline option --update_compatibility_version=2.68.0 (#36345).
  • (Python) Fixed transform naming conflict when executing DataTransform on a dictionary of PColls (#30445). This may break update compatibility if you don't provide a --transform_name_mapping.
  • Removed deprecated Hadoop versions (2.10.2 and 3.2.4) that are no longer supported for Iceberg from IcebergIO (#36282).
  • (Go) Coder construction on SDK side is more faithful to the specs from runners without stripping length-prefix. This may break streaming pipeline update as the underlying coder could be changed (#36387).
  • Minimum Go version for Beam Go updated to 1.25.2 (#36461).

... (truncated)

Changelog

Sourced from github.com/apache/beam/sdks/v2's changelog.

[2.69.0] - 2025-10-28

Highlights

  • (Python) Add YAML Editor and Visualization Panel (#35772).
  • (Java) Java 25 Support (#35627).

I/Os

  • Upgraded Iceberg dependency to 1.10.0 (#36123).

New Features / Improvements

  • Enhance JAXBCoder with XMLInputFactory support (Java) (#36446).
  • Python examples added for CloudSQL enrichment handler on Beam website (Python) (#35473).
  • Support for batch mode execution in WriteToPubSub transform added (Python) (#35990).
  • Added official support for Python 3.13 (#34869).
  • Added an optional output_schema verification to all YAML transforms (#35952).
  • Support for encryption when using GroupByKey added, along with --gbek pipeline option to automatically replace all GroupByKey transforms (Java/Python) (#36214).
  • In Python SDK, the --element_processing_timeout_minutes option will also interrupt the SDK process if slowness happens during DoFn initialization, for example in DoFn.setup() (#36518).

Breaking Changes

  • (Python) dill is no longer a required, default dependency for Apache Beam (#21298).
    • This change only affects pipelines that explicitly use the pickle_library=dill pipeline option.
    • While dill==0.3.1.1 is still pre-installed on the official Beam SDK base images, it is no longer a direct dependency of the apache-beam Python package. This means it can be overridden by other dependencies in your environment.
    • If your pipeline uses pickle_library=dill, you must manually ensure dill==0.3.1.1 is installed in both your submission and runtime environments.
      • Submission environment: Install the dill extra in your local environment pip install apache-beam[gcpdill].
      • Runtime (worker) environment: Your action depends on how you manage your worker's environment.
        • If using default containers or custom containers with the official Beam base image e.g. FROM apache/beam_python3.10_sdk:2.69.0
          • Add dill==0.3.1.1 to your worker's requirements file (e.g., requirements.txt)
          • Pass this file to your pipeline using the --requirements_file requirements.txt pipeline option (For more details see managing Dataflow dependencies).
        • If custom containers with a non-Beam base image e.g. FROM python:3.9-slim
          • Install apache-beam with the dill extra in your docker file e.g. RUN pip install --no-cache-dir apache-beam[gcp,dill]
    • If there is a dill version mismatch between submission and runtime environments you might encounter unpickling errors like Can't get attribute '_create_code' on <module 'dill._dill' from....
    • If dill is not installed in the runtime environment you will see the error ImportError: Pipeline option pickle_library=dill is set, but dill is not installed...
    • Report any issues you encounter when using pickle_library=dill to the GitHub issue (#21298)
  • (Python) Added a pickle_library=dill_unsafe pipeline option. This allows overriding dill==0.3.1.1 using dill as the pickle_library. Use with extreme caution. Other versions of dill has not been tested with Apache Beam (#21298).
  • (Python) The deterministic fallback coder for complex types like NamedTuple, Enum, and dataclasses now normalizes filepaths for better determinism guarantees. This affects streaming pipelines updating from 2.68 to 2.69 that utilize this fallback coder. If your pipeline is affected, you may see a warning like: "Using fallback deterministic coder for type X...". To update safely sepcify the pipeline option --update_compatibility_version=2.68.0 (#36345).
  • (Python) Fixed transform naming conflict when executing DataTransform on a dictionary of PColls (#30445). This may break update compatibility if you don't provide a --transform_name_mapping.
  • Removed deprecated Hadoop versions (2.10.2 and 3.2.4) that are no longer supported for Iceberg from IcebergIO (#36282).
  • (Go) Coder construction on SDK side is more faithful to the specs from runners without stripping length-prefix. This may break streaming pipeline update as the underlying coder could be changed (#36387).
  • Minimum Go version for Beam Go updated to 1.25.2 (#36461).
  • (Java) DoFn OutputReceiver now requires implementing a builder method as part of extended metadata support for elements (#34902).
  • (Java) Removed ProcessContext outputWindowedValue introduced in 2.68 that allowed setting offset and record Id. Use OutputReceiver's builder to set those field (#36523).

Bugfixes

  • Fixed passing of pipeline options to x-lang transforms when called from the Java SDK (Java) (#36443).

... (truncated)

Commits

Updates github.com/usbarmory/tamago from 1.25.1 to 1.25.4

Release notes

Sourced from github.com/usbarmory/tamago's releases.

v1.25.4

This release includes minor cosmetic changes and is issued to track and verify alignment with tamago-go1.25.4.

Major changes:

Full Changelog: https://github.com/usbarmory/tamago/compare/v1.25.3...v1.25.4

This release requires GOOS=tamago support in the Go distribution with tamago-go1.25.2 or later releases.

v1.25.3

This release includes minor cosmetic changes and is issued to track and verify alignment with tamago-go1.25.3.

Full Changelog: https://github.com/usbarmory/tamago/compare/v1.25.2...v1.25.3

This release requires GOOS=tamago support in the Go distribution with tamago-go1.25.2 or later releases.

v1.25.2

This release introduces improved CPU idle management support functions for amd64, extending the pattern enabled by the previous release on single-core to multi-core CPUs:

runtime.Idle = func(pollUntil int64) {
    if pollUntil == 0 {
        return
    }

cpu.SetAlarm(pollUntil)
cpu.WaitInterrupt()
cpu.SetAlarm(0)



}

Major changes for tamago package API:

Major changes for tamago package internals:

Full Changelog: https://github.com/usbarmory/tamago/compare/v1.25.1...v1.25.2

This release requires GOOS=tamago support in the Go distribution, it requires at least tamago-go1.25.2.

Commits
  • f67ba6c avoid scheduler starvation when no data is available to read on UARTs
  • df28b70 Merge pull request #54 from andrejro/add-imx6ul-uarts
  • af14e71 imx6ul: add UART3 and UART4 configurations
  • 559d92a tidying
  • 65252c0 tidying
  • fdbfb50 note Google Compute Engine execution for microvm
  • 3f36cd2 note Google Compute Engine execution for microvm
  • 2ab3a72 bump toolchain
  • 69948a1 Merge pull request #53 from andrejro/fix-amd64-page-tables-initialization
  • a05c1f6 amd64: fix 4kB page table initialization
  • Additional commits viewable in compare view

Updates golang.org/x/mod from 0.29.0 to 0.30.0

Commits
  • 7416265 go.mod: update golang.org/x dependencies
  • 5517a71 all: fix some comments
  • b6cdd1a modfile: use reflect.TypeFor instead of reflect.TypeOf
  • See full diff in compare view

Updates golang.org/x/oauth2 from 0.31.0 to 0.32.0

Commits

Updates google.golang.org/grpc from 1.75.1 to 1.76.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.76.0

Dependencies

Bug Fixes

  • client: Return status INTERNAL when a server sends zero response messages for a unary or client-streaming RPC. (#8523)
  • client: Fail RPCs with status INTERNAL instead of UNKNOWN upon receiving http headers with status 1xx and END_STREAM flag set. (#8518)
  • pick_first: Fix race condition that could cause pick_first to get stuck in IDLE state on backend address change. (#8615)

New Features

  • credentials: Add credentials/jwt package providing file-based JWT PerRPCCredentials (A97). (#8431)

Performance Improvements

  • client: Improve HTTP/2 header size estimate to reduce re-allocations. (#8547)
  • encoding/proto: Avoid redundant message size calculation when marshaling. (#8569)
Commits
  • d96c2ef Change version to 1.76.0 (#8584)
  • 79c553c Cherry pick #8610, #8615 to v1.76.x (#8621)
  • 0513350 client: minor improvements to log messages (#8564)
  • ebaf486 credentials: implement file-based JWT Call Credentials (part 1 for A97) (#8431)
  • ca78c90 xds/resolver_test: fix flaky test ResolverBadServiceUpdate_NACKedWithoutCache...
  • 83bead4 internal/buffer: set closed flag when closing channel in the Load method (#8575)
  • 0f45079 encoding/proto: enable use cached size option (#8569)
  • 8420f3f transport: avoid slice reallocation during header creation (#8547)
  • b36320e Revert "stats/opentelemetry: record retry attempts from clientStream (#8342)"...
  • c122250 stats/opentelemetry: record retry attempts from clientStream (#8342)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

dependabot[bot] avatar Nov 20 '25 11:11 dependabot[bot]

/gcbrun

dpebot avatar Nov 20 '25 11:11 dpebot