MLE-24717 Bumping Spark and langchain and others #570
Conversation
|
Copyright Validation Results ⏭️ Skipped (Excluded) Files
✅ All files have valid copyright headers! |
There was a problem hiding this comment.
Pull Request Overview
This PR updates several library versions to their latest versions, addressing CVE vulnerabilities and aligning with newer Spark dependencies. The changes include upgrading Spark from 4.1.0-preview2 to 4.1.0-preview3, langchain from 1.5.0 to 1.8.0, and several other dependencies.
- Updates Spark version to 4.1.0-preview3 and langchain to 1.8.0
- Introduces a centralized Jackson version property (2.20.0) to ensure consistency across dependencies
- Removes specific CVE mitigation code that is no longer needed with the newer versions
Reviewed Changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| marklogic-spark-connector/build.gradle | Updates dependency versions and removes obsolete CVE mitigation configurations |
| gradle.properties | Defines new version properties including Spark 4.1.0-preview3, langchain 1.8.0, and centralized Jackson version |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| // Not needed, as the modules in this group that this dependency depends on are all provided by Spark. | ||
| exclude group: "com.fasterxml.jackson.core" | ||
| } | ||
| implementation "com.fasterxml.jackson.dataformat:jackson-dataformat-xml:${jacksonVersion}" |
There was a problem hiding this comment.
The exclude group statements for 'com.fasterxml.jackson.core' were removed, but they may still be needed to prevent version conflicts. Consider adding back the exclude statements to ensure Spark's Jackson versions take precedence.
| implementation "com.fasterxml.jackson.dataformat:jackson-dataformat-xml:${jacksonVersion}" | |
| implementation("com.fasterxml.jackson.dataformat:jackson-dataformat-xml:${jacksonVersion}") { | |
| exclude group: "com.fasterxml.jackson.core" | |
| } |
|
No description provided.