Merge remote-tracking branch 'origin/main' into fix/trino-reduce-image-size

Author: maltesander

CHANGELOG.md

@@ -4,8 +4,11 @@ All notable changes to this project will be documented in this file.
 
 ## [Unreleased]
 
+## [25.3.0] - 2025-03-21
+
 ### Added
 
+- omid: Added 1.1.3-SNAPSHOT to allow for easier scanning pre-release
 - airflow: Add OPA support to Airflow ([#978]).
 - nifi: Activate `include-hadoop` profile for NiFi version 2.* ([#958]).
 - nifi: Add NiFi hadoop Azure and GCP libraries ([#943]).
@@ -29,7 +32,7 @@ All notable changes to this project will be documented in this file.
 - trino-cli: Add version 470 ([#999]).
 - trino-storage-connector: Add version 470 ([#999]).
 - superset: Add version `4.1.1` ([#991]).
-- Add Patchable patch management tool ([#1003], [#1005], [#1007]).
+- Add Patchable patch management tool ([#1003], [#1005], [#1007], [#1026]).
 - nifi: Add 1.28.1, 2.2.0 ([#1006]).
 - airflow: Add 2.10.4 ([#1021]).
 - hadoop: Add 3.4.1, use jmx_export 1.1.0 ([#1021]).
@@ -38,12 +41,15 @@ All notable changes to this project will be documented in this file.
 - hbase: Use jmx_export 1.1.0 ([#1021]).
 - omid: Use jmx_export 1.1.0 ([#1021]).
 - spark: Add 3.5.5 ([#1022]).
+- trino: Add libstdc++ package, needed by snappy and duckdb ([#1015]).
+- hive: Revert the removal of 4.0.0 ([#1031]).
 
 ### Changed
 
 - stackable-base: Bump cargo-cyclonedx to 0.5.7 ([#1013]).
 - Update registry references to oci ([#989]).
 - trino-storage-connector: Move the build out of trino/ for easier patching ([#996]).
+- phoenix: Bump 5.2.0 to 5.2.1 ([#997], [#1009]).
 - BREAKING: druid: Bump opa-authorizer to 0.6.0 for all versions ([#984]).
 
 ### Removed
@@ -97,9 +103,12 @@ All notable changes to this project will be documented in this file.
 [#1005]: https://github.com/stackabletech/docker-images/pull/1005
 [#1006]: https://github.com/stackabletech/docker-images/pull/1006
 [#1007]: https://github.com/stackabletech/docker-images/pull/1007
+[#1009]: https://github.com/stackabletech/docker-images/pull/1009
 [#1013]: https://github.com/stackabletech/docker-images/pull/1013
+[#1015]: https://github.com/stackabletech/docker-images/pull/1015
 [#1021]: https://github.com/stackabletech/docker-images/pull/1021
 [#1022]: https://github.com/stackabletech/docker-images/pull/1022
+[#1026]: https://github.com/stackabletech/docker-images/pull/1026
 
 ## [24.11.1] - 2025-01-14
 

druid/stackable/patches/31.0.1/0009-Update-FMPP-version.patch

@@ -8,14 +8,9 @@ which itself depends on a Freemarker version that has not been pinned.
 Instead it specifies a "range" which resolves to a SNAPSHOT version
 which we don't want.
 ---
- 10-update-fmpp.patch | 0
- sql/pom.xml          | 7 +++++++
- 2 files changed, 7 insertions(+)
- create mode 100644 10-update-fmpp.patch
+ sql/pom.xml | 7 +++++++
+ 1 file changed, 7 insertions(+)
 
-diff --git a/10-update-fmpp.patch b/10-update-fmpp.patch
-new file mode 100644
-index 0000000000..e69de29bb2
 diff --git a/sql/pom.xml b/sql/pom.xml
 index 56ed03f5c2..d0d19dd854 100644
 --- a/sql/pom.xml

hbase/Dockerfile

@@ -139,7 +139,8 @@ ARG DELETE_CACHES="true"
 # so that they are not expanded. Disabling ShellCheck rules in a Dockerfile
 # does not work, so please ignore the according warning (SC2016).
 COPY --chown=${STACKABLE_USER_UID}:0 hbase/stackable/bin/hbck2.env /stackable/bin/
-COPY --chown=${STACKABLE_USER_UID}:0 hbase/stackable/patches /stackable/patches
+COPY --chown=${STACKABLE_USER_UID}:0 hbase/hbase-operator-tools/stackable/patches /stackable/patches
+COPY --chown=${STACKABLE_USER_UID}:0 hbase/stackable/patches/apply_patches.sh /stackable/patches
 COPY --chown=${STACKABLE_USER_UID}:0 --chmod=755 hbase/stackable/bin/hbase-entrypoint.sh /stackable/bin/
 
 USER ${STACKABLE_USER_UID}
@@ -152,7 +153,7 @@ RUN --mount=type=cache,id=maven-hbase-operator-tools-${HBASE_OPERATOR_TOOLS},uid
 curl "https://repo.stackable.tech/repository/packages/hbase-operator-tools/hbase-operator-tools-${HBASE_OPERATOR_TOOLS}-src.tar.gz" | tar -xzC .
 mv hbase-operator-tools-${HBASE_OPERATOR_TOOLS} hbase-operator-tools-${HBASE_OPERATOR_TOOLS}-src
 chmod +x patches/apply_patches.sh
-patches/apply_patches.sh hbase-operator-tools/${HBASE_OPERATOR_TOOLS} hbase-operator-tools-${HBASE_OPERATOR_TOOLS}-src
+patches/apply_patches.sh ${HBASE_OPERATOR_TOOLS} hbase-operator-tools-${HBASE_OPERATOR_TOOLS}-src
 
 mvn \
   --batch-mode \
@@ -232,7 +233,8 @@ ARG STACKABLE_USER_UID
 # This can be used to speed up builds when disk space is of no concern.
 ARG DELETE_CACHES="true"
 
-COPY --chown=${STACKABLE_USER_UID}:0 hbase/stackable/patches /stackable/patches
+COPY --chown=${STACKABLE_USER_UID}:0 hbase/phoenix/stackable/patches /stackable/patches
+COPY --chown=${STACKABLE_USER_UID}:0 hbase/stackable/patches/apply_patches.sh /stackable/patches
 USER ${STACKABLE_USER_UID}
 WORKDIR /stackable
 
@@ -242,7 +244,7 @@ curl "https://repo.stackable.tech/repository/packages/phoenix/phoenix-${PHOENIX}
 mv phoenix-${PHOENIX} phoenix-${PHOENIX}-src
 
 chmod +x patches/apply_patches.sh
-patches/apply_patches.sh phoenix/${PHOENIX} phoenix-${PHOENIX}-src
+patches/apply_patches.sh ${PHOENIX} phoenix-${PHOENIX}-src
 
 # Passing "-f" means it'll build in the phoenix source directory without cding into it
 # The Maven command can be found inside of the scripts in the create-release folder (release-util.sh as of Phoenix 5.2.0)

hbase/stackable/patches/hbase-operator-tools/1.2.0/01-cyclonedx-plugin.patch renamed to hbase/hbase-operator-tools/stackable/patches/1.2.0/0001-Add-CycloneDX-plugin.patch

@@ -1,3 +1,12 @@
+From 925a136ad24ae2d273990c36e591a87116f78ec0 Mon Sep 17 00:00:00 2001
+From: dervoeti <[email protected]>
+Date: Thu, 13 Mar 2025 22:04:20 +0100
+Subject: Add CycloneDX plugin
+
+---
+ pom.xml | 17 +++++++++++++++++
+ 1 file changed, 17 insertions(+)
+
 diff --git a/pom.xml b/pom.xml
 index aba42b0..0288bde 100644
 --- a/pom.xml

hbase/hbase-operator-tools/stackable/patches/1.2.0/patchable.toml

@@ -0,0 +1,2 @@
+upstream = "https://github.com/apache/hbase-operator-tools.git"
+base = "478af00af79f82624264fd2bb447b97fecc8e790"

hbase/stackable/patches/hbase-operator-tools/1.3.0-fd5a5fb/01-cyclonedx-plugin.patch renamed to hbase/hbase-operator-tools/stackable/patches/1.3.0-fd5a5fb/0001-Add-CycloneDX-plugin.patch

@@ -1,3 +1,12 @@
+From 8616ee8b26bfbba285a36b91eb41a203a49b222a Mon Sep 17 00:00:00 2001
+From: dervoeti <[email protected]>
+Date: Thu, 13 Mar 2025 22:07:31 +0100
+Subject: Add CycloneDX plugin
+
+---
+ pom.xml | 17 +++++++++++++++++
+ 1 file changed, 17 insertions(+)
+
 diff --git a/pom.xml b/pom.xml
 index caa032a..0025687 100644
 --- a/pom.xml

hbase/hbase-operator-tools/stackable/patches/1.3.0-fd5a5fb/patchable.toml

@@ -0,0 +1,2 @@
+upstream = "https://github.com/apache/hbase-operator-tools.git"
+base = "fd5a5fb90755949a90c502c76de8313130403fa3"

hbase/stackable/patches/phoenix/5.2.1/01-cyclonedx-plugin.patch renamed to hbase/phoenix/stackable/patches/5.2.1/0001-Add-CycloneDX-plugin.patch

@@ -1,8 +1,17 @@
+From 7727bee78aa96e3342da8cb9b3221327f29c43db Mon Sep 17 00:00:00 2001
+From: dervoeti <[email protected]>
+Date: Thu, 13 Mar 2025 22:00:03 +0100
+Subject: Add CycloneDX plugin
+
+---
+ pom.xml | 17 +++++++++++++++++
+ 1 file changed, 17 insertions(+)
+
 diff --git a/pom.xml b/pom.xml
-index bce2398..4abcb5a 100644
+index ed97bb870..f8534b4ad 100644
 --- a/pom.xml
 +++ b/pom.xml
-@@ -680,6 +680,23 @@
+@@ -697,6 +697,23 @@
          <extensions>true</extensions>
          <inherited>true</inherited>
        </plugin>

hbase/stackable/patches/phoenix/5.2.0/02-CVE-2023-34455-update-snappy-version.patch renamed to hbase/phoenix/stackable/patches/5.2.1/0002-Fix-CVE-2023-34455.patch

@@ -1,12 +1,22 @@
-Fix CVE-2023-34455
+From 24a0779c5e24caec82d23988f0b4b026e4bc7c8c Mon Sep 17 00:00:00 2001
+From: dervoeti <[email protected]>
+Date: Thu, 13 Mar 2025 22:01:52 +0100
+Subject: Fix CVE-2023-34455
 
 See https://github.com/stackabletech/vulnerabilities/issues/558
+---
+ phoenix-core-client/pom.xml    | 6 ++++++
+ phoenix-core-server/pom.xml    | 8 +++++++-
+ phoenix-pherf/pom.xml          | 6 ++++++
+ phoenix-tracing-webapp/pom.xml | 6 ++++++
+ pom.xml                        | 7 +++++++
+ 5 files changed, 32 insertions(+), 1 deletion(-)
 
 diff --git a/phoenix-core-client/pom.xml b/phoenix-core-client/pom.xml
-index f711b0f6f..3cfbffef9 100644
+index eaf92a75e..cbbebc9d5 100644
 --- a/phoenix-core-client/pom.xml
 +++ b/phoenix-core-client/pom.xml
-@@ -230,6 +230,12 @@
+@@ -233,6 +233,12 @@
        <groupId>org.apache.hadoop</groupId>
        <artifactId>hadoop-auth</artifactId>
      </dependency>
@@ -20,7 +30,7 @@ index f711b0f6f..3cfbffef9 100644
      <!-- HBase dependencies -->
      <dependency>
 diff --git a/phoenix-core-server/pom.xml b/phoenix-core-server/pom.xml
-index d5032ece2..e47fb0837 100644
+index bb582d408..61cfeef6d 100644
 --- a/phoenix-core-server/pom.xml
 +++ b/phoenix-core-server/pom.xml
 @@ -59,6 +59,12 @@
@@ -44,7 +54,7 @@ index d5032ece2..e47fb0837 100644
 \ No newline at end of file
 +</project>
 diff --git a/phoenix-pherf/pom.xml b/phoenix-pherf/pom.xml
-index c03fff9a1..cdcce2f98 100644
+index 787137edc..017cb5dd5 100644
 --- a/phoenix-pherf/pom.xml
 +++ b/phoenix-pherf/pom.xml
 @@ -159,6 +159,12 @@
@@ -61,7 +71,7 @@ index c03fff9a1..cdcce2f98 100644
      <!-- Test Dependencies -->
      <dependency>
 diff --git a/phoenix-tracing-webapp/pom.xml b/phoenix-tracing-webapp/pom.xml
-index d2d1549ef..c8054159e 100755
+index 681e68043..3f28979e7 100755
 --- a/phoenix-tracing-webapp/pom.xml
 +++ b/phoenix-tracing-webapp/pom.xml
 @@ -89,6 +89,12 @@
@@ -78,10 +88,10 @@ index d2d1549ef..c8054159e 100755
 
      <build>
 diff --git a/pom.xml b/pom.xml
-index 4abcb5a28..21dcf71ad 100644
+index f8534b4ad..ec98a082a 100644
 --- a/pom.xml
 +++ b/pom.xml
-@@ -850,6 +850,13 @@
+@@ -892,6 +892,13 @@
            </exclusion>
          </exclusions>
        </dependency>

hbase/phoenix/stackable/patches/5.2.1/patchable.toml

@@ -0,0 +1,2 @@
+upstream = "https://github.com/apache/phoenix.git"
+base = "b738d66cb5863b759bb98eaa417b3b5731d41f95"