Skip to content

fix(isthmus): upgrade to Calcite 1.39.0 #393

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
May 2, 2025

Conversation

bestbeforetoday
Copy link
Contributor

This version of Calcite improves support for nested window aggregation, which allows Isthmus to support several TPC-DS queries that were previously failing.

@bestbeforetoday bestbeforetoday marked this pull request as ready for review May 2, 2025 10:13
@bestbeforetoday
Copy link
Contributor Author

The build shows a vulnerability scan failure, which originates from Calcite dependencies. Since this is currently the latest Calcite version available, it will have to wait for a new Calcite release to be resolved.

@vbarua
Copy link
Member

vbarua commented May 2, 2025

The vulnerability in question is in https://mvnrepository.com/artifact/org.apache.httpcomponents.client5/httpclient5

Calcite 1.39 pulls in 5.4.1, but we should be able to bump it in our build to 5.4.4 which does not appear to have the vulnerability.

We've done this before to deal with an vuln in Calcite 1.38 as well https://github.com/substrait-io/substrait-java/pull/329/files, and actually we should probably remove that workaround now.

This version of Calcite improves support for nested window aggregation,
which allows Isthmus to support several TPC-DS queries that were
previously failing.

Signed-off-by: Mark S. Lewis <Mark.S.Lewis@outlook.com>
@vbarua vbarua merged commit 4d3640d into substrait-io:main May 2, 2025
12 checks passed
@bestbeforetoday bestbeforetoday deleted the calcite-1.39 branch May 2, 2025 16:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants