Skip to content

Fix nokogiri vuln#9

Open
jonh14lk wants to merge 258 commits into
mainfrom
fix-nokogiri-vuln
Open

Fix nokogiri vuln#9
jonh14lk wants to merge 258 commits into
mainfrom
fix-nokogiri-vuln

Conversation

@jonh14lk
Copy link
Copy Markdown

Para resolver o alerta de vulnerabilidade do dependabot: https://github.com/inloco/apache-calcite/security/dependabot/3

rubenada and others added 30 commits October 28, 2025 18:06
…ery order by a field that is not present on the final projection (follow-up)
…ls to SEARCH

1. Generalize SargCollector in RexSimplify to handle comparisons with deterministic expressions.
2. Add Javadoc for accept variants in SargCollector
3. Prevent invalid SEARCH to interval/range transformations in DruidDateTimeUtils

Some plan changes in DruidAdapterIT/DruidAdapter2IT are due to the added restrictions in DruidDateTimeUtils.
When the SEARCH operand is not a plain column reference (RexInputRef) its generally unsafe to convert it to an interval; the entire DruidDateTimeUtils.createInterval was not meant to handle arbitrary complex expressions.
…ion information

Signed-off-by: Mihai Budiu <mbudiu@feldera.com>
…to an ASOF JOIN

Signed-off-by: Mihai Budiu <mbudiu@feldera.com>
…nal and simplified expression in RexSimplify#verify
… casts

Signed-off-by: Mihai Budiu <mbudiu@feldera.com>
… using option "build and run [tests] using Intellij IDEA"
… using option "build and run [tests] using Intellij IDEA"

Addendum to the previous commit: ignore files generated by Intellij
during the compilation.
…an incorrect plan when sql has distinct agg-call with rollup
mihaibudiu and others added 28 commits April 17, 2026 14:50
Signed-off-by: Mihai Budiu <mbudiu@feldera.com>
Signed-off-by: Mihai Budiu <mbudiu@feldera.com>
…fined

Signed-off-by: Mihai Budiu <mbudiu@feldera.com>
…ation

Signed-off-by: Mihai Budiu <mbudiu@feldera.com>
Signed-off-by: Mihai Budiu <mbudiu@feldera.com>
Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.19.1 to 1.19.3.
- [Release notes](https://github.com/sparklemotion/nokogiri/releases)
- [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md)
- [Commits](sparklemotion/nokogiri@v1.19.1...v1.19.3)

---
updated-dependencies:
- dependency-name: nokogiri
  dependency-version: 1.19.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Copilot AI review requested due to automatic review settings May 21, 2026 15:05
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review this pull request because it exceeds the maximum number of files (300). Try reducing the number of changed files and requesting a review from Copilot again.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.