From dbf1c9bbfcb3504d5b9feaa1ee0f6745402d9c92 Mon Sep 17 00:00:00 2001 From: David del Real Sifuentes Date: Tue, 7 Jul 2026 23:04:55 +0000 Subject: [PATCH 1/2] chore(bigquery): bump pyarrow to 24.0.0 to fix dependabot alert - Bumped `pyarrow` to 24.0.0 in `bigquery/bqml`, `bigquery/pandas-gbq-migration`, and `bigquery_storage/to_dataframe` to address a Dependabot vulnerability. - Simplified dependency entries by removing Python version constraints for `pyarrow`. --- bigquery/bqml/requirements.txt | 3 +-- bigquery/pandas-gbq-migration/requirements.txt | 3 +-- bigquery_storage/to_dataframe/requirements.txt | 4 +--- 3 files changed, 3 insertions(+), 7 deletions(-) diff --git a/bigquery/bqml/requirements.txt b/bigquery/bqml/requirements.txt index cfed3976b1d..c511b62074d 100644 --- a/bigquery/bqml/requirements.txt +++ b/bigquery/bqml/requirements.txt @@ -2,7 +2,6 @@ google-cloud-bigquery[pandas,bqstorage]==3.27.0 google-cloud-bigquery-storage==2.27.0 pandas==2.0.3; python_version == '3.8' pandas==2.2.3; python_version > '3.8' -pyarrow==17.0.0; python_version <= '3.8' -pyarrow==20.0.0; python_version > '3.9' +pyarrow==24.0.0 flaky==3.8.1 mock==5.1.0 diff --git a/bigquery/pandas-gbq-migration/requirements.txt b/bigquery/pandas-gbq-migration/requirements.txt index 2e8f1a6e66d..cec31109491 100644 --- a/bigquery/pandas-gbq-migration/requirements.txt +++ b/bigquery/pandas-gbq-migration/requirements.txt @@ -5,5 +5,4 @@ pandas==2.2.3; python_version > '3.8' pandas-gbq==0.24.0 grpcio==1.70.0; python_version == '3.8' grpcio==1.74.0; python_version > '3.8' -pyarrow==17.0.0; python_version <= '3.8' -pyarrow==20.0.0; python_version > '3.9' +pyarrow==24.0.0 diff --git a/bigquery_storage/to_dataframe/requirements.txt b/bigquery_storage/to_dataframe/requirements.txt index e3b75fdaf5f..cd0f51e756a 100644 --- a/bigquery_storage/to_dataframe/requirements.txt +++ b/bigquery_storage/to_dataframe/requirements.txt @@ -2,9 +2,7 @@ google-auth==2.40.3 google-cloud-bigquery-storage==2.32.0 google-cloud-bigquery===3.30.0; python_version <= '3.8' google-cloud-bigquery==3.35.1; python_version >= '3.9' -pyarrow===12.0.1; python_version == '3.7' -pyarrow===17.0.0; python_version == '3.8' -pyarrow==21.0.0; python_version >= '3.9' +pyarrow===24.0.0 ipython===7.31.1; python_version == '3.7' ipython===8.10.0; python_version == '3.8' ipython===8.18.1; python_version == '3.9' From 41965ae3443e09eecf6270f528916cba27af9b17 Mon Sep 17 00:00:00 2001 From: David del Real Sifuentes Date: Thu, 9 Jul 2026 23:08:01 +0000 Subject: [PATCH 2/2] Remove === from requirements file for regular == --- bigquery_storage/to_dataframe/requirements.txt | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/bigquery_storage/to_dataframe/requirements.txt b/bigquery_storage/to_dataframe/requirements.txt index cd0f51e756a..6ab84896a61 100644 --- a/bigquery_storage/to_dataframe/requirements.txt +++ b/bigquery_storage/to_dataframe/requirements.txt @@ -1,17 +1,17 @@ google-auth==2.40.3 google-cloud-bigquery-storage==2.32.0 -google-cloud-bigquery===3.30.0; python_version <= '3.8' +google-cloud-bigquery==3.30.0; python_version <= '3.8' google-cloud-bigquery==3.35.1; python_version >= '3.9' -pyarrow===24.0.0 -ipython===7.31.1; python_version == '3.7' -ipython===8.10.0; python_version == '3.8' -ipython===8.18.1; python_version == '3.9' -ipython===8.33.0; python_version == '3.10' +pyarrow==24.0.0 +ipython==7.31.1; python_version == '3.7' +ipython==8.10.0; python_version == '3.8' +ipython==8.18.1; python_version == '3.9' +ipython==8.33.0; python_version == '3.10' ipython==9.4.0; python_version >= '3.11' ipywidgets==8.1.7 -pandas===1.3.5; python_version == '3.7' -pandas===2.0.3; python_version == '3.8' +pandas==1.3.5; python_version == '3.7' +pandas==2.0.3; python_version == '3.8' pandas==2.3.1; python_version >= '3.9' tqdm==4.67.1 -db-dtypes===1.4.2; python_version <= '3.8' +db-dtypes==1.4.2; python_version <= '3.8' db-dtypes==1.4.3; python_version >= '3.9'