chore(deps): update go dependencies by red-hat-konflux[bot] · Pull Request #617 · securesign/trillian

red-hat-konflux · 2026-04-21T19:35:51Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
cel.dev/expr	indirect	patch	`v0.25.1` → `v0.25.2`
cloud.google.com/go/iam	indirect	minor	`v1.9.0` → `v1.11.0`
cloud.google.com/go/longrunning	indirect	major	`v0.11.0` → `v1.0.0`
cloud.google.com/go/monitoring	indirect	minor	`v1.27.0` → `v1.29.0`
cloud.google.com/go/spanner	require	minor	`v1.90.0` → `v1.91.0`
cloud.google.com/go/storage	indirect	patch	`v1.62.0` → `v1.62.1`
cloud.google.com/go/trace	indirect	minor	`v1.14.0` → `v1.16.0`
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp	indirect	minor	`v1.31.0` → `v1.32.0`
github.com/apache/beam/sdks/v2	require	minor	`v2.61.0` → `v2.73.0`
github.com/avast/retry-go/v4	indirect	major	`v4.6.0` → `v5.0.0`
github.com/aws/aws-sdk-go	indirect	patch	`v1.55.7` → `v1.55.8`
github.com/cheggaaa/pb/v3	indirect	patch	`v3.1.6` → `v3.1.7`
github.com/coreos/go-systemd/v22	indirect	minor	`v22.6.0` → `v22.7.0`
github.com/emicklei/go-restful/v3	indirect	minor	`v3.12.2` → `v3.13.0`
github.com/envoyproxy/go-control-plane/envoy	indirect	minor	`v1.36.0` → `v1.37.0`
github.com/fatih/color	indirect	minor	`v1.18.0` → `v1.19.0`
github.com/go-sql-driver/mysql	require	minor	`v1.9.3` → `v1.10.0`
github.com/goccy/go-json	indirect	patch	`v0.10.5` → `v0.10.6`
github.com/google/go-licenses/v2	require	patch	`v2.0.0-alpha.1` → `v2.0.1`
github.com/google/pprof	indirect	digest	`545e8a4` → `92041b7`
github.com/googleapis/gax-go/v2	indirect	minor	`v2.21.0` → `v2.22.0`
github.com/grpc-ecosystem/go-grpc-middleware	require	major	`v1.4.0` → `v2.3.3`
github.com/grpc-ecosystem/go-grpc-middleware/v2	indirect	minor	`v2.1.0` → `v2.3.3`
github.com/grpc-ecosystem/grpc-gateway/v2	indirect	minor	`v2.28.0` → `v2.29.0`
github.com/imdario/mergo	indirect	major	`v0.3.16` → `v1.0.2`
github.com/jackc/pgx/v5	require	patch	`v5.9.1` → `v5.9.2`
github.com/jhump/protoreflect/v2	indirect	patch	`v2.0.0-beta.1` → `v2.0.0-beta.2`
github.com/letsencrypt/pkcs11key/v4	require	patch	`v4.0.0` → `v4.0.1`
github.com/mattn/go-isatty	indirect	patch	`v0.0.21` → `v0.0.22`
github.com/onsi/ginkgo	indirect	major	`v1.16.5` → `v2.28.3`
github.com/prometheus/prometheus	indirect	minor	`v0.304.2` → `v0.311.3`
go.etcd.io/etcd/api/v3	indirect	patch	`v3.6.9` → `v3.6.11`
go.etcd.io/etcd/client/pkg/v3	indirect	patch	`v3.6.9` → `v3.6.11`
go.etcd.io/etcd/client/v3	require	patch	`v3.6.9` → `v3.6.11`
go.etcd.io/etcd/etcdctl/v3	require	patch	`v3.6.9` → `v3.6.11`
go.etcd.io/etcd/etcdutl/v3	indirect	patch	`v3.6.9` → `v3.6.11`
go.etcd.io/etcd/pkg/v3	indirect	patch	`v3.6.9` → `v3.6.11`
go.etcd.io/etcd/server/v3	require	patch	`v3.6.9` → `v3.6.11`
go.etcd.io/etcd/tests/v3	indirect	patch	`v3.6.9` → `v3.6.11`
go.etcd.io/etcd/v3	require	patch	`v3.6.9` → `v3.6.11`
go.opentelemetry.io/contrib/detectors/gcp	indirect	minor	`v1.39.0` → `v1.43.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace	indirect	minor	`v1.40.0` → `v1.43.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	indirect	minor	`v1.40.0` → `v1.43.0`
go.uber.org/zap	indirect	minor	`v1.27.1` → `v1.28.0`
go.yaml.in/yaml/v2	indirect	major	`v2.4.3` → `v3.0.4`
golang.org/x/crypto	require	minor	`v0.50.0` → `v0.51.0`
golang.org/x/exp	indirect	digest	`746e56f` → `74f9aab`
golang.org/x/mod	indirect	minor	`v0.35.0` → `v0.36.0`
golang.org/x/net	indirect	minor	`v0.53.0` → `v0.54.0`
golang.org/x/sys	require	minor	`v0.43.0` → `v0.44.0`
golang.org/x/term	indirect	minor	`v0.42.0` → `v0.43.0`
golang.org/x/text	indirect	minor	`v0.36.0` → `v0.37.0`
golang.org/x/tools	require	minor	`v0.44.0` → `v0.45.0`
google.golang.org/api	require	minor	`v0.276.0` → `v0.279.0`
google.golang.org/genproto	require	digest	`e10c466` → `3700d41`
google.golang.org/genproto/googleapis/api	require	digest	`e10c466` → `3700d41`
google.golang.org/genproto/googleapis/rpc	require	digest	`e10c466` → `3700d41`
google.golang.org/grpc	require	minor	`v1.80.0` → `v1.81.1`
google.golang.org/grpc/cmd/protoc-gen-go-grpc	require	patch	`v1.6.1` → `v1.6.2`
gopkg.in/evanphx/json-patch.v4	indirect	major	`v4.13.0` → `v5.9.11`
gopkg.in/yaml.v2	require	major	`v2.4.0` → `v3.0.1`
k8s.io/api	require	minor	`v0.35.4` → `v0.36.1`
k8s.io/apimachinery	require	minor	`v0.35.4` → `v0.36.1`
k8s.io/client-go	require	minor	`v0.35.4` → `v0.36.1`
k8s.io/klog/v2	require	minor	`v2.130.1` → `v2.140.0`
k8s.io/kube-openapi	indirect	digest	`ec9c827` → `ef417d0`
k8s.io/utils	require	digest	`28399d8` → `ff6756f`
sigs.k8s.io/structured-merge-diff/v6	indirect	minor	`v6.3.0` → `v6.4.0`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

google/cel-spec (cel.dev/expr)

`v0.25.2`

Compare Source

What's Changed

Add conformance tests for (string).reverse() by @jnthntatum in #491
Updates to the conformance tests for integer values in %e and %f format directives by @TristonianJones in #495
Add automated BCR publishing on release tags by @mmorel-35 in #498
Add clarification on scoping rules. by @jnthntatum in #506
Networking extension conformance tests by @TristonianJones in #507
Add conformance test cases for null assignability around repeated fields and maps by @l46kok in #510

New Contributors

@mmorel-35 made their first contribution in #498

Full Changelog: google/cel-spec@v0.25.1...v0.25.2

googleapis/google-cloud-go (cloud.google.com/go/longrunning)

`v0.13.0`

Compare Source

bigquery: UseLegacySQL options for CreateTable and QueryConfig. Use these
options to continue using Legacy SQL after the client switches its default
to Standard SQL.
bigquery: Support for updating dataset labels.
bigquery: Set DatasetIterator.ProjectID to list datasets in a project other
than the client's. DatasetsInProject is no longer needed and is deprecated.
bigtable: Fail ListInstances when any zones fail.
spanner: support decoding of slices of basic types (e.g. []string, []int64,
etc.)
logging/logadmin: UpdateSink no longer creates a sink if it is missing
(actually a change to the underlying service, not the client)
profiler: Service and ServiceVersion replace Target in Config.

`v0.12.0`

Compare Source

pubsub: Subscription.Receive now uses streaming pull.
pubsub: add Client.TopicInProject to access topics in a different project
than the client.
errors: renamed errorreporting. The errors package will be removed shortly.
datastore: improved retry behavior.
bigquery: support updates to dataset metadata, with etags.
bigquery: add etag support to Table.Update (BREAKING: etag argument added).
bigquery: generate all job IDs on the client.
storage: support bucket lifecycle configurations.

apache/beam (github.com/apache/beam/sdks/v2)

`v2.73.0`: Beam 2.73.0 release

Compare Source

We are happy to present the new 2.73.0 release of Beam.
This release includes both improvements and new functionality.
See the download page for this release.

For more information on changes in 2.73.0, check out the detailed release notes.

Highlights

I/Os

DebeziumIO (Java): added OffsetRetainer interface and FileSystemOffsetRetainer implementation to persist and restore CDC offsets across pipeline restarts, and exposed withStartOffset / withOffsetRetainer on DebeziumIO.Read and the cross-language ReadBuilder (#28248).

New Features / Improvements

(Python) Added BigQuery CDC streaming source (#37724)
Added ADKAgentModelHandler for running Google Agent Development Kit (ADK) agents (Python) (#37917).
(Python) Added exception chaining to preserve error context in CloudSQLEnrichmentHandler, processes utilities, and core transforms (#37422).
(Python) Added a pipeline option --experiments=pip_no_build_isolation to disable build isolation when installing dependencies in the runtime environment (#37331).
(Go) Added OrderedListState support to the Go SDK stateful DoFn API (#37629).
Added support for large pipeline options via a file (Python) (#37370).
Supported infer schema from dataclass (Python) (#22085). Default coder for typehint-ed (or set with_output_type) for non-frozen dataclasses changed to RowCoder. To preserve the old behavior (fast primitive coder), explicitly register the type with FastPrimitiveCoder.
Updates minimum Go version to 1.26.1 (#37897).
(Python) Added image embedding support in apache_beam.ml.rag package (#37628).
(Python) Added support for Python version 3.14 (#37247).

Breaking Changes

The Python SDK container's boot.go now passes pipeline options through a file instead of the PIPELINE_OPTIONS environment variable. If a user pairs a new Python SDK container with an older SDK version (which does not support the file-based approach), the pipeline options will not be recognized and the pipeline will fail. Users must ensure their SDK and container versions are synchronized (#37370).
Python DoFn.with_exception_handling now respects user DoFn typehints. This can break update compatibility if coders change. It can also break pipeline compilation if existing typehints are incorrect. To update safely sepcify the pipeline option --update_compatibility_version=2.72.0. To fix typehints replace any incorrect typehints that were previously ignored (#37590)

Bugfixes

Fixed ProcessManager not reaping child processes, causing zombie process accumulation on long-running Flink deployments (Java) (#37930).

Security Fixes

Fixed CVE-2023-46604 (CVSS 10.0) and CVE-2022-41678 by upgrading ActiveMQ from 5.14.5 to 5.19.2 (Java) (#37943).
Fixed CVE-2024-1597, CVE-2022-31197, and CVE-2022-21724 by upgrading PostgreSQL JDBC Driver from 42.2.16 to 42.6.2 (Java) (#37942).

List of Contributors

According to git shortlog, the following people contributed to the 2.73.0 release. Thank you to all contributors!

Abdelrahman Ibrahim, Ahmed Abualsaud, Alex Malao, Alexander Nieuwenhuijse, Andres Tiko, Andrew Crites, Arun Pandian, Bentsi Leviav, Bruno Volpato, Chamikara Jayalath, Chandra Kiran Bolla, Danny McCormick, Deji Ibrahim, Derrick Williams, Elia LIU, Esmelealem, Hannes Gustafsson, Jack McCluskey, Joey Tran, Kenneth Knowles, M Junaid Shaukat, Mansi Singh, Matej Aleksandrov, Mathijs Deelen, Mattie Fu, Praneet Nadella, Radek Stankiewicz, Radosław Stankiewicz, Reuven Lax, RuiLong J., S. Veyrié, Sakthivel Subramanian, Sam Whittle, Shubham Thakur, Shunping Huang, Subramanya V, Tarun Annapareddy, Tobias Kaymak, Valentyn Tymofieiev, Vitaly Terentyev, XQ Hu, Yi Hu, ZIHAN DAI, claudevdm, kishorepola, parveensania

`v2.72.0`: Beam 2.72.0 release

Compare Source

We are happy to present the new 2.72.0 release of Beam.
This release includes both improvements and new functionality.
See the download page for this release.

For more information on changes in 2.72.0, check out the detailed release notes.

Highlights

Flink 2.0 support (#36947).

I/Os

Add Datadog IO support (Java) (#37318).
Remove Pubsublite IO support, since service will be deprecated in March 2026. (#37375).
(Java) ClickHouse - migrating from the legacy JDBC driver (v0.6.3) to ClickHouse Java Client v2 (v0.9.6). See the class documentation for migration guide (#37610).
(Java) Upgraded GoogleAdsIO to use GoogleAdsIO API v23 (#37620).

New Features / Improvements

(Python) Added exception chaining to preserve error context in CloudSQLEnrichmentHandler, processes utilities, and core transforms (#37422).
(Python) Added a pipeline option --experiments=pip_no_build_isolation to disable build isolation when installing dependencies in the runtime environment (#37331).

Deprecations

(Python) Removed previously deprecated list_prefix method for filesystem interfaces (#37587).

Bugfixes

Fixed (Yaml) issue with validate compatible method (#37588).
Fixed (Yaml) issue with Create transform dealing with different type elements (#37585).

Security Fixes

Fixed CVE-2024-28397 by switching from js2py to pythonmonkey (Yaml) (#37560).

List of Contributors

According to git shortlog, the following people contributed to the 2.72.0 release. Thank you to all contributors!

Abdelrahman Ibrahim, Ahmed Abualsaud, Andrew Crites, Arun Pandian, Ben Feinstein, Bentsi Leviav, Celeste Zeng, Danny McCormick, Danny Mccormick, Derrick Williams, Elia LIU, Ganesh, Jack McCluskey, Kenneth Knowles, Labesse Kévin, M Junaid Shaukat, Mansi Singh, Mattie Fu, Nayan Mathur, Pablo Estrada, Pirzada Ahmad Faraz, Radek Stankiewicz, Radosław Stankiewicz, Robert Bradshaw, Rohan Sah, RuiLong J., Sakthivel Subramanian, Sam Whittle, Shaheer Amjad, Shunping Huang, Steven van Rossum, Tarun Annapareddy, Tobias Kaymak, Valentyn Tymofieiev, Vitaly Terentyev, Yi Hu, XQ Hu, ZIHAN DAI, apanich, chenxuesdu, claudevdm, franzonia137

`v2.71.0`: Beam 2.71.0 release

Compare Source

We are happy to present the new 2.71.0 release of Beam.
This release includes both improvements and new functionality.

For more information on changes in 2.71.0, check out the detailed release notes.

I/Os

(Java) Elasticsearch 9 Support (#36491).
(Java) Upgraded HCatalogIO to Hive 4.0.1 (#32189).

New Features / Improvements

Support configuring Firestore database on ReadFn transforms (Java) (#36904).
(Python) Inference args are now allowed in most model handlers, except where they are explicitly/intentionally disallowed (#37093).

Bugfixes

Fixed FirestoreV1 Beam connectors allow configuring inconsistent project/database IDs between RPC requests and routing headers #36895 (Java) (#36895).
Logical type and coder registry are saved for pipelines in the case of default pickler. This fixes a side effect of switching to cloudpickle as default pickler in Beam 2.65.0 (Python) (#35738).

Known Issues

For the most up to date list of known issues, see https://github.com/apache/beam/blob/master/CHANGES.md

List of Contributors

According to git shortlog, the following people contributed to the 2.71.0 release. Thank you to all contributors!

Abacn, Ahmed Abualsaud, Amar3tto, Andrew Crites, apanich, Arun, Arun Pandian, assaf127, Chamikara Jayalath, CherisPatelInfocusp, Cheskel Twersky, Claire McGinty, Claude, Danny Mccormick, dependabot[bot], Derrick Williams, Egbert van der Wal, Evan Galpin, Ganesh, github-actions[bot], hekk-kaori-maeda, Jack Dingilian, Jack McCluskey, JayajP, Jiang Zhu, Kenneth Knowles, liferoad, M Junaid Shaukat, Nayan Mathur, Noah Stapp, Paco Avila, Radek Stankiewicz, Radosław Stankiewicz, Robert Stupp, Sam Whittle, Shunping Huang, Steven van Rossum, Suvrat Acharya, Tarun Annapareddy, tvalentyn, Utkarsh Parekh, Vitaly Terentyev, Xiaochu Liu, Yala Huang Feng, Yi Hu, Yu Watanabe, zhan7236

`v2.70.0`: Beam 2.70.0 release

Compare Source

We are happy to present the new 2.70.0 release of Beam.
This release includes both improvements and new functionality.
See the download page for this release.

For more information on changes in 2.70.0, check out the detailed release notes.

Highlights

Flink 1.20 support added (#32647).

New Features / Improvements

Python examples added for Milvus search enrichment handler on Beam Website
including jupyter notebook example (Python) (#36176).
Milvus sink I/O connector added (Python) (#36702).
Now Beam has full support for Milvus integration including Milvus enrichment and sink operations.

Breaking Changes

(Python) Some Python dependencies have been split out into extras. To ensure all previously installed dependencies are installed, when installing Beam you can pip install apache-beam[gcp,interactive,yaml,redis,hadoop,tfrecord], though most users will not need all of these extras (#34554).

Deprecations

(Python) Python 3.9 reached EOL in October 2025 and support for the language version has been removed. (#36665).

List of Contributors

According to git shortlog, the following people contributed to the 2.70.0 release. Thank you to all contributors!

Abdelrahman Ibrahim, Ahmed Abualsaud, Alex Chermenin, Andrew Crites, Arun Pandian, Celeste Zeng, Chamikara Jayalath, Chenzo, Claire McGinty, Danny McCormick, Derrick Williams, Dustin Rhodes, Enrique Calderon, Ian Liao, Jack McCluskey, Jessica Hsiao, Joey Tran, Karthik Talluri, Kenneth Knowles, Maciej Szwaja, Mehdi.D, Mohamed Awnallah, Praneet Nadella, Radek Stankiewicz, Radosław Stankiewicz, Reuven Lax, RuiLong J., S. Veyrié, Sam Whittle, Shunping Huang, Stephan Hoyer, Steven van Rossum, Tanu Sharma, Tarun Annapareddy, Tom Stepp, Valentyn Tymofieiev, Vitaly Terentyev, XQ Hu, Yi Hu, changliiu, claudevdm, fozzie15, kristynsmith, wolfchris-google

`v2.69.0`: Beam 2.69.0 release

Compare Source

We are happy to present the new 2.69.0 release of Beam.
This release includes both improvements and new functionality.
See the download page for this release.

For more information on changes in 2.69.0, check out the detailed release notes.

Highlights

(Python) Add YAML Editor and Visualization Panel (#35772).
(Java) Java 25 Support (#35772).

I/Os

Upgraded Iceberg dependency to 1.10.0 (#36123).

New Features / Improvements

Enhance JAXBCoder with XMLInputFactory support (Java) (#36446).
Python examples added for CloudSQL enrichment handler on Beam website (Python) (#35473).
Support for batch mode execution in WriteToPubSub transform added (Python) (#35990).
Added official support for Python 3.13 (#34869).
Added an optional output_schema verification to all YAML transforms (#35952).
Support for encryption when using GroupByKey added, along with --gbek pipeline option to automatically replace all GroupByKey transforms (Java/Python) (#36214).

Breaking Changes

(Python) dill is no longer a required, default dependency for Apache Beam (#21298).
- This change only affects pipelines that explicitly use the pickle_library=dill pipeline option.
- While dill==0.3.1.1 is still pre-installed on the official Beam SDK base images, it is no longer a direct dependency of the apache-beam Python package. This means it can be overridden by other dependencies in your environment.
- If your pipeline uses pickle_library=dill, you must manually ensure dill==0.3.1.1 is installed in both your submission and runtime environments.
  - Submission environment: Install the dill extra in your local environment pip install apache-beam[gcpdill].
  - Runtime (worker) environment: Your action depends on how you manage your worker's environment.
    - If using default containers or custom containers with the official Beam base image e.g. FROM apache/beam_python3.10_sdk:2.69.0
      - Add dill==0.3.1.1 to your worker's requirements file (e.g., requirements.txt)
      - Pass this file to your pipeline using the --requirements_file requirements.txt pipeline option (For more details see managing Dataflow dependencies).
    - If custom containers with a non-Beam base image e.g. FROM python:3.9-slim
      - Install apache-beam with the dill extra in your docker file e.g. RUN pip install --no-cache-dir apache-beam[gcp,dill]
- If there is a dill version mismatch between submission and runtime environments you might encounter unpickling errors like Can't get attribute '_create_code' on <module 'dill._dill' from....
- If dill is not installed in the runtime environment you will see the error ImportError: Pipeline option pickle_library=dill is set, but dill is not installed...
- Report any issues you encounter when using pickle_library=dill to the GitHub issue (#21298)
(Python) Added a pickle_library=dill_unsafe pipeline option. This allows overriding dill==0.3.1.1 using dill as the pickle_library. Use with extreme caution. Other versions of dill has not been tested with Apache Beam (#21298).
(Python) The deterministic fallback coder for complex types like NamedTuple, Enum, and dataclasses now normalizes filepaths for better determinism guarantees. This affects streaming pipelines updating from 2.68 to 2.69 that utilize this fallback coder. If your pipeline is affected, you may see a warning like: "Using fallback deterministic coder for type X...". To update safely sepcify the pipeline option --update_compatibility_version=2.68.0 (#36345).
(Python) Fixed transform naming conflict when executing DataTransform on a dictionary of PColls (#30445).
This may break update compatibility if you don't provide a --transform_name_mapping.
Removed deprecated Hadoop versions (2.10.2 and 3.2.4) that are no longer supported for Iceberg from IcebergIO (#36282).
(Go) Coder construction on SDK side is more faithful to the specs from runners without stripping length-prefix. This may break streaming pipeline update as the underlying coder could be changed (#36387).
Minimum Go version for Beam Go updated to 1.25.2 (#36461).
(Java) DoFn OutputReceiver now requires implementing a builder method as part of extended metadata support for elements (#34902).
(Java) Removed ProcessContext outputWindowedValue introduced in 2.68 that allowed setting offset and record Id. Use OutputReceiver's builder to set those field ([#36523]#36523).

Bugfixes

Fixed passing of pipeline options to x-lang transforms when called from the Java SDK (Java) (#36443).
PulsarIO has now changed support status from incomplete to experimental. Both read and writes should now minimally
function (un-partitioned topics, without schema support, timestamp ordered messages for read) (Java)
(#36141).
Fixed Spanner Change Stream reading stuck issue due to watermark of partition moving backwards (#36470).

List of Contributors

According to git shortlog, the following people contributed to the 2.69.0 release. Thank you to all contributors!

Abdelrahman Ibrahim, Ahmed Abualsaud, Andrew Crites, Arun Pandian, Bryan Dang, Chamikara Jayalath, Charles Nguyen, Chenzo, Clay Johnson, Danny McCormick, David A, Derrick Williams, Enrique Calderon, Hai Joey Tran, Ian Liao, Ian Mburu, Jack McCluskey, Jiang Zhu, Joey Tran, Kenneth Knowles, Kyle Stanley, Maciej Szwaja, Minbo Bae, Mohamed Awnallah, Radek Stankiewicz, Radosław Stankiewicz, Razvan Culea, Reuven Lax, Sagnik Ghosh, Sam Whittle, Shunping Huang, Steven van Rossum, Talat UYARER, Tanu Sharma, Tarun Annapareddy, Tom Stepp, Valentyn Tymofieiev, Vitaly Terentyev, XQ Hu, Yi Hu, Yilei, claudevdm, flpablo, fozzie15, johnjcasey, lim1t, parveensania, yashu

`v2.68.0`: Beam 2.68.0 release

Compare Source

We are happy to present the new 2.68.0 release of Beam.
This release includes both improvements and new functionality.
See the download page for this release.

For more information on changes in 2.68.0, check out the detailed release notes.

Highlights

[Python] Prism runner now enabled by default for most Python pipelines using the direct runner (#34612). This may break some tests, see #34612 for details on how to handle issues.

I/Os

Upgraded Iceberg dependency to 1.9.2 (#35981)

New Features / Improvements

BigtableRead Connector for BeamYaml added with new Config Param (#35696)
MongoDB Java driver upgraded from 3.12.11 to 5.5.0 with API refactoring and GridFS implementation updates (Java) (#35946).
Introduced a dedicated module for JUnit-based testing support: sdks/java/testing/junit, which provides TestPipelineExtension for JUnit 5 while maintaining backward compatibility with existing JUnit 4 TestRule-based tests (Java) (#18733, #35688).
- To use JUnit 5 with Beam tests, add a test-scoped dependency on org.apache.beam:beam-sdks-java-testing-junit.
Google CloudSQL enrichment handler added (Python) (#34398).
Beam now supports data enrichment capabilities using SQL databases, with built-in support for:
- Managed PostgreSQL, MySQL, and Microsoft SQL Server instances on CloudSQL
- Unmanaged SQL database instances not hosted on CloudSQL (e.g., self-hosted or on-premises databases)
[Python] Added the ReactiveThrottler and ThrottlingSignaler classes to streamline throttling behavior in DoFns, expose throttling mechanisms for users (#35984)
Added a pipeline option to specify the processing timeout for a single element by any PTransform (Java/Python/Go) (#35174).
- When specified, the SDK harness automatically restarts if an element takes too long to process. Beam runner may then retry processing of the same work item.
- Use the --element_processing_timeout_minutes option to reduce the chance of having stalled pipelines due to unexpected cases of slow processing, where slowness might not happen again if processing of the same element is retried.
(Python) Adding GCP Spanner Change Stream support for Python (apache_beam.io.gcp.spanner) (#24103).

Breaking Changes

Previously deprecated Beam ZetaSQL component has been removed (#34423).
ZetaSQL users could migrate to Calcite SQL with BigQuery dialect enabled.
Upgraded Beam vendored Calcite to 1.40.0 for Beam SQL (#35483), which
improves support for BigQuery and other SQL dialects. Note: Minor behavior changes are observed such as output
significant digits related to casting.
(Python) The deterministic fallback coder for complex types like NamedTuple, Enum, and dataclasses now uses cloudpickle instead of dill. If your pipeline is affected, you may see a warning like: "Using fallback deterministic coder for type X...". You can revert to the previous behavior by using the pipeline option --update_compatibility_version=2.67.0 (35725). Report any pickling related issues to #34903
(Python) Prism runner now enabled by default for most Python pipelines using the direct runner (#34612). This may break some tests, see #34612 for details on how to handle issues.
Dropped Java 8 support for IO expansion-service. Cross-language pipelines using this expansion service will need a Java11+ runtime (#35981.

Deprecations

Python SDK native SpannerIO (apache_beam/io/gcp/experimental/spannerio) is deprecated. Use cross-language wrapper
(apache_beam/io/gcp/spanner) instead (Python) (#35860).
Samza runner is deprecated and scheduled for removal in Beam 3.0 (#35448).
Twister2 runner is deprecated and scheduled for removal in Beam 3.0 (#35905)).

Bugfixes

(Python) Fixed Java YAML provider fails on Windows (#35617).
Fixed BigQueryIO creating temporary datasets in wrong project when temp_dataset is specified with a different project than the pipeline project. For some jobs, temporary datasets will now be created in the correct project (Python) (#35813).
(Go) Fix duplicates due to reads after blind writes to Bag State (#35869).
- Earlier Go SDK versions can avoid the issue by not reading in the same call after a blind write.

List of Contributors

According to git shortlog, the following people contributed to the 2.68.0 release. Thank you to all contributors!

Ahmed Abualsaud, Andrew Crites, Ashok Devireddy, Chamikara Jayalath, Charles Nguyen, Danny McCormick, Davda James, Derrick Williams, Diego Hernandez, Dip Patel, Dustin Rhodes, Enrique Calderon, Hai Joey Tran, Jack McCluskey, Kenneth Knowles, Keshav, Khorbaladze A., LEEKYE, Lanny Boarts, Mattie Fu, Minbo Bae, Mohamed Awnallah, Naireen Hussain, Nathaniel Young, Radosław Stankiewicz, Razvan Culea, Robert Bradshaw, Robert Burke, Sam Whittle, Shehab, Shingo Furuyama, Shunping Huang, Steven van Rossum, Suvrat Acharya, Svetak Sundhar, Tarun Annapareddy, Tom Stepp, Valentyn Tymofieiev, Vitaly Terentyev, XQ Hu, Yi Hu, apanich, arnavarora2004, claudevdm, flpablo, kristynsmith, shreyakhajanchi

`v2.67.0`: Beam 2.67.0 release

Compare Source

We are happy to present the new 2.67.0 release of Beam.
This release includes both improvements and new functionality.
See the download page for this release.

For more information on changes in 2.67.0, check out the detailed release notes.

Highlights

I/Os

Debezium IO upgraded to 3.1.1 requires Java 17 (Java) (#34747).
Add support for streaming writes in IOBase (Python)
Implement support for streaming writes in FileBasedSink (Python)
Expose support for streaming writes in TextIO (Python)

New Features / Improvements

Added support for Processing time Timer in the Spark Classic runner (#33633).
Add pip-based install support for JupyterLab Sidepanel extension (#35397).
[IcebergIO] Create tables with a specified table properties (#35496)
Add support for comma-separated options in Python SDK (Python) (#35580).
Python SDK now supports comma-separated values for experiments and dataflow_service_options,
matching Java SDK behavior while maintaining backward compatibility.
Milvus enrichment handler added (Python) (#35216).
Beam now supports Milvus enrichment handler capabilities for vector, keyword,
and hybrid search operations.
[Beam SQL] Add support for DATABASEs, with an implementation for Iceberg (#35637)
Respect BatchSize and MaxBufferingDuration when using JdbcIO.WriteWithResults. Previously, these settings were ignored (#35669).

Breaking Changes

Go: The pubsubio.Read transform now accepts ReadOptions as a value type instead of a pointer, and requires exactly one of Topic or Subscription to be set (they are mutually exclusive). Additionally, the ReadOptions struct now includes a Topic field for specifying the topic directly, replacing the previous topic parameter in the Read function signature ([#35369])(#35369).
SQL: The ParquetTable external table provider has changed its handling of the LOCATION property. To read from a directory, the path must now end with a trailing slash (e.g., LOCATION '/path/to/data/'). Previously, a trailing slash was not required. This change was made to enable support for glob patterns and single-file paths ([#35582])(#35582).

Bugfixes

[YAML] Fixed handling of missing optional fields in JSON parsing (#35179).
[Python] Fix WriteToBigQuery transform using CopyJob does not work with WRITE_TRUNCATE write disposition (#34247)
[Python] Fixed dicomio tags mismatch in integration tests (#30760).
[Java] Fixed spammy logging issues that affected versions 2.64.0 to 2.66.0.

Known Issues

(#35666). YAML Flatten incorrectly drops fields when input PCollections' schema are different. This issue exists for all versions since 2.52.0.

List of Contributors

According to git shortlog, the following people contributed to the 2.66.0 release. Thank you to all contributors!

Aditya Shukla, Ahmed Abualsaud, Arun Pandian, Boris Li, Chamikara Jayalath, Charles Nguyen, Chenzo, Danny McCormick, David Adeniji, Derrick Williams, Dmytro Tsyliuryk, Dustin Rhodes, Enrique Calderon, Gottipati Gautam, Hai Joey Tran, Hunor Portik, Jack McCluskey, Kenneth Knowles, Khorbaladze A., Marcio Sugar, Minh Son Nguyen, Mohamed Awnallah, Nathaniel Young, Nhon Dinh, Quentin Sommer, Rafael Raposo, Rakesh Kumar, Razvan Culea, Reuven Lax, Robert Bradshaw, Sam Whittle, Shunping Huang, Steven van Rossum, Talat UYARER, Tanu Sharma, Tarun Annapareddy, Tobi Kaymak, Tobias Kaymak, Valentyn Tymofieiev, Veronica Wasson, Vitaly Terentyev, XQ Hu, Yi Hu, akashorabek, arnavarora2004, changliiu, claudevdm, fozzie15, mvhensbergen, twosom

`v2.66.0`: Beam 2.66.0 release

Compare Source

We are happy to present the new 2.66.0 release of Beam.
This release includes both improvements and new functionality.

For more information on changes in 2.66.0, check out the detailed release notes.

Beam 3.0.0 Development Highlights

[Java] Java 8 support is now deprecated. It is still supported until Beam 3.
From now, pipeline submitted by Java 8 client uses Java 11 SDK container for
remote pipeline execution (35064).

Highlights

[Python] Several quality-of-life improvements to the vLLM model handler. If you use Beam RunInference with vLLM model handlers, we strongly recommend updating past this release.

I/Os

[IcebergIO] Now available with Beam SQL! (#34799)
[IcebergIO] Support reading with column pruning (#34856)
[IcebergIO] Support reading with pushdown filtering (#34827)
[IcebergIO] Create tables with a specified partition spec (#34966, #35268)
[IcebergIO] Dynamically create namespaces if needed (#35228)

New Features / Improvements

[Beam SQL] Introducing Beam Catalogs (#35223)
Adding Google Storage Requests Pays feature (Golang)(#30747).
[Python] Prism runner now auto-enabled for some Python pipelines using the direct runner (#34921).
[YAML] WriteToTFRecord and ReadFromTFRecord Beam YAML support
Python: Added JupyterLab 4.x extension compatibility for enhanced notebook integration (#34495).

Breaking Changes

Yapf version upgraded to 0.43.0 for formatting (Python) (#34801).
Python: Added JupyterLab 4.x extension compatibility for enhanced notebook integration (#34495).
Python: Argument abbreviation is no longer enabled within Beam. If you previously abbreviated arguments (e.g. --r for --runner), you will now need to specify the whole argument (#34934).
Java: Users of ReadFromKafkaViaSDF transform might encounter pipeline graph compatibility issues when updating the pipeline. To mitigate, set the updateCompatibilityVersion option to the SDK version used for the original pipeline, example --updateCompatabilityVersion=2.64.0
Python: Updated AlloyDBVectorWriterConfig API to align with new PostgresVectorWriter transform. Heres a quick guide to update your code: (#35225)

Bugfixes

(Java) Fixed CassandraIO ReadAll does not let a pipeline handle or retry exceptions (#34191).
[Python] Fixed vLLM model handlers breaking Beam logging. (#35053).
[Python] Fixed vLLM connection leaks that caused a throughput bottleneck and underutilization of GPU (#35053).
[Python] Fixed vLLM server recovery mechanism in the event of a process termination (#35234).
(Python) Fixed cloudpickle overwriting class states every time loading a same object of dynamic class (#35062).
[Python] Fixed pip install apache-beam[interactive] causes crash on google colab (#35148).
[IcebergIO] Fixed Beam <-> Iceberg conversion logic for arrays of structs and maps of structs (#35230).

Known Issues

N/A

List of Contributors

According to git shortlog, the following people contributed to the 2.66.0 release. Thank you to all contributors!

Aditya Yadav, Adrian Stoll, Ahmed Abualsaud, Bhargavkonidena, Chamikara Jayalath, Charles Nguyen, Chenzo, Damon, Danny McCormick, Derrick Williams, Enrique Calderon, Hai Joey Tran, Jack McCluskey, Kenneth Knowles, Leonardo Cesar Borges, Michael Gruschke, Minbo Bae, Minh Son Nguyen, Niel Markwick, Radosław Stankiewicz, Rakesh Kumar, Robert Bradshaw, S. Veyrié, Sam Whittle, Shubham Jaiswal, Shunping Huang, Steven van Rossum, Tanu Sharma, Vardhan Thigle, Vitaly Terentyev, XQ Hu, Yi Hu, akashorabek, atask-g, atognolag, bullet03, changliiu, claudevdm, fozzie15, ikarapanca, kristynsmith, Pablo Rodriguez Defino, tvalentyn, twosom, wollowizard

`v2.65.0`: Beam 2.65.0 Release

Compare Source

We are happy to present the new 2.65.0 release of Beam.
This release includes both improvements and new functionality.
See the download page for this release.

For more information on changes in 2.65.0, check out the detailed release notes.

Highlights

I/Os

Upgraded GoogleAdsAPI to v19 for GoogleAdsIO (Java) (#34497). Changed PTransform method from version-specified (v17()) to current() for better backward compatibility in the future.
Added support for writing to Pubsub with ordering keys (Java) (#21162)

New Features / Improvements

Added support for streaming side-inputs in the Spark Classic runner (#18136).

Breaking Changes

[Python] Cloudpickle is set as the default pickle_library, where previously
dill was the default in #34695.
For known issues, reporting new issues, and understanding cloudpickle
behavior refer to #34903.
[Python] Reshuffle now preserves PaneInfo, where previously PaneInfo was lost
after reshuffle. To opt out of this change, set the
update_compatibility_version to a previous Beam version e.g. "2.64.0".
(#34348).
[Python] PaneInfo is encoded by PaneInfoCoder, where previously PaneInfo was
encoded with FastPrimitivesCoder falling back to PickleCoder. This only
affects cases where PaneInfo is directly stored as an element.
(#34824).
[Python] BigQueryFileLoads now adds a Reshuffle before triggering load jobs.
This fixes a bug where there can be data loss in a streaming pipeline if there
is a pending load job during autoscaling. To opt out of this change, set the
update_compatibility_version to a previous Beam version e.g. "2.64.0".
(#34657)
[YAML] Kafka source and sink will be automatically replaced with compatible managed transforms.
For older Beam versions, streaming update compatiblity can be maintained by specifying the pipeline
option update_compatibility_version (#34767).

Deprecations

Beam ZetaSQL is deprecated and will be removed no earlier than Beam 2.68.0 (#34423).
Users are recommended to switch to Calcite SQL dialect.

Bugfixes

Fixed read Beam rows from cross-lang transform (for example, ReadFromJdbc) involving negative 32-bit integers incorrectly decoded to large integers (#34089)
(Java) Fixed SDF-based KafkaIO (ReadFromKafkaViaSDF) to properly handle custom deserializers that extend Deserializer interface(#34505)
[Python] TypedDict typehints are now compatible with Mapping and Dict type annotations.

Security Fixes

Fixed CVE-2025-30065 (Java) (#34573)

Known Issues

N/A

List of Contributors

According to git shortlog, the following people contributed to the 2.65.0 release. Thank you to all contributors!

Aaron Trelstad, Adrian Stoll, Ahmed Abualsaud, akashorabek, Arun Pandian, Bentsi Leviav, Bryan Dang, Celeste Zeng, Chamikara Jayalath, claudevdm, Danny McCormick, Derrick Williams, Ozzie Fernandez, Gabija Balvociute, Gayatri Kate, illoise, Jack McCluskey, Jan Lukavský, Jinho Lee, Justin Bandoro, Kenneth Knowles, XQ Hu, Luke Tsekouras, Martin Trieu, Matthew Suozzo, Naireen Hussain, Niel Markwick, Radosław Stankiewicz, Razvan Culea, Robert Bradshaw, Robert Burke, RuiLong J., Sam Whittle, Sarthak, Shubham Jaiswal, Shunping Huang, Steven van Rossum, Suvrat Acharya, sveyrie@luminatedata.com, Talat Uyarer, TanuSharma2511, Tobias Kaymak, Tom Stepp, Valentyn Tymofieiev, twosom, Vitaly Terentyev, wollowizard, Yi Hu, Yifan Ye, Zilin Du

`v2.64.0`: Beam 2.64.0 release

Compare Source

We are happy to present the new 2.64.0 release of Beam.
This release includes both improvements and new functionality.
See the download page for this release.

For more information on changes in 2.64.0, check out the detailed release notes.

Highlights

Managed API for Java and Python supports [key I/O connectors](https://beam

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

red-hat-konflux · 2026-04-21T19:35:52Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

1 additional dependency was updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.25.0` -> `1.26.0`
`google.golang.org/protobuf`	`v1.36.11` -> `v1.36.12-0.20260120151049-f2248ac996af`

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux · 2026-05-15T14:27:49Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: module github.com/apache/beam/sdks/v2@v2.73.0 requires go >= 1.26.0; switching to go1.26.3
go: downloading go1.26.3 (linux/amd64)
go: github.com/imdario/mergo@v1.0.2: parsing go.mod:
	module declares its path as: dario.cat/mergo
	        but was required as: github.com/imdario/mergo

red-hat-konflux Bot added the dependencies label Apr 21, 2026

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch 18 times, most recently from 0dfd4b2 to 441a764 Compare April 29, 2026 19:02

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch 10 times, most recently from 64ae2da to 467dc07 Compare May 2, 2026 18:44

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch 26 times, most recently from 1b4b8f5 to b607d9d Compare May 12, 2026 16:46

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch from b607d9d to 983431a Compare May 13, 2026 02:57

chore(deps): update go dependencies

cc5ddc0

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch from 983431a to cc5ddc0 Compare May 15, 2026 14:27

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update go dependencies#617

chore(deps): update go dependencies#617
red-hat-konflux[bot] wants to merge 1 commit into
release-1.3from
konflux/mintmaker/release-1.3/go-deps

red-hat-konflux Bot commented Apr 21, 2026 •

edited

Loading

Uh oh!

red-hat-konflux Bot commented Apr 21, 2026 •

edited

Loading

Uh oh!

red-hat-konflux Bot commented May 15, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

red-hat-konflux Bot commented Apr 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v0.25.2

What's Changed

New Contributors

v0.13.0

v0.12.0

v2.73.0: Beam 2.73.0 release

Highlights

I/Os

New Features / Improvements

Breaking Changes

Bugfixes

Security Fixes

List of Contributors

v2.72.0: Beam 2.72.0 release

Highlights

I/Os

New Features / Improvements

Deprecations

Bugfixes

Security Fixes

List of Contributors

v2.71.0: Beam 2.71.0 release

I/Os

New Features / Improvements

Bugfixes

Known Issues

List of Contributors

v2.70.0: Beam 2.70.0 release

Highlights

New Features / Improvements

Breaking Changes

Deprecations

List of Contributors

v2.69.0: Beam 2.69.0 release

Highlights

I/Os

New Features / Improvements

Breaking Changes

Bugfixes

List of Contributors

v2.68.0: Beam 2.68.0 release

Highlights

I/Os

New Features / Improvements

Breaking Changes

Deprecations

Bugfixes

List of Contributors

v2.67.0: Beam 2.67.0 release

Highlights

I/Os

New Features / Improvements

Breaking Changes

Bugfixes

Known Issues

List of Contributors

v2.66.0: Beam 2.66.0 release

Beam 3.0.0 Development Highlights

Highlights

I/Os

New Features / Improvements

Breaking Changes

Bugfixes

Known Issues

List of Contributors

v2.65.0: Beam 2.65.0 Release

Highlights

I/Os

New Features / Improvements

Breaking Changes

Deprecations

Bugfixes

Security Fixes

Known Issues

List of Contributors

v2.64.0: Beam 2.64.0 release

red-hat-konflux Bot commented Apr 21, 2026 •

edited

Loading

`v0.25.2`

`v0.13.0`

`v0.12.0`

`v2.73.0`: Beam 2.73.0 release

`v2.72.0`: Beam 2.72.0 release

`v2.71.0`: Beam 2.71.0 release

`v2.70.0`: Beam 2.70.0 release

`v2.69.0`: Beam 2.69.0 release

`v2.68.0`: Beam 2.68.0 release

`v2.67.0`: Beam 2.67.0 release

`v2.66.0`: Beam 2.66.0 release

`v2.65.0`: Beam 2.65.0 Release

`v2.64.0`: Beam 2.64.0 release

red-hat-konflux Bot commented Apr 21, 2026 •

edited

Loading