Skip to content

Upgrade fsspec and opentelemetry-api in Python projects - #1124

Merged
jeancochrane merged 1 commit into
masterfrom
jeancochrane/upgrade-fsspec-and-opentelemetry-api
Nov 4, 2026
Merged

jeancochrane merged 1 commit into
masterfrom
jeancochrane/upgrade-fsspec-and-opentelemetry-api

Conversation

@jeancochrane

@jeancochrane jeancochrane commented Nov 3, 2026 •

Copy link
Copy Markdown
Member

This small PR upgrades two transitive dependencies in our Python projects, fsspec and opentelemetry-api, in order to resolve their respective Dependabot vulnerabilities.

I didn't do extensive testing of these upgrades, because the our direct dependencies are configured to allow for these version upgrades: dbt-core allows any version of opentelemetry-api less than 2, while PyAthena does not restrict the version of fsspec at all, in contrast to its other transitive dependencies. My assumption is that our direct dependencies would have added version limits if these upgrades could break something.

@wrridgeway wrridgeway left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks Jean!

@jeancochrane
jeancochrane merged commit d87aae0 into master Nov 4, 2026
11 checks passed
@jeancochrane
jeancochrane deleted the jeancochrane/upgrade-fsspec-and-opentelemetry-api branch November 4, 2026 18:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants