Fix nokogiri vuln by jonh14lk · Pull Request #9 · inloco/apache-calcite

jonh14lk · 2026-05-21T15:05:02Z

Para resolver o alerta de vulnerabilidade do dependabot: https://github.com/inloco/apache-calcite/security/dependabot/3

…ery order by a field that is not present on the final projection (follow-up)

…ls to SEARCH 1. Generalize SargCollector in RexSimplify to handle comparisons with deterministic expressions. 2. Add Javadoc for accept variants in SargCollector 3. Prevent invalid SEARCH to interval/range transformations in DruidDateTimeUtils Some plan changes in DruidAdapterIT/DruidAdapter2IT are due to the added restrictions in DruidDateTimeUtils. When the SEARCH operand is not a plain column reference (RexInputRef) its generally unsafe to convert it to an interval; the entire DruidDateTimeUtils.createInterval was not meant to handle arbitrary complex expressions.

… BOOLEAN

…tOfBoundsException

…ion information Signed-off-by: Mihai Budiu <mbudiu@feldera.com>

…to an ASOF JOIN Signed-off-by: Mihai Budiu <mbudiu@feldera.com>

…betical order

…ifier expansion disabled

…TRICT

…nal and simplified expression in RexSimplify#verify

… casts Signed-off-by: Mihai Budiu <mbudiu@feldera.com>

…h a non-simplifiable expression

… using option "build and run [tests] using Intellij IDEA"

… using option "build and run [tests] using Intellij IDEA" Addendum to the previous commit: ignore files generated by Intellij during the compilation.

…XISTS in LEFT JOIN ON clause

…ument

…e the RelDataType

…an incorrect plan when sql has distinct agg-call with rollup

…ause

…RDER BY` produces invalid SQL

…to avoid loading all schemas

…N ON clause

…nerateSelectStar

…ating sub-query with aggregation

…G` non function `MEASURES`

…als`

… over GROUP BY keys

Signed-off-by: Mihai Budiu <mbudiu@feldera.com>

…fined Signed-off-by: Mihai Budiu <mbudiu@feldera.com>

…ation Signed-off-by: Mihai Budiu <mbudiu@feldera.com>

Signed-off-by: Mihai Budiu <mbudiu@feldera.com>

…rectly simplified

…nested window contains SqlCaseWhen

Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.19.1 to 1.19.3. - [Release notes](https://github.com/sparklemotion/nokogiri/releases) - [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md) - [Commits](sparklemotion/nokogiri@v1.19.1...v1.19.3) --- updated-dependencies: - dependency-name: nokogiri dependency-version: 1.19.3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

Copilot

Copilot wasn't able to review this pull request because it exceeds the maximum number of files (300). Try reducing the number of changed files and requesting a review from Copilot again.

rubenada and others added 30 commits October 28, 2025 18:06

[CALCITE-7135] SqlToRelConverter throws AssertionError on ARRAY subqu…

f26bd43

…ery order by a field that is not present on the final projection (follow-up)

[CALCITE-7223] Release Calcite 1.41.0

c838dd4

Site: Add announce 1.41.0 release

63633ac

Prepare for next development iteration

67e5bfc

[CALCITE-7258] RelBuilder.filter should throw if the condition is not…

8b5c17e

… BOOLEAN

[CALCITE-5223] AdjustProjectForCountAggregateRule throws ArrayIndexOu…

42ff295

…tOfBoundsException

[CALCITE-7251] SEARCH and WINDOW operations should carry source posit…

82cdcc7

…ion information Signed-off-by: Mihai Budiu <mbudiu@feldera.com>

[CALCITE-7268] SqlToRelConverter throws exception if lambda contains IN

18a8aed

[CALCITE-7273] CoreRules.JOIN_REDUCE_EXPRESSIONS throws when applied …

c18c045

…to an ASOF JOIN Signed-off-by: Mihai Budiu <mbudiu@feldera.com>

[CALCITE-7261] DiffRepository generation xml does not respect alpha…

253ed46

…betical order

Fix typos in some files

14ad949

[CALCITE-7276] SqlToRelConverter throws exception for UPDATE if ident…

eee63b2

…ifier expansion disabled

[CALCITE-7256] Make the fields of SqlTableRef public

61a989a

[CALCITE-7266] Optimize the "well-known count bug" correction

0f148c7

[CALCITE-7281] Deprecate NullPolicy.ANY in favor of NullPolicy.SEMI_S…

96c1b1f

…TRICT

[CALCITE-7290] Update json-path to 2.10.0

e8ac01c

[CALCITE-7291] Verify that the same exception is thrown for the origi…

8412793

…nal and simplified expression in RexSimplify#verify

[CALCITE-7293] MAP constructor cannot handle VARIANT values that need…

89da1b3

… casts Signed-off-by: Mihai Budiu <mbudiu@feldera.com>

[CALCITE-7292] Replace "case when true then deptno else null end" wit…

7bebc87

…h a non-simplifiable expression

[CALCITE-4947] Checkstyle fails on classes generated by Intellij when…

05ea8e4

… using option "build and run [tests] using Intellij IDEA"

[CALCITE-4947] Checkstyle fails on classes generated by Intellij when…

31a23f3

… using option "build and run [tests] using Intellij IDEA" Addendum to the previous commit: ignore files generated by Intellij during the compilation.

[CALCITE-7145] RexSimplify should not simplify IS NULL(10/0)

43e0d75

[CALCITE-6176] JOIN_SUB_QUERY_TO_CORRELATE rule incorrectly handles E…

eb0534d

…XISTS in LEFT JOIN ON clause

Replace replace with toLinux

85a5279

[CALCITE-7265] Allow RelOptFixture.relFn to be used with VolcanoPlanner

7e118bb

[CALCITE-7295] RexSimplify should simplify a division with a NULL arg…

51965cf

…ument

[CALCITE-7287] In simplifyLike, the makeLiteral call does not preserv…

49fa3ed

…e the RelDataType

[CALCITE-5465] Rule of AGGREGATE_EXPAND_DISTINCT_AGGREGATES produces …

37a3ecc

…an incorrect plan when sql has distinct agg-call with rollup

[CALCITE-6963] SqlToRelConverter fails when subquery is in join on cl…

a096c8f

…ause

snuyanzin and others added 26 commits April 19, 2026 11:29

[CALCITE-7474] LAST in MATCH_RECOGNIZE might return wrong result

8adab48

[CALCITE-7480] Unparse of MATCH_RECOGNIZE with PARTITION BY or `O…

a27257e

…RDER BY` produces invalid SQL

[CALCITE-7481] Support jdk24 in CI

c44ab8b

[CALCITE-7473] Better IntelliJ and VSCode .gitignore

95eecd8

[CALCITE-7477] Push schema pattern filter into sub-schema map lookup …

5be90f8

…to avoid loading all schemas

[CALCITE-7482] Wrong variablesSet used when rewriting subquery in JOI…

82e5ae7

…N ON clause

[CALCITE-7483] RelToSqlConverter generates SELECT * despite supportGe…

8a7ee97

…nerateSelectStar

[CALCITE-6757] Elasticsearch adapter returns wrong result when aggreg…

02d8003

…ating sub-query with aggregation

[CALCITE-7465] Make MATCH_RECOGNIZE tolerant to FINAL and `RUNNIN…

915c769

…G` non function `MEASURES`

[CALCITE-7486] Operators in MATCH_RECOGNIZE don't support `SqlLiter…

bda5286

…als`

Test cases for [CALCITE-6299] Support JOIN in Arrow adapter

265059f

[CALCITE-7479] Remove redundant aggregate group keys with FD

0344850

[CALCITE-7208] Allow downstream projects implement CREATE OR ALTER

752d5b4

[CALCITE-7484] Add a rule to eliminate redundant aggregates functions…

3505dba

… over GROUP BY keys

[CALCITE-7491] Literals of type TIMESTAMP WITH TIME ZONE cause crashes

ad273f0

Signed-off-by: Mihai Budiu <mbudiu@feldera.com>

[CALCITE-7360] The meaning of negation for unsigned numbers is not de…

b008df9

…fined Signed-off-by: Mihai Budiu <mbudiu@feldera.com>

[CALCITE-7490] PruneEmptyRules is ineffective for window statements

e00c693

[CALCITE-7497] Enable Lambda supports constant folding

fa951db

[CALCITE-7437] Type coercion for quantifier operators is incomplete

d7f64f7

[CALCITE-7498] The parser rejects the example hints from the document…

97fd524

…ation Signed-off-by: Mihai Budiu <mbudiu@feldera.com>

[CALCITE-7501] Assertion error in alias expansion for LEFT JOIN USING

e8e0dd5

Signed-off-by: Mihai Budiu <mbudiu@feldera.com>

[CALCITE-7499] COALESCE with args of different types might be incor…

b2e1ab3

…rectly simplified

[CALCITE-7502] RelToSqlConverter creates invalid sql when converting …

adb4174

…nested window contains SqlCaseWhen

[CALCITE-6291] Support converting ArrowTable to Queryable

cf4ffc1

Site: Update Ruben QL info

ad02464

Copilot AI review requested due to automatic review settings May 21, 2026 15:05

Copilot AI reviewed May 21, 2026

paulolieuthier closed this Jun 3, 2026

paulolieuthier deleted the fix-nokogiri-vuln branch June 3, 2026 12:36

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Fix nokogiri vuln#9

Fix nokogiri vuln#9
jonh14lk wants to merge 258 commits into
mainfrom
fix-nokogiri-vuln

jonh14lk commented May 21, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

19 participants

Conversation

jonh14lk commented May 21, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

19 participants