Skip to content

chore(security): remediate OSV findings - #1015

Merged
vuanhphung merged 2 commits into
mainfrom
ai/security-scan-remediation
Nov 8, 2026
Merged

vuanhphung merged 2 commits into
mainfrom
ai/security-scan-remediation

Conversation

@peco-engineer-bot

Copy link
Copy Markdown
Contributor

Summary

Automated remediation for findings from the weekly OSS driver security scan.

Updates:

  • oauthlib@4.0.0 -> patched Poetry resolution

The repository's Security Scan check is the authoritative validation. This PR is draft until that check and the normal driver CI pass.

Source: https://github.com/databricks/databricks-driver-test/actions/runs/42453259272

Signed-off-by: peco-engineer-bot[bot] <287056288+peco-engineer-bot[bot]@users.noreply.github.com>
@peco-engineer-bot peco-engineer-bot Bot added skip-coverage Skip the coverage fan-out for this PR (no tracking issue opened in databricks-driver-test) ai-assisted labels Nov 8, 2026
@vuanhphung
vuanhphung marked this pull request as ready for review November 8, 2026 17:29

@peco-review-bot peco-review-bot Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ No issues identified by the review bot.

Signed-off-by: Vu Anh Phung <vu.phung@databricks.com>

@peco-review-bot peco-review-bot Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ No issues identified by the review bot.

@vuanhphung
vuanhphung enabled auto-merge November 8, 2026 18:42
@vuanhphung
vuanhphung added this pull request to the merge queue Nov 8, 2026
Merged via the queue into main with commit bfd1f24 Nov 8, 2026
64 checks passed
@vuanhphung
vuanhphung deleted the ai/security-scan-remediation branch November 8, 2026 19:10
cathleeny added a commit that referenced this pull request Nov 9, 2026
Brings in #1015, which scopes the GetColumns e2e test to the current catalog and bumps oauthlib to 4.0.1.

Co-authored-by: Isaac <no-reply@databricks.com>
Signed-off-by: Cathleen Yan <58714163+cathleeny@users.noreply.github.com>

This branch was previously deployed

1 inactive deployment
azure-prod — 42618596 Deployed Nov 8, 2026 by vuanhphung via lts-install (13.3.x-scala2.12, pyarrow) #504
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ai-assisted skip-coverage Skip the coverage fan-out for this PR (no tracking issue opened in databricks-driver-test)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant