Skip to content

Objectstore integration on native write and merge path - #22552

Draft
rayshrey wants to merge 2 commits into
opensearch-project:mainfrom
rayshrey:objectstore-write-path
Draft

Objectstore integration on native write and merge path#22552
rayshrey wants to merge 2 commits into
opensearch-project:mainfrom
rayshrey:objectstore-write-path

Conversation

@rayshrey

Copy link
Copy Markdown
Contributor

Description

[Describe what this change achieves]

Related Issues

Resolves #[Issue number to be closed when this PR is merged]

Check List

  • Functionality includes testing.
  • API changes companion pull request created, if applicable.
  • Public documentation issue/PR created, if applicable.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

rayshrey added 2 commits July 22, 2026 15:42
…va side

Signed-off-by: rayshrey <rayshrey@amazon.com>
Signed-off-by: rayshrey <rayshrey@amazon.com>
@github-actions

Copy link
Copy Markdown
Contributor

PR Code Analyzer ❗

AI-powered 'Code-Diff-Analyzer' found issues on commit c45a08c.

PathLineSeverityDescription
sandbox/plugins/parquet-data-format/src/main/rust/Cargo.toml17highNew dependency added: 'object_store' pulled in via workspace. This crate supports multiple storage backends (local FS, S3, GCS, Azure Blob), expanding the attack surface and network reachability of the native layer. Maintainers must verify the workspace-pinned version and enabled features.
sandbox/plugins/parquet-data-format/src/main/rust/Cargo.toml30highNew dependency added: 'tokio-util' with feature 'io-util' via workspace. Introduces a new async I/O bridge (SyncIoBridge) into the native write path. Verify workspace version and that no transitive features enabling network access are inadvertently activated.
sandbox/plugins/parquet-data-format/src/main/rust/Cargo.toml28highNew dependency added: 'futures' via workspace. Adds the futures crate to the native Rust library. Maintainers must verify the workspace-pinned version and that no unexpected transitive dependencies are introduced.
sandbox/plugins/parquet-data-format/src/main/rust/Cargo.toml27highNew dependency added: 'bytes' via workspace. Maintainers must verify the workspace-pinned version and that no unexpected transitive dependencies are introduced.
sandbox/plugins/parquet-data-format/src/main/rust/Cargo.toml17highFeature addition to existing dependency: 'parquet' gains the 'object_store' feature, pulling in the async writer stack (AsyncArrowWriter + ParquetObjectWriter). This activates previously-disabled code paths and additional transitive crates; maintainers must verify no unintended network-capable backends are enabled.

The table above displays the top 10 most important findings.

Total: 5 | Critical: 0 | High: 5 | Medium: 0 | Low: 0


Pull Requests Author(s): Please update your Pull Request according to the report above.

Repository Maintainer(s): You can bypass diff analyzer by adding label skip-diff-analyzer after reviewing the changes carefully, then re-run failed actions. To re-enable the analyzer, remove the label, then re-run all actions.


⚠️ Note: The Code-Diff-Analyzer helps protect against potentially harmful code patterns. Please ensure you have thoroughly reviewed the changes beforehand.

Thanks.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant