bowenliang123 opened a new pull request, #7605: URL: https://github.com/apache/kyuubi/pull/7605
### Why are the changes needed? [PR #7584](https://github.com/apache/kyuubi/pull/7584) bumped `org.postgresql:postgresql` from 42.7.11 to 42.7.12 (security: [CVE-2026-54291](https://nvd.nist.gov/vuln/detail/CVE-2026-54291)) but updated only `pom.xml`. It did not regenerate `dev/dependencyList` via `build/dependency.sh --replace`, so the two are now out of sync and the **Dependencies CI check fails on `master`**: ``` Dependency List Changed Detected: - postgresql/42.7.11//postgresql-42.7.11.jar + postgresql/42.7.12//postgresql-42.7.12.jar ``` This PR brings `dev/dependencyList` back in line with the pom so CI is green again. ### How was this patch tested? - [x] Verified the only diff is the postgresql entry expected by the pom bump in #7584 - [x] `git diff` against the version produced by `build/dependency.sh` shows no further drift `build/dependency.sh` requires downloading Spark/Flink/Hive engines and running a full `mvn install` to verify locally; CI will exercise it on the PR branch. ### Was this patch authored or co-authored using generative AI tooling? Yes. Assisted-by: OpenCode with MiniMax-M3 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
