Bump github.com/apache/beam/sdks/v2 from 2.54.0 to 2.55.0

[dependabot]

Bumps github.com/apache/beam/sdks/v2 from 2.54.0 to 2.55.0.

Release notes

Sourced from github.com/apache/beam/sdks/v2's releases.

Beam 2.55.0 release

We are happy to present the new 2.55.0 release of Beam. This release includes both improvements and new functionality. See the download page for this release.

For more information on changes in 2.55.0, check out the detailed release notes.

Highlights

• The Python SDK will now include automatically generated wrappers for external Java transforms! (#29834)

I/Os

• Added support for handling bad records to BigQueryIO (#30081).
  • Full Support for Storage Read and Write APIs
  • Partial Support for File Loads (Failures writing to files supported, failures loading files to BQ unsupported)
  • No Support for Extract or Streaming Inserts
• Added support for handling bad records to PubSubIO (#30372).
  • Support is not available for handling schema mismatches, and enabling error handling for writing to Pub/Sub topics with schemas is not recommended
• --enableBundling pipeline option for BigQueryIO DIRECT_READ is replaced by --enableStorageReadApiV2. Both were considered experimental and subject to change (Java) (#26354).

New Features / Improvements

• Allow writing clustered and not time-partitioned BigQuery tables (Java) (#30094).
• Redis cache support added to RequestResponseIO and Enrichment transform (Python) (#30307)
• Merged sdks/java/fn-execution and runners/core-construction-java into the main SDK. These artifacts were never meant for users, but noting that they no longer exist. These are steps to bring portability into the core SDK alongside all other core functionality.
• Added Vertex AI Feature Store handler for Enrichment transform (Python) (#30388)

Breaking Changes

• Arrow version was bumped to 15.0.0 from 5.0.0 (#30181).
• Go SDK users who build custom worker containers may run into issues with the move to distroless containers as a base (see Security Fixes).
  • The issue stems from distroless containers lacking additional tools, which current custom container processes may rely on.
  • See https://beam.apache.org/documentation/runtime/environments/#from-scratch-go for instructions on building and using a custom container.
• Python SDK has changed the default value for the --max_cache_memory_usage_mb pipeline option from 100 to 0. This option was first introduced in the 2.52.0 SDK version. This change restores the behavior of the 2.51.0 SDK, which does not use the state cache. If your pipeline uses iterable side inputs views, consider increasing the cache size by setting the option manually. (#30360).

Deprecations

• N/A

Bug fixes

• Fixed SpannerIO.readChangeStream to support propagating credentials from pipeline options to the getDialect calls for authenticating with Spanner (Java) (#30361).
• Reduced the number of HTTP requests in GCSIO function calls (Python) (#30205)

Security Fixes

... (truncated)

Changelog

Sourced from github.com/apache/beam/sdks/v2's changelog.

[2.55.0] - 2024-03-25

Highlights

• The Python SDK will now include automatically generated wrappers for external Java transforms! (#29834)

I/Os

• Added support for handling bad records to BigQueryIO (#30081).
  • Full Support for Storage Read and Write APIs
  • Partial Support for File Loads (Failures writing to files supported, failures loading files to BQ unsupported)
  • No Support for Extract or Streaming Inserts
• Added support for handling bad records to PubSubIO (#30372).
  • Support is not available for handling schema mismatches, and enabling error handling for writing to pubsub topics with schemas is not recommended
• --enableBundling pipeline option for BigQueryIO DIRECT_READ is replaced by --enableStorageReadApiV2. Both were considered experimental and may subject to change (Java) (#26354).

New Features / Improvements

• Allow writing clustered and not time partitioned BigQuery tables (Java) (#30094).
• Redis cache support added to RequestResponseIO and Enrichment transform (Python) (#30307)
• Merged sdks/java/fn-execution and runners/core-construction-java into the main SDK. These artifacts were never meant for users, but noting that they no longer exist. These are steps to bring portability into the core SDK alongside all other core functionality.
• Added Vertex AI Feature Store handler for Enrichment transform (Python) (#30388)

Breaking Changes

• Arrow version was bumped to 15.0.0 from 5.0.0 (#30181).
• Go SDK users who build custom worker containers may run into issues with the move to distroless containers as a base (see Security Fixes).
  • The issue stems from distroless containers lacking additional tools, which current custom container processes may rely on.
  • See https://beam.apache.org/documentation/runtime/environments/#from-scratch-go for instructions on building and using a custom container.
• Python SDK has changed the default value for the --max_cache_memory_usage_mb pipeline option from 100 to 0. This option was first introduced in 2.52.0 SDK. This change restores the behavior of 2.51.0 SDK, which does not use the state cache. If your pipeline uses iterable side inputs views, consider increasing the cache size by setting the option manually. (#30360).

Bugfixes

• Fixed SpannerIO.readChangeStream to support propagating credentials from pipeline options to the getDialect calls for authenticating with Spanner (Java) (#30361).
• Reduced the number of HTTP requests in GCSIO function calls (Python) (#30205)

Security Fixes

• Go SDK base container image moved to distroless/base-nossl-debian12, reducing vulnerable container surface to kernel and glibc (#30011).

Known Issues

• In Python pipelines, when shutting down inactive bundle processors, shutdown logic can overaggressively hold the lock, blocking acceptance of new work. Symptoms of this issue include slowness or stuckness in long-running jobs. Fixed in 2.56.0 (#30679).

Commits

• dda0549 Set version for 2.55.0 RC3
• 0dc330e Revert "Implementing lull reporting at bundle level processing (#29882)" (#30...
• d9897b0 Include byte size of stateKey in estimated weight of WindmillBag, WindmillVal...
• 18d5bd1 Add hamcrest as an implementation dependency (#30635) (#30637)
• 8dcaf12 Redo spark_runner exclude test (#30589) (#30598)
• 5e1920f Disable remote gradle cache until it is cleaned (#30584) (#30596)
• 93140cb Resolve Any environment types before optimization. (#30568) (#30576)
• b67fc15 Bump InfluxDB PostCommit timeout (#30575)
• 3c8e0cd Try fix Dataflow PreCommit on release branch (#30574) (#30578)
• 5d89a33 Fixes an upgrade imcompatiblity of BQ read/write transforms (#30562)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[phbnf]

/gcbrun

[phbnf]

Hmm, govulncheck failed:

Vulnerability #1: GO-2024-2659
    Data exfiltration from internal networks in github.com/docker/docker
  More info: https://pkg.go.dev/vuln/GO-2024-2659

[roger2hk]

/gcbrun

[phbnf]

Thanks @roger2hk !