security: bump pyarrow dependency to 14.0.1 (#284)

pyarrow is currently compatible with Python 3.8 → Python 3.11 I also removed specifiers for when Python is 3.7 since this no longer applies. Signed-off-by: Jesse Whitehouse <[email protected]>
databricks · Nov 17, 2023 · 5feadbe · 5feadbe
1 parent 5ed45f5
commit 5feadbe
Show file tree

Hide file tree

Showing 3 changed files with 43 additions and 45 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -22,6 +22,7 @@
 - Retries:
   - Add `_retry_max_redirects` config
   - Set `_enable_v3_retries=True` and warn if users override it
+- Security: bump minimum pyarrow version to 14.0.1 (CVE-2023-47248)
 
 ## 2.9.3 (2023-08-24)
 

diff --git a/poetry.lock b/poetry.lock
diff --git a/pyproject.toml b/pyproject.toml
@@ -12,18 +12,15 @@ include = ["CHANGELOG.md"]
 python = "^3.8.0"
 thrift = "^0.16.0"
 pandas = [
-    { version = ">=1.2.5,<1.4.0", python = ">=3.7,<3.8" },
-    { version = ">=1.2.5,<3.0.0", python = ">=3.8" },
-]
-pyarrow = [
-    { version = ">=6.0.0", python = ">=3.7,<3.11" },
-    { version = ">=10.0.1", python = ">=3.11" },
+    { version = ">=1.2.5,<3.0.0", python = ">=3.8" }
 ]
+pyarrow = "^14.0.1"
+
 lz4 = "^4.0.2"
 requests = "^2.18.1"
 oauthlib = "^3.1.0"
 numpy = [
-    { version = ">=1.16.6", python = ">=3.7,<3.11" },
+    { version = ">=1.16.6", python = ">=3.8,<3.11" },
     { version = ">=1.23.4", python = ">=3.11" },
 ]
 sqlalchemy = { version = ">=2.0.21", optional = true }