[FLINK-33303] [flink-avro] Union type not inheriting type conversions

[m8719-github]

What is the purpose of the change

Apache Avro 1.11.3 contains an important fix: AVRO-3536
Just want to make sure it makes it into the next Flink release.

Brief change log

Bumped up Apache Avro version to 1.11.3

Does this pull request potentially affect one of the following parts:

• Dependencies (does it add or upgrade a dependency): yes
• The public API, i.e., is any changed class annotated with @Public(Evolving): no
• The serializers: no
• The runtime per-record code paths (performance sensitive): no
• Anything that affects deployment or recovery: JobManager (and its components), Checkpointing, Kubernetes/Yarn, ZooKeeper: no
• The S3 file system connector: no

Documentation

• Does this pull request introduce a new feature? no

[flinkbot]

CI report:

• b2a8c2e Azure: SUCCESS

Bot commands

The @flinkbot bot supports the following commands:

• @flinkbot run azure re-run the last Azure build

[afedulov]

@m8719-github thanks for the contribution. All Flink PRs need to have a corresponding issue in Flink JIRA. Could you please create one with a description of the issue being addressed?
https://issues.apache.org/jira/projects/FLINK/issues/

[afedulov]

Is parsing more strict in the newer version?

[m8719-github]

yes, looks like it.

[afedulov]

Actually, there is already an earlier PR with this bump to address vulnerabilities:
#23508

[m8719-github]

I've reached out to Martijn here: FLINK-33238 to see if we can consolidate.

[m8719-github]

@afedulov Created FLINK-33303
Do you think there is still time to get this into Flink 1.18 ?

[afedulov]

Do you think there is still time to get this into Flink 1.18 ?

Not unless it fixes some critical vulnerability or test regression. 1.18 was supposed to be released end of September, so I am afraid we are way past the features integration timeframe.
https://cwiki.apache.org/confluence/display/FLINK/1.18+Release

[MartijnVisser]

Fixed by #23508 - Will be backported to 1.18 (so for 1.18.1) with #23559