Skip to content

[AUTO-CHERRYPICK] Upgrade thrift module in vendor tarball of telegraf - branch 3.0-dev - #18357

Merged
jslobodzian merged 5 commits into
3.0-devfrom
cblmargh/cherry-pick-pr-18291-to-3.0-dev
Aug 7, 2026
Merged

[AUTO-CHERRYPICK] Upgrade thrift module in vendor tarball of telegraf - branch 3.0-dev#18357
jslobodzian merged 5 commits into
3.0-devfrom
cblmargh/cherry-pick-pr-18291-to-3.0-dev

Conversation

@azurelinux-ci-jwt-app

Copy link
Copy Markdown

This is an auto-generated pull request to cherry-pick commit 883179e to 3.0-dev. Original PR: #18291
In case of no merge conflicts, the PR is merged without approval because it's an automated cherry-pick of an already approved PR.
In case of merge conflicts, an AI-based conflict resolver will attempt to resolve conflicts and might make mistakes. The reviewer must check AI's work before approving.

Co-authored-by: Kanishk Bansal <kanbansal@microsoft.com>
(cherry picked from commit 883179e)
@azurelinux-ci-jwt-app azurelinux-ci-jwt-app Bot added the Auto Fast-track Cherry-pick Automatic cherry-pick from fast-track branch label Aug 7, 2026
@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.

@microsoft-github-policy-service microsoft-github-policy-service Bot added Packaging 3.0-dev PRs Destined for AzureLinux 3.0 labels Aug 7, 2026
@azurelinux-ci-jwt-app
azurelinux-ci-jwt-app Bot marked this pull request as ready for review August 7, 2026 14:02
@azurelinux-ci-jwt-app

Copy link
Copy Markdown
Author

All conflicts resolved.

@azurelinux-ci-jwt-app
azurelinux-ci-jwt-app Bot requested a review from a team as a code owner August 7, 2026 14:02
@azurelinux-ci-jwt-app

Copy link
Copy Markdown
Author

Auto Cherry-Pick SPEC Validation Summary

telegraf SPEC summary

Source (fasttrack) Target (3.0-dev) Resolved
Version 1.31.0 1.31.0 None
Release 26 27 28
Patches 53 56 53
Conflict Yes

⚠️ Validation issues:

  • Version-release None-28 is not higher than Source 1.31.0-26
  • Version-release None-28 is not higher than Target 1.31.0-27
  • Duplicate changelog entry for 1.31.0-23 (appears 2 times)
  • Duplicate changelog entry for 1.31.0-22 (appears 2 times)
  • Changelog out of order: 1.31.0-22 appears before 1.31.0-24
  • Directive present in both Source and Target was dropped: Source0: %{url}/archive/refs/tags/v%{version}.tar.gz#/%{name}-%{version}.tar.gz

⚠️ Manual review required — validation found issues that may need correction.

@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.

jslobodzian and others added 3 commits August 7, 2026 11:29
Restore the complete 3.0-dev spec and re-sequence its unpublished changelog entries above the canonical Fast-Track thrift update.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot-Session: b5782df8-5e99-4743-821c-f9fc35389220
Correct the AI conflict resolver output so the changelog for the

thrift upgrade (fasttrack -26) cherry-pick matches the actual

sequence of patches applied on 3.0-dev:

- Kanishk's thrift upgrade correctly stays at -26 (slotted after

  the shipped -25 to preserve fasttrack lineage).

- Jyoti's CVE-2025-29923/CVE-2025-46327 (Patch54, Patch55) bumps

  from -26 to -27, keeping the original Thu Jul 30 2026 date.

- Security Servicing Account's CVE-2026-54908 (Patch56, applied

  last) bumps from -27 to -28 and stays on top, keeping the

  original Thu Jul 30 2026 date.

Patch numbers already increase in changelog-newest-to-oldest order,

so no Patch renumbering is required.
Kanishk's thrift upgrade at -26 is dated Aug 03. The two entries

above it (which were originally Jul 30 on 3.0-dev before renumbering)

need to move forward to Aug 07 so the changelog stays monotonically

non-decreasing in date from bottom to top.
@jslobodzian

Copy link
Copy Markdown
Collaborator

/azurepipelines run

@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
Successfully started running 1 pipeline(s).
1 pipeline(s) were filtered out due to trigger conditions.

@jslobodzian
jslobodzian merged commit 5858886 into 3.0-dev Aug 7, 2026
34 checks passed
@jslobodzian
jslobodzian deleted the cblmargh/cherry-pick-pr-18291-to-3.0-dev branch August 7, 2026 20:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3.0-dev PRs Destined for AzureLinux 3.0 Auto Fast-track Cherry-pick Automatic cherry-pick from fast-track branch Packaging

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants