build(deps): bump thrift from 0.17.0 to 0.23.0 in /quickwit

[dependabot]

Bumps thrift from 0.17.0 to 0.23.0.

Release notes

Sourced from thrift's releases.

Version 0.23.0

Please head over to the official release download source: http://thrift.apache.org/download

The assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.

Version 0.22.0

Please head over to the official release download source: http://thrift.apache.org/download

The assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.

Version 0.21.0

Please head over to the official release download source: http://thrift.apache.org/download

The assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.

Version 0.20.0

Please head over to the official release download source: http://thrift.apache.org/download

The assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.

Version 0.19.0

Please head over to the official release download source: http://thrift.apache.org/download

The assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.

Version 0.18.1

Please head over to the official release download source: http://thrift.apache.org/download

The assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.

Version 0.18.0

Please head over to the official release download source: http://thrift.apache.org/download

The assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.

Changelog

Sourced from thrift's changelog.

0.23.0

Build Process

• THRIFT-5877 - Add cpp cross tests
• THRIFT-5866 - Dockerfile to support Ubuntu 24.04 LTS (Noble Numbat)
• THRIFT-5909 - add Ruby in GitHub workflow
• THRIFT-5649 - add go in GitHub workflow / action

C glib

• THRIFT-5931 - thrift_ssl_socket_get_ssl_error() can underflow its remaining-buffer counter and write past the stack buffer
• THRIFT-5871 - Improve MAX_MESSAGE_SIZE check and friends

C++

• THRIFT-5911 - Inconsistent UUID compilation for aliased types
• THRIFT-5912 - Assertion failed: delta > 0, file ThreadManagerTests.h, line 162
• THRIFT-5880 - C++ TSocket on an IPv6-only system fails if you use a hostname of 127.0.0.1
• THRIFT-3268 - warning: token pasting of ',' and __VA_ARGS__ is a GNU extension
• THRIFT-5887 - build/cmake/ should be prepended (not appended) to CMAKE_MODULE_PATH
• THRIFT-5878 - Add UUID support for THeaderProtocol and TProtocolTap
• THRIFT-5898 - Unable to build Thrift as a shared library on Windows

Contributed

• THRIFT-5920 - Remove threadsafe warnings in thrift-maven-plugin

Delphi

• THRIFT-5939 - Replace GUID generation with stable UUID algorithm
• THRIFT-5876 - Add Delphi WinHTTP client TLS1.3 support

Go

• THRIFT-5896 - Race condition in TServerSocket.Addr() method

Java

• THRIFT-5925 - UUID implementation in JAVA is not according to the Thrift Specification
• THRIFT-5869 - Close the transport after TServerEventHandler deleteContext
• THRIFT-5863 - Make TServerTransport able to customize the max message size
• THRIFT-5774 - Add remote client's IP address to ServerContext in TServerEventHandler
• THRIFT-4280 - Add async nonblocking ssl support in java client
• THRIFT-5879 - java and kotlin cross tests fail in the GitHub action

netstd

• THRIFT-5902 - Add net10 support

... (truncated)

Commits

• c4cbe43 Address vulnerabilities in Rack
• 68ac8e9 Enable TLS hostname verification in TNonblockingSSLSocket
• 5e4f01d Harden Node.js WebSocket server handling
• e242889 Add input validation to Swift protocol layer
• 4af8c7c Add recursion depth limit to Node.js protocol skip()
• a30c552 Enable TLS hostname verification in TSSLTransportFactory
• 276ec88 THRIFT-5929: Fix build failure on PHP 8.5 due to removed zend_exception_get_d...
• df52ad4 EXTRA_DIST fixes
• 21a89c6 build fixes
• 630d66c added int range checks
• Additional commits viewable in compare view

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: ab2b359cca

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[chatgpt-codex-connector]

Keep thrift aligned with parquet

When compiling quickwit-parquet-engine, this bump leaves parquet 58 locked to thrift 0.17.0 while this crate now imports thrift 0.23.0. streaming_reader.rs passes thrift::protocol::TCompactInputProtocol/TCompactOutputProtocol into PageHeader's parquet::thrift::TSerializable methods, whose protocol trait bounds come from parquet's thrift 0.17 re-export; with two thrift crate instances those are different trait/type universes, so the crate no longer type-checks. Align the direct dependency with parquet's thrift version, or update parquet at the same time.

Useful? React with 👍 / 👎.