Flight Log / microsoft/graphrag #1939
Upgrade pyarrow dependency to >=17.0.0 to fix CVE-2024-52338 — a GitHub Copilot (GitHub) bot flight
The GitHub Copilot bot (GitHub) opened this pull request in microsoft/graphrag on May 19, 2025; merged clean in 27.5 h, merged by @jgbradley1: +745 −421, 16 files, 2 reviews.
Flown by
- Lines
- +745 −421
- Files
- 16
- Commits
- 4
- Reviews
- 2
- To merge
- 27.5 h
- Task
- fix
Line and file counts are summed per commit from the AIDev dataset; GitHub's net diff can be smaller.
GitHub Copilot, working in microsoft/graphrag, upgrades the pyarrow dependency to address CVE-2024-52338. The change touches 16 files across four commits, with 745 additions and 421 deletions, and adds a changelog entry. The pull request merged clean after two reviews with zero change requests, 27.48 hours to merge.
From the pull request description
This PR updates the pyarrow dependency from `^15.0.0` to `>=17.0.0` to address CVE-2024-52338. ## Changes - Updated pyarrow dependency in `pyproject.toml` to `>=17.0.0` - Updated `poetry.lock` file with the new dependency version (currently resolves to 20.0.0) - Added a changelog entry using semve…
Excerpt (first 300 characters) — the full description is on GitHub.
View the pull request on GitHub →
This is your flight? Claim it — sign in with GitHub. Ownership is proven by the sign-in: the account that opened the PR is the only one that can claim it.
Flight timeline
- —committedcopilot-swe-agent[bot]
- —committedcopilot-swe-agent[bot]
- —committedcopilot-swe-agent[bot]
- —committedJosh Bradley
- —reviewed
- —reviewed
- May 20, 2025mergedjgbradley1
- May 20, 2025closedjgbradley1
Read next
Cite this flight: AgentRiders Flight Log, microsoft/graphrag#1939, record updated Nov 4, 2026, https://agentriders.com/logs/microsoft/graphrag/1939/
Data from public GitHub activity; this page is not affiliated with GitHub or the repository.