Skip to content

chore(lambda-layer): bump pyarrow to 24.0.0 - #3375

Merged
kukushking merged 7 commits into
aws:mainfrom
PatrickBunker:main
Jun 24, 2026
Merged

chore(lambda-layer): bump pyarrow to 24.0.0#3375
kukushking merged 7 commits into
aws:mainfrom
PatrickBunker:main

Conversation

@PatrickBunker

Copy link
Copy Markdown
Contributor

Detail

  • Version 22.0.0 of arrow has vulnerability CVE-2026-25087. This doesn't actually impact pyarrow, but vulnerability scanners such as Trivy still generate an alert.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

PatrickBunker and others added 7 commits June 17, 2026 15:58
…rop py3.9)

PyArrow 24 dropped setup.py and moved to pyproject.toml + scikit-build-core.
The legacy `setup.py build_ext --bundle-arrow-cpp bdist_wheel` invocation
fails because arrow/python/setup.py no longer exists.

- Use `python -m build --wheel --no-isolation` and export
  PYARROW_BUNDLE_ARROW_CPP=ON (replaces the --bundle-arrow-cpp flag).
- Drop the PYARROW_WITH_{PLASMA,CSV,JSON,COMPUTE,FILESYSTEM} and
  ARROW_PRE_0_15_IPC_FORMAT exports — pyarrow 24's CMakeLists no longer
  defines those options.
- Install build deps (build, scikit-build-core, libcst>=1.8.6) and pin
  cython>=3.1 in both Dockerfiles.
- Drop the Python 3.9 layer build: pyarrow 24 requires Python >= 3.10.
libcst >=1.8 only ships aarch64 wheels for manylinux_2_28+. On Amazon
Linux 2 (glibc 2.26) pip falls back to building from source, which now
needs cargo (libcst is partly Rust). Install rustup with the minimal
profile so the source build can proceed.

AL2023 (used for py3.12+) ships glibc 2.34 and uses the prebuilt wheel,
so Dockerfile.al2023 is unaffected.
cargo invokes `cc` as the default linker. The AL2 image only symlinked
`gcc` from `gcc10-gcc`, so libcst's Rust build (from previous commit)
failed with `linker `cc` not found`.
@kukushking

Copy link
Copy Markdown
Collaborator

Ok, NOW the build passes :)

image

ARM:

image

@kukushking
kukushking merged commit 917601f into aws:main Jun 24, 2026
28 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants