Skip to content

chore: bump h2o version to 3.46.0.11#153

Merged
artpdr merged 3 commits into
feedzai:masterfrom
jpalmeida416:ft-ja-bump-h2o
May 29, 2026
Merged

chore: bump h2o version to 3.46.0.11#153
artpdr merged 3 commits into
feedzai:masterfrom
jpalmeida416:ft-ja-bump-h2o

Conversation

@jpalmeida416
Copy link
Copy Markdown
Contributor

Bumps h2o version to 3.46.0.11 to fix multiple CVEs (CVE-2023-6016, CVE-2023-6038, CVE-2024-10553, CVE-2024-45758, CVE-2024-5986, CVE-2025-5662, CVE-2025-6507).

The bump required adding a fallback mechanism to find the default value of missing API descriptors when upgrading schema bindings. Starting in 3.40.0.1, some choice/enum fields were not being initialized with default constants, causing the reflection lookup to return null and failing to statically initialize the core H2OAlgorithm registry. This triggered a ExceptionInInitializerError during class loading, resulting in a cascade of NoClassDefFoundError failures across loading and training test suites when processing uninitialized choice descriptors, so we added a logic of case-insensitive matching with fallback to handle these uninitialized or mismatched enum descriptors.

Also, it required explicitly filtering out regression influence diagnostics (influence) as it these can only be specified for gaussian and binomial families (these were introduced in 3.40.0.1 - see https://github.com/h2oai/h2o-3/blob/master/Changes.md#kurka-34001---282023)

Additionally, the MR fixes an issue with non_negative constraints in GLM, as these are not allowed for multi-classification datasets (since 3.36.1.1 GLM init fails fast if this is misconfigured - see https://github.com/h2oai/h2o-3/blob/master/Changes.md#zumbo-33611---4132022).

Bump h2o version to 3.46.0.11 and updates GLM parameter builder to account for missing defaults
Update comments
@codecov
Copy link
Copy Markdown

codecov Bot commented May 29, 2026

Codecov Report

❌ Patch coverage is 92.85714% with 1 line in your changes missing coverage. Please review.
✅ Project coverage is 81.50%. Comparing base (9a2513b) to head (badfef9).

Files with missing lines Patch % Lines
...edzai/openml/h2o/params/ParametersBuilderUtil.java 91.66% 0 Missing and 1 partial ⚠️
Additional details and impacted files
@@             Coverage Diff              @@
##             master     #153      +/-   ##
============================================
+ Coverage     81.43%   81.50%   +0.06%     
- Complexity      520      525       +5     
============================================
  Files            52       52              
  Lines          1761     1773      +12     
  Branches        177      182       +5     
============================================
+ Hits           1434     1445      +11     
  Misses          234      234              
- Partials         93       94       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Update ParametersTest.java
@artpdr artpdr merged commit 91f6672 into feedzai:master May 29, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants