Merge branch 'main' into dependabot/maven/error_prone_core.version-2.49.0

Author: jbonofre

.env

@@ -53,4 +53,4 @@ MAVEN=3.9.9
 # Versions for various dependencies used to build artifacts
 # Keep in sync with apache/arrow
 ARROW_REPO_ROOT=./arrow
-VCPKG="4334d8b4c8916018600212ab4dd4bbdc343065d1"    # 2025.09.17 Release
+VCPKG="66c0373dc7fca549e5803087b9487edfe3aca0a1"    # 2026.01.16 Release

.mvn/extensions.xml

@@ -28,6 +28,6 @@
     <extension>
         <groupId>com.gradle</groupId>
         <artifactId>common-custom-user-data-maven-extension</artifactId>
-        <version>2.1.0</version>
+        <version>2.2.0</version>
     </extension>
 </extensions>

compose.yaml

@@ -109,5 +109,6 @@ services:
       ARROW_JAVA_CDATA: "ON"
       CCACHE_DIR: "/ccache"
     command:
-      ["git config --global --add safe.directory /arrow-java && \
+      ["/bin/bash", "-c",
+       "git config --global --add safe.directory /arrow-java &&
         /arrow-java/ci/scripts/jni_manylinux_build.sh /arrow-java /arrow /build/java /arrow-java/jni"]

compression/pom.xml

@@ -55,7 +55,7 @@ under the License.
     <dependency>
       <groupId>com.github.luben</groupId>
       <artifactId>zstd-jni</artifactId>
-      <version>1.5.7-7</version>
+      <version>1.5.7-8</version>
     </dependency>
   </dependencies>
 </project>

flight/flight-core/pom.xml

@@ -134,7 +134,7 @@ under the License.
     <dependency>
       <groupId>com.google.api.grpc</groupId>
       <artifactId>proto-google-common-protos</artifactId>
-      <version>2.70.0</version>
+      <version>2.71.0</version>
       <scope>test</scope>
     </dependency>
     <dependency>

flight/flight-sql-jdbc-core/pom.xml

@@ -176,7 +176,7 @@ under the License.
     <dependency>
       <groupId>com.github.ben-manes.caffeine</groupId>
       <artifactId>caffeine</artifactId>
-      <version>3.2.3</version>
+      <version>3.2.4</version>
     </dependency>
 
     <dependency>

gandiva/src/main/cpp/jni_common.cc

@@ -221,7 +221,7 @@ DataTypePtr ProtoTypeToDataType(const gandiva::types::ExtGandivaType& ext_type)
       return arrow::date64();
     case gandiva::types::DECIMAL:
       // TODO: error handling
-      return arrow::decimal(ext_type.precision(), ext_type.scale());
+      return arrow::decimal128(ext_type.precision(), ext_type.scale());
     case gandiva::types::TIME32:
       return ProtoTypeToTime32(ext_type);
     case gandiva::types::TIME64:

pom.xml

@@ -99,9 +99,9 @@ under the License.
     <dep.slf4j.version>2.0.17</dep.slf4j.version>
     <dep.guava-bom.version>33.6.0-jre</dep.guava-bom.version>
     <dep.netty-bom.version>4.2.12.Final</dep.netty-bom.version>
-    <dep.grpc-bom.version>1.79.0</dep.grpc-bom.version>
+    <dep.grpc-bom.version>1.80.0</dep.grpc-bom.version>
     <dep.protobuf-bom.version>4.34.1</dep.protobuf-bom.version>
-    <dep.jackson-bom.version>2.21.2</dep.jackson-bom.version>
+    <dep.jackson-bom.version>2.21.3</dep.jackson-bom.version>
     <dep.hadoop.version>3.5.0</dep.hadoop.version>
     <dep.fbs.version>25.2.10</dep.fbs.version>
     <dep.avro.version>1.12.1</dep.avro.version>
@@ -112,7 +112,7 @@ under the License.
     <checkstyle.version>10.23.0</checkstyle.version>
     <checkstyle.failOnViolation>true</checkstyle.failOnViolation>
     <error_prone_core.version>2.49.0</error_prone_core.version>
-    <checker.framework.version>4.0.0</checker.framework.version>
+    <checker.framework.version>4.1.0</checker.framework.version>
     <logback.version>1.5.32</logback.version>
     <doclint>none</doclint>
     <additionalparam>-Xdoclint:none</additionalparam>

vector/pom.xml

@@ -60,7 +60,7 @@ under the License.
     <dependency>
       <groupId>commons-codec</groupId>
       <artifactId>commons-codec</artifactId>
-      <version>1.21.0</version>
+      <version>1.22.0</version>
     </dependency>
     <dependency>
       <groupId>org.apache.arrow</groupId>