You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@datafusion.apache.org by gi...@apache.org on 2026/10/14 05:15:19 UTC
(datafusion) branch gh-readonly-queue/main/pr-26253-473ff694552550b0a74ca1100d4c60c7b341a815 created (now 7fe6d47732)
This is an automated email from the ASF dual-hosted git repository.
github-merge-queue[bot] pushed a change to branch gh-readonly-queue/main/pr-26253-473ff694552550b0a74ca1100d4c60c7b341a815
in repository https://gitbox.apache.org/repos/asf/datafusion.git
at 7fe6d47732 fix: update quinn-proto to resolve cargo audit failures (#26253)
This branch includes the following new commits:
new 7fe6d47732 fix: update quinn-proto to resolve cargo audit failures (#26253)
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@datafusion.apache.org
For additional commands, e-mail: commits-help@datafusion.apache.org
(datafusion) 01/01: fix: update quinn-proto to resolve cargo audit failures (#26253)
Posted by gi...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
github-merge-queue[bot] pushed a commit to branch gh-readonly-queue/main/pr-26253-473ff694552550b0a74ca1100d4c60c7b341a815
in repository https://gitbox.apache.org/repos/asf/datafusion.git
commit 7fe6d477328505421f3e050ec7f026831c9afd02
Author: Huaijin <ha...@gmail.com>
AuthorDate: Wed Oct 14 04:32:21 2026 +0000
fix: update quinn-proto to resolve cargo audit failures (#26253)
## Which issue does this PR close?
N/A (CI fix).
## Rationale for this change
Fix `cargo audit` failures, matching apache/arrow-rs#11531.
## What changes are included in this PR?
Bump locked `quinn-proto` from `0.11.15` to `0.11.18`.
## What is the testing strategy for this PR?
`cargo audit` passes (zero vulnerabilities). No new tests for this
lockfile-only update.
## Are there any user-facing changes?
Dependency security fixes only.
Prepared with Codex.
---
Cargo.lock | 20 ++++++++++++++++----
1 file changed, 16 insertions(+), 4 deletions(-)
diff --git a/Cargo.lock b/Cargo.lock
index cc7b4fe536..689a113a69 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -3329,11 +3329,13 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "0de51e6874e94e7bf76d726fc5d13ba782deca734ff60d5bb2fb2607c7406555"
dependencies = [
"cfg-if",
+ "js-sys",
"libc",
"r-efi 6.0.0",
"rand_core 0.10.1",
"wasip2",
"wasip3",
+ "wasm-bindgen",
]
[[package]]
@@ -5107,15 +5109,16 @@ dependencies = [
[[package]]
name = "quinn-proto"
-version = "0.11.15"
+version = "0.11.18"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4fcb935c5bec503c2f0e306bdd3e58bb9029dcb14fa8d9ac76e3a5256ac0763e"
+checksum = "a9746dbde176634f4f2f1faf2404e30a31b2bc1e9cafb5329c95d8177a18c9fc"
dependencies = [
"aws-lc-rs",
"bytes",
- "getrandom 0.3.4",
+ "getrandom 0.4.2",
"lru-slab",
- "rand 0.9.4",
+ "rand 0.10.1",
+ "rand_pcg",
"ring",
"rustc-hash",
"rustls",
@@ -5258,6 +5261,15 @@ dependencies = [
"rand 0.9.4",
]
+[[package]]
+name = "rand_pcg"
+version = "0.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "caa0f4137e1c0a72f4c651489402276c8e8e1cf081f3b0ba156d2cbeef09e86a"
+dependencies = [
+ "rand_core 0.10.1",
+]
+
[[package]]
name = "rayon"
version = "1.12.0"
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@datafusion.apache.org
For additional commands, e-mail: commits-help@datafusion.apache.org