You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@datafusion.apache.org by gi...@apache.org on 2026/10/13 12:57:13 UTC
(datafusion) branch gh-readonly-queue/main/pr-26253-7408dad141c4c96ee4f82f66fd5077563af8f004 created (now e137c07df1)
This is an automated email from the ASF dual-hosted git repository.
github-merge-queue[bot] pushed a change to branch gh-readonly-queue/main/pr-26253-7408dad141c4c96ee4f82f66fd5077563af8f004
in repository https://gitbox.apache.org/repos/asf/datafusion.git
at e137c07df1 fix: update quinn-proto to resolve cargo audit failures (#26253)
This branch includes the following new commits:
new e137c07df1 fix: update quinn-proto to resolve cargo audit failures (#26253)
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@datafusion.apache.org
For additional commands, e-mail: commits-help@datafusion.apache.org
(datafusion) 01/01: fix: update quinn-proto to resolve cargo audit failures (#26253)
Posted by gi...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
github-merge-queue[bot] pushed a commit to branch gh-readonly-queue/main/pr-26253-7408dad141c4c96ee4f82f66fd5077563af8f004
in repository https://gitbox.apache.org/repos/asf/datafusion.git
commit e137c07df157705998bfa43c7f3b05d0dcd52437
Author: Huaijin <ha...@gmail.com>
AuthorDate: Tue Oct 13 12:20:56 2026 +0000
fix: update quinn-proto to resolve cargo audit failures (#26253)
## Which issue does this PR close?
N/A (CI fix).
## Rationale for this change
Fix `cargo audit` failures, matching apache/arrow-rs#11531.
## What changes are included in this PR?
Bump locked `quinn-proto` from `0.11.15` to `0.11.18`.
## What is the testing strategy for this PR?
`cargo audit` passes (zero vulnerabilities). No new tests for this
lockfile-only update.
## Are there any user-facing changes?
Dependency security fixes only.
Prepared with Codex.
---
Cargo.lock | 20 ++++++++++++++++----
1 file changed, 16 insertions(+), 4 deletions(-)
diff --git a/Cargo.lock b/Cargo.lock
index cc7b4fe536..689a113a69 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -3329,11 +3329,13 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "0de51e6874e94e7bf76d726fc5d13ba782deca734ff60d5bb2fb2607c7406555"
dependencies = [
"cfg-if",
+ "js-sys",
"libc",
"r-efi 6.0.0",
"rand_core 0.10.1",
"wasip2",
"wasip3",
+ "wasm-bindgen",
]
[[package]]
@@ -5107,15 +5109,16 @@ dependencies = [
[[package]]
name = "quinn-proto"
-version = "0.11.15"
+version = "0.11.18"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4fcb935c5bec503c2f0e306bdd3e58bb9029dcb14fa8d9ac76e3a5256ac0763e"
+checksum = "a9746dbde176634f4f2f1faf2404e30a31b2bc1e9cafb5329c95d8177a18c9fc"
dependencies = [
"aws-lc-rs",
"bytes",
- "getrandom 0.3.4",
+ "getrandom 0.4.2",
"lru-slab",
- "rand 0.9.4",
+ "rand 0.10.1",
+ "rand_pcg",
"ring",
"rustc-hash",
"rustls",
@@ -5258,6 +5261,15 @@ dependencies = [
"rand 0.9.4",
]
+[[package]]
+name = "rand_pcg"
+version = "0.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "caa0f4137e1c0a72f4c651489402276c8e8e1cf081f3b0ba156d2cbeef09e86a"
+dependencies = [
+ "rand_core 0.10.1",
+]
+
[[package]]
name = "rayon"
version = "1.12.0"
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@datafusion.apache.org
For additional commands, e-mail: commits-help@datafusion.apache.org