You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@datafusion.apache.org by gi...@apache.org on 2026/10/13 10:05:29 UTC
(datafusion) 01/01: fix: update quinn-proto to resolve cargo audit failures (#26253)
This is an automated email from the ASF dual-hosted git repository.
github-merge-queue[bot] pushed a commit to branch gh-readonly-queue/main/pr-26253-6de873bbe9a12bbbf71a43d345a637c08d34d8cf
in repository https://gitbox.apache.org/repos/asf/datafusion.git
commit d0609fb7d43190d4f6cc88e11d61af434e9a584d
Author: Huaijin <ha...@gmail.com>
AuthorDate: Tue Oct 13 10:05:06 2026 +0000
fix: update quinn-proto to resolve cargo audit failures (#26253)
## Which issue does this PR close?
N/A (CI fix).
## Rationale for this change
Fix `cargo audit` failures, matching apache/arrow-rs#11531.
## What changes are included in this PR?
Bump locked `quinn-proto` from `0.11.15` to `0.11.18`.
## What is the testing strategy for this PR?
`cargo audit` passes (zero vulnerabilities). No new tests for this
lockfile-only update.
## Are there any user-facing changes?
Dependency security fixes only.
Prepared with Codex.
---
Cargo.lock | 20 ++++++++++++++++----
1 file changed, 16 insertions(+), 4 deletions(-)
diff --git a/Cargo.lock b/Cargo.lock
index cc7b4fe536..689a113a69 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -3329,11 +3329,13 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "0de51e6874e94e7bf76d726fc5d13ba782deca734ff60d5bb2fb2607c7406555"
dependencies = [
"cfg-if",
+ "js-sys",
"libc",
"r-efi 6.0.0",
"rand_core 0.10.1",
"wasip2",
"wasip3",
+ "wasm-bindgen",
]
[[package]]
@@ -5107,15 +5109,16 @@ dependencies = [
[[package]]
name = "quinn-proto"
-version = "0.11.15"
+version = "0.11.18"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4fcb935c5bec503c2f0e306bdd3e58bb9029dcb14fa8d9ac76e3a5256ac0763e"
+checksum = "a9746dbde176634f4f2f1faf2404e30a31b2bc1e9cafb5329c95d8177a18c9fc"
dependencies = [
"aws-lc-rs",
"bytes",
- "getrandom 0.3.4",
+ "getrandom 0.4.2",
"lru-slab",
- "rand 0.9.4",
+ "rand 0.10.1",
+ "rand_pcg",
"ring",
"rustc-hash",
"rustls",
@@ -5258,6 +5261,15 @@ dependencies = [
"rand 0.9.4",
]
+[[package]]
+name = "rand_pcg"
+version = "0.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "caa0f4137e1c0a72f4c651489402276c8e8e1cf081f3b0ba156d2cbeef09e86a"
+dependencies = [
+ "rand_core 0.10.1",
+]
+
[[package]]
name = "rayon"
version = "1.12.0"
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@datafusion.apache.org
For additional commands, e-mail: commits-help@datafusion.apache.org