You are viewing a plain text version of this content. The canonical link for it is here.
Posted to github@arrow.apache.org by "alamb (via GitHub)" <gi...@apache.org> on 2026/08/25 09:53:01 UTC

[PR] [59_maintenance] Backport `cargo audit` fix by updating `h2` dependency [arrow-rs]

alamb opened a new pull request, #10834:
URL: https://github.com/apache/arrow-rs/pull/10834

   # Which issue does this PR close?
   
   - part of https://github.com/apache/arrow-rs/issues/10738
   
   # Rationale for this change
   
   Backport the `cargo audit` fix ([RUSTSEC-2026-0258](https://rustsec.org/advisories/RUSTSEC-2026-0258), unbounded empty DATA frames in `h2`) to the `59_maintenance` branch so it is included in the 59.3.0 release.
   
   # What changes are included in this PR?
   
   Backport / Cherry-pick:
   - https://github.com/apache/arrow-rs/pull/10740
   
   Note the `59_maintenance` branch had `h2` 0.4.14 (`main` had 0.4.15), so this updates `Cargo.lock` directly to `h2` 0.4.16 rather than a clean cherry-pick.
   
   # Are these changes tested?
   
   By CI
   
   # Are there any user-facing changes?
   
   No
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] [59_maintenance] Backport `cargo audit` fix by updating `h2` dependency [arrow-rs]

Posted by "alamb (via GitHub)" <gi...@apache.org>.
alamb merged PR #10834:
URL: https://github.com/apache/arrow-rs/pull/10834


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] [59_maintenance] Backport `cargo audit` fix by updating `h2` dependency [arrow-rs]

Posted by "alamb (via GitHub)" <gi...@apache.org>.
alamb commented on PR #10834:
URL: https://github.com/apache/arrow-rs/pull/10834#issuecomment-5409426717

   Merging without direct review as this only affects CI and not the software as a whole


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org