You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@iceberg.apache.org by "sdd (via GitHub)" <gi...@apache.org> on 2025/03/05 07:36:11 UTC
[I] Broken build: Transitive dependency `twox-hash` is failing the security_audit step [iceberg-rust]
sdd opened a new issue, #1041:
URL: https://github.com/apache/iceberg-rust/issues/1041
### Apache Iceberg Rust version
None
### Describe the bug
<img width="897" alt="Image" src="https://github.com/user-attachments/assets/9d9903dd-d58b-4da8-80eb-8b6950e12013" />
See https://github.com/apache/iceberg-rust/actions/runs/13670139819/job/38218624232?pr=950
### To Reproduce
_No response_
### Expected behavior
_No response_
### Willingness to contribute
- [x] I can contribute a fix for this bug independently
- [ ] I would be willing to contribute a fix for this bug with guidance from the Iceberg community
- [ ] I cannot contribute a fix for this bug at this time
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org
Re: [I] Broken build: Transitive dependency `twox-hash` is failing the security_audit step [iceberg-rust]
Posted by "sdd (via GitHub)" <gi...@apache.org>.
sdd commented on issue #1041:
URL: https://github.com/apache/iceberg-rust/issues/1041#issuecomment-2700142051
Looks like rustsec/audit-check or cargo-audit depend on twox-hash 2.1.0. I'm unable to look at this now until this evening - if someone else wants to pick it up before then, be my guest, or I'll pick it up later
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org
Re: [I] Broken build: Transitive dependency `twox-hash` is failing the security_audit step [iceberg-rust]
Posted by "sdd (via GitHub)" <gi...@apache.org>.
sdd commented on issue #1041:
URL: https://github.com/apache/iceberg-rust/issues/1041#issuecomment-2700129905
Oh wait, it's the `cargo install cargo-audit` step that fails. We just happen to depend on twox-hash as well.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org
Re: [I] Broken build: Transitive dependency `twox-hash` is failing the security_audit step [iceberg-rust]
Posted by "sdd (via GitHub)" <gi...@apache.org>.
sdd closed issue #1041: Broken build: Transitive dependency `twox-hash` is failing the security_audit step
URL: https://github.com/apache/iceberg-rust/issues/1041
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org
Re: [I] Broken build: Transitive dependency `twox-hash` is failing the security_audit step [iceberg-rust]
Posted by "Xuanwo (via GitHub)" <gi...@apache.org>.
Xuanwo commented on issue #1041:
URL: https://github.com/apache/iceberg-rust/issues/1041#issuecomment-2700794759
Should be fixed by https://github.com/apache/iceberg-rust/pull/1042 I guess.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org
Re: [I] Broken build: Transitive dependency `twox-hash` is failing the security_audit step [iceberg-rust]
Posted by "sdd (via GitHub)" <gi...@apache.org>.
sdd commented on issue #1041:
URL: https://github.com/apache/iceberg-rust/issues/1041#issuecomment-2701894382
Looks to be fixed for me: https://github.com/apache/iceberg-rust/actions/runs/13684039718/job/38263063603?pr=950
Thanks @xxchan!
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org
Re: [I] Broken build: Transitive dependency `twox-hash` is failing the security_audit step [iceberg-rust]
Posted by "sdd (via GitHub)" <gi...@apache.org>.
sdd commented on issue #1041:
URL: https://github.com/apache/iceberg-rust/issues/1041#issuecomment-2700121993
I'm unsure why this is happening, since we have twox-hash v1.6.3 in our Cargo.lock but cargo-audit is erroring on twox-hash v2.1.0
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org
Re: [I] Broken build: Transitive dependency `twox-hash` is failing the security_audit step [iceberg-rust]
Posted by "Xuanwo (via GitHub)" <gi...@apache.org>.
Xuanwo commented on issue #1041:
URL: https://github.com/apache/iceberg-rust/issues/1041#issuecomment-2700175028
I think we can upgrade our toolchain to `nightly-2025-01-03` (the day of the 1.85 checkout).
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org