You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@datafusion.apache.org by gi...@apache.org on 2026/10/13 18:35:20 UTC
(datafusion) branch gh-readonly-queue/main/pr-26253-f2df92e1256666849957adaaf20233f877c823af created (now f97ed6cf27)
This is an automated email from the ASF dual-hosted git repository.
github-merge-queue[bot] pushed a change to branch gh-readonly-queue/main/pr-26253-f2df92e1256666849957adaaf20233f877c823af
in repository https://gitbox.apache.org/repos/asf/datafusion.git
at f97ed6cf27 fix: update quinn-proto to resolve cargo audit failures (#26253)
This branch includes the following new commits:
new f97ed6cf27 fix: update quinn-proto to resolve cargo audit failures (#26253)
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@datafusion.apache.org
For additional commands, e-mail: commits-help@datafusion.apache.org
(datafusion) 01/01: fix: update quinn-proto to resolve cargo audit failures (#26253)
Posted by gi...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
github-merge-queue[bot] pushed a commit to branch gh-readonly-queue/main/pr-26253-f2df92e1256666849957adaaf20233f877c823af
in repository https://gitbox.apache.org/repos/asf/datafusion.git
commit f97ed6cf2701df31a0587e197992ead4a2e16e3e
Author: Huaijin <ha...@gmail.com>
AuthorDate: Tue Oct 13 18:34:56 2026 +0000
fix: update quinn-proto to resolve cargo audit failures (#26253)
## Which issue does this PR close?
N/A (CI fix).
## Rationale for this change
Fix `cargo audit` failures, matching apache/arrow-rs#11531.
## What changes are included in this PR?
Bump locked `quinn-proto` from `0.11.15` to `0.11.18`.
## What is the testing strategy for this PR?
`cargo audit` passes (zero vulnerabilities). No new tests for this
lockfile-only update.
## Are there any user-facing changes?
Dependency security fixes only.
Prepared with Codex.
---
Cargo.lock | 20 ++++++++++++++++----
1 file changed, 16 insertions(+), 4 deletions(-)
diff --git a/Cargo.lock b/Cargo.lock
index cc7b4fe536..689a113a69 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -3329,11 +3329,13 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "0de51e6874e94e7bf76d726fc5d13ba782deca734ff60d5bb2fb2607c7406555"
dependencies = [
"cfg-if",
+ "js-sys",
"libc",
"r-efi 6.0.0",
"rand_core 0.10.1",
"wasip2",
"wasip3",
+ "wasm-bindgen",
]
[[package]]
@@ -5107,15 +5109,16 @@ dependencies = [
[[package]]
name = "quinn-proto"
-version = "0.11.15"
+version = "0.11.18"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4fcb935c5bec503c2f0e306bdd3e58bb9029dcb14fa8d9ac76e3a5256ac0763e"
+checksum = "a9746dbde176634f4f2f1faf2404e30a31b2bc1e9cafb5329c95d8177a18c9fc"
dependencies = [
"aws-lc-rs",
"bytes",
- "getrandom 0.3.4",
+ "getrandom 0.4.2",
"lru-slab",
- "rand 0.9.4",
+ "rand 0.10.1",
+ "rand_pcg",
"ring",
"rustc-hash",
"rustls",
@@ -5258,6 +5261,15 @@ dependencies = [
"rand 0.9.4",
]
+[[package]]
+name = "rand_pcg"
+version = "0.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "caa0f4137e1c0a72f4c651489402276c8e8e1cf081f3b0ba156d2cbeef09e86a"
+dependencies = [
+ "rand_core 0.10.1",
+]
+
[[package]]
name = "rayon"
version = "1.12.0"
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@datafusion.apache.org
For additional commands, e-mail: commits-help@datafusion.apache.org