You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@iceberg.apache.org by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/06/21 12:39:09 UTC
[PR] chore(deps): Bump zeroize from 1.8.2 to 1.9.0 [iceberg-rust]
dependabot[bot] opened a new pull request, #2691:
URL: https://github.com/apache/iceberg-rust/pull/2691
Bumps [zeroize](https://github.com/RustCrypto/utils) from 1.8.2 to 1.9.0.
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/RustCrypto/utils/commit/0b715735a660a8566ccd240bf42489fe2ed98efb"><code>0b71573</code></a> zeroize v1.9.0 (<a href="https://redirect.github.com/RustCrypto/utils/issues/1494">#1494</a>)</li>
<li><a href="https://github.com/RustCrypto/utils/commit/3e3f18c273ec48c99ffca514ffd8bc91e1352a9a"><code>3e3f18c</code></a> zeroize: always enable AVX-512 support (<a href="https://redirect.github.com/RustCrypto/utils/issues/1493">#1493</a>)</li>
<li><a href="https://github.com/RustCrypto/utils/commit/1ea42bb68f560a2909c856b20aa3c62901f6305c"><code>1ea42bb</code></a> zeroize_derive v1.5.0 (<a href="https://redirect.github.com/RustCrypto/utils/issues/1492">#1492</a>)</li>
<li><a href="https://github.com/RustCrypto/utils/commit/8d785d1f9ddc6f8caeef1f4744fb93647f00a56d"><code>8d785d1</code></a> zeroize: rustdoc improvements (<a href="https://redirect.github.com/RustCrypto/utils/issues/1491">#1491</a>)</li>
<li><a href="https://github.com/RustCrypto/utils/commit/d844f3659d74b1461f9527ac31251d9800f49e55"><code>d844f36</code></a> zeroize: incorporate README.md into rustdoc (<a href="https://redirect.github.com/RustCrypto/utils/issues/1490">#1490</a>)</li>
<li><a href="https://github.com/RustCrypto/utils/commit/c65c09d0a1ca7ba1c27e568712934cb6893e2297"><code>c65c09d</code></a> ctutils: use <code>reason</code> instead of comment in <code>forbid</code> attribute (<a href="https://redirect.github.com/RustCrypto/utils/issues/1489">#1489</a>)</li>
<li><a href="https://github.com/RustCrypto/utils/commit/cbd0963c685df025c42bed31f78c50d1bada3805"><code>cbd0963</code></a> Release block-buffer v0.12.1 (<a href="https://redirect.github.com/RustCrypto/utils/issues/1488">#1488</a>)</li>
<li><a href="https://github.com/RustCrypto/utils/commit/9aa541d55770f47bb1c50c1d476d167977e3de2a"><code>9aa541d</code></a> block-buffer: fix exception safety (<a href="https://redirect.github.com/RustCrypto/utils/issues/1487">#1487</a>)</li>
<li><a href="https://github.com/RustCrypto/utils/commit/5c7e4f9bb31af81bf766360e836b6d633b84dbff"><code>5c7e4f9</code></a> cmov v0.5.4 (<a href="https://redirect.github.com/RustCrypto/utils/issues/1485">#1485</a>)</li>
<li><a href="https://github.com/RustCrypto/utils/commit/87cadbce34655ac3c78efa7290f37d942d551b2c"><code>87cadbc</code></a> cmov: fix clippy (<a href="https://redirect.github.com/RustCrypto/utils/issues/1484">#1484</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/RustCrypto/utils/compare/zeroize-v1.8.2...zeroize-v1.9.0">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org
Re: [PR] chore(deps): Bump zeroize from 1.8.2 to 1.9.0 [iceberg-rust]
Posted by "blackmwk (via GitHub)" <gi...@apache.org>.
blackmwk commented on PR #2691:
URL: https://github.com/apache/iceberg-rust/pull/2691#issuecomment-4852645438
@dependabot recreate
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org
Re: [PR] chore(deps): Bump zeroize from 1.8.2 to 1.9.0 [iceberg-rust]
Posted by "blackmwk (via GitHub)" <gi...@apache.org>.
blackmwk commented on PR #2691:
URL: https://github.com/apache/iceberg-rust/pull/2691#issuecomment-4852634866
@dependabot rebase
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org
Re: [PR] chore(deps): Bump zeroize from 1.8.2 to 1.9.0 [iceberg-rust]
Posted by "blackmwk (via GitHub)" <gi...@apache.org>.
blackmwk merged PR #2691:
URL: https://github.com/apache/iceberg-rust/pull/2691
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org
Re: [PR] chore(deps): Bump zeroize from 1.8.2 to 1.9.0 [iceberg-rust]
Posted by "CTTY (via GitHub)" <gi...@apache.org>.
CTTY commented on PR #2691:
URL: https://github.com/apache/iceberg-rust/pull/2691#issuecomment-4784572731
I'm beginning to think that forcing contributors to check dep list is not necessary, it blocks the dependabot from generating mergeable PRs
cc @dannycjones @blackmwk @kevinjqliu @Xuanwo
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org
Re: [PR] chore(deps): Bump zeroize from 1.8.2 to 1.9.0 [iceberg-rust]
Posted by "dannycjones (via GitHub)" <gi...@apache.org>.
dannycjones commented on PR #2691:
URL: https://github.com/apache/iceberg-rust/pull/2691#issuecomment-4787242229
> I'm beginning to think that forcing contributors to check dep list is not necessary, it blocks the dependabot from generating mergeable PRs
>
> cc @dannycjones @blackmwk @kevinjqliu @Xuanwo
I think we can move that back to release manager responsibility, the risk was that we make contributions harder (and we do seem to be making automated ones harder). I'll prepare a PR.
Two other notes:
- We could automate running the script after dependabot, but I think this is unnecessary complexity.
- I question why these files are needed. I understand the content is useful, but is having the script available to run and generate the output enough? This might be one to take to the mailing list.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org
Re: [PR] chore(deps): Bump zeroize from 1.8.2 to 1.9.0 [iceberg-rust]
Posted by "dependabot[bot] (via GitHub)" <gi...@apache.org>.
dependabot[bot] commented on PR #2691:
URL: https://github.com/apache/iceberg-rust/pull/2691#issuecomment-4852636011
Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!
If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request `@dependabot recreate`.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org
Re: [PR] chore(deps): Bump zeroize from 1.8.2 to 1.9.0 [iceberg-rust]
Posted by "kevinjqliu (via GitHub)" <gi...@apache.org>.
kevinjqliu commented on PR #2691:
URL: https://github.com/apache/iceberg-rust/pull/2691#issuecomment-4786323118
yea i thought it `DEPENDENCIES.rust.tsv` was updated right before a release
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org