Skip to content

deps(wasm): bump the all group across 1 directory with 12 updates - #2802

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/core/wren-core-wasm/all-4ad1fdb7a7
Open

deps(wasm): bump the all group across 1 directory with 12 updates#2802
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/core/wren-core-wasm/all-4ad1fdb7a7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the all group with 12 updates in the /core/wren-core-wasm directory:

Package From To
datafusion 55.1.0 55.2.0
object_store 0.13.2 0.14.2
arrow 59.3.0 60.0.0
parquet 59.3.0 60.0.0
tokio 1.53.1 1.53.2
bytes 1.11.1 1.12.1
serde 1.0.228 1.0.229
serde_json 1.0.149 1.0.154
log 0.4.29 0.4.34
async-trait 0.1.89 0.1.92
datafusion-session 55.1.0 55.2.0
serde_with 3.21.0 3.24.0

Updates datafusion from 55.1.0 to 55.2.0

Commits
  • 500744d [branch-55] chore: update version 55.2.0 and add changelog (#26037)
  • ec74746 [branch-55] Preserve field metadata when coercing INT96 timestamps (#24790) (...
  • c1514b5 [branch-55] fix: Remove serde_json/preserve_order feature from library crat...
  • 5e62bc3 [branch-55] fix: preserve fetch across distribution reoptimization (#24809) (...
  • 9f5714b [branch-55] fix datafusion-cli CI: switch from minio to rustfs (#25706) (#25759)
  • 5c4db5a [branch-55] Reduce datafusion-spark dependency footprint (#24351) (#25277)
  • cf7cfd1 [branch-55] fix: update rustls to address RUSTSEC-2026-0285 (#25309) (#25514)
  • 180db4c [branch-55] Pull the MinIO test image from quay.io (#25092, #25216) (#25485)
  • See full diff in compare view

Updates object_store from 0.13.2 to 0.14.2

Release notes

Sourced from object_store's releases.

object_store v0.14.2

Changelog

v0.14.2 (2026-09-11)

Full Changelog

Implemented enhancements:

  • Implement Clone for MicrosoftAzure #824
  • Support URLs for jurisdiction-restricted buckets on R2 #814
  • Lightweight DNS cache with shuffle to prevent DNS flooding #726
  • Allow presigning object_store multipart uploads #271
  • Allow specifying Content-Type when signing object_store PUT requests #270

Fixed bugs:

  • Incomplete ASF license header in src/client/s3.rs (caused -1 vote on 0.14.2 RC1) #853
  • WriteMultipart::finish should abort after part upload failure #818
  • The 1.85 MSRV is inaccurate with all features #811
  • When the backend service returns an HTTP 500, the object store panics #414

Documentation updates:

  • Docs: point users uploading large objects at the multipart API #839 (alamb)
  • [object-store]: update release schedule #834 (alamb)
  • Add doc example for multipart upload to GoogleCloudStorage::create_multipart #803 (alamb)
  • Add doc example for multipart upload to MicrosoftAzure::create_multipart #802 (alamb)
  • Add doc example for multipart upload to AmazonS3::create_multipart #801 (alamb)

Closed issues:

... (truncated)

Changelog

Sourced from object_store's changelog.

Historical Changelog

v0.14.1 (2026-07-10)

Full Changelog

Implemented enhancements:

  • Cache Azure user delegation key for SAS signing #800
  • Add deregister to ObjectStoreRegistry #795
  • Support for S3 dual-stack endpoints #779
  • Coalesce contiguous ranges in LocalFileSystem::get_ranges #778
  • Support for HF Storage Buckets #706

Fixed bugs:

  • Clippy failing on main #798
  • Upgrade quick-xml to resolve RUSTSEC-2026-0194 and RUSTSEC-2026-0195 #786
  • InMemory and LocalFileSystem return unquoted ETags, violating RFC 9110 #769

Closed issues:

  • Bump quick-xml to 0.41.0 for RustSec advisories #787

Merged pull requests:

  • Pin Rust toolchain to 1.97.0 and fix clippy #799 (alamb)
  • chore: reduce lock hold time in DefaultObjectStoreRegistry::deregister #792 (kszucs)
  • Do not explicitly add Host header when making requests with S3Builder #790 (ntjohnson1)
  • impl HttpError::new_boxed to provide user with ability to ctor from already boxed error #789 (DoumanAsh)
  • build(deps): update quick-xml requirement from 0.40.1 to 0.41.0 #785 (dependabot[bot])

... (truncated)

Commits
  • 279572e Update CHANGELOG for latest main (#855)
  • 4ff7d04 Restore missing first line of ASF license header in src/client/s3.rs (#854)
  • 25fa079 Update version to 0.14.2 and add CHANGELOG (#850)
  • c37db72 feat: retry failed multipart part uploads (#849)
  • 135984f Add doc hints pointing large-object uploads at the multipart API (#839)
  • b07471e [object-store]: update release schedule (#834)
  • 978fb48 Fix MSRV violation in parse.rs test, check --all-targets in MSRV CI (#837)
  • e2a4934 Speed up MSRV CI check by installing cargo-msrv via taiki-e/install-action (#...
  • e28807d feat: presigned URLs with extra query params and signed headers (SignedUrlOpt...
  • 5c74363 Restore UnwindSafe/RefUnwindSafe on ClientOptions by bounding DnsResolver (#836)
  • Additional commits viewable in compare view

Updates arrow from 59.3.0 to 60.0.0

Release notes

Sourced from arrow's releases.

arrow 60.0.0

Changelog

60.0.0 - (2026-09-10)

Full Changelog

Breaking changes

... (truncated)

Changelog

Sourced from arrow's changelog.

60.0.0 - (2026-09-10)

Full Changelog

Breaking changes

Enhancements

... (truncated)

Commits
  • ef1fa15 Update version to 60.0.0 and add CHANGELOG (#11036)
  • f9e02ba perf(variant): resolve borrowed field names without searching the metadata di...
  • a4963a9 minor : batches_to_flight_data() should not require ownership of arguments ...
  • 44141e6 fix(parquet): skip miniblocks wider than 64 values instead of erroring (#11021)
  • 2078680 Prettify RunEndEncoded datatype display (#10840)
  • b7e5977 [Parquet] Populate bloom filters from the dictionary while a column is dictio...
  • 5be0557 [Parquet] Add writer option to skip bloom filters for column chunks whose dat...
  • b06b9c1 fix(arrow-ipc): return an error for a DictionaryBatch without its data (#11020)
  • 8f00fb4 Fix interleave on zero-width FixedSizeListArray (#11026)
  • 2e3a243 chore(deps): bump zstd from 0.13.3 to 0.14.0 (#11024)
  • Additional commits viewable in compare view

Updates parquet from 59.3.0 to 60.0.0

Release notes

Sourced from parquet's releases.

arrow 60.0.0

Changelog

60.0.0 - (2026-09-10)

Full Changelog

Breaking changes

... (truncated)

Changelog

Sourced from parquet's changelog.

60.0.0 - (2026-09-10)

Full Changelog

Breaking changes

Enhancements

... (truncated)

Commits
  • ef1fa15 Update version to 60.0.0 and add CHANGELOG (#11036)
  • f9e02ba perf(variant): resolve borrowed field names without searching the metadata di...
  • a4963a9 minor : batches_to_flight_data() should not require ownership of arguments ...
  • 44141e6 fix(parquet): skip miniblocks wider than 64 values instead of erroring (#11021)
  • 2078680 Prettify RunEndEncoded datatype display (#10840)
  • b7e5977 [Parquet] Populate bloom filters from the dictionary while a column is dictio...
  • 5be0557 [Parquet] Add writer option to skip bloom filters for column chunks whose dat...
  • b06b9c1 fix(arrow-ipc): return an error for a DictionaryBatch without its data (#11020)
  • 8f00fb4 Fix interleave on zero-width FixedSizeListArray (#11026)
  • 2e3a243 chore(deps): bump zstd from 0.13.3 to 0.14.0 (#11024)
  • Additional commits viewable in compare view

Updates tokio from 1.53.1 to 1.53.2

Release notes

Sourced from tokio's releases.

Tokio v1.53.2

1.53.2 (October 3rd, 2026)

Fixed

  • fs: handle integer overflow in buffered relative seek (#8574)
  • io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
  • process: unregister Windows wait before closing child handle (#8564)
  • rt: drop blocking pool mutex before shutting down rejected task (#8562)
  • sync: fix mpsc index wraparound in block reclamation (#8546)
  • sync: forget mpsc Permit before sending value (#8560)
  • sync: validate MAX_PERMITS in Semaphore::acquire (#8548)
  • sync: wake broadcast Sender::closed outside mutex (#8558)
  • task: drop replaced waker outside lock in JoinSet (#8554)
  • time: drop timer lock before dropping waker in clear_entry (#8552)
  • time: expire timers directly on shutdown without rotating wheel (#8570)

Fixed (unstable)

  • fs: clamp io_uring read length to u32::MAX (#8572)
  • rt: ignore current_thread task dumps from other runtimes (#8544)
  • rt: preserve io_uring context if a completion waker panics (#8566)
  • sync: fix semaphore use-after-free and permit leak on tracing panic (#8542)
  • taskdump: restore deferred leaf wakes during capture (#8445)
  • time: drop stored waker when cancelling alt timer entry (#8550)

#8445: tokio-rs/tokio#8445 #8572: tokio-rs/tokio#8572 #8540: tokio-rs/tokio#8540 #8542: tokio-rs/tokio#8542 #8544: tokio-rs/tokio#8544 #8546: tokio-rs/tokio#8546 #8548: tokio-rs/tokio#8548 #8550: tokio-rs/tokio#8550 #8552: tokio-rs/tokio#8552 #8554: tokio-rs/tokio#8554 #8558: tokio-rs/tokio#8558 #8560: tokio-rs/tokio#8560 #8562: tokio-rs/tokio#8562 #8564: tokio-rs/tokio#8564 #8566: tokio-rs/tokio#8566 #8570: tokio-rs/tokio#8570 #8574: tokio-rs/tokio#8574

Commits
  • ff0c406 chore: prepare Tokio v1.53.2 (#8580)
  • a762700 Merge 'tokio-1.51.5' into 'tokio-1.53.x' (#8577)
  • ec31a9f chore: prepare Tokio v1.51.5 (#8579)
  • 625c851 sync: assign semaphore permits before emitting tracing event (#8542)
  • 832dd23 sync: avoid leaking semaphore permits on tracing panic (#8542)
  • 826954a sync: unlink semaphore waiter before emitting tracing event (#8542)
  • 9a47992 process: unregister Windows wait before closing child handle (#8564)
  • 2fc5972 fs: handle integer overflow in buffered relative seek (#8574)
  • 85a6d13 io: revert "always cleanup AsyncFd registration list on deregister" (#8540)
  • 436faa2 rt: drop blocking pool mutex before shutting down rejected task (#8562)
  • Additional commits viewable in compare view

Updates bytes from 1.11.1 to 1.12.1

Release notes

Sourced from bytes's releases.

Bytes v1.12.1

1.12.1 (July 8th, 2026)

Fixed

  • Properly handle when Box::new panics (#837)

Bytes v1.12.0

1.12.0 (June 18th, 2026)

Added

  • Add BytesMut::extend_from_within() (#818)
  • Add BytesMut::try_unsplit() (#746)

Fixed

  • Fix panic in get_int if nbytes is zero (#806)

Changed

  • Pass vtable data by value (#826)
  • Exclude development scripts from published package (#810)

Documented

  • Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)
Changelog

Sourced from bytes's changelog.

1.12.1 (July 8th, 2026)

Fixed

  • Properly handle when Box::new panics (#837)

1.12.0 (June 18th, 2026)

Added

  • Add BytesMut::extend_from_within() (#818)
  • Add BytesMut::try_unsplit() (#746)

Fixed

  • Fix panic in get_int if nbytes is zero (#806)

Changed

  • Pass vtable data by value (#826)
  • Exclude development scripts from published package (#810)

Documented

  • Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)
Commits

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

  • Update to syn 3
Commits
  • 7fc3b4c Release 1.0.229
  • 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
  • 6dec3b7 Update to syn 3
  • cfe6692 Resolve mut_mut pedantic clippy lint
  • 1023d07 Update actions/upload-artifact@v6 -> v7
  • dd682c2 Update actions/checkout@v6 -> v7
  • 5f0f18b Update ui test suite to nightly-2026-06-01
  • 63a1498 Regenerate stderr with trybuild normalization fixes

@dependabot dependabot Bot added core dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 14, 2026
@coderabbitai

coderabbitai Bot commented Oct 14, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Repository UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 1ea6b82a-4c1b-4da3-bd74-550a08ffa555

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@github-actions github-actions Bot added the wasm label Oct 14, 2026
@dependabot
deps(wasm): bump the all group across 1 directory with 12 updates
ab8ce6c 
Bumps the all group with 12 updates in the /core/wren-core-wasm directory:

| Package | From | To |
| --- | --- | --- |
| [datafusion](https://github.com/apache/datafusion) | `55.1.0` | `55.2.0` |
| [object_store](https://github.com/apache/arrow-rs-object-store) | `0.13.2` | `0.14.2` |
| [arrow](https://github.com/apache/arrow-rs) | `59.3.0` | `60.0.0` |
| [parquet](https://github.com/apache/arrow-rs) | `59.3.0` | `60.0.0` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.53.1` | `1.53.2` |
| [bytes](https://github.com/tokio-rs/bytes) | `1.11.1` | `1.12.1` |
| [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.154` |
| [log](https://github.com/rust-lang/log) | `0.4.29` | `0.4.34` |
| [async-trait](https://github.com/dtolnay/async-trait) | `0.1.89` | `0.1.92` |
| [datafusion-session](https://github.com/apache/datafusion) | `55.1.0` | `55.2.0` |
| [serde_with](https://github.com/jonasbb/serde_with) | `3.21.0` | `3.24.0` |



Updates `datafusion` from 55.1.0 to 55.2.0
- [Changelog](https://github.com/apache/datafusion/blob/main/CHANGELOG.md)
- [Commits](apache/datafusion@55.1.0...55.2.0)

Updates `object_store` from 0.13.2 to 0.14.2
- [Release notes](https://github.com/apache/arrow-rs-object-store/releases)
- [Changelog](https://github.com/apache/arrow-rs-object-store/blob/main/CHANGELOG-old.md)
- [Commits](apache/arrow-rs-object-store@v0.13.2...v0.14.2)

Updates `arrow` from 59.3.0 to 60.0.0
- [Release notes](https://github.com/apache/arrow-rs/releases)
- [Changelog](https://github.com/apache/arrow-rs/blob/main/CHANGELOG.md)
- [Commits](apache/arrow-rs@59.3.0...60.0.0)

Updates `parquet` from 59.3.0 to 60.0.0
- [Release notes](https://github.com/apache/arrow-rs/releases)
- [Changelog](https://github.com/apache/arrow-rs/blob/main/CHANGELOG.md)
- [Commits](apache/arrow-rs@59.3.0...60.0.0)

Updates `tokio` from 1.53.1 to 1.53.2
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.53.2)

Updates `bytes` from 1.11.1 to 1.12.1
- [Release notes](https://github.com/tokio-rs/bytes/releases)
- [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md)
- [Commits](tokio-rs/bytes@v1.11.1...v1.12.1)

Updates `serde` from 1.0.228 to 1.0.229
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.228...v1.0.229)

Updates `serde_json` from 1.0.149 to 1.0.154
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.149...v1.0.154)

Updates `log` from 0.4.29 to 0.4.34
- [Release notes](https://github.com/rust-lang/log/releases)
- [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md)
- [Commits](rust-lang/log@0.4.29...0.4.34)

Updates `async-trait` from 0.1.89 to 0.1.92
- [Release notes](https://github.com/dtolnay/async-trait/releases)
- [Commits](dtolnay/async-trait@0.1.89...0.1.92)

Updates `datafusion-session` from 55.1.0 to 55.2.0
- [Changelog](https://github.com/apache/datafusion/blob/main/CHANGELOG.md)
- [Commits](apache/datafusion@55.1.0...55.2.0)

Updates `serde_with` from 3.21.0 to 3.24.0
- [Release notes](https://github.com/jonasbb/serde_with/releases)
- [Commits](jonasbb/serde_with@v3.21.0...v3.24.0)

---
updated-dependencies:
- dependency-name: arrow
  dependency-version: 60.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: async-trait
  dependency-version: 0.1.92
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: bytes
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: datafusion
  dependency-version: 55.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: datafusion-session
  dependency-version: 55.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: log
  dependency-version: 0.4.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: object_store
  dependency-version: 0.14.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: parquet
  dependency-version: 60.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: serde
  dependency-version: 1.0.229
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: serde_json
  dependency-version: 1.0.152
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: serde_with
  dependency-version: 3.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: tokio
  dependency-version: 1.53.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/core/wren-core-wasm/all-4ad1fdb7a7 branch from 47871e4 to ab8ce6c Compare October 16, 2026 11:24

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

core dependencies Pull requests that update a dependency file rust Pull requests that update rust code wasm

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants