Skip to content

deps(wasm): bump the all group across 1 directory with 12 updates - #2859

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/core/wren-core-wasm/all-09e8371cdd
Open

deps(wasm): bump the all group across 1 directory with 12 updates#2859
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/core/wren-core-wasm/all-09e8371cdd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 10, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the all group with 12 updates in the /core/wren-core-wasm directory:

Package From To
datafusion 55.1.0 55.2.0
object_store 0.13.2 0.14.2
arrow 59.3.0 60.1.0
parquet 59.3.0 60.1.0
tokio 1.53.1 1.54.1
bytes 1.11.1 1.12.1
serde 1.0.228 1.0.229
serde_json 1.0.149 1.0.154
log 0.4.29 0.4.35
async-trait 0.1.89 0.1.92
datafusion-session 55.1.0 55.2.0
serde_with 3.21.0 3.24.0

Updates datafusion from 55.1.0 to 55.2.0

Commits
  • 500744d [branch-55] chore: update version 55.2.0 and add changelog (#26037)
  • ec74746 [branch-55] Preserve field metadata when coercing INT96 timestamps (#24790) (...
  • c1514b5 [branch-55] fix: Remove serde_json/preserve_order feature from library crat...
  • 5e62bc3 [branch-55] fix: preserve fetch across distribution reoptimization (#24809) (...
  • 9f5714b [branch-55] fix datafusion-cli CI: switch from minio to rustfs (#25706) (#25759)
  • 5c4db5a [branch-55] Reduce datafusion-spark dependency footprint (#24351) (#25277)
  • cf7cfd1 [branch-55] fix: update rustls to address RUSTSEC-2026-0285 (#25309) (#25514)
  • 180db4c [branch-55] Pull the MinIO test image from quay.io (#25092, #25216) (#25485)
  • See full diff in compare view

Updates object_store from 0.13.2 to 0.14.2

Release notes

Sourced from object_store's releases.

object_store v0.14.2

Changelog

v0.14.2 (2026-09-11)

Full Changelog

Implemented enhancements:

  • Implement Clone for MicrosoftAzure #824
  • Support URLs for jurisdiction-restricted buckets on R2 #814
  • Lightweight DNS cache with shuffle to prevent DNS flooding #726
  • Allow presigning object_store multipart uploads #271
  • Allow specifying Content-Type when signing object_store PUT requests #270

Fixed bugs:

  • Incomplete ASF license header in src/client/s3.rs (caused -1 vote on 0.14.2 RC1) #853
  • WriteMultipart::finish should abort after part upload failure #818
  • The 1.85 MSRV is inaccurate with all features #811
  • When the backend service returns an HTTP 500, the object store panics #414

Documentation updates:

  • Docs: point users uploading large objects at the multipart API #839 (alamb)
  • [object-store]: update release schedule #834 (alamb)
  • Add doc example for multipart upload to GoogleCloudStorage::create_multipart #803 (alamb)
  • Add doc example for multipart upload to MicrosoftAzure::create_multipart #802 (alamb)
  • Add doc example for multipart upload to AmazonS3::create_multipart #801 (alamb)

Closed issues:

... (truncated)

Changelog

Sourced from object_store's changelog.

Historical Changelog

v0.14.1 (2026-07-10)

Full Changelog

Implemented enhancements:

  • Cache Azure user delegation key for SAS signing #800
  • Add deregister to ObjectStoreRegistry #795
  • Support for S3 dual-stack endpoints #779
  • Coalesce contiguous ranges in LocalFileSystem::get_ranges #778
  • Support for HF Storage Buckets #706

Fixed bugs:

  • Clippy failing on main #798
  • Upgrade quick-xml to resolve RUSTSEC-2026-0194 and RUSTSEC-2026-0195 #786
  • InMemory and LocalFileSystem return unquoted ETags, violating RFC 9110 #769

Closed issues:

  • Bump quick-xml to 0.41.0 for RustSec advisories #787

Merged pull requests:

  • Pin Rust toolchain to 1.97.0 and fix clippy #799 (alamb)
  • chore: reduce lock hold time in DefaultObjectStoreRegistry::deregister #792 (kszucs)
  • Do not explicitly add Host header when making requests with S3Builder #790 (ntjohnson1)
  • impl HttpError::new_boxed to provide user with ability to ctor from already boxed error #789 (DoumanAsh)
  • build(deps): update quick-xml requirement from 0.40.1 to 0.41.0 #785 (dependabot[bot])

... (truncated)

Commits
  • 279572e Update CHANGELOG for latest main (#855)
  • 4ff7d04 Restore missing first line of ASF license header in src/client/s3.rs (#854)
  • 25fa079 Update version to 0.14.2 and add CHANGELOG (#850)
  • c37db72 feat: retry failed multipart part uploads (#849)
  • 135984f Add doc hints pointing large-object uploads at the multipart API (#839)
  • b07471e [object-store]: update release schedule (#834)
  • 978fb48 Fix MSRV violation in parse.rs test, check --all-targets in MSRV CI (#837)
  • e2a4934 Speed up MSRV CI check by installing cargo-msrv via taiki-e/install-action (#...
  • e28807d feat: presigned URLs with extra query params and signed headers (SignedUrlOpt...
  • 5c74363 Restore UnwindSafe/RefUnwindSafe on ClientOptions by bounding DnsResolver (#836)
  • Additional commits viewable in compare view

Updates arrow from 59.3.0 to 60.1.0

Release notes

Sourced from arrow's releases.

arrow 60.1.0

Changelog

60.1.0 - (2026-10-23)

Full Changelog

Security fixes

Enhancements

... (truncated)

Changelog

Sourced from arrow's changelog.

60.1.0 - (2026-10-23)

Full Changelog

Security fixes

Enhancements

Bug fixes

  • fix(arrow-select): reject nulls in non-nullable columns in take_record_batch by @​mbutrovich in #11831
  • [Variant] Restore object field offsets after failed append by @​osipovartem in #11403
  • fix(arrow-select): bounds-check take_record_batch once, with a faster check_bounds for null indices by @​mbutrovich in #11829
  • fix(parquet): align encoded Arrow schemas and nested nullability by @​HippoBaro in #11278
  • Fix incorrect Decimal statistics for BYTE_ARRAY columns written via ArrowColumnWriter by @​DeviousCardi in #11092
  • fix(parquet): return an error for RLE run lengths above the spec limit by @​hhhizzz in #11517
  • fix: use correct length in runarray validation by @​Jefffrey in #11668
  • fix(parquet): return an error when the footer metadata length exceeds the file in ParquetMetaDataPushDecoder by @​ump45nose in #11697
  • fix: account for offset when building RunArray from ArrayData by @​Jefffrey in #11660

... (truncated)

Commits
  • b391e5a Update version to 60.1.0 and add CHANGELOG (#11750)
  • a1eb450 Run fork PR test suites in contributor forks (#11788)
  • afb3d77 bench: Add 0.5% selectivity to coalesce benchmarks (#11772)
  • 46a4abb Fix BatchCoalescer::is_empty documentation (#11790)
  • f1a5016 perf(arrow-buffer): divide i256 by a single word with a reciprocal on 64-bi...
  • 31caa38 ci: move several jobs to ubuntu-slim runner (#11774)
  • 9c9b6a0 fix(arrow-select): reject nulls in non-nullable columns in take_record_batch ...
  • 2a22dd7 [Variant] Restore object field offsets after failed append (#11403)
  • df4dc3e Run Miri on a daily schedule, require it before releases (#11631)
  • 3db18f7 bench: improve concat, coalesce_kernels benchmarks (#11768)
  • Additional commits viewable in compare view

Updates parquet from 59.3.0 to 60.1.0

Release notes

Sourced from parquet's releases.

arrow 60.1.0

Changelog

60.1.0 - (2026-10-23)

Full Changelog

Security fixes

Enhancements

... (truncated)

Changelog

Sourced from parquet's changelog.

60.1.0 - (2026-10-23)

Full Changelog

Security fixes

Enhancements

Bug fixes

  • fix(arrow-select): reject nulls in non-nullable columns in take_record_batch by @​mbutrovich in #11831
  • [Variant] Restore object field offsets after failed append by @​osipovartem in #11403
  • fix(arrow-select): bounds-check take_record_batch once, with a faster check_bounds for null indices by @​mbutrovich in #11829
  • fix(parquet): align encoded Arrow schemas and nested nullability by @​HippoBaro in #11278
  • Fix incorrect Decimal statistics for BYTE_ARRAY columns written via ArrowColumnWriter by @​DeviousCardi in #11092
  • fix(parquet): return an error for RLE run lengths above the spec limit by @​hhhizzz in #11517
  • fix: use correct length in runarray validation by @​Jefffrey in #11668
  • fix(parquet): return an error when the footer metadata length exceeds the file in ParquetMetaDataPushDecoder by @​ump45nose in #11697
  • fix: account for offset when building RunArray from ArrayData by @​Jefffrey in #11660

... (truncated)

Commits
  • b391e5a Update version to 60.1.0 and add CHANGELOG (#11750)
  • a1eb450 Run fork PR test suites in contributor forks (#11788)
  • afb3d77 bench: Add 0.5% selectivity to coalesce benchmarks (#11772)
  • 46a4abb Fix BatchCoalescer::is_empty documentation (#11790)
  • f1a5016 perf(arrow-buffer): divide i256 by a single word with a reciprocal on 64-bi...
  • 31caa38 ci: move several jobs to ubuntu-slim runner (#11774)
  • 9c9b6a0 fix(arrow-select): reject nulls in non-nullable columns in take_record_batch ...
  • 2a22dd7 [Variant] Restore object field offsets after failed append (#11403)
  • df4dc3e Run Miri on a daily schedule, require it before releases (#11631)
  • 3db18f7 bench: improve concat, coalesce_kernels benchmarks (#11768)
  • Additional commits viewable in compare view

Updates tokio from 1.53.1 to 1.54.1

Release notes

Sourced from tokio's releases.

Tokio v1.54.1

1.54.1 (October 21st, 2026)

Fixed

  • time: revert "remove the runtime handle from timers" (#8692)

#8692: tokio-rs/tokio#8692

Tokio v1.54.0

1.54.0 (October 19th, 2026)

The 1.54.0 release includes all changes up to 1.53.3.

The MSRV is increased to 1.85. (#8514)

Added

  • fs: add File::set_times, File::set_modified, and fs::FileTimes (#8504)
  • net: implement Default for named_pipe::{ClientOptions, ServerOptions} (#8378)
  • runtime: add Builder::max_io_events_per_busy_tick (#8410)
  • runtime: stabilize tokio::runtime::worker_index() (#8431)
  • sync: add SemaphorePermit::semaphore() (#8482)
  • sync: add blocking_acquire methods to Semaphore (#8269)
  • sync: add watch::Receiver::is_closed (#8481)
  • wasm: support JSPI for Emscripten target (#8285, #8627)
  • wasm: support the wasm32-unknown-emscripten target (#8281, #8422, #8528, #8628)

Changed

  • fs: reject zero in File::set_max_buf_size (#8449)
  • io: make copy_buf cooperative (#8459)
  • io: panic when BufReader or BufStream is created with zero capacity (#8494)
  • io: panic when in-memory pipe is created with zero capacity (#8397)
  • io: reject zero buffer size in copy_bidirectional_with_sizes (#8454)
  • io: support vectored writes in Sink (#8663)
  • net: start UnixStream::pair and UnixDatagram::pair sockets as writable (#8444)
  • net: start accepted sockets as readable and writable (#8435)
  • net: support UCred on Fuchsia (#8257)
  • process: use mio::unix::pipe for Unix child stdio (#8603)
  • runtime: cache-pad the shared injection queue and idle state (#8622)
  • runtime: decide auto-boxing of spawned futures at monomorphization time (#8414)
  • runtime: make enable_io available whenever rt is enabled (#8387)
  • runtime: move block_in_place setup into a non-generic function (#8315)
  • runtime: move the multi-thread inject queue to its own mutex (#8382)
  • runtime: panic when max_io_events_per_tick is zero (#8476)
  • runtime: suggest .await in nested block_on panic message (#8501)
  • sync: avoid atomic reader count in broadcast slots (#8357)
  • sync: use acquire/release orderings in Notify (#8325)
  • time: remove the runtime handle from timers (#8458)

... (truncated)

Commits

Updates bytes from 1.11.1 to 1.12.1

Release notes

Sourced from bytes's releases.

Bytes v1.12.1

1.12.1 (July 8th, 2026)

Fixed

  • Properly handle when Box::new panics (#837)

Bytes v1.12.0

1.12.0 (June 18th, 2026)

Added

  • Add BytesMut::extend_from_within() (#818)
  • Add BytesMut::try_unsplit() (#746)

Fixed

  • Fix panic in get_int if nbytes is zero (#806)

Changed

  • Pass vtable data by value (#826)
  • Exclude development scripts from published package (#810)

Documented

  • Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)
Changelog

Sourced from bytes's changelog.

1.12.1 (July 8th, 2026)

Fixed

  • Properly handle when Box::new panics (#837)

1.12.0 (June 18th, 2026)

Added

  • Add BytesMut::extend_from_within() (#818)
  • Add BytesMut::try_unsplit() (#746)

Fixed

  • Fix panic in get_int if nbytes is zero (#806)

Changed

  • Pass vtable data by value (#826)
  • Exclude development scripts from published package (#810)

Documented

  • Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)
Commits

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

  • Update to syn 3
Commits
  • 7fc3b4c Release 1.0.229
  • 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
  • 6dec3b7 Update to syn 3
  • cfe6692 Resolve mut_mut pedantic clippy lint
  • 1023d07 Update actions/upload-artifact@v6 -> v7
  • dd682c2 Update actions/checkout@v6 -> v7
  • 5f0f18b Update ui test suite to nightly-2026-06-01
  • 63a1498 Regenerate stderr with trybuild normalization fixes
  • fa7da4a Fix unused_features warning
  • 6b1a178 Unpin CI miri toolchain
  • Additional commits viewable in compare view

Updates serde_json from 1.0.149 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

v1.0.153

v1.0.152

  • Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @​yuxi-liu-wired)
  • Fix comparison of large non-integer values with f32...

    Description has been truncated

@dependabot dependabot Bot added core dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Nov 10, 2026
@coderabbitai

coderabbitai Bot commented Nov 10, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Repository UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 0584ee09-7f8c-419e-950f-dbf489295ab1

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

@github-actions github-actions Bot added the wasm label Nov 10, 2026
@dependabot
deps(wasm): bump the all group across 1 directory with 12 updates
cd875c8 
Bumps the all group with 12 updates in the /core/wren-core-wasm directory:

| Package | From | To |
| --- | --- | --- |
| [datafusion](https://github.com/apache/datafusion) | `55.1.0` | `55.2.0` |
| [object_store](https://github.com/apache/arrow-rs-object-store) | `0.13.2` | `0.14.2` |
| [arrow](https://github.com/apache/arrow-rs) | `59.3.0` | `60.1.0` |
| [parquet](https://github.com/apache/arrow-rs) | `59.3.0` | `60.1.0` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.53.1` | `1.54.1` |
| [bytes](https://github.com/tokio-rs/bytes) | `1.11.1` | `1.12.1` |
| [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.154` |
| [log](https://github.com/rust-lang/log) | `0.4.29` | `0.4.35` |
| [async-trait](https://github.com/dtolnay/async-trait) | `0.1.89` | `0.1.92` |
| [datafusion-session](https://github.com/apache/datafusion) | `55.1.0` | `55.2.0` |
| [serde_with](https://github.com/jonasbb/serde_with) | `3.21.0` | `3.24.0` |



Updates `datafusion` from 55.1.0 to 55.2.0
- [Changelog](https://github.com/apache/datafusion/blob/main/CHANGELOG.md)
- [Commits](apache/datafusion@55.1.0...55.2.0)

Updates `object_store` from 0.13.2 to 0.14.2
- [Release notes](https://github.com/apache/arrow-rs-object-store/releases)
- [Changelog](https://github.com/apache/arrow-rs-object-store/blob/main/CHANGELOG-old.md)
- [Commits](apache/arrow-rs-object-store@v0.13.2...v0.14.2)

Updates `arrow` from 59.3.0 to 60.1.0
- [Release notes](https://github.com/apache/arrow-rs/releases)
- [Changelog](https://github.com/apache/arrow-rs/blob/main/CHANGELOG.md)
- [Commits](apache/arrow-rs@59.3.0...60.1.0)

Updates `parquet` from 59.3.0 to 60.1.0
- [Release notes](https://github.com/apache/arrow-rs/releases)
- [Changelog](https://github.com/apache/arrow-rs/blob/main/CHANGELOG.md)
- [Commits](apache/arrow-rs@59.3.0...60.1.0)

Updates `tokio` from 1.53.1 to 1.54.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.53.1...tokio-1.54.1)

Updates `bytes` from 1.11.1 to 1.12.1
- [Release notes](https://github.com/tokio-rs/bytes/releases)
- [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md)
- [Commits](tokio-rs/bytes@v1.11.1...v1.12.1)

Updates `serde` from 1.0.228 to 1.0.229
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.228...v1.0.229)

Updates `serde_json` from 1.0.149 to 1.0.154
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.149...v1.0.154)

Updates `log` from 0.4.29 to 0.4.35
- [Release notes](https://github.com/rust-lang/log/releases)
- [Changelog](https://github.com/rust-lang/log/blob/main/CHANGELOG.md)
- [Commits](rust-lang/log@0.4.29...v0.4.35)

Updates `async-trait` from 0.1.89 to 0.1.92
- [Release notes](https://github.com/dtolnay/async-trait/releases)
- [Commits](dtolnay/async-trait@0.1.89...0.1.92)

Updates `datafusion-session` from 55.1.0 to 55.2.0
- [Changelog](https://github.com/apache/datafusion/blob/main/CHANGELOG.md)
- [Commits](apache/datafusion@55.1.0...55.2.0)

Updates `serde_with` from 3.21.0 to 3.24.0
- [Release notes](https://github.com/jonasbb/serde_with/releases)
- [Commits](jonasbb/serde_with@v3.21.0...v3.24.0)

---
updated-dependencies:
- dependency-name: arrow
  dependency-version: 60.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: async-trait
  dependency-version: 0.1.92
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: bytes
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: datafusion
  dependency-version: 55.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: datafusion-session
  dependency-version: 55.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: log
  dependency-version: 0.4.35
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: object_store
  dependency-version: 0.14.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: parquet
  dependency-version: 60.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: serde
  dependency-version: 1.0.229
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: serde_json
  dependency-version: 1.0.154
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: serde_with
  dependency-version: 3.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: tokio
  dependency-version: 1.54.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/core/wren-core-wasm/all-09e8371cdd branch from 1382416 to cd875c8 Compare November 13, 2026 11:25

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

core dependencies Pull requests that update a dependency file rust Pull requests that update rust code wasm

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants