This is an automated email from the ASF dual-hosted git repository.
Jefffrey pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/arrow-rs.git
The following commit(s) were added to refs/heads/main by this push:
new e1b2c9029a chore: specify `--locked` when cargo installing
`cargo-audit` (#10170)
e1b2c9029a is described below
commit e1b2c9029af89bdeec7a8056397d8fc51c57f2f9
Author: Jeffrey Vo <[email protected]>
AuthorDate: Tue Jun 23 10:42:52 2026 +0900
chore: specify `--locked` when cargo installing `cargo-audit` (#10170)
same as we do elsewhere
https://github.com/apache/arrow-rs/blob/c8eba1a0b9e6c307109c9f69ac2aae728b4c8cd9/.github/workflows/miri.yaml#L63
https://github.com/apache/arrow-rs/blob/c8eba1a0b9e6c307109c9f69ac2aae728b4c8cd9/.github/workflows/rust.yml#L121-L123
- see reasoning in this comment; we're not failing right now, but its
good to prevent any future issues
Co-authored-by: Andrew Lamb <[email protected]>
---
.github/workflows/audit.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml
index e63fc86267..a206c350ea 100644
--- a/.github/workflows/audit.yml
+++ b/.github/workflows/audit.yml
@@ -38,6 +38,6 @@ jobs:
steps:
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #
v7.0.0
- name: Install cargo-audit
- run: cargo install cargo-audit
+ run: cargo install cargo-audit --locked
- name: Run audit check
run: cargo audit
