This is an automated email from the ASF dual-hosted git repository.
alamb pushed a commit to branch 58_maintenance
in repository https://gitbox.apache.org/repos/asf/arrow-rs.git
The following commit(s) were added to refs/heads/58_maintenance by this push:
new c12030f296 [58_maintenance] Backport cargo audit fixes (#10369)
c12030f296 is described below
commit c12030f29639f9ac36fdfedd7d00f3b6b6bbd2c1
Author: Andrew Lamb <[email protected]>
AuthorDate: Sat Jul 18 06:55:44 2026 -0400
[58_maintenance] Backport cargo audit fixes (#10369)
# Which issue does this PR close?
- part of https://github.com/apache/arrow-rs/issues/10349
# Rationale for this change
Get a clean CI
# What changes are included in this PR?
Backport / Cherry-pick:
- https://github.com/apache/arrow-rs/pull/10170
- https://github.com/apache/arrow-rs/pull/10267
# Are these changes tested?
By CI
# Are there any user-facing changes?
No
---------
Co-authored-by: Jeffrey Vo <[email protected]>
---
.github/workflows/audit.yml | 7 +++++--
1 file changed, 5 insertions(+), 2 deletions(-)
diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml
index d568fcc0f0..05a5f4d55e 100644
--- a/.github/workflows/audit.yml
+++ b/.github/workflows/audit.yml
@@ -38,6 +38,9 @@ jobs:
steps:
- uses: actions/checkout@v6
- name: Install cargo-audit
- run: cargo install cargo-audit
+ run: cargo install cargo-audit --locked
- name: Run audit check
- run: cargo audit
+ # Waiting on an object_store release with quick-xml >=0.41.0.
+ # https://rustsec.org/advisories/RUSTSEC-2026-0194
+ # https://rustsec.org/advisories/RUSTSEC-2026-0195
+ run: cargo audit --ignore RUSTSEC-2026-0194 --ignore RUSTSEC-2026-0195
