dependabot[bot] opened a new pull request, #25596: URL: https://github.com/apache/datafusion/pull/25596
Bumps [jlumbroso/free-disk-space](https://github.com/jlumbroso/free-disk-space) from 1.3.1 to 2.0.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/jlumbroso/free-disk-space/releases";>jlumbroso/free-disk-space's releases</a>.</em></p> <blockquote> <h2>v2.0.0 — three breaking changes, each with its reason</h2> <h2>Breaking changes</h2> <ol> <li><strong><code>swap-storage</code> now defaults to <code>false</code>.</strong> Closes <a href="https://redirect.github.com/jlumbroso/free-disk-space/issues/12";>#12</a> — reported and diagnosed by <a href="https://github.com/zaikunzhang";><code>@zaikunzhang</code></a>, whose proposed documentation fallback became the new FAQ. Removing swap can kill a job under memory pressure with no error pointing back at the cleanup step; a default should not break something that elementary.</li> <li><strong><code>tool-cache</code> is renamed <code>preinstalled-runtimes</code>.</strong> The old name still works until v3.0.0 and prints a deprecation warning. (Its default is unchanged: <code>false</code>, as it has been since 2022.) The new name says what actually breaks when you enable it: the runtimes that <code>actions/setup-node</code>, <code>setup-python</code>, <code>setup-go</code>, and <code>setup-ruby</code> rely on.</li> <li><strong>Specific options now override general ones.</strong> <code>dotnet: false</code> exempts .NET from every removal path, including <code>large-packages</code>. Fixes <a href="https://redirect.github.com/jlumbroso/free-disk-space/issues/33";>#33</a> — reported by <a href="https://github.com/ashleney";><code>@ashleney</code></a>; the overlap was first reported by <a href="https://github.com/gmij";><code>@gmij</code></a> in <a href="https://redirect.github.com/jlumbroso/free-disk-space/issues/6";>#6</a>, and <a href="https://github.com/ax3l";><code>@ax3l</code></a> explained the overlapping removal paths and a workaround. The policy is explicit, and this release applies it to .NET; future subject options add and test their own exemptions.</li> </ol> <h2>Upgrading from v1 to v2</h2> <p>Most workflows need no change.</p> <ul> <li>If you set <code>tool-cache:</code>, rename it to <code>preinstalled-runtimes:</code>. The old name still works until v3.0.0 and prints a warning.</li> <li>If you relied on swap being removed by default, add <code>swap-storage: true</code>. It now defaults to <code>false</code>, because removing swap can kill a job under memory pressure with no error pointing back here (<a href="https://redirect.github.com/jlumbroso/free-disk-space/issues/12";>#12</a>).</li> <li>If you set <code>dotnet: false</code> and were surprised that .NET was still removed, that is fixed — a specific option now overrides a general one (<a href="https://redirect.github.com/jlumbroso/free-disk-space/issues/33";>#33</a>).</li> </ul> <h2>Also in this release</h2> <p>A README FAQ ("what are the possible side-effects of these settings?"), <code>CONTRIBUTING.md</code>, and a workflow example for running cleanup conditionally (<a href="https://redirect.github.com/jlumbroso/free-disk-space/issues/22";>#22</a>). The reasons behind every design decision live in <a href="https://github.com/jlumbroso/free-disk-space/tree/main/docs/adr";><code>docs/adr/</code></a> — including ADR-0007, the record of this release's default change, written the day it was decided.</p> <h2>v1.3.2 — security fix and the decision records</h2> <p>Fixes the template-injection pattern in input handling (<a href="https://redirect.github.com/jlumbroso/free-disk-space/issues/51";>#51</a>, by <a href="https://github.com/nbuckwalt";><code>@nbuckwalt</code></a>).</p> <p>Also adds <code>docs/adr/</code> — the reasoning behind this action: why it exists, what it inherited from <code>apache/flink</code> and <code>ShubhamTatvamasi</code>, what it deliberately does not do, and what is still open.</p> <p>No behaviour changes. The <code>swap-storage</code> default change ships in the next release.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/jlumbroso/free-disk-space/commit/ceedf095f4ec1a097402bc6bd80831f2e1a6fde6";><code>ceedf09</code></a> docs: credit the contributors who reported the .NET overlap first, and narrow...</li> <li><a href="https://github.com/jlumbroso/free-disk-space/commit/afeb5ad61cc96fb57cd77f263f82523ad066b950";><code>afeb5ad</code></a> docs: state the deprecation horizon and add the v1→v2 migration note</li> <li><a href="https://github.com/jlumbroso/free-disk-space/commit/a6144990006c494b6077186d03b1f1f1be6d9fc3";><code>a614499</code></a> docs: remove references to unreleased versions</li> <li><a href="https://github.com/jlumbroso/free-disk-space/commit/9881e8b2aa98885a0a15e68ccfc172c2e6793434";><code>9881e8b</code></a> fix: specific options override general ones — <code>dotnet: false</code> now keeps .NET ...</li> <li><a href="https://github.com/jlumbroso/free-disk-space/commit/654d8aa378d76bbe05686844dcf4a55e811679fb";><code>654d8aa</code></a> feat!: swap-storage defaults to false; tool-cache renamed to preinstalled-run...</li> <li><a href="https://github.com/jlumbroso/free-disk-space/commit/3f13feab2962a87273d379ebc36ea159527e6cc9";><code>3f13fea</code></a> docs: backfill the deliberative record (ADR-0001..0007)</li> <li><a href="https://github.com/jlumbroso/free-disk-space/commit/a855e00708fa302615b6d1b31ff817be4482a64f";><code>a855e00</code></a> Merge pull request <a href="https://redirect.github.com/jlumbroso/free-disk-space/issues/51";>#51</a> from nbuckwalt/fix/cmd-exec-inputs-env-indirection</li> <li><a href="https://github.com/jlumbroso/free-disk-space/commit/bcffc68e42e9c9afbd46c5ec108c263be01873ff";><code>bcffc68</code></a> fix: use env var indirection for all boolean inputs to prevent CMD_EXEC</li> <li>See full diff in <a href="https://github.com/jlumbroso/free-disk-space/compare/54081f138730dfa15788a46383842cd2f914a1be...ceedf095f4ec1a097402bc6bd80831f2e1a6fde6";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
