yashaggarwal85d opened a new pull request, #26550: URL: https://github.com/apache/datafusion/pull/26550
## Which issue does this PR close? - Closes #26549. ## Rationale for this change The `Security audit` CI job fails on `main` because of two new RustSec advisories. They affect certificate verification in the TLS stack used for HTTPS object store access: [RUSTSEC-2026-0382](https://rustsec.org/advisories/RUSTSEC-2026-0382) (`rustls-webpki`) and [RUSTSEC-2026-0383](https://rustsec.org/advisories/RUSTSEC-2026-0383) (`webpki-root-certs`). ## What changes are included in this PR? `Cargo.lock` only: - `rustls-webpki` 0.103.15 -> 0.103.16 - `webpki-root-certs` 1.0.9 -> 1.0.10 Both are patch releases within the existing semver ranges, so no `Cargo.toml` changes are needed. ## What is the testing strategy for this PR? `ci/scripts/security_audit.sh` passes with this change. It previously failed with 2 vulnerabilities. The existing CI covers the rest. ## Are there any user-facing changes? No. --- AI-assisted: I used an AI coding assistant while preparing this PR. I have reviewed and understand all changes. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
