alamb opened a new issue, #15571:
URL: https://github.com/apache/datafusion/issues/15571

   ### Describe the bug
   
   We are seeing a cargo audit failure on @zebsme 's PR: 
https://github.com/apache/datafusion/pull/15454
   
   
   ```
   Crate:     proc-macro-error
   Version:   1.0.4
   Warning:   unmaintained
   Title:     proc-macro-error is unmaintained
   Date:      2024-09-01
   ID:        RUSTSEC-2024-0370
   URL:       https://rustsec.org/advisories/RUSTSEC-2024-0370
   Dependency tree:
   proc-macro-error 1.0.4
   └── structopt-derive 0.4.18
       └── structopt 0.3.26
           └── datafusion-benchmarks 46.0.1
   
   error: 1 vulnerability found!
   warning: 3 allowed warnings found
   ```
   
   The error is actually happening on main as well, but the CI job is only 
setup to run when Cargo.toml/Cargo.lock changes:
   
https://github.com/apache/datafusion/blob/ac919d58ad1a472bf0681055f1e243ae329f5389/.github/workflows/audit.yml#L25-L33
   
   The job can start failing when a new entry is added to the database, in 
addition to when the crates used by datafusion are changed
   
   
   ### To Reproduce
   
   ```
   # in datafusion directory
   cargo audit
   ```
   
   ### Expected behavior
   
   _No response_
   
   ### Additional context
   
   _No response_


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscr...@datafusion.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: github-unsubscr...@datafusion.apache.org
For additional commands, e-mail: github-h...@datafusion.apache.org

Reply via email to