dannycjones opened a new pull request, #3538: URL: https://github.com/apache/iceberg-rust/pull/3538
## Which issue does this PR close? No issue is open. CI is blocked. ## What changes are included in this PR? Two changes: - Ignore advisories we know do not apply to iceberg-rust. - Bump zstd versions used by workspace to some of the advisories. Running the following to find dependents of `zstd` family of crates. ``` ❯ cargo tree --workspace --all-features --target all -e normal --depth 1 -i zstd -i zstd-safe -i zstd-sys zstd v0.13.3 ├── apache-avro v0.22.0 ├── iceberg v0.10.1 (/local/home/djonesoa/devel/iceberg-rust/ci-security-audit/crates/iceberg) └── parquet v59.3.0 zstd-safe v7.2.4 └── zstd v0.13.3 (*) zstd-sys v2.1.2+zstd.1.5.7 └── zstd-safe v7.2.4 (*) ``` None of the three dependents are using `with_context` APIs. ## AI Disclosure AI to do triage and investigation, especially on `RUSTSEC-2026-0391`. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
