[
https://issues.apache.org/jira/browse/SPARK-59657?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
ASF GitHub Bot updated SPARK-59657:
-----------------------------------
Labels: pull-request-available (was: )
> Update the redis and base64 dependencies
> ----------------------------------------
>
> Key: SPARK-59657
> URL: https://issues.apache.org/jira/browse/SPARK-59657
> Project: Spark
> Issue Type: Sub-task
> Components: Connect
> Affects Versions: connect-gateway-0.1.0
> Reporter: L. C. Hsieh
> Assignee: L. C. Hsieh
> Priority: Major
> Labels: pull-request-available
>
> Two small dependency updates, both verified on current main:
> redis 1.6.0 -> 1.7.0 (Cargo.lock only)
> base64 0.22 -> 0.23 (crates/auth dev-dependency)
> Dependabot raised these as #34 and #33, but neither can be merged as filed.
> Both branches were cut before SPARK-59552 landed, so each one also reverts
> jsonwebtoken from
> { version = "10", default-features = false,
> features = ["use_pem", "rust_crypto"] }
> back to "9", dropping around 270 lines from Cargo.lock along with it. That
> would silently undo the crypto provider selection while still compiling and
> still passing every test, so it is not something CI would catch. Rather than
> wait for dependabot to rebase the batch, this applies the two updates
> directly
> and the dependabot PRs are closed as superseded.
> One deliberate difference from #34: it also narrowed the manifest
> requirement
> from redis = "1" to "1.7". That narrowing is unnecessary -- the existing "1"
> requirement already admits 1.7.0 -- so only Cargo.lock changes here.
> Verified:
> redis is a production dependency and backs the affinity store, so it was
> checked against a real Redis rather than by compiling. All nine Redis
> integration tests pass: the five #[ignore]d store-redis tests (session bind
> /
> resolve / forget round-trip, the op-id reverse index, TTL expiry, atomic
> bind-if-absent, and two stores sharing one Redis) and the four scg-ratelimit
> ones (burst, refill, tenant independence, and two replicas sharing a
> bucket).
> base64 is a dev-dependency of crates/auth only; its 30 tests pass.
> Full workspace: 204 tests pass, matching the baseline on main, with
> cargo clippy --workspace --all-targets -D warnings and cargo fmt --check
> clean.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
