L. C. Hsieh created SPARK-59657:
-----------------------------------

             Summary: Update the redis and base64 dependencies
                 Key: SPARK-59657
                 URL: https://issues.apache.org/jira/browse/SPARK-59657
             Project: Spark
          Issue Type: Sub-task
          Components: Connect
    Affects Versions: connect-gateway-0.1.0
            Reporter: L. C. Hsieh
            Assignee: L. C. Hsieh


  Two small dependency updates, both verified on current main:

    redis   1.6.0 -> 1.7.0  (Cargo.lock only)
    base64  0.22  -> 0.23   (crates/auth dev-dependency)

  Dependabot raised these as #34 and #33, but neither can be merged as filed.
  Both branches were cut before SPARK-59552 landed, so each one also reverts
  jsonwebtoken from

    { version = "10", default-features = false,
      features = ["use_pem", "rust_crypto"] }

  back to "9", dropping around 270 lines from Cargo.lock along with it. That
  would silently undo the crypto provider selection while still compiling and
  still passing every test, so it is not something CI would catch. Rather than
  wait for dependabot to rebase the batch, this applies the two updates directly
  and the dependabot PRs are closed as superseded.

  One deliberate difference from #34: it also narrowed the manifest requirement
  from redis = "1" to "1.7". That narrowing is unnecessary -- the existing "1"
  requirement already admits 1.7.0 -- so only Cargo.lock changes here.

  Verified:

  redis is a production dependency and backs the affinity store, so it was
  checked against a real Redis rather than by compiling. All nine Redis
  integration tests pass: the five #[ignore]d store-redis tests (session bind /
  resolve / forget round-trip, the op-id reverse index, TTL expiry, atomic
  bind-if-absent, and two stores sharing one Redis) and the four scg-ratelimit
  ones (burst, refill, tenant independence, and two replicas sharing a bucket).

  base64 is a dev-dependency of crates/auth only; its 30 tests pass.

  Full workspace: 204 tests pass, matching the baseline on main, with
  cargo clippy --workspace --all-targets -D warnings and cargo fmt --check 
clean.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to