Skip to content

Chore(deps): Bump rsa from 0.9.8 to 0.9.10 in the cargo group across 1 directory#7

Closed
dependabot[bot] wants to merge 376 commits into
spiceaifrom
dependabot/cargo/cargo-2a37c962ae
Closed

Chore(deps): Bump rsa from 0.9.8 to 0.9.10 in the cargo group across 1 directory#7
dependabot[bot] wants to merge 376 commits into
spiceaifrom
dependabot/cargo/cargo-2a37c962ae

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Jan 6, 2026

Bumps the cargo group with 1 update in the / directory: rsa.

Updates rsa from 0.9.8 to 0.9.10

Changelog

Sourced from rsa's changelog.

0.9.10 (2026-01-06)

Fixed

  • do not panic on a prime being 1 when loading a secret key (#624)

#624: RustCrypto/RSA#624

0.9.9 (2025-11-13)

Fixed

  • Support for cryptographic operations with larger keys (#594)

#594: RustCrypto/RSA#594

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

connortsui20 and others added 30 commits November 20, 2025 17:00
Just so the new unpack functions that work with vectors dont name
collide

Signed-off-by: Connor Tsui <connor.tsui20@gmail.com>
Signed-off-by: Connor Tsui <connor.tsui20@gmail.com>
Co-authored-by: Andrew Duffy <a10y@users.noreply.github.com>
Signed-off-by: Connor Tsui <connor.tsui20@gmail.com>
This removes the unused stat_field_path function, as well as improves
coverage for propagating other statistics.

Interestingly it has highlighted the difference between pruning stats
(min, max, is_null), and aggregate stats (sum, null_count, etc.). I have
some ideas for generalizing these concepts, but that's for another day.

---------

Signed-off-by: Nicholas Gates <nick@nickgates.com>
Signed-off-by: Connor Tsui <connor.tsui20@gmail.com>
…x-data#5426)

We should ensure that visitors are given ref to externally owned array

Signed-off-by: Joe Isaacs <joe.isaacs@live.co.uk>
…tex-datafusion (vortex-data#5436)

I think the unit test and PR title are self-explanatory.

---------

Signed-off-by: Frederic Branczyk <fbranczyk@gmail.com>
To allow using Vortex as a read/write datasource with Spark, we publish
an assembly JAR that shades all runtime dependencies that may conflict
with Spark.

<img width="1840" height="1195" alt="image"
src="https://github.com/user-attachments/assets/f65f8c32-fca6-41cd-b54f-965b8149bc97"
/>

Unfortunately it's a bit hard to test publishing, I've just modeled this
on the existing setup from vortex-jni-all JAR

Signed-off-by: Andrew Duffy <andrew@a10y.dev>
…-data#5438)

Signed-off-by: Joe Isaacs <joe.isaacs@live.co.uk>
Co-authored-by: Robert Kruszewski <github@robertk.io>
…uess the necessary memory (vortex-data#5433)

fix: vortex-data#5373 

I think we could have these do RAII but we need something better than
just scalar_at

Signed-off-by: Robert Kruszewski <github@robertk.io>

---------

Signed-off-by: Robert Kruszewski <github@robertk.io>
Signed-off-by: Robert Kruszewski <github@robertk.io>
note that we probably shouldnt be working with `Mask` at all, but this
code is going to be replaced by the vector rewrite and I've already
fixed that.

Signed-off-by: Connor Tsui <connor.tsui20@gmail.com>
Signed-off-by: Joe Isaacs <joe.isaacs@live.co.uk>
…-data#5449)

This reverts commit 63b759f.

Signed-off-by: Alexander Droste <alexander.droste@protonmail.com>
This is a purely cosmetic change.

Moves all vtable implementations to their own files and separates
decompression functions out into a `for_decompress` file

Signed-off-by: Connor Tsui <connor.tsui20@gmail.com>
This is a purely cosmetic change.

Moves all vtable implementations to their own files and separates
decompression functions out into a delta_decompress file

Signed-off-by: Connor Tsui <connor.tsui20@gmail.com>
same as the last 2

Signed-off-by: Connor Tsui <connor.tsui20@gmail.com>
Adds unpacking directly into buffers instead of a builder.

---------

Signed-off-by: Connor Tsui <connor.tsui20@gmail.com>
…rtex-data#5450)

Signed-off-by: Robert Kruszewski <github@robertk.io>

Signed-off-by: Robert Kruszewski <github@robertk.io>
Pulls out the modified-for-operatoras apply patches implementation as a
method on `Patches` instead.

Signed-off-by: Connor Tsui <connor.tsui20@gmail.com>
Based on the community model of
ghostty-org/ghostty#3558

---------

Signed-off-by: Nicholas Gates <nick@nickgates.com>
Fixes some issues I encountered trying to get some files with nested
structs/lists to load.

I'm still hitting a very strange issue deep in C Arrow Data interface
with the 3.5GB github archives dataset, but this fixes some other
issues.

---------

Signed-off-by: Andrew Duffy <andrew@a10y.dev>
Signed-off-by: Robert Kruszewski <github@robertk.io>
Co-authored-by: Robert Kruszewski <github@robertk.io>
Signed-off-by: Nicholas Gates <nick@nickgates.com>
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [dyn-hash](https://redirect.github.com/dtolnay/dyn-hash) |
workspace.dependencies | major | `0.2.0` -> `1.0.0` |

---

### Release Notes

<details>
<summary>dtolnay/dyn-hash (dyn-hash)</summary>

###
[`v1.0.0`](https://redirect.github.com/dtolnay/dyn-hash/releases/tag/1.0.0)

[Compare
Source](https://redirect.github.com/dtolnay/dyn-hash/compare/0.2.2...1.0.0)

*(Identical to 0.2.2)*

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on
Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/vortex-data/vortex).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4xNi4xIiwidXBkYXRlZEluVmVyIjoiNDIuMTYuMSIsInRhcmdldEJyYW5jaCI6ImRldmVsb3AiLCJsYWJlbHMiOlsiY2hvcmUiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[actions/download-artifact](https://redirect.github.com/actions/download-artifact)
| action | major | `v4` -> `v5` |
|
[actions/upload-artifact](https://redirect.github.com/actions/upload-artifact)
| action | major | `v4` -> `v5` |

---

### Release Notes

<details>
<summary>actions/download-artifact (actions/download-artifact)</summary>

###
[`v5`](https://redirect.github.com/actions/download-artifact/compare/v4...v5)

[Compare
Source](https://redirect.github.com/actions/download-artifact/compare/v4...v5)

</details>

<details>
<summary>actions/upload-artifact (actions/upload-artifact)</summary>

###
[`v5`](https://redirect.github.com/actions/upload-artifact/compare/v4...v5)

[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4...v5)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on
Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/vortex-data/vortex).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4xNi4xIiwidXBkYXRlZEluVmVyIjoiNDIuMTYuMSIsInRhcmdldEJyYW5jaCI6ImRldmVsb3AiLCJsYWJlbHMiOlsiY2hvcmUiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| CodSpeedHQ/action | action | digest | `6a8e2b8` -> `346a2d8` |

---

### Configuration

📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on
Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/vortex-data/vortex).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4xNi4xIiwidXBkYXRlZEluVmVyIjoiNDIuMTYuMSIsInRhcmdldEJyYW5jaCI6ImRldmVsb3AiLCJsYWJlbHMiOlsiY2hvcmUiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[actions/download-artifact](https://redirect.github.com/actions/download-artifact)
| action | major | `v5` -> `v6` |

---

### Release Notes

<details>
<summary>actions/download-artifact (actions/download-artifact)</summary>

###
[`v6`](https://redirect.github.com/actions/download-artifact/compare/v5...v6)

[Compare
Source](https://redirect.github.com/actions/download-artifact/compare/v5...v6)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on
Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/vortex-data/vortex).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4xNi4xIiwidXBkYXRlZEluVmVyIjoiNDIuMTYuMSIsInRhcmdldEJyYW5jaCI6ImRldmVsb3AiLCJsYWJlbHMiOlsiY2hvcmUiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://redirect.github.com/actions/checkout) |
action | major | `v5` -> `v6` |

---

### Release Notes

<details>
<summary>actions/checkout (actions/checkout)</summary>

### [`v6`](https://redirect.github.com/actions/checkout/compare/v5...v6)

[Compare
Source](https://redirect.github.com/actions/checkout/compare/v5...v6)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on
Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/vortex-data/vortex).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4xNi4xIiwidXBkYXRlZEluVmVyIjoiNDIuMTYuMSIsInRhcmdldEJyYW5jaCI6ImRldmVsb3AiLCJsYWJlbHMiOlsiY2hvcmUiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [lance](https://redirect.github.com/lancedb/lance) | dependencies |
minor | `0.38.2` -> `0.39.0` |

---

### Release Notes

<details>
<summary>lancedb/lance (lance)</summary>

###
[`v0.39.0`](https://redirect.github.com/lance-format/lance/releases/tag/v0.39.0)

[Compare
Source](https://redirect.github.com/lancedb/lance/compare/v0.38.3...v0.39.0)

<!-- Release notes generated using configuration in .github/release.yml
at v0.39.0 -->

#### What's Changed

##### Breaking Changes 🛠

- feat!: incremental indexing via SPFresh by
[@&#8203;BubbleCal](https://redirect.github.com/BubbleCal) in
[#&#8203;4837](https://redirect.github.com/lancedb/lance/pull/4837)

##### New Features 🎉

- feat(java): expose ManifestSummary to java api by
[@&#8203;steFaiz](https://redirect.github.com/steFaiz) in
[#&#8203;5092](https://redirect.github.com/lancedb/lance/pull/5092)
- feat: support dynamic storage options provider with AWS credentials
vending by [@&#8203;jackye1995](https://redirect.github.com/jackye1995)
in [#&#8203;4905](https://redirect.github.com/lancedb/lance/pull/4905)

##### Bug Fixes 🐛

- fix: infinite kmeans if the largest cluster produces only 1 cluster by
[@&#8203;BubbleCal](https://redirect.github.com/BubbleCal) in
[#&#8203;5078](https://redirect.github.com/lancedb/lance/pull/5078)
- fix: remove remainder explain\_plan method in Python by
[@&#8203;ddupg](https://redirect.github.com/ddupg) in
[#&#8203;5085](https://redirect.github.com/lancedb/lance/pull/5085)
- fix(rust): add explicit dependency on chrono serde feature by
[@&#8203;wjones127](https://redirect.github.com/wjones127) in
[#&#8203;5110](https://redirect.github.com/lancedb/lance/pull/5110)
- fix: no panic on unknown version by
[@&#8203;wjones127](https://redirect.github.com/wjones127) in
[#&#8203;5111](https://redirect.github.com/lancedb/lance/pull/5111)
- fix: skip compression in create\_per\_value if compression metadata is
set to none by
[@&#8203;wojiaodoubao](https://redirect.github.com/wojiaodoubao) in
[#&#8203;5086](https://redirect.github.com/lancedb/lance/pull/5086)
- fix: forward incompatibility of prerelease in writer version by
[@&#8203;jackye1995](https://redirect.github.com/jackye1995) in
[#&#8203;5116](https://redirect.github.com/lancedb/lance/pull/5116)

##### Documentation 📚

- docs: minor doc fix for docs/src/format/file/encoding.md by
[@&#8203;zhangyue19921010](https://redirect.github.com/zhangyue19921010)
in [#&#8203;5108](https://redirect.github.com/lancedb/lance/pull/5108)
- docs: add fragment level update columns docs by
[@&#8203;xloya](https://redirect.github.com/xloya) in
[#&#8203;5123](https://redirect.github.com/lancedb/lance/pull/5123)

##### Other Changes

- refactor: introduce SchemaAdapter to perform logical/physical
transform by [@&#8203;Xuanwo](https://redirect.github.com/Xuanwo) in
[#&#8203;5096](https://redirect.github.com/lancedb/lance/pull/5096)

**Full Changelog**:
<lance-format/lance@v0.38.3...v0.39.0>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on
Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/vortex-data/vortex).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4xNi4xIiwidXBkYXRlZEluVmVyIjoiNDIuMTYuMSIsInRhcmdldEJyYW5jaCI6ImRldmVsb3AiLCJsYWJlbHMiOlsiY2hvcmUiXX0=-->

---------

Signed-off-by: Robert Kruszewski <github@robertk.io>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Robert Kruszewski <github@robertk.io>
renovate Bot and others added 18 commits December 22, 2025 01:00
This PR contains the following updates:

| Package | Type | Update | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|---|---|
| [cc](https://redirect.github.com/rust-lang/cc-rs) |
workspace.dependencies | patch | `1.2.49` -> `1.2.50` |
![age](https://developer.mend.io/api/mc/badges/age/crate/cc/1.2.50?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/crate/cc/1.2.49/1.2.50?slim=true)
|
| [cxx](https://cxx.rs)
([source](https://redirect.github.com/dtolnay/cxx)) | dependencies |
patch | `1.0.191` -> `1.0.192` |
![age](https://developer.mend.io/api/mc/badges/age/crate/cxx/1.0.192?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/crate/cxx/1.0.191/1.0.192?slim=true)
|
| [cxx-build](https://cxx.rs)
([source](https://redirect.github.com/dtolnay/cxx)) | build-dependencies
| patch | `1.0.191` -> `1.0.192` |
![age](https://developer.mend.io/api/mc/badges/age/crate/cxx-build/1.0.192?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/crate/cxx-build/1.0.191/1.0.192?slim=true)
|
| [moka](https://redirect.github.com/moka-rs/moka) |
workspace.dependencies | patch | `0.12.11` -> `0.12.12` |
![age](https://developer.mend.io/api/mc/badges/age/crate/moka/0.12.12?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/crate/moka/0.12.11/0.12.12?slim=true)
|
| [reqwest](https://redirect.github.com/seanmonstar/reqwest) |
workspace.dependencies | patch | `0.12.25` -> `0.12.26` |
![age](https://developer.mend.io/api/mc/badges/age/crate/reqwest/0.12.26?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/crate/reqwest/0.12.25/0.12.26?slim=true)
|
| [roaring](https://redirect.github.com/RoaringBitmap/roaring-rs) |
workspace.dependencies | patch | `0.11.2` -> `0.11.3` |
![age](https://developer.mend.io/api/mc/badges/age/crate/roaring/0.11.3?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/crate/roaring/0.11.2/0.11.3?slim=true)
|
|
[target-lexicon](https://redirect.github.com/bytecodealliance/target-lexicon)
| workspace.dependencies | patch | `0.13.3` -> `0.13.4` |
![age](https://developer.mend.io/api/mc/badges/age/crate/target-lexicon/0.13.4?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/crate/target-lexicon/0.13.3/0.13.4?slim=true)
|
| com.google.protobuf | plugin | patch | `0.9.5` -> `0.9.6` |
![age](https://developer.mend.io/api/mc/badges/age/maven/com.google.protobuf:com.google.protobuf.gradle.plugin/0.9.6?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/com.google.protobuf:com.google.protobuf.gradle.plugin/0.9.5/0.9.6?slim=true)
|

---

### Release Notes

<details>
<summary>rust-lang/cc-rs (cc)</summary>

###
[`v1.2.50`](https://redirect.github.com/rust-lang/cc-rs/blob/HEAD/CHANGELOG.md#1250---2025-12-19)

[Compare
Source](https://redirect.github.com/rust-lang/cc-rs/compare/cc-v1.2.49...cc-v1.2.50)

##### Other

- Add tests for `OUT_DIR` escape for '..' file paths
([#&#8203;1631](https://redirect.github.com/rust-lang/cc-rs/issues/1631))
- Fix
[#&#8203;283](https://redirect.github.com/rust-lang/cc-rs/issues/283):
Make warnings(false) actually suppress compiler warnings
([#&#8203;1633](https://redirect.github.com/rust-lang/cc-rs/pull/1633))

</details>

<details>
<summary>dtolnay/cxx (cxx)</summary>

###
[`v1.0.192`](https://redirect.github.com/dtolnay/cxx/releases/tag/1.0.192)

[Compare
Source](https://redirect.github.com/dtolnay/cxx/compare/1.0.191...1.0.192)

- Add support for `Vec<Box<T>>`
([#&#8203;1681](https://redirect.github.com/dtolnay/cxx/issues/1681),
thanks [@&#8203;anforowicz](https://redirect.github.com/anforowicz))

</details>

<details>
<summary>moka-rs/moka (moka)</summary>

###
[`v0.12.12`](https://redirect.github.com/moka-rs/moka/blob/HEAD/CHANGELOG.md#Version-01212)

[Compare
Source](https://redirect.github.com/moka-rs/moka/compare/v0.12.11...v0.12.12)

Bumped the minimum supported Rust version (MSRV) to 1.71.1, released on
August 3,
2023
(\[[#&#8203;555](https://redirect.github.com/moka-rs/moka/issues/555)]\[gh-pull-0555]).

##### Fixed

- Fixed use-after-free panic in the hierarchical timer wheels when
`Expiry` returns
`None`
(\[[#&#8203;548](https://redirect.github.com/moka-rs/moka/issues/548)]\[gh-pull-0548],
by \[[@&#8203;awarus](https://redirect.github.com/awarus)]\[gh-awarus]).
- Fixed a subtle undefined behavior (UB) in the internal
`deque::move_to_back` method
(found by Miri)
(\[[#&#8203;553](https://redirect.github.com/moka-rs/moka/issues/553)]\[gh-pull-0553]).

##### Added

- `impl Expiry` for some types
(\[[#&#8203;519](https://redirect.github.com/moka-rs/moka/issues/519)]\[gh-pull-0519],
by
\[[@&#8203;koushiro](https://redirect.github.com/koushiro)]\[gh-koushiro]).

##### Removed

- Removed several unneeded files from the published package
(\[[#&#8203;541](https://redirect.github.com/moka-rs/moka/issues/541)]\[gh-pull-0541],
by
\[[@&#8203;weiznich](https://redirect.github.com/weiznich)]\[gh-weiznich]).
- Removed the `once_cell` crate from the dependencies
(\[[#&#8203;520](https://redirect.github.com/moka-rs/moka/issues/520)]\[gh-pull-0520],
by

\[[@&#8203;Expyron](https://redirect.github.com/Expyron)]\[gh-Expyron]).
- Removed the `rustc_version` crate from the dev-dependencies
(\[[#&#8203;554](https://redirect.github.com/moka-rs/moka/issues/554)]\[gh-pull-0554]).

</details>

<details>
<summary>seanmonstar/reqwest (reqwest)</summary>

###
[`v0.12.26`](https://redirect.github.com/seanmonstar/reqwest/blob/HEAD/CHANGELOG.md#v01226)

[Compare
Source](https://redirect.github.com/seanmonstar/reqwest/compare/v0.12.25...v0.12.26)

- Fix sending `Accept-Encoding` header only with values configured with
reqwest, regardless of underlying tower-http config.

</details>

<details>
<summary>RoaringBitmap/roaring-rs (roaring)</summary>

###
[`v0.11.3`](https://redirect.github.com/RoaringBitmap/roaring-rs/releases/tag/v0.11.3)

[Compare
Source](https://redirect.github.com/RoaringBitmap/roaring-rs/compare/v0.11.2...v0.11.3)

#### What's Changed

- fix: bitmap advance\_back\_to could violate invariants by
[@&#8203;Dr-Emann](https://redirect.github.com/Dr-Emann) in
[#&#8203;339](https://redirect.github.com/RoaringBitmap/roaring-rs/pull/339)
- Introduce Iter::next\_range and next\_range\_back by
[@&#8203;Dr-Emann](https://redirect.github.com/Dr-Emann) in
[#&#8203;338](https://redirect.github.com/RoaringBitmap/roaring-rs/pull/338)
- Bump version to v0.11.3 and MSRV to 1.82 by
[@&#8203;Kerollmops](https://redirect.github.com/Kerollmops) in
[#&#8203;342](https://redirect.github.com/RoaringBitmap/roaring-rs/pull/342)

**Full Changelog**:
<RoaringBitmap/roaring-rs@v0.11.2...v0.11.3>

</details>

<details>
<summary>bytecodealliance/target-lexicon (target-lexicon)</summary>

###
[`v0.13.4`](https://redirect.github.com/bytecodealliance/target-lexicon/compare/v0.13.3...v0.13.4)

[Compare
Source](https://redirect.github.com/bytecodealliance/target-lexicon/compare/v0.13.3...v0.13.4)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on
Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/vortex-data/vortex).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi41OS4wIiwidXBkYXRlZEluVmVyIjoiNDIuNTkuMCIsInRhcmdldEJyYW5jaCI6ImRldmVsb3AiLCJsYWJlbHMiOlsiY2hvcmUiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| CodSpeedHQ/action | action | digest | `346a2d8` -> `972e343` |

---

### Configuration

📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on
Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/vortex-data/vortex).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi41OS4wIiwidXBkYXRlZEluVmVyIjoiNDIuNTkuMCIsInRhcmdldEJyYW5jaCI6ImRldmVsb3AiLCJsYWJlbHMiOlsiY2hvcmUiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Adam Gutglick <adam@spiraldb.com>
…inview (vortex-data#5814)

I noticed that the better blocks compressor uses count_referenced_bytes
which calls is_valid on each view and results in an expensive scalar_at
call. This was 30% of our system-wide CPU usage over 12 hours (see PR
for attached screenshot).

This commit iterates over the nullability mask directly to avoid these
expensive calls.

<img width="1443" height="953" alt="image"
src="https://github.com/user-attachments/assets/88a928d1-e223-426a-9c4e-bd5b35458a0d"
/>

Signed-off-by: Alfonso Subiotto Marques <alfonso.subiotto@polarsignals.com>
…ta#5805)

This change removes all the instances of `vortex_unwrap` and replaces
them with `vortex_expect` essentially compelling the user to provide a
justification of failure.

Signed-off-by: Pratham Agarwal <agarwalpratham1812@gmail.com>
This should also make sure that the fuzzer doesn't keep reporting the
wrong error message.

As for the TODO, see vortex-data#5820

Signed-off-by: Connor Tsui <connor.tsui20@gmail.com>
This should fix the random access and compression failures on the commit
to develop workflow

Signed-off-by: Connor Tsui <connor.tsui20@gmail.com>
Ok this will actually fix it after
vortex-data#5823

Signed-off-by: Connor Tsui <connor.tsui20@gmail.com>
…ata#5832)

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [ch.qos.logback:logback-classic](http://logback.qos.ch)
([source](https://redirect.github.com/qos-ch/logback),
[changelog](https://logback.qos.ch/news.html)) | `1.5.22` -> `1.5.23` |
![age](https://developer.mend.io/api/mc/badges/age/maven/ch.qos.logback:logback-classic/1.5.23?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/ch.qos.logback:logback-classic/1.5.22/1.5.23?slim=true)
|

---

### Configuration

📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on
Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/vortex-data/vortex).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi41OS4wIiwidXBkYXRlZEluVmVyIjoiNDIuNTkuMCIsInRhcmdldEJyYW5jaCI6ImRldmVsb3AiLCJsYWJlbHMiOlsiY2hvcmUiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
I think this will finally fix it

Signed-off-by: Connor Tsui <connor.tsui20@gmail.com>
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[org.immutables:value](https://redirect.github.com/immutables/immutables/tree/value)
([source](https://redirect.github.com/immutables/immutables)) | `2.11.7`
-> `2.12.0` |
![age](https://developer.mend.io/api/mc/badges/age/maven/org.immutables:value/2.12.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.immutables:value/2.11.7/2.12.0?slim=true)
|

---

### Release Notes

<details>
<summary>immutables/immutables (org.immutables:value)</summary>

###
[`v2.12.0`](https://redirect.github.com/immutables/immutables/releases/tag/2.12.0)

[Compare
Source](https://redirect.github.com/immutables/immutables/compare/2.11.7...2.12.0)

### 12 Anniversary Edition 🎉

#### maintenance & refinements

Thank you for the PRs, bug reports and feedback!

- Jackson 3 support
- New and updated website with new guides (new, all styles, all modules)
- Same place: <https://immutables.github.io/> (also redirects from
<http://immutables.org/>)
-
[-Aimmutables.annotations.pick](https://immutables.github.io/newandnice.html#-aimmutablesannotationspick)
  - maybe will finally solve javax/jakarta thing with global flag
-
[-Aimmutables.guava.suppress](https://immutables.github.io/newandnice.html#-aimmutablesguavasuppress)

#### PRs

- Jackson 3 support for Immutables by
[@&#8203;dkaukov](https://redirect.github.com/dkaukov) in
[#&#8203;1615](https://redirect.github.com/immutables/immutables/pull/1615)
- 1623 fix find nested element matching multiple conditions by
[@&#8203;harmenweber](https://redirect.github.com/harmenweber) in
[#&#8203;1624](https://redirect.github.com/immutables/immutables/pull/1624)
- Fix: fix four non-deterministic tests by
[@&#8203;yonghanlin](https://redirect.github.com/yonghanlin) in
[#&#8203;1625](https://redirect.github.com/immutables/immutables/pull/1625)

#### New Contributors

- [@&#8203;dkaukov](https://redirect.github.com/dkaukov) made their
first contribution in
[#&#8203;1615](https://redirect.github.com/immutables/immutables/pull/1615)
- [@&#8203;yonghanlin](https://redirect.github.com/yonghanlin) made
their first contribution in
[#&#8203;1625](https://redirect.github.com/immutables/immutables/pull/1625)

**Full Changelog**:
<immutables/immutables@2.11.7...2.12.0>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on
Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/vortex-data/vortex).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi41OS4wIiwidXBkYXRlZEluVmVyIjoiNDIuNTkuMCIsInRhcmdldEJyYW5jaCI6ImRldmVsb3AiLCJsYWJlbHMiOlsiY2hvcmUiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [tracing](https://tokio.rs)
([source](https://redirect.github.com/tokio-rs/tracing)) |
workspace.dependencies | patch | `0.1.43` -> `0.1.44` |

---

### Release Notes

<details>
<summary>tokio-rs/tracing (tracing)</summary>

###
[`v0.1.44`](https://redirect.github.com/tokio-rs/tracing/releases/tag/tracing-0.1.44):
tracing 0.1.44

[Compare
Source](https://redirect.github.com/tokio-rs/tracing/compare/tracing-0.1.43...tracing-0.1.44)

##### Fixed

- Fix `record_all` panic ([#&#8203;3432])

##### Changed

- `tracing-core`: updated to 0.1.36 ([#&#8203;3440])

[#&#8203;3432]: https://redirect.github.com/tokio-rs/tracing/pull/3432

[#&#8203;3440]: https://redirect.github.com/tokio-rs/tracing/pull/3440

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on
Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/vortex-data/vortex).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi41OS4wIiwidXBkYXRlZEluVmVyIjoiNDIuNTkuMCIsInRhcmdldEJyYW5jaCI6ImRldmVsb3AiLCJsYWJlbHMiOlsiY2hvcmUiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
I think this is finally it after
vortex-data#5830

Signed-off-by: Connor Tsui <connor.tsui20@gmail.com>
Removes lance from the SQL remote benchmarks on S3 and cleaned up some
commands.

Signed-off-by: Connor Tsui <connor.tsui20@gmail.com>
Fixes a issue from the previous PR where I removed the `|| true` by
accident (comments explain), and also extracts and deduplicates the
inlined bash scripts in the `sql-benchmarks.yml` file.

---------

Signed-off-by: Connor Tsui <connor.tsui20@gmail.com>
Signed-off-by: Connor Tsui <connor.tsui20@gmail.com>
Closes vortex-data#5837

Turns out it was already implemented, but that one thing wasn't
imported.

Signed-off-by: Connor Tsui <connor.tsui20@gmail.com>
Bumps the cargo group with 1 update in the / directory: [rsa](https://github.com/RustCrypto/RSA).


Updates `rsa` from 0.9.8 to 0.9.10
- [Changelog](https://github.com/RustCrypto/RSA/blob/v0.9.10/CHANGELOG.md)
- [Commits](RustCrypto/RSA@v0.9.8...v0.9.10)

---
updated-dependencies:
- dependency-name: rsa
  dependency-version: 0.9.10
  dependency-type: indirect
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies rust Pull requests that update rust code labels Jan 6, 2026
lukekim
lukekim previously approved these changes Jan 14, 2026
@lukekim lukekim changed the base branch from develop to spiceai January 14, 2026 21:42
@lukekim lukekim dismissed their stale review January 14, 2026 21:42

The base branch was changed.

@lukekim lukekim closed this Jan 14, 2026
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Jan 14, 2026

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot Bot deleted the dependabot/cargo/cargo-2a37c962ae branch January 14, 2026 21:42
lukekim added a commit that referenced this pull request Feb 27, 2026
Ported from spiceai-51 patches:
- Add Clone and Debug derives to WriteStrategyBuilder (#7, #4)
- Add Debug bound to CompressorPlugin trait (#7)
- Add VortexSession::set() method (#4)
- Use session WriteStrategyBuilder in write_options() if available (#4)
lukekim pushed a commit that referenced this pull request May 18, 2026
## Summary

Fix for the second part of: vortex-data#7808 

```
(gdb) bt
#0  __pthread_kill_implementation (no_tid=0, signo=6, threadid=<optimized out>)
    at ./nptl/pthread_kill.c:44
#1  __pthread_kill_internal (signo=6, threadid=<optimized out>) at ./nptl/pthread_kill.c:78
#2  __GI___pthread_kill (threadid=<optimized out>, signo=signo@entry=6)
    at ./nptl/pthread_kill.c:89
#3  0x000076a38cc4527e in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
#4  0x000076a38cc288ff in __GI_abort () at ./stdlib/abort.c:79
#5  0x000076a38cc297b6 in __libc_message_impl (fmt=fmt@entry=0x76a38cdce8d7 "%s\n")
    at ../sysdeps/posix/libc_fatal.c:134
#6  0x000076a38cca8ff5 in malloc_printerr (
    str=str@entry=0x76a38cdd1bf0 "free(): double free detected in tcache 2")
    at ./malloc/malloc.c:5775
#7  0x000076a38ccab55f in _int_free (av=0x76a38ce03ac0 <main_arena>, p=<optimized out>, 
    have_lock=0) at ./malloc/malloc.c:4541
#8  0x000076a38ccaddce in __GI___libc_free (mem=0x5be5cd9632c0) at ./malloc/malloc.c:3398
#9  0x000076a38eb6807e in alloc::alloc::dealloc (ptr=0x5be5cd9632c0, layout=...)
    at /home/ubuntu/.rustup/toolchains/1.91.0-x86_64-unknown-linux-gnu/lib/rustlib/src/rust/library/alloc/src/alloc.rs:114
#10 alloc::alloc::{impl#1}::deallocate (self=0x5be5cd95f708, ptr=..., layout=...)
    at /home/ubuntu/.rustup/toolchains/1.91.0-x86_64-unknown-linux-gnu/lib/rustlib/src/rust/library/alloc/src/alloc.rs:271
#11 0x000076a38ead9a64 in alloc::boxed::{impl#8}::drop<dyn vortex_scan::Partition, alloc::alloc::Global> (self=0x5be5cd95f6f8)
    at /home/ubuntu/.rustup/toolchains/1.91.0-x86_64-unknown-linux-gnu/lib/rustlib/src/rust/library/alloc/src/boxed.rs:1666
#12 0x000076a38ead349e in core::ptr::drop_in_place<alloc::boxed::Box<dyn vortex_scan::Partition, alloc::alloc::Global>> ()
    at /home/ubuntu/.rustup/toolchains/1.91.0-x86_64-unknown-linux-gnu/lib/rustlib/src/rust/library/core/src/ptr/mod.rs:804
#13 0x000076a38e8764de in core::ptr::drop_in_place<vortex_ffi::scan::VxPartitionScan> ()
    at /home/ubuntu/.rustup/toolchains/1.91.0-x86_64-unknown-linux-gnu/lib/rustlib/src/rust/library/core/src/ptr/mod.rs:804
#14 0x000076a38e876fb8 in core::ptr::drop_in_place<alloc::boxed::Box<vortex_ffi::scan::VxPartitionScan, alloc::alloc::Global>> ()
    at /home/ubuntu/.rustup/toolchains/1.91.0-x86_64-unknown-linux-gnu/lib/rustlib/src/rust/library/core/src/ptr/mod.rs:804
#15 0x000076a38e87f2f5 in core::mem::drop<alloc::boxed::Box<vortex_ffi::scan::VxPartitionScan, alloc::alloc::Global>> (_x=0x5be5cd95f6f0)
    at /home/ubuntu/.rustup/toolchains/1.91.0-x86_64-unknown-linux-gnu/lib/rustlib/src/rust/library/core/src/mem/mod.rs:961
#16 0x000076a38e84efa7 in vortex_ffi::scan::vx_partition_free (ptr=0x5be5cd95f6f0)
    at vortex-ffi/src/macros.rs:295
#17 0x00005be5b0c81126 in operator() (__closure=0x7fff2208a8b0)
    at /home/ubuntu/vortex/vortex-ffi/test/scan.cpp:940
```

## Testing

Verifying existing behavior is maintained.

Signed-off-by: Dergousov Maksim <dergousovmaxim99@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.