Skip to content

build(deps): bump the rust-dependencies group across 1 directory with 25 updates#6619

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/quickwit/rust-dependencies-0768f853fd
Open

build(deps): bump the rust-dependencies group across 1 directory with 25 updates#6619
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/quickwit/rust-dependencies-0768f853fd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the rust-dependencies group with 25 updates in the /quickwit directory:

Package From To
arrow 58.3.0 59.1.0
google-cloud-gax 0.19.2 1.12.0
http-body 1.0.1 1.1.0
itertools 0.14.0 0.15.0
lambda_runtime 1.2.1 1.3.0
mockall 0.14.0 0.15.0
parquet 58.3.0 59.1.0
reqwest-middleware 0.4.2 0.5.2
reqwest-retry 0.8.0 0.9.1
rust-embed 8.11.0 8.12.0
sea-query 0.32.7 1.0.1
tokio 1.52.3 1.53.0
tower-http 0.6.11 0.7.0
ulid 1.2.1 3.0.0
utoipa 4.2.3 5.5.0
uuid 1.23.4 1.24.0
aws-smithy-mocks 0.2.6 0.3.0
datafusion 53.1.0 54.0.0
datafusion-substrait 53.1.0 54.0.0
datafusion-datasource 53.1.0 54.0.0
datafusion-physical-plan 53.1.0 54.0.0
datafusion-datasource-parquet 53.1.0 54.0.0
datafusion-distributed 1.0.0 2.0.0
object_store 0.13.2 0.14.1
thrift 0.17.0 0.24.0

Updates arrow from 58.3.0 to 59.1.0

Release notes

Sourced from arrow's releases.

arrow 59.1.0

Changelog

59.1.0 (2026-07-03)

Full Changelog

Implemented enhancements:

  • Fast path for nested DictionaryArray casting #10247 [arrow]
  • parquet/arrow: reading multiple nested columns fails with "Not all children array length are the same!" when a list continues across DataPageV2 page boundary #10243 [parquet]
  • Add product aggregate kernel to arrow-rs #10150 [arrow]
  • Stricter DataType parsing #10146 [arrow]
  • Support validating CSV headers against Schema #10143 [arrow]
  • arrow-ipc: Supports compression level configuration for arrow-ipc writer #10132 [arrow]
  • [Variant] VariantArray field API naming #10093
  • Add StructArray::field_ APIs symmetric to StructArray::column_ ones #10092 [arrow]
  • arrow-buffer: implement Saturating, CheckedShl, Not num-traits for i256 #10087 [arrow]
  • feat: native concat for MapArray #10047 [arrow]
  • [Variant] Add variant_to_arrow Dictionary/REE type support #10013

Fixed bugs:

  • arrow-row on fixed size binary/list with size 0 and no nulls return wrong length #10270
  • casting list to 0-size fixedsizelist can cause incorrect output length #10227 [arrow]
  • Buffer count mismatched with metadata when encoding records with dictionary of dictionaries #10213 [arrow]
  • Buffer::into_mutable is not consistent regarding sliced data and can lead to panics #10117 [arrow]
  • parquet_derive: cannot read or write columns whose name is a Rust keyword (raw identifiers like r#type become column "r#type") #10112
  • parquet: fix OffsetBuffer panic on corrupt input #10107 [parquet]
  • Parquet geospatial conversion uses metadata key "algorithm" instead of "edges" in geoarrow metadata #9929 [parquet]

... (truncated)

Changelog

Sourced from arrow's changelog.

59.1.0 (2026-07-03)

Full Changelog

Implemented enhancements:

  • Fast path for nested DictionaryArray casting #10247 [arrow]
  • parquet/arrow: reading multiple nested columns fails with "Not all children array length are the same!" when a list continues across DataPageV2 page boundary #10243 [parquet]
  • Add product aggregate kernel to arrow-rs #10150 [arrow]
  • Stricter DataType parsing #10146 [arrow]
  • Support validating CSV headers against Schema #10143 [arrow]
  • arrow-ipc: Supports compression level configuration for arrow-ipc writer #10132 [arrow]
  • [Variant] VariantArray field API naming #10093
  • Add StructArray::field_ APIs symmetric to StructArray::column_ ones #10092 [arrow]
  • arrow-buffer: implement Saturating, CheckedShl, Not num-traits for i256 #10087 [arrow]
  • feat: native concat for MapArray #10047 [arrow]
  • [Variant] Add variant_to_arrow Dictionary/REE type support #10013

Fixed bugs:

  • arrow-row on fixed size binary/list with size 0 and no nulls return wrong length #10270
  • casting list to 0-size fixedsizelist can cause incorrect output length #10227 [arrow]
  • Buffer count mismatched with metadata when encoding records with dictionary of dictionaries #10213 [arrow]
  • Buffer::into_mutable is not consistent regarding sliced data and can lead to panics #10117 [arrow]
  • parquet_derive: cannot read or write columns whose name is a Rust keyword (raw identifiers like r#type become column "r#type") #10112
  • parquet: fix OffsetBuffer panic on corrupt input #10107 [parquet]
  • Parquet geospatial conversion uses metadata key "algorithm" instead of "edges" in geoarrow metadata #9929 [parquet]

Documentation updates:

Performance improvements:

Closed issues:

  • Soundness: Unsound alignment contract in public FromBytes trait and BitReader::get_batch #10164 [parquet]
  • ParquetPushDecoder: expose the next row-group index that try_next_reader will yield #10148 [parquet]

... (truncated)

Commits
  • b1de629 Prepare for 59.1.0 release (#10274)
  • c36e926 feat: Add support for MapArray in arrow_row (#9486)
  • d2519a1 fix(arrow-row): allow to convert non empty fixed size binary/list array with ...
  • ddef6cf chore: Fix audit CI run by ignore quick-xml audit advisories (#10267)
  • d969025 fix main: parquet test compilation failure (#10266)
  • c7dc6b8 Add validated row decode benchmark (#10259)
  • 7307740 fix: write error for dbg output of out of range timestamps (#10130)
  • af1c24a minor: drive-by refactors for dicts in substring & filter (#10264)
  • 7095ce4 Replace conversion of binary->string in arrow-row from arraydata to direct co...
  • 8c7df18 reduce noise in flight benchmarks [tokio-threads] [# of columns in benchmarks...
  • Additional commits viewable in compare view

Updates google-cloud-gax from 0.19.2 to 1.12.0

Release notes

Sourced from google-cloud-gax's releases.

v1.0.0

First GA release

We are proud to announce the 1.0 release of the Google Cloud client libraries for Rust. This is the first GA version of the client libraries.

What's Included

  • Fully asynchronous clients for over 140 services, including Cloud Storage, Vertex AI, Secret Manager, and Key Management Service.
  • Fully asynchronous auth library, with support for application default credentials, service account credentials, user credentials, compute engine metadata service, and OIDC-based external credentials[^1].
  • Idiomatic abstractions for long-running operations and pagination APIs.
  • Automatic retries for requests that fail due to transient errors.
  • Automatic demarshalling of error details into idiomatic types.
  • Automatic resumes for uploads to and downloads from Cloud Storage.
  • Support for streaming uploads to Cloud Storage, with retries on errors.
  • Automatic checksumming of data uploaded to or downloaded from Cloud Storage.

What's changed

Compared to the previous release (v0.12.0) this release bumps the version numbers to 1.0.0 and updates README files.

Full Changelog: googleapis/google-cloud-rust@v0.12.0...v1.0.0

Footnotes

[^1]: Also known as workload identify federation or "bring your own id".

Commits

Updates http-body from 1.0.1 to 1.1.0

Commits

Updates itertools from 0.14.0 to 0.15.0

Changelog

Sourced from itertools's changelog.

0.15.0

Breaking

  • Restructure Position as struct instead of enum (#1042, #1043)
  • Canonicalize all_equal_value's error type (#1032)

Added

  • Add *_with_hasher adaptors (#1007)
  • Add strip_prefix and strip_prefix_by methods (#1104)

Changed

  • Remove Clone bounds from tuple_combinations and array_combinations(#1011)
  • must_use for collect_vec (#1009)
  • Make izip! temporary friendly (#1021)
  • Add array_combinations_with_replacement (#1033)
  • Implement Debug for remaining public types (#1038)
  • Specialize ExactlyOneError::count (#1046)
  • Implement PeekingNext for more types, in particular vec::IntoIter (#1059, #1073)
  • Fix PadUsing::next_back (#1082)
  • Introduce [circular_]array_windows, deprecate tuple_windows (#1086)
  • Deprecate tuple_combinations (replaced by array_combinations) (#1085)

Notable Internal Changes

Commits
  • 37bd72a Update CHANGELOG.md: strip_prefix[_by]
  • 86ec635 Use ControlFlow in fold_while implementation
  • d5897f7 refactor(strip_prefix): use try_for_each and drop PartialEq, Eq on StripPrefi...
  • b2a978a feat(Itertools): add strip_prefix and strip_prefix_by methods
  • 12b6ec6 Update CHANGELOG.md for all_equal_value_error's error type
  • 121821e AllEqualValueError implements std::error::Error
  • adac44e Introduce AllEqualValueError
  • 5707384 Update CHANGELOG.md
  • df60ff0 Update CHANGELOG.md
  • 113b850 Update CHANGELOG.md to include with_hasher
  • Additional commits viewable in compare view

Updates lambda_runtime from 1.2.1 to 1.3.0

Commits

Updates mockall from 0.14.0 to 0.15.0

Changelog

Sourced from mockall's changelog.

[ 0.15.0 ] - 2026-06-28

Added

  • Compatibility with the #[auto_impl] macro. (#686)
Commits
  • fc2c853 chore: Release
  • 551fadd Merge pull request #688 from asomers/audit-job-lockfile
  • 21529e3 Fix the audit CI job
  • 2270cdb Merge pull request #686 from Kranzes/automock-auto_impl-compat
  • d3b041d Add compatibility with the #[auto_impl] macro
  • 055886e Merge pull request #687 from asomers/clippy-june-2026
  • ed4bf07 Clippy cleanup
  • f7a4d6f Merge pull request #685 from asomers/clippy=may-2026
  • ba15180 Clippy cleanup: useless_borrows_in_formatting
  • de22d57 Merge pull request #684 from asomers/github-workflows
  • Additional commits viewable in compare view

Updates parquet from 58.3.0 to 59.1.0

Release notes

Sourced from parquet's releases.

arrow 59.1.0

Changelog

59.1.0 (2026-07-03)

Full Changelog

Implemented enhancements:

  • Fast path for nested DictionaryArray casting #10247 [arrow]
  • parquet/arrow: reading multiple nested columns fails with "Not all children array length are the same!" when a list continues across DataPageV2 page boundary #10243 [parquet]
  • Add product aggregate kernel to arrow-rs #10150 [arrow]
  • Stricter DataType parsing #10146 [arrow]
  • Support validating CSV headers against Schema #10143 [arrow]
  • arrow-ipc: Supports compression level configuration for arrow-ipc writer #10132 [arrow]
  • [Variant] VariantArray field API naming #10093
  • Add StructArray::field_ APIs symmetric to StructArray::column_ ones #10092 [arrow]
  • arrow-buffer: implement Saturating, CheckedShl, Not num-traits for i256 #10087 [arrow]
  • feat: native concat for MapArray #10047 [arrow]
  • [Variant] Add variant_to_arrow Dictionary/REE type support #10013

Fixed bugs:

  • arrow-row on fixed size binary/list with size 0 and no nulls return wrong length #10270
  • casting list to 0-size fixedsizelist can cause incorrect output length #10227 [arrow]
  • Buffer count mismatched with metadata when encoding records with dictionary of dictionaries #10213 [arrow]
  • Buffer::into_mutable is not consistent regarding sliced data and can lead to panics #10117 [arrow]
  • parquet_derive: cannot read or write columns whose name is a Rust keyword (raw identifiers like r#type become column "r#type") #10112
  • parquet: fix OffsetBuffer panic on corrupt input #10107 [parquet]
  • Parquet geospatial conversion uses metadata key "algorithm" instead of "edges" in geoarrow metadata #9929 [parquet]

... (truncated)

Changelog

Sourced from parquet's changelog.

59.1.0 (2026-07-03)

Full Changelog

Implemented enhancements:

  • Fast path for nested DictionaryArray casting #10247 [arrow]
  • parquet/arrow: reading multiple nested columns fails with "Not all children array length are the same!" when a list continues across DataPageV2 page boundary #10243 [parquet]
  • Add product aggregate kernel to arrow-rs #10150 [arrow]
  • Stricter DataType parsing #10146 [arrow]
  • Support validating CSV headers against Schema #10143 [arrow]
  • arrow-ipc: Supports compression level configuration for arrow-ipc writer #10132 [arrow]
  • [Variant] VariantArray field API naming #10093
  • Add StructArray::field_ APIs symmetric to StructArray::column_ ones #10092 [arrow]
  • arrow-buffer: implement Saturating, CheckedShl, Not num-traits for i256 #10087 [arrow]
  • feat: native concat for MapArray #10047 [arrow]
  • [Variant] Add variant_to_arrow Dictionary/REE type support #10013

Fixed bugs:

  • arrow-row on fixed size binary/list with size 0 and no nulls return wrong length #10270
  • casting list to 0-size fixedsizelist can cause incorrect output length #10227 [arrow]
  • Buffer count mismatched with metadata when encoding records with dictionary of dictionaries #10213 [arrow]
  • Buffer::into_mutable is not consistent regarding sliced data and can lead to panics #10117 [arrow]
  • parquet_derive: cannot read or write columns whose name is a Rust keyword (raw identifiers like r#type become column "r#type") #10112
  • parquet: fix OffsetBuffer panic on corrupt input #10107 [parquet]
  • Parquet geospatial conversion uses metadata key "algorithm" instead of "edges" in geoarrow metadata #9929 [parquet]

Documentation updates:

Performance improvements:

Closed issues:

  • Soundness: Unsound alignment contract in public FromBytes trait and BitReader::get_batch #10164 [parquet]
  • ParquetPushDecoder: expose the next row-group index that try_next_reader will yield #10148 [parquet]

... (truncated)

Commits
  • b1de629 Prepare for 59.1.0 release (#10274)
  • c36e926 feat: Add support for MapArray in arrow_row (#9486)
  • d2519a1 fix(arrow-row): allow to convert non empty fixed size binary/list array with ...
  • ddef6cf chore: Fix audit CI run by ignore quick-xml audit advisories (#10267)
  • d969025 fix main: parquet test compilation failure (#10266)
  • c7dc6b8 Add validated row decode benchmark (#10259)
  • 7307740 fix: write error for dbg output of out of range timestamps (#10130)
  • af1c24a minor: drive-by refactors for dicts in substring & filter (#10264)
  • 7095ce4 Replace conversion of binary->string in arrow-row from arraydata to direct co...
  • 8c7df18 reduce noise in flight benchmarks [tokio-threads] [# of columns in benchmarks...
  • Additional commits viewable in compare view

Updates reqwest-middleware from 0.4.2 to 0.5.2

Release notes

Sourced from reqwest-middleware's releases.

reqwest-middleware-v0.5.2

Added

  • (reqwest-middleware) stream feature exported. (#246)
  • expose internal reqwest::Client as reference (#209)

Other

  • Adjust third-party middleware list in readme (#282)

reqwest-middleware-v0.5.1

Other

  • Set changelog version for last release (#268)

reqwest-middleware-v0.5.0

Added

  • Deprecated fetch_mode_no_cors as it's been deprecated in reqwest.
Commits

Updates reqwest-retry from 0.8.0 to 0.9.1

Release notes

Sourced from reqwest-retry's releases.

reqwest-retry-v0.9.1

Fixed

  • (reqwest-retry) drop instant by upgrading wasmtimer (#254)

Other

  • Set changelog version for last release (#268)

reqwest-retry-v0.9.0

Breaking Changes

  • Updated retry-policies (re-exported as reqwest_retry::policies) to 0.5.

Changed

  • Updated thiserror to 2.0
Commits

Updates rust-embed from 8.11.0 to 8.12.0

Updates sea-query from 0.32.7 to 1.0.1

Changelog

Sourced from sea-query's changelog.

1.0.1 - 2026-05-30

  • 1.0.1 - Borrowed scalar primitive conversions for Value

sea-query-sqlx 0.9.1 - 2026-05-30

sea-query-sqlx 0.9.0 - 2026-05-29

1.0.0 - 2026-05-28

  • 1.0.0 - Stable SeaQuery 1.0 release notes

Release Candidates

  • 1.0.0-rc.34 — Table partitioning, Jiff binder support, JSON_TABLE refactor
  • 1.0.0-rc.33Value::Enum, Postgres advisory locks, SelectExprTrait
  • 1.0.0-rc.32EXPLAIN, FILTER on aggregates, ALTER TABLE DROP CONSTRAINT
  • 1.0.0-rc.31SELECT INTO, eq_any/ne_all, Value::array_type
  • 1.0.0-rc.30 — Tokenizer comment parsing, dependency reductions
  • 1.0.0-rc.29 — Legacy serial option for Postgres
  • 1.0.0-rc.28 — Restore Value system
  • 1.0.0-rc.27 — Revert impl Iden for String
  • 1.0.0-rc.26From<Vec<Value>> for Array, FromIterator<T> for Array
  • 1.0.0-rc.24 — Array API redesign
  • 1.0.0-rc.23Value::Enum, ON CONFLICT ON CONSTRAINT, CTE VALUES clause
  • 1.0.0-rc.22 — Index operator class, DROP COLUMN IF EXISTS, nullable values
  • 1.0.0-rc.20ValueTupleIter, SQLite decimal fix

New features

  • Support EXPLAIN statements SeaQL/sea-query#1044
  • #![forbid(unsafe_code)] in all workspace crates SeaQL/sea-query#930
  • Unify Expr and SimpleExpr as one type. SimpleExpr is kept as an alias of Expr, but they can now be used interchangeably. There may be a few compile errors and some clippy warnings, basically just remove the redundant .into() SeaQL/sea-query#889
pub type SimpleExpr = Expr; // !
impl From<Expr> for SimpleExpr { .. } // now removed
  • New Iden type system. Previously, DynIden is an alias to SeaRc<dyn Iden>, and is lazily rendered. Now, it's an Cow<'static, str>, and is eagerly rendered. SeaRc is no longer an alias to Rc / Arc, now is only a unit struct. As such, Send / Sync is no longer needed. It's still possible to dynamically serialize a String as identifier, see example usage. SeaQL/sea-query#909
pub type DynIden = SeaRc<dyn Iden>;               // old
pub struct DynIden(pub(crate) Cow<'static, str>); // new
pub struct SeaRc<I>(pub(crate) RcOrArc<I>);       // old
pub struct SeaRc;                                 // new

... (truncated)

Commits

Updates tokio from 1.52.3 to 1.53.0

Release notes

Sourced from tokio's releases.

Tokio v1.53.0

1.53.0 (July 17th, 2026)

Added

  • fs: implement From<OwnedFd> and From<OwnedHandle> for File (#8266)
  • metrics: add task schedule latency metric (#7986)
  • net: add SocketAddr methods to Unix sockets (#8144)

Changed

  • io: add #[inline] to IO trait impls for in-memory types (#8242)
  • net: implement UCred::pid on FreeBSD (#8086)
  • net: support Nuttx target os (#8259)
  • signal: refactor global variables on Windows (#8231)
  • sync: mpsc::{Receiver,UnboundedReceiver} now drops waker on drop, even if there are still senders (#8095)
  • taskdump: support taskdumps on s390x (#8192)
  • time: add #[track_caller] to timeout_at() (#8077)
  • time: consolidate mutex locks on spurious poll (#8124)
  • time: defer waker clone on spurious poll (#8107)
  • time: move lazy-registration state into Sleep (#8132)
  • tracing: remove unnecessary span clone (#8126)

Fixed

  • io: do not treat zero-length reads as EOF in Chain (#8251)
  • net: use getpeereid for QNX peer credentials (#8270)
  • runtime: avoid illegal state in FastRand (#8078)
  • sync: wake mpsc receiver when a queued reserve[_many] returns permits (#8260)
  • taskdump: skip double wake on Trace::capture/Trace::trace_with (#8043)
  • time: avoid stack overflow in runtime constructor (#8093)
  • time (alt timer): ensure timers stay in the same runtime after .reset() (#8169)

IO uring (unstable)

  • fs: use io-uring for fs::try_exists (#8080)
  • fs: use io-uring for renaming files (#7800)
  • rt: flush io-uring CQE in case of CQE overflow (#8277)

Documented

  • docs: clarify cancel safety wording (#8181)
  • fs: clarify create_dir_all succeeds if path exists (#8149)
  • io: add warning about stdout reordering with multiple handles (#8276)
  • net: document pipe try_read*/try_write* readiness behavior (#8032)
  • runtime: document interaction with fork() (#8202)
  • sync: clarify broadcast lagging semantics (#8239)
  • sync: document memory ordering guarantees for Semaphore (#8119)
  • task: explain why yield_now defers its waker (#8254)
  • time: add panic docs to timeout_at() (#8077)

... (truncated)

Commits
  • be689a3 chore: prepare Tokio v1.53.0 (#8294)
  • 50f76c7 chore: prepare tokio-macros v2.7.1 (#8295)
  • f61fcca Merge 'tokio-1.52.4' into 'master' (#8290)
  • efdba5f chore: prepare Tokio v1.52.4 (#8289)
  • b0ba02e Merge 'tokio-1.51.4' into 'tokio-1.52.x' (#8288)
  • 7bcd2d3 taskdump: remove crate disambiguators from output (#8288)
  • f84b209 chore: prepare Tokio v1.51.4 (#8286)
  • eacb98e runtime: don't skip the driver when before_park schedules work (#8222)
  • 5e16ee0 task: avoid replacing the JoinQueue wa...

    Description has been truncated

… 25 updates

Bumps the rust-dependencies group with 25 updates in the /quickwit directory:

| Package | From | To |
| --- | --- | --- |
| [arrow](https://github.com/apache/arrow-rs) | `58.3.0` | `59.1.0` |
| [google-cloud-gax](https://github.com/googleapis/google-cloud-rust) | `0.19.2` | `1.12.0` |
| [http-body](https://github.com/hyperium/http-body) | `1.0.1` | `1.1.0` |
| [itertools](https://github.com/rust-itertools/itertools) | `0.14.0` | `0.15.0` |
| [lambda_runtime](https://github.com/aws/aws-lambda-rust-runtime) | `1.2.1` | `1.3.0` |
| [mockall](https://github.com/asomers/mockall) | `0.14.0` | `0.15.0` |
| [parquet](https://github.com/apache/arrow-rs) | `58.3.0` | `59.1.0` |
| [reqwest-middleware](https://github.com/TrueLayer/reqwest-middleware) | `0.4.2` | `0.5.2` |
| [reqwest-retry](https://github.com/TrueLayer/reqwest-middleware) | `0.8.0` | `0.9.1` |
| rust-embed | `8.11.0` | `8.12.0` |
| [sea-query](https://github.com/SeaQL/sea-query) | `0.32.7` | `1.0.1` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.52.3` | `1.53.0` |
| [tower-http](https://github.com/tower-rs/tower-http) | `0.6.11` | `0.7.0` |
| [ulid](https://github.com/dylanhart/ulid-rs) | `1.2.1` | `3.0.0` |
| [utoipa](https://github.com/juhaku/utoipa) | `4.2.3` | `5.5.0` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.23.4` | `1.24.0` |
| [aws-smithy-mocks](https://github.com/smithy-lang/smithy-rs) | `0.2.6` | `0.3.0` |
| [datafusion](https://github.com/apache/datafusion) | `53.1.0` | `54.0.0` |
| [datafusion-substrait](https://github.com/apache/datafusion) | `53.1.0` | `54.0.0` |
| [datafusion-datasource](https://github.com/apache/datafusion) | `53.1.0` | `54.0.0` |
| [datafusion-physical-plan](https://github.com/apache/datafusion) | `53.1.0` | `54.0.0` |
| [datafusion-datasource-parquet](https://github.com/apache/datafusion) | `53.1.0` | `54.0.0` |
| [datafusion-distributed](https://github.com/datafusion-contrib/datafusion-distributed) | `1.0.0` | `2.0.0` |
| [object_store](https://github.com/apache/arrow-rs-object-store) | `0.13.2` | `0.14.1` |
| [thrift](https://github.com/apache/thrift) | `0.17.0` | `0.24.0` |



Updates `arrow` from 58.3.0 to 59.1.0
- [Release notes](https://github.com/apache/arrow-rs/releases)
- [Changelog](https://github.com/apache/arrow-rs/blob/main/CHANGELOG.md)
- [Commits](apache/arrow-rs@58.3.0...59.1.0)

Updates `google-cloud-gax` from 0.19.2 to 1.12.0
- [Release notes](https://github.com/googleapis/google-cloud-rust/releases)
- [Commits](https://github.com/googleapis/google-cloud-rust/commits)

Updates `http-body` from 1.0.1 to 1.1.0
- [Release notes](https://github.com/hyperium/http-body/releases)
- [Commits](hyperium/http-body@v1.0.1...v1.1.0)

Updates `itertools` from 0.14.0 to 0.15.0
- [Changelog](https://github.com/rust-itertools/itertools/blob/master/CHANGELOG.md)
- [Commits](rust-itertools/itertools@v0.14.0...v0.15.0)

Updates `lambda_runtime` from 1.2.1 to 1.3.0
- [Release notes](https://github.com/aws/aws-lambda-rust-runtime/releases)
- [Changelog](https://github.com/aws/aws-lambda-rust-runtime/blob/main/release-plz.toml)
- [Commits](aws/aws-lambda-rust-runtime@lambda_runtime-v1.2.1...lambda_runtime-v1.3.0)

Updates `mockall` from 0.14.0 to 0.15.0
- [Changelog](https://github.com/asomers/mockall/blob/master/CHANGELOG.md)
- [Commits](asomers/mockall@v0.14.0...v0.15.0)

Updates `parquet` from 58.3.0 to 59.1.0
- [Release notes](https://github.com/apache/arrow-rs/releases)
- [Changelog](https://github.com/apache/arrow-rs/blob/main/CHANGELOG.md)
- [Commits](apache/arrow-rs@58.3.0...59.1.0)

Updates `reqwest-middleware` from 0.4.2 to 0.5.2
- [Release notes](https://github.com/TrueLayer/reqwest-middleware/releases)
- [Commits](TrueLayer/reqwest-middleware@reqwest-middleware-v0.4.2...reqwest-middleware-v0.5.2)

Updates `reqwest-retry` from 0.8.0 to 0.9.1
- [Release notes](https://github.com/TrueLayer/reqwest-middleware/releases)
- [Commits](https://github.com/TrueLayer/reqwest-middleware/commits/reqwest-retry-v0.9.1)

Updates `rust-embed` from 8.11.0 to 8.12.0

Updates `sea-query` from 0.32.7 to 1.0.1
- [Release notes](https://github.com/SeaQL/sea-query/releases)
- [Changelog](https://github.com/SeaQL/sea-query/blob/master/CHANGELOG.md)
- [Commits](https://github.com/SeaQL/sea-query/commits)

Updates `tokio` from 1.52.3 to 1.53.0
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.52.3...tokio-1.53.0)

Updates `tower-http` from 0.6.11 to 0.7.0
- [Release notes](https://github.com/tower-rs/tower-http/releases)
- [Commits](tower-rs/tower-http@tower-http-0.6.11...tower-http-0.7.0)

Updates `ulid` from 1.2.1 to 3.0.0
- [Commits](dylanhart/ulid-rs@v1.2.1...v3.0.0)

Updates `utoipa` from 4.2.3 to 5.5.0
- [Release notes](https://github.com/juhaku/utoipa/releases)
- [Changelog](https://github.com/juhaku/utoipa/blob/master/utoipa-rapidoc/CHANGELOG.md)
- [Commits](juhaku/utoipa@utoipa-4.2.3...utoipa-5.5.0)

Updates `uuid` from 1.23.4 to 1.24.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.23.4...v1.24.0)

Updates `aws-smithy-mocks` from 0.2.6 to 0.3.0
- [Release notes](https://github.com/smithy-lang/smithy-rs/releases)
- [Changelog](https://github.com/smithy-lang/smithy-rs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/smithy-lang/smithy-rs/commits)

Updates `datafusion` from 53.1.0 to 54.0.0
- [Changelog](https://github.com/apache/datafusion/blob/main/CHANGELOG.md)
- [Commits](apache/datafusion@53.1.0...54.0.0)

Updates `datafusion-substrait` from 53.1.0 to 54.0.0
- [Changelog](https://github.com/apache/datafusion/blob/main/CHANGELOG.md)
- [Commits](apache/datafusion@53.1.0...54.0.0)

Updates `datafusion-datasource` from 53.1.0 to 54.0.0
- [Changelog](https://github.com/apache/datafusion/blob/main/CHANGELOG.md)
- [Commits](apache/datafusion@53.1.0...54.0.0)

Updates `datafusion-physical-plan` from 53.1.0 to 54.0.0
- [Changelog](https://github.com/apache/datafusion/blob/main/CHANGELOG.md)
- [Commits](apache/datafusion@53.1.0...54.0.0)

Updates `datafusion-datasource-parquet` from 53.1.0 to 54.0.0
- [Changelog](https://github.com/apache/datafusion/blob/main/CHANGELOG.md)
- [Commits](apache/datafusion@53.1.0...54.0.0)

Updates `datafusion-distributed` from 1.0.0 to 2.0.0
- [Release notes](https://github.com/datafusion-contrib/datafusion-distributed/releases)
- [Commits](datafusion-contrib/datafusion-distributed@v1.0.0...v2.0.0)

Updates `object_store` from 0.13.2 to 0.14.1
- [Release notes](https://github.com/apache/arrow-rs-object-store/releases)
- [Changelog](https://github.com/apache/arrow-rs-object-store/blob/main/CHANGELOG-old.md)
- [Commits](apache/arrow-rs-object-store@v0.13.2...v0.14.1)

Updates `thrift` from 0.17.0 to 0.24.0
- [Release notes](https://github.com/apache/thrift/releases)
- [Changelog](https://github.com/apache/thrift/blob/master/CHANGES.md)
- [Commits](apache/thrift@v0.17.0...v0.24.0)

---
updated-dependencies:
- dependency-name: arrow
  dependency-version: 59.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: google-cloud-gax
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: http-body
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: itertools
  dependency-version: 0.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: lambda_runtime
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: mockall
  dependency-version: 0.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: parquet
  dependency-version: 59.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: reqwest-middleware
  dependency-version: 0.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: reqwest-retry
  dependency-version: 0.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: rust-embed
  dependency-version: 8.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: sea-query
  dependency-version: 1.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: tokio
  dependency-version: 1.53.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: tower-http
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: ulid
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: utoipa
  dependency-version: 5.5.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: uuid
  dependency-version: 1.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: aws-smithy-mocks
  dependency-version: 0.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: datafusion
  dependency-version: 54.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: datafusion-substrait
  dependency-version: 54.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: datafusion-datasource
  dependency-version: 54.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: datafusion-physical-plan
  dependency-version: 54.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: datafusion-datasource-parquet
  dependency-version: 54.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: datafusion-distributed
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: object_store
  dependency-version: 0.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: thrift
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Jul 20, 2026
@dependabot
dependabot Bot requested review from a team as code owners July 20, 2026 12:51
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Jul 20, 2026

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 665ece876f

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread quickwit/Cargo.toml
# 1. The `OpenApi` struct structure changed (fields are private), breaking our manual merging logic in openapi.rs
# in `quickwit-serve`. This code is fundamentally incompatible with version 5.x.
utoipa = { version = "4.2", features = ["time", "ulid"] }
utoipa = { version = "5.5", features = ["time", "ulid"] }

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Keep utoipa below 5 until openapi.rs is ported

This upgrade directly contradicts the compatibility note above it: quickwit-serve/src/openapi.rs still mutates OpenApi internals such as docs_base.tags, self.paths.paths, and schema.components, but utoipa 5 made those fields inaccessible/changed, so the default quickwit-serve build will fail until that merger code is rewritten for the v5 API.

Useful? React with 👍 / 👎.

Comment thread quickwit/Cargo.toml
rustls = "0.23"
rustls-pemfile = "2.2"
sea-query = { version = "0.32" }
sea-query = { version = "1.0" }

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Keep sea-query compatible with the binder

With the PostgreSQL metastore enabled, this line resolves quickwit-metastore to sea-query 1.0.1 while sea-query-binder 0.7.0 remains locked to sea-query 0.32.7; the metastore calls sql_query_builder.build_sqlx(PostgresQueryBuilder), but SqlxBinder is implemented for the binder's 0.32 statement types, not the 1.0 types created from this dependency. Either upgrade the binder in lockstep or keep sea-query on 0.32.

Useful? React with 👍 / 👎.

Comment thread quickwit/Cargo.toml
# of google-cloud-pubsub is "0.30" which explicitly depends on: google-cloud-auth ^0.17 and google-cloud-gax ^0.19.
google-cloud-auth = { version = "0.17", default-features = false, features = ["rustls-tls"] }
google-cloud-gax = "0.19"
google-cloud-gax = "1.12"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Keep google-cloud-gax aligned with Pub/Sub

For the gcp-pubsub feature, google-cloud-pubsub is still 0.30.0 and the lockfile shows it depends on google-cloud-gax 0.19.2, while this line makes quickwit-indexing import google_cloud_gax::retry::RetrySetting from 1.12.0. The source then passes that value to Subscription::exists, whose signature comes from the pubsub crate's 0.19 gax dependency, so the feature build fails with mismatched RetrySetting types.

Useful? React with 👍 / 👎.

Comment thread quickwit/Cargo.toml
anyhow = "1"
arc-swap = "1.9"
arrow = { version = "58", default-features = false, features = ["ipc"] }
arrow = { version = "59", default-features = false, features = ["ipc"] }

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Keep Arrow aligned with DataFusion

The lockfile for datafusion 54.0.0 still resolves Arrow/Parquet 58.3.0, but this workspace dependency now resolves direct Arrow users such as quickwit-datafusion and quickwit-parquet-engine to Arrow 59.1.0. In the DataFusion lane, code implements DataFusion traits using direct arrow::datatypes::SchemaRef, which is no longer the same type as the SchemaRef expected by DataFusion, so the datafusion crates cannot compile unless Arrow is kept at 58 or DataFusion is moved to a release using Arrow 59.

Useful? React with 👍 / 👎.

Comment thread quickwit/Cargo.toml
] }
reqwest-middleware = "0.4"
reqwest-retry = "0.8"
reqwest-middleware = "0.5"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Keep the reqwest stack on one major version

reqwest remains pinned to 0.12, but reqwest-middleware 0.5 and reqwest-retry 0.9 resolve to reqwest 0.13. In quickwit-rest-client, the code builds a reqwest::Client from the 0.12 crate and passes it to reqwest_middleware::ClientBuilder::new, and it also converts middleware reqwest errors back into Error::Client; those types now come from different reqwest versions, so the default client crate will not compile until reqwest itself is upgraded or these middleware crates stay on their 0.12-compatible versions.

Useful? React with 👍 / 👎.

Comment thread quickwit/Cargo.toml
] }
ouroboros = "0.18"
parquet = { version = "58", default-features = false, features = ["arrow", "experimental", "snap", "variant_experimental", "zstd"] }
parquet = { version = "59", default-features = false, features = ["arrow", "experimental", "snap", "variant_experimental", "zstd"] }

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Keep parquet below 59 until the reader is ported

The streaming reader still imports parquet::format::{PageHeader, PageType} and decodes it with an external thrift::protocol::TCompactInputProtocol in quickwit-parquet-engine/src/storage/streaming_reader.rs, but parquet 59 removed the old thrift-backed format module path in favor of its new internal parquet-thrift types. Because this dependency bump does not update that reader, quickwit-parquet-engine will fail to compile whenever the default workspace is built.

Useful? React with 👍 / 👎.

datafusion-physical-plan = "54"
datafusion-datasource-parquet = "54"
datafusion-distributed = "2.0"
object_store = "0.14"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Keep object_store aligned with DataFusion

When the datafusion feature is built, DataFusion 54 still uses object_store 0.13.2, but this line makes quickwit-datafusion use 0.14.1 directly. QuickwitObjectStoreRegistry implements DataFusion's ObjectStoreRegistry while returning Arc<dyn object_store::ObjectStore> from the direct crate, so the method signatures no longer refer to the same trait object type; keep this dependency on DataFusion's object_store version or upgrade DataFusion to a release that uses 0.14.

Useful? React with 👍 / 👎.

Comment thread quickwit/Cargo.toml
ttl_cache = "0.5"
typetag = "0.2"
ulid = "1.2"
ulid = "3.0"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Replace Ulid::new before upgrading to 3.0

The 3.0 ulid API exposes Ulid::generate() for creating random ULIDs and no longer documents Ulid::new(), but default workspace crates still call Ulid::new() in places such as quickwit-proto/src/types/doc_uid.rs and the indexing/storage code. This dependency bump therefore breaks normal builds until those call sites are migrated or the workspace stays on the 1.x API.

Useful? React with 👍 / 👎.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants