Skip to content

deps(wasm): bump the all group across 1 directory with 12 updates - #2714

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/core/wren-core-wasm/all-1d7f165e32
Open

deps(wasm): bump the all group across 1 directory with 12 updates#2714
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/core/wren-core-wasm/all-1d7f165e32

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor

Bumps the all group with 12 updates in the /core/wren-core-wasm directory:

Package From To
object_store 0.13.2 0.14.1
arrow 58.1.0 59.2.0
parquet 58.1.0 59.2.0
tokio 1.51.1 1.53.1
bytes 1.11.1 1.12.1
serde 1.0.228 1.0.229
serde_json 1.0.149 1.0.151
chrono 0.4.44 0.4.45
log 0.4.29 0.4.34
async-trait 0.1.89 0.1.92
hashbrown 0.17.0 0.17.1
serde_with 3.21.0 3.22.0

Updates object_store from 0.13.2 to 0.14.1

Release notes

Sourced from object_store's releases.

object_store v0.14.1

Changelog

v0.14.1 (2026-07-10)

Full Changelog

Implemented enhancements:

  • Cache Azure user delegation key for SAS signing #800
  • Add deregister to ObjectStoreRegistry #795
  • Support for S3 dual-stack endpoints #779
  • Coalesce contiguous ranges in LocalFileSystem::get_ranges #778
  • Support for HF Storage Buckets #706

Fixed bugs:

  • Clippy failing on main #798
  • Upgrade quick-xml to resolve RUSTSEC-2026-0194 and RUSTSEC-2026-0195 #786
  • InMemory and LocalFileSystem return unquoted ETags, violating RFC 9110 #769

Closed issues:

  • Bump quick-xml to 0.41.0 for RustSec advisories #787

Merged pull requests:

  • Pin Rust toolchain to 1.97.0 and fix clippy #799 (alamb)
  • chore: reduce lock hold time in DefaultObjectStoreRegistry::deregister #792 (kszucs)
  • Do not explicitly add Host header when making requests with S3Builder #790 (ntjohnson1)
  • impl HttpError::new_boxed to provide user with ability to ctor from already boxed error #789 (DoumanAsh)

... (truncated)

Changelog

Sourced from object_store's changelog.

Historical Changelog

v0.14.0 (2026-06-18)

Full Changelog

Breaking changes:

Implemented enhancements:

  • Support PutMultipartOptions for MultipartStore::create_multipart #745
  • Supporting CPKs for Azure Blob Requests #741
  • Support Extensions in *Result objects #740
  • Implement Signer on PrefixStore #738
  • Make reqwest optional #723
  • Expose azure::split_sas for custom SAS credential providers #720
  • GCS: support bearer-token auth in parse_url_opts without bypassing default option handling #716
  • Custom credentials for signing cannot be provided to GCP stores #698
  • Read timeouts are not supported #680
  • AWS_REQUEST_PAYER="requester" vs Boolean #668
  • Reliable file writes for LocalFileSystem: explicit close error checking and opt-in sync #661
  • infer use_fabric_endpoint based on URI containing "dfs.fabric.microsoft.com" #658
  • Support CRC checksum #611
  • Change crypto provider from ring to aws-rust-lc #413

... (truncated)

Commits
  • c7316d2 Update version to 0.14.1 and add CHANGELOG (#794)
  • c66dd12 Cache Azure user delegation key for SAS signing (#781)
  • 7a7deea Do not explicitly add Host header when making requests with S3Builder (#790)
  • 19be0b1 Update release process to use RC tags (#796)
  • e3b8561 Add automatic GitHub release workflow (#797)
  • e64e8e3 Pin Rust toolchain to 1.97.0 and fix clippy useless_borrows_in_formatting (#799)
  • 18102f3 impl HttpError::new_boxed to provide user with ability to ctor from already b...
  • 7e854ef fix(aws): recognize S3 dual-stack endpoints in URL parsing (#780)
  • 09adc41 Reduce lock hold time in DefaultObjectStoreRegistry::deregister (#792)
  • c2048e0 feat: add deregister to ObjectStoreRegistry (#784)
  • Additional commits viewable in compare view

Updates arrow from 58.1.0 to 59.2.0

Release notes

Sourced from arrow's releases.

arrow 59.2.0

Changelog

59.2.0 - (2026-08-02)

Full Changelog

Enhancements

Bug fixes

... (truncated)

Changelog

Sourced from arrow's changelog.

Changelog

59.3.0 - (2026-08-25)

Full Changelog

Security fixes

  • [59_maintenance] Backport cargo audit fix by updating h2 dependency by @​alamb in #10834

Bug fixes

  • [59_maintenance] Backport fix for concat_run_arrays with all-empty run arrays by @​alamb in #10828
  • [59_maintenance] Backport fix for DELTA_BYTE_ARRAY dedup with values larger than the page size limit by @​alamb in #10826
  • [59_maintenance] Backport fix for cached Mask reads crossing unloaded sparse pages by @​alamb in #10766
Commits
  • 782e5a6 Update version to 59.2.0, update changelog generation to git-cliff (#10451)
  • ed92960 Revert "chore: formalize the default map field names to match default arrow s...
  • bf82c78 chore(parquet): add link to ticket in object_store deprecation message (#10502)
  • 15c20f0 chore(avro): add link to ticket in object_store deprecation message (#10503)
  • e7ae89c Enable allow_attributes lint for arrow-string (#10482)
  • 37866b4 fix(arrow-schema): Persist dictionary ordered flag on FFI schema import (#10514)
  • fd8ead5 arrow-avro: Deprecate object_store integration (#10484)
  • 34c7c2b parquet: Remove explicit object_store integration (#10354)
  • 6183ac9 Add LICENSE.txt and NOTICE.txt to pyarrow crates (#10481)
  • 23e61b6 chore: add sub tags (#10473)
  • Additional commits viewable in compare view

Updates parquet from 58.1.0 to 59.2.0

Release notes

Sourced from parquet's releases.

arrow 59.2.0

Changelog

59.2.0 - (2026-08-02)

Full Changelog

Enhancements

Bug fixes

... (truncated)

Changelog

Sourced from parquet's changelog.

Changelog

59.3.0 - (2026-08-25)

Full Changelog

Security fixes

  • [59_maintenance] Backport cargo audit fix by updating h2 dependency by @​alamb in #10834

Bug fixes

  • [59_maintenance] Backport fix for concat_run_arrays with all-empty run arrays by @​alamb in #10828
  • [59_maintenance] Backport fix for DELTA_BYTE_ARRAY dedup with values larger than the page size limit by @​alamb in #10826
  • [59_maintenance] Backport fix for cached Mask reads crossing unloaded sparse pages by @​alamb in #10766
Commits
  • 782e5a6 Update version to 59.2.0, update changelog generation to git-cliff (#10451)
  • ed92960 Revert "chore: formalize the default map field names to match default arrow s...
  • bf82c78 chore(parquet): add link to ticket in object_store deprecation message (#10502)
  • 15c20f0 chore(avro): add link to ticket in object_store deprecation message (#10503)
  • e7ae89c Enable allow_attributes lint for arrow-string (#10482)
  • 37866b4 fix(arrow-schema): Persist dictionary ordered flag on FFI schema import (#10514)
  • fd8ead5 arrow-avro: Deprecate object_store integration (#10484)
  • 34c7c2b parquet: Remove explicit object_store integration (#10354)
  • 6183ac9 Add LICENSE.txt and NOTICE.txt to pyarrow crates (#10481)
  • 23e61b6 chore: add sub tags (#10473)
  • Additional commits viewable in compare view

Updates tokio from 1.51.1 to 1.53.1

Release notes

Sourced from tokio's releases.

Tokio v1.53.1

1.53.1 (July 20th, 2026)

Fixed

  • signal: restore MSRV by removing OnceLock::wait from the Windows handler (#8300)

Fixed (unstable)

  • time: fix alt timer cancellation and insertion race (#8252)

Documented

  • runtime: remove dead link definition in Runtime::block_on (#8301)

#8252: tokio-rs/tokio#8252 #8300: tokio-rs/tokio#8300 #8301: tokio-rs/tokio#8301

Tokio v1.53.0

1.53.0 (July 17th, 2026)

Added

  • fs: implement From<OwnedFd> and From<OwnedHandle> for File (#8266)
  • metrics: add task schedule latency metric (#7986)
  • net: add SocketAddr methods to Unix sockets (#8144)

Changed

  • io: add #[inline] to IO trait impls for in-memory types (#8242)
  • net: implement UCred::pid on FreeBSD (#8086)
  • net: support Nuttx target os (#8259)
  • signal: refactor global variables on Windows (#8231)
  • sync: mpsc::{Receiver,UnboundedReceiver} now drops waker on drop, even if there are still senders (#8095)
  • taskdump: support taskdumps on s390x (#8192)
  • time: add #[track_caller] to timeout_at() (#8077)
  • time: consolidate mutex locks on spurious poll (#8124)
  • time: defer waker clone on spurious poll (#8107)
  • time: move lazy-registration state into Sleep (#8132)
  • tracing: remove unnecessary span clone (#8126)

Fixed

  • io: do not treat zero-length reads as EOF in Chain (#8251)
  • net: use getpeereid for QNX peer credentials (#8270)
  • runtime: avoid illegal state in FastRand (#8078)
  • sync: wake mpsc receiver when a queued reserve[_many] returns permits (#8260)
  • taskdump: skip double wake on Trace::capture/Trace::trace_with (#8043)
  • time: avoid stack overflow in runtime constructor (#8093)

... (truncated)

Commits

Updates bytes from 1.11.1 to 1.12.1

Release notes

Sourced from bytes's releases.

Bytes v1.12.1

1.12.1 (July 8th, 2026)

Fixed

  • Properly handle when Box::new panics (#837)

Bytes v1.12.0

1.12.0 (June 18th, 2026)

Added

  • Add BytesMut::extend_from_within() (#818)
  • Add BytesMut::try_unsplit() (#746)

Fixed

  • Fix panic in get_int if nbytes is zero (#806)

Changed

  • Pass vtable data by value (#826)
  • Exclude development scripts from published package (#810)

Documented

  • Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)
Changelog

Sourced from bytes's changelog.

1.12.1 (July 8th, 2026)

Fixed

  • Properly handle when Box::new panics (#837)

1.12.0 (June 18th, 2026)

Added

  • Add BytesMut::extend_from_within() (#818)
  • Add BytesMut::try_unsplit() (#746)

Fixed

  • Fix panic in get_int if nbytes is zero (#806)

Changed

  • Pass vtable data by value (#826)
  • Exclude development scripts from published package (#810)

Documented

  • Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)
Commits

Updates serde from 1.0.228 to 1.0.229

Release notes

Sourced from serde's releases.

v1.0.229

  • Update to syn 3
Commits
  • 7fc3b4c Release 1.0.229
  • 6d6e9a1 Merge pull request #3085 from dtolnay/syn3
  • 6dec3b7 Update to syn 3
  • cfe6692 Resolve mut_mut pedantic clippy lint
  • 1023d07 Update actions/upload-artifact@v6 -> v7
  • dd682c2 Update actions/checkout@v6 -> v7
  • 5f0f18b Update ui test suite to nightly-2026-06-01
  • 63a1498 Regenerate stderr with trybuild normalization fixes
  • fa7da4a Fix unused_features warning
  • 6b1a178 Unpin CI miri toolchain
  • Additional commits viewable in compare view

Updates serde_json from 1.0.149 to 1.0.151

Release notes

Sourced from serde_json's releases.

v1.0.151

v1.0.150

Commits
  • de85007 Release 1.0.151
  • 3b2b3c5 Merge pull request #1331 from WonderLawrence/rawvalue-from-string-unchecked
  • 0406d96 Debug-assert well-formedness and no-whitespace in from_string_unchecked
  • cf16f75 Add RawValue::from_string_unchecked
  • 827a315 Update actions/upload-artifact@v6 -> v7
  • cea36a5 Update actions/checkout@v6 -> v7
  • a1ae73a Release 1.0.150
  • 1a360b0 Merge pull request #1324 from puneetdixit200/reject-non-string-enum-keys
  • 2037b63 Reject non-string enum object keys
  • 5d30df6 Resolve manual_assert_eq pedantic clippy lint
  • Additional commits viewable in compare view

Updates chrono from 0.4.44 to 0.4.45

Release notes

Sourced from chrono's releases.

0.4.45

What's Changed

Commits
  • 1703382 Prepare 0.4.45 release
  • 881f9ab tz_data: fix tzdata locations on Android
  • f14ead4 fix(tz): reject TZ offset hour of 24 to avoid FixedOffset overflow
  • c6063e6 Update similar-asserts requirement from 1.6.1 to 2.0.0
  • 120686c Bump codecov/codecov-action from 5 to 6
  • See full diff in compare view

Updates log from 0.4.29 to 0.4.34

Release notes

Sourced from log's releases.

0.4.34

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.33...0.4.34

0.4.33

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.32...0.4.33

0.4.32

What's Changed

Full Changelog: rust-lang/log@0.4.31...0.4.32

0.4.31

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.30...0.4.31

0.4.30

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.29...0.4.30

Notable Changes

... (truncated)

Changelog

Sourced from log's changelog.

[0.4.34] - 2026-08-22

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.33...0.4.34

[0.4.33] - 2026-06-20

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.32...0.4.33

[0.4.32] - 2026-06-04

What's Changed

Full Changelog: rust-lang/log@0.4.31...0.4.32

[0.4.31] - 2026-06-02

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.30...0.4.31

[0.4.30] - 2026-05-21

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.29...0.4.30

... (truncated)

Commits
  • 8034743 Merge pull request #738 from rust-lang/cargo/0.4.34
  • 7d1e24e prepare for 0.4.34 release
  • 3b939b6 Merge pull request #737 from malezjaa/master
  • b88266c Add alloc support for boxed loggers
  • 037d7a5 doc: Add context-logger utility to README
  • f405739 Merge pull request #734 from rust-lang/cargo/0.4.33
  • 6a24abf prepare for 0.4.33 release
  • 87e0621 Merge pull request #732 from matteo-zeggiotti-ok/fix-key-comparison
  • a9b5711 Review: fallback to the &str hash
  • cc89cc6 Review: fixed other comparisons
  • Additional commits viewable in compare view

Updates async-trait from 0.1.89 to 0.1.92

Release notes

Sourced from async-trait's releases.

0.1.92

  • Resolve double_must_use clippy lint in generated code (#303)

0.1.91

  • Update to syn 3 (#299)
  • Fix mutability for by-reference receivers (#301)

0.1.90

(yanked)

Commits
  • 82e7e9e Release 0.1.92
  • 9a35cb8 Merge pull request #303 from dtolnay/mustuse
  • 875ceec Resolve double_must_use clippy lint
  • 62993a5 Raise minimum tested compiler to rust 1.88
  • d049ee0 Release 0.1.91
  • 7a0961f Merge pull request #301 from dtolnay/mutability
  • 740f86f Ignore mut_mut pedantic clippy lint in test
  • 4699cd3 Fix mutability for by-reference receivers
  • 6dd3573 Add regression test for issue 300
  • 2371797 Release 0.1.90
  • Additional commits viewable in compare view

Updates hashbrown from 0.17.0 to 0.17.1

Release notes

Sourced from hashbrown's releases.

v0.17.1

Added

  • Added HashMap::rustc_try_insert (#722)
Changelog

Sourced from hashbrown's changelog.

0.17.1 - 2026-04-20

Added

  • Added HashMap::rustc_try_insert (#722)
Commits
  • c62a63a chore: release v0.17.1
  • 420e83b Merge pull request #722 from cuviper/rustc_try_insert
  • 51cecbd Move the RustcOccupiedError note as requested in review
  • 16d0f37 Add HashMap::rustc_try_insert
  • 18a04c5 Merge pull request #721 from clarfonthey/branch-rename
  • ee8a0ee Rename master to main in release-plz workflow
  • 147df65 Merge pull request #720 from xtqqczze/authors
  • 64a0acb Remove package.authors field from Cargo metadata
  • 867db72 Merge pull request #716 from atouchet/rdm
  • 57b760b Update Readme
  • Additional commits viewable in compare view

Updates serde_with from 3.21.0 to 3.22.0

Release notes

Sourced from serde_with's releases.

serde_with v3.22.0

Added

  • Add support for jiff v0.2 behind the new jiff_0_2 feature flag (#936) jiff::SignedDuration works with DurationSeconds and its variants. jiff::Timestamp, jiff::Zoned, and jiff::civil::DateTime work with TimestampSeconds and its variants. Deserializing a ...

    Description has been truncated

@dependabot
deps(wasm): bump the all group across 1 directory with 12 updates
9d961d6 
Bumps the all group with 12 updates in the /core/wren-core-wasm directory:

| Package | From | To |
| --- | --- | --- |
| [object_store](https://github.com/apache/arrow-rs-object-store) | `0.13.2` | `0.14.1` |
| [arrow](https://github.com/apache/arrow-rs) | `58.1.0` | `59.2.0` |
| [parquet](https://github.com/apache/arrow-rs) | `58.1.0` | `59.2.0` |
| [tokio](https://github.com/tokio-rs/tokio) | `1.51.1` | `1.53.1` |
| [bytes](https://github.com/tokio-rs/bytes) | `1.11.1` | `1.12.1` |
| [serde](https://github.com/serde-rs/serde) | `1.0.228` | `1.0.229` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.149` | `1.0.151` |
| [chrono](https://github.com/chronotope/chrono) | `0.4.44` | `0.4.45` |
| [log](https://github.com/rust-lang/log) | `0.4.29` | `0.4.34` |
| [async-trait](https://github.com/dtolnay/async-trait) | `0.1.89` | `0.1.92` |
| [hashbrown](https://github.com/rust-lang/hashbrown) | `0.17.0` | `0.17.1` |
| [serde_with](https://github.com/jonasbb/serde_with) | `3.21.0` | `3.22.0` |



Updates `object_store` from 0.13.2 to 0.14.1
- [Release notes](https://github.com/apache/arrow-rs-object-store/releases)
- [Changelog](https://github.com/apache/arrow-rs-object-store/blob/main/CHANGELOG-old.md)
- [Commits](apache/arrow-rs-object-store@v0.13.2...v0.14.1)

Updates `arrow` from 58.1.0 to 59.2.0
- [Release notes](https://github.com/apache/arrow-rs/releases)
- [Changelog](https://github.com/apache/arrow-rs/blob/main/CHANGELOG.md)
- [Commits](apache/arrow-rs@58.1.0...59.2.0)

Updates `parquet` from 58.1.0 to 59.2.0
- [Release notes](https://github.com/apache/arrow-rs/releases)
- [Changelog](https://github.com/apache/arrow-rs/blob/main/CHANGELOG.md)
- [Commits](apache/arrow-rs@58.1.0...59.2.0)

Updates `tokio` from 1.51.1 to 1.53.1
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.51.1...tokio-1.53.1)

Updates `bytes` from 1.11.1 to 1.12.1
- [Release notes](https://github.com/tokio-rs/bytes/releases)
- [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md)
- [Commits](tokio-rs/bytes@v1.11.1...v1.12.1)

Updates `serde` from 1.0.228 to 1.0.229
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.228...v1.0.229)

Updates `serde_json` from 1.0.149 to 1.0.151
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.149...v1.0.151)

Updates `chrono` from 0.4.44 to 0.4.45
- [Release notes](https://github.com/chronotope/chrono/releases)
- [Changelog](https://github.com/chronotope/chrono/blob/main/CHANGELOG.md)
- [Commits](chronotope/chrono@v0.4.44...v0.4.45)

Updates `log` from 0.4.29 to 0.4.34
- [Release notes](https://github.com/rust-lang/log/releases)
- [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md)
- [Commits](rust-lang/log@0.4.29...0.4.34)

Updates `async-trait` from 0.1.89 to 0.1.92
- [Release notes](https://github.com/dtolnay/async-trait/releases)
- [Commits](dtolnay/async-trait@0.1.89...0.1.92)

Updates `hashbrown` from 0.17.0 to 0.17.1
- [Release notes](https://github.com/rust-lang/hashbrown/releases)
- [Changelog](https://github.com/rust-lang/hashbrown/blob/main/CHANGELOG.md)
- [Commits](rust-lang/hashbrown@v0.17.0...v0.17.1)

Updates `serde_with` from 3.21.0 to 3.22.0
- [Release notes](https://github.com/jonasbb/serde_with/releases)
- [Commits](jonasbb/serde_with@v3.21.0...v3.22.0)

---
updated-dependencies:
- dependency-name: object_store
  dependency-version: 0.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: arrow
  dependency-version: 59.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: parquet
  dependency-version: 59.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: tokio
  dependency-version: 1.53.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: bytes
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: serde
  dependency-version: 1.0.229
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: serde_json
  dependency-version: 1.0.151
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: chrono
  dependency-version: 0.4.45
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: log
  dependency-version: 0.4.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: async-trait
  dependency-version: 0.1.92
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: hashbrown
  dependency-version: 0.17.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: serde_with
  dependency-version: 3.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added core dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 31, 2026
@github-actions github-actions Bot added the wasm label Aug 31, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

core dependencies Pull requests that update a dependency file rust Pull requests that update rust code wasm

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants