chore(deps): Update `half` to 2.7.1, ignore `RUSTSEC-2025-0111` #18287

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged

alamb merged 3 commits into apache:main from alamb:alamb/update_half

Oct 27, 2025

.github/workflows/audit.yml

-Original file line number
+Diff line change
@@ Expand Up / @@ -46,4 +46,9 @@ jobs: @@
             with:
               tool: cargo-audit
           - name: Run audit check
-            run: cargo audit
+            # RUSTSEC-2025-0111: tokio-tar is by testcontainers for orchestration
+            # of testing, so does not impact DataFusion's security
+            # See https://github.com/apache/datafusion/issues/18288
+            # NOTE: can remove this once testcontainers releases a version that includes
+            # https://github.com/testcontainers/testcontainers-rs/pull/852
+            run: cargo audit --ignore RUSTSEC-2025-0111

Cargo.lock

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Provide feedback