Skip to content

build(deps): bump the rust-dependencies group across 1 directory with 34 updates#6579

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/quickwit/rust-dependencies-96ad035f0d
Open

build(deps): bump the rust-dependencies group across 1 directory with 34 updates#6579
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/quickwit/rust-dependencies-96ad035f0d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 6, 2026

Copy link
Copy Markdown
Contributor

Bumps the rust-dependencies group with 33 updates in the /quickwit directory:

Package From To
arrow 58.3.0 59.0.0
bytes 1.11.1 1.12.0
bytesize 2.3.1 2.4.2
cron 0.16.0 0.17.0
google-cloud-gax 0.19.2 1.10.0
humantime 2.3.0 2.4.0
hyper 1.9.0 1.10.1
itertools 0.14.0 0.15.0
mockall 0.14.0 0.15.0
parquet 58.3.0 59.0.0
procfs 0.17.0 0.18.0
pulsar 6.7.2 6.8.0
quick_cache 0.6.21 0.7.0
reqwest-middleware 0.4.2 0.5.2
reqwest-retry 0.8.0 0.9.1
sea-query 0.32.7 1.0.1
serde_qs 0.15.0 1.1.2
serde_with 3.20.0 3.21.0
serial_test 3.4.0 3.5.0
tabled 0.20.0 0.21.0
tower-http 0.6.10 0.7.0
utoipa 4.2.3 5.5.0
vrl 0.32.0 0.33.1
aws-smithy-types 1.4.7 1.5.0
opendal 0.56.0 0.57.0
datafusion 53.1.0 54.0.0
datafusion-substrait 53.1.0 54.0.0
datafusion-datasource 53.1.0 54.0.0
datafusion-physical-plan 53.1.0 54.0.0
datafusion-datasource-parquet 53.1.0 54.0.0
datafusion-distributed 1.0.0 2.0.0
object_store 0.13.2 0.14.0
thrift 0.17.0 0.23.0

Updates arrow from 58.3.0 to 59.0.0

Release notes

Sourced from arrow's releases.

arrow 59.0.0

Changelog

59.0.0 (2026-06-04)

Full Changelog

Breaking changes:

Implemented enhancements:

  • Allow casting plain struct to dictionary encoded struct #10038 [arrow]
  • Optimize arrow-flight #10029
  • Align buffers when importing via from_ffi / ArrowArrayStreamReader #10028 [arrow]
  • Switch Parquet LogicalType enum to macro generated version #9995 [parquet]
  • Future proof Parquet Thrift parser #9973 [parquet]
  • Add DatePart 1-indexed variants #9964 [arrow]
  • perf: Rework Parquet Thrift handling of boolean fields #9946 [parquet]
  • Add benchmarks for REE to parquet #9935 [parquet] [arrow]
  • (re) Allow Large FixedSizeBinaryArrays #9906 [arrow]

... (truncated)

Changelog

Sourced from arrow's changelog.

Changelog

59.1.0 (2026-07-03)

Full Changelog

Implemented enhancements:

  • Fast path for nested DictionaryArray casting #10247 [arrow]
  • parquet/arrow: reading multiple nested columns fails with "Not all children array length are the same!" when a list continues across DataPageV2 page boundary #10243 [parquet]
  • Add product aggregate kernel to arrow-rs #10150 [arrow]
  • Stricter DataType parsing #10146 [arrow]
  • Support validating CSV headers against Schema #10143 [arrow]
  • arrow-ipc: Supports compression level configuration for arrow-ipc writer #10132 [arrow]
  • [Variant] VariantArray field API naming #10093
  • Add StructArray::field_ APIs symmetric to StructArray::column_ ones #10092 [arrow]
  • arrow-buffer: implement Saturating, CheckedShl, Not num-traits for i256 #10087 [arrow]
  • feat: native concat for MapArray #10047 [arrow]
  • [Variant] Add variant_to_arrow Dictionary/REE type support #10013

Fixed bugs:

  • arrow-row on fixed size binary/list with size 0 and no nulls return wrong length #10270
  • casting list to 0-size fixedsizelist can cause incorrect output length #10227 [arrow]
  • Buffer count mismatched with metadata when encoding records with dictionary of dictionaries #10213 [arrow]
  • Buffer::into_mutable is not consistent regarding sliced data and can lead to panics #10117 [arrow]
  • parquet_derive: cannot read or write columns whose name is a Rust keyword (raw identifiers like r#type become column "r#type") #10112
  • parquet: fix OffsetBuffer panic on corrupt input #10107 [parquet]
  • Parquet geospatial conversion uses metadata key "algorithm" instead of "edges" in geoarrow metadata #9929 [parquet]

Documentation updates:

... (truncated)

Commits
  • e5e66fa Add test for parquet-testing/bad_data/ARROW-[GH-47662](https://github.com/apache/arrow-rs/issues/47662).parquet (#10077)
  • 9f96a8f Prepare for 59.0.0 release (#10063)
  • d7ef673 Bump max throughput in flight benchmark before blocking (#10070)
  • 8042ea2 Pluggable page spilling API for the Parquet ArrowWriter (PageStore) (#10020)
  • 1e8ea5e fix(parquet): bound data page byte size for large variable-width values (#9972)
  • 2a1d40d Reduce Miri runtime even more (#9650)
  • 97f4b14 arrow-buffer: i256: implement ilog (#9453)
  • 6c39797 Improve email created by create_tarball.sh script (#9944)
  • 9949226 perf(parquet): LevelInfoBuilder batch write when no repetition childs (#10037)
  • 58bdc7d arrow-buffer: i256: Implement num_traits wrapping shift (#9418)
  • Additional commits viewable in compare view

Updates bytes from 1.11.1 to 1.12.0

Release notes

Sourced from bytes's releases.

Bytes v1.12.0

1.12.0 (June 18th, 2026)

Added

  • Add BytesMut::extend_from_within() (#818)
  • Add BytesMut::try_unsplit() (#746)

Fixed

  • Fix panic in get_int if nbytes is zero (#806)

Changed

  • Pass vtable data by value (#826)
  • Exclude development scripts from published package (#810)

Documented

  • Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)
Changelog

Sourced from bytes's changelog.

1.12.0 (June 18th, 2026)

Added

  • Add BytesMut::extend_from_within() (#818)
  • Add BytesMut::try_unsplit() (#746)

Fixed

  • Fix panic in get_int if nbytes is zero (#806)

Changed

  • Pass vtable data by value (#826)
  • Exclude development scripts from published package (#810)

Documented

  • Document that BytesMut::{reserve,try_reserve} doesn't preserve unused capacity (#808)
Commits

Updates bytesize from 2.3.1 to 2.4.2

Release notes

Sourced from bytesize's releases.

bytesize: v2.4.2

  • Improve accuracy of parsing large non-decimal byte count strings.

bytesize: v2.4.1

  • Fix rounding error near power-of-unit boundaries.

bytesize: v2.4.0

  • Implement Sum for ByteSize.
  • Minimum supported Rust version (MSRV) is now 1.85.
Changelog

Sourced from bytesize's changelog.

2.4.2

  • Improve accuracy of parsing large non-decimal byte count strings.

2.4.1

  • Fix rounding error near power-of-unit boundaries.

2.4.0

  • Implement Sum for ByteSize.
  • Minimum supported Rust version (MSRV) is now 1.85.
Commits
  • 2f8d196 chore: release v2.4.2 (#177)
  • 13f4aee Avoid f64 precision loss when parsing integer byte counts (#171)
  • 37cf3fc chore: release v2.4.1 (#176)
  • c84e293 chore(deps): bump actions-rust-lang/setup-rust-toolchain from 1.16.1 to 1.17....
  • fdba7f0 chore(deps): bump taiki-e/install-action from 2.81.10 to 2.82.7 (#173)
  • 1bad401 chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#174)
  • 520a557 fix: ideal_unit_std picks the wrong unit near power-of-unit boundaries (#175)
  • a50ff2f chore(deps): bump taiki-e/install-action from 2.75.27 to 2.81.10 (#163)
  • ce689d7 chore(deps): bump codecov/codecov-action from 6.0.0 to 7.0.0 (#164)
  • 284b09d chore(deps): bump serde_json from 1.0.149 to 1.0.150 (#165)
  • Additional commits viewable in compare view

Updates cron from 0.16.0 to 0.17.0

Commits

Updates google-cloud-gax from 0.19.2 to 1.10.0

Release notes

Sourced from google-cloud-gax's releases.

v1.0.0

First GA release

We are proud to announce the 1.0 release of the Google Cloud client libraries for Rust. This is the first GA version of the client libraries.

What's Included

  • Fully asynchronous clients for over 140 services, including Cloud Storage, Vertex AI, Secret Manager, and Key Management Service.
  • Fully asynchronous auth library, with support for application default credentials, service account credentials, user credentials, compute engine metadata service, and OIDC-based external credentials[^1].
  • Idiomatic abstractions for long-running operations and pagination APIs.
  • Automatic retries for requests that fail due to transient errors.
  • Automatic demarshalling of error details into idiomatic types.
  • Automatic resumes for uploads to and downloads from Cloud Storage.
  • Support for streaming uploads to Cloud Storage, with retries on errors.
  • Automatic checksumming of data uploaded to or downloaded from Cloud Storage.

What's changed

Compared to the previous release (v0.12.0) this release bumps the version numbers to 1.0.0 and updates README files.

Full Changelog: googleapis/google-cloud-rust@v0.12.0...v1.0.0

Footnotes

[^1]: Also known as workload identify federation or "bring your own id".

Commits

Updates humantime from 2.3.0 to 2.4.0

Release notes

Sourced from humantime's releases.

2.4.0

What's Changed

Commits
  • fc09281 chore: prepare release 2.4.0
  • 8a022cc feat: allow creating Duration in const context
  • 27a4f77 Explicitly set rust-version to 1.60
  • acc3c19 ci: upgrade to actions/checkout v7
  • 3acf96b ci: fix workflow formatting
  • See full diff in compare view

Updates hyper from 1.9.0 to 1.10.1

Release notes

Sourced from hyper's releases.

v1.10.1

What's Changed

Full Changelog: hyperium/hyper@v1.10.0...v1.10.1

v1.10.0

Features

Bug Fixes

  • http1:
  • http2:
    • do not reserve capacity before body data is available (#4061) (99f24345, closes #4003)
    • reading trailers shouldn't propagate NO_ERROR from early response (#3998) (e5ad96b1)

Refactors, chores, et al

New Contributors

... (truncated)

Changelog

Sourced from hyper's changelog.

v1.10.1 (2026-05-29)

Bug Fixes

  • http1: fix busy loop when peer half-closes and open body (#4086) (c6cb906f, closes #4085)

v1.10.0 (2026-05-27)

Bug Fixes

  • http1:
  • http2:
    • do not reserve capacity before body data is available (#4061) (99f24345, closes #4003)
    • reading trailers shouldn't propagate NO_ERROR from early response (#3998) (e5ad96b1)

Features

Commits

Updates itertools from 0.14.0 to 0.15.0

Changelog

Sourced from itertools's changelog.

0.15.0

Breaking

  • Restructure Position as struct instead of enum (#1042, #1043)
  • Canonicalize all_equal_value's error type (#1032)

Added

  • Add *_with_hasher adaptors (#1007)
  • Add strip_prefix and strip_prefix_by methods (#1104)

Changed

  • Remove Clone bounds from tuple_combinations and array_combinations(#1011)
  • must_use for collect_vec (#1009)
  • Make izip! temporary friendly (#1021)
  • Add array_combinations_with_replacement (#1033)
  • Implement Debug for remaining public types (#1038)
  • Specialize ExactlyOneError::count (#1046)
  • Implement PeekingNext for more types, in particular vec::IntoIter (#1059, #1073)
  • Fix PadUsing::next_back (#1082)
  • Introduce [circular_]array_windows, deprecate tuple_windows (#1086)
  • Deprecate tuple_combinations (replaced by array_combinations) (#1085)

Notable Internal Changes

Commits
  • 37bd72a Update CHANGELOG.md: strip_prefix[_by]
  • 86ec635 Use ControlFlow in fold_while implementation
  • d5897f7 refactor(strip_prefix): use try_for_each and drop PartialEq, Eq on StripPrefi...
  • b2a978a feat(Itertools): add strip_prefix and strip_prefix_by methods
  • 12b6ec6 Update CHANGELOG.md for all_equal_value_error's error type
  • 121821e AllEqualValueError implements std::error::Error
  • adac44e Introduce AllEqualValueError
  • 5707384 Update CHANGELOG.md
  • df60ff0 Update CHANGELOG.md
  • 113b850 Update CHANGELOG.md to include with_hasher
  • Additional commits viewable in compare view

Updates mockall from 0.14.0 to 0.15.0

Changelog

Sourced from mockall's changelog.

[ 0.15.0 ] - 2026-06-28

Added

  • Compatibility with the #[auto_impl] macro. (#686)
Commits
  • fc2c853 chore: Release
  • 551fadd Merge pull request #688 from asomers/audit-job-lockfile
  • 21529e3 Fix the audit CI job
  • 2270cdb Merge pull request #686 from Kranzes/automock-auto_impl-compat
  • d3b041d Add compatibility with the #[auto_impl] macro
  • 055886e Merge pull request #687 from asomers/clippy-june-2026
  • ed4bf07 Clippy cleanup
  • f7a4d6f Merge pull request #685 from asomers/clippy=may-2026
  • ba15180 Clippy cleanup: useless_borrows_in_formatting
  • de22d57 Merge pull request #684 from asomers/github-workflows
  • Additional commits viewable in compare view

Updates parquet from 58.3.0 to 59.0.0

Release notes

Sourced from parquet's releases.

arrow 59.0.0

Changelog

59.0.0 (2026-06-04)

Full Changelog

Breaking changes:

Implemented enhancements:

  • Allow casting plain struct to dictionary encoded struct #10038 [arrow]
  • Optimize arrow-flight #10029
  • Align buffers when importing via from_ffi / ArrowArrayStreamReader #10028 [arrow]
  • Switch Parquet LogicalType enum to macro generated version #9995 [parquet]
  • Future proof Parquet Thrift parser #9973 [parquet]
  • Add DatePart 1-indexed variants #9964 [arrow]
  • perf: Rework Parquet Thrift handling of boolean fields #9946 [parquet]
  • Add benchmarks for REE to parquet #9935 [parquet] [arrow]
  • (re) Allow Large FixedSizeBinaryArrays #9906 [arrow]

... (truncated)

Changelog

Sourced from parquet's changelog.

Changelog

59.1.0 (2026-07-03)

Full Changelog

Implemented enhancements:

  • Fast path for nested DictionaryArray casting #10247 [arrow]
  • parquet/arrow: reading multiple nested columns fails with "Not all children array length are the same!" when a list continues across DataPageV2 page boundary #10243 [parquet]
  • Add product aggregate kernel to arrow-rs #10150 [arrow]
  • Stricter DataType parsing #10146 [arrow]
  • Support validating CSV headers against Schema #10143 [arrow]
  • arrow-ipc: Supports compression level configuration for arrow-ipc writer #10132 [arrow]
  • [Variant] VariantArray field API naming #10093
  • Add StructArray::field_ APIs symmetric to StructArray::column_ ones #10092 [arrow]
  • arrow-buffer: implement Saturating, CheckedShl, Not num-traits for i256 #10087 [arrow]
  • feat: native concat for MapArray #10047 [arrow]
  • [Variant] Add variant_to_arrow Dictionary/REE type support #10013

Fixed bugs:

  • arrow-row on fixed size binary/list with size 0 and no nulls return wrong length #10270
  • casting list to 0-size fixedsizelist can cause incorrect output length #10227 [arrow]
  • Buffer count mismatched with metadata when encoding records with dictionary of dictionaries #10213 [arrow]
  • Buffer::into_mutable is not consistent regarding sliced data and can lead to panics #10117 [arrow]
  • parquet_derive: cannot read or write columns whose name is a Rust keyword (raw identifiers like r#type become column "r#type") #10112
  • parquet: fix OffsetBuffer panic on corrupt input #10107 [parquet]
  • Parquet geospatial conversion uses metadata key "algorithm" instead of "edges" in geoarrow metadata #9929 [parquet]

Documentation updates:

... (truncated)

Commits
  • e5e66fa Add test for parquet-testing/bad_data/ARROW-[GH-47662](https://github.com/apache/arrow-rs/issues/47662).parquet (#10077)
  • 9f96a8f Prepare for 59.0.0 release (#10063)
  • d7ef673 Bump max throughput in flight benchmark before blocking (#10070)
  • 8042ea2 Pluggable page spilling API for the Parquet ArrowWriter (PageStore) (#10020)
  • 1e8ea5e fix(parquet): bound data page byte size for large variable-width values (#9972)
  • 2a1d40d Reduce Miri runtime even more (#9650)
  • 97f4b14 arrow-buffer: i256: implement ilog (#9453)
  • 6c39797 Improve email created by create_tarball.sh script (#9944)
  • 9949226 perf(parquet): LevelInfoBuilder batch write when no repetition childs (#10037)
  • 58bdc7d arrow-buffer: i256: Implement num_traits wrapping shift (#9418)
  • Additional commits viewable in compare view

Updates procfs from 0.17.0 to 0.18.0

Release notes

Sourced from procfs's releases.

v0.18.0

What's Changed

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Jul 6, 2026
@dependabot dependabot Bot requested review from a team as code owners July 6, 2026 14:15
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Jul 6, 2026

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 553963a224

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread quickwit/Cargo.toml
Comment on lines +249 to +250
reqwest-middleware = "0.5"
reqwest-retry = "0.9"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Keep reqwest middleware aligned with reqwest

This bumps reqwest-middleware/reqwest-retry to versions built against reqwest 0.13, while the workspace reqwest dependency remains 0.12. The generated lockfile therefore contains both reqwest 0.12.28 and 0.13.3; quickwit-rest-client/src/rest_client.rs builds a workspace reqwest::Client and passes it to ReqwestMiddlewareClientBuilder::new, whose 0.5 API expects its own 0.13 client, so the REST client no longer type-checks. Either keep these at the 0.4/0.8 line or update reqwest at the same time.

Useful? React with 👍 / 👎.

Comment thread quickwit/Cargo.toml
rustls = "0.23"
rustls-pemfile = "2.2"
sea-query = { version = "0.32" }
sea-query = { version = "1.0" }

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Keep sea-query aligned with sea-query-binder

sea-query-binder 0.7 still depends on sea-query 0.32.7, so bumping only the workspace sea-query creates two incompatible sea_query crates. quickwit-metastore imports Query from the workspace crate and SqlxBinder, then calls build_sqlx; that extension trait is implemented for the binder's 0.32 types, not 1.0 types, so the Postgres metastore build breaks. Keep sea-query on 0.32 until the binder can be upgraded together.

Useful? React with 👍 / 👎.

Comment thread quickwit/Cargo.toml
# of google-cloud-pubsub is "0.30" which explicitly depends on: google-cloud-auth ^0.17 and google-cloud-gax ^0.19.
google-cloud-auth = { version = "0.17.2", default-features = false, features = ["rustls-tls"] }
google-cloud-gax = "0.19.2"
google-cloud-gax = "1.10.0"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Keep google-cloud-gax aligned with pubsub

The adjacent comment still applies: google-cloud-pubsub 0.30 in the lockfile depends on google-cloud-gax 0.19.2, while quickwit-indexing now imports RetrySetting from the direct google-cloud-gax 1.11.0. The GCP Pub/Sub source passes that RetrySetting into Subscription::exists, which expects the 0.19 type, so enabling the gcp-pubsub feature fails to build. Keep gax on the 0.19 line unless pubsub is upgraded too.

Useful? React with 👍 / 👎.

Comment thread quickwit/Cargo.toml
anyhow = "1"
arc-swap = "1.9"
arrow = { version = "58", default-features = false, features = ["ipc"] }
arrow = { version = "59", default-features = false, features = ["ipc"] }

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Keep Arrow on DataFusion's Arrow version

DataFusion 54 still resolves to arrow 58.3.0 and parquet 58.3.0 in this lockfile, but this workspace dependency makes Quickwit crates use Arrow 59. The DataFusion integration uses workspace arrow::RecordBatch/SchemaRef in APIs such as service streams and table-provider schemas that are also DataFusion trait types, so the opt-in DataFusion lane gets two incompatible Arrow types. Keep Arrow/Parquet at 58 or move DataFusion to a release that uses Arrow 59.

Useful? React with 👍 / 👎.

datafusion-physical-plan = "54"
datafusion-datasource-parquet = "54"
datafusion-distributed = "2.0"
object_store = "0.14"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Keep object_store on DataFusion's version

datafusion/datafusion-distributed 54/2.0 still depend on object_store 0.13.2, but this direct dependency is 0.14. In QuickwitObjectStoreRegistry we implement DataFusion's ObjectStoreRegistry while using object_store::ObjectStore from this crate, so method signatures such as register_store and get_store use the wrong trait-object type for DataFusion. Align this dependency with DataFusion's object_store version.

Useful? React with 👍 / 👎.

Comment thread quickwit/Cargo.toml
] }
quanta = "0.12"
quick_cache = "0.6.21"
quick_cache = "0.7.0"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Keep quick_cache on the Lifecycle API in use

quick_cache 0.7 removed the Lifecycle::begin_request hook and instead requires RequestState: Default. quickwit-storage/src/cache/base_cache.rs still implements fn begin_request, so the default storage crate no longer type-checks with this version. Keep quick_cache on the 0.6 line or update the lifecycle implementation for the 0.7 API.

Useful? React with 👍 / 👎.

Comment thread quickwit/Cargo.toml
] }
ouroboros = "0.18"
parquet = { version = "58", default-features = false, features = ["arrow", "experimental", "snap", "variant_experimental", "zstd"] }
parquet = { version = "59", default-features = false, features = ["arrow", "experimental", "snap", "variant_experimental", "zstd"] }

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Keep Parquet off the release that removes format

The parquet engine still imports parquet::format::{PageHeader, PageType} and parquet::thrift::TSerializable in storage/streaming_reader.rs; that same file notes format is scheduled for removal in parquet 59. This bump moves to parquet 59 while the replacement public path has not been adopted, so quickwit-parquet-engine stops compiling. Keep parquet at 58 until the streaming reader is migrated.

Useful? React with 👍 / 👎.

… 34 updates

Bumps the rust-dependencies group with 33 updates in the /quickwit directory:

| Package | From | To |
| --- | --- | --- |
| [arrow](https://github.com/apache/arrow-rs) | `58.3.0` | `59.0.0` |
| [bytes](https://github.com/tokio-rs/bytes) | `1.11.1` | `1.12.0` |
| [bytesize](https://github.com/bytesize-rs/bytesize) | `2.3.1` | `2.4.2` |
| [cron](https://github.com/zslayton/cron) | `0.16.0` | `0.17.0` |
| [google-cloud-gax](https://github.com/googleapis/google-cloud-rust) | `0.19.2` | `1.10.0` |
| [humantime](https://github.com/chronotope/humantime) | `2.3.0` | `2.4.0` |
| [hyper](https://github.com/hyperium/hyper) | `1.9.0` | `1.10.1` |
| [itertools](https://github.com/rust-itertools/itertools) | `0.14.0` | `0.15.0` |
| [mockall](https://github.com/asomers/mockall) | `0.14.0` | `0.15.0` |
| [parquet](https://github.com/apache/arrow-rs) | `58.3.0` | `59.0.0` |
| [procfs](https://github.com/eminence/procfs) | `0.17.0` | `0.18.0` |
| [pulsar](https://github.com/streamnative/pulsar-rs) | `6.7.2` | `6.8.0` |
| [quick_cache](https://github.com/arthurprs/quick-cache) | `0.6.21` | `0.7.0` |
| [reqwest-middleware](https://github.com/TrueLayer/reqwest-middleware) | `0.4.2` | `0.5.2` |
| [reqwest-retry](https://github.com/TrueLayer/reqwest-middleware) | `0.8.0` | `0.9.1` |
| [sea-query](https://github.com/SeaQL/sea-query) | `0.32.7` | `1.0.1` |
| [serde_qs](https://github.com/samscott89/serde_qs) | `0.15.0` | `1.1.2` |
| [serde_with](https://github.com/jonasbb/serde_with) | `3.20.0` | `3.21.0` |
| [serial_test](https://github.com/palfrey/serial_test) | `3.4.0` | `3.5.0` |
| [tabled](https://github.com/zhiburt/tabled) | `0.20.0` | `0.21.0` |
| [tower-http](https://github.com/tower-rs/tower-http) | `0.6.10` | `0.7.0` |
| [utoipa](https://github.com/juhaku/utoipa) | `4.2.3` | `5.5.0` |
| [vrl](https://github.com/vectordotdev/vrl) | `0.32.0` | `0.33.1` |
| [aws-smithy-types](https://github.com/smithy-lang/smithy-rs) | `1.4.7` | `1.5.0` |
| [opendal](https://github.com/apache/opendal) | `0.56.0` | `0.57.0` |
| [datafusion](https://github.com/apache/datafusion) | `53.1.0` | `54.0.0` |
| [datafusion-substrait](https://github.com/apache/datafusion) | `53.1.0` | `54.0.0` |
| [datafusion-datasource](https://github.com/apache/datafusion) | `53.1.0` | `54.0.0` |
| [datafusion-physical-plan](https://github.com/apache/datafusion) | `53.1.0` | `54.0.0` |
| [datafusion-datasource-parquet](https://github.com/apache/datafusion) | `53.1.0` | `54.0.0` |
| [datafusion-distributed](https://github.com/datafusion-contrib/datafusion-distributed) | `1.0.0` | `2.0.0` |
| [object_store](https://github.com/apache/arrow-rs-object-store) | `0.13.2` | `0.14.0` |
| [thrift](https://github.com/apache/thrift) | `0.17.0` | `0.23.0` |



Updates `arrow` from 58.3.0 to 59.0.0
- [Release notes](https://github.com/apache/arrow-rs/releases)
- [Changelog](https://github.com/apache/arrow-rs/blob/main/CHANGELOG.md)
- [Commits](apache/arrow-rs@58.3.0...59.0.0)

Updates `bytes` from 1.11.1 to 1.12.0
- [Release notes](https://github.com/tokio-rs/bytes/releases)
- [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md)
- [Commits](tokio-rs/bytes@v1.11.1...v1.12.0)

Updates `bytesize` from 2.3.1 to 2.4.2
- [Release notes](https://github.com/bytesize-rs/bytesize/releases)
- [Changelog](https://github.com/bytesize-rs/bytesize/blob/master/CHANGELOG.md)
- [Commits](bytesize-rs/bytesize@bytesize-v2.3.1...bytesize-v2.4.2)

Updates `cron` from 0.16.0 to 0.17.0
- [Release notes](https://github.com/zslayton/cron/releases)
- [Commits](https://github.com/zslayton/cron/commits)

Updates `google-cloud-gax` from 0.19.2 to 1.10.0
- [Release notes](https://github.com/googleapis/google-cloud-rust/releases)
- [Commits](https://github.com/googleapis/google-cloud-rust/commits)

Updates `humantime` from 2.3.0 to 2.4.0
- [Release notes](https://github.com/chronotope/humantime/releases)
- [Commits](chronotope/humantime@v2.3.0...v2.4.0)

Updates `hyper` from 1.9.0 to 1.10.1
- [Release notes](https://github.com/hyperium/hyper/releases)
- [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md)
- [Commits](hyperium/hyper@v1.9.0...v1.10.1)

Updates `itertools` from 0.14.0 to 0.15.0
- [Changelog](https://github.com/rust-itertools/itertools/blob/master/CHANGELOG.md)
- [Commits](rust-itertools/itertools@v0.14.0...v0.15.0)

Updates `mockall` from 0.14.0 to 0.15.0
- [Changelog](https://github.com/asomers/mockall/blob/master/CHANGELOG.md)
- [Commits](asomers/mockall@v0.14.0...v0.15.0)

Updates `parquet` from 58.3.0 to 59.0.0
- [Release notes](https://github.com/apache/arrow-rs/releases)
- [Changelog](https://github.com/apache/arrow-rs/blob/main/CHANGELOG.md)
- [Commits](apache/arrow-rs@58.3.0...59.0.0)

Updates `procfs` from 0.17.0 to 0.18.0
- [Release notes](https://github.com/eminence/procfs/releases)
- [Commits](eminence/procfs@v0.17.0...v0.18.0)

Updates `pulsar` from 6.7.2 to 6.8.0
- [Release notes](https://github.com/streamnative/pulsar-rs/releases)
- [Commits](streamnative/pulsar-rs@v6.7.2...v6.8.0)

Updates `quick_cache` from 0.6.21 to 0.7.0
- [Release notes](https://github.com/arthurprs/quick-cache/releases)
- [Commits](arthurprs/quick-cache@v0.6.21...v0.7.0)

Updates `reqwest-middleware` from 0.4.2 to 0.5.2
- [Release notes](https://github.com/TrueLayer/reqwest-middleware/releases)
- [Commits](TrueLayer/reqwest-middleware@reqwest-middleware-v0.4.2...reqwest-middleware-v0.5.2)

Updates `reqwest-retry` from 0.8.0 to 0.9.1
- [Release notes](https://github.com/TrueLayer/reqwest-middleware/releases)
- [Commits](https://github.com/TrueLayer/reqwest-middleware/commits/reqwest-retry-v0.9.1)

Updates `sea-query` from 0.32.7 to 1.0.1
- [Release notes](https://github.com/SeaQL/sea-query/releases)
- [Changelog](https://github.com/SeaQL/sea-query/blob/master/CHANGELOG.md)
- [Commits](https://github.com/SeaQL/sea-query/commits)

Updates `serde_json` from 1.0.149 to 1.0.150
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.149...v1.0.150)

Updates `serde_qs` from 0.15.0 to 1.1.2
- [Release notes](https://github.com/samscott89/serde_qs/releases)
- [Changelog](https://github.com/samscott89/serde_qs/blob/main/CHANGELOG.md)
- [Commits](samscott89/serde_qs@v0.15.0...v1.1.2)

Updates `serde_with` from 3.20.0 to 3.21.0
- [Release notes](https://github.com/jonasbb/serde_with/releases)
- [Commits](jonasbb/serde_with@v3.20.0...v3.21.0)

Updates `serial_test` from 3.4.0 to 3.5.0
- [Release notes](https://github.com/palfrey/serial_test/releases)
- [Commits](palfrey/serial_test@v3.4.0...v3.5.0)

Updates `tabled` from 0.20.0 to 0.21.0
- [Changelog](https://github.com/zhiburt/tabled/blob/master/CHANGELOG.md)
- [Commits](https://github.com/zhiburt/tabled/commits)

Updates `tower-http` from 0.6.10 to 0.7.0
- [Release notes](https://github.com/tower-rs/tower-http/releases)
- [Commits](tower-rs/tower-http@tower-http-0.6.10...tower-http-0.7.0)

Updates `utoipa` from 4.2.3 to 5.5.0
- [Release notes](https://github.com/juhaku/utoipa/releases)
- [Changelog](https://github.com/juhaku/utoipa/blob/master/utoipa-rapidoc/CHANGELOG.md)
- [Commits](juhaku/utoipa@utoipa-4.2.3...utoipa-5.5.0)

Updates `vrl` from 0.32.0 to 0.33.1
- [Changelog](https://github.com/vectordotdev/vrl/blob/main/CHANGELOG.md)
- [Commits](vectordotdev/vrl@v0.32.0...v0.33.1)

Updates `aws-smithy-types` from 1.4.7 to 1.5.0
- [Release notes](https://github.com/smithy-lang/smithy-rs/releases)
- [Changelog](https://github.com/smithy-lang/smithy-rs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/smithy-lang/smithy-rs/commits)

Updates `opendal` from 0.56.0 to 0.57.0
- [Release notes](https://github.com/apache/opendal/releases)
- [Changelog](https://github.com/apache/opendal/blob/main/CHANGELOG.md)
- [Commits](apache/opendal@v0.56.0...v0.57.0)

Updates `datafusion` from 53.1.0 to 54.0.0
- [Changelog](https://github.com/apache/datafusion/blob/main/CHANGELOG.md)
- [Commits](apache/datafusion@53.1.0...54.0.0)

Updates `datafusion-substrait` from 53.1.0 to 54.0.0
- [Changelog](https://github.com/apache/datafusion/blob/main/CHANGELOG.md)
- [Commits](apache/datafusion@53.1.0...54.0.0)

Updates `datafusion-datasource` from 53.1.0 to 54.0.0
- [Changelog](https://github.com/apache/datafusion/blob/main/CHANGELOG.md)
- [Commits](apache/datafusion@53.1.0...54.0.0)

Updates `datafusion-physical-plan` from 53.1.0 to 54.0.0
- [Changelog](https://github.com/apache/datafusion/blob/main/CHANGELOG.md)
- [Commits](apache/datafusion@53.1.0...54.0.0)

Updates `datafusion-datasource-parquet` from 53.1.0 to 54.0.0
- [Changelog](https://github.com/apache/datafusion/blob/main/CHANGELOG.md)
- [Commits](apache/datafusion@53.1.0...54.0.0)

Updates `datafusion-distributed` from 1.0.0 to 2.0.0
- [Release notes](https://github.com/datafusion-contrib/datafusion-distributed/releases)
- [Commits](datafusion-contrib/datafusion-distributed@v1.0.0...v2.0.0)

Updates `object_store` from 0.13.2 to 0.14.0
- [Changelog](https://github.com/apache/arrow-rs-object-store/blob/main/CHANGELOG-old.md)
- [Commits](apache/arrow-rs-object-store@v0.13.2...v0.14.0)

Updates `thrift` from 0.17.0 to 0.23.0
- [Release notes](https://github.com/apache/thrift/releases)
- [Changelog](https://github.com/apache/thrift/blob/master/CHANGES.md)
- [Commits](apache/thrift@v0.17.0...v0.23.0)

---
updated-dependencies:
- dependency-name: arrow
  dependency-version: 59.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: aws-smithy-types
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: bytes
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: bytesize
  dependency-version: 2.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: cron
  dependency-version: 0.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: datafusion
  dependency-version: 54.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: datafusion-datasource
  dependency-version: 54.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: datafusion-datasource-parquet
  dependency-version: 54.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: datafusion-distributed
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: datafusion-physical-plan
  dependency-version: 54.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: datafusion-substrait
  dependency-version: 54.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: google-cloud-gax
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: humantime
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: hyper
  dependency-version: 1.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: itertools
  dependency-version: 0.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: mockall
  dependency-version: 0.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: object_store
  dependency-version: 0.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: opendal
  dependency-version: 0.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: parquet
  dependency-version: 59.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: procfs
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: pulsar
  dependency-version: 6.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: quick_cache
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: reqwest-middleware
  dependency-version: 0.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: reqwest-retry
  dependency-version: 0.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: sea-query
  dependency-version: 1.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: serde_json
  dependency-version: 1.0.150
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: serde_qs
  dependency-version: 1.1.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: serde_with
  dependency-version: 3.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: serial_test
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: tabled
  dependency-version: 0.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: thrift
  dependency-version: 0.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: tower-http
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: utoipa
  dependency-version: 5.5.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: vrl
  dependency-version: 0.33.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/cargo/quickwit/rust-dependencies-96ad035f0d branch from 553963a to fafac15 Compare July 7, 2026 16:05

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: fafac1559e

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread quickwit/Cargo.toml
serde_json = "1.0"
serde_json_borrow = "0.9"
serde_qs = { version = "0.15" }
serde_qs = { version = "1.1" }

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Keep empty query parameters deserializing as absent

With serde_qs 1.1, an empty value such as field_patterns= is deserialized as Some("") for Option<String> instead of None; the existing empty_field_patterns_value test in quickwit-serve/src/elasticsearch_api/model/index_mapping_query_params.rs still asserts that this query string leaves field_patterns absent. As soon as the quickwit-serve tests run, this dependency bump fails the test suite unless the code/test is updated for the new empty-value semantics.

Useful? React with 👍 / 👎.

Comment thread quickwit/Cargo.toml
# 1. The `OpenApi` struct structure changed (fields are private), breaking our manual merging logic in openapi.rs
# in `quickwit-serve`. This code is fundamentally incompatible with version 5.x.
utoipa = { version = "4.2", features = ["time", "ulid"] }
utoipa = { version = "5.5", features = ["time", "ulid"] }

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Finish the utoipa 5 migration before bumping

This selects utoipa 5 even though Quickwit still uses utoipa 4 APIs in schema generation: quickwit-macros/src/lib.rs emits impl<'__s> utoipa::ToSchema<'__s> with a tuple-returning schema(), while utoipa 5's ToSchema no longer has that lifetime/signature and relies on PartialSchema; the OpenAPI test helper also still treats Array.items as RefOr<Schema> although utoipa 5 exposes ArrayItems. Building the default crates that derive schemas through #[quickwit_macros::serde_multikey] (for example DocMapping) or running the serve tests will fail until these call sites are migrated or the dependency stays on 4.x.

Useful? React with 👍 / 👎.

object_store = "0.13"
datafusion = "54"
datafusion-substrait = "54"
datafusion-distributed = "2.0"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Update TaskEstimator for datafusion-distributed 2

datafusion-distributed 2.0 changed TaskEstimator::scale_up_leaf_node to return Result<Option<Arc<dyn ExecutionPlan>>>, but quickwit-df-core/src/task_estimator.rs and the forwarding impl in quickwit-df-core/src/session.rs still implement the 1.0 signature returning Option<Arc<_>>. Enabling the DataFusion lane now fails to type-check before any query can run, so either keep datafusion-distributed on 1.0 or migrate these implementations to the 2.0 trait.

Useful? React with 👍 / 👎.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update Rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants