Skip to content

Commit fbbda2e

Browse files
maybe-vibeblackmwk
authored andcommitted
chore(deps): fix audit check and disable inherited aws sdk default features (apache#2274)
## Which issue does this PR close? - Fix the audit check by updating `aws-lc-sys` and `rustls-webpki`. - Avoid pulling both the legacy `rustls` / Hyper 0.14 stack and the newer `default-https-client` stack through inherited AWS SDK defaults. ([AWS SDK announcement](awslabs/aws-sdk-rust#1257)) ## What changes are included in this PR? - Bump to `aws-lc-sys>=0.39.0` and `rustls-webpki>=0.103.10` to pass security audit. - Disable inherited AWS SDK default features for `aws-sdk-glue` and `aws-sdk-s3tables` - Explicitly enable `default-https-client` and `rt-tokio` - Bump the minimum `aws-sdk-glue` version to `1.85`, the first version that provides `default-https-client` ## Are these changes tested? --------- Co-authored-by: blackmwk <liurenjie1024@outlook.com> (cherry picked from commit 2820d47)
1 parent 036e217 commit fbbda2e

2 files changed

Lines changed: 35 additions & 141 deletions

File tree

Cargo.lock

Lines changed: 33 additions & 139 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

Cargo.toml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -54,8 +54,8 @@ arrow-string = "57.1"
5454
as-any = "0.3.2"
5555
async-trait = "0.1.89"
5656
aws-config = "1.8.7"
57-
aws-sdk-glue = "1.39"
58-
aws-sdk-s3tables = "1.28.0"
57+
aws-sdk-glue = { version = "1.85", default-features = false, features = ["default-https-client", "rt-tokio"] }
58+
aws-sdk-s3tables = { version = "1.28", default-features = false, features = ["default-https-client", "rt-tokio"] }
5959
backon = "1.5.1"
6060
base64 = "0.22.1"
6161
bimap = "0.6"

0 commit comments

Comments
 (0)