Commit dc9098e
authored
chore: update testcontainers and astral-tokio-tar for cargo audit (#21114)
## Which issue does this PR close?
- N/A
## Rationale for this change
`cargo audit --ignore RUSTSEC-2024-0014` started failing due to
`RUSTSEC-2026-0066` in `astral-tokio-tar 0.5.6`, which was pulled in
transitively through `testcontainers`.
As a result, the `Security audit` GitHub Actions workflow is currently
failing on this dependency resolution.
This change only updates `Cargo.lock` because the existing version
requirements in `Cargo.toml` already allow a safe resolution.
Re-resolving the lockfile is enough to move from `testcontainers 0.27.1`
to `0.27.2`, which in turn updates `astral-tokio-tar` from `0.5.6` to
`0.6.0`.
## What changes are included in this PR?
- Updated `Cargo.lock`
- Resolved `testcontainers` from `0.27.1` to `0.27.2`
- Updated transitive `astral-tokio-tar` from `0.5.6` to `0.6.0`
## Are these changes tested?
Yes.
- `cargo test -p datafusion-cli`
- `cargo audit --ignore RUSTSEC-2024-0014`
## Are there any user-facing changes?
No.
This PR was created with the help of a coding agent.1 parent 76075e2 commit dc9098e
1 file changed
+4
-4
lines changedSome generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
0 commit comments