Re: [PR] `url` dependancy update [datafusion]

2025-01-06 Thread via GitHub
korowa merged PR #14019: URL: https://github.com/apache/datafusion/pull/14019 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: github-unsubscr...@datafus

Re: [PR] `url` dependancy update [datafusion]

2025-01-06 Thread via GitHub
vadimpiven commented on code in PR #14019: URL: https://github.com/apache/datafusion/pull/14019#discussion_r1904083177 ## Cargo.toml: ## @@ -150,7 +150,7 @@ serde_json = "1" sqlparser = { version = "0.53.0", features = ["visitor"] } tempfile = "3" tokio = { version = "1.36",

Re: [PR] `url` dependancy update [datafusion]

2025-01-06 Thread via GitHub
korowa commented on code in PR #14019: URL: https://github.com/apache/datafusion/pull/14019#discussion_r1904056652 ## Cargo.toml: ## @@ -150,7 +150,7 @@ serde_json = "1" sqlparser = { version = "0.53.0", features = ["visitor"] } tempfile = "3" tokio = { version = "1.36", feat

Re: [PR] `url` dependancy update [datafusion]

2025-01-06 Thread via GitHub
vadimpiven commented on code in PR #14019: URL: https://github.com/apache/datafusion/pull/14019#discussion_r1904041737 ## Cargo.toml: ## @@ -150,7 +150,7 @@ serde_json = "1" sqlparser = { version = "0.53.0", features = ["visitor"] } tempfile = "3" tokio = { version = "1.36",

Re: [PR] `url` dependancy update [datafusion]

2025-01-06 Thread via GitHub
alamb commented on code in PR #14019: URL: https://github.com/apache/datafusion/pull/14019#discussion_r1904025843 ## Cargo.toml: ## @@ -150,7 +150,7 @@ serde_json = "1" sqlparser = { version = "0.53.0", features = ["visitor"] } tempfile = "3" tokio = { version = "1.36", featu

Re: [PR] `url` dependancy update [datafusion]

2025-01-06 Thread via GitHub
alamb commented on code in PR #14019: URL: https://github.com/apache/datafusion/pull/14019#discussion_r1904025843 ## Cargo.toml: ## @@ -150,7 +150,7 @@ serde_json = "1" sqlparser = { version = "0.53.0", features = ["visitor"] } tempfile = "3" tokio = { version = "1.36", featu

[PR] `url` dependancy update [datafusion]

2025-01-06 Thread via GitHub
vadimpiven opened a new pull request, #14019: URL: https://github.com/apache/datafusion/pull/14019 ## Which issue does this PR close? Closes #14018 ## Rationale for this change DataFusion uses an old version of `url` crate which has known vulnerability https://rustsec.or