Skip to content

Remove the unmaintained paste dependency from arrow#10303

Open
Phoenix500526 wants to merge 4 commits into
apache:mainfrom
Phoenix500526:issue/7598
Open

Remove the unmaintained paste dependency from arrow#10303
Phoenix500526 wants to merge 4 commits into
apache:mainfrom
Phoenix500526:issue/7598

Conversation

@Phoenix500526

@Phoenix500526 Phoenix500526 commented Jul 8, 2026

Copy link
Copy Markdown

Which issue does this PR close?

Rationale for this change

What changes are included in this PR?

This PR removes the workspace's remaining dependency on the unmaintained paste crate.

Are these changes tested?

Yes.

Are there any user-facing changes?

No

@dentiny
CC @alamb

The paste crate is unmaintained and has no patched release.
Removing it from flight-sql avoids the RustSec advisory.
The generated Flight SQL type URLs remain unchanged.

Refs: https://rustsec.org/advisories/RUSTSEC-2024-0436
Signed-off-by: Jiawei Zhao <Phoenix500526@163.com>
The paste crate is unmaintained and has no patched release.
Use nested test modules instead of paste-generated names so
parquet-variant no longer depends on it for decoder tests.

Refs: https://rustsec.org/advisories/RUSTSEC-2024-0436
Signed-off-by: Jiawei Zhao <Phoenix500526@163.com>
The paste crate is unmaintained and has no patched release.
Use nested test modules instead of paste-generated names so
parquet-variant no longer depends on it for decoder tests.

Refs: https://rustsec.org/advisories/RUSTSEC-2024-0436
Signed-off-by: Jiawei Zhao <Phoenix500526@163.com>
The paste crate is unmaintained and has no patched release.
Use nested test modules instead of paste-generated names so
parquet-variant no longer depends on it for decoder tests.

Refs: https://rustsec.org/advisories/RUSTSEC-2024-0436
Signed-off-by: Jiawei Zhao <Phoenix500526@163.com>
@github-actions github-actions Bot added parquet Changes to the parquet crate arrow Changes to the arrow crate arrow-flight Changes to the arrow-flight crate parquet-variant parquet-variant* crates labels Jul 8, 2026
@jhorstmann

Copy link
Copy Markdown
Contributor

Very nice to remove this deprecated dependency.

The changes to the parquet crate look good to me. I'm not too familiar with the variant or flight code, so getting another review there would be good.

@alamb alamb left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Makes sense to me -- thank you @Phoenix500526 and @jhorstmann

Comment thread Cargo.lock
"uuid",
]

[[package]]

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🎉

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

arrow Changes to the arrow crate arrow-flight Changes to the arrow-flight crate parquet Changes to the parquet crate parquet-variant parquet-variant* crates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

parquet relies on unmaintained dependency paste

3 participants