Skip to content

deps(deps): Bump parquet from 58.2.0 to 58.3.0#286

Merged
andrehrferreira merged 1 commit into
deps/batch-2026-05from
dependabot/cargo/parquet-58.3.0
May 18, 2026
Merged

deps(deps): Bump parquet from 58.2.0 to 58.3.0#286
andrehrferreira merged 1 commit into
deps/batch-2026-05from
dependabot/cargo/parquet-58.3.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 18, 2026

Bumps parquet from 58.2.0 to 58.3.0.

Release notes

Sourced from parquet's releases.

arrow 58.3.0

Changelog

58.3.0 (2026-05-07)

Full Changelog

Implemented enhancements:

  • Add DatePart::from_str API #9930 [arrow]
  • should use DictionaryArray::with_values instead of try_new on the dictionary fast path #9889 [arrow]
  • [arrow-string] add concat_elements for BinaryViewArray and FixedSizeBinary #9875 [arrow]
  • Expose eq ignore ascii case from arrow-string #9870 [arrow]
  • Configurable data page v2 compression threshold #9827 [parquet]

Fixed bugs:

  • [arrow-cast] incorrect Time32 -> Time64 conversion #9851 [arrow]
  • Panic when reading malformed compact-Thrift bool fields in Parquet page metadata #9839 [parquet]
  • Parquet DeltaBitPackDecoder::skip could panic on "non-standard" miniblocks #9793 [parquet]

Documentation updates:

  • docs: Add guidance for AI assisted submissions to CONTRIBUTING.md #9892 (etseidl)
  • Update release schedule on README #9881 (alamb)
  • Add more documentation for FixedSizeBinary arrays #9866 [arrow] (alamb)
  • Minor: document why FixedSizeBinary offset is always 0 #9861 [arrow] (alamb)
  • docs: Update contributing guidelines with benchmark results #9782 (alamb)

Closed issues:

... (truncated)

Changelog

Sourced from parquet's changelog.

58.3.0 (2026-05-07)

Full Changelog

Implemented enhancements:

  • Add DatePart::from_str API #9930 [arrow]
  • should use DictionaryArray::with_values instead of try_new on the dictionary fast path #9889 [arrow]
  • [arrow-string] add concat_elements for BinaryViewArray and FixedSizeBinary #9875 [arrow]
  • Expose eq ignore ascii case from arrow-string #9870 [arrow]
  • Configurable data page v2 compression threshold #9827 [parquet]

Fixed bugs:

  • [arrow-cast] incorrect Time32 -> Time64 conversion #9851 [arrow]
  • Panic when reading malformed compact-Thrift bool fields in Parquet page metadata #9839 [parquet]
  • Parquet DeltaBitPackDecoder::skip could panic on "non-standard" miniblocks #9793 [parquet]

Documentation updates:

  • docs: Add guidance for AI assisted submissions to CONTRIBUTING.md #9892 (etseidl)
  • Update release schedule on README #9881 (alamb)
  • Add more documentation for FixedSizeBinary arrays #9866 [arrow] (alamb)
  • Minor: document why FixedSizeBinary offset is always 0 #9861 [arrow] (alamb)
  • docs: Update contributing guidelines with benchmark results #9782 (alamb)

Closed issues:

  • GenericByteDictionaryBuilder::with_capacity does not pre-size dedup HashTable #9907 [arrow]
  • [arrow-buffer] Integer overflow in repeat_slice_n_times leads to undefined behavior #9904 [arrow]
  • [arrow-buffer] Integer overflow in BitChunks::new leads to undefined behavior #9903 [arrow]
  • [arrow-row] Integer overflow in Rows::row index handling leads to undefined behavior #9901 [arrow]
  • [arrow-data] Integer overflow in ArrayData validation leads to undefined behavior #9900 [arrow]
  • [arrow-data] Integer overflow in ArrayData::slice leads to undefined behavior #9899 [arrow]
  • [arrow-array] Integer overflow in FixedSizeBinaryArray::value leads to undefined behavior #9898 [arrow]
  • [arrow-buffer] Integer overflow in BufferBuilder::reserve leads to undefined behavior #9897 [arrow]
  • arrow-csv: integer overflow panic in Reader::records::flush #9885 [arrow]
  • Make an API to help with the pattern of 'replaces the values of the REE array' #9854 [arrow]
  • Parquet reader rejects canonical UNKNOWN logical type on BOOLEAN physical columns #9844 [parquet]
  • ColumnIndex length mismatch can cause panic during decoding in Parquet #9832 [parquet]
  • Bug converting json to fixed list of zero size #9780 [arrow]

Merged pull requests:

... (truncated)

Commits
  • 913bab2 Prepare for 58.3.0 release (#9893)
  • 3384f64 chore(deps): bump actions/labeler from 6.0.1 to 6.1.0 (#9932)
  • cc5a256 impl FromStr for DatePart (#9931)
  • 97ff198 feat(arrow-string): concat_elements for view, fixed binary (#9876)
  • ded985c fix(arrow-csv): bound RecordDecoder::flush offset accumulation (#9886)
  • 7f6524d fix(parquet): bound schema num_children before Vec::with_capacity (#9884)
  • 5bf8912 [arrow-string]: add like::eq_ascii_ignore_case kernel (#9871)
  • 8091f3f [arrow-array] Use consistent value_length name in FixedSizeBinaryArray (#9905)
  • 1d89737 fix(parquet): Prevent negative list sizes in Thrift compact protocol parser (...
  • 3790d88 Pre-size dedup HashTable in GenericByteDictionaryBuilder::with_capacity (#9908)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [parquet](https://github.com/apache/arrow-rs) from 58.2.0 to 58.3.0.
- [Release notes](https://github.com/apache/arrow-rs/releases)
- [Changelog](https://github.com/apache/arrow-rs/blob/main/CHANGELOG.md)
- [Commits](apache/arrow-rs@58.2.0...58.3.0)

---
updated-dependencies:
- dependency-name: parquet
  dependency-version: 58.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 18, 2026

Assignees

The following users could not be added as assignees: vectorizer-maintainers. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@andrehrferreira andrehrferreira changed the base branch from main to deps/batch-2026-05 May 18, 2026 23:13
@andrehrferreira andrehrferreira merged commit 4678de9 into deps/batch-2026-05 May 18, 2026
9 checks passed
@andrehrferreira andrehrferreira deleted the dependabot/cargo/parquet-58.3.0 branch May 18, 2026 23:14
andrehrferreira added a commit that referenced this pull request May 18, 2026
* deps(deps): Bump jsonwebtoken from 10.3.0 to 10.4.0 (#284)

Bumps [jsonwebtoken](https://github.com/Keats/jsonwebtoken) from 10.3.0 to 10.4.0.
- [Changelog](https://github.com/Keats/jsonwebtoken/blob/master/CHANGELOG.md)
- [Commits](Keats/jsonwebtoken@v10.3.0...v10.4.0)

---
updated-dependencies:
- dependency-name: jsonwebtoken
  dependency-version: 10.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* deps(deps): Bump sysinfo from 0.38.4 to 0.39.2 (#285)

Bumps [sysinfo](https://github.com/GuillaumeGomez/sysinfo) from 0.38.4 to 0.39.2.
- [Changelog](https://github.com/GuillaumeGomez/sysinfo/blob/main/CHANGELOG.md)
- [Commits](GuillaumeGomez/sysinfo@v0.38.4...v0.39.2)

---
updated-dependencies:
- dependency-name: sysinfo
  dependency-version: 0.39.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* deps(deps): Bump parquet from 58.2.0 to 58.3.0 (#286)

Bumps [parquet](https://github.com/apache/arrow-rs) from 58.2.0 to 58.3.0.
- [Release notes](https://github.com/apache/arrow-rs/releases)
- [Changelog](https://github.com/apache/arrow-rs/blob/main/CHANGELOG.md)
- [Commits](apache/arrow-rs@58.2.0...58.3.0)

---
updated-dependencies:
- dependency-name: parquet
  dependency-version: 58.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* deps(deps): Bump dashmap from 6.1.0 to 6.2.1 (#287)

Bumps [dashmap](https://github.com/xacrimon/dashmap) from 6.1.0 to 6.2.1.
- [Release notes](https://github.com/xacrimon/dashmap/releases)
- [Commits](xacrimon/dashmap@v6.1.0...v6.2.1)

---
updated-dependencies:
- dependency-name: dashmap
  dependency-version: 6.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* deps(deps): Bump bcrypt from 0.19.0 to 0.19.1 (#289)

Bumps [bcrypt](https://github.com/Keats/rust-bcrypt) from 0.19.0 to 0.19.1.
- [Commits](Keats/rust-bcrypt@v0.19.0...v0.19.1)

---
updated-dependencies:
- dependency-name: bcrypt
  dependency-version: 0.19.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* deps(deps): Bump openssl from 0.10.79 to 0.10.80 (#288)

Bumps [openssl](https://github.com/rust-openssl/rust-openssl) from 0.10.79 to 0.10.80.
- [Release notes](https://github.com/rust-openssl/rust-openssl/releases)
- [Commits](rust-openssl/rust-openssl@openssl-v0.10.79...openssl-v0.10.80)

---
updated-dependencies:
- dependency-name: openssl
  dependency-version: 0.10.80
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* deps(deps): Bump tonic-prost-build from 0.14.5 to 0.14.6 (#290)

Bumps [tonic-prost-build](https://github.com/hyperium/tonic) from 0.14.5 to 0.14.6.
- [Release notes](https://github.com/hyperium/tonic/releases)
- [Changelog](https://github.com/hyperium/tonic/blob/master/CHANGELOG.md)
- [Commits](grpc/grpc-rust@v0.14.5...tonic-prost-build-v0.14.6)

---
updated-dependencies:
- dependency-name: tonic-prost-build
  dependency-version: 0.14.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* deps(deps): Bump openraft-memstore (#291)

Bumps [openraft-memstore](https://github.com/databendlabs/openraft) from 0.10.0-alpha.18 to 0.10.0-alpha.20.
- [Release notes](https://github.com/databendlabs/openraft/releases)
- [Commits](databendlabs/openraft@v0.10.0-alpha.18...v0.10.0-alpha.20)

---
updated-dependencies:
- dependency-name: openraft-memstore
  dependency-version: 0.10.0-alpha.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* deps(deps): Bump tower-http from 0.6.8 to 0.6.11 (#292)

Bumps [tower-http](https://github.com/tower-rs/tower-http) from 0.6.8 to 0.6.11.
- [Release notes](https://github.com/tower-rs/tower-http/releases)
- [Commits](tower-rs/tower-http@tower-http-0.6.8...tower-http-0.6.11)

---
updated-dependencies:
- dependency-name: tower-http
  dependency-version: 0.6.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* deps(deps): Bump lz4_flex from 0.13.0 to 0.13.1 (#293)

Bumps [lz4_flex](https://github.com/pseitz/lz4_flex) from 0.13.0 to 0.13.1.
- [Release notes](https://github.com/pseitz/lz4_flex/releases)
- [Changelog](https://github.com/PSeitz/lz4_flex/blob/main/CHANGELOG.md)
- [Commits](https://github.com/pseitz/lz4_flex/commits)

---
updated-dependencies:
- dependency-name: lz4_flex
  dependency-version: 0.13.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant