+1 (binding) Thank you, Andrew, and everyone else involved in the input validation work. This definitely helps address one of the biggest criticisms of the crate.
Andy. On Fri, Dec 10, 2021 at 12:30 PM Andrew Lamb <al...@influxdata.com> wrote: > Hi, > > I would like to propose a release of Apache Arrow Rust Implementation, > version 6.4.0. I am personally excited about this release as it contains > the input validation needed to close out the currently open RUSTSEC issues > for Arrow [5]. > > This release candidate is based on commit: > 7a0bca35239f1d4fc3a1dca410384a1e5e962147 [1]. > > The proposed release tarball and signatures are hosted at [2]. > > The changelog is located at [3]. > > Please download, verify checksums and signatures, run the unit tests, > and vote on the release. There is a script [4] that automates some of > the verification. > > The vote will be open for at least 72 hours. > > [ ] +1 Release this as Apache Arrow Rust > [ ] +0 > [ ] -1 Do not release this as Apache Arrow Rust because... > > [1]: > > https://github.com/apache/arrow-rs/tree/7a0bca35239f1d4fc3a1dca410384a1e5e962147 > [2]: > https://dist.apache.org/repos/dist/dev/arrow/apache-arrow-rs-6.4.0-rc1 > [3]: > > https://github.com/apache/arrow-rs/blob/7a0bca35239f1d4fc3a1dca410384a1e5e962147/CHANGELOG.md > [4]: > > https://github.com/apache/arrow-rs/blob/master/dev/release/verify-release-candidate.sh > [5]: https://github.com/rustsec/advisory-db/tree/main/crates/arrow >
