AdamGS opened a new pull request, #608: URL: https://github.com/apache/arrow-rs-object-store/pull/608
This PR upgrades the `reqwest` dependency from 0.12 to `0.13`. This changes introduces a few breaking changes in reqwest that I've tried to mitigate here. 1. `reqwest` does not provide features to enable different root cert bundles. It will verify certificates using `rustls-platform-verifier`, which will use the OS native certificate store. This is why the `reqwest/rustls-tls-native-roots` feature was replaced with the `reqwest/rustls` one. 2. For `webpki`, I've kept the feature to maintain compatibility, replacing the `reqwest` feature with pulling the `webpki` certs directly and adding them to the client. 3. `reqwest` has now moved to use `aws-lc` as its underlying crypto provider. Its technically possible to override that but it seems like its technically possible to install a `ring` based one, I'm not sure if that's actually desired. I've also considered removing the `ring` based code so `ring` can be completely removed as a dependency, but I figured I'll try and see if anyone has a more informed opinion before I do. This PR should have no external impact, but I would like to still try and test it against a real server. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
