swashtek commented on PR #11930: URL: https://github.com/apache/arrow-rs/pull/11930#issuecomment-6455349687
> The PR does not eliminate the advisory from the entire workspace. arrow-flight CLI still receives zstd 0.13.3 through tonic. > > with that said I think its still valuable to bump due to https://rustsec.org/advisories/RUSTSEC-2026-0391.html @Rich-T-kid Would this fix be backported to 59.x versions or new create version will be available? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
