JingsongLi opened a new pull request, #1212: URL: https://github.com/apache/paimon-rust/pull/1212
### Purpose Restore the locked dependency advisory check. Rust main currently fails `cargo deny` for [RUSTSEC-2026-0385](https://rustsec.org/advisories/RUSTSEC-2026-0385) in ctutils and [RUSTSEC-2026-0386](https://rustsec.org/advisories/RUSTSEC-2026-0386) in Tokio. ### Brief change log Update only the locked versions and checksums: - ctutils: 0.4.2 to 0.4.4. - Tokio: 1.53.0 to 1.53.3. Keep all dependency edges, feature selections and advisory exceptions unchanged. ### Tests - Reproduced both advisory failures against unchanged main `96e06d764365b59c9895a45692819efccf209b23`. - `cargo deny --locked --all-features check --warn unmaintained advisories licenses`: passed. - `cargo metadata --locked --format-version 1`: passed. - `cargo test -p paimon --lib`: 4,507 passed, 7 ignored on macOS ARM. - `git diff --check`: passed. ### API and Format No public API or storage-format changes. ### Documentation Dependency security update; no documentation changes required. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
