Visitar URL original
[branch-55] chore: update version to 55.3.0 and add changelog by alamb · Pull Request #27388 · apache/datafusion · GitHub
Skip to content

[branch-55] chore: update version to 55.3.0 and add changelog - #27388

Open
alamb wants to merge 4 commits into
apache:branch-55from
alamb:alamb/prepare_55.3.0
Open

alamb wants to merge 4 commits into
apache:branch-55from
alamb:alamb/prepare_55.3.0

Conversation

@alamb

@alamb alamb commented Nov 12, 2026

Copy link
Copy Markdown
Contributor

Which issue does this PR close?

Rationale for this change

Prepare the 55.3.0 patch release.

What changes are included in this PR?

Bumps the version from 55.2.0 to 55.3.0 in Cargo.toml, Cargo.lock and the docs, and adds dev/changelog/55.3.0.md.

Are these changes tested?

No code changes. The changelog comes from dev/release/generate-changelog.py 55.2.0 branch-55 55.3.0.

Are there any user-facing changes?

No.

Co-Authored-By: Claude Fable 5.2 <noreply@anthropic.com>
@github-actions github-actions Bot added documentation Improvements or additions to documentation development-process Related to development process of DataFusion labels Nov 12, 2026
@codecov-commenter

codecov-commenter commented Nov 13, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 81.25%. Comparing base (44a258e) to head (24b8bc6).
⚠️ Report is 1 commits behind head on branch-55.

@@             Coverage Diff             @@
##           branch-55   #27388    +/-   ##
===========================================
  Coverage      81.25%   81.25%            
===========================================
  Files           1110     1110            
  Lines         389368   389492   +124     
  Branches      389368   389492   +124     
===========================================
+ Hits          316372   316480   +108     
- Misses         54421    54432    +11     
- Partials       18575    18580     +5     

see 15 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Co-Authored-By: Claude Fable 5.2 <noreply@anthropic.com>
@alamb

alamb commented Nov 13, 2026

Copy link
Copy Markdown
Contributor Author

Fix for failing CI:

alamb added a commit that referenced this pull request Nov 13, 2026
## Which issue does this PR close?

- Part of #26868 (55.3.0 release)

## Rationale for this change

`cargo audit` is failing on `branch-55` (for example on #27388) with 15
vulnerabilities across 7 crates:

- `ctutils` 0.4.2:
[RUSTSEC-2026-0385](https://rustsec.org/advisories/RUSTSEC-2026-0385)
- `quinn-proto` 0.11.15:
[RUSTSEC-2026-0338](https://rustsec.org/advisories/RUSTSEC-2026-0338),
[RUSTSEC-2026-0339](https://rustsec.org/advisories/RUSTSEC-2026-0339),
[RUSTSEC-2026-0340](https://rustsec.org/advisories/RUSTSEC-2026-0340),
[RUSTSEC-2026-0341](https://rustsec.org/advisories/RUSTSEC-2026-0341),
[RUSTSEC-2026-0342](https://rustsec.org/advisories/RUSTSEC-2026-0342)
- `rustls` 0.23.45:
[RUSTSEC-2026-0346](https://rustsec.org/advisories/RUSTSEC-2026-0346),
[RUSTSEC-2026-0347](https://rustsec.org/advisories/RUSTSEC-2026-0347),
[RUSTSEC-2026-0348](https://rustsec.org/advisories/RUSTSEC-2026-0348),
[RUSTSEC-2026-0349](https://rustsec.org/advisories/RUSTSEC-2026-0349)
- `rustls-webpki` 0.103.15:
[RUSTSEC-2026-0382](https://rustsec.org/advisories/RUSTSEC-2026-0382)
- `zstd` 0.13.3:
[RUSTSEC-2026-0391](https://rustsec.org/advisories/RUSTSEC-2026-0391)
- `zstd-safe` 7.2.4:
[RUSTSEC-2026-0398](https://rustsec.org/advisories/RUSTSEC-2026-0398),
[RUSTSEC-2026-0403](https://rustsec.org/advisories/RUSTSEC-2026-0403)
- `zstd-sys` 2.0.16:
[RUSTSEC-2026-0410](https://rustsec.org/advisories/RUSTSEC-2026-0410)

This follows the model of similar fixes on earlier maintenance branches:

- #23607 (branch-54)
- #21587 (branch-53)
- #21415 (branch-52)

## What changes are included in this PR?

`Cargo.lock` only, from

```shell
cargo update -p ctutils -p quinn-proto -p rustls -p rustls-webpki -p zstd -p zstd-safe -p zstd-sys
```

| Crate           | Before | After   |
| --------------- | ------ | ------- |
| `ctutils`       | 0.4.2  | 0.4.8   |
| `quinn-proto`   | 0.11.15 | 0.11.19 |
| `rustls`        | 0.23.45 | 0.23.46 |
| `rustls-webpki` | 0.103.15 | 0.103.17 |
| `zstd`          | 0.13.3 | 0.13.5  |
| `zstd-safe`     | 7.2.4  | 7.4.1   |
| `zstd-sys`      | 2.0.16 | 2.1.3   |

`quinn-proto` 0.11.19 adds `rand_pcg` 0.10.2 as a new transitive
dependency. All updates are semver compatible, so no `Cargo.toml`
changes are needed, and no new advisories are ignored.

## Are these changes tested?

Yes, by CI. Locally, `cargo audit --ignore RUSTSEC-2026-0194 --ignore
RUSTSEC-2026-0195` (the command CI runs on this branch) now passes with
only allowed warnings remaining.

## Are there any user-facing changes?

No, dependency version bumps in `Cargo.lock` only.

Co-authored-by: Claude Fable 5.2 <noreply@anthropic.com>
alamb and others added 2 commits November 13, 2026 08:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

development-process Related to development process of DataFusion documentation Improvements or additions to documentation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants