build(deps): bump the rust-dependencies group across 1 directory with 23 updates

[dependabot]

Bumps the rust-dependencies group with 23 updates in the /quickwit directory:

Package	From	To
arrow	58.3.0	59.1.0
google-cloud-gax	0.19.2	1.12.0
http-body	1.0.1	1.1.0
itertools	0.14.0	0.15.0
lambda_runtime	1.2.1	1.3.0
mockall	0.14.0	0.15.0
parquet	58.3.0	59.1.0
reqwest-middleware	0.4.2	0.5.2
reqwest-retry	0.8.0	0.9.1
rust-embed	8.11.0	8.12.0
sea-query	0.32.7	1.0.1
tower-http	0.6.11	0.7.0
ulid	1.2.1	2.0.1
utoipa	4.2.3	5.5.0
aws-smithy-mocks	0.2.6	0.3.0
datafusion	53.1.0	54.0.0
datafusion-substrait	53.1.0	54.0.0
datafusion-datasource	53.1.0	54.0.0
datafusion-physical-plan	53.1.0	54.0.0
datafusion-datasource-parquet	53.1.0	54.0.0
datafusion-distributed	1.0.0	2.0.0
object_store	0.13.2	0.14.1
thrift	0.17.0	0.24.0

Updates arrow from 58.3.0 to 59.1.0

Release notes

Sourced from arrow's releases.

arrow 59.1.0

Changelog

59.1.0 (2026-07-03)

Full Changelog

Implemented enhancements:

• Fast path for nested DictionaryArray casting #10247 [arrow]
• parquet/arrow: reading multiple nested columns fails with "Not all children array length are the same!" when a list continues across DataPageV2 page boundary #10243 [parquet]
• Add product aggregate kernel to arrow-rs #10150 [arrow]
• Stricter DataType parsing #10146 [arrow]
• Support validating CSV headers against Schema #10143 [arrow]
• arrow-ipc: Supports compression level configuration for arrow-ipc writer #10132 [arrow]
• [Variant] VariantArray field API naming #10093
• Add StructArray::field_ APIs symmetric to StructArray::column_ ones #10092 [arrow]
• arrow-buffer: implement Saturating, CheckedShl, Not num-traits for i256 #10087 [arrow]
• feat: native concat for MapArray #10047 [arrow]
• [Variant] Add variant_to_arrow Dictionary/REE type support #10013

Fixed bugs:

• arrow-row on fixed size binary/list with size 0 and no nulls return wrong length #10270
• casting list to 0-size fixedsizelist can cause incorrect output length #10227 [arrow]
• Buffer count mismatched with metadata when encoding records with dictionary of dictionaries #10213 [arrow]
• Buffer::into_mutable is not consistent regarding sliced data and can lead to panics #10117 [arrow]
• parquet_derive: cannot read or write columns whose name is a Rust keyword (raw identifiers like r#type become column "r#type") #10112
• parquet: fix OffsetBuffer panic on corrupt input #10107 [parquet]
• Parquet geospatial conversion uses metadata key "algorithm" instead of "edges" in geoarrow metadata #9929 [parquet]

... (truncated)

Changelog

Sourced from arrow's changelog.

59.1.0 (2026-07-03)

Full Changelog

Implemented enhancements:

• Fast path for nested DictionaryArray casting #10247 [arrow]
• parquet/arrow: reading multiple nested columns fails with "Not all children array length are the same!" when a list continues across DataPageV2 page boundary #10243 [parquet]
• Add product aggregate kernel to arrow-rs #10150 [arrow]
• Stricter DataType parsing #10146 [arrow]
• Support validating CSV headers against Schema #10143 [arrow]
• arrow-ipc: Supports compression level configuration for arrow-ipc writer #10132 [arrow]
• [Variant] VariantArray field API naming #10093
• Add StructArray::field_ APIs symmetric to StructArray::column_ ones #10092 [arrow]
• arrow-buffer: implement Saturating, CheckedShl, Not num-traits for i256 #10087 [arrow]
• feat: native concat for MapArray #10047 [arrow]
• [Variant] Add variant_to_arrow Dictionary/REE type support #10013

Fixed bugs:

• arrow-row on fixed size binary/list with size 0 and no nulls return wrong length #10270
• casting list to 0-size fixedsizelist can cause incorrect output length #10227 [arrow]
• Buffer count mismatched with metadata when encoding records with dictionary of dictionaries #10213 [arrow]
• Buffer::into_mutable is not consistent regarding sliced data and can lead to panics #10117 [arrow]
• parquet_derive: cannot read or write columns whose name is a Rust keyword (raw identifiers like r#type become column "r#type") #10112
• parquet: fix OffsetBuffer panic on corrupt input #10107 [parquet]
• Parquet geospatial conversion uses metadata key "algorithm" instead of "edges" in geoarrow metadata #9929 [parquet]

Documentation updates:

• doc: More comments to concat_batches #10178 (2010YOUY01)
• Minor: improve PageStore docs with a temp-file spilling example #10074 [parquet] (alamb)

Performance improvements:

• perf: interleave_list for List<Primitive> could be optimized? #10022 [arrow]
• perf(arrow-ord): Avoid full index materialization for small-limit lexsorts #9990 [arrow]
• Replace conversion of binary->string in arrow-row from arraydata to direct construction #10261 [arrow] (Jefffrey)
• [arrow-flight encode path]re-use flatbufferbuilder #10220 [arrow] (Rich-T-kid)
• [10125] arrow-flight decode path optimizations (add skip_validation to arrow-flight) #10206 [arrow] [arrow-flight] (Rich-T-kid)
• Improve performance of concat_elements ByteViewArray concatenation #10161 [arrow] (pepijnve)
• [arrow-flight] Optimize flight, remove some allocations, add dictionary focused benchmarks #10126 [arrow] [arrow-flight] (Rich-T-kid)
• optimize(concat): concat map implementation #10048 [arrow] (mapleFU)
• Reduce copies in Arrow IPC writer #10044 [arrow] (Rich-T-kid)
• perf(interleave): Optimize list interleave_list when child is primitive #10025 [arrow] (mapleFU)

Closed issues:

• Soundness: Unsound alignment contract in public FromBytes trait and BitReader::get_batch #10164 [parquet]
• ParquetPushDecoder: expose the next row-group index that try_next_reader will yield #10148 [parquet]

... (truncated)

Commits

• b1de629 Prepare for 59.1.0 release (#10274)
• c36e926 feat: Add support for MapArray in arrow_row (#9486)
• d2519a1 fix(arrow-row): allow to convert non empty fixed size binary/list array with ...
• ddef6cf chore: Fix audit CI run by ignore quick-xml audit advisories (#10267)
• d969025 fix main: parquet test compilation failure (#10266)
• c7dc6b8 Add validated row decode benchmark (#10259)
• 7307740 fix: write error for dbg output of out of range timestamps (#10130)
• af1c24a minor: drive-by refactors for dicts in substring & filter (#10264)
• 7095ce4 Replace conversion of binary->string in arrow-row from arraydata to direct co...
• 8c7df18 reduce noise in flight benchmarks [tokio-threads] [# of columns in benchmarks...
• Additional commits viewable in compare view

Updates google-cloud-gax from 0.19.2 to 1.12.0

Release notes

Sourced from google-cloud-gax's releases.

v1.0.0

First GA release

We are proud to announce the 1.0 release of the Google Cloud client libraries for Rust. This is the first GA version of the client libraries.

What's Included

• Fully asynchronous clients for over 140 services, including Cloud Storage, Vertex AI, Secret Manager, and Key Management Service.
• Fully asynchronous auth library, with support for application default credentials, service account credentials, user credentials, compute engine metadata service, and OIDC-based external credentials[^1].
• Idiomatic abstractions for long-running operations and pagination APIs.
• Automatic retries for requests that fail due to transient errors.
• Automatic demarshalling of error details into idiomatic types.
• Automatic resumes for uploads to and downloads from Cloud Storage.
• Support for streaming uploads to Cloud Storage, with retries on errors.
• Automatic checksumming of data uploaded to or downloaded from Cloud Storage.

What's changed

Compared to the previous release (v0.12.0) this release bumps the version numbers to 1.0.0 and updates README files.

• feat(storage): support object contexts by @​coryan in googleapis/google-cloud-rust#3266
• docs: declare all libraries as GA by @​coryan in googleapis/google-cloud-rust#3186
• docs: remove caveats from top-level README by @​coryan in googleapis/google-cloud-rust#3293

Full Changelog: googleapis/google-cloud-rust@v0.12.0...v1.0.0

Footnotes

[^1]: Also known as workload identify federation or "bring your own id".

Commits

• See full diff in compare view

Updates http-body from 1.0.1 to 1.1.0

Commits

• 3396328 http-body v1.1.0
• 2fb78de chore: bump license year (#170)
• b16554b chore(ci): bump checkout to v7
• c0c53ca chore(ci): use msrv aware update for msrv job
• 5ed15d2 tests: fix clippy::double_parens
• c8cb37f Derive Copy trait to SizeHint struct (#164)
• 915d6d5 feat(util): add InspectErr, InspectFrame combinators (#161)
• 0fc0a94 docs: fix broken intradoc links (#162)
• 5a849d4 chore: add FUNDING.yml
• 1a91851 feat: impl Add for SizeHint's (#156)
• Additional commits viewable in compare view

Updates itertools from 0.14.0 to 0.15.0

Changelog

Sourced from itertools's changelog.

0.15.0

Breaking

• Restructure Position as struct instead of enum (#1042, #1043)
• Canonicalize all_equal_value's error type (#1032)

Added

• Add *_with_hasher adaptors (#1007)
• Add strip_prefix and strip_prefix_by methods (#1104)

Changed

• Remove Clone bounds from tuple_combinations and array_combinations(#1011)
• must_use for collect_vec (#1009)
• Make izip! temporary friendly (#1021)
• Add array_combinations_with_replacement (#1033)
• Implement Debug for remaining public types (#1038)
• Specialize ExactlyOneError::count (#1046)
• Implement PeekingNext for more types, in particular vec::IntoIter (#1059, #1073)
• Fix PadUsing::next_back (#1082)
• Introduce [circular_]array_windows, deprecate tuple_windows (#1086)
• Deprecate tuple_combinations (replaced by array_combinations) (#1085)

Notable Internal Changes

• Make into_group_map code more idiomatic (#1027)
• Fix clippy lints (#1017, #1029, #1076, #1099)

Commits

• 37bd72a Update CHANGELOG.md: strip_prefix[_by]
• 86ec635 Use ControlFlow in fold_while implementation
• d5897f7 refactor(strip_prefix): use try_for_each and drop PartialEq, Eq on StripPrefi...
• b2a978a feat(Itertools): add strip_prefix and strip_prefix_by methods
• 12b6ec6 Update CHANGELOG.md for all_equal_value_error's error type
• 121821e AllEqualValueError implements std::error::Error
• adac44e Introduce AllEqualValueError
• 5707384 Update CHANGELOG.md
• df60ff0 Update CHANGELOG.md
• 113b850 Update CHANGELOG.md to include with_hasher
• Additional commits viewable in compare view

Updates lambda_runtime from 1.2.1 to 1.3.0

Commits

• 34e669c chore: release (#1151)
• 094dbf9 feat: add SnapStart support via SnapStartResource trait (#1150)
• See full diff in compare view

Updates mockall from 0.14.0 to 0.15.0

Changelog

Sourced from mockall's changelog.

[ 0.15.0 ] - 2026-06-28

Added

• Compatibility with the #[auto_impl] macro. (#686)

Commits

• fc2c853 chore: Release
• 551fadd Merge pull request #688 from asomers/audit-job-lockfile
• 21529e3 Fix the audit CI job
• 2270cdb Merge pull request #686 from Kranzes/automock-auto_impl-compat
• d3b041d Add compatibility with the #[auto_impl] macro
• 055886e Merge pull request #687 from asomers/clippy-june-2026
• ed4bf07 Clippy cleanup
• f7a4d6f Merge pull request #685 from asomers/clippy=may-2026
• ba15180 Clippy cleanup: useless_borrows_in_formatting
• de22d57 Merge pull request #684 from asomers/github-workflows
• Additional commits viewable in compare view

Updates parquet from 58.3.0 to 59.1.0

Release notes

Sourced from parquet's releases.

arrow 59.1.0

Changelog

59.1.0 (2026-07-03)

Full Changelog

Implemented enhancements:

• Fast path for nested DictionaryArray casting #10247 [arrow]
• parquet/arrow: reading multiple nested columns fails with "Not all children array length are the same!" when a list continues across DataPageV2 page boundary #10243 [parquet]
• Add product aggregate kernel to arrow-rs #10150 [arrow]
• Stricter DataType parsing #10146 [arrow]
• Support validating CSV headers against Schema #10143 [arrow]
• arrow-ipc: Supports compression level configuration for arrow-ipc writer #10132 [arrow]
• [Variant] VariantArray field API naming #10093
• Add StructArray::field_ APIs symmetric to StructArray::column_ ones #10092 [arrow]
• arrow-buffer: implement Saturating, CheckedShl, Not num-traits for i256 #10087 [arrow]
• feat: native concat for MapArray #10047 [arrow]
• [Variant] Add variant_to_arrow Dictionary/REE type support #10013

Fixed bugs:

• arrow-row on fixed size binary/list with size 0 and no nulls return wrong length #10270
• casting list to 0-size fixedsizelist can cause incorrect output length #10227 [arrow]
• Buffer count mismatched with metadata when encoding records with dictionary of dictionaries #10213 [arrow]
• Buffer::into_mutable is not consistent regarding sliced data and can lead to panics #10117 [arrow]
• parquet_derive: cannot read or write columns whose name is a Rust keyword (raw identifiers like r#type become column "r#type") #10112
• parquet: fix OffsetBuffer panic on corrupt input #10107 [parquet]
• Parquet geospatial conversion uses metadata key "algorithm" instead of "edges" in geoarrow metadata #9929 [parquet]

... (truncated)

Changelog

Sourced from parquet's changelog.

59.1.0 (2026-07-03)

Full Changelog

Implemented enhancements:

• Fast path for nested DictionaryArray casting #10247 [arrow]
• parquet/arrow: reading multiple nested columns fails with "Not all children array length are the same!" when a list continues across DataPageV2 page boundary #10243 [parquet]
• Add product aggregate kernel to arrow-rs #10150 [arrow]
• Stricter DataType parsing #10146 [arrow]
• Support validating CSV headers against Schema #10143 [arrow]
• arrow-ipc: Supports compression level configuration for arrow-ipc writer #10132 [arrow]
• [Variant] VariantArray field API naming #10093
• Add StructArray::field_ APIs symmetric to StructArray::column_ ones #10092 [arrow]
• arrow-buffer: implement Saturating, CheckedShl, Not num-traits for i256 #10087 [arrow]
• feat: native concat for MapArray #10047 [arrow]
• [Variant] Add variant_to_arrow Dictionary/REE type support #10013

Fixed bugs:

• arrow-row on fixed size binary/list with size 0 and no nulls return wrong length #10270
• casting list to 0-size fixedsizelist can cause incorrect output length #10227 [arrow]
• Buffer count mismatched with metadata when encoding records with dictionary of dictionaries #10213 [arrow]
• Buffer::into_mutable is not consistent regarding sliced data and can lead to panics #10117 [arrow]
• parquet_derive: cannot read or write columns whose name is a Rust keyword (raw identifiers like r#type become column "r#type") #10112
• parquet: fix OffsetBuffer panic on corrupt input #10107 [parquet]
• Parquet geospatial conversion uses metadata key "algorithm" instead of "edges" in geoarrow metadata #9929 [parquet]

Documentation updates:

• doc: More comments to concat_batches #10178 (2010YOUY01)
• Minor: improve PageStore docs with a temp-file spilling example #10074 [parquet] (alamb)

Performance improvements:

• perf: interleave_list for List<Primitive> could be optimized? #10022 [arrow]
• perf(arrow-ord): Avoid full index materialization for small-limit lexsorts #9990 [arrow]
• Replace conversion of binary->string in arrow-row from arraydata to direct construction #10261 [arrow] (Jefffrey)
• [arrow-flight encode path]re-use flatbufferbuilder #10220 [arrow] (Rich-T-kid)
• [10125] arrow-flight decode path optimizations (add skip_validation to arrow-flight) #10206 [arrow] [arrow-flight] (Rich-T-kid)
• Improve performance of concat_elements ByteViewArray concatenation #10161 [arrow] (pepijnve)
• [arrow-flight] Optimize flight, remove some allocations, add dictionary focused benchmarks #10126 [arrow] [arrow-flight] (Rich-T-kid)
• optimize(concat): concat map implementation #10048 [arrow] (mapleFU)
• Reduce copies in Arrow IPC writer #10044 [arrow] (Rich-T-kid)
• perf(interleave): Optimize list interleave_list when child is primitive #10025 [arrow] (mapleFU)

Closed issues:

• Soundness: Unsound alignment contract in public FromBytes trait and BitReader::get_batch #10164 [parquet]
• ParquetPushDecoder: expose the next row-group index that try_next_reader will yield #10148 [parquet]

... (truncated)

Commits

• b1de629 Prepare for 59.1.0 release (#10274)
• c36e926 feat: Add support for MapArray in arrow_row (#9486)
• d2519a1 fix(arrow-row): allow to convert non empty fixed size binary/list array with ...
• ddef6cf chore: Fix audit CI run by ignore quick-xml audit advisories (#10267)
• d969025 fix main: parquet test compilation failure (#10266)
• c7dc6b8 Add validated row decode benchmark (#10259)
• 7307740 fix: write error for dbg output of out of range timestamps (#10130)
• af1c24a minor: drive-by refactors for dicts in substring & filter (#10264)
• 7095ce4 Replace conversion of binary->string in arrow-row from arraydata to direct co...
• 8c7df18 reduce noise in flight benchmarks [tokio-threads] [# of columns in benchmarks...
• Additional commits viewable in compare view

Updates reqwest-middleware from 0.4.2 to 0.5.2

Release notes

Sourced from reqwest-middleware's releases.

reqwest-middleware-v0.5.2

Added

• (reqwest-middleware) stream feature exported. (#246)
• expose internal reqwest::Client as reference (#209)

Other

• Adjust third-party middleware list in readme (#282)

reqwest-middleware-v0.5.1

Other

• Set changelog version for last release (#268)

reqwest-middleware-v0.5.0

Added

• Deprecated fetch_mode_no_cors as it's been deprecated in reqwest.

Commits

• 614b947 chore: release (#280)
• 051dc25 feat!: support opentelemetry 0.32 (#284)
• 9bedaf8 Adjust third-party middleware list in readme (#282)
• 8bc3640 feat(reqwest-middleware): stream feature exported. (#246)
• de31517 feat: expose internal reqwest::Client as reference (#209)
• 0744f65 chore: release (#274)
• 33e6be9 feat!: support the opentelemetry 0.31 (#272)
• d3773bb ci: reduce debug-section size to get tests to run (#250)
• 7171e65 fix(reqwest-retry): drop instant by upgrading wasmtimer (#254)
• 1692cad Set changelog version for last release (#268)
• Additional commits viewable in compare view

Updates reqwest-retry from 0.8.0 to 0.9.1

Release notes

Sourced from reqwest-retry's releases.

reqwest-retry-v0.9.1

Fixed

• (reqwest-retry) drop instant by upgrading wasmtimer (#254)

Other

• Set changelog version for last release (#268)

reqwest-retry-v0.9.0

Breaking Changes

• Updated retry-policies (re-exported as reqwest_retry::policies) to 0.5.

Changed

• Updated thiserror to 2.0

Commits

• See full diff in compare view

Updates rust-embed from 8.11.0 to 8.12.0

Updates sea-query from 0.32.7 to 1.0.1

Changelog

Sourced from sea-query's changelog.

1.0.1 - 2026-05-30

• 1.0.1 - Borrowed scalar primitive conversions for Value

sea-query-sqlx 0.9.1 - 2026-05-30

• sea-query-sqlx 0.9.1 - Restore SQLx binder support for PostgreSQL pgvector values

sea-query-sqlx 0.9.0 - 2026-05-29

• sea-query-sqlx 0.9.0 — SQLx 0.9, Rust 1.94.0, temporary Jiff and pgvector binder limitations

1.0.0 - 2026-05-28

• 1.0.0 - Stable SeaQuery 1.0 release notes

Release Candidates

• 1.0.0-rc.34 — Table partitioning, Jiff binder support, JSON_TABLE refactor
• 1.0.0-rc.33 — Value::Enum, Postgres advisory locks, SelectExprTrait
• 1.0.0-rc.32 — EXPLAIN, FILTER on aggregates, ALTER TABLE DROP CONSTRAINT
• 1.0.0-rc.31 — SELECT INTO, eq_any/ne_all, Value::array_type
• 1.0.0-rc.30 — Tokenizer comment parsing, dependency reductions
• 1.0.0-rc.29 — Legacy serial option for Postgres
• 1.0.0-rc.28 — Restore Value system
• 1.0.0-rc.27 — Revert impl Iden for String
• 1.0.0-rc.26 — From<Vec<Value>> for Array, FromIterator<T> for Array
• 1.0.0-rc.24 — Array API redesign
• 1.0.0-rc.23 — Value::Enum, ON CONFLICT ON CONSTRAINT, CTE VALUES clause
• 1.0.0-rc.22 — Index operator class, DROP COLUMN IF EXISTS, nullable values
• 1.0.0-rc.20 — ValueTupleIter, SQLite decimal fix

New features

• Support EXPLAIN statements SeaQL/sea-query#1044
• #![forbid(unsafe_code)] in all workspace crates SeaQL/sea-query#930
• Unify Expr and SimpleExpr as one type. SimpleExpr is kept as an alias of Expr, but they can now be used interchangeably. There may be a few compile errors and some clippy warnings, basically just remove the redundant .into() SeaQL/sea-query#889

pub type SimpleExpr = Expr; // !
impl From<Expr> for SimpleExpr { .. } // now removed

• New Iden type system. Previously, DynIden is an alias to SeaRc<dyn Iden>, and is lazily rendered. Now, it's an Cow<'static, str>, and is eagerly rendered. SeaRc is no longer an alias to Rc / Arc, now is only a unit struct. As such, Send / Sync is no longer needed. It's still possible to dynamically serialize a String as identifier, see example usage. SeaQL/sea-query#909

pub type DynIden = SeaRc<dyn Iden>;               // old
pub struct DynIden(pub(crate) Cow<'static, str>); // new
pub struct SeaRc<I>(pub(crate) RcOrArc<I>);       // old
pub struct SeaRc;                                 // new

... (truncated)

Commits

• See full diff in compare view

Updates tower-http from 0.6.11 to 0.7.0

Release notes

Sourced from tower-http's releases.

tower-http-0.7.0

Changes since 0.6.11

Added

• csrf: add cross-site request forgery (CSRF) protection middleware, porting the cross-origin protection scheme introduced in Go 1.25 (#699)

  use tower::ServiceBuilder;
  use tower_http::csrf::CsrfLayer;
  // Rejects cross-origin state-changing requests using Sec-Fetch-Site,
  // an Origin allow-list, and an Origin/Host fallback. No per-request
  // token state required.
  let layer = CsrfLayer::new().add_trusted_origin("https://example.com")?;
  let service = ServiceBuilder::new().layer(layer).service_fn(handler);

• timeout: add DeadlineBody for non-resetting body timeouts, applied via the new RequestBodyDeadlineLayer and ResponseBodyDeadlineLayer (#688)

  Unlike TimeoutBody, which resets its deadline on every frame, DeadlineBody caps the total time of a body transfer. A slow client trickling one byte at a time never trips an idle timeout but will trip a deadline.

  use std::time::Duration;
  use tower::ServiceBuilder;
  use tower_http::timeout::RequestBodyDeadlineLayer;
  // Abort the request body transfer after 30s total, regardless of how
  // frequently data arrives.
  let service = ServiceBuilder::new()
  .layer(RequestBodyDeadlineLayer::new(Duration::from_secs(30)))
  .service_fn(handler);

• fs: add strong ETag support to ServeDir, including If-Match and If-None-Match precondition handling per RFC 9110. 304 Not Modified responses now carry the ETag and Last-Modified validators (#691)

• fs: add a Backend trait to make ServeDir work with non-filesystem sources (e.g. embedded assets or object storage). The default TokioBackend preserves existing behavior. Use ServeDir::with_backend() to plug in custom implementations (#684)

  use tower_http::services::fs::ServeDir;
  // MyBackend implements tower_http::services::fs::Backend.
  // The default ServeDir::new() continues to use TokioBackend (local FS).
  let service = ServeDir::with_backend("assets", MyBackend::new());

• fs: add html_as_default_extension option to ServeDir, appending .html when the request path has no extension (#519)

• fs: add redirect_path_prefix option to ServeDir, prepending a prefix on trailing-slash redirects so the service can be mounted under a sub-path (#486)

• validate-request: add ValidateRequestHeaderLayer::has_header_value() to reject requests when a header does not have an expected value (#360)

• body: UnsyncBoxBody::new() constructor and From<ServeFileSystemResponseBody> conversion to avoid double-boxing when combining ServeDir responses with other body types (#537)

• limit: implement Default for limit::ResponseBody when the wrapped body also implements Default (#679)

Changed

... (truncated)

Commits

• b194fcf v0.7.0
• af828a6 feat(follow_redirect)!: preserve request extensions across redirects (#706)
• 8cb8d99 feat(ValidateRequestHeaderLayer): add has_header("...").with_value("...") fun...
• 3b56d2d feat!: Add configurable Backend trait for ServeDir, bump MSRV 1.65 (#684)
• 8508716 Add redirect_path_prefix option (#486)
• 56327b2 Add Windows drive-prefix path regression test (#705)
• 54c6db8 feat(compression)!: upgrade SizeAbove threshold from u16 to u64 (#704)
• 68cd6d8 Add DeadlineBody for non-resetting body timeouts (#688)
• fa8a98c feat(fs): add strong ETag support to ServeDir (#691)
• 36d2205 fix: Make SetMultiple*Header Clone for !Clone http bodies (#703)
• Additional commits viewable in compare view

Updates ulid from 1.2.1 to 2.0.1

Commits<...

Description has been truncated

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 04c00cfbb4

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[chatgpt-codex-connector]

Keep Arrow in lockstep with DataFusion

DataFusion 54 still resolves to Arrow/Parquet 58.3.0 in Cargo.lock, so bumping the workspace arrow crate to 59 creates two incompatible Arrow type universes in crates that depend on both. For example, quickwit-df-core::service::explain_stream constructs workspace arrow::record_batch::RecordBatch values and feeds them to DataFusion's RecordBatchStreamAdapter, whose stream item type comes from DataFusion's Arrow 58 dependency, so the DataFusion build no longer type-checks unless Arrow is kept aligned with DataFusion or all imports are switched to DataFusion's re-export.

Useful? React with 👍 / 👎.

[chatgpt-codex-connector]

Keep object_store in lockstep with DataFusion

DataFusion 54 still depends on object_store 0.13.2 in Cargo.lock, while this direct dependency now pulls object_store 0.14. QuickwitObjectStoreRegistry implements DataFusion's ObjectStoreRegistry trait but its method signatures use object_store::ObjectStore from the direct dependency, so they no longer match the trait's expected 0.13 ObjectStore type and quickwit-datafusion cannot compile.

Useful? React with 👍 / 👎.

[chatgpt-codex-connector]

Keep SeaQuery aligned with sea-query-binder

This bumps the workspace sea-query to 1.0 while leaving sea-query-binder at 0.7, and Cargo.lock shows the binder still depends on sea-query 0.32.7. The Postgres metastore imports sea_query_binder::SqlxBinder and calls build_sqlx on sea_query::Query statements, so those statements are now 1.0 types but the binder trait impls are for 0.32 types, breaking the default metastore build.

Useful? React with 👍 / 👎.

[chatgpt-codex-connector]

Keep google-cloud-gax compatible with Pub/Sub

With the gcp-pubsub feature enabled, this direct dependency imports google-cloud-gax 1.12 while google-cloud-pubsub 0.30 still pulls google-cloud-gax 0.19 as noted in the comment above. gcp_pubsub_source.rs imports google_cloud_gax::retry::RetrySetting from the direct dependency and passes it to Subscription::exists, whose API is compiled against Pub/Sub's 0.19 RetrySetting, so the optional GCP Pub/Sub source no longer type-checks.

Useful? React with 👍 / 👎.

[chatgpt-codex-connector]

Keep Parquet below the removed format API

quickwit-parquet-engine/src/storage/streaming_reader.rs still imports parquet::format::{PageHeader, PageType} and parquet::thrift::TSerializable, and the comment there explicitly says format is scheduled for removal in parquet 59. Bumping the workspace parquet crate to 59 without migrating that reader removes the APIs it uses, so the parquet engine no longer compiles.

Useful? React with 👍 / 👎.

[chatgpt-codex-connector]

Keep reqwest-middleware on reqwest 0.12

The workspace still exposes reqwest 0.12, but Cargo.lock shows reqwest-middleware 0.5.2 and reqwest-retry 0.9.1 now depend on reqwest 0.13.4. quickwit-rest-client::rest_client builds a direct reqwest::Client and passes it into reqwest_middleware::ClientBuilder::new, so after this bump the builder expects a different Client type than the one Quickwit constructs and the REST client cannot compile.

Useful? React with 👍 / 👎.

[chatgpt-codex-connector]

Do not bump utoipa past the documented blocker

The comment immediately above this line says utoipa 5.x is incompatible because OpenApi fields became private, but the dependency is bumped to 5.5 anyway. quickwit-serve/src/openapi.rs still mutates docs_base.tags, self.paths.paths, and components.schemas/responses/security_schemes directly when merging docs, so the OpenAPI documentation code no longer builds until that manual merge logic is rewritten for the 5.x API.

Useful? React with 👍 / 👎.

[chatgpt-codex-connector]

Use the new ULID constructor name

Cargo.lock resolves this bump to ulid 2.0.1, whose generation API is Ulid::gen() rather than Ulid::new(). The codebase still calls Ulid::new() in normal builds, e.g. quickwit-proto::types::IndexUid::new_with_random_ulid and the indexing/search services, so updating the dependency without renaming those call sites breaks compilation across the workspace.

Useful? React with 👍 / 👎.