cargo(deps): bump the cargo-major group across 1 directory with 6 updates

[dependabot]

Updates the requirements on napi, napi-derive, arrow, parquet, calamine and thiserror to permit the latest version.
Updates napi to 3.11.0

Release notes

Sourced from napi's releases.

napi-v3.11.0

Added

• unforgeable #[napi] class identity via Node object type tags (#3405)
• (napi) add pluggable async runtime backend (#3352)

Fixed

• (napi) release JsDeferred tsfn on null-env teardown drain (#3404 follow-up) (#3408)
• (napi) guard JsDeferred against env teardown (#3404)
• (napi) register the async runtime env cleanup hook per registration (#3400)

Other

• (napi) share tracing callsite (#3409)

Commits

• 679eb79 chore: release (#3401)
• 762a0e3 chore(release): publish
• 587ae14 perf(napi): share tracing callsite (#3409)
• 02d8ccd fix(napi): release JsDeferred tsfn on null-env teardown drain (#3404 follow-u...
• b635204 fix(napi): guard JsDeferred against env teardown (#3404)
• 729ebed feat: unforgeable #[napi] class identity via Node object type tags (#3405)
• 0a4681d fix(cli): don't force-build crates whose optional napi-derive dependency is d...
• 392ec40 chore(deps): update dependency c8 to v12 (#3403)
• d618d7e feat(napi): add pluggable async runtime backend (#3352)
• 1817ed2 fix(napi): register the async runtime env cleanup hook per registration (#3400)
• Additional commits viewable in compare view

Updates napi-derive to 3.6.0

Release notes

Sourced from napi-derive's releases.

napi-derive-v3.6.0

Added

• unforgeable #[napi] class identity via Node object type tags (#3405)

Commits

• 679eb79 chore: release (#3401)
• 762a0e3 chore(release): publish
• 587ae14 perf(napi): share tracing callsite (#3409)
• 02d8ccd fix(napi): release JsDeferred tsfn on null-env teardown drain (#3404 follow-u...
• b635204 fix(napi): guard JsDeferred against env teardown (#3404)
• 729ebed feat: unforgeable #[napi] class identity via Node object type tags (#3405)
• 0a4681d fix(cli): don't force-build crates whose optional napi-derive dependency is d...
• 392ec40 chore(deps): update dependency c8 to v12 (#3403)
• d618d7e feat(napi): add pluggable async runtime backend (#3352)
• 1817ed2 fix(napi): register the async runtime env cleanup hook per registration (#3400)
• Additional commits viewable in compare view

Updates arrow to 54.2.1

Release notes

Sourced from arrow's releases.

arrow 54.2.1

Changelog

54.2.1 (2025-02-27)

Full Changelog

Fixed bugs:

• Use chrono >= 0.4.34, < 0.4.40 to avoid breaking #7210

* This Changelog was automatically generated by github_changelog_generator

Changelog

Sourced from arrow's changelog.

54.2.1 (2025-02-27)

Full Changelog

Fixed bugs:

• Use chrono >= 0.4.34, < 0.4.40 to avoid breaking #7210

* This Changelog was automatically generated by github_changelog_generator

Commits

• 3f56468 Bump arrow version to 54.2.1 (#7207)
• ed0dcb5 Use chrono >= 0.4.34, < 0.4.40 to avoid breaking (#7210)
• d4b9482 Update version to 54.2.0 and add CHANGELOG (#7110)
• 34b2184 Revert "Update rand requirement from 0.8 to 0.9 (#7045)" (#7125)
• d3a875f feat(object_store): random IP address selection (#7123)
• ef7d753 fix: NullBufferBuilder::allocated_size should return Size in Bytes (#7122)
• 78c9df9 Add tests that arrow IPC data is validated (#7096)
• 2bce568 Support converting large dates (i.e. +10999-12-31) from string to Date32 (#7074)
• a85fc03 Support setting key field in MapBuilder (#7101)
• 27d2a75 Expose record boundary information in JSON decoder (#7092)
• Additional commits viewable in compare view

Updates parquet to 59.1.0

Release notes

Sourced from parquet's releases.

arrow 59.1.0

Changelog

59.1.0 (2026-07-03)

Full Changelog

Implemented enhancements:

• Fast path for nested DictionaryArray casting #10247 [arrow]
• parquet/arrow: reading multiple nested columns fails with "Not all children array length are the same!" when a list continues across DataPageV2 page boundary #10243 [parquet]
• Add product aggregate kernel to arrow-rs #10150 [arrow]
• Stricter DataType parsing #10146 [arrow]
• Support validating CSV headers against Schema #10143 [arrow]
• arrow-ipc: Supports compression level configuration for arrow-ipc writer #10132 [arrow]
• [Variant] VariantArray field API naming #10093
• Add StructArray::field_ APIs symmetric to StructArray::column_ ones #10092 [arrow]
• arrow-buffer: implement Saturating, CheckedShl, Not num-traits for i256 #10087 [arrow]
• feat: native concat for MapArray #10047 [arrow]
• [Variant] Add variant_to_arrow Dictionary/REE type support #10013

Fixed bugs:

• arrow-row on fixed size binary/list with size 0 and no nulls return wrong length #10270
• casting list to 0-size fixedsizelist can cause incorrect output length #10227 [arrow]
• Buffer count mismatched with metadata when encoding records with dictionary of dictionaries #10213 [arrow]
• Buffer::into_mutable is not consistent regarding sliced data and can lead to panics #10117 [arrow]
• parquet_derive: cannot read or write columns whose name is a Rust keyword (raw identifiers like r#type become column "r#type") #10112
• parquet: fix OffsetBuffer panic on corrupt input #10107 [parquet]
• Parquet geospatial conversion uses metadata key "algorithm" instead of "edges" in geoarrow metadata #9929 [parquet]

... (truncated)

Changelog

Sourced from parquet's changelog.

59.1.0 (2026-07-03)

Full Changelog

Implemented enhancements:

• Fast path for nested DictionaryArray casting #10247 [arrow]
• parquet/arrow: reading multiple nested columns fails with "Not all children array length are the same!" when a list continues across DataPageV2 page boundary #10243 [parquet]
• Add product aggregate kernel to arrow-rs #10150 [arrow]
• Stricter DataType parsing #10146 [arrow]
• Support validating CSV headers against Schema #10143 [arrow]
• arrow-ipc: Supports compression level configuration for arrow-ipc writer #10132 [arrow]
• [Variant] VariantArray field API naming #10093
• Add StructArray::field_ APIs symmetric to StructArray::column_ ones #10092 [arrow]
• arrow-buffer: implement Saturating, CheckedShl, Not num-traits for i256 #10087 [arrow]
• feat: native concat for MapArray #10047 [arrow]
• [Variant] Add variant_to_arrow Dictionary/REE type support #10013

Fixed bugs:

• arrow-row on fixed size binary/list with size 0 and no nulls return wrong length #10270
• casting list to 0-size fixedsizelist can cause incorrect output length #10227 [arrow]
• Buffer count mismatched with metadata when encoding records with dictionary of dictionaries #10213 [arrow]
• Buffer::into_mutable is not consistent regarding sliced data and can lead to panics #10117 [arrow]
• parquet_derive: cannot read or write columns whose name is a Rust keyword (raw identifiers like r#type become column "r#type") #10112
• parquet: fix OffsetBuffer panic on corrupt input #10107 [parquet]
• Parquet geospatial conversion uses metadata key "algorithm" instead of "edges" in geoarrow metadata #9929 [parquet]

Documentation updates:

• doc: More comments to concat_batches #10178 (2010YOUY01)
• Minor: improve PageStore docs with a temp-file spilling example #10074 [parquet] (alamb)

Performance improvements:

• perf: interleave_list for List<Primitive> could be optimized? #10022 [arrow]
• perf(arrow-ord): Avoid full index materialization for small-limit lexsorts #9990 [arrow]
• Replace conversion of binary->string in arrow-row from arraydata to direct construction #10261 [arrow] (Jefffrey)
• [arrow-flight encode path]re-use flatbufferbuilder #10220 [arrow] (Rich-T-kid)
• [10125] arrow-flight decode path optimizations (add skip_validation to arrow-flight) #10206 [arrow] [arrow-flight] (Rich-T-kid)
• Improve performance of concat_elements ByteViewArray concatenation #10161 [arrow] (pepijnve)
• [arrow-flight] Optimize flight, remove some allocations, add dictionary focused benchmarks #10126 [arrow] [arrow-flight] (Rich-T-kid)
• optimize(concat): concat map implementation #10048 [arrow] (mapleFU)
• Reduce copies in Arrow IPC writer #10044 [arrow] (Rich-T-kid)
• perf(interleave): Optimize list interleave_list when child is primitive #10025 [arrow] (mapleFU)

Closed issues:

• Soundness: Unsound alignment contract in public FromBytes trait and BitReader::get_batch #10164 [parquet]
• ParquetPushDecoder: expose the next row-group index that try_next_reader will yield #10148 [parquet]

... (truncated)

Commits

• b1de629 Prepare for 59.1.0 release (#10274)
• c36e926 feat: Add support for MapArray in arrow_row (#9486)
• d2519a1 fix(arrow-row): allow to convert non empty fixed size binary/list array with ...
• ddef6cf chore: Fix audit CI run by ignore quick-xml audit advisories (#10267)
• d969025 fix main: parquet test compilation failure (#10266)
• c7dc6b8 Add validated row decode benchmark (#10259)
• 7307740 fix: write error for dbg output of out of range timestamps (#10130)
• af1c24a minor: drive-by refactors for dicts in substring & filter (#10264)
• 7095ce4 Replace conversion of binary->string in arrow-row from arraydata to direct co...
• 8c7df18 reduce noise in flight benchmarks [tokio-threads] [# of columns in benchmarks...
• Additional commits viewable in compare view

Updates calamine to 0.36.0

Release notes

Sourced from calamine's releases.

v0.36.0 - 2026-07-06

Added

• Added an XLSX streaming API for cell and formula records, including shared formula metadata. There are two new APIs: XlsxCellReader::next_cell_with_formula() and XlsxCellReader::next_cell_with_formula_metadata(). Previously it required 2 separate reads to get similar information. [PR #654].

  [PR #654]: tafia/calamine#654

• Added a per-sheet, lazy XLSX API to read worksheet hyperlinks: Xlsx::hyperlinks_by_sheet_name() and Xlsx::hyperlinks_by_sheet_id(). Each hyperlink reports its anchor range (Dimensions), external target (URL/file/mailto), optional internal location, displayed text, and optional tooltip. [PR #659].

  [PR #659]: tafia/calamine#659

• Extended the picture feature to also extract cell position information and the raw image data, and to handle newer Excel 365 style embedded images. [PR #652].

  [PR #652]: tafia/calamine#652

• Added support for reading XLSX rich string (rstring) records. [Issue #655].

  [Issue #655]: tafia/calamine#655

Changed

• Updated dependencies and the minimum supported Rust version (MSRV) for release 0.36.0:

  • atoi_simd: 0.17 → 0.18. [PR #672]
  • zip: 7.0 → 8.6. This raises the MSRV from 1.83 to 1.88. [PR #672]
  • quick-xml: 0.39 → 0.41, to address advisories [RUSTSEC-2026-0194] and [RUSTSEC-2026-0195]. [Issue #674].

  [PR #672]: tafia/calamine#672 [Issue #674]: tafia/calamine#674 [RUSTSEC-2026-0194]: https://rustsec.org/advisories/RUSTSEC-2026-0194.html [RUSTSEC-2026-0195]: https://rustsec.org/advisories/RUSTSEC-2026-0195.html

• Performance improvements:

  • Custom zero-overhead attribute extraction and optimized local_name matching. [PR #621]
  • Optimized buffer use for XLSB cell reads. [PR #662]

  [PR #621]: tafia/calamine#621

... (truncated)

Changelog

Sourced from calamine's changelog.

[0.36.0] - 2026-07-06

Added

• Added an XLSX streaming API for cell and formula records, including shared formula metadata. There are two new APIs: XlsxCellReader::next_cell_with_formula() and XlsxCellReader::next_cell_with_formula_metadata(). Previously it required 2 separate reads to get similar information. [PR #654].

  [PR #654]: tafia/calamine#654

• Added a per-sheet, lazy XLSX API to read worksheet hyperlinks: Xlsx::hyperlinks_by_sheet_name() and Xlsx::hyperlinks_by_sheet_id(). Each hyperlink reports its anchor range (Dimensions), external target (URL/file/mailto), optional internal location, displayed text, and optional tooltip. [PR #659].

  [PR #659]: tafia/calamine#659

• Extended the picture feature to also extract cell position information and the raw image data, and to handle newer Excel 365 style embedded images. [PR #652].

  [PR #652]: tafia/calamine#652

• Added support for reading XLSX rich string (rstring) records. [Issue #655].

  [Issue #655]: tafia/calamine#655

Changed

• Updated dependencies and the minimum supported Rust version (MSRV) for release 0.36.0:

  • atoi_simd: 0.17 → 0.18. [PR #672]
  • zip: 7.0 → 8.6. This raises the MSRV from 1.83 to 1.88. [PR #672]
  • quick-xml: 0.39 → 0.41, to address advisories [RUSTSEC-2026-0194] and [RUSTSEC-2026-0195]. [Issue #674].

  [PR #672]: tafia/calamine#672 [Issue #674]: tafia/calamine#674 [RUSTSEC-2026-0194]: https://rustsec.org/advisories/RUSTSEC-2026-0194.html [RUSTSEC-2026-0195]: https://rustsec.org/advisories/RUSTSEC-2026-0195.html

• Performance improvements:

  • Custom zero-overhead attribute extraction and optimized local_name matching. [PR #621]
  • Optimized buffer use for XLSB cell reads. [PR #662]

... (truncated)

Commits

• 2872ac1 release: 0.36.0
• bec70ca fix(xlsx): fix whitespace trimming bug introduced in #671 (#673)
• 058cb50 chore: clippy::manual_is_multiple_of
• 070c4c0 deps: bump quick-xml 0.39 to 0.41
• 01bc379 deps: bump zip from 7.0 to 8.6
• c903532 deps: bump atoi_simd 0.17 to 0.18
• 9bcfed2 example: fix cargo test warning for read_picture_data example (#676)
• 0dad897 xlsx: make shared formula cell replacement more accurate (#664)
• 1f1f7bc fix: strip whitespace from <t> elements without xml:space="preserve" (#671)
• d206c9b fix(xls): better error message when file too small (#670)
• Additional commits viewable in compare view

Updates thiserror to 2.0.19

Release notes

Sourced from thiserror's releases.

2.0.19

• Update to syn 3

Commits

• e13a785 Release 2.0.19
• 0a0e76c Update to syn 3
• ec42ea7 Update actions/upload-artifact@v6 -> v7
• 4178c4a Update actions/checkout@v6 -> v7
• 7214e0e Ignore items_after_statements pedantic clippy lint in test
• febcc03 Merge pull request #451 from vip892766gma/maint/20260521171412
• c50e387 chore: improve thiserror maintenance path
• d4a2507 Raise minimum tested compiler to rust 1.85
• 99e8a6c Unpin CI miri toolchain
• 9ac165c Pin CI miri to nightly-2026-02-11
• Additional commits viewable in compare view

[dependabot]

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.