Skip to content

Bump object_store from 0.12.4 to 0.14.1 - #2301

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/object_store-0.14.1
Closed

Bump object_store from 0.12.4 to 0.14.1#2301
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/object_store-0.14.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 19, 2026

Copy link
Copy Markdown
Contributor

Bumps object_store from 0.12.4 to 0.14.1.

Release notes

Sourced from object_store's releases.

object_store v0.14.1

Changelog

v0.14.1 (2026-07-10)

Full Changelog

Implemented enhancements:

  • Cache Azure user delegation key for SAS signing #800
  • Add deregister to ObjectStoreRegistry #795
  • Support for S3 dual-stack endpoints #779
  • Coalesce contiguous ranges in LocalFileSystem::get_ranges #778
  • Support for HF Storage Buckets #706

Fixed bugs:

  • Clippy failing on main #798
  • Upgrade quick-xml to resolve RUSTSEC-2026-0194 and RUSTSEC-2026-0195 #786
  • InMemory and LocalFileSystem return unquoted ETags, violating RFC 9110 #769

Closed issues:

  • Bump quick-xml to 0.41.0 for RustSec advisories #787

Merged pull requests:

  • Pin Rust toolchain to 1.97.0 and fix clippy #799 (alamb)
  • chore: reduce lock hold time in DefaultObjectStoreRegistry::deregister #792 (kszucs)
  • Do not explicitly add Host header when making requests with S3Builder #790 (ntjohnson1)
  • impl HttpError::new_boxed to provide user with ability to ctor from already boxed error #789 (DoumanAsh)

... (truncated)

Changelog

Sourced from object_store's changelog.

Historical Changelog

v0.14.0 (2026-06-18)

Full Changelog

Breaking changes:

Implemented enhancements:

  • Support PutMultipartOptions for MultipartStore::create_multipart #745
  • Supporting CPKs for Azure Blob Requests #741
  • Support Extensions in *Result objects #740
  • Implement Signer on PrefixStore #738
  • Make reqwest optional #723
  • Expose azure::split_sas for custom SAS credential providers #720
  • GCS: support bearer-token auth in parse_url_opts without bypassing default option handling #716
  • Custom credentials for signing cannot be provided to GCP stores #698
  • Read timeouts are not supported #680
  • AWS_REQUEST_PAYER="requester" vs Boolean #668
  • Reliable file writes for LocalFileSystem: explicit close error checking and opt-in sync #661
  • infer use_fabric_endpoint based on URI containing "dfs.fabric.microsoft.com" #658
  • Support CRC checksum #611
  • Change crypto provider from ring to aws-rust-lc #413

... (truncated)

Commits
  • c7316d2 Update version to 0.14.1 and add CHANGELOG (#794)
  • c66dd12 Cache Azure user delegation key for SAS signing (#781)
  • 7a7deea Do not explicitly add Host header when making requests with S3Builder (#790)
  • 19be0b1 Update release process to use RC tags (#796)
  • e3b8561 Add automatic GitHub release workflow (#797)
  • e64e8e3 Pin Rust toolchain to 1.97.0 and fix clippy useless_borrows_in_formatting (#799)
  • 18102f3 impl HttpError::new_boxed to provide user with ability to ctor from already b...
  • 7e854ef fix(aws): recognize S3 dual-stack endpoints in URL parsing (#780)
  • 09adc41 Reduce lock hold time in DefaultObjectStoreRegistry::deregister (#792)
  • c2048e0 feat: add deregister to ObjectStoreRegistry (#784)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
Bump object_store from 0.12.4 to 0.14.1
380c69b 
Bumps [object_store](https://github.com/apache/arrow-rs-object-store) from 0.12.4 to 0.14.1.
- [Release notes](https://github.com/apache/arrow-rs-object-store/releases)
- [Changelog](https://github.com/apache/arrow-rs-object-store/blob/main/CHANGELOG-old.md)
- [Commits](apache/arrow-rs-object-store@v0.12.4...v0.14.1)

---
updated-dependencies:
- dependency-name: object_store
  dependency-version: 0.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 19, 2026
@dependabot dependabot Bot mentioned this pull request Jul 19, 2026
Closed
@codecov

codecov Bot commented Jul 19, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ All tests successful. No failed tests found.

📢 Thoughts on this report? Let us know!

@github-actions

github-actions Bot commented Aug 3, 2026

Copy link
Copy Markdown

This PR has been inactive for 14 days and is now marked as stale. If this is still being worked on, please comment to keep it open.

@github-actions github-actions Bot added the stale label Aug 3, 2026
@github-actions

github-actions Bot commented Aug 18, 2026

Copy link
Copy Markdown

This PR has been closed due to 28 days of inactivity. Please reopen if you plan to continue working on it.

@github-actions github-actions Bot closed this Aug 18, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 18, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/cargo/object_store-0.14.1 branch August 18, 2026 02:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

community dependencies Pull requests that update a dependency file rust Pull requests that update rust code stale

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants