Skip to content

Bump dependencies and adopt WTFPL license - #32

Open
SemyonSinchenko wants to merge 6 commits into
mrpowers-io:mainfrom
SemyonSinchenko:bump-dependencies-2026-10
Open

SemyonSinchenko wants to merge 6 commits into
mrpowers-io:mainfrom
SemyonSinchenko:bump-dependencies-2026-10

Conversation

@SemyonSinchenko

@SemyonSinchenko SemyonSinchenko commented Oct 23, 2026 •

Copy link
Copy Markdown
Collaborator

Breaking (!)

  • manylinux2014 -> manylinux_2_28
  • minimal python 3.9 -> 3.11

Other

  • pyo3 0.25.1 -> 0.29.3 (latest compatible with arrow 60)
  • arrow 56.1.0 -> 60.0.0
  • rand 0.9.2 -> 0.10.3
  • rand_chacha 0.9.0 -> 0.10.0
  • require maturin >=1.15 for builds
  • refresh Cargo.lock, including transitive dependencies
  • add canonical WTFPL v2 LICENSE and update package license metadata

- pyo3 0.25.1 -> 0.29.3 (latest compatible with arrow 60)
- arrow 56.1.0 -> 60.0.0
- rand 0.9.2 -> 0.10.3
- rand_chacha 0.9.0 -> 0.10.0
- require maturin >=1.15 for builds
- refresh Cargo.lock, including transitive dependencies
- add canonical WTFPL v2 LICENSE and update package license metadata
@SemyonSinchenko

Copy link
Copy Markdown
Collaborator Author

Hello @zhuqi-lucas !

Sorry for pinging you there.
If by any chance you can take a look on a few questions below it would be nice!

I'm trying to maintain this project with up-to-date dependencies to avoid supply-chain risks for any upstream. I updated minimal python version from 3.9 to 3.11 because both 3.9 and 3.10 are no longer getting security updates. I also updated the compatibility from manylinux2014 to manylinux_2_28 because CentOS-7 is not available anymore. Please, if you have time, check that this won't break the CI in the Apache DataFusion project that, as I remember, consume this data generator.

I will wait for a week and merge then if no answer.
Thanks in advance!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant