Is Dependabot working?

[reneleonhardt]

Missing cargo updates

diff --git a/Cargo.toml b/Cargo.toml
index 37b0690..dedbd17 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -299 +299 @@ mur3 = "0.1.0"
-ndarray = "0.16.1"
+ndarray = "0.17.1"
@@ -311,3 +311,3 @@ proptest = "1.8.0"
-prost = "0.13.5"
-prost-types = "0.13.5"
-rand = "^0.8"
+prost = "0.14.1"
+prost-types = "0.14.1"
+rand = "^0.9"
@@ -316 +316 @@ regex = "1.11.2"
-rstest = "0.18.2"
+rstest = "0.26.1"
@@ -321 +321 @@ simdutf8 = "0.1.5"
-sketches-ddsketch = {version = "0.2.2", features = ["use_serde"]}
+sketches-ddsketch = {version = "0.3.0", features = ["use_serde"]}
@@ -323 +323 @@ smallvec = {version = "1.15.1", features = ["serde", "impl_bincode"]}
-snafu = {version = "0.7.4", features = ["futures"]}
+snafu = {version = "0.8.9", features = ["futures"]}
@@ -325,2 +325,2 @@ spark-connect = {path = "src/generated/spark-connect", default-features = false}
-sqlparser = "0.51.0"
-sysinfo = "0.35.2"
+sqlparser = "0.59.0"
+sysinfo = "0.37.2"
@@ -330 +330 @@ thiserror = "2.0.16"
-tiktoken-rs = "0.7.0"
+tiktoken-rs = "0.9.1"
@@ -343,2 +343,2 @@ tokio-util = "0.7.16"
-tonic = "0.12.3"
-tonic-build = "0.12.3"
+tonic = "0.14.2"
+tonic-build = "0.14.2"
@@ -347 +347 @@ tracing-subscriber = {version = "0.3.20", default-features = false, features = [
-typed-builder = "0.20.0"
+typed-builder = "0.23.2"
diff --git a/src/arrow2/Cargo.toml b/src/arrow2/Cargo.toml
index bd06e14..b3d046d 100644
--- a/src/arrow2/Cargo.toml
+++ b/src/arrow2/Cargo.toml
@@ -23 +23 @@ chrono-tz = {version = "0.10", optional = true}
-comfy-table = {version = "6.0", optional = true, default-features = false}
+comfy-table = {version = "7.2", optional = true, default-features = false}
@@ -41 +41 @@ hash_hasher = "^2.0.3"
-hashbrown = {version = "0.14", default-features = false, features = ["ahash"]}
+hashbrown = {version = "0.16", default-features = false, features = ["ahash"]}
@@ -43 +43 @@ hex = {version = "^0.4", optional = true}
-indexmap = {version = "^1.6", optional = true}
+indexmap = {version = "^2.12", optional = true}
@@ -49 +49 @@ json-deserializer = {version = "0.4.4", optional = true, features = [
-lexical-core = {version = "0.8", optional = true}
+lexical-core = {version = "1.0", optional = true}
@@ -59 +59 @@ orc-format = {version = "0.3.0", optional = true}
-rand = {version = "0.8", optional = true}
+rand = {version = "0.9", optional = true}
@@ -91 +91 @@ proptest = {version = "1", default-features = false, features = ["std"]}
-rand = "0.8"
+rand = "0.9"
@@ -257 +257 @@ ignored = ["arrow-array", "arrow-buffer", "avro-rs", "criterion", "crossbeam-cha
-getrandom = {version = "0.2", features = ["js"]}
+getrandom = {version = "0.3", features = ["js"]}
diff --git a/src/common/error/Cargo.toml b/src/common/error/Cargo.toml
index 94e2d1d..d865a00 100644
--- a/src/common/error/Cargo.toml
+++ b/src/common/error/Cargo.toml
@@ -2 +2 @@
-arrow-schema = {version = "54.2.1", optional = true}
+arrow-schema = {version = "57.1.0", optional = true}
diff --git a/src/common/io-config/Cargo.toml b/src/common/io-config/Cargo.toml
index 1e850a2..c6020e1 100644
--- a/src/common/io-config/Cargo.toml
+++ b/src/common/io-config/Cargo.toml
@@ -10 +10 @@ pyo3 = {workspace = true, optional = true}
-secrecy = {version = "0.8.0", features = ["alloc"], default-features = false}
+secrecy = {version = "0.10.3", features = ["alloc"], default-features = false}
diff --git a/src/common/metrics/Cargo.toml b/src/common/metrics/Cargo.toml
index 4c697be..790dcf4 100644
--- a/src/common/metrics/Cargo.toml
+++ b/src/common/metrics/Cargo.toml
@@ -3 +3 @@ common-py-serde = {path = "../py-serde", default-features = false}
-indicatif = "0.17"
+indicatif = "0.18"
diff --git a/src/common/system-info/Cargo.toml b/src/common/system-info/Cargo.toml
index ff849bf..3f1cfa7 100644
--- a/src/common/system-info/Cargo.toml
+++ b/src/common/system-info/Cargo.toml
@@ -3 +3 @@ pyo3 = {workspace = true, optional = true}
-sysinfo = "0.35.2"
+sysinfo = "0.37.2"
diff --git a/src/daft-decoding/Cargo.toml b/src/daft-decoding/Cargo.toml
index de36d4a..9f9e193 100644
--- a/src/daft-decoding/Cargo.toml
+++ b/src/daft-decoding/Cargo.toml
@@ -3 +3 @@ arrow2 = {workspace = true, features = ["io_csv", "io_csv_async"]}
-atoi_simd = "0.16.1"
+atoi_simd = "0.17.0"
diff --git a/src/daft-io/Cargo.toml b/src/daft-io/Cargo.toml
index e6d91e6..a7cd8ca 100644
--- a/src/daft-io/Cargo.toml
+++ b/src/daft-io/Cargo.toml
@@ -22 +22 @@ globset = "0.4"
-google-cloud-storage = {version = "0.24.0", default-features = false, features = ["rustls-tls", "auth"]}
+google-cloud-storage = {version = "1.4.0", default-features = false, features = ["rustls-tls", "auth"]}
@@ -28 +28 @@ pyo3 = {workspace = true, optional = true}
-rand = "0.8.5"
+rand = "0.9.2"
@@ -31,2 +31,2 @@ reqwest-middleware = "0.4.2"
-reqwest-retry = "0.7.0"
-retry-policies = "0.4.0"
+reqwest-retry = "0.8.0"
+retry-policies = "0.5.1"
diff --git a/src/daft-json/Cargo.toml b/src/daft-json/Cargo.toml
index 8af5e82..992e2c3 100644
--- a/src/daft-json/Cargo.toml
+++ b/src/daft-json/Cargo.toml
@@ -22 +22 @@ serde_json = {workspace = true, features = ["raw_value"]}
-simd-json = {version = "0.13", features = ["known-key"]}
+simd-json = {version = "0.17", features = ["known-key"]}
diff --git a/src/daft-logical-plan/Cargo.toml b/src/daft-logical-plan/Cargo.toml
index d622310..bfa37c7 100644
--- a/src/daft-logical-plan/Cargo.toml
+++ b/src/daft-logical-plan/Cargo.toml
@@ -39 +39 @@ pretty_assertions = {workspace = true}
-rand = "0.8"
+rand = "0.9"
diff --git a/src/daft-recordbatch/Cargo.toml b/src/daft-recordbatch/Cargo.toml
index eacb3de..e585d33 100644
--- a/src/daft-recordbatch/Cargo.toml
+++ b/src/daft-recordbatch/Cargo.toml
@@ -3 +3 @@ async-recursion = "1.0.4"
-arrow-array = {version = "54.2.1"}
+arrow-array = {version = "57.1.0"}
diff --git a/src/daft-scan/Cargo.toml b/src/daft-scan/Cargo.toml
index 96d5492..0c84e79 100644
--- a/src/daft-scan/Cargo.toml
+++ b/src/daft-scan/Cargo.toml
@@ -11 +11 @@ common-scan-info = {path = "../common/scan-info", default-features = false}
-ctor = "0.5.0"
+ctor = "0.6.1"
diff --git a/src/daft-shuffles/Cargo.toml b/src/daft-shuffles/Cargo.toml
index abf7a91..4ebd622 100644
--- a/src/daft-shuffles/Cargo.toml
+++ b/src/daft-shuffles/Cargo.toml
@@ -2,2 +2,2 @@
-arrow-flight = "54.2.1"
-arrow-ipc = "54.2.1"
+arrow-flight = "57.1.0"
+arrow-ipc = "57.1.0"
diff --git a/src/daft-sketch/Cargo.toml b/src/daft-sketch/Cargo.toml
index 416dfcf..9ff8f40 100644
--- a/src/daft-sketch/Cargo.toml
+++ b/src/daft-sketch/Cargo.toml
@@ -6 +6 @@ common-error = {path = "../common/error", default-features = false}
-serde_arrow = {version = "0.11.0", features = ["arrow2-0-17"]}
+serde_arrow = {version = "0.13.7", features = ["arrow2-0-17"]}
diff --git a/src/daft-writers/Cargo.toml b/src/daft-writers/Cargo.toml
index 99d2da4..82c0efb 100644
--- a/src/daft-writers/Cargo.toml
+++ b/src/daft-writers/Cargo.toml
@@ -2,3 +2,3 @@
-arrow-array = {version = "54.2.1"}
-arrow-json = {version = "54.2.1"}
-arrow-schema = {version = "54.2.1"}
+arrow-array = {version = "57.1.0"}
+arrow-json = {version = "57.1.0"}
+arrow-schema = {version = "57.1.0"}
@@ -22 +22 @@ parking_lot = {workspace = true}
-parquet = {version = "54.2.1"}
+parquet = {version = "57.1.0"}
diff --git a/src/parquet2/Cargo.toml b/src/parquet2/Cargo.toml
index 4e85c78..221a935 100644
--- a/src/parquet2/Cargo.toml
+++ b/src/parquet2/Cargo.toml
@@ -3 +3 @@ async-stream = {version = "0.3.6", optional = true}
-brotli = {version = "^3.3", optional = true}
+brotli = {version = "^8.0", optional = true}
@@ -8 +8 @@ lz4 = {version = "1.28", optional = true}
-lz4_flex = {version = "^0.11", optional = true}
+lz4_flex = {version = "^0.12", optional = true}
@@ -20 +20 @@ criterion = "0.7"
-rand = "0.8"
+rand = "0.9"

Missing pip updates

$ uv upgrade
 #               name -old           +new            latest          S type            py     upgraded pyproject.toml
 1          pyiceberg >=0.7.0,<0.9.1 >=0.7.0,<0.11.0 0.10.0          2 iceberg [extra] >=3.10 ✅ up
 2            pyspark ==3.5.5        ==4.0.1         4.0.1           1 spark [extra]   >=3.10 ✅ up
 3              httpx <=0.27.2       <=0.28.1        0.28.1          2 unity [extra]   >=3.10 ✅ up
 4            aiohttp ==3.12.4       ==3.13.2        3.13.2          2 dev [group]     >=3.10 ✅ up
 5              httpx ==0.27.2       ==0.28.1        0.28.1          2 dev [group]     >=3.10 ✅ up
 6             orjson ==3.10.12      ==3.11.4        3.11.4          2 dev [group]     >=3.10 ✅ up
 7          viztracer ==0.15.6       ==1.1.1         1.1.1           1 dev [group]     >=3.10 ✅ up
 8         hypothesis ==6.79.2       ==6.148.3       6.148.3         2 dev [group]     >=3.10 ✅ up
 9             pytest ==7.4.3        ==9.0.1         9.0.1           1 dev [group]     >=3.10 ✅ up
10   pytest-benchmark ==4.0.0        ==5.2.3         5.2.3           1 dev [group]     >=3.10 ✅ up
11         pytest-cov ==4.1.0        ==7.0.0         7.0.0           1 dev [group]     >=3.10 ✅ up
12             memray ==1.17.2       ==1.19.1        1.19.1          2 dev [group]     >=3.10 ✅ up
13    pytest-codspeed ==2.2.1        ==4.2.0         4.2.0           1 dev [group]     >=3.10 ✅ up
14               lxml ==5.3.0        ==6.0.2         6.0.2           1 dev [group]     >=3.10 ✅ up
15              numpy ==2.2.0        ==2.2.6         2.2.6           3 dev [group]     >=3.10 ✅ up
16              numpy ==1.26.2       ==2.2.6         2.2.6           1 dev [group]     >=3.10 ✅ up
17             pandas ==2.2.3        ==2.3.3         2.3.3           2 dev [group]     >=3.10 ✅ up
18             pandas ==2.1.3        ==2.3.3         2.3.3           2 dev [group]     >=3.10 ✅ up
19       pandas-stubs ==2.2.2.240807 ==2.3.2.250926  2.3.2.250926    2 dev [group]     >=3.10 ✅ up
20             pillow ==10.4.0       ==12.0.0        12.0.0          1 dev [group]     >=3.10 ✅ up
21      opencv-python ==4.10.0.84    ==4.12.0.88     4.12.0.88       2 dev [group]     >=3.10 ✅ up
22           tiktoken ==0.9.0        ==0.12.0        0.12.0          2 dev [group]     >=3.10 ✅ up
23             duckdb ==1.1.2        ==1.4.2         1.4.2           2 dev [group]     >=3.10 ✅ up
24           datasets ==4.0.0        ==4.4.1         4.4.1           2 dev [group]     >=3.10 ✅ up
25      pyarrow-stubs ==19.4         ==20.0          20.0.0.20251107 1 dev [group]     >=3.10 ✅ up
26                ray ==2.48.0       ==2.52.0        2.52.0          2 dev [group]     >=3.10 ✅ up
27                ray ==2.34.0       ==2.52.0        2.52.0          2 dev [group]     >=3.10 ✅ up
28          pyiceberg ==0.7.0        ==0.10.0        0.10.0          2 dev [group]     >=3.10 ✅ up
29           pydantic ==2.11.7       ==2.12.5        2.12.5          2 dev [group]     >=3.10 ✅ up
30           tenacity ==8.2.3        ==9.1.2         9.1.2           1 dev [group]     >=3.10 ✅ up
31          deltalake ==0.5.8        ==1.2.1         1.2.1           1 dev [group]     >=3.10 ✅ up
32     databricks-sdk ==0.12.0       ==0.73.0        0.73.0          2 dev [group]     >=3.10 ✅ up
33         sqlalchemy ==2.0.36       ==2.0.44        2.0.44          3 dev [group]     >=3.10 ✅ up
34              trino ==0.328.0      ==0.336.0       0.336.0         2 dev [group]     >=3.10 ✅ up
35            pymysql ==1.1.0        ==1.1.2         1.1.2           3 dev [group]     >=3.10 ✅ up
36    psycopg2-binary ==2.9.10       ==2.9.11        2.9.11          3 dev [group]     >=3.10 ✅ up
37            sqlglot ==23.3.0       ==28.0.0        28.0.0          1 dev [group]     >=3.10 ✅ up
38               s3fs ==2023.12.1    ==2025.10.0     2025.10.0       1 dev [group]     >=3.10 ✅ up
39              boto3 ==1.36.20      ==1.41.5        1.41.5          2 dev [group]     >=3.10 ✅ up
40        boto3-stubs ==1.38.46      ==1.41.5        1.41.5          2 dev [group]     >=3.10 ✅ up
41               moto ==5.1.1        ==5.1.17        5.1.17          3 dev [group]     >=3.10 ✅ up
42              adlfs ==2024.7.0     ==2025.8.0      2025.8.0        1 dev [group]     >=3.10 ✅ up
43 azure-storage-blob ==12.24.0      ==12.27.1       12.27.1         2 dev [group]     >=3.10 ✅ up
44              gcsfs ==2023.12.1    ==2025.10.0     2025.10.0       1 dev [group]     >=3.10 ✅ up
45    huggingface-hub ==0.34.4       ==1.1.5         1.1.5           1 dev [group]     >=3.10 ✅ up
46            pyspark ==3.5.5        ==4.0.1         4.0.1           1 dev [group]     >=3.10 ✅ up
47             grpcio ==1.68.1       ==1.76.0        1.76.0          2 dev [group]     >=3.10 ✅ up
48      grpcio-status ==1.67.0       ==1.76.0        1.76.0          2 dev [group]     >=3.10 ✅ up
49               vllm ==0.11.0       ==0.11.2        0.11.2          3 dev [group]     >=3.10 ✅ up
50             openai ==1.100        ==2.8           2.8.1           1 dev [group]     >=3.10 ✅ up
51                 av ==15.0.0       ==16.0.1        16.0.1          1 dev [group]     >=3.10 ✅ up
52  mcap-ros2-support ==0.5.5        ==0.5.6         0.5.6           3 dev [group]     >=3.10 ✅ up
info: Upgraded 52/139 in pyproject.toml 🚀 Check manually, update `uv sync -U` and run tests

[srilman]

Dependabot is working, we just don't always update the versions for various reasons.

On the Rust side, we have older vendored versions of Arrow2 and Parquet2 in our codebase, that require older dependencies. To avoid doubling dependencies and increasing our package size, we continue to use those. For example, we stick to v54 for all of the Arrow-Rs crates. We're looking into ways to move from Arrow2 to Arrow-Rs entirely

On the Python side, we try to be conservative and test the oldest supported version for each external package.

If you have any ideas on how to improve our Dependabot configuration to reflect these requirements, we're happy to hear more!