Skip to content

chore: merge upstream ADBC 24 into spiceai-24 - #7

Merged
krinart merged 250 commits into
spiceai-24from
spiceai-24-patches
Oct 3, 2026
Merged

krinart merged 250 commits into
spiceai-24from
spiceai-24-patches

Conversation

@krinart

@krinart krinart commented Sep 30, 2026

Copy link
Copy Markdown

Merges upstream ADBC 24 (apache-arrow-adbc-24) into the Spice line: spiceai-24 is cut from spiceai, so the Spice Rust patches come across with history.

Pinned by spiceai/spiceai#14612 (tracking: spiceai/spiceai#13570). Supersedes #5.

zeroshade and others added 30 commits April 4, 2026 17:09
…apache#4180)

Ran into an issue when verifying with some driver-manager tests failing,
turned out to be the mismatch between using a conda environment but
CONDA_BUILD wasn't set. So the test for a specific error message didn't
get the message it was expecting. Adding the right `export
CONDA_BUILD=1` was sufficient to fix the verification.
…che#4194)

Updated [Microsoft.NET.Test.Sdk](https://github.com/microsoft/vstest)
from 18.3.0 to 18.4.0.

<details>
<summary>Release notes</summary>

_Sourced from [Microsoft.NET.Test.Sdk's
releases](https://github.com/microsoft/vstest/releases)._

## 18.4.0

## What's Changed
* Add LoongArch64 support by @​stdmnpkg in
microsoft/vstest#15359

* Refactor Condition evaluation by @​Youssef1313 in
microsoft/vstest#15357
* Adding info on extensions points part 1 by @​nohwnd in
microsoft/vstest#15360
* Add option to ask for uploading code QL before the standard window
ends by @​nohwnd in microsoft/vstest#15373
* Update runtime versions by @​nohwnd in
microsoft/vstest#15372
* Fix .NET 10 regression for traits by @​Youssef1313 in
microsoft/vstest#15370
* Update target frameworks to net10.0 and net11.0 by
@​dotnet-maestro[bot] in microsoft/vstest#15349
* Fix names in pipeline matrix so we don't have to align them by
@​nohwnd in microsoft/vstest#15365
* Update SECURITY.md by @​Youssef1313 in
microsoft/vstest#15342

## New Contributors
* @​stdmnpkg made their first contribution in
microsoft/vstest#15359

**Full Changelog**:
microsoft/vstest@v18.3.0...v18.4.0

Commits viewable in [compare
view](microsoft/vstest@v18.3.0...v18.4.0).
</details>

[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=Microsoft.NET.Test.Sdk&package-manager=nuget&previous-version=18.3.0&new-version=18.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…adbc (apache#4191)

Bumps [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) from 1.48.0
to 1.48.1.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md">modernc.org/sqlite's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<ul>
<li>
<p>2026-04-06 v1.48.2:</p>
<ul>
<li>Fix ABI mapping mismatch in the pre-update hook trampoline that
caused silent truncation of large 64-bit RowIDs.</li>
<li>Ensure the Go trampoline signature correctly aligns with the public
<code>sqlite3_preupdate_hook</code> C API, preventing data corruption
for high-entropy keys (e.g., Snowflake IDs).</li>
<li>See [GitLab merge request <a
href="https://gitlab.com/cznic/sqlite/issues/98">#98</a>](<a
href="https://gitlab.com/cznic/sqlite/-/merge_requests/98">https://gitlab.com/cznic/sqlite/-/merge_requests/98</a>),
thanks Josh Bleecher Snyder!</li>
<li>Fix the memory allocator used in
<code>(*conn).Deserialize</code>.</li>
<li>Replace <code>tls.Alloc</code> with <code>sqlite3_malloc64</code> to
prevent internal allocator corruption. This ensures the buffer is safely
owned by SQLite, which may resize or free it due to the
<code>SQLITE_DESERIALIZE_RESIZEABLE</code> and
<code>SQLITE_DESERIALIZE_FREEONCLOSE</code> flags.</li>
<li>Prevent a memory leak by properly freeing the allocated buffer if
fetching the main database name fails before handing ownership to
SQLite.</li>
<li>See [GitLab merge request <a
href="https://gitlab.com/cznic/sqlite/issues/100">#100</a>](<a
href="https://gitlab.com/cznic/sqlite/-/merge_requests/100">https://gitlab.com/cznic/sqlite/-/merge_requests/100</a>),
thanks Josh Bleecher Snyder!</li>
<li>Fix <code>(*conn).Deserialize</code> to explicitly reject
<code>nil</code> or empty byte slices.</li>
<li>Prevent silent database disconnection and connection pool corruption
caused by SQLite's default behavior when
<code>sqlite3_deserialize</code> receives a 0-length buffer.</li>
<li>See [GitLab merge request <a
href="https://gitlab.com/cznic/sqlite/issues/101">#101</a>](<a
href="https://gitlab.com/cznic/sqlite/-/merge_requests/101">https://gitlab.com/cznic/sqlite/-/merge_requests/101</a>),
thanks Josh Bleecher Snyder!</li>
<li>Fix <code>commitHookTrampoline</code> and
<code>rollbackHookTrampoline</code> signatures by removing the unused
<code>pCsr</code> parameter.</li>
<li>Aligns internal hook callbacks accurately with the underlying SQLite
C API, cleaning up the code to prevent potential future confusion or
bugs.</li>
<li>See [GitLab merge request <a
href="https://gitlab.com/cznic/sqlite/issues/102">#102</a>](<a
href="https://gitlab.com/cznic/sqlite/-/merge_requests/102">https://gitlab.com/cznic/sqlite/-/merge_requests/102</a>),
thanks Josh Bleecher Snyder!</li>
<li>Fix <code>checkptr</code> instrumentation failures during <code>go
test -race</code> when registering and using virtual tables
(<code>vtab</code>).</li>
<li>Allocate <code>sqlite3_module</code> instances using the C allocator
(<code>libc.Xcalloc</code>) instead of the Go heap. This ensures
transpiled C code can safely perform pointer operations on the struct
without tripping Go's pointer checks.</li>
<li>See [GitLab merge request <a
href="https://gitlab.com/cznic/sqlite/issues/103">#103</a>](<a
href="https://gitlab.com/cznic/sqlite/-/merge_requests/103">https://gitlab.com/cznic/sqlite/-/merge_requests/103</a>),
thanks Josh Bleecher Snyder!</li>
<li>Fix data race on <code>mutex.id</code> in the <code>mutexTry</code>
non-recursive path.</li>
<li>Ensure consistent atomic writes (<code>atomic.StoreInt32</code>) to
prevent data races with atomic loads in <code>mutexHeld</code> and
<code>mutexNotheld</code> during concurrent execution.</li>
<li>See [GitLab merge request <a
href="https://gitlab.com/cznic/sqlite/issues/104">#104</a>](<a
href="https://gitlab.com/cznic/sqlite/-/merge_requests/104">https://gitlab.com/cznic/sqlite/-/merge_requests/104</a>),
thanks Josh Bleecher Snyder!</li>
<li>Fix resource leak in <code>(*Backup).Commit</code> where the
destination connection was not closed on error.</li>
<li>Ensure <code>dstConn</code> is properly closed when
<code>sqlite3_backup_finish</code> fails, preventing file descriptor,
TLS, and memory leaks.</li>
<li>See [GitLab merge request <a
href="https://gitlab.com/cznic/sqlite/issues/105">#105</a>](<a
href="https://gitlab.com/cznic/sqlite/-/merge_requests/105">https://gitlab.com/cznic/sqlite/-/merge_requests/105</a>),
thanks Josh Bleecher Snyder!</li>
<li>Fix <code>Exec</code> to fully drain rows when encountering
<code>SQLITE_ROW</code>, preventing silent data loss in DML
statements.</li>
<li>Previously, <code>Exec</code> aborted after the first row, meaning
<code>INSERT</code>, <code>UPDATE</code>, or <code>DELETE</code>
statements with a <code>RETURNING</code> clause would fail to process
subsequent rows. The execution path now correctly loops until
<code>SQLITE_DONE</code> and properly respects context cancellations
during the drain loop, fully aligning with native C
<code>sqlite3_exec</code> semantics.</li>
<li>See [GitLab merge request <a
href="https://gitlab.com/cznic/sqlite/issues/106">#106</a>](<a
href="https://gitlab.com/cznic/sqlite/-/merge_requests/106">https://gitlab.com/cznic/sqlite/-/merge_requests/106</a>),
thanks Josh Bleecher Snyder!</li>
<li>Fix &quot;Shadowed err value (stmt.go)&quot;.</li>
<li>See [GitLab issue <a
href="https://gitlab.com/cznic/sqlite/issues/249">#249</a>](<a
href="https://gitlab.com/cznic/sqlite/-/work_items/249">https://gitlab.com/cznic/sqlite/-/work_items/249</a>),
thanks Emrecan BATI!</li>
<li>Fix silent omission of virtual table savepoint callbacks by
correctly setting the sqlite3_module version.</li>
<li>See [GitLab merge request <a
href="https://gitlab.com/cznic/sqlite/issues/107">#107</a>](<a
href="https://gitlab.com/cznic/sqlite/-/merge_requests/107">https://gitlab.com/cznic/sqlite/-/merge_requests/107</a>),
thanks Josh Bleecher Snyder!</li>
<li>Fix <code>vfsRead</code> to properly handle partial and fragmented
reads from <code>io.Reader</code>.</li>
<li>Replace <code>f.Read</code> with <code>io.ReadFull</code> to ensure
the buffer is fully populated, preventing premature
<code>SQLITE_IOERR_SHORT_READ</code> errors on valid mid-stream partial
reads. Unread tail bytes at EOF are now efficiently zero-filled using
the built-in <code>clear</code> function.</li>
<li>See [GitLab merge request <a
href="https://gitlab.com/cznic/sqlite/issues/108">#108</a>](<a
href="https://gitlab.com/cznic/sqlite/-/merge_requests/108">https://gitlab.com/cznic/sqlite/-/merge_requests/108</a>),
thanks Josh Bleecher Snyder!</li>
<li>Refactor internal error formatting to safely handle uninitialized or
closed database pointers.</li>
<li>Prevent a misleading &quot;out of memory&quot; error message when an
operation fails and the underlying SQLite database handle is
<code>NULL</code> (<code>db == 0</code>).</li>
<li>See [GitLab merge request <a
href="https://gitlab.com/cznic/sqlite/issues/109">#109</a>](<a
href="https://gitlab.com/cznic/sqlite/-/merge_requests/109">https://gitlab.com/cznic/sqlite/-/merge_requests/109</a>),
thanks Josh Bleecher Snyder!</li>
</ul>
</li>
<li>
<p>2026-04-03 v1.48.1:</p>
<ul>
<li>Fix memory leaks and double-free vulnerabilities in the
multi-statement query execution path.</li>
<li>Ensure bind-parameter allocations are reliably freed via strict
ownership transfer if an error occurs mid-loop or if multiple statements
bind parameters.</li>
<li>Fix a resource leak where a subsequent statement's error could
orphan a previously generated <code>rows</code> object without closing
it, leaking the prepared statement handle.</li>
<li>See [GitLab merge request <a
href="https://gitlab.com/cznic/sqlite/issues/96">#96</a>](<a
href="https://gitlab.com/cznic/sqlite/-/merge_requests/96">https://gitlab.com/cznic/sqlite/-/merge_requests/96</a>),
thanks Josh Bleecher Snyder!</li>
</ul>
</li>
<li>
<p>2026-03-27 v1.48.0:</p>
<ul>
<li>Add <code>_timezone</code> DSN query parameter to apply IANA
timezones (e.g., &quot;America/New_York&quot;) to both reads and
writes.</li>
<li>Writes will convert <code>time.Time</code> values to the target
timezone before formatting as a string.</li>
<li>Reads will interpret timezone-less strings as being in the target
timezone.</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://gitlab.com/cznic/sqlite/commit/51d1f91256bcb466efed1dd68e0cba740727b64c"><code>51d1f91</code></a>
CHANGELOG.md: document v1.48.1...</li>
<li><a
href="https://gitlab.com/cznic/sqlite/commit/50a8b7f6450f1beb34a8e4e5455c3d70226d5c29"><code>50a8b7f</code></a>
CHANGELOG.md: document v1.48.1</li>
<li><a
href="https://gitlab.com/cznic/sqlite/commit/60500243df654c8ef068a91517de0ec30bc34a44"><code>6050024</code></a>
Merge branch 'multi-stmt-double-free' into 'master'</li>
<li><a
href="https://gitlab.com/cznic/sqlite/commit/ef93ba85ea85f92ab04b4a51ff501dfd4b7e4667"><code>ef93ba8</code></a>
improve memory safety of allocs in stmt.query</li>
<li><a
href="https://gitlab.com/cznic/sqlite/commit/2a97c686c0d08529ca1138200bf6afe3d8dda66b"><code>2a97c68</code></a>
add conn.freeAllocs</li>
<li>See full diff in <a
href="https://gitlab.com/cznic/sqlite/compare/v1.48.0...v1.48.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=modernc.org/sqlite&package-manager=go_modules&previous-version=1.48.0&new-version=1.48.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…/go/adbc (apache#4190)

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from
1.79.3 to 1.80.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/grpc/grpc-go/releases">google.golang.org/grpc's
releases</a>.</em></p>
<blockquote>
<h2>Release 1.80.0</h2>
<h1>Behavior Changes</h1>
<ul>
<li>balancer: log a warning if a balancer is registered with uppercase
letters, as balancer names should be lowercase. In a future release,
balancer names will be treated as case-insensitive; see <a
href="https://redirect.github.com/grpc/grpc-go/issues/5288">#5288</a>
for details. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8837">#8837</a>)</li>
<li>xds: update resource error handling and re-resolution logic (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8907">#8907</a>)
<ul>
<li>Re-resolve all <code>LOGICAL_DNS</code> clusters simultaneously when
re-resolution is requested.</li>
<li>Fail all in-flight RPCs immediately upon receipt of listener or
route resource errors, instead of allowing them to complete.</li>
</ul>
</li>
</ul>
<h1>Bug Fixes</h1>
<ul>
<li>xds: support the LB policy configured in <code>LOGICAL_DNS</code>
cluster resources instead of defaulting to <code>pick_first</code>. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8733">#8733</a>)</li>
<li>credentials/tls: perform per-RPC authority validation against the
leaf certificate instead of the entire peer certificate chain. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8831">#8831</a>)</li>
<li>xds: enabling A76 ring hash endpoint keys no longer causes EDS
resources with invalid proxy metadata to be NACKed when HTTP CONNECT
(gRFC A86) is disabled. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8875">#8875</a>)</li>
<li>xds: validate that the sum of endpoint weights in a locality does
not exceed the maximum <code>uint32</code> value. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8899">#8899</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/RAVEYUS"><code>@​RAVEYUS</code></a></li>
</ul>
</li>
<li>xds: fix incorrect proto field access in the weighted round robin
(WRR) configuration where <code>blackout_period</code> was used instead
of <code>weight_expiration_period</code>. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8915">#8915</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/gregbarasch"><code>@​gregbarasch</code></a></li>
</ul>
</li>
<li>xds/rbac: handle addresses with ports in IP matchers. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8990">#8990</a>)</li>
</ul>
<h1>New Features</h1>
<ul>
<li>ringhash: enable gRFC A76 (endpoint hash keys and request hash
headers) by default. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8922">#8922</a>)</li>
</ul>
<h1>Performance Improvements</h1>
<ul>
<li>credentials/alts: pool write buffers to reduce memory allocations
and usage. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8919">#8919</a>)</li>
<li>grpc: enable the use of pooled write buffers for buffering HTTP/2
frame writes by default. This reduces memory usage when connections are
idle. Use the <a
href="https://pkg.go.dev/google.golang.org/grpc#WithSharedWriteBuffer">WithSharedWriteBuffer</a>
dial option or the <a
href="https://pkg.go.dev/google.golang.org/grpc#SharedWriteBuffer">SharedWriteBuffer</a>
server option to disable this feature. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8957">#8957</a>)</li>
<li>xds/priority: stop caching child LB policies removed from the
configuration. This will help reduce memory and cpu usage when
localities are constantly switching between priorities. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8997">#8997</a>)</li>
<li>mem: add a faster tiered buffer pool; use the experimental <a
href="https://pkg.go.dev/google.golang.org/grpc/mem@master#NewBinaryTieredBufferPool">mem.NewBinaryTieredBufferPool</a>
function to create such pools. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8775">#8775</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/grpc/grpc-go/commit/397e45edaa68f8763773bbaaf539cf7894169cd2"><code>397e45e</code></a>
Change version to 1.80.0 (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8948">#8948</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/64ebf0a600005838970e6ba1eb0a9e46e528ed73"><code>64ebf0a</code></a>
Cherry-pick <a
href="https://redirect.github.com/grpc/grpc-go/issues/8997">#8997</a> to
v1.80.x (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9027">#9027</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/e45ed241865981b6973cdd0dd69571456d570282"><code>e45ed24</code></a>
xds/rbac: add additional handling for addresses with ports (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8990">#8990</a>)
(<a
href="https://redirect.github.com/grpc/grpc-go/issues/9022">#9022</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/c78d26e03e129f5cb357b757037fcded2333b74e"><code>c78d26e</code></a>
Cherry-pick <a
href="https://redirect.github.com/grpc/grpc-go/issues/8957">#8957</a> to
v1.80.x (<a
href="https://redirect.github.com/grpc/grpc-go/issues/9007">#9007</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/bd7cd3c1abbd27fb751275a58886444d52103482"><code>bd7cd3c</code></a>
grpc: enforce strict path checking for incoming requests on the server
(<a
href="https://redirect.github.com/grpc/grpc-go/issues/8987">#8987</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/b6597b3d328c1ed6b003f9a23b942af7148352ca"><code>b6597b3</code></a>
xds/clusterimpl: use xdsConfig for updates and remove redundant fields
from L...</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/1d4fa8a7b772553e82137b059ad4a8f632a1c522"><code>1d4fa8a</code></a>
xds: change cdsbalancer to use update from dependency manager (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8907">#8907</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/8f47d364511c8eb0517b47e1a39f13a1370c6a10"><code>8f47d36</code></a>
attributes: Replace internal map with linked list (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8933">#8933</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/22e1ee8085952b4bdadf2928c187d665f6daff99"><code>22e1ee8</code></a>
xds: add panic recovery in xdsclient resource unmarshalling. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8895">#8895</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/7136e99ee323c26984174eb3cec85c201fef9946"><code>7136e99</code></a>
credentials/alts: Pool write buffers (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8919">#8919</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/grpc/grpc-go/compare/v1.79.3...v1.80.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=google.golang.org/grpc&package-manager=go_modules&previous-version=1.79.3&new-version=1.80.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…6 updates (apache#4188)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Improves the docs for the post-release task to update the Homebrew
packages. It turns out Homebrew has an automation for updating packages
so the release manager should usually only have to check that the PRs
are automatically created and merged.

Closes apache#4184
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…9.0 to 1.97.3 in /go/adbc (apache#4195)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…pache#4197)

Previously, setting CommandTimeout required AdbcCommandTimeoutProperty
to be set first, throwing InvalidOperationException if it was not,
specifically in Snowflake's case.
Now, AdbcCommandTimeoutProperty is nullable and CommandTimeout stores
the value locally when no driver property is configured, only
propagating to the driver via SetOption when the property is set.
Fixed previous PR: apache#2312

Co-authored-by: Dan Liu <liudan7@microsoft.com>
….0 in /go/adbc (apache#4163)

Bumps
[cloud.google.com/go/bigquery](https://github.com/googleapis/google-cloud-go)
from 1.74.0 to 1.75.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/googleapis/google-cloud-go/commit/9cde8abdebc891178d811539af9d165b85993d1c"><code>9cde8ab</code></a>
chore(main): release spanner 1.75.0 (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/11551">#11551</a>)</li>
<li><a
href="https://github.com/googleapis/google-cloud-go/commit/d7671ec5401cf2afee949a506a11c251e9f66d64"><code>d7671ec</code></a>
feat(spanner): make randIDForProcess hexadecimal in
x-goog-spanner-request-id...</li>
<li><a
href="https://github.com/googleapis/google-cloud-go/commit/a8f16ef102068ad793b4aa8c6cf8c8f0ca0c2d03"><code>a8f16ef</code></a>
fix(spanner): inject &quot;x-goog-spanner-request-id&quot; into outgoing
client context...</li>
<li><a
href="https://github.com/googleapis/google-cloud-go/commit/59fe58aba61abf69bfb7549c0a03b21bdb4b8b2f"><code>59fe58a</code></a>
docs(monitoring/apiv3): remove extra fenced code block markers (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/11535">#11535</a>)</li>
<li><a
href="https://github.com/googleapis/google-cloud-go/commit/bfb6c05baed4e9a22a84d600700e5954cc5fc55a"><code>bfb6c05</code></a>
chore(main): release pubsub 1.47.0 (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/11547">#11547</a>)</li>
<li><a
href="https://github.com/googleapis/google-cloud-go/commit/46d6ed475e6ae6b96f3e11e17496fd75fd8ea7c4"><code>46d6ed4</code></a>
feat(pubsub): support new forms of topic ingestion (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/11537">#11537</a>)</li>
<li><a
href="https://github.com/googleapis/google-cloud-go/commit/0dd7d3d62e54c6c3bca395fcca8450ad3347a5a0"><code>0dd7d3d</code></a>
feat(storage): wrap NotFound errors for buckets and objects (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/11519">#11519</a>)</li>
<li><a
href="https://github.com/googleapis/google-cloud-go/commit/8fc5a87a1a06ffb24da9f93abd15644e8f2647ee"><code>8fc5a87</code></a>
chore: bump cloud.google.com/go dep (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/11541">#11541</a>)</li>
<li><a
href="https://github.com/googleapis/google-cloud-go/commit/1a214c9742b7e394874c6a5fe1177994f19c68bd"><code>1a214c9</code></a>
chore: release main (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/11467">#11467</a>)</li>
<li><a
href="https://github.com/googleapis/google-cloud-go/commit/24b3a20f14b6b220713df35177152462ad238a2a"><code>24b3a20</code></a>
chore(main): release 0.118.1 (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/11539">#11539</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/googleapis/google-cloud-go/compare/spanner/v1.74.0...spanner/v1.75.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
As of 253cf51, the driver is tested against 14-18 and I think this bit
of documentation needed to be updated.
…apache#4201)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…tion (apache#4208)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
apache#4211)

Add `arrow.adbc.driver.jni.library.path` JVM system property to load the
JNI native library from a custom directory. Falls back to JAR extraction
when the property is unset or the file is not found.

Consistent with [arrow-java's JniLoader
approach](https://github.com/apache/arrow-java/blob/0d55ba78aeed3e6b28e3d65ced37c360f5e0ed4e/c/src/main/java/org/apache/arrow/c/jni/JniLoader.java#L80-L92).
I just make it a bit more testable.

Closes apache#4207
…he#4193)

Bumps the actions group with 3 updates in the / directory:
[astral-sh/setup-uv](https://github.com/astral-sh/setup-uv),
[ruby/setup-ruby](https://github.com/ruby/setup-ruby) and
[docker/login-action](https://github.com/docker/login-action).

Updates `astral-sh/setup-uv` from 7.6.0 to 8.0.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/astral-sh/setup-uv/releases">astral-sh/setup-uv's
releases</a>.</em></p>
<blockquote>
<h2>v8.0.0 🌈 Immutable releases and secure tags</h2>
<h1>This is the first immutable release of <code>setup-uv</code> 🥳</h1>
<p>All future releases are also immutable, if you want to know more
about what this means checkout <a
href="https://docs.github.com/en/code-security/concepts/supply-chain-security/immutable-releases">the
docs</a>.</p>
<p>This release also has two breaking changes</p>
<h2>New format for <code>manifest-file</code></h2>
<p>The previously deprecated way of defining a custom version manifest
to control which <code>uv</code> versions are available and where to
download them from got removed. The functionality is still there but you
have to use the <a
href="https://github.com/astral-sh/setup-uv/blob/main/docs/customization.md#format">new
format</a>.</p>
<h2>No more major and minor tags</h2>
<p>To increase <strong>security</strong> even more we will <strong>stop
publishing minor tags</strong>. You won't be able to use
<code>@v8</code> or <code>@v8.0</code> any longer. We do this because
pinning to major releases opens up users to supply chain attacks like
what happened to <a
href="https://unit42.paloaltonetworks.com/github-actions-supply-chain-attack/">tj-actions</a>.</p>
<blockquote>
<p>[!TIP]
Use the immutable tag as a version
<code>astral-sh/setup-uv@v8.0.0</code>
Or even better the githash
<code>astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57</code></p>
</blockquote>
<h2>🚨 Breaking changes</h2>
<ul>
<li>Remove update-major-minor-tags workflow <a
href="https://github.com/eifinger"><code>@​eifinger</code></a> (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/826">#826</a>)</li>
<li>Remove deprecrated custom manifest <a
href="https://github.com/eifinger"><code>@​eifinger</code></a> (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/813">#813</a>)</li>
</ul>
<h2>🧰 Maintenance</h2>
<ul>
<li>Shortcircuit latest version from manifest <a
href="https://github.com/eifinger"><code>@​eifinger</code></a> (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/828">#828</a>)</li>
<li>Simplify inputs.ts <a
href="https://github.com/eifinger"><code>@​eifinger</code></a> (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/827">#827</a>)</li>
<li>Bump release-drafter to v7.1.1 <a
href="https://github.com/eifinger"><code>@​eifinger</code></a> (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/825">#825</a>)</li>
<li>Refactor inputs <a
href="https://github.com/eifinger"><code>@​eifinger</code></a> (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/823">#823</a>)</li>
<li>Replace inline compile args with tsconfig <a
href="https://github.com/eifinger"><code>@​eifinger</code></a> (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/824">#824</a>)</li>
<li>chore: update known checksums for 0.11.2 @<a
href="https://github.com/apps/github-actions">github-actions[bot]</a>
(<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/821">#821</a>)</li>
<li>chore: update known checksums for 0.11.1 @<a
href="https://github.com/apps/github-actions">github-actions[bot]</a>
(<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/817">#817</a>)</li>
<li>chore: update known checksums for 0.11.0 @<a
href="https://github.com/apps/github-actions">github-actions[bot]</a>
(<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/815">#815</a>)</li>
<li>Fix latest-version workflow check <a
href="https://github.com/eifinger"><code>@​eifinger</code></a> (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/812">#812</a>)</li>
<li>chore: update known checksums for 0.10.11/0.10.12 @<a
href="https://github.com/apps/github-actions">github-actions[bot]</a>
(<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/811">#811</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/astral-sh/setup-uv/commit/cec208311dfd045dd5311c1add060b2062131d57"><code>cec2083</code></a>
Shortcircuit latest version from manifest (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/828">#828</a>)</li>
<li><a
href="https://github.com/astral-sh/setup-uv/commit/4dd8ab45206a76f8c1dfe399fa88df10a7264f27"><code>4dd8ab4</code></a>
Simplify inputs.ts (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/827">#827</a>)</li>
<li><a
href="https://github.com/astral-sh/setup-uv/commit/7fdbe7cf0c8ef50cfd0878eed7b5180abc6b53c7"><code>7fdbe7c</code></a>
Remove update-major-minor-tags workflow (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/826">#826</a>)</li>
<li><a
href="https://github.com/astral-sh/setup-uv/commit/485abd05e5c74a247f0a309e333d2433ab9a353a"><code>485abd0</code></a>
Bump release-drafter to v7.1.1 (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/825">#825</a>)</li>
<li><a
href="https://github.com/astral-sh/setup-uv/commit/f82eb19c06057c455674b2602e0139fd906f1428"><code>f82eb19</code></a>
Refactor inputs (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/823">#823</a>)</li>
<li><a
href="https://github.com/astral-sh/setup-uv/commit/868d1f74d9d862d7b40219546bfe35299c6dd452"><code>868d1f7</code></a>
Replace inline compile args with tsconfig (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/824">#824</a>)</li>
<li><a
href="https://github.com/astral-sh/setup-uv/commit/447e6d02b15d65b3247cce2d6019f11957285d11"><code>447e6d0</code></a>
chore: update known checksums for 0.11.2 (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/821">#821</a>)</li>
<li><a
href="https://github.com/astral-sh/setup-uv/commit/5c62c5926145985eec91f09e2e0a75f40daed929"><code>5c62c59</code></a>
chore: update known checksums for 0.11.1 (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/817">#817</a>)</li>
<li><a
href="https://github.com/astral-sh/setup-uv/commit/e1a7373adb857afd2a70b971e8ebdacc64ed27d0"><code>e1a7373</code></a>
chore: update known checksums for 0.11.0 (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/815">#815</a>)</li>
<li><a
href="https://github.com/astral-sh/setup-uv/commit/89709315bb3bd4bf0f4b1db4b710e99009087ab5"><code>8970931</code></a>
Remove deprecrated custom manifest (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/813">#813</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/astral-sh/setup-uv/compare/37802adc94f370d6bfd71619e3f0bf239e1f3b78...cec208311dfd045dd5311c1add060b2062131d57">compare
view</a></li>
</ul>
</details>
<br />

Updates `ruby/setup-ruby` from 1.299.0 to 1.300.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/ruby/setup-ruby/releases">ruby/setup-ruby's
releases</a>.</em></p>
<blockquote>
<h2>v1.300.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Refactor matrix script by <a
href="https://github.com/ntkme"><code>@​ntkme</code></a> in <a
href="https://redirect.github.com/ruby/setup-ruby/pull/897">ruby/setup-ruby#897</a></li>
<li>Add jruby-10.0.5.0 by <a
href="https://github.com/ruby-builder-bot"><code>@​ruby-builder-bot</code></a>
in <a
href="https://redirect.github.com/ruby/setup-ruby/pull/900">ruby/setup-ruby#900</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/ruby/setup-ruby/compare/v1.299.0...v1.300.0">https://github.com/ruby/setup-ruby/compare/v1.299.0...v1.300.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/ruby/setup-ruby/commit/e65c17d16e57e481586a6a5a0282698790062f92"><code>e65c17d</code></a>
Add jruby-10.0.5.0</li>
<li><a
href="https://github.com/ruby/setup-ruby/commit/ba696adf55506673e48342a66e30f1f53cadeae0"><code>ba696ad</code></a>
Refactor matrix script</li>
<li><a
href="https://github.com/ruby/setup-ruby/commit/2327de0bdc11657e6bed81a43cae73251edb97a0"><code>2327de0</code></a>
TruffleRuby 34+ does not support macOS Intel</li>
<li>See full diff in <a
href="https://github.com/ruby/setup-ruby/compare/3ff19f5e2baf30647122352b96108b1fbe250c64...e65c17d16e57e481586a6a5a0282698790062f92">compare
view</a></li>
</ul>
</details>
<br />

Updates `docker/login-action` from 4.0.0 to 4.1.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/login-action/releases">docker/login-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.1.0</h2>
<ul>
<li>Fix scoped Docker Hub cleanup path when registry is omitted by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/login-action/pull/945">docker/login-action#945</a></li>
<li>Bump <code>@​aws-sdk/client-ecr</code> and
<code>@​aws-sdk/client-ecr-public</code> to 3.1020.0 in <a
href="https://redirect.github.com/docker/login-action/pull/930">docker/login-action#930</a></li>
<li>Bump <code>@​docker/actions-toolkit</code> from 0.77.0 to 0.86.0 in
<a
href="https://redirect.github.com/docker/login-action/pull/932">docker/login-action#932</a>
<a
href="https://redirect.github.com/docker/login-action/pull/936">docker/login-action#936</a></li>
<li>Bump brace-expansion from 1.1.12 to 1.1.13 in <a
href="https://redirect.github.com/docker/login-action/pull/952">docker/login-action#952</a></li>
<li>Bump fast-xml-parser from 5.3.4 to 5.3.6 in <a
href="https://redirect.github.com/docker/login-action/pull/942">docker/login-action#942</a></li>
<li>Bump flatted from 3.3.3 to 3.4.2 in <a
href="https://redirect.github.com/docker/login-action/pull/944">docker/login-action#944</a></li>
<li>Bump glob from 10.3.12 to 10.5.0 in <a
href="https://redirect.github.com/docker/login-action/pull/940">docker/login-action#940</a></li>
<li>Bump handlebars from 4.7.8 to 4.7.9 in <a
href="https://redirect.github.com/docker/login-action/pull/949">docker/login-action#949</a></li>
<li>Bump http-proxy-agent and https-proxy-agent to 8.0.0 in <a
href="https://redirect.github.com/docker/login-action/pull/937">docker/login-action#937</a></li>
<li>Bump lodash from 4.17.23 to 4.18.1 in <a
href="https://redirect.github.com/docker/login-action/pull/958">docker/login-action#958</a></li>
<li>Bump minimatch from 3.1.2 to 3.1.5 in <a
href="https://redirect.github.com/docker/login-action/pull/941">docker/login-action#941</a></li>
<li>Bump picomatch from 4.0.3 to 4.0.4 in <a
href="https://redirect.github.com/docker/login-action/pull/948">docker/login-action#948</a></li>
<li>Bump undici from 6.23.0 to 6.24.1 in <a
href="https://redirect.github.com/docker/login-action/pull/938">docker/login-action#938</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/login-action/compare/v4.0.0...v4.1.0">https://github.com/docker/login-action/compare/v4.0.0...v4.1.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/docker/login-action/commit/4907a6ddec9925e35a0a9e82d7399ccc52663121"><code>4907a6d</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/930">#930</a>
from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...</li>
<li><a
href="https://github.com/docker/login-action/commit/1e233e691a8881d7f35ca7c2d5dfaaed80b39636"><code>1e233e6</code></a>
chore: update generated content</li>
<li><a
href="https://github.com/docker/login-action/commit/6c24ead68057f18c30c808a431f0b85dc25663cb"><code>6c24ead</code></a>
build(deps): bump the aws-sdk-dependencies group with 2 updates</li>
<li><a
href="https://github.com/docker/login-action/commit/ee034d70944e3546349cd24295914f139342f1e6"><code>ee034d7</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/958">#958</a>
from docker/dependabot/npm_and_yarn/lodash-4.18.1</li>
<li><a
href="https://github.com/docker/login-action/commit/1527209db9734bd2352a2dc1a63d79c9aa5358bb"><code>1527209</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/937">#937</a>
from docker/dependabot/npm_and_yarn/proxy-agent-depen...</li>
<li><a
href="https://github.com/docker/login-action/commit/d39362aba4d72f8d9d93e0962119840690133e1b"><code>d39362a</code></a>
build(deps): bump lodash from 4.17.23 to 4.18.1</li>
<li><a
href="https://github.com/docker/login-action/commit/a6f092b568105cbb6d9deb7e55e0a4c5c1025fce"><code>a6f092b</code></a>
chore: update generated content</li>
<li><a
href="https://github.com/docker/login-action/commit/60953f0bed2120ec69659d271fe18d34bc069779"><code>60953f0</code></a>
build(deps): bump the proxy-agent-dependencies group with 2 updates</li>
<li><a
href="https://github.com/docker/login-action/commit/62c688590fb4ab6c6e89a217ced0a7b2ddcf1340"><code>62c6885</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/936">#936</a>
from docker/dependabot/npm_and_yarn/docker/actions-to...</li>
<li><a
href="https://github.com/docker/login-action/commit/102c0e672992d2e992c89b6f4808d65a353b5a1a"><code>102c0e6</code></a>
chore: update generated content</li>
<li>Additional commits viewable in <a
href="https://github.com/docker/login-action/compare/b45d80f862d83dbcd57f89517bcf500b2ab88fb2...4907a6ddec9925e35a0a9e82d7399ccc52663121">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
….0 in /go/adbc (apache#4216)

Bumps
[cloud.google.com/go/bigquery](https://github.com/googleapis/google-cloud-go)
from 1.75.0 to 1.76.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/googleapis/google-cloud-go/commit/243da70769b0ad6f401d11bfa637530823072eac"><code>243da70</code></a>
chore(main): release spanner 1.76.0 (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/11594">#11594</a>)</li>
<li><a
href="https://github.com/googleapis/google-cloud-go/commit/0ee82ff4ff385bc632b5cc9630e7e6c4e25a438c"><code>0ee82ff</code></a>
perf(spanner): grab debug stack outside of lock (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/11587">#11587</a>)</li>
<li><a
href="https://github.com/googleapis/google-cloud-go/commit/4b40201c5cfa223f3e5c039e18a72d74168f7ae9"><code>4b40201</code></a>
feat(spanner): support multiplexed session for read-write transactions
&amp; part...</li>
<li><a
href="https://github.com/googleapis/google-cloud-go/commit/f2d581c90e64dd7589b94178750e53f9edce661f"><code>f2d581c</code></a>
chore(main): release auth 0.15.0 (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/11613">#11613</a>)</li>
<li><a
href="https://github.com/googleapis/google-cloud-go/commit/0d52ebd0ba85da326a3b438521c90f3ca2a8addc"><code>0d52ebd</code></a>
chore(all): update deps (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/11601">#11601</a>)</li>
<li><a
href="https://github.com/googleapis/google-cloud-go/commit/0e608bb5ac3d694c8ad36ca4340071d3a2c78699"><code>0e608bb</code></a>
feat(auth): Add hard-bound token request to compute token provider. (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/11588">#11588</a>)</li>
<li><a
href="https://github.com/googleapis/google-cloud-go/commit/798be26c29ea264de6098706a2760033eadddc6e"><code>798be26</code></a>
chore(all): update Go to 1.24 (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/11612">#11612</a>)</li>
<li><a
href="https://github.com/googleapis/google-cloud-go/commit/bd0aec1ce63ead39f02ab43b403ebac740e979b7"><code>bd0aec1</code></a>
feat(dlp): discovery of Vertex AI datasets (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/11605">#11605</a>)</li>
<li><a
href="https://github.com/googleapis/google-cloud-go/commit/c08d34776d398a79f6962a26e8e2c75bc4958e2b"><code>c08d347</code></a>
feat(chat): Add DeletionType.SPACE_MEMBER. This is returned when a
message se...</li>
<li><a
href="https://github.com/googleapis/google-cloud-go/commit/535f52e4a698b80b8c25a5f43dc8d6ffb3c913a5"><code>535f52e</code></a>
refactor(auth): refactor GetGRPCTransportCredsAndEndpoint return type to
stru...</li>
<li>Additional commits viewable in <a
href="https://github.com/googleapis/google-cloud-go/compare/spanner/v1.75.0...spanner/v1.76.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=cloud.google.com/go/bigquery&package-manager=go_modules&previous-version=1.75.0&new-version=1.76.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…o 1.19.1 in /go/adbc (apache#4220)

Bumps
[github.com/snowflakedb/gosnowflake](https://github.com/snowflakedb/gosnowflake)
from 1.19.0 to 1.19.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/snowflakedb/gosnowflake/releases">github.com/snowflakedb/gosnowflake's
releases</a>.</em></p>
<blockquote>
<h2>Release</h2>
<ul>
<li>Please check Snowflake <a
href="https://docs.snowflake.com/en/release-notes/clients-drivers/golang">Go
Snowflake for release notes</a>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/snowflakedb/gosnowflake/blob/v1.19.1/CHANGELOG.md">github.com/snowflakedb/gosnowflake's
changelog</a>.</em></p>
<blockquote>
<h2>1.19.1</h2>
<p>New features:</p>
<ul>
<li>Dropped support for Go 1.23 and added support for Go 1.26.</li>
</ul>
<p>Internal changes:</p>
<ul>
<li>Added libc family, version and dynamic linking marker to client
environment telemetry.</li>
</ul>
<p>Bug fixes:</p>
<ul>
<li>Fixed minicore crash (SIGFPE) on fully statically linked Linux
binaries by detecting static linking via ELF PT_INTERP inspection and
skipping
<code>dlopen</code><code>snowflakedb/gosnowflake#1721</code></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/snowflakedb/gosnowflake/commit/c543aeae24b17d9723d65d9f364d2f6f483544df"><code>c543aea</code></a>
SNOW-3190331 Bumped patch version 1.9.0 -&gt; 1.9.1 (<a
href="https://redirect.github.com/snowflakedb/gosnowflake/issues/1770">#1770</a>)</li>
<li><a
href="https://github.com/snowflakedb/gosnowflake/commit/3cadadf09c870721ddae1616632b4ffaf02d6394"><code>3cadadf</code></a>
SNOW-3247679 Implement libc family and version detection (<a
href="https://redirect.github.com/snowflakedb/gosnowflake/issues/1753">#1753</a>)</li>
<li><a
href="https://github.com/snowflakedb/gosnowflake/commit/08baf1f22add4a9cf57d3f9eb22fdc23b0fe79fc"><code>08baf1f</code></a>
NO-SNOW Update v1-backports to fresh CI builds definition (<a
href="https://redirect.github.com/snowflakedb/gosnowflake/issues/1759">#1759</a>)</li>
<li><a
href="https://github.com/snowflakedb/gosnowflake/commit/69a47a865d53f4cc8b554341c58ec8a52ab67853"><code>69a47a8</code></a>
NO-SNOW Run CI for all pushes including v1-backports (<a
href="https://redirect.github.com/snowflakedb/gosnowflake/issues/1754">#1754</a>)</li>
<li><a
href="https://github.com/snowflakedb/gosnowflake/commit/533c761a31f45d8fc6422d668bbe320e9667a932"><code>533c761</code></a>
NO-SNOW Remove decfloat parameters from tests (<a
href="https://redirect.github.com/snowflakedb/gosnowflake/issues/1758">#1758</a>)</li>
<li><a
href="https://github.com/snowflakedb/gosnowflake/commit/78aab44615b395a23387bee284bc91f4a970efc8"><code>78aab44</code></a>
NO-SNOW Refresh test certificates (<a
href="https://redirect.github.com/snowflakedb/gosnowflake/issues/1755">#1755</a>)</li>
<li><a
href="https://github.com/snowflakedb/gosnowflake/commit/914dc109f510be08ae648af6d22e428a60a940e7"><code>914dc10</code></a>
SNOW-3097839 minicore: detect static linking via ELF inspection to
prevent SI...</li>
<li>See full diff in <a
href="https://github.com/snowflakedb/gosnowflake/compare/v1.19.0...v1.19.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/snowflakedb/gosnowflake&package-manager=go_modules&previous-version=1.19.0&new-version=1.19.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…pache#4214)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…#4213)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
… /go/adbc (apache#4219)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…#4217)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
fornwall and others added 12 commits July 21, 2026 17:28
…e#4510)

Signed-off-by: Fredrik Fornwall <fredrik@fornwall.net>
…apache#4552)

This PR updates the index page in the Ruby docs to fix a few minor
issues. The main issue is that the code examples didn't use the
block-based methods which previously didn't work but do now. I also
removed the dropdown relating to installing glib separately just to
simplify the page. The structure of the Ruby index page now matches the
Python quickstart pretty well.
Updated [Apache.Arrow](https://github.com/apache/arrow) from 22.1.0 to
23.0.0.

<details>
<summary>Release notes</summary>

_Sourced from [Apache.Arrow's
releases](https://github.com/apache/arrow/releases)._

## 23.0.0

Release Notes URL: https://arrow.apache.org/release/23.0.0.html

## 23.0.0-rc2

Release Notes: Release Candidate: 23.0.0 RC2

Commits viewable in [compare
view](https://github.com/apache/arrow/commits/apache-arrow-23.0.0).
</details>

[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=Apache.Arrow&package-manager=nuget&previous-version=22.1.0&new-version=23.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

> **Note**
> Automatic rebases have been disabled on this pull request as it has
been open for over 30 days.

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
https://github.com/apache/arrow-adbc/actions/runs/29970729853/job/89092001443

```
  Last metadata expiration check: 0:01:05 ago on Thu Jul 23 01:08:48 2026.
  Error: 
   Problem: package adbc-arrow-glib-devel-24-1.el9.x86_64 from apache-arrow-almalinux requires libadbc-arrow-glib.so.1()(64bit), but none of the providers can be installed
    - package adbc-arrow-glib-devel-24-1.el9.x86_64 from apache-arrow-almalinux requires adbc-arrow-glib1-libs = 24-1.el9, but none of the providers can be installed
    - conflicting requests
    - nothing provides libarrow-glib.so.2500()(64bit) needed by adbc-arrow-glib1-libs-24-1.el9.x86_64 from apache-arrow-almalinux
  (try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)
```

I'm not sure how this worked before, but this changes the verification
script to add the ADBC Yum repo as an additional repo instead of
overwriting the Arrow one.

Generated-by: GPT 5.6 Sol <codex@openai.com>
Conflict resolutions:
- Every release-version file (CHANGELOG, CMake/meson, packaging, csharp,
  docs, glib, java poms, python _static_version, r DESCRIPTION, ruby, rust
  nightly toolchain): take upstream 24. The conflicts were the 23 release
  bumps on the old line against 24's; no Spice patch touches them.
  r/adbcbigquery and r/adbcsnowflake DESCRIPTION: deleted upstream, removed.
- rust/Cargo.toml: take upstream's 0.24.0 crate versions. Keep the Spice
  single-major arrow pin ("require arrow N so a consumer cannot split the
  crate graph") moved to arrow 59: `>=59.0.0, <60` instead of upstream's
  `>=58, <60`.

The statement-cancel patch (rust/driver_manager, rust/ffi) merged without
conflicts; tests/statement_cancel.rs passes.
Copilot AI balanced review requested due to automatic review settings September 30, 2026 21:56
Comment thread ci/linux-packages/Gemfile.lock Fixed
Comment thread c/driver/postgresql/validation/uv.lock Fixed
Comment thread go/adbc/go.mod Fixed
Comment thread java/pom.xml Fixed
Comment thread go/adbc/go.mod Fixed
Comment thread java/pom.xml Fixed
Comment thread c/driver/postgresql/validation/uv.lock Fixed
Comment thread go/adbc/go.mod Fixed
Comment thread go/adbc/go.mod Fixed

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

…th ptr::dangling_mut

clippy::manual_dangling_ptr (stable 1.98) rejects `1 as *mut c_void`, failing the
Rust workflow's clippy step on every OS.
@krinart

krinart commented Oct 1, 2026

Copy link
Copy Markdown
Author

CI note: our changes touch only 4 files under rust/. The Rust jobs fail on a clippy manual creation of a dangling pointer in a Spice test; #8 fixes it and all 6 Rust jobs pass there. The C# (NU1902), JS (npm ci lockfile), pre-commit, clang-tidy, DuckDB integration and Python failures are identical on unmodified upstream ADBC 24 (spiceai-maint-24, run 36605828057).

test(rust/driver_manager): build the fake statement's private data with ptr::dangling_mut
Copilot AI balanced review requested due to automatic review settings October 1, 2026 18:18

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🔵 Needs a closer look

The 641-file, cross-language upstream merge requires final human validation despite the identified issue being minor.

Review effort: Balanced
Findings: 1 Low severity

Open (1)

Comment thread docs/source/java/driver_manager.rst
@lukekim

lukekim commented Oct 3, 2026 •

Copy link
Copy Markdown

Addressed #7 (review) at 674d6184f8. No code change: nothing in it needs one.

Copilot's finding: "though JNI" typo (docs/source/java/driver_manager.rst:27, thread r4158932565). Declined for this PR. The typo is real, but the file is upstream's, unchanged: git diff --quiet apache-arrow-adbc-24 674d6184f8 -- docs/source/java/driver_manager.rst exits 0, and upstream main still has the same line 27. The whole branch differs from the apache-arrow-adbc-24 tag (a3f81c6f) in only these 4 Spice files (git diff --stat apache-arrow-adbc-24 674d6184f8):

 rust/Cargo.toml                               |   8 +-
 rust/driver_manager/src/lib.rs                | 190 +++++++++++-----
 rust/driver_manager/tests/statement_cancel.rs | 303 ++++++++++++++++++++++++++
 rust/ffi/src/options.rs                       |  30 +++
 4 files changed, 471 insertions(+), 60 deletions(-)

A doc edit made only in the fork would cause a conflict at the next upstream sync, so this fix belongs upstream.

Headline: "requires final human validation". Two people have approved this HEAD (674d6184f8): bjchambers (#7 (review)) and sgrebnov (#7 (review)).

CI. Addressed the CI note in #7 (comment): I re-checked each claim against the logs. The branch rules don't require any of the 20 failing checks:

  • Rust: all 6 jobs pass on this HEAD (run 36905854068). That includes test(rust/driver_manager): build the fake statement's private data with ptr::dangling_mut #8's clippy fix.
  • Node.js binding vs. the Spice delta: the Node.js jobs never got far enough to compile it (next bullet), so I compiled it locally. javascript/ uses ../rust/driver_manager by path, so cargo check --manifest-path javascript/Cargo.toml --locked at 674d6184 type-checks adbc_driver_manager_node against the modified adbc_driver_manager and adbc_ffi. It exited 0 (cargo 1.98.0, macOS host only, not the 5 napi targets).
  • Build Node.js ×5 and Lint (run 36905861841): npm ci stops before any Rust compiles, with `npm ci` can only install packages when your package.json and package-lock.json or npm-shrinkwrap.json are in sync and Invalid: lock file's @apache-arrow/adbc-driver-manager-darwin-arm64@ does not satisfy @apache-arrow/adbc-driver-manager-darwin-arm64@0.24.0. I got the same failure locally on the unmodified tag: npm ci --ignore-scripts --dry-run in javascript/ at a3f81c6f exits 1 with the same 5 Invalid: lines (npm 11.19.0). javascript/ is identical between the tag and this HEAD.
  • C# ×10 (run 36905861840): every job fails with error NU1902: Warning As Error: Package 'Microsoft.Build.Tasks.Git' 10.0.301 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-23fw-v26w-5fgq. That advisory was published 2026-09-08. Upstream's C# run on this same tag commit passed on 2026-07-24, before it existed (apache/arrow-adbc run 30099453886). csharp/ is identical to the tag.
  • pre-commit (run 36905861842): end-of-file-fixer (Fixing javascript/npm/*/package.json, 5 files) and dotnet-format fail. Both fail the same way on unmodified upstream ADBC 24: spiceai-maint-24 is at a3f81c6f, and its run 36605828057 shows the same two hooks and the same 5 files.
  • check PR and Process: upstream's dev/adbc_dev/title_check.py rejects the PR title with Title is invalid: - Format is incorrect, see https://www.conventionalcommits.org/en/v1.0.0/. A Conventional Commits title, such as chore: merge upstream ADBC 24 into spiceai-24, would turn both green. I left the title alone because it matches the sibling sync PRs.

License-compliance alerts: these need a license-policy decision, not a code change. The 6 open github-license-compliance threads are now the only unresolved threads on this PR. spiceai-24's rules require both thread resolution and license-compliance scanning. The alerts come from dependencies upstream ADBC 24 added. go/adbc/go.mod, java/pom.xml and c/driver/postgresql/validation/uv.lock are identical to the tag (git diff --quiet apache-arrow-adbc-24 674d6184f8 -- <file> exits 0 for each). The dependency-review diff (GET /repos/spiceai/arrow-adbc/dependency-graph/compare/34a465e97f...674d6184f8) lists these added packages with each alert's license expression:

Alert Manifest Detected license Added package(s) with that license
3 go/adbc/go.mod LicenseRef-github-NOASSERTION modernc.org/libc@1.73.4
5, 8 go/adbc/go.mod BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang golang.org/x/sync@0.22.0, tools@0.48.0, mod@0.38.0, net@0.57.0, sys@0.47.0, text@0.40.0
4 java/pom.xml LicenseRef-bad-non-standard org.junit:junit-bom@5.14.4
6 java/pom.xml none detected org.apache.arrow:arrow-bom@19.0.0
7 c/driver/postgresql/validation/uv.lock GPL-3.0 AND GPL-3.0-only plpygis@0.6.1

None of these manifests belongs to the Rust crates that spiceai/spiceai#14612 pins (adbc_core, adbc_driver_manager, adbc_ffi). The bot itself resolved 3 of this PR's 9 license threads (alerts 1, 2 and 9), as it did for every license thread on spiceai/datafusion#243 before that PR merged. These 6 are waiting on someone with the license-policy role to allow the packages or grant exceptions.

Not checked: the alert pages themselves, because there's no API for them. The table matches each alert's license expression against the dependency-review diff, so alerts 5 and 8 can't be pinned to one specific golang.org/x module.

@lukekim lukekim changed the title Merge upstream ADBC 24 into spiceai-24 chore: merge upstream ADBC 24 into spiceai-24 Oct 3, 2026
@krinart
krinart merged commit 6e4119a into spiceai-24 Oct 3, 2026
13 of 36 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.