Hauser d4d416ed47 fix(deps): upgrade russh and replace vulnerable zstd codecs (#8969) ...

* chore(deps): upgrade russh to 0.65.0 and refresh crates

Run two cargo update and cargo upgrade rounds from origin/main.
Adapt SFTP public-key callbacks to PublicKeyOffer and VerifiedPublicKey,
preserving explicit rejection and password-only authentication.
Cover the rejection policy with a pinned-host-key SSH handshake test.
Refresh Arrow, Parquet, Brotli, ZIP, and compatible dependencies.

Co-Authored-By: heihutu <heihutu@gmail.com>
Co-Authored-By: zhi22915 <qiuzgang@gmail.com>

* fix(deps): route legacy zstd consumers to fixed codecs

Replace the old registry implementation with a private version-constraint
adapter backed only by zstd 0.14.3 and zstd-safe 8.2.0. Preserve legacy
features and Avro, Arrow IPC, Parquet, and Kafka formats.
Cover abandoned contexts, legacy decode errors, seekable bounds, stored
frames, consumer interoperability, and resolved implementation versions.
Record the adapter removal condition in the compatibility register.

Co-Authored-By: heihutu <heihutu@gmail.com>
Co-Authored-By: zhi22915 <qiuzgang@gmail.com>

---------

Co-authored-by: heihutu <heihutu@gmail.com>
Co-authored-by: zhi22915 <qiuzgang@gmail.com>

2026-10-27 02:05:58 +08:00

..

consumer_compat.rs

fix(deps): upgrade russh and replace vulnerable zstd codecs (#8969)

2026-10-27 02:05:58 +08:00

dependency_graph.rs

fix(deps): upgrade russh and replace vulnerable zstd codecs (#8969)

2026-10-27 02:05:58 +08:00

security.rs

fix(deps): upgrade russh and replace vulnerable zstd codecs (#8969)

2026-10-27 02:05:58 +08:00