Repository navigation
fix: test against Vector 0.60.0 and follow vrl 0.37 - #55
Merged
Merged
Conversation
The Vector auto-update bump failed because main was already red on cargo audit and cargo deny (zstd advisories), and vrl 0.37 changed two enums the bindings match on. - Test image 0.59.0 -> 0.60.0-debian, vrl lock to 0.37.0, examples corpus regenerated against the same vrl rev - Handle vrl's new Value::String and Terminate::Interrupted. A condition built by sha1() or md5() was rejected by enrichment lookups before - Ignore the 14 zstd/zstd-safe/zstd-sys advisories and the block-buffer one in deny.toml, each with its reachability. The fix needs zstd 0.14, which vrl's zstd = "0.13" requirement excludes - Take actions/setup-python 7.1.0 and astral-sh/setup-uv 10.3.2
This was referenced Oct 27, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Closes #54. Folds in #52 and #53.
Main was red on cargo audit and cargo deny before the Vector bump ran, so the daily auto-update could never get green.
Value::StringandTerminate::Interrupted. The bindings did not match either, so the test build failed. Enrichment lookups also rejected a condition built bysha1()ormd5(), now covered by a test.vrl_examples.jsonregenerated against the same vrl rev as the lock. The old copy failedto_unix_timestampnanoseconds, which is fallible in 0.37.zstd advisories (RUSTSEC-2026-0391, 0395-0406, 0410):
zstd = "0.13", so there is no bump from here.zstd::decode_allandzstd::encode_all, each on a fresh context, with the seekable, experimental, zstdmt and legacy features off.deny.tomlcarries its own reachability line. Drop them when vrl moves to zstd 0.14.block-buffer (GHSA-qwgh-2vcv-g2f7): needs a caught panic in the compress callback of a reused buffer. The SHA-1 and AES block functions do not panic and each hasher is dropped per call.
Checked locally:
make checkexit 0 (cargo audit, cargo deny, osv-scanner, clippy, nextest, pytest 1051 passed).