Skip to content

[pull] main from apache:main#71

Merged
pull[bot] merged 15 commits intoburaksenn:mainfrom
apache:main
Mar 31, 2026
Merged

[pull] main from apache:main#71
pull[bot] merged 15 commits intoburaksenn:mainfrom
apache:main

Conversation

@pull
Copy link
Copy Markdown

@pull pull bot commented Mar 31, 2026

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

erenavsarogullari and others added 15 commits March 31, 2026 13:14
## Which issue does this PR close?
- Closes #21244.

## Rationale for this change
`datafusion.catalog/execution/optimizer/explain/sql_parser/format.*` and
`datafusion.runtime.*` configurations can be set by using `SET` Command.
Also, they can be reset to their default value by using `RESET` Command.
SET command has documentation but RESET does not have so this PR aims to
add RESET Command documentation like SET Command.

## What changes are included in this PR?
RESET Command Documentation is being added.

## Are these changes tested?
Not required.

## Are there any user-facing changes?
Yes
## Which issue does this PR close?

- Closes #21205.
- Closes #21206.
- Closes #20315.

## Rationale for this change

This PR fixes three separate bugs in query decorrelation:

1. When removing duplicate filters as part of pulling up `IN`
subqueries, an operator precedence error meant that we would consider
two filters to be duplicates even if they involved different operators
(e.g., `=` and `>`).
2. When generating the `CASE` used to implement "count bug" handling, we
referenced the subquery output column without qualifying it by the
subquery alias. This could result in name-collisions with unrelated
identifiers in the parent query.
3. After generating the `CASE` used for "count bug" handling, we rewrote
the parent query to replace references to the subquery output column
with the generated `CASE` expression. This rewrite only matched on
unqualified column name only, which meant that unrelated parent query
identifiers that happened to share the same column name as subquery
aggregate aliases could been rewritten by mistake.

The first and third issues could result in incorrect query results; the
second would only cause spurious errors, as far as I can see.

## What changes are included in this PR?

* Fix all three bugs
* Add SLT tests
* Add a `debug_assert!` to document/check that
`remove_duplicated_filter` is called with a commutative operator

## Are these changes tested?

Yes.

## Are there any user-facing changes?

No, except in the sense that they fix user-visible bugs.
## Which issue does this PR close?

- Closes #21129.

## Rationale for this change

When the delimiter (and null string, if supplied) are scalars, we can
implement `string_to_array` more efficiently. In particular, we can
construct a `memmem::Finder` and use it to search for delimiters more
efficiently.

This PR implements this optimization; it also fixes a place where we
were allocating an intermediate `String` for every character when the
delimiter is `NULL`. (This isn't a common case but worth fixing.)

Benchmarks (M4 Max):

```
  single_char_delim/5:    34.8 µs  (was  61.1 µs)  -43%
  single_char_delim/20:  145.1 µs  (was 220.7 µs)  -34%
  single_char_delim/100: 679.4 µs  (was   1.04 ms) -35%

  multi_char_delim/5:    41.7 µs  (was  56.7 µs)  -27%
  multi_char_delim/20:  158.9 µs  (was 185.1 µs)  -14%
  multi_char_delim/100: 731.4 µs  (was 858.3 µs)  -15%

  with_null_str/5:    43.1 µs  (was  68.7 µs)  -37%
  with_null_str/20:  179.3 µs  (was 244.3 µs)  -27%
  with_null_str/100: 895.8 µs  (was   1.16 ms) -23%

  null_delim/5:    17.4 µs  (was  64.1 µs)  -73%
  null_delim/20:   63.0 µs  (was 233.4 µs)  -73%
  null_delim/100: 280.2 µs  (was   1.12 ms) -75%

  columnar_delim/5:    65.2 µs  (was  60.2 µs)  +8%
  columnar_delim/20:  217.2 µs  (was 224.1 µs)  -3%
  columnar_delim/100:   1.02 ms  (was   1.05 ms) -3%
```

## What changes are included in this PR?

* Add benchmark for `string_to_array`
* Implement optimizations described above
* Refactor columnar (fallback) path to get rid of a lot of type dispatch
boilerplate
* Improve SLT test coverage for the "columnar string, scalar other-args"
case

## Are these changes tested?

Yes.

## Are there any user-facing changes?

No.
Bumps
[taiki-e/install-action](https://github.com/taiki-e/install-action) from
2.69.7 to 2.70.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/taiki-e/install-action/releases">taiki-e/install-action's
releases</a>.</em></p>
<blockquote>
<h2>2.70.3</h2>
<ul>
<li>
<p>Update <code>wasm-bindgen@latest</code> to 0.2.116.</p>
</li>
<li>
<p>Update <code>cargo-insta@latest</code> to 1.47.2.</p>
</li>
<li>
<p>Update <code>tombi@latest</code> to 0.9.12.</p>
</li>
<li>
<p>Update <code>biome@latest</code> to 2.4.10.</p>
</li>
</ul>
<h2>2.70.2</h2>
<ul>
<li>
<p>Update <code>vacuum@latest</code> to 0.25.3.</p>
</li>
<li>
<p>Update <code>tombi@latest</code> to 0.9.11.</p>
</li>
</ul>
<h2>2.70.1</h2>
<ul>
<li>
<p>Update <code>cargo-insta@latest</code> to 1.47.1.</p>
</li>
<li>
<p>Update <code>cargo-binstall@latest</code> to 1.17.9.</p>
</li>
<li>
<p>Update <code>tombi@latest</code> to 0.9.10.</p>
</li>
</ul>
<h2>2.70.0</h2>
<ul>
<li>Install <code>uv</code>, <code>uvw</code> (Windows-only), and
<code>uvx</code> binaries when installing <code>uv</code>. Previously,
only <code>uv</code> binary was installed. (<a
href="https://redirect.github.com/taiki-e/install-action/pull/1632">#1632</a>)</li>
</ul>
<h2>2.69.14</h2>
<ul>
<li>
<p>Update <code>just@latest</code> to 1.48.1.</p>
</li>
<li>
<p>Update <code>wasm-bindgen@latest</code> to 0.2.115.</p>
</li>
</ul>
<h2>2.69.13</h2>
<ul>
<li>
<p>Update <code>mise@latest</code> to 2026.3.17.</p>
</li>
<li>
<p>Update <code>cargo-insta@latest</code> to 1.47.0.</p>
</li>
</ul>
<h2>2.69.12</h2>
<ul>
<li>Update <code>uv@latest</code> to 0.11.2.</li>
</ul>
<h2>2.69.11</h2>
<ul>
<li>
<p>Update <code>dprint@latest</code> to 0.53.1.</p>
</li>
<li>
<p>Update <code>mise@latest</code> to 2026.3.16.</p>
</li>
</ul>
<h2>2.69.10</h2>
<ul>
<li>
<p>Update <code>biome@latest</code> to 2.4.9.</p>
</li>
<li>
<p>Update <code>mise@latest</code> to 2026.3.15.</p>
</li>
</ul>
<h2>2.69.9</h2>
<ul>
<li>Update <code>uv@latest</code> to 0.11.1.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md">taiki-e/install-action's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<p>All notable changes to this project will be documented in this
file.</p>
<p>This project adheres to <a href="https://semver.org">Semantic
Versioning</a>.</p>
<!-- raw HTML omitted -->
<h2>[Unreleased]</h2>
<h2>[2.70.3] - 2026-03-31</h2>
<ul>
<li>
<p>Update <code>wasm-bindgen@latest</code> to 0.2.116.</p>
</li>
<li>
<p>Update <code>cargo-insta@latest</code> to 1.47.2.</p>
</li>
<li>
<p>Update <code>tombi@latest</code> to 0.9.12.</p>
</li>
<li>
<p>Update <code>biome@latest</code> to 2.4.10.</p>
</li>
</ul>
<h2>[2.70.2] - 2026-03-30</h2>
<ul>
<li>
<p>Update <code>vacuum@latest</code> to 0.25.3.</p>
</li>
<li>
<p>Update <code>tombi@latest</code> to 0.9.11.</p>
</li>
</ul>
<h2>[2.70.1] - 2026-03-29</h2>
<ul>
<li>
<p>Update <code>cargo-insta@latest</code> to 1.47.1.</p>
</li>
<li>
<p>Update <code>cargo-binstall@latest</code> to 1.17.9.</p>
</li>
<li>
<p>Update <code>tombi@latest</code> to 0.9.10.</p>
</li>
</ul>
<h2>[2.70.0] - 2026-03-28</h2>
<ul>
<li>Install <code>uv</code>, <code>uvw</code> (Windows-only), and
<code>uvx</code> binaries when installing <code>uv</code>. Previously,
only <code>uv</code> binary was installed. (<a
href="https://redirect.github.com/taiki-e/install-action/pull/1632">#1632</a>)</li>
</ul>
<h2>[2.69.14] - 2026-03-28</h2>
<ul>
<li>
<p>Update <code>just@latest</code> to 1.48.1.</p>
</li>
<li>
<p>Update <code>wasm-bindgen@latest</code> to 0.2.115.</p>
</li>
</ul>
<h2>[2.69.13] - 2026-03-27</h2>
<ul>
<li>Update <code>mise@latest</code> to 2026.3.17.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/taiki-e/install-action/commit/6ef672efc2b5aabc787a9e94baf4989aa02a97df"><code>6ef672e</code></a>
Release 2.70.3</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/f89faaa96174309722dc50938402891d9937a72f"><code>f89faaa</code></a>
Update <code>wasm-bindgen@latest</code> to 0.2.116</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/9adcff13829681f1e2f4a678b775043ab5c7fc2c"><code>9adcff1</code></a>
Update <code>cargo-insta@latest</code> to 1.47.2</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/a322a79ed43f376db6cf5fb62d147fbfa3ef320f"><code>a322a79</code></a>
Update <code>tombi@latest</code> to 0.9.12</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/875d0e57649ab3ced82c36327c9770ead82109d4"><code>875d0e5</code></a>
Update <code>biome@latest</code> to 2.4.10</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/e9e8e031bcd90cdbe8ac6bb1d376f8596e587fbf"><code>e9e8e03</code></a>
Release 2.70.2</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/f225969a9e5aad6f5d413ec4299a151e524774d5"><code>f225969</code></a>
Update <code>vacuum@latest</code> to 0.25.3</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/2e8700ad0bd15b56f4d6b3b6db9ab6f715825d85"><code>2e8700a</code></a>
Update <code>tombi@latest</code> to 0.9.11</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/41213fbc0eadbfe56adbc0fcb699b3e023e279e1"><code>41213fb</code></a>
zizmor: Apply more lints</li>
<li><a
href="https://github.com/taiki-e/install-action/commit/fd0f63e180a477d7434580b6d80817978b9ff2b8"><code>fd0f63e</code></a>
Release 2.70.1</li>
<li>Additional commits viewable in <a
href="https://github.com/taiki-e/install-action/compare/0d865d5cc6d507df4765f1f866bfae8bab4e2a73...6ef672efc2b5aabc787a9e94baf4989aa02a97df">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=taiki-e/install-action&package-manager=github_actions&previous-version=2.69.7&new-version=2.70.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [rustyline](https://github.com/kkawakam/rustyline) from 17.0.2 to
18.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/kkawakam/rustyline/releases">rustyline's
releases</a>.</em></p>
<blockquote>
<h2>18.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Support minimal repaint <a
href="https://redirect.github.com/kkawakam/rustyline/issues/882">#882</a></li>
<li>Fix edit_kill <a
href="https://redirect.github.com/kkawakam/rustyline/issues/887">#887</a>,
<a
href="https://redirect.github.com/kkawakam/rustyline/issues/885">#885</a></li>
<li>On windows, check that prompt is not styled <a
href="https://redirect.github.com/kkawakam/rustyline/issues/890">#890</a>,
<a
href="https://redirect.github.com/kkawakam/rustyline/issues/889">#889</a>,
<a
href="https://redirect.github.com/kkawakam/rustyline/issues/836">#836</a>,
<a
href="https://redirect.github.com/kkawakam/rustyline/issues/562">#562</a>,
<a
href="https://redirect.github.com/kkawakam/rustyline/issues/702">#702</a>,
<a
href="https://redirect.github.com/kkawakam/rustyline/issues/215">#215</a></li>
<li>Bump windows-sys version <a
href="https://redirect.github.com/kkawakam/rustyline/issues/892">#892</a></li>
<li>Check NO_COLOR environment variable <a
href="https://redirect.github.com/kkawakam/rustyline/issues/894">#894</a></li>
<li>Fix clippy warning <a
href="https://redirect.github.com/kkawakam/rustyline/issues/896">#896</a></li>
<li>Update radix_trie requirement from 0.2 to 0.3 <a
href="https://redirect.github.com/kkawakam/rustyline/issues/898">#898</a></li>
<li>Introduce Prompt trait for styling <a
href="https://redirect.github.com/kkawakam/rustyline/issues/893">#893</a></li>
<li>Fix partial refresh <a
href="https://redirect.github.com/kkawakam/rustyline/issues/899">#899</a>,
<a
href="https://redirect.github.com/kkawakam/rustyline/issues/897">#897</a></li>
<li>Remove doc_auto_cfg <a
href="https://redirect.github.com/kkawakam/rustyline/issues/900">#900</a></li>
<li>Fix vi paste <a
href="https://redirect.github.com/kkawakam/rustyline/issues/901">#901</a>,
<a
href="https://redirect.github.com/kkawakam/rustyline/issues/732">#732</a></li>
<li>Install signal handlers only when actually reading <a
href="https://redirect.github.com/kkawakam/rustyline/issues/903">#903</a>,
<a
href="https://redirect.github.com/kkawakam/rustyline/issues/902">#902</a></li>
<li>Configure cargo deny <a
href="https://redirect.github.com/kkawakam/rustyline/issues/904">#904</a>,
<a
href="https://redirect.github.com/kkawakam/rustyline/issues/637">#637</a></li>
<li>Update rusqlite version <a
href="https://redirect.github.com/kkawakam/rustyline/issues/906">#906</a></li>
<li>Update signal-hook to 0.4 <a
href="https://redirect.github.com/kkawakam/rustyline/issues/907">#907</a></li>
<li>Replace fd-lock with std File::lock <a
href="https://redirect.github.com/kkawakam/rustyline/issues/909">#909</a>,
<a
href="https://redirect.github.com/kkawakam/rustyline/issues/908">#908</a></li>
<li>Bump nix version to 0.31 <a
href="https://redirect.github.com/kkawakam/rustyline/issues/911">#911</a></li>
<li>Refactor code related to signal handling <a
href="https://redirect.github.com/kkawakam/rustyline/issues/912">#912</a></li>
<li>Bump signal-hook version <a
href="https://redirect.github.com/kkawakam/rustyline/issues/913">#913</a>,
<a
href="https://redirect.github.com/kkawakam/rustyline/issues/910">#910</a></li>
<li>Update rand to 0.10 <a
href="https://redirect.github.com/kkawakam/rustyline/issues/917">#917</a></li>
<li>Update skim from 0.10 to 3.3.0 <a
href="https://redirect.github.com/kkawakam/rustyline/issues/919">#919</a></li>
<li>Allow getting handler to fail after partial key event matches. <a
href="https://redirect.github.com/kkawakam/rustyline/issues/924">#924</a>,
<a
href="https://redirect.github.com/kkawakam/rustyline/issues/923">#923</a></li>
<li>Update dependencies <a
href="https://redirect.github.com/kkawakam/rustyline/issues/929">#929</a></li>
<li>Clippy <a
href="https://redirect.github.com/kkawakam/rustyline/issues/930">#930</a></li>
<li>Add comments on how to debug with PowerShell <a
href="https://redirect.github.com/kkawakam/rustyline/issues/933">#933</a></li>
<li>Try to fix a panic related to SIG_PIPE <a
href="https://redirect.github.com/kkawakam/rustyline/issues/932">#932</a>,
<a
href="https://redirect.github.com/kkawakam/rustyline/issues/931">#931</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/kkawakam/rustyline/compare/v17.0.2...v18.0.0">https://github.com/kkawakam/rustyline/compare/v17.0.2...v18.0.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/kkawakam/rustyline/commit/e89887a38bb4f23575a5b51c06c0a7004c5ef4d1"><code>e89887a</code></a>
Merge pull request <a
href="https://redirect.github.com/kkawakam/rustyline/issues/934">#934</a>
from gwenn/release</li>
<li><a
href="https://github.com/kkawakam/rustyline/commit/3ad9e653750b6c343b1fb2573fb5d6bb3e10ddad"><code>3ad9e65</code></a>
Prepare next release</li>
<li><a
href="https://github.com/kkawakam/rustyline/commit/cb9b5601f970767b618b265be8ff724e3e562d2e"><code>cb9b560</code></a>
Merge pull request <a
href="https://redirect.github.com/kkawakam/rustyline/issues/932">#932</a>
from gwenn/sig_pipe</li>
<li><a
href="https://github.com/kkawakam/rustyline/commit/111613aa60818629262272fd4ac55c3d5e86a966"><code>111613a</code></a>
Use relaxed ordering</li>
<li><a
href="https://github.com/kkawakam/rustyline/commit/9601fbe7ed388fed842886728d9219fa32583972"><code>9601fbe</code></a>
Try to fix a panic related to SIG_PIPE</li>
<li><a
href="https://github.com/kkawakam/rustyline/commit/8a9e4f1c032f8ed82ba0cf9eed7486a38f82bfee"><code>8a9e4f1</code></a>
Merge pull request <a
href="https://redirect.github.com/kkawakam/rustyline/issues/933">#933</a>
from gwenn/debug</li>
<li><a
href="https://github.com/kkawakam/rustyline/commit/ab85340d5c50656ffcc2a3f3728834c3b119b69e"><code>ab85340</code></a>
Add comments on how to debug with PowerShell</li>
<li><a
href="https://github.com/kkawakam/rustyline/commit/1e8561103af56897ea0bea8efe424f35460d4eca"><code>1e85611</code></a>
Merge pull request <a
href="https://redirect.github.com/kkawakam/rustyline/issues/930">#930</a>
from gwenn/lints</li>
<li><a
href="https://github.com/kkawakam/rustyline/commit/1d77febaaceaa06d750f42057661012fd7bdb223"><code>1d77feb</code></a>
Clippy</li>
<li><a
href="https://github.com/kkawakam/rustyline/commit/878d43a0584bf6eef8b61af67069e5214ce3bd82"><code>878d43a</code></a>
Merge pull request <a
href="https://redirect.github.com/kkawakam/rustyline/issues/929">#929</a>
from gwenn/deps</li>
<li>Additional commits viewable in <a
href="https://github.com/kkawakam/rustyline/compare/v17.0.2...v18.0.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=rustyline&package-manager=cargo&previous-version=17.0.2&new-version=18.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [ctor](https://github.com/mmastrac/rust-ctor) from 0.6.3 to 0.8.0.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/mmastrac/rust-ctor/commits">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ctor&package-manager=cargo&previous-version=0.6.3&new-version=0.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [snmalloc-rs](https://github.com/microsoft/snmalloc) from 0.3.8 to
0.7.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/microsoft/snmalloc/releases">snmalloc-rs's
releases</a>.</em></p>
<blockquote>
<h2>0.7.4</h2>
<h2>What's Changed</h2>
<h3>Optimisations</h3>
<ul>
<li>Improve post-teardown performance by <a
href="https://github.com/mjp41"><code>@​mjp41</code></a> in <a
href="https://redirect.github.com/microsoft/snmalloc/pull/810">microsoft/snmalloc#810</a></li>
<li>Fix performance issue in Red Black Tree init by <a
href="https://github.com/mjp41"><code>@​mjp41</code></a> in <a
href="https://redirect.github.com/microsoft/snmalloc/pull/818">microsoft/snmalloc#818</a></li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>Detect cyclic corruption in SeqSet::iterate by <a
href="https://github.com/mjp41"><code>@​mjp41</code></a> in <a
href="https://redirect.github.com/microsoft/snmalloc/pull/813">microsoft/snmalloc#813</a></li>
</ul>
<h3>Platform support</h3>
<h4>Rust</h4>
<ul>
<li>snmalloc-rs moved into snmalloc repo by <a
href="https://github.com/mjp41"><code>@​mjp41</code></a> in <a
href="https://redirect.github.com/microsoft/snmalloc/pull/801">microsoft/snmalloc#801</a></li>
<li>Rust: Update build features by <a
href="https://github.com/mjp41"><code>@​mjp41</code></a> in <a
href="https://redirect.github.com/microsoft/snmalloc/pull/804">microsoft/snmalloc#804</a></li>
<li>misc: prepare for future release and bump versions by <a
href="https://github.com/SchrodingerZhu"><code>@​SchrodingerZhu</code></a>
in <a
href="https://redirect.github.com/microsoft/snmalloc/pull/807">microsoft/snmalloc#807</a></li>
<li>Remove unused submodule from snmalloc-rs by <a
href="https://github.com/mjp41"><code>@​mjp41</code></a> in <a
href="https://redirect.github.com/microsoft/snmalloc/pull/827">microsoft/snmalloc#827</a></li>
<li>Address Rust packaging issues by <a
href="https://github.com/mjp41"><code>@​mjp41</code></a> in <a
href="https://redirect.github.com/microsoft/snmalloc/pull/830">microsoft/snmalloc#830</a></li>
</ul>
<h4>C++ support</h4>
<ul>
<li>Add SNMALLOC_EXPORT annotation to c++ allocator functions. by <a
href="https://github.com/akrieger"><code>@​akrieger</code></a> in <a
href="https://redirect.github.com/microsoft/snmalloc/pull/822">microsoft/snmalloc#822</a></li>
<li>inline annotation in pal_windows. by <a
href="https://github.com/mjp41"><code>@​mjp41</code></a> in <a
href="https://redirect.github.com/microsoft/snmalloc/pull/829">microsoft/snmalloc#829</a></li>
</ul>
<h3>Build</h3>
<ul>
<li>Adding vcpkg integration by <a
href="https://github.com/matajoh"><code>@​matajoh</code></a> in <a
href="https://redirect.github.com/microsoft/snmalloc/pull/825">microsoft/snmalloc#825</a></li>
<li>Parameterise clangformat_targets for reuse by other projects by <a
href="https://github.com/mjp41"><code>@​mjp41</code></a> in <a
href="https://redirect.github.com/microsoft/snmalloc/pull/826">microsoft/snmalloc#826</a></li>
<li>Move time concept to Pal by <a
href="https://github.com/mjp41"><code>@​mjp41</code></a> in <a
href="https://redirect.github.com/microsoft/snmalloc/pull/802">microsoft/snmalloc#802</a></li>
</ul>
<h3>CI</h3>
<ul>
<li>CI Fixes by <a
href="https://github.com/mjp41"><code>@​mjp41</code></a> in <a
href="https://redirect.github.com/microsoft/snmalloc/pull/803">microsoft/snmalloc#803</a></li>
<li>Refactor CI by <a
href="https://github.com/mjp41"><code>@​mjp41</code></a> in <a
href="https://redirect.github.com/microsoft/snmalloc/pull/806">microsoft/snmalloc#806</a></li>
<li>Add experiment with Claude.md by <a
href="https://github.com/mjp41"><code>@​mjp41</code></a> in <a
href="https://redirect.github.com/microsoft/snmalloc/pull/819">microsoft/snmalloc#819</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/akrieger"><code>@​akrieger</code></a>
made their first contribution in <a
href="https://redirect.github.com/microsoft/snmalloc/pull/822">microsoft/snmalloc#822</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/microsoft/snmalloc/compare/0.7.3...0.7.4">https://github.com/microsoft/snmalloc/compare/0.7.3...0.7.4</a></p>
<h2>0.7.3</h2>
<h2>What's Changed</h2>
<p>This release primarily improves for CMake for downstream uses of
snmalloc.</p>
<h3>Build</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/microsoft/snmalloc/commits/0.7.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=snmalloc-rs&package-manager=cargo&previous-version=0.3.8&new-version=0.7.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [sha1](https://github.com/RustCrypto/hashes) from 0.10.6 to
0.11.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/RustCrypto/hashes/commit/2f00175af936de46b3ddefe65c4de93cb4e876e4"><code>2f00175</code></a>
Release sha1 v0.11.0 (<a
href="https://redirect.github.com/RustCrypto/hashes/issues/810">#810</a>)</li>
<li><a
href="https://github.com/RustCrypto/hashes/commit/07d370c4a0d7cfab1f2a2e3d21bbb44e5669ee32"><code>07d370c</code></a>
sha1: refactor backends selection (<a
href="https://redirect.github.com/RustCrypto/hashes/issues/808">#808</a>)</li>
<li><a
href="https://github.com/RustCrypto/hashes/commit/7c7cb76e8a4978fb319a43122393cae0afc4b73d"><code>7c7cb76</code></a>
Fix md5 project link in README (<a
href="https://redirect.github.com/RustCrypto/hashes/issues/809">#809</a>)</li>
<li><a
href="https://github.com/RustCrypto/hashes/commit/ffe093984c004769747e998f77da8ff7c0e7a765"><code>ffe0939</code></a>
Release sha2 0.11.0 (<a
href="https://redirect.github.com/RustCrypto/hashes/issues/806">#806</a>)</li>
<li><a
href="https://github.com/RustCrypto/hashes/commit/8991b65fe400c31c4cc189510f86ae642c470cd9"><code>8991b65</code></a>
Use the standard order of the <code>[package]</code> section fields (<a
href="https://redirect.github.com/RustCrypto/hashes/issues/807">#807</a>)</li>
<li><a
href="https://github.com/RustCrypto/hashes/commit/3d2bc57db40fd6aeb25d6c6da98d67e2784c2985"><code>3d2bc57</code></a>
sha2: refactor backends (<a
href="https://redirect.github.com/RustCrypto/hashes/issues/802">#802</a>)</li>
<li><a
href="https://github.com/RustCrypto/hashes/commit/faa55fb83697c8f3113636d88070e5f5edc8c335"><code>faa55fb</code></a>
sha3: bump <code>keccak</code> to v0.2 (<a
href="https://redirect.github.com/RustCrypto/hashes/issues/803">#803</a>)</li>
<li><a
href="https://github.com/RustCrypto/hashes/commit/d3e6489e56f8486d4a93ceb7a8abf4924af1de7b"><code>d3e6489</code></a>
sha3 v0.11.0-rc.9 (<a
href="https://redirect.github.com/RustCrypto/hashes/issues/801">#801</a>)</li>
<li><a
href="https://github.com/RustCrypto/hashes/commit/bbf6f51ff97f81ab15e6e5f6cf878bfbcb1f47c8"><code>bbf6f51</code></a>
sha2: tweak backend docs (<a
href="https://redirect.github.com/RustCrypto/hashes/issues/800">#800</a>)</li>
<li><a
href="https://github.com/RustCrypto/hashes/commit/155dbbf2959dbec0ec75948a82590ddaede2d3bc"><code>155dbbf</code></a>
sha3: add default value for the <code>DS</code> generic parameter on
<code>TurboShake128/256</code>...</li>
<li>Additional commits viewable in <a
href="https://github.com/RustCrypto/hashes/compare/sha1-v0.10.6...sha1-v0.11.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sha1&package-manager=cargo&previous-version=0.10.6&new-version=0.11.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from
7.6.0 to 8.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/astral-sh/setup-uv/releases">astral-sh/setup-uv's
releases</a>.</em></p>
<blockquote>
<h2>v8.0.0 🌈 Immutable releases and secure tags</h2>
<h1>This is the first immutable release of <code>setup-uv</code> 🥳</h1>
<p>All future releases are also immutable, if you want to know more
about what this means checkout <a
href="https://docs.github.com/en/code-security/concepts/supply-chain-security/immutable-releases">the
docs</a>.</p>
<p>This release also has two breaking changes</p>
<h2>New format for <code>manifest-file</code></h2>
<p>The previously deprecated way of defining a custom version manifest
to control which <code>uv</code> versions are available and where to
download them from got removed. The functionality is still there but you
have to use the <a
href="https://github.com/astral-sh/setup-uv/blob/main/docs/customization.md#format">new
format</a>.</p>
<h2>No more major and minor tags</h2>
<p>To increase <strong>security</strong> even more we will <strong>stop
publishing minor tags</strong>. You won't be able to use
<code>@v8</code> or <code>@v8.0</code> any longer. We do this because
pinning to major releases opens up users to supply chain attacks like
what happened to <a
href="https://unit42.paloaltonetworks.com/github-actions-supply-chain-attack/">tj-actions</a>.</p>
<blockquote>
<p>[!TIP]
Use the immutable tag as a version
<code>astral-sh/setup-uv@v8.0.0</code>
Or even better the githash
<code>astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57</code></p>
</blockquote>
<h2>🚨 Breaking changes</h2>
<ul>
<li>Remove update-major-minor-tags workflow <a
href="https://github.com/eifinger"><code>@​eifinger</code></a> (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/826">#826</a>)</li>
<li>Remove deprecrated custom manifest <a
href="https://github.com/eifinger"><code>@​eifinger</code></a> (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/813">#813</a>)</li>
</ul>
<h2>🧰 Maintenance</h2>
<ul>
<li>Shortcircuit latest version from manifest <a
href="https://github.com/eifinger"><code>@​eifinger</code></a> (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/828">#828</a>)</li>
<li>Simplify inputs.ts <a
href="https://github.com/eifinger"><code>@​eifinger</code></a> (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/827">#827</a>)</li>
<li>Bump release-drafter to v7.1.1 <a
href="https://github.com/eifinger"><code>@​eifinger</code></a> (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/825">#825</a>)</li>
<li>Refactor inputs <a
href="https://github.com/eifinger"><code>@​eifinger</code></a> (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/823">#823</a>)</li>
<li>Replace inline compile args with tsconfig <a
href="https://github.com/eifinger"><code>@​eifinger</code></a> (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/824">#824</a>)</li>
<li>chore: update known checksums for 0.11.2 @<a
href="https://github.com/apps/github-actions">github-actions[bot]</a>
(<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/821">#821</a>)</li>
<li>chore: update known checksums for 0.11.1 @<a
href="https://github.com/apps/github-actions">github-actions[bot]</a>
(<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/817">#817</a>)</li>
<li>chore: update known checksums for 0.11.0 @<a
href="https://github.com/apps/github-actions">github-actions[bot]</a>
(<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/815">#815</a>)</li>
<li>Fix latest-version workflow check <a
href="https://github.com/eifinger"><code>@​eifinger</code></a> (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/812">#812</a>)</li>
<li>chore: update known checksums for 0.10.11/0.10.12 @<a
href="https://github.com/apps/github-actions">github-actions[bot]</a>
(<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/811">#811</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/astral-sh/setup-uv/commit/cec208311dfd045dd5311c1add060b2062131d57"><code>cec2083</code></a>
Shortcircuit latest version from manifest (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/828">#828</a>)</li>
<li><a
href="https://github.com/astral-sh/setup-uv/commit/4dd8ab45206a76f8c1dfe399fa88df10a7264f27"><code>4dd8ab4</code></a>
Simplify inputs.ts (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/827">#827</a>)</li>
<li><a
href="https://github.com/astral-sh/setup-uv/commit/7fdbe7cf0c8ef50cfd0878eed7b5180abc6b53c7"><code>7fdbe7c</code></a>
Remove update-major-minor-tags workflow (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/826">#826</a>)</li>
<li><a
href="https://github.com/astral-sh/setup-uv/commit/485abd05e5c74a247f0a309e333d2433ab9a353a"><code>485abd0</code></a>
Bump release-drafter to v7.1.1 (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/825">#825</a>)</li>
<li><a
href="https://github.com/astral-sh/setup-uv/commit/f82eb19c06057c455674b2602e0139fd906f1428"><code>f82eb19</code></a>
Refactor inputs (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/823">#823</a>)</li>
<li><a
href="https://github.com/astral-sh/setup-uv/commit/868d1f74d9d862d7b40219546bfe35299c6dd452"><code>868d1f7</code></a>
Replace inline compile args with tsconfig (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/824">#824</a>)</li>
<li><a
href="https://github.com/astral-sh/setup-uv/commit/447e6d02b15d65b3247cce2d6019f11957285d11"><code>447e6d0</code></a>
chore: update known checksums for 0.11.2 (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/821">#821</a>)</li>
<li><a
href="https://github.com/astral-sh/setup-uv/commit/5c62c5926145985eec91f09e2e0a75f40daed929"><code>5c62c59</code></a>
chore: update known checksums for 0.11.1 (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/817">#817</a>)</li>
<li><a
href="https://github.com/astral-sh/setup-uv/commit/e1a7373adb857afd2a70b971e8ebdacc64ed27d0"><code>e1a7373</code></a>
chore: update known checksums for 0.11.0 (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/815">#815</a>)</li>
<li><a
href="https://github.com/astral-sh/setup-uv/commit/89709315bb3bd4bf0f4b1db4b710e99009087ab5"><code>8970931</code></a>
Remove deprecrated custom manifest (<a
href="https://redirect.github.com/astral-sh/setup-uv/issues/813">#813</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/astral-sh/setup-uv/compare/37802adc94f370d6bfd71619e3f0bf239e1f3b78...cec208311dfd045dd5311c1add060b2062131d57">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=astral-sh/setup-uv&package-manager=github_actions&previous-version=7.6.0&new-version=8.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [github/codeql-action](https://github.com/github/codeql-action)
from 4.34.1 to 4.35.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.35.1</h2>
<ul>
<li>Fix incorrect minimum required Git version for <a
href="https://redirect.github.com/github/roadmap/issues/1158">improved
incremental analysis</a>: it should have been 2.36.0, not 2.11.0. <a
href="https://redirect.github.com/github/codeql-action/pull/3781">#3781</a></li>
</ul>
<h2>v4.35.0</h2>
<ul>
<li>Reduced the minimum Git version required for <a
href="https://redirect.github.com/github/roadmap/issues/1158">improved
incremental analysis</a> from 2.38.0 to 2.11.0. <a
href="https://redirect.github.com/github/codeql-action/pull/3767">#3767</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.1">2.25.1</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3773">#3773</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>4.35.1 - 27 Mar 2026</h2>
<ul>
<li>Fix incorrect minimum required Git version for <a
href="https://redirect.github.com/github/roadmap/issues/1158">improved
incremental analysis</a>: it should have been 2.36.0, not 2.11.0. <a
href="https://redirect.github.com/github/codeql-action/pull/3781">#3781</a></li>
</ul>
<h2>4.35.0 - 27 Mar 2026</h2>
<ul>
<li>Reduced the minimum Git version required for <a
href="https://redirect.github.com/github/roadmap/issues/1158">improved
incremental analysis</a> from 2.38.0 to 2.11.0. <a
href="https://redirect.github.com/github/codeql-action/pull/3767">#3767</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.1">2.25.1</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3773">#3773</a></li>
</ul>
<h2>4.34.1 - 20 Mar 2026</h2>
<ul>
<li>Downgrade default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.3">2.24.3</a>
due to issues with a small percentage of Actions and JavaScript
analyses. <a
href="https://redirect.github.com/github/codeql-action/pull/3762">#3762</a></li>
</ul>
<h2>4.34.0 - 20 Mar 2026</h2>
<ul>
<li>Added an experimental change which disables TRAP caching when <a
href="https://redirect.github.com/github/roadmap/issues/1158">improved
incremental analysis</a> is enabled, since improved incremental analysis
supersedes TRAP caching. This will improve performance and reduce
Actions cache usage. We expect to roll this change out to everyone in
March. <a
href="https://redirect.github.com/github/codeql-action/pull/3569">#3569</a></li>
<li>We are rolling out improved incremental analysis to C/C++ analyses
that use build mode <code>none</code>. We expect this rollout to be
complete by the end of April 2026. <a
href="https://redirect.github.com/github/codeql-action/pull/3584">#3584</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.0">2.25.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3585">#3585</a></li>
</ul>
<h2>4.33.0 - 16 Mar 2026</h2>
<ul>
<li>
<p>Upcoming change: Starting April 2026, the CodeQL Action will skip
collecting file coverage information on pull requests to improve
analysis performance. File coverage information will still be computed
on non-PR analyses. Pull request analyses will log a warning about this
upcoming change. <a
href="https://redirect.github.com/github/codeql-action/pull/3562">#3562</a></p>
<p>To opt out of this change:</p>
<ul>
<li><strong>Repositories owned by an organization:</strong> Create a
custom repository property with the name
<code>github-codeql-file-coverage-on-prs</code> and the type
&quot;True/false&quot;, then set this property to <code>true</code> in
the repository's settings. For more information, see <a
href="https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization">Managing
custom properties for repositories in your organization</a>.
Alternatively, if you are using an advanced setup workflow, you can set
the <code>CODEQL_ACTION_FILE_COVERAGE_ON_PRS</code> environment variable
to <code>true</code> in your workflow.</li>
<li><strong>User-owned repositories using default setup:</strong> Switch
to an advanced setup workflow and set the
<code>CODEQL_ACTION_FILE_COVERAGE_ON_PRS</code> environment variable to
<code>true</code> in your workflow.</li>
<li><strong>User-owned repositories using advanced setup:</strong> Set
the <code>CODEQL_ACTION_FILE_COVERAGE_ON_PRS</code> environment variable
to <code>true</code> in your workflow.</li>
</ul>
</li>
<li>
<p>Fixed <a
href="https://redirect.github.com/github/codeql-action/issues/3555">a
bug</a> which caused the CodeQL Action to fail loading repository
properties if a &quot;Multi select&quot; repository property was
configured for the repository. <a
href="https://redirect.github.com/github/codeql-action/pull/3557">#3557</a></p>
</li>
<li>
<p>The CodeQL Action now loads <a
href="https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization">custom
repository properties</a> on GitHub Enterprise Server, enabling the
customization of features such as
<code>github-codeql-disable-overlay</code> that was previously only
available on GitHub.com. <a
href="https://redirect.github.com/github/codeql-action/pull/3559">#3559</a></p>
</li>
<li>
<p>Once <a
href="https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries">private
package registries</a> can be configured with OIDC-based authentication
for organizations, the CodeQL Action will now be able to accept such
configurations. <a
href="https://redirect.github.com/github/codeql-action/pull/3563">#3563</a></p>
</li>
<li>
<p>Fixed the retry mechanism for database uploads. Previously this would
fail with the error &quot;Response body object should not be disturbed
or locked&quot;. <a
href="https://redirect.github.com/github/codeql-action/pull/3564">#3564</a></p>
</li>
<li>
<p>A warning is now emitted if the CodeQL Action detects a repository
property whose name suggests that it relates to the CodeQL Action, but
which is not one of the properties recognised by the current version of
the CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3570">#3570</a></p>
</li>
</ul>
<h2>4.32.6 - 05 Mar 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.3">2.24.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3548">#3548</a></li>
</ul>
<h2>4.32.5 - 02 Mar 2026</h2>
<ul>
<li>Repositories owned by an organization can now set up the
<code>github-codeql-disable-overlay</code> custom repository property to
disable <a
href="https://redirect.github.com/github/roadmap/issues/1158">improved
incremental analysis for CodeQL</a>. First, create a custom repository
property with the name <code>github-codeql-disable-overlay</code> and
the type &quot;True/false&quot; in the organization's settings. Then in
the repository's settings, set this property to <code>true</code> to
disable improved incremental analysis. For more information, see <a
href="https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization">Managing
custom properties for repositories in your organization</a>. This
feature is not yet available on GitHub Enterprise Server. <a
href="https://redirect.github.com/github/codeql-action/pull/3507">#3507</a></li>
<li>Added an experimental change so that when <a
href="https://redirect.github.com/github/roadmap/issues/1158">improved
incremental analysis</a> fails on a runner — potentially due to
insufficient disk space — the failure is recorded in the Actions cache
so that subsequent runs will automatically skip improved incremental
analysis until something changes (e.g. a larger runner is provisioned or
a new CodeQL version is released). We expect to roll this change out to
everyone in March. <a
href="https://redirect.github.com/github/codeql-action/pull/3487">#3487</a></li>
<li>The minimum memory check for improved incremental analysis is now
skipped for CodeQL 2.24.3 and later, which has reduced peak RAM usage.
<a
href="https://redirect.github.com/github/codeql-action/pull/3515">#3515</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/c10b8064de6f491fea524254123dbe5e09572f13"><code>c10b806</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3782">#3782</a>
from github/update-v4.35.1-d6d1743b8</li>
<li><a
href="https://github.com/github/codeql-action/commit/c5ffd0683786820677d054e3505e1c5bb4b8c227"><code>c5ffd06</code></a>
Update changelog for v4.35.1</li>
<li><a
href="https://github.com/github/codeql-action/commit/d6d1743b8ec7ecd94f78ad1ce4cb3d8d2ba58001"><code>d6d1743</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3781">#3781</a>
from github/henrymercer/update-git-minimum-version</li>
<li><a
href="https://github.com/github/codeql-action/commit/65d2efa7333ad65f97cc54be40f4cd18630f884c"><code>65d2efa</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/2437b20ab31021229573a66717323dd5c6ce9319"><code>2437b20</code></a>
Update minimum git version for overlay to 2.36.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/ea5f71947c021286c99f61cc426a10d715fe4434"><code>ea5f719</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3775">#3775</a>
from github/dependabot/npm_and_yarn/node-forge-1.4.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/45ceeea896ba2293e10982f871198d1950ee13d6"><code>45ceeea</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3777">#3777</a>
from github/mergeback/v4.35.0-to-main-b8bb9f28</li>
<li><a
href="https://github.com/github/codeql-action/commit/24448c98434f429f901d27db7ddae55eec5cc1c4"><code>24448c9</code></a>
Rebuild</li>
<li><a
href="https://github.com/github/codeql-action/commit/7c510606312e5c68ac8b27c009e5254f226f5dfa"><code>7c51060</code></a>
Update changelog and version after v4.35.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/b8bb9f28b8d3f992092362369c57161b755dea45"><code>b8bb9f2</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/3776">#3776</a>
from github/update-v4.35.0-0078ad667</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/38697555549f1db7851b81482ff19f1fa5c4fedc...c10b8064de6f491fea524254123dbe5e09572f13">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=4.34.1&new-version=4.35.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [pygments](https://github.com/pygments/pygments) from 2.19.2 to
2.20.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pygments/pygments/releases">pygments's
releases</a>.</em></p>
<blockquote>
<h2>2.20.0</h2>
<ul>
<li>
<p>New lexers:</p>
<ul>
<li>Rell (<a
href="https://redirect.github.com/pygments/pygments/issues/2914">#2914</a>)</li>
</ul>
</li>
<li>
<p>Updated lexers:</p>
<ul>
<li>archetype: Fix catastrophic backtracking in GUID and ID patterns (<a
href="https://redirect.github.com/pygments/pygments/issues/3064">#3064</a>)</li>
<li>ASN.1: Recognize minus sign and fix range operator (<a
href="https://redirect.github.com/pygments/pygments/issues/3014">#3014</a>,
<a
href="https://redirect.github.com/pygments/pygments/issues/3060">#3060</a>)</li>
<li>C++: Add C++26 keywords (<a
href="https://redirect.github.com/pygments/pygments/issues/2955">#2955</a>),
add integer literal suffixes (<a
href="https://redirect.github.com/pygments/pygments/issues/2966">#2966</a>)</li>
<li>ComponentPascal: Fix <code>analyse_text</code> (<a
href="https://redirect.github.com/pygments/pygments/issues/3028">#3028</a>,
<a
href="https://redirect.github.com/pygments/pygments/issues/3032">#3032</a>)</li>
<li>Coq renamed to Rocq (<a
href="https://redirect.github.com/pygments/pygments/issues/2883">#2883</a>,
<a
href="https://redirect.github.com/pygments/pygments/issues/2908">#2908</a>)</li>
<li>Cython: Various improvements (<a
href="https://redirect.github.com/pygments/pygments/issues/2932">#2932</a>,
<a
href="https://redirect.github.com/pygments/pygments/issues/2933">#2933</a>)</li>
<li>Debian control: Improve architecture parsing (<a
href="https://redirect.github.com/pygments/pygments/issues/3052">#3052</a>)</li>
<li>Devicetree: Add support for overlay/fragments (<a
href="https://redirect.github.com/pygments/pygments/issues/3021">#3021</a>),
add bytestring support (<a
href="https://redirect.github.com/pygments/pygments/issues/3022">#3022</a>),
fix catastrophic backtracking (<a
href="https://redirect.github.com/pygments/pygments/issues/3057">#3057</a>)</li>
<li>Fennel: Various improvements (<a
href="https://redirect.github.com/pygments/pygments/issues/2911">#2911</a>)</li>
<li>Haskell: Handle escape sequences in character literals (<a
href="https://redirect.github.com/pygments/pygments/issues/3069">#3069</a>,
<a
href="https://redirect.github.com/pygments/pygments/issues/1795">#1795</a>)</li>
<li>Java: Add module keywords (<a
href="https://redirect.github.com/pygments/pygments/issues/2955">#2955</a>)</li>
<li>Lean4: Add operators <code>]'</code>, <code>]?</code>,
<code>]!</code> (<a
href="https://redirect.github.com/pygments/pygments/issues/2946">#2946</a>)</li>
<li>LESS: Support single-line comments (<a
href="https://redirect.github.com/pygments/pygments/issues/3005">#3005</a>)</li>
<li>LilyPond: Update to 2.25.29 (<a
href="https://redirect.github.com/pygments/pygments/issues/2974">#2974</a>)</li>
<li>LLVM: Support C-style comments (<a
href="https://redirect.github.com/pygments/pygments/issues/3023">#3023</a>,
<a
href="https://redirect.github.com/pygments/pygments/issues/2978">#2978</a>)</li>
<li>Lua(u): Fix catastrophic backtracking (<a
href="https://redirect.github.com/pygments/pygments/issues/3047">#3047</a>)</li>
<li>Macaulay2: Update to 1.25.05 (<a
href="https://redirect.github.com/pygments/pygments/issues/2893">#2893</a>),
1.25.11 (<a
href="https://redirect.github.com/pygments/pygments/issues/2988">#2988</a>)</li>
<li>Mathematica: Various improvements (<a
href="https://redirect.github.com/pygments/pygments/issues/2957">#2957</a>)</li>
<li>meson: Add additional operators (<a
href="https://redirect.github.com/pygments/pygments/issues/2919">#2919</a>)</li>
<li>MySQL: Update keywords (<a
href="https://redirect.github.com/pygments/pygments/issues/2970">#2970</a>)</li>
<li>org-Mode: Support both schedule and deadline (<a
href="https://redirect.github.com/pygments/pygments/issues/2899">#2899</a>)</li>
<li>PHP: Add <code>__PROPERTY__</code> magic constant (<a
href="https://redirect.github.com/pygments/pygments/issues/2924">#2924</a>),
add reserved keywords (<a
href="https://redirect.github.com/pygments/pygments/issues/3002">#3002</a>)</li>
<li>PostgreSQL: Add more keywords (<a
href="https://redirect.github.com/pygments/pygments/issues/2985">#2985</a>)</li>
<li>protobuf: Fix namespace tokenization (<a
href="https://redirect.github.com/pygments/pygments/issues/2929">#2929</a>)</li>
<li>Python: Add <code>t</code>-string support (<a
href="https://redirect.github.com/pygments/pygments/issues/2973">#2973</a>,
<a
href="https://redirect.github.com/pygments/pygments/issues/3009">#3009</a>,
<a
href="https://redirect.github.com/pygments/pygments/issues/3010">#3010</a>)</li>
<li>Tablegen: Fix infinite loop (<a
href="https://redirect.github.com/pygments/pygments/issues/2972">#2972</a>,
<a
href="https://redirect.github.com/pygments/pygments/issues/2940">#2940</a>)</li>
<li>Tera Term macro: Add commands introduced in v5.3 through v5.6 (<a
href="https://redirect.github.com/pygments/pygments/issues/2951">#2951</a>)</li>
<li>TOML: Support TOML 1.1.0 (<a
href="https://redirect.github.com/pygments/pygments/issues/3026">#3026</a>,
<a
href="https://redirect.github.com/pygments/pygments/issues/3027">#3027</a>)</li>
<li>Turtle: Allow empty comment lines (<a
href="https://redirect.github.com/pygments/pygments/issues/2980">#2980</a>)</li>
<li>XML: Added <code>.xbrl</code> as file ending (<a
href="https://redirect.github.com/pygments/pygments/issues/2890">#2890</a>,
<a
href="https://redirect.github.com/pygments/pygments/issues/2891">#2891</a>)</li>
</ul>
</li>
<li>
<p>Drop Python 3.8, and add Python 3.14 as a supported version (<a
href="https://redirect.github.com/pygments/pygments/issues/2987">#2987</a>,
<a
href="https://redirect.github.com/pygments/pygments/issues/3012">#3012</a>)</p>
</li>
<li>
<p>Various improvements to <code>autopygmentize</code> (<a
href="https://redirect.github.com/pygments/pygments/issues/2894">#2894</a>)</p>
</li>
<li>
<p>Update <code>onedark</code> style to support more token types (<a
href="https://redirect.github.com/pygments/pygments/issues/2977">#2977</a>)</p>
</li>
<li>
<p>Update <code>rtt</code> style to support more token types (<a
href="https://redirect.github.com/pygments/pygments/issues/2895">#2895</a>)</p>
</li>
<li>
<p>Cache entry points to improve performance (<a
href="https://redirect.github.com/pygments/pygments/issues/2979">#2979</a>)</p>
</li>
<li>
<p>Fix <code>xterm-256</code> color table (<a
href="https://redirect.github.com/pygments/pygments/issues/3043">#3043</a>)</p>
</li>
<li>
<p>Fix <code>kwargs</code> dictionary getting mutated on each call (<a
href="https://redirect.github.com/pygments/pygments/issues/3044">#3044</a>)</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pygments/pygments/blob/master/CHANGES">pygments's
changelog</a>.</em></p>
<blockquote>
<h2>Version 2.20.0</h2>
<p>(released March 29th, 2026)</p>
<ul>
<li>
<p>New lexers:</p>
<ul>
<li>Rell (<a
href="https://redirect.github.com/pygments/pygments/issues/2914">#2914</a>)</li>
</ul>
</li>
<li>
<p>Updated lexers:</p>
<ul>
<li>archetype: Fix catastrophic backtracking in GUID and ID patterns (<a
href="https://redirect.github.com/pygments/pygments/issues/3064">#3064</a>)</li>
<li>ASN.1: Recognize minus sign and fix range operator (<a
href="https://redirect.github.com/pygments/pygments/issues/3014">#3014</a>,
<a
href="https://redirect.github.com/pygments/pygments/issues/3060">#3060</a>)</li>
<li>C++: Add C++26 keywords (<a
href="https://redirect.github.com/pygments/pygments/issues/2955">#2955</a>),
add integer literal suffixes (<a
href="https://redirect.github.com/pygments/pygments/issues/2966">#2966</a>)</li>
<li>ComponentPascal: Fix <code>analyse_text</code> (<a
href="https://redirect.github.com/pygments/pygments/issues/3028">#3028</a>,
<a
href="https://redirect.github.com/pygments/pygments/issues/3032">#3032</a>)</li>
<li>Coq renamed to Rocq (<a
href="https://redirect.github.com/pygments/pygments/issues/2883">#2883</a>,
<a
href="https://redirect.github.com/pygments/pygments/issues/2908">#2908</a>)</li>
<li>Cython: Various improvements (<a
href="https://redirect.github.com/pygments/pygments/issues/2932">#2932</a>,
<a
href="https://redirect.github.com/pygments/pygments/issues/2933">#2933</a>)</li>
<li>Debian control: Improve architecture parsing (<a
href="https://redirect.github.com/pygments/pygments/issues/3052">#3052</a>)</li>
<li>Devicetree: Add support for overlay/fragments (<a
href="https://redirect.github.com/pygments/pygments/issues/3021">#3021</a>),
add bytestring support (<a
href="https://redirect.github.com/pygments/pygments/issues/3022">#3022</a>),
fix catastrophic backtracking (<a
href="https://redirect.github.com/pygments/pygments/issues/3057">#3057</a>)</li>
<li>Fennel: Various improvements (<a
href="https://redirect.github.com/pygments/pygments/issues/2911">#2911</a>)</li>
<li>Haskell: Handle escape sequences in character literals (<a
href="https://redirect.github.com/pygments/pygments/issues/3069">#3069</a>,
<a
href="https://redirect.github.com/pygments/pygments/issues/1795">#1795</a>)</li>
<li>Java: Add module keywords (<a
href="https://redirect.github.com/pygments/pygments/issues/2955">#2955</a>)</li>
<li>Lean4: Add operators <code>]'</code>, <code>]?</code>,
<code>]!</code> (<a
href="https://redirect.github.com/pygments/pygments/issues/2946">#2946</a>)</li>
<li>LESS: Support single-line comments (<a
href="https://redirect.github.com/pygments/pygments/issues/3005">#3005</a>)</li>
<li>LilyPond: Update to 2.25.29 (<a
href="https://redirect.github.com/pygments/pygments/issues/2974">#2974</a>)</li>
<li>LLVM: Support C-style comments (<a
href="https://redirect.github.com/pygments/pygments/issues/3023">#3023</a>,
<a
href="https://redirect.github.com/pygments/pygments/issues/2978">#2978</a>)</li>
<li>Lua(u): Fix catastrophic backtracking (<a
href="https://redirect.github.com/pygments/pygments/issues/3047">#3047</a>)</li>
<li>Macaulay2: Update to 1.25.05 (<a
href="https://redirect.github.com/pygments/pygments/issues/2893">#2893</a>),
1.25.11 (<a
href="https://redirect.github.com/pygments/pygments/issues/2988">#2988</a>)</li>
<li>Mathematica: Various improvements (<a
href="https://redirect.github.com/pygments/pygments/issues/2957">#2957</a>)</li>
<li>meson: Add additional operators (<a
href="https://redirect.github.com/pygments/pygments/issues/2919">#2919</a>)</li>
<li>MySQL: Update keywords (<a
href="https://redirect.github.com/pygments/pygments/issues/2970">#2970</a>)</li>
<li>org-Mode: Support both schedule and deadline (<a
href="https://redirect.github.com/pygments/pygments/issues/2899">#2899</a>)</li>
<li>PHP: Add <code>__PROPERTY__</code> magic constant (<a
href="https://redirect.github.com/pygments/pygments/issues/2924">#2924</a>),
add reserved keywords (<a
href="https://redirect.github.com/pygments/pygments/issues/3002">#3002</a>)</li>
<li>PostgreSQL: Add more keywords (<a
href="https://redirect.github.com/pygments/pygments/issues/2985">#2985</a>)</li>
<li>protobuf: Fix namespace tokenization (<a
href="https://redirect.github.com/pygments/pygments/issues/2929">#2929</a>)</li>
<li>Python: Add <code>t</code>-string support (<a
href="https://redirect.github.com/pygments/pygments/issues/2973">#2973</a>,
<a
href="https://redirect.github.com/pygments/pygments/issues/3009">#3009</a>,
<a
href="https://redirect.github.com/pygments/pygments/issues/3010">#3010</a>)</li>
<li>Tablegen: Fix infinite loop (<a
href="https://redirect.github.com/pygments/pygments/issues/2972">#2972</a>,
<a
href="https://redirect.github.com/pygments/pygments/issues/2940">#2940</a>)</li>
<li>Tera Term macro: Add commands introduced in v5.3 through v5.6 (<a
href="https://redirect.github.com/pygments/pygments/issues/2951">#2951</a>)</li>
<li>TOML: Support TOML 1.1.0 (<a
href="https://redirect.github.com/pygments/pygments/issues/3026">#3026</a>,
<a
href="https://redirect.github.com/pygments/pygments/issues/3027">#3027</a>)</li>
<li>Turtle: Allow empty comment lines (<a
href="https://redirect.github.com/pygments/pygments/issues/2980">#2980</a>)</li>
<li>XML: Added <code>.xbrl</code> as file ending (<a
href="https://redirect.github.com/pygments/pygments/issues/2890">#2890</a>,
<a
href="https://redirect.github.com/pygments/pygments/issues/2891">#2891</a>)</li>
</ul>
</li>
<li>
<p>Drop Python 3.8, and add Python 3.14 as a supported version (<a
href="https://redirect.github.com/pygments/pygments/issues/2987">#2987</a>,
<a
href="https://redirect.github.com/pygments/pygments/issues/3012">#3012</a>)</p>
</li>
<li>
<p>Various improvements to <code>autopygmentize</code> (<a
href="https://redirect.github.com/pygments/pygments/issues/2894">#2894</a>)</p>
</li>
<li>
<p>Update <code>onedark</code> style to support more token types (<a
href="https://redirect.github.com/pygments/pygments/issues/2977">#2977</a>)</p>
</li>
<li>
<p>Update <code>rtt</code> style to support more token types (<a
href="https://redirect.github.com/pygments/pygments/issues/2895">#2895</a>)</p>
</li>
<li>
<p>Cache entry points to improve performance (<a
href="https://redirect.github.com/pygments/pygments/issues/2979">#2979</a>)</p>
</li>
<li>
<p>Fix <code>xterm-256</code> color table (<a
href="https://redirect.github.com/pygments/pygments/issues/3043">#3043</a>)</p>
</li>
<li>
<p>Fix <code>kwargs</code> dictionary getting mutated on each call (<a
href="https://redirect.github.com/pygments/pygments/issues/3044">#3044</a>)</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pygments/pygments/commit/708197d82827ba2d5ca78bcbb653c7102ce86dcd"><code>708197d</code></a>
Fix underline length.</li>
<li><a
href="https://github.com/pygments/pygments/commit/1d4538ae8621d766ecc91ff59caf76ab75983abc"><code>1d4538a</code></a>
Prepare 2.20 release.</li>
<li><a
href="https://github.com/pygments/pygments/commit/2ceaee4e634eebae2d10a47fd05406871f6bac8f"><code>2ceaee4</code></a>
Update CHANGES.</li>
<li><a
href="https://github.com/pygments/pygments/commit/e3a3c54b58c7f80bc4db887e471d4f91c77844ed"><code>e3a3c54</code></a>
Fix Haskell lexer: handle escape sequences in character literals (<a
href="https://redirect.github.com/pygments/pygments/issues/3069">#3069</a>)</li>
<li><a
href="https://github.com/pygments/pygments/commit/d7c3453e342dac319f58e4091f4ef183cc49d802"><code>d7c3453</code></a>
Merge pull request <a
href="https://redirect.github.com/pygments/pygments/issues/3071">#3071</a>
from pygments/harden-html-formatter</li>
<li><a
href="https://github.com/pygments/pygments/commit/0f97e7c37d44abfa4ddfddf44a3290fdad586034"><code>0f97e7c</code></a>
Harden the HTML formatter against CSS.</li>
<li><a
href="https://github.com/pygments/pygments/commit/9f981b2ba42b88ca5bdcebf12cd01efd7cd80aec"><code>9f981b2</code></a>
Update CHANGES.</li>
<li><a
href="https://github.com/pygments/pygments/commit/1d889151024e9a53f3702a60558b29b070306e9e"><code>1d88915</code></a>
Update CHANGES.</li>
<li><a
href="https://github.com/pygments/pygments/commit/c3d93adb9827fc054c3c12b47bde31c781a36a93"><code>c3d93ad</code></a>
Fix ASN.1 lexer: recognize minus sign and fix range operator (<a
href="https://redirect.github.com/pygments/pygments/issues/3060">#3060</a>)</li>
<li><a
href="https://github.com/pygments/pygments/commit/4f06bcf8a5ba3f2b5bda24a26ccf041a1a65d91e"><code>4f06bcf</code></a>
fix bad behaving backtracking regex in CommonLispLexer</li>
<li>Additional commits viewable in <a
href="https://github.com/pygments/pygments/compare/2.19.2...2.20.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pygments&package-manager=uv&previous-version=2.19.2&new-version=2.20.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/apache/datafusion/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
fix object_store release notes link in datafusion 53 upgrade guide

find this when i try upgrade datafusion to 53
#21147)

## Which issue does this PR close?

- Closes #21146

## Rationale for this change

There is currently no way to programmatically inspect the memory
consumption of individual consumers tracked by TrackConsumersPool. The
only available method, report_top(), returns a formatted string intended
for human-readable output, making it unsuitable for programmatic use
(e.g., metrics collection, monitoring, or custom reporting).

## What changes are included in this PR?

Added a metrics() method to TrackConsumersPool that returns a Vec — a
snapshot of all currently tracked consumers. Each MemoryConsumerMetrics
entry exposes:

name — the consumer's name
can_spill — whether the consumer supports spilling to disk
reserved — current bytes reserved
peak — peak bytes reserved
This allows callers to inspect memory usage programmatically without
parsing formatted strings.

## Are these changes tested?

Yes. A dedicated unit test test_track_consumers_pool_metrics was added
in pool.rs that verifies:
- An empty pool returns no metrics
- name, can_spill, reserved, and peak are correctly reported for each
consumer
- Peak is tracked independently from current reservation (grow then
shrink scenario)
  - Dropped consumers are removed from metrics      

## Are there any user-facing changes?

No

Co-authored-by: Bert Vermeiren <bert.vermeiren@datadobi.com>
Co-authored-by: Andrew Lamb <andrew@nerdnetworks.org>
## Which issue does this PR close?

<!--
We generally require a GitHub issue to be filed for all bug fixes and
enhancements and this helps us generate change logs for our releases.
You can link an issue to this PR using the GitHub syntax. For example
`Closes #123` indicates that this PR will close issue #123.
-->

- Closes #21234

## Rationale for this change

- see #21234

## What changes are included in this PR?

handle Date32 and Date64 in `get_extreme_value` function

## Are these changes tested?

yes, add test case

## Are there any user-facing changes?

<!--
If there are user-facing changes then we may require documentation to be
updated before approving the PR.
-->

<!--
If there are any breaking changes to public APIs, please add the `api
change` label.
-->

---------

Co-authored-by: Andrew Lamb <andrew@nerdnetworks.org>
## Which issue does this PR close?

<!--
We generally require a GitHub issue to be filed for all bug fixes and
enhancements and this helps us generate change logs for our releases.
You can link an issue to this PR using the GitHub syntax. For example
`Closes #123` indicates that this PR will close issue #123.
-->

Part of #20585

## Rationale for this change

<!--
Why are you proposing this change? If this is already explained clearly
in the issue then this section is not needed.
Explaining clearly why changes are proposed helps reviewers understand
your changes and offer better suggestions for fixes.
-->

Functions ideally should emit strings in the same format as the input
and previously the repeat function was emitting using utf8 for input
that was in utf8view.

## What changes are included in this PR?

<!--
There is no need to duplicate the description in the issue here but it
is sometimes worth providing a summary of the individual changes in this
PR.
-->
Code, tests

## Are these changes tested?

Yes

<!--
We typically require tests for all PRs in order to:
1. Prevent the code from being accidentally broken by subsequent changes
2. Serve as another way to document the expected behavior of the code

If tests are not included in your PR, please explain why (for example,
are they covered by existing tests)?
-->

## Are there any user-facing changes?

<!--
If there are user-facing changes then we may require documentation to be
updated before approving the PR.
-->

<!--
If there are any breaking changes to public APIs, please add the `api
change` label.
-->
@pull pull bot locked and limited conversation to collaborators Mar 31, 2026
@pull pull bot added the ⤵️ pull label Mar 31, 2026
@pull pull bot merged commit 9de1253 into buraksenn:main Mar 31, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants