Files
openobserve/deny.toml
T
Hengfei Yang 0ee605280e fix: set download mmdb to disable as default (#8768)
### **User description**
- [x] Disable mmdb download as default
- [x] Upgrade to datafusion v50.1.0


___

### **PR Type**
Bug fix, Enhancement


___

### **Description**
- Default enable MMDB downloads

- Bump DataFusion to 50.1.0

- Project version to 0.16.0


___

### Diagram Walkthrough


```mermaid
flowchart LR
  cfg["Config: mmdb_disable_download default"] -- set to false --> behavior["MMDB downloads enabled by default"]
  deps["Cargo: DataFusion 50.1.0"] -- upgrade --> engine["Query engine components"]
  ver["Cargo: version 0.16.0"] -- release bump --> pkg["Crate metadata"]
```



<details> <summary><h3> File Walkthrough</h3></summary>

<table><thead><tr><th></th><th align="left">Relevant
files</th></tr></thead><tbody><tr><td><strong>Bug
fix</strong></td><td><table>
<tr>
  <td>
    <details>
<summary><strong>config.rs</strong><dd><code>Enable MMDB downloads by
default</code>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; </dd></summary>
<hr>

src/config/src/config.rs

<ul><li>Flip <code>mmdb_disable_download</code> default to false<br>
<li> Keeps env var name <code>ZO_MMDB_DISABLE_DOWNLOAD</code></ul>


</details>


  </td>
<td><a
href="https://github.com/openobserve/openobserve/pull/8768/files#diff-9aeee4a74c0520daa40f9b81c7016f5b6b3254375b968dd7598e745630980d62">+1/-1</a>&nbsp;
&nbsp; &nbsp; </td>

</tr>
</table></td></tr><tr><td><strong>Enhancement</strong></td><td><table>
<tr>
  <td>
    <details>
<summary><strong>Cargo.toml</strong><dd><code>Version and DataFusion
dependency upgrades</code>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
</dd></summary>
<hr>

Cargo.toml

<ul><li>Bump crate version to 0.16.0<br> <li> Upgrade
<code>datafusion</code> to 50.1.0<br> <li> Upgrade
<code>datafusion-proto</code> and aggregate-common to 50.1.0</ul>


</details>


  </td>
<td><a
href="https://github.com/openobserve/openobserve/pull/8768/files#diff-2e9d962a08321605940b5a657135052fbcef87b5e360662bb527c96d9a615542">+4/-4</a>&nbsp;
&nbsp; &nbsp; </td>

</tr>
</table></td></tr></tr></tbody></table>

</details>

___
2025-10-08 21:28:40 +08:00

78 lines
2.8 KiB
TOML
Raw Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
# Configuration documentation:
#  https://embarkstudios.github.io/cargo-deny/index.html
[advisories]
yanked = "deny"
git-fetch-with-cli = true
ignore = [
"RUSTSEC-2023-0071", # from rsa, transitive dep of sqlx
"RUSTSEC-2021-0139", # from ansi_term, transitive dep of vrl
"RUSTSEC-2024-0370", # we need it even it is no longer maintained
"RUSTSEC-2024-0384", # from instant, dep of parking_lot
"RUSTSEC-2024-0388", # from derivative, dep of vrl
"RUSTSEC-2024-0421", # from idna, transitive dep of vrl
"RUSTSEC-2024-0436", # from paste, transitive dep of datafusion
"RUSTSEC-2024-0437", # from protobuf, transitive dep of prometheus
"RUSTSEC-2025-0020", # from poy3, transitive dep of datafusion-functions-json
]
[licenses]
exceptions = [
# We should probably NOT bundle CA certs but use the OS ones.
{ name = "webpki-roots", allow = ["MPL-2.0","CDLA-Permissive-2.0"] },
{ name = "openobserve", allow = ["AGPL-3.0"] },
{ name = "config", allow = ["AGPL-3.0"] },
{ name = "infra", allow = ["AGPL-3.0"] },
{ name = "ingester", allow = ["AGPL-3.0"] },
{ name = "wal", allow = ["AGPL-3.0"] },
{ name = "proto", allow = ["AGPL-3.0"] },
{ name = "flight", allow = ["AGPL-3.0"] },
{ name = "report_server", allow = ["AGPL-3.0"] },
{ name = "arrayref", allow = ["BSD-2-Clause"] },
{ name = "mach", allow = ["BSD-2-Clause"] },
{ name = "fastdivide", allow = ["zlib-acknowledgement"] },
{ name = "foldhash", allow = ["Zlib"] },
{ name = "adler32", allow = ["Zlib"] },
{ name = "libz-rs-sys", allow = ["Zlib"] },
{ name = "libz-rs", allow = ["Zlib"] },
{ name = "zlib-rs", allow = ["Zlib"] },
# These two are transitive deps of vrl via dep rustyline.
# However, rustyline is needed only when we enable feature cli
# which we haven't. Probably in Cargo.lock due to old code, need
# to take a look and remove.
{ name = "clipboard-win", allow = ["BSL-1.0"] },
{ name = "error-code", allow = ["BSL-1.0"] },
{ name = "base16", allow = ["CC0-1.0"] },
{ name = "tiny-keccak", allow = ["CC0-1.0"] },
{ name = "quoted_printable", allow = ["0BSD"] },
{ name = "ring", allow = ["BSD-4-Clause", "OpenSSL"] },
{ name = "inferno", allow = ["CDDL-1.0"] },
{ name = "libbz2-rs-sys", allow = ["bzip2-1.0.6"] },
{ name = "aws-lc-sys", allow = ["OpenSSL"] },
{ name = "borrow-or-share", allow = ["MIT-0"] },
]
allow = [
"Apache-2.0",
"Apache-2.0 WITH LLVM-exception",
"MPL-2.0",
"MIT",
"BSD-3-Clause", # OSI + fsf free
"Unicode-3.0", # OSI
"ISC", # OSI + fsf free
"BSL-1.0",
"CC0-1.0"
]
[[licenses.clarify]]
name = "ring"
expression = "BSD-4-Clause AND ISC AND MIT AND OpenSSL"
license-files = [{ path = "LICENSE", hash = 0xbd0eed23 }]
[sources.allow-org]
github = ["openobserve", "apache"]
[sources]
allow-git = ["https://github.com/mattsse/chromiumoxide"]