Merge remote-tracking branch 'origin/main' into arrow-avro

# Conflicts:
#	Cargo.lock

Author: getChan

.github/workflows/audit.yml

@@ -42,13 +42,8 @@ jobs:
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8  # v5.0.0
       - name: Install cargo-audit
-        uses: taiki-e/install-action@c5b1b6f479c32f356cc6f4ba672a47f63853b13b  # v2.62.38
+        uses: taiki-e/install-action@41ef8c65f4034ff24ab1cc2cef52f3000bcf9523  # v2.62.40
         with:
           tool: cargo-audit
       - name: Run audit check
-        # RUSTSEC-2025-0111: tokio-tar is by testcontainers for orchestration
-        # of testing, so does not impact DataFusion's security
-        # See https://github.com/apache/datafusion/issues/18288
-        # NOTE: can remove this once testcontainers releases a version that includes
-        # https://github.com/testcontainers/testcontainers-rs/pull/852
-        run: cargo audit --ignore RUSTSEC-2025-0111
+        run: cargo audit

.github/workflows/rust.yml

@@ -425,7 +425,7 @@ jobs:
           sudo apt-get update -qq
           sudo apt-get install -y -qq clang
       - name: Setup wasm-pack
-        uses: taiki-e/install-action@c5b1b6f479c32f356cc6f4ba672a47f63853b13b  # v2.62.38
+        uses: taiki-e/install-action@41ef8c65f4034ff24ab1cc2cef52f3000bcf9523  # v2.62.40
         with:
           tool: wasm-pack
       - name: Run tests with headless mode
@@ -752,7 +752,7 @@ jobs:
       - name: Setup Rust toolchain
         uses: ./.github/actions/setup-builder
       - name: Install cargo-msrv
-        uses: taiki-e/install-action@c5b1b6f479c32f356cc6f4ba672a47f63853b13b  # v2.62.38
+        uses: taiki-e/install-action@41ef8c65f4034ff24ab1cc2cef52f3000bcf9523  # v2.62.40
         with:
           tool: cargo-msrv