Minarrow 0.17.0 release

.github/workflows/release.yml

@@ -103,12 +103,33 @@ jobs:
           nm -D --defined-only "$so" 2>/dev/null | awk '{print $3}' | grep -v '^$' | sort -u || true
           echo "binary audit passed"
 
+  # Install the built wheel and run the minarrow-py test suite.
+  test:
+    name: Python tests
+    runs-on: ubuntu-latest
+    needs: [linux]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - uses: actions/download-artifact@v4
+        with:
+          name: wheels-linux-x86_64
+          path: dist
+      - name: Install wheel and run pytest
+        run: |
+          set -euo pipefail
+          pip install dist/*.whl
+          pip install pytest pyarrow
+          python -m pytest minarrow-py/tests/ -v
+
   # Manual run -> TestPyPI
   publish-testpypi:
     name: Publish to TestPyPI
     if: github.event_name == 'workflow_dispatch'
     runs-on: ubuntu-latest
-    needs: [linux, macos, windows, sdist, audit]
+    needs: [linux, macos, windows, sdist, audit, test]
     environment:
       name: testpypi
       url: https://test.pypi.org/project/minarrow/
@@ -130,7 +151,7 @@ jobs:
     name: Publish to PyPI
     if: github.event_name == 'release'
     runs-on: ubuntu-latest
-    needs: [linux, macos, windows, sdist, audit]
+    needs: [linux, macos, windows, sdist, audit, test]
     environment:
       name: pypi
       url: https://pypi.org/project/minarrow/

CHANGELOG.md

@@ -75,6 +75,13 @@ overflow wraps consistently with add/subtract/multiply.
 - `log` dependency is now optional, included in default features. When disabled,
   `warn!` falls back to `eprintln!`.
 - `vec64` dependency bumped to 0.5.0 for Rust nightly compatibility.
+- `cast_polars` feature now depends on `polars-core` instead of the umbrella
+  `polars` crate. This improves compile times when the polars (FFI bridge)
+  feature is on and avoids `quick-xml` security advisories (RUSTSEC-2026-0194, RUSTSEC-2026-0195)
+  that were getting pulled in transitively.
+- Bumped `arrow` / `arrow-schema` from 58.x to 59.2.0 and `polars-core` /
+  `polars-arrow` from 0.53.0 to 0.55.2. Trimmed back Arrow feature flags.
+- `cargo update` across all transitive dependencies.
 
 ### Fixed
 - `Value::len()` for `ArrayView` variants now returns the view length instead