build(deps): update parquet requirement from 57 to 59 in /test/cargo-fuzz

[dependabot]

Updates the requirements on parquet to permit the latest version.

Release notes

Sourced from parquet's releases.

arrow 59.2.0

Changelog

59.2.0 - (2026-08-02)

Full Changelog

Enhancements

• arrow-avro: Deprecate object_store integration by @​brancz in #10484
• chore(arrow): add unchecked array builder methods by @​Rich-T-kid in #10440
• feat(arrow-ipc): add sans-IO stream encoder by @​Phoenix500526 in #10277
• chore(arrow-cast): support suffix white space in arrow-cast parse by @​Rich-T-kid in #10396
• feat(coalesce): add size function by @​rluvaton in #10331
• fix(parquet): support mask filtering across skipped pages by @​hhhizzz in #10288
• chore(arrow-cast): support white space prefixed parse for ints and floats by @​Rich-T-kid in #10374
• chore(arrow-buffer): Make more of i256 available in const code by @​AdamGS in #10363
• feat(arrow-array): Expose builder buffer capacity accessors by @​Weijun-H in #10342
• feat(arrow-arith): Add interval multiplication by i64 by @​peterxcli in #10336
• fix: Make parquet-index work with column paths by @​korowa in #10330
• feat(arrow-csv): add support for parsing Float16 by @​Glatzel in #10343
• Remove the unmaintained paste dependency from arrow by @​Phoenix500526 in #10303
• chore: formalize the default map field names to match default arrow spec by @​rluvaton in #10297
• feat(variant): Add variant_to_arrow Map type support by @​sdf-jkl in #10307

Bug fixes

• fix(arrow-schema): Persist dictionary ordered flag on FFI schema import by @​borchero in #10514
• fix(arrow-json): validate ListView child nullability by @​dk3yyyy in #10486
• fix(arrow-json): validate map value nullability by @​subotac in #10475
• avro: bound VLQDecoder::long against overlong varints by @​STiFLeR7 in #10407
• arrow-row: Fix decode_fixed_size_list to apply the corrected_type step for dictionary children by @​zhuqi-lucas in #10414

... (truncated)

Changelog

Sourced from parquet's changelog.

59.2.0 - (2026-08-02)

Full Changelog

Enhancements

• arrow-avro: Deprecate object_store integration by @​brancz in #10484
• chore(arrow): add unchecked array builder methods by @​Rich-T-kid in #10440
• feat(arrow-ipc): add sans-IO stream encoder by @​Phoenix500526 in #10277
• chore(arrow-cast): support suffix white space in arrow-cast parse by @​Rich-T-kid in #10396
• feat(coalesce): add size function by @​rluvaton in #10331
• fix(parquet): support mask filtering across skipped pages by @​hhhizzz in #10288
• chore(arrow-cast): support white space prefixed parse for ints and floats by @​Rich-T-kid in #10374
• chore(arrow-buffer): Make more of i256 available in const code by @​AdamGS in #10363
• feat(arrow-array): Expose builder buffer capacity accessors by @​Weijun-H in #10342
• feat(arrow-arith): Add interval multiplication by i64 by @​peterxcli in #10336
• fix: Make parquet-index work with column paths by @​korowa in #10330
• feat(arrow-csv): add support for parsing Float16 by @​Glatzel in #10343
• Remove the unmaintained paste dependency from arrow by @​Phoenix500526 in #10303
• chore: formalize the default map field names to match default arrow spec by @​rluvaton in #10297
• feat(variant): Add variant_to_arrow Map type support by @​sdf-jkl in #10307

Bug fixes

• fix(arrow-schema): Persist dictionary ordered flag on FFI schema import by @​borchero in #10514
• fix(arrow-json): validate ListView child nullability by @​dk3yyyy in #10486
• fix(arrow-json): validate map value nullability by @​subotac in #10475
• avro: bound VLQDecoder::long against overlong varints by @​STiFLeR7 in #10407
• arrow-row: Fix decode_fixed_size_list to apply the corrected_type step for dictionary children by @​zhuqi-lucas in #10414
• [Variant] make value mandatory field for VariantArray/ShreddingState by @​sdf-jkl in #10318
• fix off by one error for slice accounting by @​Rich-T-kid in #10406
• fix: GenericByteViewArray::gc() drops inline views on the multi-buffer slow path by @​adriangb in #10287
• fix(arrow-json): render coerced f32 as its value in the string decoder by @​hareshkh in #10386
• fix(arrow-cast): make b64_encode reject invalid UTF-8 from misbehaving Engine impls by @​bit2swaz in #10324
• fix: take FFI_ArrowArrayStream errno values from libc by @​fornwall in #10299
• fix(arrow-data): allow full dictionary key range when concatenating by @​raphaelroshan in #10323
• Don't panic on invalid c ffi schema name by @​robert3005 in #10328
• fix(REE): check upfront if sorting empty array or 0 limit by @​Jefffrey in #10293
• fix(arrow-avro): bound untrusted OCF block size and item counts by @​miniex in #10237
• fix(arrow-array): disallow creating MapArray with nullable key field by @​rluvaton in #10272
• fix: don't panic on ArrayData::try_new on bad input even when force_validate feature is on by @​rluvaton in #10282

Performance improvements

• perf(parquet): slice up contiguous buffer for decimals and fsb by @​MassivePizza in #10364
• feat(parquet): RowSelection can be backed by a BooleanBuffer by @​haohuaijin in #10141
• perf(parquet): use Cursor in ZSTDCodec to avoid Vec alloc and copy by @​MassivePizza in #10345
• optimize(parquet): Nested list batching child.write calls by @​mapleFU in #10085
• perf(parquet): splice buffered pages with write_all instead of io::copy (adapts #10052) by @​adriangb in #10353
• hoist calls for null_sentinel by @​Rich-T-kid in #10356
• perf: speed up substring_by_char with an ASCII fast path and single-pass bounds by @​andygrove in #10334
• Cache encoded field name in FieldEncoder by @​MassivePizza in #10296
• perf: allow users to skip utf8 validation in arrow-row by @​Rich-T-kid in #10319

... (truncated)

Commits

• 782e5a6 Update version to 59.2.0, update changelog generation to git-cliff (#10451)
• ed92960 Revert "chore: formalize the default map field names to match default arrow s...
• bf82c78 chore(parquet): add link to ticket in object_store deprecation message (#10502)
• 15c20f0 chore(avro): add link to ticket in object_store deprecation message (#10503)
• e7ae89c Enable allow_attributes lint for arrow-string (#10482)
• 37866b4 fix(arrow-schema): Persist dictionary ordered flag on FFI schema import (#10514)
• fd8ead5 arrow-avro: Deprecate object_store integration (#10484)
• 34c7c2b parquet: Remove explicit object_store integration (#10354)
• 6183ac9 Add LICENSE.txt and NOTICE.txt to pyarrow crates (#10481)
• 23e61b6 chore: add sub tags (#10473)
• Additional commits viewable in compare view

[def-]

Closing: this PR comes from the /test/cargo-fuzz dependabot directory, which edits the root Cargo.toml without owning the root Cargo.lock, so it can never pass --locked. #38315 removes that directory. Bumps for these crates come from the / directory instead.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.