release: 0.4.0 — bump MSRV 1.86 -> 1.90

Raise the workspace MSRV from 1.86 to 1.90 across the CI toolchains, release
workflow, docs and READMEs, and bump the workspace + internal path-dep
versions 0.3.0 -> 0.4.0. Also carries the already-committed wire fuzz-crash
fix (reject schema messages with no fields vector).

The sentry 0.46 pin stays as-is; the 1.88-requiring 0.47+ upgrade is now
unblocked by the new MSRV but deferred to keep that dependency bump separate.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: rustyconover

.github/workflows/ci.yml

@@ -16,8 +16,8 @@ jobs:
     steps:
       - uses: actions/checkout@v5
 
-      - name: Install Rust toolchain (MSRV 1.86)
-        uses: dtolnay/rust-toolchain@1.86.0
+      - name: Install Rust toolchain (MSRV 1.90)
+        uses: dtolnay/rust-toolchain@1.90.0
         with:
           components: rustfmt, clippy
 
@@ -79,7 +79,7 @@ jobs:
           repository: Query-farm/vgi-rpc-python
           path: vgi-python
 
-      - uses: dtolnay/rust-toolchain@1.86.0
+      - uses: dtolnay/rust-toolchain@1.90.0
 
       - uses: Swatinem/rust-cache@v2
 
@@ -136,8 +136,8 @@ jobs:
     steps:
       - uses: actions/checkout@v5
 
-      - name: Install MSRV toolchain (1.86)
-        uses: dtolnay/rust-toolchain@1.86.0
+      - name: Install MSRV toolchain (1.90)
+        uses: dtolnay/rust-toolchain@1.90.0
 
       - uses: Swatinem/rust-cache@v2
 

.github/workflows/release.yml

@@ -49,8 +49,8 @@ jobs:
     steps:
       - uses: actions/checkout@v5
 
-      - name: Install Rust toolchain (MSRV 1.86)
-        uses: dtolnay/rust-toolchain@1.86.0
+      - name: Install Rust toolchain (MSRV 1.90)
+        uses: dtolnay/rust-toolchain@1.90.0
         with:
           components: rustfmt, clippy
 

CLAUDE.md

@@ -361,7 +361,7 @@ cannot overwrite an existing one.
    published earlier.
 
 CI (`.github/workflows/ci.yml`) runs fmt, clippy, tests, cargo doc, an
-MSRV (1.86) build, and the Python-driven conformance job (full six-
+MSRV (1.90) build, and the Python-driven conformance job (full six-
 transport matrix) on every push.
 
 ## Defining a service with the macro

Cargo.lock

@@ -3,9 +3,9 @@ resolver = "2"
 members = ["vgi-rpc", "vgi-rpc-macros", "vgi-rpc-client", "conformance-client-driver", "conformance-worker", "benchmark-worker", "vgi-rpc-s3", "vgi-rpc-gcs"]
 
 [workspace.package]
-version = "0.3.0"
+version = "0.4.0"
 edition = "2021"
-rust-version = "1.86"
+rust-version = "1.90"
 license = "Apache-2.0"
 authors = ["Query Farm LLC <hello@query.farm>"]
 homepage = "https://query.farm"

Cargo.toml

@@ -23,7 +23,7 @@ unix = []
 shm = ["vgi-rpc/shm"]
 
 [dependencies]
-vgi-rpc = { path = "../vgi-rpc", version = "0.3.0", default-features = false }
+vgi-rpc = { path = "../vgi-rpc", version = "0.4.0", default-features = false }
 arrow-array.workspace = true
 arrow-schema.workspace = true
 arrow-ipc.workspace = true
@@ -39,6 +39,6 @@ sha2 = { workspace = true, optional = true }
 [dev-dependencies]
 arrow-cast.workspace = true
 # Spin up a real axum HTTP server in-process for round-trip tests.
-vgi-rpc = { path = "../vgi-rpc", version = "0.3.0", features = ["http"] }
+vgi-rpc = { path = "../vgi-rpc", version = "0.4.0", features = ["http"] }
 tokio = { workspace = true }
 axum = { workspace = true }

vgi-rpc-client/Cargo.toml

@@ -13,7 +13,7 @@ keywords = ["vgi-rpc", "gcs", "arrow", "storage"]
 categories = ["network-programming"]
 
 [dependencies]
-vgi-rpc = { path = "../vgi-rpc", version = "0.3.0", default-features = false, features = ["http"] }
-vgi-rpc-s3 = { path = "../vgi-rpc-s3", version = "0.3.0" }
+vgi-rpc = { path = "../vgi-rpc", version = "0.4.0", default-features = false, features = ["http"] }
+vgi-rpc-s3 = { path = "../vgi-rpc-s3", version = "0.4.0" }
 reqwest = { version = "0.12", default-features = false, features = ["blocking", "rustls-tls"] }
 uuid = { version = "1", features = ["v4"] }

vgi-rpc-gcs/Cargo.toml

@@ -13,7 +13,7 @@ keywords = ["vgi-rpc", "s3", "arrow", "storage"]
 categories = ["network-programming"]
 
 [dependencies]
-vgi-rpc = { path = "../vgi-rpc", version = "0.3.0", default-features = false, features = ["http"] }
+vgi-rpc = { path = "../vgi-rpc", version = "0.4.0", default-features = false, features = ["http"] }
 reqwest = { version = "0.12", default-features = false, features = ["blocking", "rustls-tls"] }
 uuid = { version = "1", features = ["v4"] }
 

vgi-rpc-s3/Cargo.toml

@@ -81,17 +81,17 @@ chacha20poly1305 = { workspace = true, optional = true }
 jsonwebtoken = { version = "9.3", optional = true, default-features = false, features = ["use_pem"] }
 reqwest = { version = "0.12", default-features = false, features = ["blocking", "rustls-tls", "json"], optional = true }
 urlencoding = { version = "2", optional = true }
-vgi-rpc-macros = { path = "../vgi-rpc-macros", version = "0.3.0", optional = true }
+vgi-rpc-macros = { path = "../vgi-rpc-macros", version = "0.4.0", optional = true }
 x509-parser = { version = "0.16", optional = true }
 percent-encoding = { version = "2", optional = true }
 libc = { version = "0.2", optional = true }
 # Real Sentry SDK — gated by the `sentry-sdk` feature. Default
 # features pull in tokio/reqwest transports; we strip them and let
 # operators bring their own runtime. `backtrace` + `contexts` are the
 # minimum surface needed for useful error events.
-# sentry 0.46 is the last release compatible with our 1.86 MSRV;
-# 0.47+ require rustc 1.88.  Bump together with the workspace MSRV
-# bump when it happens.
+# sentry pinned to 0.46 here. 0.47+ require rustc 1.88, which the 1.90
+# workspace MSRV now satisfies — this pin can be lifted when convenient
+# (deferred from the MSRV bump to keep the dependency upgrade separate).
 sentry = { version = "0.46", default-features = false, features = ["backtrace", "contexts"], optional = true }
 chrono.workspace = true
 rust_decimal.workspace = true

vgi-rpc/Cargo.toml

@@ -11,7 +11,7 @@ passes the **complete 868-test Python conformance suite** across
 pipe, subprocess, HTTP, Unix-socket, externalised-upload, and
 shared-memory pipe transports.
 
-Stock `arrow-rs` 58.x dependency tree, MSRV 1.86, no
+Stock `arrow-rs` 58.x dependency tree, MSRV 1.90, no
 `[patch.crates-io]` required.
 
 ## Highlights