chore: Update changelog and dependency files for 0.10.0

.github/dependabot.yml

@@ -25,6 +25,13 @@ updates:
       day: "sunday"
     cooldown:
       default-days: 7
+    groups:
+      # The codeql-action init/autobuild/analyze steps must all run the
+      # same version - split PRs cause a version mismatch that fails the
+      # Analyze jobs. Group them so a single PR bumps all of them together.
+      codeql-action:
+        patterns:
+          - "github/codeql-action*"
 
   # Maintain dependencies for iceberg
   - package-ecosystem: "cargo"

.github/workflows/bindings_python_ci.yml

@@ -50,7 +50,7 @@ jobs:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
-      - uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+      - uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 # v8.3.0
         with:
           version: "0.9.3"
           enable-cache: true
@@ -97,7 +97,7 @@ jobs:
           working-directory: "bindings/python"
           command: build
           args: --out dist -i python3.12 # Explicitly set interpreter; manylinux containers have multiple Pythons and maturin may pick an older one
-      - uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+      - uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 # v8.3.0
         with:
           version: "0.9.3"
           enable-cache: true

.github/workflows/ci.yml

@@ -56,7 +56,7 @@ jobs:
 
       - name: Install lint tools
         # Keep versions in sync with the local install targets in Makefile.
-        uses: taiki-e/install-action@9e1e5806d4a4822de933115878265be9aaa786d9 # v2.82.2
+        uses: taiki-e/install-action@4684b8405694ae9dd42c9f39ba901a70ae83f4a3 # v2.82.9
         with:
           tool: taplo@0.9.3,cargo-machete@0.7.0
 
@@ -79,7 +79,7 @@ jobs:
         run: cargo machete
 
       - name: Check typos
-        uses: crate-ci/typos@37bb98842b0d8c4ffebdb75301a13db0267cef89 # v1.47.2
+        uses: crate-ci/typos@bee27e3a4fd1ea2111cf90ab89cd076c870fce14 # v1.48.0
 
   clippy:
     needs: lint
@@ -92,11 +92,6 @@ jobs:
       - name: Setup Rust toolchain
         uses: ./.github/actions/setup-builder
 
-      - name: Install protoc
-        uses: arduino/setup-protoc@c65c819552d16ad3c9b72d9dfd5ba5237b9c906b # v3.0.0
-        with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-
       - name: Cargo clippy
         run: make check-clippy
 
@@ -126,11 +121,6 @@ jobs:
         with:
           save-if: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }}
 
-      - name: Install protoc
-        uses: arduino/setup-protoc@c65c819552d16ad3c9b72d9dfd5ba5237b9c906b # v3.0.0
-        with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-
       - name: Build
         run: make build
 
@@ -152,11 +142,6 @@ jobs:
         with:
           save-if: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }}
 
-      - name: Install protoc
-        uses: arduino/setup-protoc@c65c819552d16ad3c9b72d9dfd5ba5237b9c906b # v3
-        with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-
       - name: Check each crate standalone
         run: |
           for pkg in $(cargo metadata --no-deps --format-version=1 | jq -r '.packages[].name'); do
@@ -216,11 +201,6 @@ jobs:
       - name: Setup Rust toolchain
         uses: ./.github/actions/setup-builder
 
-      - name: Install protoc
-        uses: arduino/setup-protoc@c65c819552d16ad3c9b72d9dfd5ba5237b9c906b # v3.0.0
-        with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-
       - name: Cache Rust artifacts
         uses: swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
         with:
@@ -229,7 +209,7 @@ jobs:
 
       - name: Install cargo-nextest
         if: matrix.test-suite.name == 'default'
-        uses: taiki-e/install-action@bffeee26d4db9be238a4ea78d8826604ebcb594d # v2.82.5
+        uses: taiki-e/install-action@4684b8405694ae9dd42c9f39ba901a70ae83f4a3 # v2.82.9
         with:
           tool: cargo-nextest
 
@@ -264,10 +244,6 @@ jobs:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
-      - name: Install protoc
-        uses: arduino/setup-protoc@c65c819552d16ad3c9b72d9dfd5ba5237b9c906b # v3.0.0
-        with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
       - name: Get MSRV
         id: get-msrv
         uses: ./.github/actions/get-msrv

.github/workflows/codeql.yml

@@ -46,11 +46,11 @@ jobs:
         persist-credentials: false
 
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
+      uses: github/codeql-action/init@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3
       with:
         languages: actions
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
+      uses: github/codeql-action/analyze@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3
       with:
         category: "/language:actions"

.github/workflows/public-api.yml

@@ -48,15 +48,5 @@ jobs:
         with:
           save-if: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }}
 
-      - name: Install protoc
-        uses: arduino/setup-protoc@c65c819552d16ad3c9b72d9dfd5ba5237b9c906b # v3.0.0
-        with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Install cargo-public-api
-        uses: taiki-e/install-action@bffeee26d4db9be238a4ea78d8826604ebcb594d # v2.82.5
-        with:
-          tool: cargo-public-api
-
       - name: Check public API
         run: make check-public-api

.github/workflows/release_python.yml

@@ -187,7 +187,7 @@ jobs:
           working-directory: "bindings/python"
           command: build
           args: --release -o dist -i python3.12 # Explicitly set interpreter; manylinux containers have multiple Pythons and maturin may pick an older one
-      - uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+      - uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 # v8.3.0
         with:
           version: "0.9.3"
           enable-cache: true

.github/workflows/release_python_nightly.yml

@@ -124,7 +124,7 @@ jobs:
           command: build
           args: --release -o dist -i python3.12 # Explicitly set interpreter; manylinux containers have multiple Pythons and maturin may pick an older one
 
-      - uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+      - uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 # v8.3.0
         with:
           version: "0.9.3"
           enable-cache: true

.github/workflows/website.yml

@@ -48,11 +48,6 @@ jobs:
         with:
           mdbook-version: "0.4.36"
 
-      - name: Install protoc
-        uses: arduino/setup-protoc@c65c819552d16ad3c9b72d9dfd5ba5237b9c906b # v3.0.0
-        with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
-
       - name: Build
         working-directory: website
         run: mdbook build

CHANGELOG.md

@@ -24,7 +24,7 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/)
 and this project adheres to [Semantic Versioning](https://semver.org/).
 
-## [v0.10.0] - 2026-07-07
+## [v0.10.0] - 2026-07-14
 
 ### Breaking Changes
 
@@ -288,6 +288,28 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
 * Fix zizmor pin by @blackmwk in https://github.com/apache/iceberg-rust/pull/2762
 * feat(encryption) [8/N] Read encrypted manifest file by @xanderbailey in https://github.com/apache/iceberg-rust/pull/2586
 * Reject negative positional delete positions by @fallintoplace in https://github.com/apache/iceberg-rust/pull/2631
+* chore: Update changelog for 0.10.0 by @dannycjones in https://github.com/apache/iceberg-rust/pull/2782
+* chore(refactor): rename SnapshotProducer::manifest_file to produce_manifest_file_list by @dannycjones in https://github.com/apache/iceberg-rust/pull/2596
+* chore(deps): Bump DataFusion to 54.0.0 by @xanderbailey in https://github.com/apache/iceberg-rust/pull/2648
+* fix(reader): keep rows with a null equality-delete column value by @mbutrovich in https://github.com/apache/iceberg-rust/pull/2781
+* feat(catalog-rest): parse server-advertised endpoints from GET /v1/config by @huan233usc in https://github.com/apache/iceberg-rust/pull/2692
+* fix(spec): support float/double conversion in Datum::to() by @mbutrovich in https://github.com/apache/iceberg-rust/pull/2783
+* feat(encryption): [11/N] KMS factory trait and catalog wiring by @xanderbailey in https://github.com/apache/iceberg-rust/pull/2650
+* ci: fix the cargo-public-api double install by @abnobdoss in https://github.com/apache/iceberg-rust/pull/2793
+* ci: drop unnecessary protoc installs by @abnobdoss in https://github.com/apache/iceberg-rust/pull/2805
+* Infra: Group github/codeql-action bumps into a single dependabot PR by @ebyhr in https://github.com/apache/iceberg-rust/pull/2800
+* chore(deps): Bump rand from 0.9.4 to 0.10.2 by @dependabot[bot] in https://github.com/apache/iceberg-rust/pull/2818
+* chore(deps): Bump reqwest from 0.12.28 to 0.13.4 by @dependabot[bot] in https://github.com/apache/iceberg-rust/pull/2810
+* chore(deps): Bump taiki-e/install-action from 2.82.2 to 2.82.9 by @dependabot[bot] in https://github.com/apache/iceberg-rust/pull/2816
+* chore(deps): Bump astral-sh/setup-uv from 8.2.0 to 8.3.0 by @dependabot[bot] in https://github.com/apache/iceberg-rust/pull/2817
+* chore(deps-dev): Bump huggingface-hub from 1.21.0 to 1.22.0 in /bindings/python by @dependabot[bot] in https://github.com/apache/iceberg-rust/pull/2806
+* chore(deps): Bump crate-ci/typos from 1.47.2 to 1.48.0 by @dependabot[bot] in https://github.com/apache/iceberg-rust/pull/2809
+* chore(deps): Bump the codeql-action group with 2 updates by @dependabot[bot] in https://github.com/apache/iceberg-rust/pull/2808
+* fix(arrow): error on required field absent from data file with no default by @mbutrovich in https://github.com/apache/iceberg-rust/pull/2797
+* chore(deps-dev): Bump datafusion from 52.3.0 to 54.0.0 in /bindings/python by @dependabot[bot] in https://github.com/apache/iceberg-rust/pull/2807
+* docs: improve ancestors_between docs to make behaviour more clear by @xanderbailey in https://github.com/apache/iceberg-rust/pull/2796
+* Include license and notice files in iceberg-storage-opendal crate by @ankane in https://github.com/apache/iceberg-rust/pull/2823
+* fix(license): Add missing LICENSE and NOTICE symlinks for iceberg-cache-moka and iceberg-catalog-loader by @dannycjones in https://github.com/apache/iceberg-rust/pull/2828
 
 ## [v0.9.0] - 2026-03-10