Update duckdb and arrow

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
arrow	dependencies	minor	=58.3.0 → =58.4.0
arrow-ipc	dependencies	minor	=58.3.0 → =58.4.0
duckdb	dependencies	minor	=1.10504.0 → =1.10505.0

---

Release Notes

apache/arrow-rs (arrow)

v58.4.0: arrow 58.4.0

Compare Source

Changelog

58.4.0 (2026-07-17)

Full Changelog

Merged pull requests:

• [58_maintenance] [parquet] Allow more encryption algorithms (#​9203) #​10351 [parquet] (mbutrovich)
• [58_maintenance] Backport cargo audit fixes #​10369 (alamb)
• [58_maintenance] chore: Ignore py03 vulnerabilities until upgrade #​10370 (alamb)
• [58_maintenance] Add test for `parquet-testing/bad_data/ARROW-GH-47662.parquet` (#​10077) #​10371 [parquet] (alamb)

* This Changelog was automatically generated by github_changelog_generator

duckdb/duckdb-rs (duckdb)

v1.10505.0

Compare Source

Highlights

• New type support: UHUGEINT via u128 (#​795), a DuckDB-native Decimal carrier covering all decimals up to DECIMAL(38, s) (#​799), GEOMETRY exposed as WKB with CRS metadata (#​801), Arrow arrow.uuid extension mapping to UUID (#​808), and narrow Arrow Decimal32/Decimal64 (#​806)
• Nested types via Arrow: LIST, STRUCT, MAP, and fixed-size ARRAY values now round-trip through Arrow record batches, vtabs, and scalar functions, with correct timestamp unit handling (#​811, #​813, #​819)
• Panic containment: panics in scalar and table function callbacks become query errors instead of aborting the host process so the connection stays usable (#​824)
• Correct result metadata: schema and logical types are decoded from the executed result, fixing stale metadata when cached prepared statements outlive schema changes (#​800, #​803)
• Leaner build deps: libduckdb-sys downloads now use ureq instead of reqwest, dropping the tokio/hyper stack from build dependencies (#​826)
• ⚠️Breaking: Type, Value, and ValueRef are now #[non_exhaustive] with new UHugeInt variants (#​795); Statement::step returns Result<Option<StructArray>> (#​800); stream_arrow no longer takes a schema parameter and the deprecated stream_step is removed (#​807)
• Updated DuckDB to v1.5.5 (#​825) and Rust to 1.97 (#​812)

What's Changed

• Document Andium LTS branch by @​mlafeldt in #​790
• Add stub nightly CI job for integration testing by @​mlafeldt in #​791
• Test DuckDB nightly commits by @​mlafeldt in #​792
• Speed up nightly CI runs by @​mlafeldt in #​793
• Save Rust CI caches only from main by @​mlafeldt in #​794
• Harden Rust CI cache saves by @​mlafeldt in #​796
• Add UHUGEINT support by @​mlafeldt in #​795
• Represent DuckDB decimals natively by @​mlafeldt in #​799
• Fix stale logical metadata by decoding from executed result by @​mlafeldt in #​800
• Support GEOMETRY type by @​mlafeldt in #​801
• Bump sanitizer nightly toolchain to 2026-07-02 by @​mlafeldt in #​802
• Extract RAII ExecutedResult owner by @​mlafeldt in #​803
• Add modern Arrow API examples and coverage by @​mlafeldt in #​804
• Document deferred constraint checking on Appender by @​mlafeldt in #​805
• Support narrow Arrow decimals by @​mlafeldt in #​806
• Remove ignored schema parameter from Arrow streaming API by @​mlafeldt in #​807
• Support Arrow UUID extension metadata by @​mlafeldt in #​808
• Split up the Arrow monolith by @​mlafeldt in #​809
• Improve rustdoc accuracy and coverage by @​mlafeldt in #​810
• Update Rust to 1.97 by @​mlafeldt in #​812
• Unify recursive Arrow-to-DuckDB vector writes by @​mlafeldt in #​811
• Fix extension header for downloaded DuckDB libs by @​mlafeldt in #​814
• Pin macOS deployment target to silence linker warnings by @​mlafeldt in #​818
• Read nested DataChunks as Arrow by @​mlafeldt in #​813
• Fix Arrow timestamp carrier conversion by @​mlafeldt in #​819
• Prepare vector modules for native nested types by @​mlafeldt in #​823
• Contain panics across scalar and table callbacks by @​mlafeldt in #​824
• Replace reqwest with ureq for the libduckdb download by @​mlafeldt in #​826
• Update DuckDB to v1.5.5 by @​mlafeldt in #​825
• Correct documentation for supported workflows by @​mlafeldt in #​827

Full Changelog: duckdb/duckdb-rs@v1.10504.0...v1.10505.0

---

Configuration

📅 Schedule: (in timezone Australia/Brisbane)

• Branch creation
  • "after 8am on saturday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91.25%. Comparing base (4a78ecc) to head (91bbdf7).

Additional details and impacted files

@@ Coverage Diff @@## main #61 +/- ##
=======================================
Coverage 91.25% 91.25% =======================================
Files 12 12 Lines 2070 2070 =======================================
Hits 1889 1889 Misses 181 181 

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.