chore: bump object_store to 0.14.1

[comphead]

Which issue does this PR close?

• Closes Upgrade object_store to 0.14 #10211

The PR is meant to continue efforts started in #10156

Rationale for this change

What changes are included in this PR?

Are these changes tested?

Are there any user-facing changes?

[comphead]

depends on #10226

[alamb]

Makes sense to me -- this can go out with the next major release

• #9880

[alamb]

See also this PR from @brancz

• parquet: deprecate explicit object_store integration #10354

[alamb]

See also this PR from @kevinjqliu for 0.14.0

• deps: bump object_store to 0.14.0 #10179

[Jefffrey]

would this bump also allow us to fix this?

arrow-rs/.github/workflows/audit.yml

Lines 44 to 47 in 005a2fd

	# Waiting on an object_store release with quick-xml >=0.41.0.
	# https://rustsec.org/advisories/RUSTSEC-2026-0194
	# https://rustsec.org/advisories/RUSTSEC-2026-0195
	run: cargo audit --ignore RUSTSEC-2026-0194 --ignore RUSTSEC-2026-0195

[kszucs]

I need a more recent object_store version for apache/datafusion#23287 but parquet's pin prevents updating it, so I could use this change.

[comphead]

I need a more recent object_store version for apache/datafusion#23287 but parquet's pin prevents updating it, so I could use this change.

FYI, In DF we track the update in apache/datafusion#23693

[kevinjqliu]

Based on the CI failure

{"type":"terminate_with_failure","reason":{"description":"Crate source was found to be incompatible with Rust version '1.85.0' specified as MSRV in the Cargo manifest located at '/__w/arrow-rs/arrow-rs/arrow-integration-testing/Cargo.toml'"}}

Should we bump the MSRV?

arrow-rs/Cargo.toml

Line 85 in ed92960

rust-version = "1.85"

Looking at the last MSRV bump (#8429), we should follow https://github.com/apache/arrow-rs?tab=readme-ov-file#rust-version-compatibility-policy which says

The new MSRV if selected will be at least 6 months old.

that brings us to 1.93.1 (Released on: 12 February, 2026) https://releases.rs/docs/1.93.1/
or 1.92.0 (Released on: 11 December, 2025) https://releases.rs/docs/1.92.0/ if we want to be more conservative

[kevinjqliu]

would this bump also allow us to fix this?

yea looks like in 0.14.1, we're using quick-xml version = "0.41.0"
https://github.com/apache/arrow-rs-object-store/blob/v0.14.1/Cargo.toml#L56

[Jefffrey]

• we'll just merge Bump MSRV to 1.88 #10254 in first

[kevinjqliu]

nice!

[alamb]

I plan to merge this once CI passes

[alamb]

I merged up from main to resolve a conflict

[comphead]

Looks like CI queue is super slow and this is not only for Arrow rust

[kevinjqliu]

yea i noticed that for other apache repos too today