fix: remove credential vending features from python and java bindings

[jackye1995]

Fixing hanging Spark test: lance-format/lance-spark#177

Without this fix, the additioanl azure and gcp dependencies in credentials vending featrues pulled in native-tls, which requires installing openssl 1.1. When not present, Spark hangs because rust execution fails in a separated thread and it fails silently, and then a semaphore keeps waiting for result.

For why it fails silently rather than propagating back, that's another fix needed in Spark, but should not block the release of 2.0.0

[github-actions]

PR Review

Summary: This PR removes credential vending features (credential-vendor-aws, credential-vendor-gcp, credential-vendor-azure) from Python and Java bindings to fix a hanging Spark test caused by OpenSSL 1.1 dependency issues.

Assessment

No P0/P1 issues identified. The change is straightforward:

• Removes optional credential vending features from lance-namespace-impls in both Python and Java bindings
• Lock file changes are routine version bumps

One consideration

The PR disables credential vending features without providing an alternative. From the PR description, this is intentional for the 2.0.0 release to avoid the OpenSSL compatibility issue. However:

• Is this a temporary workaround or permanent change? If temporary, consider adding a comment or tracking issue.
• Impact on users: Users relying on credential vending through Python/Java bindings will lose this functionality. Ensure this is documented in release notes.

The core REST functionality remains enabled, so basic namespace operations should still work.

Verdict

✅ LGTM for merge - the fix addresses a real blocking issue for the release.

[bryanck]

This also fixes an issue we are running into involving native-tls, where CA certs aren't loaded.

[jtuglu1]

This fixes rest namespace for us