Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Compiler: Bump protobuf #291

Open
wants to merge 4 commits into
base: master
Choose a base branch
from
Open

Conversation

jprendes
Copy link
Contributor

There is an advisory on the protobuf crate: https://rustsec.org/advisories/RUSTSEC-2024-0437
This advisory requires bumping protobuf to 3.7.2.

ttrpc-rust is using a 2.27.1 version of protobuf in ttrpc-codegen and ttrpc-compiler.
It looks like there is no intention to fix the advisory in the 2.x version of protobuf: stepancheg/rust-protobuf#756 (comment)

This PR bumps all uses of protobuf in the repo to 3.7.2, and fixes the breaking changes introduced by the update from 2.27.1 -> 3.7.2.

@jprendes
Copy link
Contributor Author

@Tim-Zhang PTAL

@Tim-Zhang
Copy link
Member

I think we can bump the ttrpc-compiler's version to 0.8.0, because the parameters's type of gen_and_write was changed, we need a major version bump.

@Tim-Zhang Tim-Zhang changed the title Bump protobuf Compiler: Bump protobuf Apr 1, 2025
@Tim-Zhang
Copy link
Member

The commit messages can be more specific such as compiler: fix breaking changes caused by bumping protobuf version

Bump usage of the protobuf and protobuf-codegen crates to 3.7.2.
These versions include a fix to the advisory RUSTSEC-2024-0437

Signed-off-by: Jorge Prendes <jorge.prendes@gmail.com>
jprendes added a commit to jprendes/ttrpc-rust that referenced this pull request Apr 3, 2025
Bump crate versions for publishing.
The compiler crate needs a major version bump after breaking changes introduced by PR containerd#291
The main crate needs a major version bump after the braking changes introduced by PR containerd#290

Signed-off-by: Jorge Prendes <jorge.prendes@gmail.com>
@jprendes jprendes force-pushed the bump-protobuf branch 2 times, most recently from 59539ad to 8835cfd Compare April 3, 2025 08:33
jprendes added a commit to jprendes/ttrpc-rust that referenced this pull request Apr 3, 2025
Bump crate versions for publishing.
The compiler crate needs a major version bump after breaking changes introduced by PR containerd#291
The main crate needs a major version bump after the braking changes introduced by PR containerd#290

Signed-off-by: Jorge Prendes <jorge.prendes@gmail.com>
@jprendes jprendes force-pushed the bump-protobuf branch 2 times, most recently from 76a6365 to 2d04934 Compare April 3, 2025 08:47
jprendes added a commit to jprendes/ttrpc-rust that referenced this pull request Apr 3, 2025
Bump crate versions for publishing.
The compiler crate needs a major version bump after breaking changes introduced by PR containerd#291
The main crate needs a major version bump after the braking changes introduced by PR containerd#290

Signed-off-by: Jorge Prendes <jorge.prendes@gmail.com>
Bumping protobuf and protobuf-codegen to 3.7.2 breaks the ttrpc-codegen and ttrpc-compiler crates.
Both of these crates were using the 2.27.1 version of the protobuf crates.
This commit fixes the breaking changes introduced by the bump in major version.

Signed-off-by: Jorge Prendes <jorge.prendes@gmail.com>
jprendes added a commit to jprendes/ttrpc-rust that referenced this pull request Apr 3, 2025
Bump crate versions for publishing.
The compiler crate needs a major version bump after breaking changes introduced by PR containerd#291
The main crate needs a major version bump after the braking changes introduced by PR containerd#290

Signed-off-by: Jorge Prendes <jorge.prendes@gmail.com>
jprendes added 2 commits April 9, 2025 09:50
Add net feature to tokio to support UDS

Signed-off-by: Jorge Prendes <jorge.prendes@gmail.com>
move the different functionalities vendored from older protobuf versions into
more descriptive modules within the util module.

Signed-off-by: Jorge Prendes <jorge.prendes@gmail.com>
@jprendes
Copy link
Contributor Author

jprendes commented Apr 9, 2025

Moving the workspace changes to a new PR.
Also moved the vendored changes to more descriptive modules within the util module.

@jprendes jprendes requested a review from Tim-Zhang April 9, 2025 10:36
@jprendes jprendes mentioned this pull request Apr 9, 2025
@jprendes
Copy link
Contributor Author

jprendes commented Apr 9, 2025

I opened #294 for the workspace changes

jprendes added a commit to jprendes/ttrpc-rust that referenced this pull request Apr 9, 2025
Bump crate versions for publishing.
The compiler crate needs a major version bump after breaking changes introduced by PR containerd#291
The main crate needs a major version bump after the braking changes introduced by PR containerd#290

Signed-off-by: Jorge Prendes <jorge.prendes@gmail.com>
jprendes added a commit to jprendes/ttrpc-rust that referenced this pull request Apr 9, 2025
Bump crate versions for publishing.
The compiler crate needs a major version bump after breaking changes introduced by PR containerd#291
The codegen crate needs a major version bump because it exports an item from the compiler crate.
The main crate needs a major version bump after the braking changes introduced by PR containerd#290

Signed-off-by: Jorge Prendes <jorge.prendes@gmail.com>
@jprendes jprendes mentioned this pull request Apr 9, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants