Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ORC-20 - Upgrade protoc and protobuf version #21

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

mgabelle
Copy link

@mgabelle mgabelle commented Feb 5, 2025

What changes were proposed in this pull request?

PR to address issues related in #20
Changes consist of upgrading to the most recent version of protobuf and protoc.

Why are the changes needed?

Changes needed cause there are possible conflicts with recent protobuf versions from other libraries.
Also the current protobuf version is way out behind the current one and has some vulnerabilities.

How was this patch tested?

No tests, just a build, I don't really know how to correctly test this one.

@github-actions github-actions bot added the BUILD label Feb 5, 2025
@wgtmac
Copy link
Member

wgtmac commented Feb 5, 2025

Is there any risk? This seems to be a huge version bump. @dongjoon-hyun

@@ -61,15 +61,15 @@
<maven.compiler.release>17</maven.compiler.release>
<maven.compiler.useIncrementalCompilation>false</maven.compiler.useIncrementalCompilation>
<maven.version>3.9.6</maven.version>
<protoc.version>3.17.3</protoc.version>
<protoc.version>4.28.2</protoc.version>
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

May I ask why you propose this old version instead of the latest, @mgabelle ?

@dongjoon-hyun
Copy link
Member

Is there any risk? This seems to be a huge version bump. @dongjoon-hyun

Yes, there is a breaking change, @wgtmac . For example, v26 introduced a breaking change to Java API last year. And, this is more higher version than that.

v26.x will break compatibility with generated code from older major versions. Users should regenerate old generated code to be from the same version.
For example, GeneratedMessageV3, which was originally introduced for backwards compatibility with generated code from v2.x.x against v3.x.x runtime, will be renamed to GeneratedMessage. Runtimes will be updated to support Editions, which will not be compatible with old generated code.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants