fix(deps): update module google.golang.org/protobuf to v1.36.5 #33
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1.27.1
->v1.36.5
Release Notes
protocolbuffers/protobuf-go (google.golang.org/protobuf)
v1.36.5
Compare Source
Full Changelog: protocolbuffers/protobuf-go@v1.36.4...v1.36.5
Bug fixes:
CL/644437: protogen: fix name mangling for fields with identical GoCamelCase
Maintenance:
CL/641655: all: remove weak field support
v1.36.4
Compare Source
Full Changelog: protocolbuffers/protobuf-go@v1.36.3...v1.36.4
Bug fixes:
CL/642975: reflect/protodesc: fix panic when working with dynamicpb
Maintenance:
CL/643276: internal_gengo: avoid allocations in rawDescGZIP() accessors
CL/642857: internal_gengo: switch back from string literal to hex byte slice
CL/642055: internal_gengo: use unsafe.StringData() to avoid a descriptor copy
CL/638135: internal_gengo: store raw descriptor in .rodata section
v1.36.3
Compare Source
Full Changelog: protocolbuffers/protobuf-go@v1.36.2...v1.36.3
Bug fixes:
CL/642575: reflect/protodesc: fix panic when working with dynamicpb
CL/641036: cmd/protoc-gen-go: remove json struct tags from unexported fields
User-visible changes:
CL/641876: proto: add example for GetExtension, SetExtension
CL/642015: runtime/protolazy: replace internal doc link with external link
Maintenance:
CL/641635: all: split flags.ProtoLegacyWeak out of flags.ProtoLegacy
CL/641019: internal/impl: remove unused exporter parameter
CL/641018: internal/impl: switch to reflect.Value.IsZero
CL/641035: internal/impl: clean up unneeded Go<1.12 MapRange() alternative
CL/641017: types/dynamicpb: switch atomicExtFiles to atomic.Uint64 type
v1.36.2
Compare Source
Full Changelog: protocolbuffers/protobuf-go@v1.36.1...v1.36.2
Bug fixes:
CL/638515: internal/impl: fix WhichOneof() to work with synthetic oneofs
v1.36.1
Compare Source
Full Changelog: protocolbuffers/protobuf-go@v1.36.0...v1.36.1
Bug fixes:
CL/638495: internal/impl: revert IsSynthetic() check to fix panic
Maintenance:
CL/637475: internal/errors: delete compatibility code for Go before 1.13
v1.36.0
Compare Source
Full Changelog: protocolbuffers/protobuf-go@v1.35.2...v1.36.0
User-visible changes:
CL/635139: src/google/protobuf: document UnmarshalJSON / API level behavior
CL/635138: reflect/protoreflect: use [] syntax to reference method
CL/635137: proto: add reference to size semantics with lazy decoding to comment
CL/634818: compiler/protogen: allow overriding API level from --go_opt
CL/634817: cmd/protoc-gen-go: generate _protoopaque variant for hybrid
CL/634816: all: regenerate.bash for Opaque API
CL/634815: all: Release the Opaque API
CL/634015: types/descriptorpb: regenerate using latest protobuf v29.1 release
CL/632735: internal/impl: skip synthetic oneofs in messageInfo
CL/627876: all: start v1.35.2-devel
v1.35.2
Compare Source
Full Changelog: protocolbuffers/protobuf-go@v1.35.1...v1.35.2
Maintenance:
CL/623115: proto: refactor equal_test from explicit table to use makeMessages()
CL/623116: encoding/prototext: use testmessages_test.go approach, too
CL/623117: internal/testprotos/test: add nested message field with [lazy=true]
CL/624415: proto: switch messageset_test to use makeMessages() injection point
CL/624416: internal/impl: fix TestMarshalMessageSetLazyRace (was a no-op!)
User-visible changes:
CL/618395: encoding/protojson: allow missing value for Any of type Empty
CL/618979: all: implement strip_enum_prefix editions feature
CL/622575: testing/protocmp: document behavior when combining Ignore and Sort
v1.35.1
Compare Source
Full Changelog: protocolbuffers/protobuf-go@v1.34.2...v1.35.1
Maintenance:
User-visible changes:
Bug fixes:
v1.35.0
Compare Source
v1.34.2
Compare Source
Minor feature:
Minor bug fixes:
v1.34.1
Compare Source
Minor fixes for editions compliance:
v1.34.0
Compare Source
Notable changes
New Features
Protobuf editions are fully supported. You can now use
edition = "2023"
in .proto files together with theproto-gen-go
. Edition2023 does not introduce any new features but can be used to replacesyntax "proto2/3"
. Future editions might introduce new features. See https://protobuf.dev/editions/overview/ for more details on protobuf editions.Documentation
Various smaller changes to improve existing documentation and to add more examples.
Extensions
These are mostly performance improvements or preparations for performance improvements.
v1.33.0
Compare Source
This release contains one security fix:
encoding/protojson
:Unmarshal
could enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains agoogle.protobuf.Any
value, or when theUnmarshalOptions.DiscardUnknown
option is set.Unmarshal
now correctly returns an error when handling these inputs. This is CVE-2024-24786.v1.32.0
Compare Source
Full Changelog: protocolbuffers/protobuf-go@v1.31.0...v1.32.0
This release contains commit protocolbuffers/protobuf-go@bfcd647, which fixes a denial of service vulnerability by preventing a stack overflow through a default maximum recursion limit. See https://github.com/golang/protobuf/issues/1583 and https://github.com/golang/protobuf/issues/1584 for details.
v1.31.0
Compare Source
Notable changes
New Features
Minor performance improvements
Bug fixes
v1.30.0
Compare Source
Announcement
In the previous two releases, v1.29.0 and v1.29.1, we associated the tags with the wrong commits and thus the tags do not reference any commit in this repository. This tag, v1.30.0, refers to an existing commit again. Sorry for the inconvenience.
Notable changes
New Features
v1.29.1
Compare Source
Notable changes
Bug fixes
v1.29.0
Compare Source
Overview
This version introduces a new package
protodelim
to marshal and unmarshal size-delimited messages.It also brings the implementation up to date with the latest protobuf features.
Notable changes
New Features
Alignment with protobuf
Documentation improvements:
Minor performance improvements
Breaking changes
v1.28.1
Compare Source
This release contains protoc-gen-go binaries for arm64.
Notable changes since v1.28.0:
v1.28.0
Compare Source
Overview
The release provides a new unmarshal option for limiting the recursion depth when unmarshalling nested messages to prevent stack overflows. (
UnmarshalOptions.RecursionLimit
).Notable changes
New features:
Documentation improvements:
Updated supported versions:
UnmarshalOption RecursionLimit
The new
UnmarshalOptions.RecursionLimit
limits the maximum recursion depth when unmarshalling messages. The limit is applied for nested messages. When messages are nested deeper than the specified limit the unmarshalling will fail. If unspecified, a default limit of 10,000 is applied.In addition to the configurable limit for message nesting a non-configurable recursion limit for group nesting of 10,000 was introduced.
Upcoming breakage changes
The default recursion limit of 10,000 introduced in the release is subject to change. We want to align this limit with implementations for other languages in the long term. C++ and Java use a limit of 100 which is also the target for the Go implementation.
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.