Skip to content
This repository has been archived by the owner on Aug 12, 2022. It is now read-only.

Commit

Permalink
fix(deps): fix(deps): Update module google.golang.org/protobuf to v1.…
Browse files Browse the repository at this point in the history
…28.0 (#386)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [google.golang.org/protobuf](https://togithub.com/protocolbuffers/protobuf-go) | require | minor | `v1.27.1` -> `v1.28.0` |

---

### Release Notes

<details>
<summary>protocolbuffers/protobuf-go</summary>

### [`v1.28.0`](https://togithub.com/protocolbuffers/protobuf-go/releases/tag/v1.28.0)

[Compare Source](https://togithub.com/protocolbuffers/protobuf-go/compare/v1.27.1...v1.28.0)

-   [Overview](#v1.28-overview)
-   [Notable changes](#v1.28-notable-changes)
    -   [UnmarshalOption RecursionLimit](#v1.28-recursion-limit)
-   [Upcoming breakage changes](#v1.28-breaking-changes)

#### Overview <a name="v1.28-overview"></a>

The release provides a new unmarshal option for limiting the recursion depth when unmarshalling nested messages to prevent stack overflows. ([`UnmarshalOptions.RecursionLimit`](https://pkg.go.dev/google.golang.org/protobuf/proto#UnmarshalOptions.RecursionLimit)).

#### Notable changes <a name="v1.28-notable-changes"></a>

**New features:**

-   [CL/340489](https://go.dev/cl/340489): testing/protocmp: add Message.Unwrap

**Documentation improvements:**

-   [CL/339569](https://go.dev/cl/339569): reflect/protoreflect: add more docs on Value aliasing

**Updated supported versions:**

-   [CL/370055](https://go.dev/cl/370055): all: update supported versions

##### UnmarshalOption RecursionLimit <a name="v1.28-recursion-limit"></a>

-   [CL/385854](https://golang.org/cl/385854): all: implement depth limit for unmarshalling

The new [`UnmarshalOptions.RecursionLimit`](https://pkg.go.dev/google.golang.org/protobuf/proto#UnmarshalOptions.RecursionLimit) limits the maximum recursion depth when unmarshalling messages. The limit is applied for nested messages. When messages are nested deeper than the specified limit the unmarshalling will fail. If unspecified, a default limit of 10,000 is applied.

In addition to the configurable limit for message nesting a non-configurable recursion limit for [group](https://developers.google.com/protocol-buffers/docs/proto#groups) nesting of 10,000 was introduced.

#### Upcoming breakage changes <a name="v1.28-breaking-changes"></a>

The default recursion limit of 10,000 introduced in the release is subject to change. We want to align this limit with implementations for other languages in the long term. C++ and Java use a limit of 100 which is also the target for the Go implementation.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 3am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, click this checkbox.

---

This PR has been generated by [Renovate Bot](https://togithub.com/renovatebot/renovate).
  • Loading branch information
cq-bot committed Jun 27, 2022
1 parent 906ee1c commit 9c5c83f
Show file tree
Hide file tree
Showing 2 changed files with 3 additions and 2 deletions.
2 changes: 1 addition & 1 deletion go.mod
Expand Up @@ -37,7 +37,7 @@ require (
github.com/xo/dburl v0.8.4
golang.org/x/sync v0.0.0-20220601150217-0de741cfad7f
google.golang.org/grpc v1.45.0
google.golang.org/protobuf v1.27.1
google.golang.org/protobuf v1.28.0
gopkg.in/yaml.v3 v3.0.1
)

Expand Down
3 changes: 2 additions & 1 deletion go.sum
Expand Up @@ -1857,8 +1857,9 @@ google.golang.org/protobuf v1.24.0/go.mod h1:r/3tXBNzIEhYS9I1OUVjXDlt8tc493IdKGj
google.golang.org/protobuf v1.25.0/go.mod h1:9JNX74DMeImyA3h4bdi1ymwjUzf21/xIlbajtzgsN7c=
google.golang.org/protobuf v1.26.0-rc.1/go.mod h1:jlhhOSvTdKEhbULTjvd4ARK9grFBp09yW+WbY/TyQbw=
google.golang.org/protobuf v1.26.0/go.mod h1:9q0QmTI4eRPtz6boOQmLYwt+qCgq0jsYwAQnmE0givc=
google.golang.org/protobuf v1.27.1 h1:SnqbnDw1V7RiZcXPx5MEeqPv2s79L9i7BJUlG/+RurQ=
google.golang.org/protobuf v1.27.1/go.mod h1:9q0QmTI4eRPtz6boOQmLYwt+qCgq0jsYwAQnmE0givc=
google.golang.org/protobuf v1.28.0 h1:w43yiav+6bVFTBQFZX0r7ipe9JQ1QsbMgHwbBziscLw=
google.golang.org/protobuf v1.28.0/go.mod h1:HV8QOd/L58Z+nl8r43ehVNZIU/HEI6OcFqwMG9pJV4I=
gopkg.in/airbrake/gobrake.v2 v2.0.9/go.mod h1:/h5ZAUhDkGaJfjzjKLSjv6zCL6O0LLBxU4K+aSYdM/U=
gopkg.in/alecthomas/kingpin.v2 v2.2.6/go.mod h1:FMv+mEhP44yOT+4EoQTLFTRgOQ1FBLkstjWtayDeSgw=
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
Expand Down

0 comments on commit 9c5c83f

Please sign in to comment.