-
Notifications
You must be signed in to change notification settings - Fork 275
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Reconcile dev after merge to main for v1.58.1 #6412
Merged
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Signed-off-by: Benjamin <[email protected]> Ref: [ROUTER-885]
This puts the already released CHANGESET into the right place in the existing changelog. This was attempted to get fixed in the preparation for v1.58.0, but that release was complicated for other reasons and this was overlooked.
This fixes a few bugs spotted around the native query planner implementation of `@context`/`@fromContext` bringing the implementation to a more consistent parity with the JavaScript implementation. Co-authored-by: Iryna Shestak <[email protected]>
We are getting errors with an outdated version of hashbrown that needs to updated due to a bug in borsch serialisation 🍲 . This updates us to a version of hashbrown that fixes this vulnerability. ``` error[vulnerability]: Borsh serialization of HashMap is non-canonical ┌─ /Users/ira/Code/apollographql/router/Cargo.lock:261:1 │ 261 │ hashbrown 0.15.0 registry+https://github.com/rust-lang/crates.io-index │ ---------------------------------------------------------------------- security vulnerability detected │ = ID: RUSTSEC-2024-0402 = Advisory: https://rustsec.org/advisories/RUSTSEC-2024-0402 = The borsh serialization of the HashMap did not follow the borsh specification. It potentially produced non-canonical encodings dependent on insertion order. It also did not perform canonicty checks on decoding. ```
IvanGoncharov
requested review from
a team,
dariuszkuc,
sachindshinde,
goto-bus-stop,
SimonSapin,
lrlna,
TylerBloom and
duckki
as code owners
December 6, 2024 09:32
✅ Docs Preview ReadyNo new or changed pages found. |
@IvanGoncharov, please consider creating a changeset entry in |
CI performance tests
|
I pushed another commit that updates snapshot tests. It looks like the result of the interaction of merging these related commits:
|
SimonSapin
approved these changes
Dec 6, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Follow-up to the v1.58.1 being officially released, bringing version bumps and changelog updates into the dev branch.