From 9c94ce891ae390e1604f495585d14fa6230d42f7 Mon Sep 17 00:00:00 2001 From: Austin Bonander Date: Sat, 24 Aug 2024 00:03:55 -0700 Subject: [PATCH] chore: prepare release 0.8.1 --- CHANGELOG.md | 66 ++++++++++++++++++++++++++++++++++++++++++++++++++++ Cargo.lock | 16 ++++++------- Cargo.toml | 16 ++++++------- 3 files changed, 82 insertions(+), 16 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index e611bbdc7d..351790fd6d 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,6 +5,72 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). +## 0.8.1 - 2024-08-23 + +16 pull requests were merged this release cycle. + +This release contains a fix for [RUSTSEC-2024-0363]. + +Postgres users are advised to upgrade ASAP as a possible exploit has been demonstrated: + + +MySQL and SQLite do not _appear_ to be exploitable, but upgrading is recommended nonetheless. + +### Added +* [[#3421]]: correct spelling of `MySqlConnectOptions::no_engine_substitution()` [[@kolinfluence]] + * Deprecates `MySqlConnectOptions::no_engine_subsitution()` (oops) in favor of the correctly spelled version. + +### Changed +* [[#3376]]: doc: hide `spec_error` module [[@abonander]] + * This is a helper module for the macros and was not meant to be exposed. + * It is not expected to receive any breaking changes for the 0.8.x release, but is not designed as a public API. + Use at your own risk. +* [[#3382]]: feat: bumped to `libsqlite3-sys=0.30.1` to support sqlite 3.46 [[@CommanderStorm]] +* [[#3385]]: chore(examples):Migrated the pg-chat example to ratatui [[@CommanderStorm]] +* [[#3399]]: Upgrade to rustls 0.23 [[@djc]] + * RusTLS now has pluggable cryptography providers: `ring` (the existing implementation), + and `aws-lc-rs` which has optional FIPS certification. + * The existing features activating RusTLS (`runtime-tokio-rustls`, `runtime-async-std-rustls`, `tls-rustls`) + enable the `ring` provider of RusTLS to match the existing behavior so this _should not_ be a breaking change. + * Switch to the `tls-rustls-aws-lc-rs` feature to use the `aws-lc-rs` provider. + * If using `runtime-tokio-rustls` or `runtime-async-std-rustls`, + this will necessitate switching to the appropriate non-legacy runtime feature: + `runtime-tokio` or `runtime-async-std` + * See the RusTLS README for more details: + +### Fixed +* [[#2786]]: fix(sqlx-cli): do not clean sqlx during prepare [[@cycraig]] +* [[#3354]]: sqlite: fix inconsistent read-after-write [[@ckampfe]] +* [[#3371]]: Fix encoding and decoding of MySQL enums in `sqlx::Type` [[@alu]] +* [[#3374]]: fix: usage of `node12` in `SQLx` action [[@hamirmahal]] +* [[#3380]]: chore: replace structopt with clap in examples [[@tottoto]] +* [[#3381]]: Fix CI after Rust 1.80, remove dead feature references [[@abonander]] +* [[#3384]]: chore(tests): fixed deprecation warnings [[@CommanderStorm]] +* [[#3386]]: fix(dependencys):bumped cargo_metadata to `v0.18.1` to avoid yanked `v0.14.3` [[@CommanderStorm]] +* [[#3389]]: fix(cli): typo in error for required DB URL [[@ods]] +* [[#3417]]: Update version to 0.8 in README [[@soucosmo]] +* [[#3441]]: fix: audit protocol handling [[@abonander]] + * This addresses [RUSTSEC-2024-0363] and includes regression tests for MySQL, Postgres and SQLite. + +[#2786]: https://github.com/launchbadge/sqlx/pull/2786 +[#3354]: https://github.com/launchbadge/sqlx/pull/3354 +[#3371]: https://github.com/launchbadge/sqlx/pull/3371 +[#3374]: https://github.com/launchbadge/sqlx/pull/3374 +[#3376]: https://github.com/launchbadge/sqlx/pull/3376 +[#3380]: https://github.com/launchbadge/sqlx/pull/3380 +[#3381]: https://github.com/launchbadge/sqlx/pull/3381 +[#3382]: https://github.com/launchbadge/sqlx/pull/3382 +[#3384]: https://github.com/launchbadge/sqlx/pull/3384 +[#3385]: https://github.com/launchbadge/sqlx/pull/3385 +[#3386]: https://github.com/launchbadge/sqlx/pull/3386 +[#3389]: https://github.com/launchbadge/sqlx/pull/3389 +[#3399]: https://github.com/launchbadge/sqlx/pull/3399 +[#3417]: https://github.com/launchbadge/sqlx/pull/3417 +[#3421]: https://github.com/launchbadge/sqlx/pull/3421 +[#3441]: https://github.com/launchbadge/sqlx/pull/3441 + +[RUSTSEC-2024-0363]: https://rustsec.org/advisories/RUSTSEC-2024-0363.html + ## 0.8.0 - 2024-07-22 70 pull requests were merged this release cycle. diff --git a/Cargo.lock b/Cargo.lock index 1a437b0519..6f867680b1 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -3328,7 +3328,7 @@ dependencies = [ [[package]] name = "sqlx" -version = "0.8.0" +version = "0.8.1" dependencies = [ "anyhow", "async-std", @@ -3358,7 +3358,7 @@ dependencies = [ [[package]] name = "sqlx-cli" -version = "0.8.0" +version = "0.8.1" dependencies = [ "anyhow", "assert_cmd", @@ -3385,7 +3385,7 @@ dependencies = [ [[package]] name = "sqlx-core" -version = "0.8.0" +version = "0.8.1" dependencies = [ "async-io 1.13.0", "async-std", @@ -3569,7 +3569,7 @@ dependencies = [ [[package]] name = "sqlx-macros" -version = "0.8.0" +version = "0.8.1" dependencies = [ "proc-macro2", "quote", @@ -3580,7 +3580,7 @@ dependencies = [ [[package]] name = "sqlx-macros-core" -version = "0.8.0" +version = "0.8.1" dependencies = [ "async-std", "dotenvy", @@ -3605,7 +3605,7 @@ dependencies = [ [[package]] name = "sqlx-mysql" -version = "0.8.0" +version = "0.8.1" dependencies = [ "atoi", "base64 0.22.0", @@ -3651,7 +3651,7 @@ dependencies = [ [[package]] name = "sqlx-postgres" -version = "0.8.0" +version = "0.8.1" dependencies = [ "atoi", "base64 0.22.0", @@ -3697,7 +3697,7 @@ dependencies = [ [[package]] name = "sqlx-sqlite" -version = "0.8.0" +version = "0.8.1" dependencies = [ "atoi", "chrono", diff --git a/Cargo.toml b/Cargo.toml index e50eb48b86..2c7d93b41c 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -23,7 +23,7 @@ members = [ ] [workspace.package] -version = "0.8.0" +version = "0.8.1" license = "MIT OR Apache-2.0" edition = "2021" repository = "https://github.com/launchbadge/sqlx" @@ -118,17 +118,17 @@ regexp = ["sqlx-sqlite?/regexp"] [workspace.dependencies] # Core Crates -sqlx-core = { version = "=0.8.0", path = "sqlx-core" } -sqlx-macros-core = { version = "=0.8.0", path = "sqlx-macros-core" } -sqlx-macros = { version = "=0.8.0", path = "sqlx-macros" } +sqlx-core = { version = "=0.8.1", path = "sqlx-core" } +sqlx-macros-core = { version = "=0.8.1", path = "sqlx-macros-core" } +sqlx-macros = { version = "=0.8.1", path = "sqlx-macros" } # Driver crates -sqlx-mysql = { version = "=0.8.0", path = "sqlx-mysql" } -sqlx-postgres = { version = "=0.8.0", path = "sqlx-postgres" } -sqlx-sqlite = { version = "=0.8.0", path = "sqlx-sqlite" } +sqlx-mysql = { version = "=0.8.1", path = "sqlx-mysql" } +sqlx-postgres = { version = "=0.8.1", path = "sqlx-postgres" } +sqlx-sqlite = { version = "=0.8.1", path = "sqlx-sqlite" } # Facade crate (for reference from sqlx-cli) -sqlx = { version = "=0.8.0", path = ".", default-features = false } +sqlx = { version = "=0.8.1", path = ".", default-features = false } # Common type integrations shared by multiple driver crates. # These are optional unless enabled in a workspace crate.