Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Feat: Upgrade dependency version #10023

Closed
yuluo-yx opened this issue Aug 15, 2023 · 3 comments · Fixed by #10037, #10041, #10046 or #10051
Closed

Feat: Upgrade dependency version #10023

yuluo-yx opened this issue Aug 15, 2023 · 3 comments · Fixed by #10037, #10041, #10046 or #10051

Comments

@yuluo-yx
Copy link
Contributor

yuluo-yx commented Aug 15, 2023 •
edited
Loading

Description

Upgrade dependency version.

components old version upgrade reason new version github repo changelog
lua-resty-ctxdump 0.1-0 no      
lua-resty-template 2.0 no      
lua-resty-etcd 1.10.4 no      
lua-resty-balancer 0.04 no      
lua-resty-ngxvar 0.5.2 no      
lua-resty-jit-uuid 0.0.7 no      
lua-resty-healthcheck-api7 （Jump） 3.0.0 no      
lua-resty-hmac-ffi 0.05 yes Recommended upgrade, few changes 0.06-1 https://github.com/jkeys089/lua-resty-hmac No changelog, specific commit submission behavior: jkeys089/lua-resty-hmac@v0.05...0.06-1
Major updates:
1. adding sha384 to ALGOS table
2. Fix CI issues in their projects.
lua-resty-cookie 0.1.0 TBD TBD 0.2.0-1 https://github.com/utix/lua-resty-cookie No changelog, specific commit submission behavior: utix/lua-resty-cookie@v0.1.0...v0.2.0
Major updates:
1. feat: add None as a valid SameSite value utix/lua-resty-cookie@a2cb779.
2. Add a get_cookie_size function to retrieve cookie size
3. Add a get_cookie_size function to retrieve cookie size utix/lua-resty-cookie@bfd38f3.
4. Expose the bake function as get_cookie_string utix/lua-resty-cookie@9ecca85
lua-resty-session 3.10 yes Updates are mostly bug fixes 4.0.4-1 https://github.com/bungle/lua-resty-session changelog content：
1. V4.0.4 chore(utils): remove dependency for lua_pack, fix #158
2. V4.0.3 fix(): redis authorization
3. V4.0.2 fix(): hkdf is not approved by FIPS, use PBKDF2 instead on FIPS-mode
4.V4.0.1 Fixes:fix(session): clear_request cookie to check remember_meta correctly before using it
Add：
1. feat(opm): add more dependencies in requires;
2. feat(opm): add right version number requirements
3. docs(readme): add remark on dependencies on installation section
opentracing-openresty 0.1 no      
lua-protobuf 0.4.1 yes Updates are mostly bug fixes 0.5.0-1 https://github.com/starwing/lua-protobuf No changelog, specific commit submission behavior: starwing/lua-protobuf@0.4.1...0.5.0
Major updates:
1. bug fixes and feat
lua-resty-openidc 1.7.5 TBD TBD 1.7.6-3 https://github.com/zmartzone/lua-resty-openidc No changelog, specific commit submission behavior: zmartzone/lua-resty-openidc@v1.7.5...v1.7.6
Major updates:
1. support for response_mode form_post zmartzone/lua-resty-openidc@789cf8a
2. make sure request is rejected for the correct reason zmartzone/lua-resty-openidc@3ba8fe1
3. improve error message when bearer token header is malformed zmartzone/lua-resty-openidc@a468d13
4. make tests independent of nginx config file buffer size zmartzone/lua-resty-openidc@b723124
5. ……
luafilesystem 1.7.0-2 TBD TBD 1.8.0-1 https://github.com/lunarmodules/luafilesystem No changelog, specific commit submission behavior: lunarmodules/luafilesystem@v1_7_0_2...v1_8_0
nginx-lua-prometheus 0.20221218 TBD TBD 0.20230607-1 https://github.com/knyar/nginx-lua-prometheus No changelog, specific commit submission behavior: knyar/nginx-lua-prometheus@0.20221218...0.20230607
Major updates:
1. Add more details to the label count error message
2. Do not attempt to concatenate nil values
3. Explicitly check for nil label valuesknyar committed 988be4d
lua-resty-ipmatcher 0.6.1 no      
lua-resty-kafka 0.20-0 yes Updates are mostly bug fixes 0.22-0 https://github.com/doujiang24/lua-resty-kafka No changelog, specific commit submission behavior: doujiang24/lua-resty-kafka@v0.20...v0.22
Major updates:
1. fix: api_version not used while producing to kafka
2. feature: resty.kafka support SCRAM-SHA-256和SCRAM-SHA-512
3. fix: handle unknown errcode4.
lua-resty-logger-socket 2.0.1-0 no      
skywalking-nginx-lua 0.6.0 no      
base64 1.5-2 yes Minor changes 1.5-3 https://github.com/iskolbin/lbase64 No changelog, specific commit submission behavior: iskolbin/lbase64@v1.5.2...v1.5.3
Major updates:
1. updated extract function for 5.4+
binaryheap 0.4 no      
resty-redis-cluster 1.02-4 TBD TBD 1.05-1 https://github.com/steve0511/resty-redis-cluster No changelog, specific commit submission behavior: steve0511/resty-redis-cluster@1.02...1.05
Major updates:
1. Add refresh_slots method with lock to fetch slots to avoid cluster sl…
2. ngx.req.start_time is not available when using this client in the wor…
3. Ensure configured serv_list is available when fetching slots
lua-resty-expr 1.3.2 no      
graphql 0.0.2 no      
argparse 0.7.1-1 no      
luasocket 3.1.0-1 no      
luasec 0.9-1 TBD TBD 1.3.1-1 https://github.com/brunoos/luasec No changelog, specific commit submission behavior: lunarmodules/luasec@v0.9...v1.3.1
lua-resty-consul 0.3-2 no      
penlight 1.13.1 no      
ext-plugin-proto 0.6.0 no      
casbin 1.41.5 yes Updates are mostly bug fixes 1.41.8-1 https://github.com/casbin/lua-casbin changelog content：
1. V1.41.6 bug fixes: rockspec url protocol (#146) (e9ebbac)
2. V1.41.7 bug fixes: Revert 146 fix protocol and fix rockspec (#147) (459278e), closes #146
3. V1.41.8 bug fixes: fix broken links (#151) (24bd8d6)
inspect 3.1.1 TBD TBD 3.1.3-0 https://github.com/kikito/inspect.lua No changelog, specific commit submission behavior: kikito/inspect.lua@v3.1.1...v3.1.3
Major updates:
1. ignore metatables with __metatable field set to non-nil non-table values
2. allow using inspect inside __tostring metamethods without errors
3. escape DEL character. fixes
4. (refactor) rewrite using Teal
5. (perf) introduce perf test harness and refactor
lualdap 1.2.6-1 TBD TBD 1.3.1-1 https://github.com/lualdap/lualdap No changelog, specific commit submission behavior: lualdap/lualdap@v1.2.6...v1.3.1
Major updates:
1. Add scope="subtree" to search example
2. src/lualdap.c: fix search with multiple attrs
3. refactor lualdap_open_simple by calling lualdap_open4. add lualdap_open5. refactor lualdap_open_simple by calling lualdap_bind_simple
lua-resty-rocketmq 0.3.0-0 yes Minor changes 0.4.1-0 https://github.com/yuz10/lua-resty-rocketmq changelog：
1. V0.3.1-0 Support rocketmq serial type
2. V0.4.1-0 Compat rocketmq 4.9.4, which changes GET_ROUTEINFO_BY_TOPIC protocol to standard apache/rocketmq#4432
opentelemetry-lua 0.2-3 TBD TBD 0.2.4 https://github.com/yangxikun/opentelemetry-lua
net-url 0.9-1 no      
xml2lua 1.5-2 no      
nanoid 0.1-1 no      
lua-resty-mediador 0.1.2-1 no      
lua-resty-ldap 0.2.2-0 no      
lua-resty-t1k 1.1.0 no      
    no      
lua-resty-radixtree 2.8.2 yes Maintained by the api7 open source organization 2.9.0-0 https://github.com/api7/lua-resty-radixtree api7 community maintenance
jsonschema 0.9.8 yes Maintained by the api7 open source organization 0.9.9-0 https://github.com/api7/jsonschema api7 community maintenance
api7-lua-resty-dns-client 7.0.1 no   https://github.com/api7/lua-resty-dns-client/releases  
api7-lua-resty-http 0.2.0 yes Maintained by the api7 open source organization 0.2.1 https://github.com/api7/lua-resty-http/releases api7 community maintenance
api7-lua-resty-jwt 0.2.5 no   https://github.com/api7/lua-resty-jwt/releases  
api7-lua-tinyyaml 0.4.2 yes Maintained by the api7 open source organization 0.4.3 https://github.com/api7/lua-tinyyaml/releases api7 community maintenance
api7-dkjson 0.1.1 no   https://github.com/api7/test-toolkit  
@yuluo-yx yuluo-yx mentioned this issue Aug 15, 2023
Closed
5 tasks
@yuluo-yx
Copy link
Contributor Author

yuluo-yx commented Aug 16, 2023 •
edited
Loading

The current component update status is as follows (see the above table for the changelog details):
All components under the api7 organization need to be updated, and the status of the remaining components is as follows

- name status ci status
1 lua-resty-hmac-ffi yes √
2 lua-resty-cookie TBD -
3 lua-resty-session yes -
4 lua-protobuf yes √
5 lua-resty-openidc TBD -
6 luafilesystem TBD -
7 nginx-lua-prometheus TBD -
8 lua-resty-kafka yes -
9 base64 yes -
10 resty-redis-cluster TBD -
11 luasec TBD -
12 casbin yes -
13 inspect TBD -
14 lualdap TBD -
15 lua-resty-rocketmq yes -
16 opentelemetry-lua TBD -
17 jsonschema yes -
18 lua-resty-radixtree yes ×
19 api7-lua-resty-http yes -
20 api7-lua-tinyyaml yes -

@yuluo-yx yuluo-yx mentioned this issue Aug 16, 2023
Closed
5 tasks
@Sn0rt
Copy link
Contributor

Sn0rt commented Aug 17, 2023 •
edited
Loading

lua-resty-hmac-ffi (upgrade
lua-resty-cookie (upgrade
lua-resty-session (upgrade
lua-protobuf (upgrade with single PR
lua-resty-openidc (upgrade
luafilesystem (no upgrade, bad effect for APISIX
nginx-lua-prometheus (upgrade with single PR
lua-resty-kafka (upgrade with single PR
resty-redis-cluster (upgrade with single PR
luasec (no upgrade
casbin (upgrade with single PR
inspect (no upgrade

All of the lib maintain by API7 need upgrade

This was referenced Aug 17, 2023
Merged
Closed
Closed
Closed
Merged
Closed
@AlinsRan AlinsRan reopened this Aug 17, 2023
@Sn0rt Sn0rt mentioned this issue Aug 17, 2023
Merged
5 tasks
@Sn0rt
Copy link
Contributor

Sn0rt commented Aug 17, 2023

notice

don't upgrade lua-resty-session, lua-resty-openidc depends on lua-resty-session >= 2.8, <= 3.10
don't upgrade luasec
don't upgrade luafilesystem
don't upgrade inspect

@Sn0rt Sn0rt mentioned this issue Aug 18, 2023
Merged
5 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
Apache APISIX backlog
Archived in project
Milestone
No milestone
3 participants
@Sn0rt @yuluo-yx @AlinsRan