Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update gRPC implementation used by out-of-proc v2 SDKs #2312

Merged
merged 2 commits into from
Nov 15, 2022

Conversation

cgillum
Copy link
Member

@cgillum cgillum commented Nov 15, 2022

This PR updates the version of the Microsoft.DurableTask.Sidecar.Protobuf dependency, which includes a fix for CVE-2022-1941, due to Google.ProtoBuf and also includes support for suspend and resume operations over gRPC. This PR also updates the gRPC server implementation in this Durable extension to support rewind, suspend, and resume operations in gRPC.

Resolves #2309

This change unblocks the following parity items for .NET and Java out-of-proc SDKs:

Pull request checklist

  • My changes do not require documentation changes
    • Otherwise: Documentation PR is ready to merge and referenced in pending_docs.md
  • My changes should not be added to the release notes for the next release
    • Otherwise: I've added my notes to release_notes.md
  • My changes do not need to be backported to a previous version
    • Otherwise: Backport tracked by issue/PR #issue_or_pr
  • I have added all required tests (Unit tests, E2E tests)
  • My changes do not require any extra work to be leveraged by OutOfProc SDKs
    • Otherwise: That work is being tracked here: (see above)
  • My changes do not change the version of the WebJobs.Extensions.DurableTask package
    • Otherwise: major or minor version updates are reflected in /src/Worker.Extensions.DurableTask/AssemblyInfo.cs

Add support for additional gRPC operations
@cgillum cgillum merged commit 7a4e0a6 into dev Nov 15, 2022
@cgillum cgillum deleted the cgillum/protobuf-update branch November 15, 2022 23:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Microsoft.Azure.WebJobs.Extensions.DurableTask suffers from vulnerability CVE-2022-1941 due to Google.ProtoBuf
3 participants