Skip to content

Releases: sbt/sbt-protobuf

0.8.1

20 Oct 15:44
v0.8.1
6ee5096
Compare
Choose a tag to compare

Protobuf with potential Denial of Service (CVE-2024-7254)

sbt-protobuf 0.8.1 updates protobuf-java library to 3.25.5 to address CVE-2024-7254 / GHSA-735f-pc8j-v9w8, which states that while parsing unknown fields in the Protobuf Java library, a maliciously crafted message can cause a StackOverflow error.

behind the scene

Full Changelog: v0.8.0...v0.8.1

0.8.0

08 Mar 04:54
v0.8.0
cb2d7e6
Compare
Choose a tag to compare

Using Coursier to resolve protoc and gRPC support

Previously sbt-protobuf used protoc-jar to resolve protoc. sbt-protobuf 0.8.0 uses Coursier instead to resolve the protoc CLI executable. This has the benefit of respecting the resolvers setting if you're behind a Maven proxy. In addition, sbt-protobuf 0.8.0 adds protobufGrpcEnabled setting to enable gRPC compilation:

protobufGrpcEnabled := true

See https://github.com/sbt/sbt-protobuf/tree/main/src/sbt-test/sbt-protobuf/grpc for details. This was contributed by @eed3si9n in #177.

Using Glob(...) for protobufExcludeFilters

sbt-protobuf 0.8.0 adds new settings protobufIncludeFilters and protobufExcludeFilters, which uses Glob(...) feature that was added in sbt 1.3.x. Unlike excludeFilter, which works only to filter out certain file extensions the glob extension can be used to exclude *.proto files in some directories. The default exclude filter has something like this:

ProtobufConfig  / protobufExcludeFilters ++= {
  val dirs = (ProtobufConfig  / sourceDirectories).value
  dirs.map(d => Glob(d.toPath()) / "google" / "protobuf" / "*.proto")
}

This is useful when you extend the *.proto sources to (ProtobufConfig / protobufExternalIncludePath).value, and some of the schemata have precompiled Java modules. This was contributed by @eed3si9n in #175.

Full Changelog: v0.7.3...v0.8.0

0.7.3

05 Mar 08:57
v0.7.3
2e7a80a
Compare
Choose a tag to compare

update

behind the scene

Full Changelog: v0.7.2...v0.7.3

0.7.2

05 Mar 16:12
ebc0a9a
Compare
Choose a tag to compare

update

behind the scene

Full Changelog: v0.7.1...v0.7.2

0.7.1

05 Mar 16:15
27553fd
Compare
Choose a tag to compare

updates

behind the scene

new contributors

Full Changelog: v0.7.0...v0.7.1

0.7.0

05 Mar 16:17
Compare
Choose a tag to compare

updates

  • Use sbt-ci-release. change groupId by @xuwei-k in #74
  • Use protoc-jar to download protoc automatically by @eed3si9n in #67

behind the scene

Full Changelog: v0.6.5...v0.7.0

0.6.5

05 Mar 18:34
Compare
Choose a tag to compare

update

behind the scene

new contributors

Full Changelog: v0.6.4...v0.6.5

v0.5.1

15 Jan 17:50
Compare
Choose a tag to compare

v0.5.0

14 Jan 08:04
Compare
Choose a tag to compare