Protobuf

Latest version: v5.26.1

Safety actively analyzes 629639 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 14 of 26

3.17.1

Not secure
PHP
* Fixed PHP memory leaks and arginfo errors. (8614)
* Fixed JSON parser to allow multiple values from the same oneof as long as all but one are null.

Ruby
* Fixed memory bug: properly root repeated/map field when assigning. (8639)
* Fixed JSON parser to allow multiple values from the same oneof as long as all but one are null.

3.17.0

Not secure
Protocol Compiler
* Fix the generated source information for reserved values in Enums.

C++
* Fix -Wunused-parameter in map<string, int> fields (fixes 8494) (8500)
* Use byteswap.h when building against musl libc (8503)
* Fix -Wundefined-inline error when using SharedCtor() or SharedDtor() (8532)
* Fix bug where `Descriptor::DebugString()` printed proto3 synthetic oneofs.
* Provide stable versions of `SortAndUnique()`.
* Make sure to cache proto3 optional message fields when they are cleared.
* Expose UnsafeArena methods to Reflection.
* Use std::string::empty() rather than std::string::size() > 0.

Kotlin
* Introduce support for Kotlin protos (8272)
* Restrict extension setter and getter operators to non-nullable T.

Java
* updating GSON and Guava to more recent versions (8524)
* Reduce the time spent evaluating isExtensionNumber by storing the extension
ranges in a TreeMap for faster queries. This is particularly relevant for
protos which define a large number of extension ranges, for example when
each tag is defined as an extension.
* Fix java bytecode estimation logic for optional fields.
* Optimize Descriptor.isExtensionNumber.

Python
* Add MethodDescriptor.CopyToProto() (8327)
* Remove unused python_protobuf.{cc,h} (8513)
* Start publishing python aarch64 manylinux wheels normally (8530)
* Fix constness issue detected by MSVC standard conforming mode (8568)
* Make JSON parsing match C++ and Java when multiple fields from the same
oneof are present and all but one is null.

Ruby
* Add support for proto3 json_name in compiler and field definitions (8356)
* Fixed memory leak of Ruby arena objects. (8461)
* Fix source gem compilation (8471)
* Fix various exceptions in Ruby on 64-bit Windows (8563)
* Fix crash when calculating Message hash values on 64-bit Windows (8565)

Conformance Tests
* Added a conformance test for the case of multiple fields from the same
oneof.

Other
* Use a newer version of rules_proto, with the new rule `proto_descriptor_set` (8469)

3.17.0rc2

Not secure

3.17.0rc1

Not secure
Protocol Compiler
* Fix the generated source information for reserved values in Enums.

C++
* Fix -Wunused-parameter in map<string, int> fields (fixes 8494) (8500)
* Use byteswap.h when building against musl libc (8503)
* Fix -Wundefined-inline error when using SharedCtor() or SharedDtor() (8532)
* Fix bug where `Descriptor::DebugString()` printed proto3 synthetic oneofs.
* Provide stable versions of `SortAndUnique()`.
* Make sure to cache proto3 optional message fields when they are cleared.
* Expose UnsafeArena methods to Reflection.
* Use std::string::empty() rather than std::string::size() > 0.

Kotlin
* Restrict extension setter and getter operators to non-nullable T.

Java
* updating GSON and Guava to more recent versions (8524)
* Reduce the time spent evaluating isExtensionNumber by storing the extension
ranges in a TreeMap for faster queries. This is particularly relevant for
protos which define a large number of extension ranges, for example when
each tag is defined as an extension.
* Fix java bytecode estimation logic for optional fields.
* Optimize Descriptor.isExtensionNumber.

Python
* [python-runtime] Add MethodDescriptor.CopyToProto() (8327)
* Remove unused python_protobuf.{cc,h} (8513)
* Start publishing python aarch64 manylinux wheels normally (8530)
* Fix constness issue detected by MSVC standard conforming mode (8568)
* Make JSON parsing match C++ and Java when multiple fields from the same
oneof are present and all but one is null.

Ruby
* Ruby: Add support for proto3 json_name in compiler and field definitions (8356)
* Fixed memory leak of Ruby arena objects. (8461)
* Fix source gem compilation (8471)
* fix(ruby): Fix various exceptions in Ruby on 64-bit Windows (8563)
* fix(ruby): Fix crash when calculating Message hash values on 64-bit Windows (8565)

Conformance Tests
* Added a conformance test for the case of multiple fields from the same
oneof.

Other
* Opensourcing kotlin protos (8272)
* Use a newer version of rules_proto, with the new rule `proto_descriptor_set` (8469)

3.16.3

Java
* Refactoring java full runtime to reuse sub-message builders and prepare to
migrate parsing logic from parse constructor to builder.
* Move proto wireformat parsing functionality from the private "parsing
constructor" to the Builder class.
* Change the Lite runtime to prefer merging from the wireformat into mutable
messages rather than building up a new immutable object before merging. This
way results in fewer allocations and copy operations.
* Make message-type extensions merge from wire-format instead of building up
instances and merging afterwards. This has much better performance.
* Fix TextFormat parser to build up recurring (but supposedly not repeated)
sub-messages directly from text rather than building a new sub-message and
merging the fully formed message into the existing field.
* This release addresses a [Security Advisory for Java users](https://github.com/protocolbuffers/protobuf/security/advisories/GHSA-h4h5-3hr4-j3g2)

3.16.1

Java
* Improve performance characteristics of UnknownFieldSet parsing (9371)

Page 14 of 26

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.