Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merge stable #1013

Closed
wants to merge 2 commits into from
Closed

Merge stable #1013

wants to merge 2 commits into from

Conversation

Lagovas
Copy link
Collaborator

@Lagovas Lagovas commented Jun 21, 2023

merge stable to master

Checklist

  • Changelog is updated (in case of notable or breaking changes)

G1gg1L3s and others added 2 commits June 21, 2023 23:21
* Fix rust issues (pin log, run bindgen) (#1005)

* rust: Pin log version to =0.4.18

The 0.4.19 requires rustc 1.60, but currently we support 1.58.
Pinning it is not a big deal since it's development dependecy for
tests and examples.

* rust: Regenerate and update lib.rs

bindgen was updated again and changed something which resulted in
new output (seems like some internal constants are removed).

* Pythemis: introduce `pyproject.toml` (#1006)

* pythemis: Add pyproject.toml

Since setup.py is deprecated, let's try moving to the pyproject.toml
and configuring it with the same data as in setup.py.

Use setuptools as a backend for no particular reasons ¯\_(ツ)_/¯,
just because the name is familiar and we have no reasons to not use
it or use something else.

Keep the old setup.py for backward compatibility so old systems can
try to build the package.

For now, keep 0.14.0, we will bump the version in another PR.

* makefile: Use pyproject.toml for installing pythemis

According to this [1] article, the correct command is

    pip install .

in the project's root. Let's try that. Also, the other option is

    python -m build --wheel

which builds the package but doesn't install it. We can provide
something like `pythemis_build` for it for example.

[1]: https://godatadriven.com/blog/a-practical-guide-to-setuptools-and-pyproject-toml/

* pythemis: Update classifiers to Python3.6+

With many hours and docker containers I tested that themis actually
works up to python 3.4. The other versions require some changes in
makefile so they are more like "grey area".

However, python3.5 is deprecated and it produces warning like
"DEPRECATION: Python 3.5 reached the end of its life on..." so many
libraries don't support it. Instead they start with 3.6 which will
do as well, I guess.

Though, actually python3.6 is also deprecated [1]. The same will be
true for python3.7 in a couple of days (Jun 27 2023), so the question
is, should we declare support of these versions?

[1]: https://devguide.python.org/versions/

* pythemis: Extend range of supported py versions

* Update changelog

* Run and pin bindgen (#1008)

* rust-themis: Update bindgen

It updated and broke something again 🤦

* rust-themis: Pin bindgen version

It is pretty unstable with its frequent releases, so let's pin it.

* Update changelog

* Bump wrapper versions to 0.15.0 (#1007)

* changelog: Add 0.15.0 summary

* themis-core: Update version

* pythemis: Update version

* pythemis: Fix 8-year old typo in AUTHORS :)

* rbthemis: Update version

* jsthemis: Update versions

* wasm-themis: Update versions

* android-themis: Update version

* rust-themis: Update versions

* react-native-themis: Update versions

* pythemis: https in AUTHORS

Co-authored-by: vixentael <[email protected]>

* rust-themis: Update bench versions

Somehow missed that.

* changelog: Forgot to mention rust 1.58

* changelog: Mention the new iteration count

---------

Co-authored-by: vixentael <[email protected]>

* Bump embedded BoringSSL (#1004)

* Bump BoringSSL and fix makefile

This is not the latest BoringSSL version yet, because there are
a couple of fixes. So, treat it as the first. Here we also fix
our makefile because the BoringSSL team fixed bug with the strange
behaviour of absolute path to symbols.txt [1].

[1]: https://boringssl.googlesource.com/boringssl/+/8c75ed046f799f1d8b805036b1dea9c5ec0a0fb5%5E%21/#F0

* Bump BoringSSL and fix opaque EVP

As OpenSSL, BoringSSL made many types opaque, so it will require
updating some of the code to not use fields.

* Bump BoringSSL again and fix RSA

The same issue - RSA type became opaque, so we need to use accessors
similar to what Openssl had.

* Bump BoringSSL once more

This is (hoperfully) the last bump. This time without issues but
we will see what CI says.

* Make bignum_to_bytes accept const bignum*

It will prevent some of the warnings. This function doesn't mutate
bignum anyway.

* Update changelog

* boringssl: Bump once again

* msys2: Update hashes temporarily

This are test values because we will move the tag. But for now,
let's just test it.

* phpthemis: Update version for the sake of testing

They will fail probably, but just out of curiosity let's try to run
the tests.

* Update date of the release

Solstice!

---------

Co-authored-by: vixentael <[email protected]>
It's the egg-chicken problem: we can update those hashes only
after the release. But then, the release tag will not point to
the updated hashes.
Comment on lines +20 to +22
sha256sums=('e5ff84e020ea02f545be6948b4a5ed04944fed10d4bc500684d8e79be3f6020d')
sha1sums=('abab5054190049cdb00540501316a8df3c2496f3')
md5sums=('30acf0963fae74808041a54b7c902d42')
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

So, we will not move the 0.15.0 tag anymore? When do we can to update these hashes? Maybe it makes sense to commit them into the stable?

@vixentael
Copy link
Contributor

@Lagovas @G1gg1L3s let's merge?

@G1gg1L3s
Copy link
Collaborator

G1gg1L3s commented Aug 8, 2023

I have no objections. But, should we run the tests again? There is a high chance that something broke since that time, but even if it did, should we fix it here or merge and then fix?

@vixentael
Copy link
Contributor

yes please

@G1gg1L3s
Copy link
Collaborator

G1gg1L3s commented Aug 8, 2023

Hmm, I'm not sure how to do this. Also it says that master is out-of-date and I don't have rights to update it directly, only though a PR. So, I'm not sure what to do and I need help, probably from @Lagovas.

@vixentael
Copy link
Contributor

vixentael commented Aug 8, 2023

@G1gg1L3s try again?
you should see the following
Screenshot 2023-08-08 at 17 49 09

@G1gg1L3s
Copy link
Collaborator

G1gg1L3s commented Aug 8, 2023

Nope, still doesn't work
image

@vixentael
Copy link
Contributor

@G1gg1L3s how about closing this PR and creating a new one stable -> master?

@G1gg1L3s
Copy link
Collaborator

G1gg1L3s commented Aug 8, 2023

Hmm, let's try :)

@G1gg1L3s G1gg1L3s closed this Aug 8, 2023
@G1gg1L3s G1gg1L3s mentioned this pull request Aug 8, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants