Skip to content

ci: Update stable dependencies #375

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 28 commits into from
Apr 28, 2025
Merged

ci: Update stable dependencies #375

merged 28 commits into from
Apr 28, 2025

Conversation

lexnv
Copy link
Collaborator

@lexnv lexnv commented Apr 15, 2025 •
edited
Loading

This PR is part of our ongoing efforts to update and clean up the dependencies for the stable feature set. Below are the key updates:

The following crate dependencies are updated:

  • ring to 0.17.14
  • serde_json to 1.0.140
  • bytes to 1.10.1
  • prost to 0.13.5
  • tokio-util to 0.7.14
  • indexmap to 2.9.0
  • thiserror to 2.0.12
  • socket2 dep to 0.5.9
  • smallvec to 0.15.0
  • async-trait dep to 0.1.88
  • tokio to 1.44.2
  • serde dep to 1.0.219
  • pin-project dep to 1.1.10
  • tokio-tungstenite dep to 0.26.2
  • cid dep to 0.11.1

rcgen is dependant on Quic

The rcgen crate was wrongly left in the Cargo.toml as a mandatory dependency. Considering this is part of the experimental quic feature flag, it is now optional.

lexnv added 21 commits April 15, 2025 14:22
@lexnv
cargo: Update cid dep to 0.11.1
33a94b4 
Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>
@lexnv
cargo: Make rcgen dep optional based on Quic feature flag
ac39466 
Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>
@lexnv
cargo: Move str0m to dedicated webrtc section
246459d 
Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>
@lexnv
cargo: Move websocket deps to dedicated section
c84559d 
Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>
@lexnv
cargo: Update tokio-tungstenite dep to 0.26.2
27ec3d3 
Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>
@lexnv
cargo: Update pin-project dep to 1.1.10
d9ecd30 
Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>
@lexnv
cargo: Update serde dep to 1.0.219
3d43edf 
Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>
@lexnv
cargo: Update tokio to 1.44.2
e4f47b9 
Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>
@lexnv
cargo: Update async-trait dep to 0.1.88
030b878 
Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>
@lexnv
cargo: Update smallvec to 0.15.0
2d6893f 
Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>
@lexnv
cargo: Update socket2 dep to 0.5.9
7010c9e 
Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>
@lexnv
cargo: Update thiserror to 2.0.12
1253f8f 
Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>
@lexnv
cargo: Update indexmap to 2.9.0
6574c0e 
Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>
@lexnv
cargo: Update tokio-util to 0.7.14
1c6dbb6 
Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>
@lexnv
cargo: Update prost to 0.13.5
fb8179a 
Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>
@lexnv
cargo: Update bytes to 1.10.1
ceb0b4f 
Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>
@lexnv
cargo: Update serde_json to 1.0.140
ca14b07 
Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>
@lexnv
cargo: Add comments around stable / unstable features
0cef408 
Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>
@lexnv
cargo/lock: Update ring to 0.17.14
afc01df 
Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>
@lexnv
cargo: Periodic cargo update
33aecbd 
Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>
@lexnv
ci: Add dependency audit on stable (non-dev) features
49bce76 
Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>
@lexnv lexnv added the enhancement New feature or request label Apr 15, 2025
@lexnv lexnv self-assigned this Apr 15, 2025
lexnv added a commit that referenced this pull request Apr 15, 2025
@lexnv
ci: Update stable dependencies and introduce cargo-audit #375
c5f3c6f 
Squashed commit of the following:

commit 49bce76
Author: Alexandru Vasile <alexandru.vasile@parity.io>
Date:   Tue Apr 15 15:14:27 2025 +0300

    ci: Add dependency audit on stable (non-dev) features

    Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>

commit 33aecbd
Author: Alexandru Vasile <alexandru.vasile@parity.io>
Date:   Tue Apr 15 14:52:53 2025 +0300

    cargo: Periodic cargo update

    Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>

commit afc01df
Author: Alexandru Vasile <alexandru.vasile@parity.io>
Date:   Tue Apr 15 14:51:39 2025 +0300

    cargo/lock: Update ring to 0.17.14

    Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>

commit 0cef408
Author: Alexandru Vasile <alexandru.vasile@parity.io>
Date:   Tue Apr 15 14:50:56 2025 +0300

    cargo: Add comments around stable / unstable features

    Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>

commit ca14b07
Author: Alexandru Vasile <alexandru.vasile@parity.io>
Date:   Tue Apr 15 14:48:14 2025 +0300

    cargo: Update serde_json to 1.0.140

    Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>

commit ceb0b4f
Author: Alexandru Vasile <alexandru.vasile@parity.io>
Date:   Tue Apr 15 14:41:35 2025 +0300

    cargo: Update bytes to 1.10.1

    Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>

commit fb8179a
Author: Alexandru Vasile <alexandru.vasile@parity.io>
Date:   Tue Apr 15 14:40:39 2025 +0300

    cargo: Update prost to 0.13.5

    Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>

commit 1c6dbb6
Author: Alexandru Vasile <alexandru.vasile@parity.io>
Date:   Tue Apr 15 14:39:57 2025 +0300

    cargo: Update tokio-util to 0.7.14

    Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>

commit 6574c0e
Author: Alexandru Vasile <alexandru.vasile@parity.io>
Date:   Tue Apr 15 14:39:07 2025 +0300

    cargo: Update indexmap to 2.9.0

    Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>

commit 1253f8f
Author: Alexandru Vasile <alexandru.vasile@parity.io>
Date:   Tue Apr 15 14:38:07 2025 +0300

    cargo: Update thiserror to 2.0.12

    Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>

commit 7010c9e
Author: Alexandru Vasile <alexandru.vasile@parity.io>
Date:   Tue Apr 15 14:37:45 2025 +0300

    cargo: Update socket2 dep to 0.5.9

    Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>

commit 2d6893f
Author: Alexandru Vasile <alexandru.vasile@parity.io>
Date:   Tue Apr 15 14:36:53 2025 +0300

    cargo: Update smallvec to 0.15.0

    Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>

commit 030b878
Author: Alexandru Vasile <alexandru.vasile@parity.io>
Date:   Tue Apr 15 14:36:00 2025 +0300

    cargo: Update async-trait dep to 0.1.88

    Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>

commit e4f47b9
Author: Alexandru Vasile <alexandru.vasile@parity.io>
Date:   Tue Apr 15 14:33:49 2025 +0300

    cargo: Update tokio to 1.44.2

    Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>

commit 3d43edf
Author: Alexandru Vasile <alexandru.vasile@parity.io>
Date:   Tue Apr 15 14:29:49 2025 +0300

    cargo: Update serde dep to 1.0.219

    Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>

commit d9ecd30
Author: Alexandru Vasile <alexandru.vasile@parity.io>
Date:   Tue Apr 15 14:28:58 2025 +0300

    cargo: Update pin-project dep to 1.1.10

    Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>

commit 27ec3d3
Author: Alexandru Vasile <alexandru.vasile@parity.io>
Date:   Tue Apr 15 14:28:18 2025 +0300

    cargo: Update tokio-tungstenite dep to 0.26.2

    Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>

commit c84559d
Author: Alexandru Vasile <alexandru.vasile@parity.io>
Date:   Tue Apr 15 14:27:31 2025 +0300

    cargo: Move websocket deps to dedicated section

    Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>

commit 246459d
Author: Alexandru Vasile <alexandru.vasile@parity.io>
Date:   Tue Apr 15 14:26:47 2025 +0300

    cargo: Move str0m to dedicated webrtc section

    Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>

commit ac39466
Author: Alexandru Vasile <alexandru.vasile@parity.io>
Date:   Tue Apr 15 14:25:31 2025 +0300

    cargo: Make rcgen dep optional based on Quic feature flag

    Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>

commit 33a94b4
Author: Alexandru Vasile <alexandru.vasile@parity.io>
Date:   Tue Apr 15 14:22:58 2025 +0300

    cargo: Update cid dep to 0.11.1

    Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>

Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>
lexnv added 6 commits April 24, 2025 18:17
@lexnv
Merge remote-tracking branch 'origin/master' into lexnv/update-deps-ci
4eac8c5 
Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>
@lexnv
cargo: Add section around fuzzing
e313fad 
Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>
@lexnv
cargo: Update tokio-util to 0.7.15
2fce996 
Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>
@lexnv
cargo: Move hex-literal to testing
c437750 
Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>
@lexnv
cargo: Update network_interface to 2.0.1
fa8faf3 
Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>
@lexnv
ci: Update CI to exclude fizzing flags
3466356 
Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>
@lexnv
ci: Remove audit step for now
06555ec 
Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>
@lexnv lexnv changed the title ci: Update stable dependencies and introduce cargo-audit ci: Update stable dependencies Apr 25, 2025
@lexnv lexnv merged commit 48d540d into master Apr 28, 2025
8 checks passed
@lexnv lexnv deleted the lexnv/update-deps-ci branch April 28, 2025 09:45
This was referenced Apr 29, 2025
Merged
Merged
lexnv added a commit that referenced this pull request May 1, 2025
@lexnv
chore: Release litep2p v0.9.4 (#382)
6d61e2b 
## [0.9.4] - 2025-04-29

This release brings several improvements and fixes to litep2p, advancing
its stability and readiness for production use.

### Performance Improvements

This release addresses an issue where notification protocols failed to
exit on handle drop, lowering CPU usage in scenarios like
minimal-relay-chains from 7% to 0.1%.

### Robustness Improvements

- Kademlia:
- Optimized address store by sorting addresses based on dialing score,
bounding memory consumption and improving efficiency.
- Limited `FIND_NODE` responses to the replication factor, reducing data
stored in the routing table.
- Address store improvements enhance robustness against routing table
alterations.

- Identify Codec:
- Enhanced message decoding to manage malformed or unexpected messages
gracefully.

- Bitswap:
- Introduced a write timeout for sending frames, preventing protocol
hangs or delays.

### Testing and Reliability

- Fuzzing Harness: Added a fuzzing harness by SRLabs to uncover and
resolve potential issues, improving code robustness. Thanks to @R9295
for the contribution!

- Testing Enhancements: Improved notification state machine testing.
Thanks to Dominique (@Imod7) for the contribution!

### Dependency Management

- Updated all dependencies for stable feature flags (default and
"websocket") to their latest versions.

- Reorganized dependencies under specific feature flags, shrinking the
default feature set and avoiding exposure of outdated dependencies from
experimental features.

### Fixed

- notifications: Exit protocols on handle drop to save up CPU of
`minimal-relay-chains`
([#376](#376))
- identify: Improve identify message decoding
([#379](#379))
- crypto/noise: Set timeout limits for the noise handshake
([#373](#373))
- kad: Improve robustness of addresses from the routing table
([#369](#369))
- kad: Bound kademlia messages to the replication factor
([#371](#371))
- codec: Decode smaller payloads for identity to None
([#362](#362))

### Added

- bitswap: Add write timeout for sending frames
([#361](#361))
- notif/tests: check test state
([#360](#360))
- SRLabs: Introduce simple fuzzing harness
([#367](#367))
- SRLabs: Introduce Fuzzing Harness
([#365](#365))

### Changed

- features: Move quic related dependencies under feature flag
([#359](#359))
- tests/substrate: Remove outdated substrate specific conformace testing
([#370](#370))
- ci: Update stable dependencies
([#375](#375))
- build(deps): bump hex-literal from 0.4.1 to 1.0.0
([#381](#381))
- build(deps): bump tokio from 1.44.1 to 1.44.2 in /fuzz/structure-aware
([#378](#378))
- build(deps): bump Swatinem/rust-cache from 2.7.7 to 2.7.8
([#363](#363))
- build(deps): bump tokio from 1.43.0 to 1.43.1
([#368](#368))
- build(deps): bump openssl from 0.10.70 to 0.10.72
([#366](#366))

---------

Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>
github-merge-queue bot pushed a commit to paritytech/polkadot-sdk that referenced this pull request May 1, 2025
@lexnv @dmitry-markin
networking: Update litep2p network backend to v0.9.4 (#8373)
9869517 
# Litep2p Release

This release brings several improvements and fixes to litep2p, advancing
its stability and readiness for production use.

### Performance Improvements

This release addresses an issue where notification protocols failed to
exit on handle drop, lowering CPU usage in scenarios like
minimal-relay-chains from 7% to 0.1%.

### Robustness Improvements

- Kademlia:
- Optimized address store by sorting addresses based on dialing score,
bounding memory consumption and improving efficiency.
- Limited `FIND_NODE` responses to the replication factor, reducing data
stored in the routing table.
- Address store improvements enhance robustness against routing table
alterations.

- Identify Codec:
- Enhanced message decoding to manage malformed or unexpected messages
gracefully.

- Bitswap:
- Introduced a write timeout for sending frames, preventing protocol
hangs or delays.

### Testing and Reliability

- Fuzzing Harness: Added a fuzzing harness by SRLabs to uncover and
resolve potential issues, improving code robustness. Thanks to @R9295
for the contribution!

- Testing Enhancements: Improved notification state machine testing.
Thanks to Dominique (@Imod7) for the contribution!

### Dependency Management

- Updated all dependencies for stable feature flags (default and
"websocket") to their latest versions.

- Reorganized dependencies under specific feature flags, shrinking the
default feature set and avoiding exposure of outdated dependencies from
experimental features.

### Fixed

- notifications: Exit protocols on handle drop to save up CPU of
`minimal-relay-chains`
([#376](paritytech/litep2p#376))
- identify: Improve identify message decoding
([#379](paritytech/litep2p#379))
- crypto/noise: Set timeout limits for the noise handshake
([#373](paritytech/litep2p#373))
- kad: Improve robustness of addresses from the routing table
([#369](paritytech/litep2p#369))
- kad: Bound kademlia messages to the replication factor
([#371](paritytech/litep2p#371))
- codec: Decode smaller payloads for identity to None
([#362](paritytech/litep2p#362))

### Added

- bitswap: Add write timeout for sending frames
([#361](paritytech/litep2p#361))
- notif/tests: check test state
([#360](paritytech/litep2p#360))
- SRLabs: Introduce simple fuzzing harness
([#367](paritytech/litep2p#367))
- SRLabs: Introduce Fuzzing Harness
([#365](paritytech/litep2p#365))

### Changed

- features: Move quic related dependencies under feature flag
([#359](paritytech/litep2p#359))
- tests/substrate: Remove outdated substrate specific conformace testing
([#370](paritytech/litep2p#370))
- ci: Update stable dependencies
([#375](paritytech/litep2p#375))
- build(deps): bump hex-literal from 0.4.1 to 1.0.0
([#381](paritytech/litep2p#381))
- build(deps): bump tokio from 1.44.1 to 1.44.2 in /fuzz/structure-aware
([#378](paritytech/litep2p#378))
- build(deps): bump Swatinem/rust-cache from 2.7.7 to 2.7.8
([#363](paritytech/litep2p#363))
- build(deps): bump tokio from 1.43.0 to 1.43.1
([#368](paritytech/litep2p#368))
- build(deps): bump openssl from 0.10.70 to 0.10.72
([#366](paritytech/litep2p#366))

---------

Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>
Co-authored-by: Dmitry Markin <dmitry@markin.tech>
castillax pushed a commit to paritytech/polkadot-sdk that referenced this pull request May 12, 2025
@lexnv @dmitry-markin @castillax
networking: Update litep2p network backend to v0.9.4 (#8373)
4270c62 
# Litep2p Release

This release brings several improvements and fixes to litep2p, advancing
its stability and readiness for production use.

### Performance Improvements

This release addresses an issue where notification protocols failed to
exit on handle drop, lowering CPU usage in scenarios like
minimal-relay-chains from 7% to 0.1%.

### Robustness Improvements

- Kademlia:
- Optimized address store by sorting addresses based on dialing score,
bounding memory consumption and improving efficiency.
- Limited `FIND_NODE` responses to the replication factor, reducing data
stored in the routing table.
- Address store improvements enhance robustness against routing table
alterations.

- Identify Codec:
- Enhanced message decoding to manage malformed or unexpected messages
gracefully.

- Bitswap:
- Introduced a write timeout for sending frames, preventing protocol
hangs or delays.

### Testing and Reliability

- Fuzzing Harness: Added a fuzzing harness by SRLabs to uncover and
resolve potential issues, improving code robustness. Thanks to @R9295
for the contribution!

- Testing Enhancements: Improved notification state machine testing.
Thanks to Dominique (@Imod7) for the contribution!

### Dependency Management

- Updated all dependencies for stable feature flags (default and
"websocket") to their latest versions.

- Reorganized dependencies under specific feature flags, shrinking the
default feature set and avoiding exposure of outdated dependencies from
experimental features.

### Fixed

- notifications: Exit protocols on handle drop to save up CPU of
`minimal-relay-chains`
([#376](paritytech/litep2p#376))
- identify: Improve identify message decoding
([#379](paritytech/litep2p#379))
- crypto/noise: Set timeout limits for the noise handshake
([#373](paritytech/litep2p#373))
- kad: Improve robustness of addresses from the routing table
([#369](paritytech/litep2p#369))
- kad: Bound kademlia messages to the replication factor
([#371](paritytech/litep2p#371))
- codec: Decode smaller payloads for identity to None
([#362](paritytech/litep2p#362))

### Added

- bitswap: Add write timeout for sending frames
([#361](paritytech/litep2p#361))
- notif/tests: check test state
([#360](paritytech/litep2p#360))
- SRLabs: Introduce simple fuzzing harness
([#367](paritytech/litep2p#367))
- SRLabs: Introduce Fuzzing Harness
([#365](paritytech/litep2p#365))

### Changed

- features: Move quic related dependencies under feature flag
([#359](paritytech/litep2p#359))
- tests/substrate: Remove outdated substrate specific conformace testing
([#370](paritytech/litep2p#370))
- ci: Update stable dependencies
([#375](paritytech/litep2p#375))
- build(deps): bump hex-literal from 0.4.1 to 1.0.0
([#381](paritytech/litep2p#381))
- build(deps): bump tokio from 1.44.1 to 1.44.2 in /fuzz/structure-aware
([#378](paritytech/litep2p#378))
- build(deps): bump Swatinem/rust-cache from 2.7.7 to 2.7.8
([#363](paritytech/litep2p#363))
- build(deps): bump tokio from 1.43.0 to 1.43.1
([#368](paritytech/litep2p#368))
- build(deps): bump openssl from 0.10.70 to 0.10.72
([#366](paritytech/litep2p#366))

---------

Signed-off-by: Alexandru Vasile <alexandru.vasile@parity.io>
Co-authored-by: Dmitry Markin <dmitry@markin.tech>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@dmitry-markin dmitry-markin dmitry-markin approved these changes

Assignees

@lexnv lexnv

Labels
enhancement New feature or request
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@lexnv @dmitry-markin