ydb/contrib, branch CLI_2.22.0Mirror of YDB github reposhttps://code.mastervirt.ru/ydb/atom?h=CLI_2.22.02025-05-31T08:10:07ZIntermediate changes2025-05-31T08:10:07Zrobot-pigletrobot-piglet@yandex-team.com2025-05-31T08:00:32Zurn:sha1:50318ed167506d485732c24a959f9c0711258047
commit_hash:0b67855d017f0b9d79b9ae4b931a252f94318014
Update contrib/python/types-protobuf to 6.30.2.202505162025-05-31T06:52:51Zrobot-contribrobot-contrib@yandex-team.com2025-05-31T06:35:05Zurn:sha1:0d86826871d3d0ce988823be681473aeacdf26b9
commit_hash:7a31c2f1702a251643032add182c83498de96056
Intermediate changes2025-05-31T06:46:18Zrobot-pigletrobot-piglet@yandex-team.com2025-05-31T06:34:53Zurn:sha1:1849982e807e525e4f202310b18677ed41c4e093
commit_hash:6a081c0dfeb90c941bc82c3c6f19a684815145bb
Intermediate changes2025-05-30T10:04:17Zrobot-pigletrobot-piglet@yandex-team.com2025-05-30T09:34:55Zurn:sha1:aa5b65fb974e9de8da3dfd1716808817e83c9e6b
commit_hash:a202126dac8bf1e6d89ecdeef0b1a94564b12916
Deprecate contrib/libs/yajl and contrib/restricted/http-parser2025-05-30T07:47:42Zthegeorgthegeorg@yandex-team.com2025-05-30T07:25:36Zurn:sha1:8b8d94c31949c2597d5c8ed23d8b7c45de2290f5
* http-parser was explicitly deprecated: https://github.com/nodejs/http-parser
Use contrib/restricted/llhttp instead
* https://github.com/lloyd/yajl received no updates for 10 years.
Use either contrib/libs/json-c or contrib/libs/simdjson instead.
commit_hash:4be3755e7075401bf866ec2716550bec000286b1
Fix potential vulnerable cloned function2025-05-29T09:09:20Znpt-1707npthanh132@gmail.com2025-05-29T08:27:44Zurn:sha1:7f3903f18f331c5be93a476a3ffe1049b7aafaa3
* Changelog entry
Type: fix
Component: contrib/libs/yajl
Hi there,
I identified another vulnerability in a clone function yajl_string_decode() in `contrib/libs/yajl/yajl_encode.c` sourced from [brianmario/yajl-ruby](https://github.com/brianmario/yajl-ruby). This issue, originally reported in-16516](https://nvd.nist.gov/vuln/detail/CVE-2017-16516), was resolved in the repository via this commit https://github.com/brianmario/yajl-ruby/commit/a8ca8f476655adaa187eedc60bdc770fff3c51ce.
This PR applies the corresponding patch to fix the vulnerabilities in this codebase.
Please review at your convenience. Thank you!
---
Pull Request resolved: https://github.com/ytsaurus/ytsaurus/pull/1261
commit_hash:d98c6330759e2ae178b04885d9a87ca5d7f574f8
Intermediate changes2025-05-27T17:01:34Zrobot-pigletrobot-piglet@yandex-team.com2025-05-27T16:39:58Zurn:sha1:838141d227c3586d685f4766bf308ba92bcf84f8
commit_hash:4c784d04ee4b4d8786e4c4ddf0e1af3abe48f5a3
Add ftxui to YDB2025-05-26T11:34:41Zeivanov89eivanov89@yandex-team.com2025-05-26T11:08:30Zurn:sha1:87cfbf9ae62b85c094c565d0d7dc8a3526ce4fee
commit_hash:950eb4e30201bcf0d03f75074c8034665d191474
Intermediate changes2025-05-26T09:47:03Zrobot-pigletrobot-piglet@yandex-team.com2025-05-26T09:33:07Zurn:sha1:dcb18ce317f74ceea21c76dc307e80c4ae83bf44
commit_hash:508715aa5dbd005ad8e4319526b7ae1f76148e79
Intermediate changes2025-05-26T08:52:25Zrobot-pigletrobot-piglet@yandex-team.com2025-05-26T08:35:46Zurn:sha1:d289b87c6d760d718a2195c4ea38213b0c10d5b2
commit_hash:12fc2b708e5345ee6f0d5786530a156482c45297