Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

dev.boringcrypto branch behind the main releases (1.13.4b4 vs 1.13.6) #36611

Closed
sodul opened this issue Jan 16, 2020 · 6 comments
Closed

dev.boringcrypto branch behind the main releases (1.13.4b4 vs 1.13.6) #36611

sodul opened this issue Jan 16, 2020 · 6 comments
Labels
FrozenDueToAge NeedsFix The path to resolution is known, but the work has not been done.
Milestone
Unreleased

Comments

@sodul
Copy link

sodul commented Jan 16, 2020

The latest release for dev.boringcrypto is 1.13.4b4, the latest official release is 1.13.6.

Most of the dev.boringcrypto releases happened fairly promptly after the official releases in 2019, is the plan moving forward to keep releaseing the dev.boringcrypto branches�?

Pretty much what are the plans with dev.boringcrypto for 2020?
@dmitshur
Copy link
Contributor

/cc @FiloSottile @katiehockman

@dmitshur dmitshur added the NeedsInvestigation Someone must examine and confirm this is a valid issue and not a duplicate of an existing one. label Jan 17, 2020
@dmitshur dmitshur added this to the Backlog milestone Jan 17, 2020
@sodul
Copy link
Author

sodul commented Feb 3, 2020

Ping. GoLang 1.13.7 was release a few days ago with 2 security fixes and unfortunately the dev.boringcrypto is still inactive since November 25 2019.

https://go.googlesource.com/go/+/dev.boringcrypto/misc/boring/RELEASES
https://go.googlesource.com/go/+/dev.boringcrypto

If this branch is being officially abandoned that would a be a big disappointment but knowing so would let us proactively plan to switch to an alternative solution for our needs.

@dmitshur
Copy link
Contributor

dmitshur commented Feb 3, 2020

@solul Thanks for the ping. There are plans to update these branches and make a BoringCrypto release, it just hasn't been done yet.

Let's wait to hear from @FiloSottile and @katiehockman.

@FiloSottile FiloSottile modified the milestones: Backlog, Unreleased Feb 5, 2020
@FiloSottile FiloSottile added the NeedsFix The path to resolution is known, but the work has not been done. label Feb 5, 2020
@gopherbot
Copy link

Change https://golang.org/cl/217938 mentions this issue: [dev.boringcrypto] misc/boring: add go1.13.7b4 and go1.12.16b4 releases to RELEASES file

@gopherbot gopherbot removed the NeedsInvestigation Someone must examine and confirm this is a valid issue and not a duplicate of an existing one. label Feb 5, 2020
gopherbot pushed a commit that referenced this issue Feb 6, 2020
@FiloSottile
[dev.boringcrypto] misc/boring: add go1.13.7b4 and go1.12.16b4 releas…
f96dfe6 
…es to RELEASES file

Fixes #36611

Change-Id: Ie216914a044d02afbe9d9c36c4597f84282dae89
Reviewed-on: https://go-review.googlesource.com/c/go/+/217938
Reviewed-by: Katie Hockman <katie@golang.org>
@sodul
Copy link
Author

sodul commented Feb 7, 2020

I see that go1.13.7b4 is available. Thank you @FiloSottile and @dmitshur this is very much appreciated!

@sodul sodul closed this as completed Feb 7, 2020
@FiloSottile
Copy link
Contributor

Sorry for the delay!

@sodul sodul mentioned this issue Apr 16, 2020
Closed
@golang golang locked and limited conversation to collaborators Feb 6, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
FrozenDueToAge NeedsFix The path to resolution is known, but the work has not been done.
Projects
None yet
Milestone
Unreleased
Development

No branches or pull requests
4 participants
@FiloSottile @sodul @dmitshur @gopherbot