@@ -5,6 +5,72 @@ All notable changes to this project will be documented in this file.
55The format is based on [ Keep a Changelog] ( https://keepachangelog.com/en/1.0.0/ ) ,
66and this project adheres to [ Semantic Versioning] ( https://semver.org/spec/v2.0.0.html ) .
77
8+ ## 0.8.1 - 2024-08-23
9+
10+ 16 pull requests were merged this release cycle.
11+
12+ This release contains a fix for [ RUSTSEC-2024-0363] .
13+
14+ Postgres users are advised to upgrade ASAP as a possible exploit has been demonstrated:
15+ < https://github.com/launchbadge/sqlx/issues/3440#issuecomment-2307956901 >
16+
17+ MySQL and SQLite do not _ appear_ to be exploitable, but upgrading is recommended nonetheless.
18+
19+ ### Added
20+ * [[ #3421 ]] : correct spelling of ` MySqlConnectOptions::no_engine_substitution() ` [[ @kolinfluence ]]
21+ * Deprecates ` MySqlConnectOptions::no_engine_subsitution() ` (oops) in favor of the correctly spelled version.
22+
23+ ### Changed
24+ * [[ #3376 ]] : doc: hide ` spec_error ` module [[ @abonander ]]
25+ * This is a helper module for the macros and was not meant to be exposed.
26+ * It is not expected to receive any breaking changes for the 0.8.x release, but is not designed as a public API.
27+ Use at your own risk.
28+ * [[ #3382 ]] : feat: bumped to ` libsqlite3-sys=0.30.1 ` to support sqlite 3.46 [[ @CommanderStorm ]]
29+ * [[ #3385 ]] : chore(examples): Migrated the pg-chat example to ratatui [[ @CommanderStorm ]]
30+ * [[ #3399 ]] : Upgrade to rustls 0.23 [[ @djc ]]
31+ * RusTLS now has pluggable cryptography providers: ` ring ` (the existing implementation),
32+ and ` aws-lc-rs ` which has optional FIPS certification.
33+ * The existing features activating RusTLS (` runtime-tokio-rustls ` , ` runtime-async-std-rustls ` , ` tls-rustls ` )
34+ enable the ` ring ` provider of RusTLS to match the existing behavior so this _ should not_ be a breaking change.
35+ * Switch to the ` tls-rustls-aws-lc-rs ` feature to use the ` aws-lc-rs ` provider.
36+ * If using ` runtime-tokio-rustls ` or ` runtime-async-std-rustls ` ,
37+ this will necessitate switching to the appropriate non-legacy runtime feature:
38+ ` runtime-tokio ` or ` runtime-async-std `
39+ * See the RusTLS README for more details: < https://github.com/rustls/rustls?tab=readme-ov-file#cryptography-providers >
40+
41+ ### Fixed
42+ * [[ #2786 ]] : fix(sqlx-cli): do not clean sqlx during prepare [[ @cycraig ]]
43+ * [[ #3354 ]] : sqlite: fix inconsistent read-after-write [[ @ckampfe ]]
44+ * [[ #3371 ]] : Fix encoding and decoding of MySQL enums in ` sqlx::Type ` [[ @alu ]]
45+ * [[ #3374 ]] : fix: usage of ` node12 ` in ` SQLx ` action [[ @hamirmahal ]]
46+ * [[ #3380 ]] : chore: replace structopt with clap in examples [[ @tottoto ]]
47+ * [[ #3381 ]] : Fix CI after Rust 1.80, remove dead feature references [[ @abonander ]]
48+ * [[ #3384 ]] : chore(tests): fixed deprecation warnings [[ @CommanderStorm ]]
49+ * [[ #3386 ]] : fix(dependencys): bumped cargo_metadata to ` v0.18.1 ` to avoid yanked ` v0.14.3 ` [[ @CommanderStorm ]]
50+ * [[ #3389 ]] : fix(cli): typo in error for required DB URL [[ @ods ]]
51+ * [[ #3417 ]] : Update version to 0.8 in README [[ @soucosmo ]]
52+ * [[ #3441 ]] : fix: audit protocol handling [[ @abonander ]]
53+ * This addresses [ RUSTSEC-2024-0363] and includes regression tests for MySQL, Postgres and SQLite.
54+
55+ [ #2786 ] : https://github.com/launchbadge/sqlx/pull/2786
56+ [ #3354 ] : https://github.com/launchbadge/sqlx/pull/3354
57+ [ #3371 ] : https://github.com/launchbadge/sqlx/pull/3371
58+ [ #3374 ] : https://github.com/launchbadge/sqlx/pull/3374
59+ [ #3376 ] : https://github.com/launchbadge/sqlx/pull/3376
60+ [ #3380 ] : https://github.com/launchbadge/sqlx/pull/3380
61+ [ #3381 ] : https://github.com/launchbadge/sqlx/pull/3381
62+ [ #3382 ] : https://github.com/launchbadge/sqlx/pull/3382
63+ [ #3384 ] : https://github.com/launchbadge/sqlx/pull/3384
64+ [ #3385 ] : https://github.com/launchbadge/sqlx/pull/3385
65+ [ #3386 ] : https://github.com/launchbadge/sqlx/pull/3386
66+ [ #3389 ] : https://github.com/launchbadge/sqlx/pull/3389
67+ [ #3399 ] : https://github.com/launchbadge/sqlx/pull/3399
68+ [ #3417 ] : https://github.com/launchbadge/sqlx/pull/3417
69+ [ #3421 ] : https://github.com/launchbadge/sqlx/pull/3421
70+ [ #3441 ] : https://github.com/launchbadge/sqlx/pull/3441
71+
72+ [ RUSTSEC-2024-0363 ] : https://rustsec.org/advisories/RUSTSEC-2024-0363.html
73+
874## 0.8.0 - 2024-07-22
975
107670 pull requests were merged this release cycle.
0 commit comments