Conversation
…kdf2 0.13 Supersedes dependabot PRs #490 #492 #493 #494 — those individual bumps fail CI in isolation because the four crates are cross-dependent: - tonic 0.14 requires prost 0.14 (ProstCodec moved from tonic::codec to a new tonic-prost crate) - tonic-web 0.14 follows tonic - sha2 0.11 needs pbkdf2 0.13 (older pbkdf2's hmac trait bound on sha2 doesn't satisfy under sha2 0.11's CoreProxy) Bundling lands all four together so the workspace compiles + tests pass at every step. Migration notes: - tonic-build 0.14 split prost-specific codegen into tonic-prost-build. crates/sentrix-grpc/build.rs now uses tonic_prost_build::configure + compile_with_config (the old compile_protos_with_config method was renamed). Added tonic-prost + tonic-prost-build deps. - No sentrix code uses tonic::codec types directly (gRPC service is skeleton-only with Unimplemented handlers; runtime codec is generated by the build script). So no src changes needed beyond build.rs. - sha2 0.11 + pbkdf2 0.13 just bumped together; existing call sites use the trait re-exports unchanged. Versions on workspace: sha2: 0.10 → 0.11 (7 Cargo.toml files) pbkdf2: 0.12 → 0.13 (2 files: workspace + sentrix-wallet) tonic: 0.12 → 0.14 (sentrix-node + sentrix-grpc) tonic-web: 0.12 → 0.14 (sentrix-node) tonic-build: 0.12 → 0.14 (sentrix-grpc dev) tonic-prost: NEW 0.14 (sentrix-grpc dep) tonic-prost-build: NEW 0.14 (sentrix-grpc dev) prost: 0.13 → 0.14 (sentrix-grpc) prost-build: 0.13 → 0.14 (sentrix-grpc dev) Verification: cargo check --workspace --tests → pass cargo clippy --workspace --tests -- -D warnings → zero warnings cargo test --workspace --lib → 714 unit tests pass cargo test --workspace --tests → all integration tests pass
This was referenced May 6, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Supersedes #490, #492, #493, #494. These dependabot bumps cross-depend (tonic 0.14 needs prost 0.14, sha2 0.11 needs pbkdf2 0.13), so they must land bundled.
Versions
Code change
crates/sentrix-grpc/build.rs—tonic_build::configure→tonic_prost_build::configure+compile_protos_with_config→compile_with_config(tonic-build 0.14 split prost-specific codegen into a separatetonic-prost-buildcrate). Nosrc/*.rschanges.Verified