From 2a690592d386fcc982ea7ff406ba981db06e9feb Mon Sep 17 00:00:00 2001 From: jadamcrain Date: Wed, 28 Oct 2026 21:59:25 -0700 Subject: [PATCH] prepare 1.8.0 --- CHANGELOG.md | 1 + Cargo.lock | 12 ++++++------ SECURITY.md | 2 +- conformance/pom.xml | 2 +- dnp3/Cargo.toml | 2 +- dnp3/README.md | 2 +- dnp3/codegen/pom.xml | 2 +- ffi/bindings/c/CMakeLists.txt | 2 +- ffi/bindings/dotnet/examples/master/Master.csproj | 2 +- .../dotnet/examples/outstation/Outstation.csproj | 2 +- ffi/bindings/java/dnp3-tests/pom.xml | 2 +- ffi/bindings/java/examples/pom.xml | 4 ++-- ffi/bindings/java/pom.xml | 2 +- ffi/dnp3-bindings/Cargo.toml | 2 +- ffi/dnp3-ffi-c/Cargo.toml | 2 +- ffi/dnp3-ffi-java/Cargo.toml | 2 +- ffi/dnp3-ffi/Cargo.toml | 2 +- ffi/dnp3-schema/Cargo.toml | 2 +- guide/sitedata.json | 2 +- 19 files changed, 25 insertions(+), 24 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 55e29260..c6623cd1 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,6 @@ ### 1.8.0 ### +* :rotating_light: **Security advisory:** A specially crafted request can panic the outstation, stopping it until the application recreates it. Every earlier release is affected. See [GHSA-9f93-5j9q-v692](https://github.com/stepfunc/dnp3/security/advisories/GHSA-9f93-5j9q-v692). * :shield: **Hardened against panics.** Lints deny common sources of panics throughout the core library, and CI now **proves** that important parts of it can't panic for any input. * :bell: **License update.** The license now prohibits using the library to build or test other implementations of the protocol, including by mining it with AI tools or using it as an oracle, and reserves AI training. See [#712](https://github.com/stepfunc/dnp3/pull/712). * :bell: **The minimum supported Rust version is now 1.88.** See [#502](https://github.com/stepfunc/dnp3/pull/502). diff --git a/Cargo.lock b/Cargo.lock index ae95c5c5..ef991a52 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -463,7 +463,7 @@ dependencies = [ [[package]] name = "dnp3" -version = "1.8.0-RC3" +version = "1.8.0" dependencies = [ "assert_matches", "chrono", @@ -483,7 +483,7 @@ dependencies = [ [[package]] name = "dnp3-bindings" -version = "1.8.0-RC3" +version = "1.8.0" dependencies = [ "dnp3-schema", "oo-bindgen", @@ -502,7 +502,7 @@ dependencies = [ [[package]] name = "dnp3-ffi" -version = "1.8.0-RC3" +version = "1.8.0" dependencies = [ "dnp3", "dnp3-schema", @@ -520,14 +520,14 @@ dependencies = [ [[package]] name = "dnp3-ffi-c" -version = "1.8.0-RC3" +version = "1.8.0" dependencies = [ "dnp3-ffi", ] [[package]] name = "dnp3-ffi-java" -version = "1.8.0-RC3" +version = "1.8.0" dependencies = [ "dnp3-ffi", "dnp3-schema", @@ -537,7 +537,7 @@ dependencies = [ [[package]] name = "dnp3-schema" -version = "1.8.0-RC3" +version = "1.8.0" dependencies = [ "oo-bindgen", "sfio-tokio-ffi", diff --git a/SECURITY.md b/SECURITY.md index c410b4c5..1051c7d6 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -39,7 +39,7 @@ To stay up to date: ## How the Library Is Hardened -The [security page](https://docs.stepfunc.io/dnp3/1.8.0-RC3/guide/docs/security) of the guide describes the engineering measures: memory safety, the lints that restrict +The [security page](https://docs.stepfunc.io/dnp3/1.8.0/guide/docs/security) of the guide describes the engineering measures: memory safety, the lints that restrict sources of panics, the link-time proof that the parsers can't panic, protocol validation and the TLS trust model. ## Supply Chain Security diff --git a/conformance/pom.xml b/conformance/pom.xml index 61970fb0..67451009 100644 --- a/conformance/pom.xml +++ b/conformance/pom.xml @@ -11,7 +11,7 @@ UTF-8 3.9.0 - 1.8.0-RC3 + 1.8.0 0.3.0 4.10.0 diff --git a/ffi/bindings/java/examples/pom.xml b/ffi/bindings/java/examples/pom.xml index 37aa922a..9b075e94 100644 --- a/ffi/bindings/java/examples/pom.xml +++ b/ffi/bindings/java/examples/pom.xml @@ -4,7 +4,7 @@ io.stepfunc.dnp3 examples - 1.8.0-RC3 + 1.8.0 1.8 @@ -16,7 +16,7 @@ io.stepfunc dnp3 - 1.8.0-RC3 + 1.8.0 diff --git a/ffi/bindings/java/pom.xml b/ffi/bindings/java/pom.xml index 27511655..fe9985aa 100644 --- a/ffi/bindings/java/pom.xml +++ b/ffi/bindings/java/pom.xml @@ -4,7 +4,7 @@ io.stepfunc dnp3-parent - 1.8.0-RC3 + 1.8.0 pom diff --git a/ffi/dnp3-bindings/Cargo.toml b/ffi/dnp3-bindings/Cargo.toml index d7a55938..4312dd79 100644 --- a/ffi/dnp3-bindings/Cargo.toml +++ b/ffi/dnp3-bindings/Cargo.toml @@ -1,6 +1,6 @@ [package] name = "dnp3-bindings" -version = "1.8.0-RC3" +version = "1.8.0" # inherit from workspace rust-version.workspace = true diff --git a/ffi/dnp3-ffi-c/Cargo.toml b/ffi/dnp3-ffi-c/Cargo.toml index 5749cd97..a04f411f 100644 --- a/ffi/dnp3-ffi-c/Cargo.toml +++ b/ffi/dnp3-ffi-c/Cargo.toml @@ -1,6 +1,6 @@ [package] name = "dnp3-ffi-c" -version = "1.8.0-RC3" +version = "1.8.0" # inherit from workspace rust-version.workspace = true diff --git a/ffi/dnp3-ffi-java/Cargo.toml b/ffi/dnp3-ffi-java/Cargo.toml index e1a3b199..37c6ac8c 100644 --- a/ffi/dnp3-ffi-java/Cargo.toml +++ b/ffi/dnp3-ffi-java/Cargo.toml @@ -1,6 +1,6 @@ [package] name = "dnp3-ffi-java" -version = "1.8.0-RC3" +version = "1.8.0" build = "build.rs" # inherit from workspace diff --git a/ffi/dnp3-ffi/Cargo.toml b/ffi/dnp3-ffi/Cargo.toml index e6fda885..9eb2f31d 100644 --- a/ffi/dnp3-ffi/Cargo.toml +++ b/ffi/dnp3-ffi/Cargo.toml @@ -1,6 +1,6 @@ [package] name = "dnp3-ffi" -version = "1.8.0-RC3" +version = "1.8.0" # inherit from workspace rust-version.workspace = true diff --git a/ffi/dnp3-schema/Cargo.toml b/ffi/dnp3-schema/Cargo.toml index 900101cc..fcd8cddb 100644 --- a/ffi/dnp3-schema/Cargo.toml +++ b/ffi/dnp3-schema/Cargo.toml @@ -1,7 +1,7 @@ [package] name = "dnp3-schema" # this version is what gets applied to the FFI libraries -version = "1.8.0-RC3" +version = "1.8.0" # inherit from workspace rust-version.workspace = true diff --git a/guide/sitedata.json b/guide/sitedata.json index c046a25e..512089fb 100644 --- a/guide/sitedata.json +++ b/guide/sitedata.json @@ -1,4 +1,4 @@ { - "version": "1.8.0-RC3", + "version": "1.8.0", "github_url": "https://github.com/stepfunc/dnp3" } \ No newline at end of file