Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump github.com/google/trillian from 1.5.3 to 1.6.0 #942

Merged
merged 1 commit into from
Jan 15, 2024
Merged

Bump github.com/google/trillian from 1.5.3 to 1.6.0 #942

merged 1 commit into from
Jan 15, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 15, 2024 •
edited
Loading

Bumps github.com/google/trillian from 1.5.3 to 1.6.0.

Release notes

Sourced from github.com/google/trillian's releases.

v1.6.0

What's Changed

Storage

CI

Misc

Dependency updates

... (truncated)

Changelog

Sourced from github.com/google/trillian's changelog.

v1.6.0 (Jan 2024)

MySQL: Changes to Subtree Revisions

Support for skipping subtree revisions to increase read performance and reduce disk usage: added in #3201

TL;DR: existing trees will continue to be stored and queried as they were before, but new trees created with the MySQL storage layer will be stored and queried in a way that uses less space and allows for simpler and faster queries. No schema changes are required by log operators.

The Trillian MySQL implementation stores the internal state of the log as Subtrees in the database. These are essentially tiles as described by tlog: Tiling a log. Trees created with previous versions of Trillian stored a different revision of each Subtree when the tree was updated. This is somewhat redundant for append-only logs because an earlier version of a Subtree can always be derived from a later one by simply removing entries from the right of the Subtree. PR #3201 removes this Subtree revision history, and updates Subtrees in place when they are updated.

Measurements from @​n-canter show that revisionless storage saves around 75% storage costs for the Subtree table, and queries over this table are more than 15% faster.

The same schema is used for both revisioned and unrevisioned subtrees. The difference is that we always write a revision of 0 in the unrevisioned case, which still means that there will only be a single entry per subtree.

Support is maintained for the old way of revisioning Subtrees in order to avoid breaking changes to existing trees. There is no simple code change that would safely allow a previously revisioned tree to start becoming a revisionless tree. This new revisionless Subtree feature is only available for trees created with new versions of Trillian.

Users with legacy revisioned trees that wish to take advantage of smaller storage costs and faster queries of the new revisionless storage should come speak to us on transparency-dev Slack. The safest option we have available is to use migrillian to create a new copy of trees, but this will be quite a manual process and will only work for CT logs. Other migration options are conceivable and we're eager to work with the community to develop and test tools for upgrading trees in place.

Notable Changes

  • CI now runs with MySQL 8.2 instead of MySQL 5.7
  • Bump golangci-lint from 1.51.1 to 1.55.1 (developers should update to this version)

All Changes (ignoring dependabot)

... (truncated)

Commits
  • aa8c9dc Changelog for v1.6.0 release (#3285)
  • 416f1b7 Bump cloud.google.com/go/spanner from 1.54.0 to 1.55.0 (#3284)
  • 0bef27d Bump google.golang.org/protobuf from 1.31.0 to 1.32.0 (#3267)
  • 0b9d726 Bump mysql from 8.0 to 8.2 in /examples/deployment/docker/db_server (#3279)
  • a18bfa3 Bump google-auth-library from 9.4.1 to 9.4.2 in /scripts/gcb2slack (#3280)
  • cc36ccd Bump k8s.io/klog/v2 from 2.110.1 to 2.120.0 (#3282)
  • de9ed6f Bump golang.org/x/sync from 0.5.0 to 0.6.0 (#3283)
  • 3fa7309 Strip unused docker image manipulation from cloudbuild (#3278)
  • 00cc0b0 Switch from using unmaintained Google Cloud mysql db image to dockerhub offic...
  • 00ca9ab Bump distroless/base-debian12 in /examples/deployment/docker/log_signer (#3258)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jan 15, 2024
@dependabot
Bump github.com/google/trillian from 1.5.3 to 1.6.0
f486a4c 
Bumps [github.com/google/trillian](https://github.com/google/trillian) from 1.5.3 to 1.6.0.
- [Release notes](https://github.com/google/trillian/releases)
- [Changelog](https://github.com/google/trillian/blob/master/CHANGELOG.md)
- [Commits](google/trillian@v1.5.3...v1.6.0)

---
updated-dependencies:
- dependency-name: github.com/google/trillian
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/google/trillian-1.6.0 branch from 3c4a8b8 to f486a4c Compare January 15, 2024 09:19
@cpanato cpanato merged commit 25d8abb into main Jan 15, 2024
25 checks passed
@cpanato cpanato deleted the dependabot/go_modules/github.com/google/trillian-1.6.0 branch January 15, 2024 09:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@cpanato cpanato cpanato approved these changes

Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@cpanato