buf icon indicating copy to clipboard operation
buf copied to clipboard

Upload older version of protobuf & grpc hosted plugins

Open wingsofovnia opened this issue 2 years ago • 3 comments

According to the doc, buf.build/protocolbuffers and buf.build/grpc are managed by the Buf team. I am wondering if you have any plans to upload older versions of the plugins, something like protocolbuffers/plugins/java:v3.8.0?

This could be of great help for users that migrate older projects to Buf.

wingsofovnia avatar Jul 20 '22 15:07 wingsofovnia

Hi @wingsofovnia, yes we do have plans to upload the older versions, but we currently don't have an exact date yet.

seankimdev avatar Jul 21 '22 21:07 seankimdev

@seankimdev perhaps you could suggest a doc page I can look into to publish such a plugin myself in the meantime? Like a Dockerfile you use for protocolbuffers/plugins/java?

wingsofovnia avatar Jul 26 '22 14:07 wingsofovnia

Hi @wingsofovnia, we are currently in the process of updating our remote generation experience. Please look for updates on the remote generation space in the coming weeks, including available versions of protobuf / grpc-supported plugins.

seankimdev avatar Jul 26 '22 14:07 seankimdev

Any updates on this?

wingsofovnia avatar Oct 04 '22 11:10 wingsofovnia

In some cases we may want to backfill older versions of plugins, but in particular, protoc v21.7 provides a security fix for Java genereated code: https://github.com/protocolbuffers/protobuf/releases/tag/v21.7. I don't know if we should publish older versions with known security vulnerabilities.

pkwarren avatar Oct 28 '22 18:10 pkwarren

Just updating on this - we have no active plans to backfill further than what we have on https://buf.build/plugins right now, but please let us know if there are specific plugins you need backfilled and we're happy to look into it. File issues on github.com/bufbuild/plugins for this.

bufdev avatar Jan 14 '23 19:01 bufdev