cockroachdb / cockroachdb/cockroach

upgrade pgproto3/v2 to v5

Open
#169,445 3 comments 0 reactions 0 assignees View on GitHub
C-cleanup P-0 T-sql-foundations
Dominant language
Go
Stars
32.5k
Forks
4.1k
PR merge metrics
PR metrics pending

Description

Upgrade where pgproto3.Frontend.Receive() is called to github.com/jackc/pgx/v5/pgproto3.
- https://github.com/golang/vulndb/issues/4518

Jira issue: CRDB-63454

Epic CRDB-65516

Contributor guide

Open the contributing guide

Research direction

Search the repository for calls to pgproto3.Frontend.Receive() and inspect the surrounding imports and dependency usage. Update the affected call sites to github.com/jackc/pgx/v5/pgproto3, then verify that the relevant CockroachDB tests and build pass without the vulnerable dependency path.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
backend, databases
Issue type
Refactor
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
52/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.